Hello Guys,
So here we go, the first tutorial in our Web Programming Series!
Basic HTML, Tutorial 1
Video is also available in HD, just change the resolution.Video Made By: Zeeshi7897
Video Download Link:
http://www.mediafire.com/?sh5si7gl6cp82ep
Monday, 18 March 2013
Web Programming Series - HTML Tutorial 1
Video Made By: Zeeshi7897
Video Download Link:
http://www.mediafire.com/?sh5si7gl6cp82ep
Saturday, 16 March 2013
iPhone App Development
IPhone application development is the development of software application for handheld devices like mobile phones, android phones. iPhone application is from the Apple Inc. Sometimes these applications are already installed on gadgets and sometimes the users can download the application to their mobile phones. iPhone development came into existence in the year 2004 when Apple Inc CEO Mr. Steve jobs started focusing on the development of iPhone and with the collaboration of AT&T they have developed the iPhone. The approximate cost in the development of the iPhone was $200 million and it has taken approximate 30 months to complete the project of development of iPhone.
Since the advent of Smartphones in the year 2007, the whole concepts of mobile phone have been changed. Mobile phone usages are not just limited to communication; they have changed into high-tech gadgets with lot of different features. Smartphones are much more developed than general cell phones – both functionally and technically.
iPhone applications are different from one platform to another platform and there is no application which can run on all platforms. Every company has developed their own platform; mobile platforms are dissimilar and certain application run with specified technologies only. In the past 5 years, various platforms have been introduced for mobile phone application development like Blackberry, I Pad, Android and windows mobile. IPhone application cannot run on blackberry mobile or windows mobile. Therefore it is important to select the ideal mobile platform for application. The iPhone application developed with the use of SDK (software development kit) which is free to download.
Today, the owners of iPhones or Smartphones can perform a lot of activities on their phones like play high end mobile games, listening music, surfing internet, shopping and a lot more. Smartphones also allow third party applications and these applications give extra benefit and advantages in usability. Its compatibility with various third party applications has helped the gadget to do multi-tasking. While on one hand Smartphones can help doctors also with a large inventory of generic and brand name drugs, on the other hand this device can be a great help to students in their educational projects and assignments.
The mobile application market is a growing industry and because of its high revenue generation opportunities. This industry has not only enticed customers but also a business man.
The mobile application market is rapidly growing and coming as a new job opportunities market. There is increasing demand of mobile applications and everyday there is an increase of Smartphones users. Because of the high demand of mobile application software new opportunities are opening for mobile application developer. As it can be seen there are not good mobile application developers. Companies are attracting mobile users through different applications, so the demand of application developers is growing and will grow.
In mobile application there are 4 major technologies involved:-
1) Web–based (HTML5/CSS3/JS) and related Frameworks (JQuery, Sencha)
2) Native platforms (iOS, Android, Windows Mobile 7)
3) Hybrid WebKit/Native
4) Proprietary middleware and clients (Red Foundry)
The capabilities of Smartphones have been taken to the next level and in the coming years we can expect better and more robust applications to perform more complex functions in even better ways.
Today developers are developing new application everyday for attracting the users to use more iPhones application.
This article was submitted by a guest in SecurityGeeks.
Bio will be added if possible.
Sunday, 3 March 2013
Scan Your Home Network With Nmap
Who should read this article?
Everyone that is interested in computer security and computer networking should read this
article.
Introduction
If you run a network, a small or big one, you need a flexible and productive way to monitor it.
You need to provide security to machines connected to your network, especially if you have a
WI-FI network. Monitoring the ‘health’ of your network is an important step to keep attacks,
viruses and malwares out of your network perimeter. Ask yourself these questions: “Is there
anybody outside using my wireless internet connection?”, “Are my machines and devices
secured?”, “Is my router firewall working?”, “Why is this port open? Is there any virus in my
computer that opened that port?”
What is Nmap?
Nmap is a free and open source tool for network discovery, helping us to map the network.
Network administrators find it very useful in their daily job, so if you are planning to be a
network administrator you should learn how to use Nmap. Nmap can help us to discover how
many hosts are in a network, what operating systems are they running, what open ports do they
have and services running in these open ports. It is a command line tool but for those that do not
like to remember many commands there is a graphical version of Nmap that is called Zenmap.
Both Nmap and Zenmap are multi-platform (Linux, Windows, Mac OS X, BSD, etc.), so you do
not have to worry about the operating system you need in order to use these tools. Nmap has the
ability to save scan results to files and we can use these files for later analyzes. The great thing
that i like about Nmap is its scripting engine (NSE). We can write our own scripts and use them
with Nmap.
a) Installing Nmap on Ubuntu
Installing NmaponUbuntu is very easy. Fire up the terminal and type this command “sudo
apt-get install nmap” without the quotation marks.This simple command does everything; it
downloads and installs the Nmap for you.
