Top 10 Firewall for Mac

Every Macintosh device has built-in firewall. A provision that can be constructed to outlaw information from accessing your Mac. This transmission and receiving of data will only take a few seconds. Every time you ask data from the Internet, such as email message or a web page, your Mac transmits data packs to ask information. Servers obtain the packets, and then transmit other packs back to your Mac. Once your Mac has reconvened the packs, you’ll see a bit like a web page or an email message.

TCPBlock

Download (Beta)

TCPBlock is a lightweight and fast application firewall for OS X 10.5 or later developed by delantis.com. The OS X firewall protects you from connections that come from outside of your computer. But what about the software from your computer that opens new connections to the internet? With this you can prevent selected applications on your computer from opening connections to the network.

NoobProof

Download (Free)

NoobProof has a list of services. Each service can be allowed or blocked. You can also selectively allow or block specified hosts or subnets. You can add or remove services from the list, and you can create new services.
Very easy, just follow the 5 steps how-to in the application help.
You can also tune bandwidth, manage black lists and create self-configuration tools called injectors.
The first time you launch NoobProof the Wizard will help you configuring the Mac OS X firewall.

DoorStop X Firewall

Download (Demo)

Firewalls are not something that Mac users usually have to concern themselves with but as Macs grow in popularity, this will change somewhat. Protects your Mac from outside attack
Critical improvements to OS X's "built-in" firewall
Available standalone or as part of our integrated Security Suite
DoorStop X is designed to work with our Who's There? Firewall Advisor and book "Internet Security for Your Macintosh" as part of the DoorStop X Security Suite.
Open Door Networks has been securing the Mac since 1998 and Mac OS 8. We literally wrote the book on Internet security.

NetMine ProteMac

Download (Trail Version)

NetMine is worked out to control all the Internet and network activity. This firewall software monitors incoming and outgoing network and Internet traffic, providing protection against unwanted access to and from your computer providing powerful protection against malicious viruses, worms, bots and root kits. NetMine by ProteMac is a firewall for your Mac computer running OS X. It monitors and controls all the Internet and network activity of your computer.

NetBarrier X5

Download (Free)

Intego’s NetBarrier X5 security suite offers several tools to protect your Mac from vandals and criminals. Its centerpiece is the NetBarrier firewall, but the package can also block cookies while your surf the Web, scrub personal data afterwards, and block Trojan horses. While NetBarrier X5’s features are generally good, the $50 program has enough peculiarities that some users will be better off with the firewall tools that come with OS X for free.

Little Snitch 3

Download(Trail Version)

Despite fewer malware threats to Mac systems, there is still a need for data protection. With Little Snitch for Mac, users can prevent personal information from being sent out, although its limited features may not be worth the program's price. Little Snitch for Mac can be tried out for free for 30 days. After that, $29.95 buys the full version with no restrictions. While it does include a native installer, loading the program proved tricky and required a restart in order for it to work. An extensive and complicated end-user agreement also needed to be accepted.

WaterRoof 3

Download

WaterRoof is a ipfw firewall management frontend with bandwidth tuning, NAT setup, port redirection, dynamic rules tracking, live connections blocks, predefined rule sets, wizard, logs, graphic report and statistics and other features. Uses Mac OS X built-in IPFW firewall. No kernel modules, no extensions, no pain. WaterRoof is free and open-source

IceFloor

Download

hanynet.com proudly presents a totally new version of IceFloor, the first PF firewall frontend for OS X. IceFloor 2 is group based, like the old ServerAdmin firewall tool. Control filtering, bandwidth, logs, connections and custom PF configurations. IceFloor 2 is group based. Create groups and assign addresses, services and parameters to pass or block connections. Start with IceFloor Wizard to create a basic PF configuration in a few mouse clicks.

Firewall Builder

Download(Free)

Firewall Builder consists of a GUI and set of policy compilers for various firewall platforms. It helps users maintain a database of objects and allows policy editing using simple drag-and-drop operations. The GUI and policy compilers are completely independent, which provides for a consistent abstract model and the same GUI for different firewall platforms. It currently supports iptables, ipfilter, ipfw, OpenBSD pf, Cisco PIX and FWSM, and Cisco routers access lists.

