Affichage des articles dont le libellé est Others. Afficher tous les articles
Affichage des articles dont le libellé est Others. Afficher tous les articles

Won Network Designing Competition At PROCOM 2013


I am sorry friends as i haven't been able to post as i was really busy with some pentesting projects and my research. Now a days doing more learning part than teaching part. When i came in to hacking scene 6 years before, I started with Network security, but later every thing shifted to layer 7 i.e. web. So i started researching web application security. However, a since network and web work together, we cannot completely deny the network security part.

Recently,We participated in "PROCOM 2013" on behalf of Bahria University karachi (Team name = White Tigers) along with my two friends "Mudassir" and "Zia khan" and by the grace of Almighty Allah we managed to win the competition. Procom is the largest educational event that takes place every year in Fast University, it hosts more than 40 competition including speed programming, network designing, painting etc etc.


The competition was based on 5 rounds, which would test both theoretical and practical knowledge of the students. The major advantage was that lots of questions came from network security, which b.w i have been studying for few years. The things i learned from my CCNP route course also came into play and helped me a lot. My friend mudassir did really well too, he is dong his CCIE and is very sound in networking stuff.

What's Next?

Well, I would continue my research with Network and web application security, I am also writing a book on "Advanced Ethical Hacking", which b/w i am hoping to finish it this year. However apart from that, i would also move to programming side and participate in "Speed Programming Contest" and atleast winning it once.

I would love to hear from you the suggestions on improving at speed programming, either leave a comment or mail me directly at rafayhackingarticles@gmail.com.  

~ lundi 15 avril 2013 0 commentaires

Windows Security Components !

There are some components which are for windows security. Often I have searched on google that how the windows security is actually implemented. From my understanding i want to describe the basic here so that any interested person can get some quick idea. See below:

SAM database: SAM is a databases where users information are stored. It stores all users information excluding domain users. The SAM can be found in HKEY_LOCAL_MACHINE\SAM and Directory : C:\WINDOWS\system32\config\SAM.


LSASS: Local Security Authority Subsystem(LSASS) is responsible for security policy of the windows system. It also alerts security warning to events logs. LSASS is completely responsible for users loging, password changing, token generating etc. If we open the task manager then we will see that there is a running process called lsass.exe as SyStEM user. If we force to exit this process then we have relogin to windows system.

 http://en.wikipedia.org/wiki/Local_Security_Authority_Subsystem_Service
http://www.neuber.com/taskmanager/process/lsass.exe.html


  WinLogon: http://technet.microsoft.com/en-us/library/cc780095%28v=ws.10%29.aspx


NetLogon: http://www.windowsitpro.com/article/domains2/the-netlogon-service-516


AppLocker: It specify which application, file can be used by an specified users. This can set Restriction to access specific file(Access control).


Active Directory: Active Directory stores information of users,groups, computers of domain. 

Security reference monitor (SRM): http://www.cs.gmu.edu/~menasce/osbook/nt/tsld034.html


Quickly written for searching purpose :)....

~ dimanche 24 février 2013 0 commentaires

Happy New Year everyone - 2013 !!!











HAPPY NEW YEAR!!!
2013


Start Of The World !!!



































~ lundi 31 décembre 2012 0 commentaires

NEW SITE where i will be writing too : sysexploits.net

Hey, Here a new site where i will be writing some nice Articles:

www.sysexploits.net


Good Luck with your research and Study!!!

~ vendredi 29 juin 2012 0 commentaires

Good bye Gnome 3 , UNITY and we are Getting back to KDE ( Ubuntu live cd customization )


We all know Ubuntu Unity and Gnome-shell are sucks and crazy. They think we are 7 years kids who love the flash,nice images etc . So I am not going to use Gnome(Not too bad but enough sucks) or Fucking UNITY. Perhaps they are also permanent Windows users lol. And now trying to ripping off the Windows. So I customised my Ubuntu 12.04 and installed KDE based Interface. KDE is nice GUI and many distro such as Debian,Red hat enterprise, OpenSuse, Kubuntu Linux, Arch Linux  etc has the KDE for default use. Ubuntu live cd customization is not too hard. If you want to customize your ISO just follow this tutorial.


