Posts

THINGS TO DO AFTER INSTALLING KALI LINUX PART-1

Image
1. Enable sound: Most of them have this problem. pulseaudio -D It will get back your sound. 2. Changing repository: gedit /etc/apt/sources.list For kali rolling ,copy and paste the following in sources.list file. deb http: // http.kali.org / kali kali-rolling main contrib non-free # For source package access, uncomment the following line # deb-src http://http.kali.org/kali kali-rolling main contrib non-free remove "#" in 3rd line to uncomment. save and exit. Check for the latest repository here: https://docs.kali.org/general-use/kali-linux-sources-list-repositories  3. Update kali linux: type the below code apt-get update && apt-get upgrade -y && apt-get dist-upgrade It'll take some time. 4. Adding a standard user: Kali by default logs in as root. It is always better to use a second user. You can create a standard user. (But you will have to use " sudo " for most of the commands) useradd -m <user name> ...

INSTALL TIGHTVNC ON KALI LINUX RASPBERRY PI

Image
Install TightVNC server using the following command apt-get install tightvncserver Run VNCserver to generate the configuration files. vncserver :1 VNC sessions are not linked to Linux user authentication.It is just protected by a password.So, it is better to change your password. Change your password using vncpasswd Run the command to check the VNC connection netstat -tupln Use a VNC application such as VNC CONNECT and login using the PI's IP Address. Download the  VNC CONNECT   To run VNC over SSH, we can create a SSH tunnel. Start your VNC server vncserver :1 -geometry 1280x800 -depth 16 -localhost -nolisten tcp -locahost option will ensure VNC port is listening only on local interface. -nolisten tcp - X Server will not listen on the network. Now, create a SSH tunnel  ssh -L 5901:localhost:5901 -N -f <user>@<ip> Any connection to this port will be tunneled by SSH. ENABLE AT STARTUP To...

WHERE IS PROFILE VIEW COUNT??

Image
Google plus had a metric "VIEWS" to keep track of view counts of google profiles and pages. That number counts how many times your profile, contents, photos, posts and the page has been viewed by other people. In this new version of google plus, view count was REMOVED . So, we cant get it back until there's any new update from google.

ENABLE AUTOSTART FOR X11VNC

Image
ENABLING AUTOSTART FOR X11VNC ON KALI LINUX RASPBERRY PI TO INSTALL VNC check my last post INSTALL X11VNC ON KALI LINUX RASPBERRY PI   O nce you've started the service, it'll run until you stop it or reboot. To Autostart it during BOOT , follow these steps. Create a file "sharex11vnc" in the directory /usr/local/bin Open a terminal, type cd /usr/local/bin this will take you to that directory. To create a file, type nano sharex11vnc Enter the following,   #!/bin/sh x11vnc -ncache 10 -auth guess -repeat -nap -loop -forever -rfbauth ~/.vnc/passwd -desktop "VNC ${USER}@${HOSTNAME}"|grep -Eo "[0-9]{4}">~/.vnc/port.txt # comment this out if you dont want a pop up telling you which port you're using zenity --info --text="Your VNC port is 'cat~/.vnc/port.txt'" press Ctrl+x then press "y" then hit Enter . This will save the file. This script will run the x11vnc during boot. Once t...

INSTALL X11VNC ON KALI LINUX RASPBERRY PI

Image
Once your PI is  configured, update it.  apt-get update  apt-get upgrade After everything is updated, install x11vnc by typing apt-get install x11vnc  After it is installed, set up a password to connect to your PI. Type, x11vnc -storepasswd Enter your password and press enter and you're done. To connect through vnc, first you need to start the service.Type the following command to start it. x11vnc -ncache 10 -auth guess -nap -forever -loop -repeat -rfbauth /root/.vnc/passwd -rfbport 5900 -noncache Use a VNC application such as VNC CONNECT and login using the PI's IP Address. Download the VNC CONNECT   https://www.realvnc.com/download/vnc/ CHECK MY   ENABLE AUTOSTART FOR X11VNC    TO AUTOSTART IT DURING BOOT

AUTOSTART SSH ON RASPBERRY PI 3

Image
Due to Security reasons now SSH service is disabled by default. We can enable is by   service ssh start If we do not have a display to connect through HDMI, we have to use SSH. To connect through SSH, First the SSH service should be running on the system. To Auto start SSH during boot, we can just add a file named " ssh " without specifing any extension. Follow these steps  Create an Empty File, with name ssh . Open a Notepad, click on Save As In File Name field, type "ssh"  (with double quotes) In Save as type field,  select " All files ". So it creates a file without any extention. Connect your Pi's SD card to your computer, Open the drive boot (In my case its boot, it may vary.Please check for the proper drive), and paste the ssh file. Insert SD card into your PI and REBOOT. And you should be good to connect through SSH.

INSTALLING KALI LINUX 2017 ON RASPBERRY PI 3

Image
Installing kali 2017 on Raspberry pi 3 Installing kali is pretty simple. Use a 8/16gb sd card so that there’ll no complications. Follow these steps, Download the official Kali Linux image for Raspberry pi.                     https://www.offensive-security.com/kali-linux-arm-images/ Extract the Downloaded file. Use WinRAR to extract. Download WinRAR from               http://www.rarlab.com/download.htm   Write the Image to the SDcard. Use Win32Disk Imager. Select the correct drive and click on write. Download Win32Disk Imager from                  https://sourceforge.net/projects/win32diskimager/ Once the Image is written, Insert it into the Pi and boot. Use a HDMI cable with a mouse and keyboard to access it.                       ...