Flying Buttress

Download

The Mac's UNIX underpinnings, Intel core, and fast speed have prompted many PC folks to change over to Apple’s flagship product. Before we dive deeper into Flying Buttress, let's examine the firewall it helps manage. Included with every version of Mac OS X, ipfw is a well-regarded, command-based firewall that originated from FreeBSD. It can be configured as either a network- or host-based firewall.

Read more

by Malik korrich ~ mardi 21 janvier 2014 0 commentaires

Top 10 Antivirus for MAC

The Mac is not immuned to viruses, the fact is that no complete viruses spread for Mac. Everytime a new thread or a new virus came up, it was fixed by the Apple updates, so we fell pretty safe. The problem starts with, downloads, email software and running windows in parallel of osx. So to be on the safe side, if you are not an expert and able to know when your computer is acting infected you should install an anti virus.

Kromtech MacKeeper

Kromtech's vision for Mac antivirus is deep and wide, and it elevates the concept of security software to a new level of excellence. While Apple antivirus competitors confine their attention to malware, Kromtech's MacKeeper goes beyond the status quo with oodles of security features. MacKeep has lots of features that seem so obvious to include in Mac security software that we wonder why nobody else thought of it.

Avast Free Antivirus

Avast Free Antivirus for Mac is Avast's answer to concerns about how to browse safely. Antivirus for Mac is a nice addition to your Mac toolbox. The application is packaged with a brand-new, easy-to-understand graphical user interface, with access to all features available at single click. It's free and very easy to use.

ESET Cybersecurity 2013

Viruses are computer programs that can replicate and spread themselves to multiple computers. Mac is a safe platform with a strong security record, but Mac viruses and other cyber attacks still pose an ongoing threat. ESET goes after viruses, worms and spyware. ESET Cyber Security protects you from these threats so you can explore the web with confidence.

Bitdefender Antivirus

Bitdefender Virus Scanner finds Mac malware as well as Windows viruses with ease. With the rise in malware that targets the Mac platform, more and more Mac users are seeking antivirus protection. Searches for malware even in archives, various other file types. i.e. pdf, pkg, zip, rar etc. Quick scan! Fast scan system areas that are prone to infections.

F-Secure Antivirus

F-Secure Anti-Virus provides real-time protection against spyware, viruses, infected e-mail attachments and other malware. This application is designed to catch known and unknown threats that may be lurking on your computer. Automatic updates and advanced real-time response guarantee the fastest protection against all new threats, while Deep Guard 5 Exploit Protection elevates your protection to a new level.

ProtectMac Antivirus

ProtectMac AntiVirus is a security product for Mac OS X, designed to keep you safe from viruses, worms, Trojans and spyware. All activity can be logged to a text file, which can be automatically archived at regular intervals to provide a library of past events on disk. It uses many different techniques to detect malicious software on your Mac, complimented by an updating system that automatically delivers and installs incremental updates in the background to ensure that you stay on top of any security problem.

Norton Antivirus

Norton AntiVirus for Mac gives you the power to keep your Mac—and your stuff—safe from the newest, late-breaking threats. It is updated at least once a day for better protection for your Mac and your stuff. Norton AntiVirus for Mac® is Symantec’s top-selling security product for Macintosh computers, including protection against the latest online threats such as viruses, spyware, software vulnerability attacks and more. Norton AntiVirus for Mac detects and eliminates new threats that try to exploit vulnerabilities in applications and software on your Mac.

Kaspersky Security

With more and more people using Macs and other Apple devices, there’s been a rapid growth in the volume of Mac malware and the number of cybercriminals that are targeting Mac users – to steal their data, identities and money. Real-time protection against Mac, PC and Linux malware Protection against phishing and malicious websites new! Parental Control to keep your children safe. Choosing a simple antivirus product isn’t enough to keep you, your children and your sensitive information safe.

Intego Mac Internet Security 2013

You’re not immune to network attacks and malware just because you use a Mac.  There are people working day and night to compromise your network, steal personal information and develop malware and viruses that can wreak havoc on your computer and files. Protect against all these threats with Mac Antivirus software from Intego Mac Internet Security 2013.

Titanium Internet Security for Mac 2013

Trend Micro Titanium Internet Security 2013. This “titanium” security suite doesn’t let anything get through—in our tests, it earned excellent marks in just about every category. It also has a fairly user-friendly interface and a quick installation process, which makes it an all-around great pick.