Do you believe that I did not even able to take all the screenshot when wrote this articles ? Perhaps I can't and i don't want to try. I don't think so, any power users or pentester will use GNOM 3 or UNITY. When I installed GNOME-SHELL on Ubuntu 12.04 and i saw it is able back to the classic style but still the classic style also sucks but use-able somehow.

Frankly, I used KDE and Gnome both. when I installed Ubuntu 11.10 and 12.04 it just makes me cry!!

Anyway, If you don't want to install the KDE,XFCE or other interface over and over whenever you install the fresh OS. If you decide to make your own ubuntu based Linux distro and install some hacking/pentesting tools on the CD  then this tutorial is for you.

First Install :

sudo apt-get install squashfs-tools genisoimage

Now we create a folder for our work:

mkdir kde-linux


Move or copy the iso to your working folder:

mv ubuntu-12.04-desktop-i386.iso kde-linux/

and

cd kde-linux

Now we need to mount the ISO. So first we create a folder:

mkdir mout

Now we mount the sucks ISO to mnt directory:

mount -o loop ubuntu-12.04-desktop-i386.iso mout


extract the ISO into a direcotry:

mkdir extracted
rsync --exclude=/casper/filesystem.squashfs -a mout/ extracted


Extracted the sqashfs filesystem and this will take some times, So wait:

unsquashfs mnt/casper/filesystem.squashfs

When extraction is 100% then just run the following command simply:
mv squashfs-root edit


What we need now? Now we chroot to be root for fully customization . But let's do something before doing it.:

cp /etc/resolv.conf edit/etc/
cp /etc/hosts edit/etc/
mount --bind /dev/ edit/dev
 
 
Now Chroot so that you can install anything you want , lol install some hacking tools too hehe:

chroot edit

Anyway, Now we need to mount :

mount -t proc none /proc
mount -t sysfs none /sys
mount -t devpts none /dev/pts

And run blindly:

export HOME=/root
export LC_ALL=C


We are almost done correctly then all things. Now we need :
#dbus-uuidgen > /var/lib/dbus/machine-id
dpkg-divert --local --rename --add /sbin/initctl
ln -s /bin/true /sbin/initctl
 
Now we can install anything we want... So let's install KDE first (kde-plasma-desktop,kde-full,kubuntu-desktop)

first we run :apt-get update

now lets run:

apt-get install kde-plasma-desktop

Oh shit, I get errors which maybe on your ISO or may not(Not sure!):
apt-get install kde-plasma-desktop
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package kde-plasma-desktop


So I saw  the sources.list:

nano /etc/apt/sources.list

and I get only 3 source .

And I quickly copy all the source from installed Ubuntu
::::
gedit /etc/apt/sources.list

Just copy all the source and paste to your editing sources.list

or you can completely replace the file by “cp” command.

Now run again apt-get update

search the software which we are going to install:
apt-cache search kde-plasma-desktop

 kde-plasma-desktop - KDE Plasma Desktop and minimal set of applications


apt-get install kde-plasma-desk

or you can just install kde-full:

apt-get install kde-full


Sucks , It will download 103 Megabyte. So Let's wait until it finish. But if you want to kde-full or kubuntu-desktop then it will download a lot. I prefer the minimal as I just want to leave the Gnome.


Anyway, If you want to install any other software :

apt-get install packagename #such asapt-get install vlc
apt-get install nmap
apt-get install skipfish
apt-get install gimp ksnapshot sqsh

If you want to install some deb file downloaded from internet then just copy the file to a folder ubuntu-kde/edit/somefolder. Example:

cp skype.deb ubuntu-kde/edit/home/somefolder

Now go to your chrooted terminal and : 
cd /home/somefolder                                     
dpkg -i skype.deb

Now we installed all necessary and it is time to build the ISO. Just we need to remove everything what created :

rm -rf /tmp/* ~/.bash_history                                                                
rm /etc/hosts
rm /etc/resolv.conf
rm /var/lib/dbus/machine-id
rm /sbin/initctl        

dpkg-divert --rename --remove /sbin/initctl


So now we need to umount what whatever we mounted .

umount /proc                                                                                 
umount /sys
umount /dev/pts
exit
sudo umount edit/dev   
                                                                                             
 
 