NOTE: You will need root privileges to use Nmap tool on Linux machine.
b) Installing Nmap in windows
Download the latest release self-installer from the official Nmap page (nmap.org) and double
click it.After the installation is completed open command prompt (cmd), type this command
“cd C:\Program Files\Nmap” like shown in Figure 1 and hit enter.
Type “nmap” like shown in Figure 2 and hit enter.This command gives us information about
Nmap usage like options and target specifications so every time we do not remember a command
we can type “nmap” in the command prompt and read the output.
Scanning with Nmap
Performing a simple scan with Nmap requires a target and the target can be specified as an IP
address or a hostname. A simple scan does not require any options and the syntax for it is “nmap
IP or HOSTNAME”. My router is the target in this case; if you need another target then think
about your computer; do not scan machines that are not yours.
 |
| Figure 1 – Simple nmap scan |
The nmap scan report tells us that the host is up and is running a web service in port 80, the port
for http (hypertext transfer protocol) traffic. A simple nmap scan will check for the 1000 most
commonly used TCP/IP ports and based in the respond that these ports do to the probe Nmap
will classify them into one of six port states: open, closed, filtered, unfiltered, open|filtered,
closed|filtered.To perform a simple scan in your machine type this command in the command
prompt “nmap localhost”.
Can Nmap be used to scan multiple hosts? Yes,Nmap can be used to scan multiple hosts and the
easiest way to do this is to string together the target IP addresses or hostnames separated by a
space, like shown in Figure 2.
 |
| Figure 2 |
Figure 2 demonstrates using Nmap to scan two addresses at the same time (host1 and host2).
If the number of hosts is big, than the scanning process will take more time and is good to save
the results in a file. Sometimes you want to scan an entire subnet and to do that you need some
information about Classless Inter-Domain Routing (CIDR).I will not explain you in this tutorial
what CIDR is so feel free to Google it.For now only remember that to scan an entire subnet you
need an ip address in the subnet.If you want to scan your entire subnet get your ip and use this
syntax: “nmap [IP/CIDR]”.What is the value for your CIDR?To find out the CIDR value we will
use an online subnet calculator. You can find it here http://www.subnet-calculator.com/.Put your
ip address in the ip box and copy the number in the Mask Bits box.My CIDR is 24.To scan the
entire subnet we use this command: “nmap [IP/24]” without quotation marks.This process will
take some time and the speed of scanning will depend on your internet connection. If you have a
slow connection, feel free to get a coffee.
 |
| Figure 3 |
Nmap accepts text file input, so if you have a large number of machines to scan, you can enter
the ip addresses in a text file and use it as input for Nmap. Each entry in the text file must
be separated by a space, tab or new line. The syntax for performing this scan is “nmap –iL
filename.txt”, where the –iL parameter is used to instruct Nmap to extract the list of targets from
the filename.txt.
 |
| Figure 4 |
Figure 4 show us that nmap failed to open input file hostlist.txt, which is a text file that contains
a list of hosts.In order for this scanning technique to work you need to copy the text file in the
Nmap folder.By default, before scanning for open ports, Nmap sends ICMP echo requests to
the host to see if it is online and if the host in not ‘alive’ Nmap does not probe the host.This can
save time when scanning a lot of machines as Nmap will not waste time probing hosts that are
not ‘alive’. The –sP option is used to perform a simple ping and is very useful when you want
to see which hosts are online without scanning for open ports. To see which hosts are online in
your network type this command “nmap –sP [IP/CIDR]” in the command line and wait for the
output. Figure 5 shows that 256 ip addresses in my subnet are pinged and there are only three
hosts ‘alive’.
 |
| Figure 5 |
Determining the operating system of your target is very important because many exploits
are specific to a specific platform. The process of discovering the host operating system is
called fingerprinting.The syntax for performing operating system detection is “nmap –O [IP or
hostname]”. Figure 10 shows the output of my os scan detection.
Sometimes Nmap is unable to detect the operating system and it will provide only a
fingerprint,but you can force the os detection by using the –osscan-guess option. But what is
the reason that some port is closed or open? The –reason parameter helps us to understand the
reason why a port is considered to be open or closed. Figure 6 shows how this option can be
used.
 |
| Figure 6 |
If you want to keep your nmap scanning output simple you can use the –open parameter which
helps you to display only the open ports on your target.Sometimes is hard to remember all these
commands and to do the job right you can use the –A parameter, which can be used to perform
an aggressive scan. This parameter selects some of the most commonly options used with Nmap.