·         Protection against threats on Facebook, Google+, and Twitter

·         Warnings about dangerous links shared through email, IM and web searches

·         The fastest protection against new web threats*

·         The best phishing detection rates*

·         Unique cloud-based protection

Trend Micro helps you enjoy your digital life safely.

Read more

by Malik korrich ~ lundi 13 janvier 2014 0 commentaires

How to Protect Your Apple Mac or iOS Devices

For many of us, owning a Smartphone and computer devices are valuable possessions. It has been a customary practice to depend on mobile technology such as the advanced and technically high end devices like the Apple Mac and iOS devices like iPhone and iPad for our business and personal endeavors. Among the best features of these devices are its security attributes that make its users feel more secure and confident in using them. Being able to know how to protect your Apple Mac and iOS devices by knowing how to use its security features will further optimize your ability to enjoy these devices with a better peace of mind.

Find Mac or Find My iPhone services

All devices created by Apple come with a security feature called Find Mac for Mac computers and Find My iPhone for iOS devices. This is an anti-theft security application that you can use in order to locate a stolen or misplaced Mac or iOS devices. It provides a location tracking service which you should enable from your device’s security setting. Once these services are activated, you will be empowered with the ability to trace the location of your device and lock it down in order to protect the important data stored therein against unauthorized access even in a remote location.

Optimize Apple Mac OSX Linux security feature

If the Apple Mac you own runs on Snow Leopard (10.6) or Lion (10.7) operating system, it is good to know that it comes with a built in Linux security feature that controls the user’s accessibility on the device. You should create another user account once you have created an administrator account with a restricted access on installing software, managing programs and updating settings of your device. Configure the setting to get an automatic software update. Apple is constantly releasing new software updates and doing the automatic update will provide your computer with an efficient protection against malware, viruses and phishing scams.

Update your iOS device operating system

The best thing that you could do in order to protect your iOS devices is to make a constant update on your operating system. Other than this option, there is not much you can do in order to keep your device secured and protected as Apple has not made available an anti-virus software on the App store. Jailbreaking your iOS devices is therefore a big no. Doing so will comprise the security of your device making your device prone to malware and virus attack.

Backup your valuable data

In case recovering your devices is futile when it was stolen or lost you could at least retrieve important data stored in it if you have created a backup. Apple has the iCloud service that is available for their devices that keeps your data safe on the cloud. You can likewise protect your data by using third party backup services like the Google Drive and Dropbox services. They are available at a small fee if you prefer to enjoy a bigger backup storage for your data but they are nevertheless always free services with a limited storage for backing your mobile data. 

About the Author

Stacy Carter is a tech writer and freelance blogger laying out for tech news via online exposures. She is the author of the site: Android Spy where you can get valuable information about spy software program on your cell phone.

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Read more

by Malik korrich ~ jeudi 9 mai 2013 0 commentaires

Why You Need A Mac Virus Protection

The new Mac computer users might believe that Apple systems are safe and have no errors, while breaking into them is almost impossible. If they take a few minutes to learn about them, they can easily figure out that hacking the Mac OS is not such a hard task and there are plenty of related past records. Even Apple announced this kind of problem in 2008, when it suggested advanced security programs to be installed on its products. With more than three hundred times less viruses than Windows, Mac OS X can still be threatened.

The Problem

Most viruses are hidden around websites. You search for something in particular and you get dozens of results. Checking out one of them is a risk if you don\'t have any protection. The malicious script might be included in the source code of the webpage and could install automatically and run in the background.

At the same time, most Apple users think they can survive and get over these problems with only the regular updates from their manufacturer. This is simply is not true.

Although such security updates are meant to improve the systems and ensure some extra safety, they cannot guarantee for your system\'s complete security. If you have the fake feeling that you got nothing to worry about, perhaps you should reconsider these thoughts. Other than that, some Windows scripts can also affect the Mac OS X systems – especially if you run a Microsoft operating system on your Mac. Such cases are rare, indeed. Most scripts are developed for particular systems, but this is not a general rule. You would be surprised to check out some statistics and find out how exposed you are.

2008 was one of the toughest years for Apple, but also one of the most profitable ones. The Apple market is quickly growing, regardless of the products it relies on. The iPhones run the mobile world, as the Mac OS X systems are said to be the safest, not to mention about the crazy success iPad 2 had.