Now the real things blindly do:

chmod +w extracted/casper/filesystem.manifest

chroot edit dpkg-query -W --showformat='${Package} ${Version}\n' > extracted/casper/filesystem.manifest

cp extract-cd/casper/filesystem.manifest extract-cd/casper/filesystem.manifest-desktop

sed -i '/ubiquity/d' extracted/casper/filesystem.manifest-desktop

sed -i '/casper/d' extracted/casper/filesystem.manifest-desktop


Now we compress the filesystems :

mksquashfs edit extracted/casper/filesystem.squashfs  (It will take some time)


We need to update the size otherwise it will not match the correct installation when installing. So lets update the size :

printf $(sudo du -sx --block-size=1 edit | cut -f1) > extracted/casper/filesystem.size 

Now :

cd extracted
rm md5sum.txt

find -type f -print0 | sudo xargs -0 md5sum | grep -v isolinux/boot.cat | sudo tee md5sum.txt


We are almost done :

 mkisofs -D -r -V "$IMAGE_NAME" -cache-inodes -J -l -b isolinux/isolinux.bin -c isolinux/boot.cat -no-emul-boot -boot-load-size 4 -boot-info-table -o ../your-new-linux-name.iso .

Now just burn the ISO into a blank DVD and Enjoy.

If you want to customize the Boot splash then you need more advance knowledge. Because Boot splash is related with plymouth( /lib/plymouth) and kernel.


I say Good Bye UNITY AND GNOME !!!! You made the power users crazy. Try to develop it soon.


Email me if you have any questions. 

~ vendredi 27 avril 2012 0 commentaires

Bulk Email Address Generator

All of us internetaholics are familiar with the ritual of creating fake email addresses in order to register for one site or another. We have all done it. We know the drill. But to simplify matters I'm going to tell you a secret, which you can spread as much as you want! The instructions below are going to be a blessing for internet addicts and people who like to register for every useful (or useless) website.

Follow the steps below to generate as many fake email addresses as you want.

Step 1:
Download and install Bulk Email Generator Here.

Step 2:
Run it and this is what you will see:


Step 3: Uncheck “Random PWs” and enter the password you want to use for generated email addresses. And the number of email addresses you want to create in “How many” field.


Step 4: Hit on “Create Mails” and the software will start generating @usa.net email addresses.


Step 5: After the specified emails are created, click on the checkbox between the email addresses generated and the passwords and save the email list on your computer as shown in the screenshot below:



Step 6: Now, go to NetAddress and enter the login information using the email list that you have created and you will find yourself logged in to your email account as shown:

Please, leave us a comment if this doesn't work for you ('cause it did for us).

This program has been developed by the courtesy of ToolsRulez.

Cheers!

~ jeudi 16 février 2012 0 commentaires

Download Free Video Converter Hamster


Every day I get questions asked related to recommendations for free video converters. However due to increase in number of Paid Video converters, People deeply confuse whether to go with a paid one of a free one. The answer is that if there are tons of video converters available for free, why should we go for a paid one. One of those free video converters is my favorite Hamster.

Hamster Free Video Converter is a new video converter that turns video conversions into fun. It supports 3GP, MP4, MP3, MPEG, AVI, FLV, WMV, XviD, DivX, MKV, M2TS and etc (40+). Now you may easily convert video for any DVD player, iPod, iPhone, iPad, Archos, Zune, PSP, PS3, xBox, iRiver, HTC, Blackberry or Nokia in 3 clicks (supports 200+ devices)



Download Free Video Converter Hamster here

~ jeudi 8 décembre 2011 0 commentaires

Join RafayHackingArticles On Google Plus!


We are really excited to tell you that RafayHackingArticles has finally arrived on Google Plus, Google Plus is one of the recently launched social networking website of google, It has gained vast amount of popularity in short span of time. Google Plus has recently introduced Fan page feature just like facebook. So we thought to create a fan page for RHA so our readers can follow our blog on Google Plus.

Join RafayHackingArticles On Google Plus

Help Us Grow Our community by sharing our page with your friends.

Add RHA in your Circle Now !

