What is a botnet?✅
A botnet is a collection of internet-connected devices, which may include PCs, servers, mobile devices and internet of things devices that are infected and controlled by a common type of malware. Users are often unaware of a botnet infecting their system.
Infected devices are controlled remotely by threat actors, often cybercriminals, and are used for specific functions, so the malicious operations stay hidden to the user. Botnets are commonly used to send email spam, engage in click fraud campaigns and generate malicious traffic for distributed denial-of-service attacks.
A botnet is a collection of internet-connected devices, which may include PCs, servers, mobile devices and internet of things devices that are infected and controlled by a common type of malware. Users are often unaware of a botnet infecting their system.
Infected devices are controlled remotely by threat actors, often cybercriminals, and are used for specific functions, so the malicious operations stay hidden to the user. Botnets are commonly used to send email spam, engage in click fraud campaigns and generate malicious traffic for distributed denial-of-service attacks.
♠️How to Protect Yourself from Keylogger Attacks♠️
And that's how easy it is for hackers to see and record every keystroke you press on your computer. When a hacker has an unnoticed backdoor on your computer, anything is possible, but there are a few things you can do to minimize the risk of having your keys captured:
🔸Use antivirus software. While there's not a catch-all solution, and antivirus software won't protect against sophisticated and cutting-edge keyloggers, there's still no excuse for not using antivirus software which protects against most known keylogger software.
🔸Use on-screen keyboards when entering passwords.One of the limitations of most keyloggers is that they only capture actual keystrokes being pressed on the keyboard. The Windows on-screen keyboard will provide a virtual keyboard that may help circumvent keyloggers.
🔸Use a firewall. It's possible lazy attackers won't go through the effort of disguising their payloads to appear as being normal DNS (port 53) or HTTP (port 80) transmissions. A firewall might catch suspicious packets leaving your computer on port 35357.
🔸Protect your computer against backdoors. While all of the above is helpful when you're already backdoored, the best thing to do is make sure you're not exploited in the first place.
And that's how easy it is for hackers to see and record every keystroke you press on your computer. When a hacker has an unnoticed backdoor on your computer, anything is possible, but there are a few things you can do to minimize the risk of having your keys captured:
🔸Use antivirus software. While there's not a catch-all solution, and antivirus software won't protect against sophisticated and cutting-edge keyloggers, there's still no excuse for not using antivirus software which protects against most known keylogger software.
🔸Use on-screen keyboards when entering passwords.One of the limitations of most keyloggers is that they only capture actual keystrokes being pressed on the keyboard. The Windows on-screen keyboard will provide a virtual keyboard that may help circumvent keyloggers.
🔸Use a firewall. It's possible lazy attackers won't go through the effort of disguising their payloads to appear as being normal DNS (port 53) or HTTP (port 80) transmissions. A firewall might catch suspicious packets leaving your computer on port 35357.
🔸Protect your computer against backdoors. While all of the above is helpful when you're already backdoored, the best thing to do is make sure you're not exploited in the first place.
♦️Recover the Keystrokes
Now, let's go back to our system with Meterpreter running on Metasploit. We can now dump all of the keystrokes that were entered on Cheatah's computer. We simply type:
meterpreter> keyscan_dump
As you can see, every keystroke has been captured including the tabs and end of line characters. Now you have the evidence on Cheatah!
Credits: @DeepHackerVendors
Now, let's go back to our system with Meterpreter running on Metasploit. We can now dump all of the keystrokes that were entered on Cheatah's computer. We simply type:
meterpreter> keyscan_dump
As you can see, every keystroke has been captured including the tabs and end of line characters. Now you have the evidence on Cheatah!
Credits: @DeepHackerVendors
♠️Web scraping♠️
When a hacker has identified a vulnerability in a system or platform he can choose to either report it (white hat hacker) or scan more systems with the same security hole. One way to do this is “Web scraping” which means scanning a website for specific areas and/or extracting that information. Web scraping a website can be compared with an anti virus software – which archives virus signatures and then using them to identify malicious software on the server, computer.