Although Windows is more user-friendly and people are somehow familiar with it, switching is still a very reliable option. With the market growing, the same rule applies to the hacking orientations. With more potential victims, this field is more likely to be attacked with extra weapons. A little over three hundred harmful applications coded for Mac is an insignificant number for many users, especially when they think about the one million viruses that can attack Windows powered computers. But with time, things are definitely about to change.

Names like Jahlav, RSPlug, HellRTS, OpinionSpy or Boonana are very popular among the malicious scripts that can affect the Apple Mac computers. They usually create easy backdoors for hackers and notify them on your corrupted system. From that moment on, intercepting your online banking information or other private stuff is piece of cake. Some other scripts have been developed in controlled environments, only for Apple to come up with solid updates and combat programs.

The Solution

All in all, the general conclusion is simple. The system can be attacked by hackers, so you definitely need a good Mac antivirus. Just remember that although it is safer than other systems, but it is not 100% clear.

About the author: This article is written by Robert Woods who writes about various subjects related to technology and computer, including Mac antivirus and security. Please check out www.antivirusformac.org to find other related articles.

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Read more

by Malik korrich ~ lundi 10 décembre 2012 0 commentaires

Session Cookie Based Sql Injection Tutorial

SQL injection is most dangerous attack for web application, there are a lot of different websites are vulnerable to SQL injection. There are different variant for SQL injection like a simple SQL injection, blind SQL injection and Cookies based SQL injection. As you know the basic idea about cookies and their importance, cookies are represent some session and normally they count in cross site scripting attack (XSS) but what is cookies based SQL injection. In this article we will discuss cookies or session based SQL injection attack. 

Did you say a “Cookie” ?

A cookie, also known as an HTTP cookie, web cookie, or browser cookie, is used for an origin website to send state information to a user’s browser and for the browser to return the state information to the origin site. The state information can be used for authentication, identification of a user session, user’s preferences, shopping cart contents, or anything else that can be accomplished through storing text data.

Cookies are not software. They cannot be programmed, cannot carry viruses, and cannot install malware on the host computer. However, they can be used by spyware to track user’s browsing activities – a major privacy concern that prompted European and US law makers to take action. Cookies could also be stolen by hackers to gain access to a victim’s web account.[1]

Where can I find my cookies?

Here is one way to get your stored cookies using your browser. This method is applied for Mozilla FireFox:

1.From the Tools menu, select Options.
If the menu bar is hidden, press Alt to make it visible.

2.At the top of the window that appears, click Privacy.
3.To modify settings, from the drop-down menu under “History”, select Use custom settings for history. Then enable or disable the settings by checking or unchecking the boxes next to each setting:

◦To allow sites to set cookies on your computer, select Accept cookies from sites. To specify which sites are always or never allowed to use cookies, click Exceptions.
◦To accept third-party cookies, check Accept third-party cookies. In the drop-down menu next to “Keep until:”, select the time period you wish to keep cookies on your computer.
◦To view the cookies stored on your computer, click Show Cookies… . In the window that appears, you can view the cookies on your computer, search for cookies, and remove any or all of the listed cookies.
◦To specify how the browser should clear the private data it stores, check Clear history when Firefox closes. Then, click Settings… . You can specify the items to be cleared when you close Firefox.

4.Click OK until you return to the Firefox window.
To remove all cookies, from the Tools menu, select Clear recent history… . Check the items you want to clear, and then click Clear Now.

Are you talking about a Cookie Poisoning-like attack?

Cookie Poisoning attacks involve the modification of the contents of a cookie (personal information stored in a Web user’s computer) in order to bypass security mechanisms. Using cookie poisoning attacks, attackers can gain unauthorized information about another user and steal their identity.

Cookie poisoning is a known technique mainly for achieving impersonation and breach of privacy through manipulation of session cookies, which maintain the identity of the client. By forging these cookies, an attacker can impersonate a valid client, and thus gain information and perform actions on behalf of the victim. The ability to forge such session cookies (or more generally, session tokens) stems from the fact that the tokens are not generated in a secure way.[4]

To sum up, cookie-based SQL Injection is far to be a kind of Cookie Poisoning.

Cookie variables as a vector of SQL Injections:

SQL injection overview
A SQL injection attack consists of insertion or “injection” of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system. SQL injection attacks are a type of injection attack, in which SQL commands are injected into data-plane input in order to effect the execution of predefined SQL commands.