~ mardi 8 novembre 2011 0 commentaires

Is Infolinks A Fraud? - Decide It For Yourself

Well, This post is a bit off the topic, but I really wanted to share my experience with so called intext advertising company called infolinks. Infolinks claims to be one of the best intext advertising companies and also promises to share the highest revenue possible then it's competitors, The following impressed me and I quickly signed up for a publisher account back 1.5 years back.
During first few months I enjoyed good amount of revenue and CPM with infolinks, but after few months the CPM showed a significant amount of drop, I wrote an email to infolinks related to this issue, Here is what they replied:



Hi Rafay,

Thanks for writing in!

What you are experiencing now is a common fluctuation which is typical for a website's organic traffic. It is quite natural for eCPMs to fluctuate; it will go down but just as quickly it will go back up, as you are starting to see already.

Unlike other methods of advertising, the in-text advertising market is relatively new and as such, is still subject to instability. The In-text advertising market is built on supply and demand and advertisers (which are the 'customers' buying the words on your website) are setting their budgets after various considerations.

Moving forward, I always recommend that Infolinks publishers choose double-underlined links. Double-underlined links are less intrusive (since your readers won’t confuse them with regular hyperlinks.) We find that Publishers who choose double-underlined links earn more money because it helps ensure that your website receives the best quality ads that we have to offer.

To switch from dotted to double underlined links, please login to your Infolinks Account and go to the “Integration Guide” and change your status to “Double Underline”. Don’t forget to save your newly changed settings. I highly recommend making this switch today!

I hope that you have found this information to be helpful! Please let me know if you require additional assistance or have any other questions.

Have a lovely day.

Jamie M.
Senior Account Executive

E support@infolinks.com
W www.infolinks.com
After two to three days the revenue of infolinks shooted up once again and after a month or so it dropped again. I wrote an email once again got a same reply.


Important Points From the above Email
  • What you are experiencing now is a common fluctuation which is typical for a website's organic traffic - However my organic traffic kept increasing while the CPM was Dropping.
  • I always recommend that Infolinks publishers choose double-underlined links. Double-underlined links are less intrusive (since your readers won’t confuse them with regular hyperlinks). -  Decide it for yourself, will a double underline will increase your CTR or single line. Total Misguidance.

Account Suspension


As the CPM fluctuations were going off and on, One day infolinks emailed me the following:
Dear Rafay,

At this time we have temporarily blocked your Infolinks account. We found that you have added the Infolinks code to pages that violate our TOS. We ask that you please remove the Infolinks code from the following pages. Once you have done so, please let us know and we will reactivate your account.

http://rafayhackingarticles.blogspot.com/2009/07/how-to-hack-facebook-account.html

http://rafayhackingarticles.blogspot.com/2010/01/4-ways-on-how-to-hack-facebook-password.html

http://rafayhackingarticles.blogspot.com/2010/07/free-microsoft-office-2010-product-key.html

http://rafayhackingarticles.blogspot.com/2010/06/adobe-photoshop-cs5-serial-number.html

http://rafayhackingarticles.blogspot.com/2010/07/free-microsoft-office-2007-product-key.html

http://rafayhackingarticles.blogspot.com/2009/03/hack-hotmail.html
http://rafayhackingarticles.blogspot.com/2010/01/remote-password-hacking-software_07.html

http://rafayhackingarticles.blogspot.com/2010/04/facebook-password-hacker-and-cracker.html

http://rafayhackingarticles.blogspot.com/2009/08/how-to-hack-gmail.html

Thank you for your cooperation and have a lovely day.

Jamie M.
Account Executive

E support@infolinks.com
www.infolinks.com

So I searched on Google for the keyword "Infolinks TOS" and found none, But anyways I used infolinks OFF tag to stop infolinks from displaying on these particular pages. After a week or so infolinks blocked again and asked me to remove some URLS, As I didn't wanted to loose the revenue I generated from Infolinks, I removed the URLS they asked.

It was september 20rd when it had been more than 2 months, Since they didn't made the payment, So I wrote an email and never got a reply, On 23rd December I received an email from infolinks:

Dear Rafay,


Thank you for writing back.


As noted previously, our analysts have deemed your account activity to be illegitimate and therefore instructed us to close it according to our terms of service.


We ask that you please remove the Infolinks codes from your site(s) if you have not done so already.


We wish you the best of luck in your future endeavors.