When a hacker has identified a vulnerability in a system or platform he can choose to either report it (white hat hacker) or scan more systems with the same security hole. One way to do this is “Web scraping” which means scanning a website for specific areas and/or extracting that information. Web scraping a website can be compared with an anti virus software – which archives virus signatures and then using them to identify malicious software on the server, computer.
Revealing any passwords hidden under asterisks in less than 10 seconds
Having many and secure passwords can be thought. In this clip we show how you can display any passwords that are hidden under asterisks – and it does not even take 10 seconds.
The trick is to change the input type in the form layer to a text field. This method works on any platform and even if we using firefox it will also work similar most other modern browsers.
How it’s done
Right click on the password field and select “Inspect”
A window will appear and you should see “<input type=”password”>”
Click on password and change it to “text”
The password will be revealed in clear text in the input field.
@DeepHackerVendors
Having many and secure passwords can be thought. In this clip we show how you can display any passwords that are hidden under asterisks – and it does not even take 10 seconds.
The trick is to change the input type in the form layer to a text field. This method works on any platform and even if we using firefox it will also work similar most other modern browsers.
How it’s done
Right click on the password field and select “Inspect”
A window will appear and you should see “<input type=”password”>”
Click on password and change it to “text”
The password will be revealed in clear text in the input field.
@DeepHackerVendors
♠️What is Buffer Overflow?♠️
Dominating network penetration areas, buffer overflow has been a common security vulnerability in the past decade. Subverting a privileged program’s function and taking control of the same is the invading strategy behind this technique.
In a broad spectrum, Buffer Overrun or Buffer Overflow is a flaw that occurs when a program writes more information into the buffer block than it is permitted to hold. Subsequently, the buffer’s boundaries are overrun, overwriting the adjacent memory blocks with corrupt values due to inadequate bounds checking. As a consequence, it allows an anonymous Internet user to execute his own code instead of the program code, thus partially or completely hijacking control of the host machine.
Dominating network penetration areas, buffer overflow has been a common security vulnerability in the past decade. Subverting a privileged program’s function and taking control of the same is the invading strategy behind this technique.
In a broad spectrum, Buffer Overrun or Buffer Overflow is a flaw that occurs when a program writes more information into the buffer block than it is permitted to hold. Subsequently, the buffer’s boundaries are overrun, overwriting the adjacent memory blocks with corrupt values due to inadequate bounds checking. As a consequence, it allows an anonymous Internet user to execute his own code instead of the program code, thus partially or completely hijacking control of the host machine.
♠️BRUTEX♠️
BRUTEX is a shell based open source tool to make your work faster. It combines the power of Nmap, Hydra and DNSenum. This tool will automatically run an nmap scan to your target and then it will brute force all the open services for you, such as FTP, SSH and more using Hydra.
Installing Brutex
Same old story, clone the repository first.
git clone https://github.com/1N3/BruteX.git
Run the install script, to download all the missing dependencies.
cd BruteX/ ./install.sh
That’s it!
Credits : @DeepHackerVendors
BRUTEX is a shell based open source tool to make your work faster. It combines the power of Nmap, Hydra and DNSenum. This tool will automatically run an nmap scan to your target and then it will brute force all the open services for you, such as FTP, SSH and more using Hydra.
Installing Brutex
Same old story, clone the repository first.
git clone https://github.com/1N3/BruteX.git
Run the install script, to download all the missing dependencies.
cd BruteX/ ./install.sh
That’s it!
Credits : @DeepHackerVendors
🔰What is a VirtualMachine/Sandbox and Why you should use them!
At first let's give the definition of virtual machine:
"A virtual machine uses a combination of software and your existing computer to emulate additional computers, all within one physical device."