All data sent by the browser to a Web application, if used in a SQL query, can be manipulated in order to inject SQL code: GET and POST parameters, cookies and other HTTP headers. Some of these values ​​can be found in the environment variables. The GET and POST parameters are typically entered into HTML forms, they can contain hidden fields, i.e. information that is in form but not shown. GET parameters are contained in the URL and POST parameters are passed as HTTP content. Nowadays, and with the growth of Web 2.0 technologies, the GET and POST requests can also be generated by JavaScript.

Injecting malicious code in cookie:
Unlike other parameters, cookies are not supposed to be handled by users. Outside of session cookies which are (usually) random, cookies may contain data in clear or encoded in hexadecimal, base64, hashes (MD5, SHA1), serialized information. If we can determine the encoding used, we will attempt to inject SQL commands.

function is_user($user) {

global $prefix, $db, $user_prefix;

if(!is_array($user)) {

        $user = base64_decode($user);

        $user = explode(“:”, $user);

$uid = “$user[0]“;

$pwd = “$user[2]“;

} else {

$uid = “$user[0]“;

$pwd = “$user[2]“;

}

if ($uid != “” AND $pwd != “”) {

    $sql = “SELECT user_password FROM “.$user_prefix.”_users WHERE user_id=’$uid’”;

$result = $db->sql_query($sql);

$row = $db->sql_fetchrow($result);

$pass = $row[user_password];

if($pass == $pwd && $pass != “”) {

return 1;

}

}

return 0;

}

The cookie contains base64 encoded form identifier, a field that is unknown and a password. If we use as a cookie 12345 ‘UNION SELECT’ mypass ‘:: mypass base64 encoded, the SQL query becomes:

 SELECT user_password FROM nk_users WHERE user_id=’12345′ UNION SELECT ‘mypass’

This query returns the password mypass, the same password as we have to provide. So we are connected.

How to inject the code in Cookies?
There are many HTTP interceptors and HTTP editors that can intercept the HTTP request before it is sent to the server. Then the tester can introduce his malicious SQL statement in the cookie field.

It’s like a get/post based SQL Injection, except that certain characters can’t be used. For
example, ‘;‘ and ‘,‘ are typically treated as delimiters, so they end
the injection if they aren’t URL-encoded.


Conclusion
Cookie variables sometimes are not properly sanitized before being used in SQL query. This can be used to bypass authentication or make any SQL query by injecting arbitrary SQL code. For the web application audits, cookie variables should be added to the list of parameters to be checked.

Author
Yasser ABOUKIR has wrote this informative article he studying computer science engineering and specialized on IT Security at ENSIAS. He blogs at http://www.yaboukir.com/

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Read more

by Malik korrich ~ vendredi 11 novembre 2011 0 commentaires

Turn Ubuntu Linux Into MAC- Macbuntu

Ubuntu is the most famous, user friendly and the best Linux distribution that can easily install and update. Even you can use Ubuntu for personal, business and server purposes, however backtrack the finest Linux distribution for penetration testing is also based on Ubuntu so the importance of Ubuntu is not a hidden truth, beside Linux platform Apple MAC is one of the famous and widely used operating system many people prefer MAC over Linux and many prefer Linux over MAC.

So its up to you what operating system do you like most, turn Ubuntu Linux into MAC OS X is now a easy process even a new user can do it. This transformation is not a new thing but a open source software has made this transformation very single even you can do this by a single click.

There is also a manual technique available but for this technique you need to download themes, time setting, network setting and others. Now open source tool MACBUNTU has made this process easier.

What Is Macbuntu

Mac OS X Transformation Pack. Macbuntu is an open-source program, designed to transform Linux’s appearance and layout into a Mac OS X environment. Although Macbuntu is dedicated to Ubuntu Linux OS, it could be used in other OS based on Debian/GTK .

So we can say that Macbuntu is a software that is used to transform any Linux that is based on Debian into MAC OS X.

Download

Linux to MAC Tutorial

The tutorial is not very difficult because the tool is very easy to use, it can change all the setting automatically just run the tool follow these steps.