Sincerely,


 Jamie M.
 Account Executive\


support@infolinks.com
www.infolinks.com

I replied with the following:

Thanks for the email, Kindly tell me what kind of Illegitimate activities, I have not done any kind of fraud with you, I need explanations, Plus you havent made my payment


Warm Regards,
Rafay Baloch

They replied again after a 4 days or so:

Dear Rafay,


Thank you again for your reply.As previously stated, your account cannot be reopened for reasons previously explained.We wish you the best of luck in your future endeavors.


Sincerely,
Jamie M.Account Executive

I was using infolinks for several other websites like http://techlotips.com, if they had problems with RHA, then why did they suspend all other websites too, The answer is very simple they didn't wanted to pay me, After writing several emails to them and not getting a proper reply, I decided to put the kibosh on it and move to kontera. Here are the keypoints to note from the above emails:

  • The moment I asked for the payment which was well above then 3000$, they suspended my account.
  • They never told me about the fraud I did with them.

Why you should Avoid Infolinks?

  • Infolinks Will decrease your adsense revenue
  • Your Bounce Rate will be inreased
  • Blog Load time increases, which is really fruitful for SEO.
Don't believe me, see what a Six Figure blogger has to say about infolinks:

http://techadvices.com/infolinks-kontera-statistics/
http://techadvices.com/infolinks-premium-publishers-cpm-down/


Another Infolinks Scam:
http://jimshep.wordpress.com/2011/09/28/the-infolinks-african-safari-scam/

If you are in a similar situation and have been screwed by infolinks, Kindly share with us. We will be happy to publish your story. I believe my story might have changed your mind, Kindly share this post with every one you know, So it might now happen to any one else.

Is infolinks a Fraud?, Decide it for yourself now.

~ mardi 25 octobre 2011 0 commentaires

Facebook Hacking Course - Learn How Hackers Hack Facebook

After the sucess of my book "A Beginners Guide To Ethical Hacking" I am presenting you my next Product "Facebook Hacking Course", Facebook hacking Course is basically contains series of videos which will tell you exactly how hackers hack facebook accounts, What methods they use and how you can avoid falling for these kinds of attacks, You will watch my computer screen as I show you exactly how it's done, Each video contains a pre made lab so you can practice what you learned



 Facebook Hacking Softwares 

Lots of people are interested in learning how hackers hack facebook passwords and you might have came across lots of options and the first one would probably be a program or software which has an ability to hack Facebook passwords but the truth is that there is no such simple program or software that can do it for you, The reason behind it is that these major companies pay thousands of dollars to protect their users privacy, Do you honestly think this is possible?, Do you think that they don't have any protection and security officials to knock down such softwares, So Stop fooling your self and stop searching about these so called "Facebook Hacking softwares"

Facebook Hacking Services

The second option which people come across is that they go for Facebook Hacking services which promise to hack facebook accounts for you for money but the truth is that no one is going to do it for you, their purpose is just to scam you and take money.

What will be I learning in Facebook Hacking Course?

You will learn:
  • The exact techiniques which hackers use to hack facebook accounts.
  • Security tips to protect your facebook account from getting hacked.
  • Protecting your Privacy
And much more.

Bonus


By buying this facebookhackingcourse you will get the following bonus:

1.Secret Anonymizing Techniques

This section will contain 2 bonus videos which will tell you the exact methods used by hackers to hide their identity while doing malicious things online

2.Direct Email Access and support

If you get stuck or don't understand any thing presented in the course, I will help you no longer how much time it takes, however this offer is for limited time only

So What are you waiting for go and grab your hands on Facebook hacking course and learn Facebook hacking and security right now.

Click here to visit the official website

~ vendredi 14 octobre 2011 0 commentaires

Facebook Hacking Course - Learn How Hackers Hack Facebook

After the sucess of my book "A Beginners Guide To Ethical Hacking" I am presenting you my next Product "Facebook Hacking Course", Facebook hacking Course is basically contains series of videos which will tell you exactly how hackers hack facebook accounts, What methods they use and how you can avoid falling for these kinds of attacks, You will watch my computer screen as I show you exactly how it's done, Each video contains a pre made lab so you can practice what you learned



 Facebook Hacking Softwares 

Lots of people are interested in learning how hackers hack facebook passwords and you might have came across lots of options and the first one would probably be a program or software which has an ability to hack Facebook passwords but the truth is that there is no such simple program or software that can do it for you, The reason behind it is that these major companies pay thousands of dollars to protect their users privacy, Do you honestly think this is possible?, Do you think that they don't have any protection and security officials to knock down such softwares, So Stop fooling your self and stop searching about these so called "Facebook Hacking softwares"

Facebook Hacking Services

The second option which people come across is that they go for Facebook Hacking services which promise to hack facebook accounts for you for money but the truth is that no one is going to do it for you, their purpose is just to scam you and take money.