Now that we have learned the basics of Nmaplet me takesome examples.
Example 1
I want to know if there is any SSH or web server in my subnet.
The most popular ports for SSH and web servers are 22 and 80 so we need to use the --open
parameter to check only for open ports and from these open ports we are only interested
about 22 and 80 ports.
 |
| Figure 7 |
As you can see from figure 7, we used -p 22,80 to perform a scan on TCP ports 22 and 80.
Example 2
How can Nmap help me to discover FTP servers in my subnet?
File transfer protocol (FTP) is known for its weak security. The issue with file transfer protocol
is that all the traffic is sent in plain text meaning that all data can be easily intercepted. An Nmap
scan can helps us to identify ftp servers. The command syntax for this scan is “nmap -sP -p 21
[target/CIDR]”.
Example 3
How to tell if your wireless router has been “hacked”
Most wireless routers allow administration through a web page interface. Open a web browser
and connect to your router by typing in its IP address. The default IP set for many routers is
192.168.0.1 or 192.168.1.1. If you are not sure about your router’s IP open the command prompt,
type “ipconfig” and then press enter. This command gives you information about the internet
connection. The IP address under “Default Gateway” should be your router’s IP.
After you have entered router’s IP address in the web browser, a pop-up window will ask for
your username and password. Enter your username and password to log into your router. Search
through the administrative menus that your router offers and try to find the place that shows a
list of devices using the network. Figure 8 shows all devices connected to my network. Now
it is very easy, isn’t it? If the page shows more DHCP clients than you have, it means that your
wireless router has been compromised and you should immediately improve its security.
 |
| Figure 8 |
But how can you tell if your wireless router has been “hacked” if you are not the administrator of
the router? Nmap does the magic for us. We learned to perform simple ping scan in a subnet by
using -sP option. If the command result displays more hosts than you expect, it means that your
router has been “hacked”. Figure 9 shows the output of my simple ping scan.
 |
| Figure 9 |
Figure 9 shows that 2 hosts are up. One of these hosts is my computer and the other one is my
router. If the scan shows more than two hosts up itmeansthat someoneis using my wireless
network.
Conclusion
We’ve looked at the basics we need to know about Nmap. In the next tutorial we’ll takea look at
more advanced stuff and use Nmap in real world examples.
About The Author:
Oltjano is pursuing Computer Engineering from Polytechnic University of Tirana. He is passionate about Information Security, Computer Forensics , game development and
drawing.
Website:http://thisisoltjano.blogspot.comdrawing.
Sunday, 17 February 2013
TPB AFK: The Pirate Bay Away From Keyboard - Online
Watch TPB AFK: The Pirate Bay Away From Keyboard in FULL HD
Wednesday, 6 February 2013
How to Jailbreak iOS 6.1 with Evasi0n 1.0 – OS X Tutorial
Evasi0n is finally here to enable all iDevice owners to break the shackles and install mods, themes and tweaks on their iOS 6 iPhones, iPads, and iPod touch players. This guide here will show you how to do that.
Before we begin, we need to stress that Apple doesn’t condone jailbreaks. In the offset chance that something goes wrong with your device in the future, the company may refuse service on the count of your hacking it.
With that out of the way, the team responsible for Evasi0n (the evad3rs) also has some important notes for would-be jailbreakers.
“·Backup your device using iTunes (or iCloud) before using evasi0n. If something breaks, you'll always be able to recover your data.
·Those who use backup passwords in iTunes must disable them for now. After doing so, iTunes makes a brand new backup. Please wait for that backup to complete before proceeding! Feel free to re-enable your backup password after jailbreaking.
·Please disable the lock passcode of your iOS device before using evasi0n. It can cause issues.
·Avoid all iOS and iTunes related tasks until evasi0n is complete. Why not just enjoy a brief break from the computer to stretch your legs?
·If the process gets stuck somewhere, it's safe to restart the program, reboot the device (if necessary by holding down Power and Home until it shuts down), and rerun the process.”
With that out of the way, here are the actual steps required to jailbreak an iPhone, iPod touch or iPad running iOS 6.0 through iOS 6.1 using Evasi0n.
Step 1 – Back up your iDevice using iTunes
Connect the iPhone / iPad / iPod touch to your Mac, wait for it to appear in the iTunes sidebar, select it, right-click, and hit “Back Up.”