• After downloading the tool on the termincal locate the directory where it has downloaded
• Run this command on the terminal
  

  tar xzvf Macbuntu-10.10.tar.gz
  cd Macbuntu-10.10
  ./install.sh

• Now you are done

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Read more

by Malik korrich ~ lundi 12 septembre 2011 0 commentaires

Secure Shell- SSH An Introduction

Network protocol or communication protocol are the set of defined rules and regulation which must be followed by the both parties (Sender and receiver) for effective communication. Network protocols like HTTP, FTP, TCP/IP, SMTP and more, you can get the list of network protocol. So network protocol is very important and now a days security of your information is more important. Use some secure protocol to make your data secure.

You must have heard about secure socket layer or SSL, SSL provide a secure channel between server and the user, suppose you need to connect your home computer with your work computer and you want to transfer some importance files so SSL is no longer for this situation, you must have a secure network protocol to connect remote devices.

What Is Secure Shell- SSH

According to WiKiPedia “Secure Shell or SSH is a network protocol that allows users to open a window on a local computer and connect to a remote computer as if they were sitting there.”

By this definition you can understand that SSH provides a secure channel between two computers to protect the valuable information from hacking attack.

SSH is typically used to log into a remote machine and execute commands, but it also supports tunneling, forwarding arbitrary TCP ports and X11 connections; file transfer can be accomplished using the associated SFTP or SCP protocols.

Just like HTTP, FTP and other protocols SSH have a port number of 22 (TCP). You can use Telnet (port 23) to connect remote computer but remember Telnet does not provide any sort of security or encryption that is Telnet has been replaced by SSH.

Secure shell can be used on various operating system like Windows, Linux, MAC, BSD and even you can use SSH protocol on your Iphone (Purpose is same). Authentication process in SSH is very strong like SSH use public key cryptography to authenticate remote computer and vice versa.

SSH can be used for multiple purposes like Tunneling, forwarding ports and connections. The major version of SSH are as follows:

• SSH1 or SSH-1
• SSH2 or SSH-2

What Is SSH Client

SSH client is a simple software program that allows you to use SSH protocol to connect remote computer in a efficient manner. SSH client are available on graphical user interface so it is easy to use.

On the next article for SSH series we will discuss deeply about SSH client with the tutorials of tunneling.

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Other Readings

• SSH client PuTTY 0.61 released (net-security.org)
• How to use SSH on your Chromebook (thechromesource.com)
• Announcing SSH Tunnels for Browserling (catonmat.net)

Read more

by Malik korrich ~ mercredi 31 août 2011 0 commentaires

Preyproject- Find Stolen Laptop & Phone

Have you ever faced this situation means have you ever lost your personal digital assistants it could you your Iphone, Laptop and so on. It can be happen with any one and every where is the world, so the question is how to protect and how to get back your stolen Laptop and phone. There are different tools, software's and services available that provides a feature to find your stolen laptop or phone.

during the London riots an IT security specialist has lost his MacBook Pro, it was stolen from his home, now what is the story behind it. Greg Martin is an IT security specialist and running a blog InfoSecurity 2.0 was the wrong person for this thief because Martin had installed a tracking software called PreyProject.

What Is PreyProject

According to the official website “Prey lets you keep track of your phone or laptop at all times, and will help you find it if it ever gets lost or stolen. It's lightweight, open source software, and free for anyone to use. And it just works”.

Martin is now get back his MacBook but how the simple answer it that he was just start his preyproject and was tried to capture the images so that he could fine the name and the log in information of the thief.

As Martin wrote on his blog that after two hours the thief was log in on his Facebook so by using the facebook Martin was found the relevant information about the robber like his name, school name, IP address and address. Martin was got some picture of the robber from the MacBook camera and from his facebook profile page.

After getting a lot of different information about the robber Martin just had to pass the information on to London Metro police, so by the help of PreyProject and Facebook Martin got his MacBook.

Download PreyProject

So you can download the open source tool to protect your Laptop and phone, try to be smart like Martin.

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Related articles

• Hacker Traces Laptop Thief Using Facebook Information (mashable.com)
• After a Frenetic London Riot, a Laptop Is Recovered (pcworld.com)
• Blogger Traces PC Thief from Prey and Facebook (pochp.wordpress.com)
• After London riot, a stolen laptop is recovered (infoworld.com)

Read more

by Malik korrich ~ jeudi 18 août 2011 0 commentaires

WordPress Security Scanner- WPscan

WordPress is among the best blogging platform, it is a open source and currently a lot of bloggers using it for their blogs. WordPress has a amazing features and has changed the way of blogging, just like other platform security is the main concern for wordpress. There are different tips for WordPress security are available on the Internet, let suppose you are implemented relevant tips to secure your blog but you must use some automatic tools to perform the security of your blog. 