What will be I learning in Facebook Hacking Course?

You will learn:
  • The exact techiniques which hackers use to hack facebook accounts.
  • Security tips to protect your facebook account from getting hacked.
  • Protecting your Privacy
And much more.

Bonus


By buying this facebookhackingcourse you will get the following bonus:

1.Secret Anonymizing Techniques

This section will contain 2 bonus videos which will tell you the exact methods used by hackers to hide their identity while doing malicious things online

2.Direct Email Access and support

If you get stuck or don't understand any thing presented in the course, I will help you no longer how much time it takes, however this offer is for limited time only

So What are you waiting for go and grab your hands on Facebook hacking course and learn Facebook hacking and security right now.

Click here to visit the official website

~ 0 commentaires

Free Hotfile, Fileserve, Megaupload Premium Link Generator


All of us have, at one point or another, used major file hosting websites like Megaupload, Hotfile and Rapidshare. The sweetest part and the reason why we wait for hours on end to download our required files from these links is 'cause we don't have to cough up a dime while doing so. Buying them is a far worse idea as breaking rules is and always will be our kinda deal!

Free Fileserve, Filesonic Premium Link Generator


 But there's a catch (yeah, all good things come at a price). Even if you do manage to wait for your download link to appear and somehow you manage to start your download, the speed is gonna be like one of those days when you are late for work and the old lady driver in the car up front just won't moooove! Yeah, you know what I'm talking about. I'm gonna tell you a way out.. Break all the rules and make a run for it!

Getting back to the topic, file hosting websites lag speed, restrict parallel downloading and make you wait before they throw a bone at you, that is if you a FREE MEMBER.
These sites require pocket change if you want to download files without any restrictions and party all day long with free software downloads.

But, as always, we have a solution for you. Now, you can download files all day long with a Premium account to satisfy all your software hunger and that too, without paying a dime (Yeah, you heard me). Simply, use
Free Fileserve, Filesonic and Megaupload Premium Link Generator, copy and paste a Megaupload file URL and instantly download your file.

Free Fileserve, Filesonic Premium Link Generation technique

Follow the instructions below to break free and enjoy unlimited downloads for a day:

Step 1: Go to DebriDNS and register for an account. Verify and login to your DebriDNS account.



Step 2: Configure your DNS settings by going to your Control Panel -> Networking and Sharing Center -> Manage Network Connections -> “Your Connection name”, for e.g Local Area Connection.


Step 3: Right click on it and select Properties.

Step 4: Double click on IPV4.


Step 5: Click “Use the following DNS server addresses” and enter the following DNS addresses:
Preferred DNS Server: 85.17.255.198
Alternative DNS Server: 46.19.33.120

Click OK and Exit.

Step 6: Restart your browser and say a prayer 'cause you have entered the rabbit hole!
As for downloading a file, all you have to do it:

Step 1: Open Megaupload and you will find yourself logged in as a a Premium User (Huraaah!)

Step 2: Hit on Premium and enjooooyyyy!


If this Free Fileserve, Filesonic Premium Link Generation technique did not work for you, Kindly comment and let us know.

PS: This works for Hotfile too!

~ samedi 8 octobre 2011 0 commentaires

RHA Blessed With Page-Rank 3.0!!

It hasen't been more than 4 months since I moved rafayhackingarticles.blogspot.com to a custom domain(http://rafayhackingarticles.net), Today RHA has been surprisingly blessed with Page-Rank 3.0 and I am very shocked to see it, though when RHA was on a subdomain it had PR 4 but after I redirected all the traffic to the custom domain the pagerank became zero. Luckily not only RHA's homepage but internal pages also managed to get 2-3 page rank.