Step 2 – Launch Evasi0n
Close iTunes, download the Evasi0n jailbreak tool, and launch it. Wait for the software to recognize your device. Once it’s done figuring out what you have (as shown below), hit “Jailbreak.” Wait for Evasi0n to do its thing (i.e. inject hack).
Step 3 – Tap the Evasi0n icon on iOS
As it proceeds with the steps required to jailbreak your device, Evasi0n will ask you at one point to unlock your device and tap the new “jailbreak” icon (as shown below). Do it.
Step 4 – “Jailbreak complete”
Evasi0n will proceed with the hack and will display the following message when it’s almost done: “Jailbreak complete! The device may restart a few times as it completes the process.”
You can now hit “Exit,” but you must allow your iDevice to reboot a few times. When it finishes rebooting itself, you can unlock the Home screen. You’ll notice that Cydia has been installed (as shown below).
Success! Your iDevice is now fully jailbroken.
Disclaimer
- This tutorial was originally posted by SOFTPEDIA, all credits goes to the original writer
- SOFTPEDIA posted this tutorial solely for informational purposes. We take no responsibility should your device malfunction as a result of using Evasi0n.
- SecurityGeeks is also not responsible for any devive malfunction.
Sunday, 27 January 2013
How To Search For Exploits Using Exploit-DB search BackTrack - Terminal
Hello guys,
In hacking we usually look for exploits to own the target, and today I'm going to show you how to look for exploits in Backtrack Inside your terminal!
What Many of us don't know, there is more than 15,000 exploits inside your backtrack written perl, ruby, python and more. But, today we'll learn how to search in those exploits easily, and faster than Googling!
When I use linux, I like to use the terminal for almost everything, and now, we will use it for exploit searching ;)
Lets start,
First of all open your terminal and type this command:
cd /pentest/exploits/exploitdb
We will use this file to find the exploits on our PC, here is how to use it:
./searchsploit term1 term2 term3
what I mean in "term" is something that describes the exploit you're looking for, something that narrows down the search results to only the things you want.
For example, if you want an exploit for java inside windows, and we want the exploit to be DoS. Our command should look like this:
./searchsploit windows java dos
Easy, right?
Now you can change the terms and find the exploit you want.
Ok, so we get the exploit description, and a path...
As I mentioned before, there are two files, and one directory.. now we know what those two files do, it's the directory's turn now :P
that directory contains all of the exploits you need, and their paths.. so just enter, and copy the path to get it..
Let me show you an example.
We used the command:
./searchsploit windows java dos
and got some paths, here is how to get the exploits,
add "platforms" to the beginning of the path, for example
we got:
/windows/dos/11670.py
to read it use
cat platforms/windows/dos/11760.py
That's it you guys =)
Have fun, and happy pentesting!
Friday, 21 December 2012
How To Use Fast-Track | Fast Track Tutorial
Hello guys, Today I will show you how to use Fast-Track on Backtrack / Linux. Fast-Track is a tool used for exploiting. It uses other tools, to make pentesting a lot easier for us.
Fast-Track is available in three different forms,
- CLI
- Web
- Interactive
There are many things that Fast-Track can do, but in this tutorial, I will just generate a payload just to give you a general idea on how Fast-Track is used.
The first thing you need to do is, Open your
menu > BackTrack > Exploitation Tools > Network Exploitation Tools > Fast-Track > fastrack-web
or if You want to use your terminal, Open your terminal and type the following commands:
cd /pentest/exploits/fasttrack
and then./fast-track.py -g
you should get output like this:
http://127.0.0.1:44444
you should get a Fast-Track page, it looks something like this:
That's basically 50% of our job! Now all we have to do is choose the option, and fill in the input that it needs, or choose the number of your option in the terminal!
Alright, Now lets see an example of using it, we will generate a metasploit payload using Fast-Track. Follow me!
First thing you need to do is click on Payload Generator from the list on the left:
Now Fast-Track will provide you with a little description about the option you chose, and some fields that you need to fill (no all the time).
Now click on launch, a terminal should pop-up and show you some options that you need to choose from, just enter the number of the option and click enter.
Look at the pictures:
 |
| I chose Windows Shell Reverse_TCP which is option number "1" |
 |
| in this picture I also chose option number "1" which was "avoid_utf8_tolower" |
 |
| In this step it is asking for the IP of the attacker, just enter your IP address. You can find your IP address using the command "ifconfig" and then enter the PORT |
 |
| And the last step, it will ask you if you want to start a listener, I answered with "yes" |
See how easy it is? Now you just have to brows and check all the different options you have!
Thank you for reading! =)
Subscribe to:
Posts (Atom)