There are different tools available to perform a quick penetration testing on web applications, beside these tools there is a new development to check the security of wordpress.


There are different holes has been found on wordpress plug in and on the installation bugs, WPScan is a black box WordPress Security Scanner written in Ruby which attempts to find known security weaknesses within WordPress installations. Its intended use it to be for security professionals or WordPress administrators to asses the security posture of their WordPress installations.

Key Features

• Password cracking
• Enumeration (version, plug in, username)
• Vulnerability enumeration  

Download

Wpscan Tutorial

Wpscan has been written on ruby so you can use it on cross operating system like Linux, Windows and others, however it has been written and tested on backtrack 5 GNOME. You have to install some dependencies on the terminal type

sudo apt-get install libcurl4-gnutls-dev
sudo gem install –user-install typhoeus
sudo gem install –user-install xml-simple  

The usage is very simple

ruby wpscan.rb –url www.example.com
ruby wpscan.rb –url www.example.com –wordlist darkc0de.lst –threads 50

Video Tutorial of Wpscan

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Read more

by Malik korrich ~ vendredi 22 juillet 2011 0 commentaires

Mantra-Browser Based Security Framework

There are different frameworks available for doing a penetration testing, new development has been made everyday. Let suppose if we combine different tools on a single and we categorized it just like in backtrack than we can create a effective penetration testing framework.
This article will discuss about mantra a dream project that has been done, and it is also listed on backtrack 5.

Basically mantra is nothing but a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers, security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.


Mantra can be very helpful into all the phases of hacking attack like fingerprinting, enumeration and scanning, gaining access and covering tracks etc.
It contains a list of tools that are used by developers and debuggers, so mantra can be used for attacking as well as defensive way.



Mantra is available on backtrack 5, you can get it by click on Applications-->Backtrack-->Vulnerability assessment-->Vulnerability scanner-->Mantra
It is a user friendly,portable and GUI framework, you can carry it on flash drives and CD/DVD. It is a cross operating system framework that can be run on windows, Linux and MAC as well. It is a open source project so it is available on free of cost.

Download

If you are using other distro of Linux, windows and MAC than you need to download and install mantra, however as said earlier if you are using backtrack 5 you can get it on.
For mantra tutorial it is not possible to discuss here because it can use for multiple purposes depends on the attack, for variety of mantra tutorial click here.

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Read more

by Malik korrich ~ lundi 18 juillet 2011 0 commentaires

Sqlninja- A SQL Injection Tool

Vulnerability on database is really harmful for the web application, the most common type of attack on database is via SQL-injection. You should secure your web application from these harmful attack because database contain relevant information.There are different tools available to find the vulnerability on web application, as discussed before click here to learn more tools.

Like other tools Sqlninja is used to exploit SQL-injection vulnerability on a web application. Its main goal is to provide a remote access on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a DB Server when a SQL Injection vulnerability has been discovered.

Sqlninja is written in Perl and should run on any UNIX based platform with a Perl interpreter, as long as all needed modules have been installed. So far it has been successfully tested on:

• Linux
• FreeBSD
• Mac OS X

Requirement 

Since sqlninja is completely written in Perl, there is not much to install, except Perl itself and the following modules, if missing:

• NetPacket
• Net-Pcap
• Net-DNS
• Net-RawIP
• IO-Socket-SSL
• Net-Pcap

You will also need the Metasploit Framework 3 on your box to use the metasploit attack mode, and also a VNC client if you use the VNC payload.

Download

Features

• Fingerprint of the remote SQL Server (version, user performing the queries, user privileges, xp_cmdshell availability, DB authentication mode)
• Bruteforce of 'sa' password (in 2 flavors: dictionary-based and incremental)
• Privilege escalation to sysadmin group if 'sa' password has been found
• Creation of a custom xp_cmdshell if the original one has been removed
• Upload of netcat (or any other executable) using only normal HTTP requests (no FTP/TFTP needed)
• TCP/UDP portscan from the target SQL Server to the attacking machine, in order to find a port that is allowed by the firewall of the target network and use it for a reverse shell
• Direct and reverse bindshell, both TCP and UDP

 

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Read more

by Malik korrich ~ lundi 11 juillet 2011 0 commentaires