I would like to thank all my readers for continuous support and especially my buddy Mustafa Ahmedzai from http://mybloggertricks.com for his love and support. I expect RHA to get atleast PR-5 on next update. My other blog on iPhone jailbreaking And Unlocking http://techlotips.com also managed to get PR 1.

~ lundi 27 juin 2011 0 commentaires

Can I Become A Good Hacker Without A Prior Knowledge Of Programming??

"Can I become a good hacker without knowning Programming?", "Is Programming necessary for learning how to hack", I usually get these question asked almost daily, There have been lots of debates on this topic, Some think that it's necessary while others think that it's not necessary at all, So I thought to write a post on this topic explaining my views if programming is necessary for becoming a hacker or not.

The answer is that it depends:


Why it's not necessary?

In early 90's the best hackers were known as those who were best at the knowledge of programming and the reason for that was probably that almost every thing was based on a command line so it was for sure that if some one is a good hacker he is surely a good programmer.

However the definition of hackers sort of changed after the beginning of 21'ST century, One could become a fairly good hacker without any knowledge of programming, This reason for that is because now a days there are lots of ready made tools which helps you to compromise a machine without any knowledge of Programming, Take an example of "Havij", Havij is a small software which helps you automate the process of SQL Injection and helps you extract sensitive database information in seconds where it may take hours in some cases to extract it, If you still don't agree with me try answering the following question:

Does it matter if an elite hacker writes a buffer overflow or a script kiddy runs a tool if the target system gets compromised anyway?

Where It's Necessary?

It's true that many good hackers are technology buffs and are curious about how things work, this is where you need to have prior knowledge of Programming in order to know how things work.

Another reason is why you should probably learn Programming is that you can write your own exploit (An exploit is a peice of code which can be used to gain access to the target machine using a specific vulnerability), which is the single most important thing which will separate you from rest of the script kiddies out there and most of the times some of the exploit codes comes with several code mistakes which are kept by Elite hackers themselves to prevent script kiddies or people with very little knowledge of hacking to run it.

In Short:

You can become a fairly good hacker without having a prior knowledge of programming but if you want take your hacking skills to the next level I will recommend you to learn Programming now the question which might arise in your mind is that what Programming languages should I learn?, I will cover it in my upcoming posts.

Feel free to express your views on the topic, Whether you agree with me or not?

~ mardi 10 mai 2011 0 commentaires

RafayHackingArticles Finally On A Custom Domain Now !

Well it has been almost 2 years since I have started rafayhackingarticles and for 2 years it has happened to me countless times that i have thought of moving to a custom domain(.com,.net,.org) but every time i tried to do it there was some thing which always holding me back and one of the major things which was holding me back was my SEO Standing I was afraid that I might loose my traffic, but yesterday one of my friend David suggested me to move to custom domain as blogspot is Google's property and google can delete it any time they want and Google is very less likely to delete blogs on custom domains.

So i said to my self that "Some day will never come" So I acted immediately and registered rafayhackingarticles.net, Now some of you might ask questions that whyI did not go for a .com domain, The answer is that it was not available.

Learn How To Hack - Ethical Hacking and security tips

Yesterday when I was searching godaddy for domains my first priority was to go after a .com domain but since it was not available .net was the second best option.

What Topics Will I cover?

1. Hacking And Security Related News.

2. Ethical Hacking Techniques.

3. Computer Tricks.

4. Windows hacks.

5. Security flaws.

And much more.

Advice for those on blogspot:

During my experience of more than 2 years with blogging the biggest mistake i made was that I blogged on a blogspot domain(And never will), If are still on blogspot I suggest you to move to custom domain, Their are countless advantages of a custom domain over a sub domain, If you are looking forward to make serious money from blog i suggest you to move to custom domain.

~ samedi 16 avril 2011 0 commentaires

Download Hakin9 Magazine For February

Hackin9 magazine is one of the popular online E-magazine available online, Hackin9 magazine contains information related to latest malware and latest vulnerabilities on the web. This month's issue is related to "Network Security" where the magazine talks about network security and hacking and latest threats related to network.