Simply it's a "virtual" computer inside your "real" computer. You can choose the Operating System of the Virtual machine by installing its .iso image and you can choose the specs while creating it! (specs and power will be lower than your main PC)
This can be useful for cracking because you can choose the operating system you need to crack with and it's an AMAZING protection against Malwares because the infected files will corrupt only the VIRTUAL System and not the main one!
Similar to a VM, a sandbox create a protected virtual environment, but this happens without creating a separate Operating System (OS). The Sandbox make a private environment for every programs you run inside it. The sandbox is less safe than a Virtual Machine but it's easier to use and don't consume much resources 💁🏻♂️
—————————————————
By: @Leave89
—————————————————
At first let's give the definition of virtual machine:
"A virtual machine uses a combination of software and your existing computer to emulate additional computers, all within one physical device."
Simply it's a "virtual" computer inside your "real" computer. You can choose the Operating System of the Virtual machine by installing its .iso image and you can choose the specs while creating it! (specs and power will be lower than your main PC)
This can be useful for cracking because you can choose the operating system you need to crack with and it's an AMAZING protection against Malwares because the infected files will corrupt only the VIRTUAL System and not the main one!
Similar to a VM, a sandbox create a protected virtual environment, but this happens without creating a separate Operating System (OS). The Sandbox make a private environment for every programs you run inside it. The sandbox is less safe than a Virtual Machine but it's easier to use and don't consume much resources 💁🏻♂️
—————————————————
By: @Leave89
—————————————————
♠️ROOT♠️
For those new to the world of rooting, acquiring root access essentially grants you elevated permissions. With root access, you are able to access and modify files that would normally be inaccessible, such as files stored on the /data and /system partitions. Having root access also allows you to run an entirely different class of third-party applications and apply deep, system-level modifications. And by proxy, you may also be able to access certain device features that would otherwise be inaccessible or use existing features in new ways.
Having root access isn’t the end all-be all of device modification–that title is usually reserved for fully unlocked bootloaders and S-Off. That said, root access is generally the first step on your journey to device modification. As such, root access is often used to install custom recoveries, which then can be used to flash custom ROMs, kernels, and other device modifications. Root access also enables users to install the powerful and versatile Xposed Framework, which itself acts as a gateway to easy, non-destructive device modification.
BY 👉@Leave89
For those new to the world of rooting, acquiring root access essentially grants you elevated permissions. With root access, you are able to access and modify files that would normally be inaccessible, such as files stored on the /data and /system partitions. Having root access also allows you to run an entirely different class of third-party applications and apply deep, system-level modifications. And by proxy, you may also be able to access certain device features that would otherwise be inaccessible or use existing features in new ways.
Having root access isn’t the end all-be all of device modification–that title is usually reserved for fully unlocked bootloaders and S-Off. That said, root access is generally the first step on your journey to device modification. As such, root access is often used to install custom recoveries, which then can be used to flash custom ROMs, kernels, and other device modifications. Root access also enables users to install the powerful and versatile Xposed Framework, which itself acts as a gateway to easy, non-destructive device modification.
BY 👉@Leave89
♠️Heartbleed bug♠️
🔺About the heartbleed bug
The secret keys can be leaked from the service or hosting provider, which allows an attacker to decrypt any encrypted traffic to the web server, such as passwords. The attacker can then use e.g. the credentials to authorize as the user. Off course all other confidential or private information is exposed by this security flaw as well. To point out the seriousness of this vulnerability, some of the most known companies that has been exposed to the heartbleed bug is: Google, Yahoo and Instagram. It still haven’t been confirmed if Facebook was affected by the Heartbleed bug
🔺About the heartbleed bug
The secret keys can be leaked from the service or hosting provider, which allows an attacker to decrypt any encrypted traffic to the web server, such as passwords. The attacker can then use e.g. the credentials to authorize as the user. Off course all other confidential or private information is exposed by this security flaw as well. To point out the seriousness of this vulnerability, some of the most known companies that has been exposed to the heartbleed bug is: Google, Yahoo and Instagram. It still haven’t been confirmed if Facebook was affected by the Heartbleed bug