Here is the list of topics available in Hackin9 Magazine:


  • Free Issue (02/2011) to Download!
  • Wuala – Secure Online Storage
  • A Beginners Guide to Ethical Hacking
  • A Security System That Changed The World
  • Get in through the backdoor: Post exploitation with Armitage
  • Breaking The Code: Brute Forcing The Encryption Key
  • Is Data Secure on the Password Protected Blackberry Device?
  • Examine your Network With Nmap What is network Scanning?
  • Network Security – Data Breaches
  • What is Good Enough Coverage?
  • Exploring GCIH certification for fun and employability
  • Certification Smart?
You can Download Hackin9 Magazine here

~ mardi 1 février 2011 0 commentaires

A Beginners Guide To Ethical Hacking Book Winner

If you are a regular reader of RHA you might remember offer to Review My Blog & Get A Free Linkback which I offered for blogs with low page rank and low traffic, I have decided that I am ending this offer due to large number of requests and finally it's time to decide the winner of the contest as I promised to give my book "A Beginners Guide To Ethical Hacking" to the best reviewer.





The review which I liked most was from Ksub which you can read by visiting the link below:
http://newbiesway.blogspot.com/2010/12/analyzation-of-blog-newbies-analyzation.html

Congratulation Ksub you have just won a free copy of my book "A Beginners Guide To Ethical Hacking" Kindly leave your email in the comments section and claim your free book. I would also like to remind you that the last date of entry for the contest on Free Copy Of Facebook Hacking Course Worth 37$ is going to end on 7th February and the winners will announced on the same day if you haven't participated yet here is your chance to get your hands on my Facebook Hacking course

~ lundi 31 janvier 2011 0 commentaires

Review My Blog & Get A Free Linkback

Recently RHA(Rafay Hacking Articles) showed tremendous increase in traffic and daily traffic has reached to almost 10000 unique visitors per day plus RHA has became a PR 4 blog too, As a result of which I was getting lots of request for link exchanges from site owners, The minimum requirement for a Link exchange is this blog is a Page rank 3 website,so as a result of which the lower PR websites could not exchange links, but I have a perfect solution for webmasters with lower Page rank or with no page rank

The concept is simple - review my blog and I'll link to you. The review must be at least 200 words long and you have to include a link to the blog home page and this post, Also state what you like and don't like about the site, It does not matter if the review is in English or your blog/website is covers other categories, I will accept all reviews

Your Link will be placed on the following page:
http://rafayhackingarticles.blogspot.com/2009/03/link-to-us.html


Requirements
  • Minimum PR 1 or If you blog has no page rank it should have atleast 200 daily unique visitors
  • Review should be atleast 200 words
  • You have to include a link to the blog home page and this post
Best Review wins a copy of My Book

Yes the best review wins a copy of my book "A Beginners Guide To Ethical Hacking" along with all bonuses

Update

Winners Announced here

~ jeudi 6 janvier 2011 0 commentaires

WikiPak.org - A Free Pakistani Encyclopedia

Wikipak.org is a non profit organization co-founded be me with Mr Khawar Junjoi, Wikipak.org is a wiki of Business, People, Biographies and Places in Pakistan.wikipak.org is developed on purpose to help Pakistani People to know more about their country and to find all things in one place, Kindly help us grow it by contributing an article

You can Make your valuable contribution to wikipak in just 5 short minutes, However before you contribute to wikipak you should be aware that Wikipak copyleft allows your contributions to be used elsewhere, edited by others, and even copied or sold as long as you are given proper attribution
What To add?You can add almost anything such as attraction, park, view, Biography restaurant and even your own introduction after you contribute for at least one article.

Read More:WikiPak:Quick contribution guide

~ lundi 3 janvier 2011 0 commentaires

Download Hakin9 Magazine For January

Hakin9 is an e-magazine which talks about Ethical Hacking and Security issues, I just came across the its website Hakin9.org and had a look at some magazines they were awesome, So I though to share it here on RHA, This Months Issue is related to Cybercrime and Cyberwar Predictions for 2011 which contains information related to following issues.



  •  Cybercrime and Cyberwar Predictions for 201
  •  The Social Web Threat
  •  Pros and cons of partial passwords in web applications
  •  Target Attacks via Email
  • Spyware Threat Invades BlackBerry App World 
  • The Social Web Threat
And Much more

So what are you waiting for go ahead and Download Hakin9 magazine for january here

~ vendredi 31 décembre 2010 0 commentaires