WannaCry Ransomware : What is it and How to Protect against it

Image
The  WannaCry  ransomware burst into the spotlight over the weekend as reports of infections streamed in from around the globe. This has affected systems in more than 150 countries with more than 230,000 computers infected. What is Ransomware? Ransomware is a type of malicious software(computer virus) that encrypts and blocks access to data until a ransom is paid. It usually spreads via spam emails and malicious download links and displays a message requesting payment to decrypt it. The  WannaCry  ransomware A.K.A. Wanna Decryptor, uses a leaked NSA exploit Eternal Blue that targets Windows SMB service which can be used to hijack computers running unpatched, vulnerable Microsoft Windows operating system. The ransomware that has affected systems in more than 150 countries recently. It leverages Social Engineering/Spear Phishing as their attack vector by sending some malicious links or a PDF file, which when clicked, installs the ransomware....

TROJAN

Image
W hy do we call this kind of malware a “Trojan horse?” Because in Greek mythology, the Greeks won the Trojan War by building a hollow horse, filling it with soldiers and leaving it for the Trojans, supposedly as a gift. A Trojan priest was suspicious of the “gift” and said to “beware of Greeks bearing gifts” but the Trojans ignored him and brought the horse through the gates into the city. Later, when the Trojans were asleep the Greek soldiers jumped out, captured the city and burned it to the ground. And so the “Trojan horse” came about. A Trojan horse (also known as a Trojan) is one of several kinds of malware you might find on your computer after a successful virus attack. Trojans are a particularly sneaky kind of malware because they look harmless or even beneficial and trick you into installing them on your system. Trojans fall into the category of “social engineering” attacks because they trick people. Trojans are typically used by cybercriminals for online fraud and ...

TESLACRYPT

Image
TeslaCrypt  also know as  EccKrypt  is one of the ransomwares that is widely seen . It encrypts certain files and demands ransom to decrypt the files. TeslaCrypt uses AES symmetric algorithm to encrypt files. Teslacrypt 4 features  RSA  algorithm for encrypting data. TeslaCrypt evolved from a ransomware targeting gamers, but this is not only a  severe threat, but also one that is capable of far wider data leakage. The first version of TeslaCrypt emerged in March 2015, then TeslaCrypt2.0 was launched in November 2015.They launched TeslaCrypt 3.0 in January 2016, and now the fourth version is out. TeslaCrypt is spread using exploit kits such as Angler exploit kit, Neutrino exploit kit. Using Angler, Adobe flash is exploited then it downloads TeslaCrypt as a payload. Using Neutrino, it redirects users to malicious pages that hosts exploit files targeting various vulnerabilities. Once exploited, it delivers a Trojan downloader an...

STUXNET

Image
T hree years after it was discovered, Stuxnet, the first publicly disclosedcyberweapon, continues to baffle military strategists, computer security experts, political decision-makers, and the general public. A comfortable narrative has formed around the weapon: how it attacked the Iranian nuclear facility at Natanz, how it was designed to be undiscoverable, how it escaped from Natanz against its creators’ wishes. Major elements of that story are either incorrect or incomplete. That’s because Stuxnet is not really one weapon, but two. The vast majority of the attention has been paid to Stuxnet’s smaller and simpler attack routine — the one that changes the speeds of the rotors in a centrifuge, which is used to enrich uranium. But the second and “forgotten” routine is about an order of magnitude more complex and stealthy. It qualifies as a nightmare for those who understand industrial control system security. And strangely, this more sophisticated attack came first. The simpler, m...

METAPHOR- Another stagefright

Image
METAPHOR  - “ N orthBit” is a Israeli software research company, claimed that it had properly exploited the Android bug and  is described as the " W orst E ver D iscovered". S tagefright is a multimedia playback library, which is written in C++. It is built inside the Android OS to process, record and play multimedia files such as videos. Millions of Android users could be at risk from this ' Stagefright ' flaw. Researchers claim to have made a working exploit that can remotely take control of a device and spy on victims within 10 seconds. Metaphor give hackers the ability to inject malware that can copy, steal and delete data on the device, take over the smartphone's microphone, camera for spying purposes and even track a user's movements via GPS. HOW IT WORKS : Victims are sent a message linking to a website containing a video file that crashes the phone's media software and force it to restart.  Then, Jav...

USB THIEF

Image
T he Researchers at ESET have found a data - stealing USB Trojan which leaves no trace on the compromised system. Nicknamed as USB Thief (detected as Win32/PSW.Stealer.NAI trojan), this is the most complex trojan ever discovered, it uses encryption and self-protection procedures to infect and hide. The trojan binds on the USB stick using the USB drive's details as an encryption key using  AES 128 encryption. If the trojan is copied to another USB, the encryption breaks  and the content cannot be determined. The malware injects itself as a plugin or a dynamically linked library (DLL) file. When the victim launches the app from an infected USB, the Trojan starts executing in the background. As the malware is executed using a USB device, it does not leave any trace on the machine. The Trojan consists of six files. Four files are executables and the other two contain the configuration data. To protect it from reverse engineering, it uses two techniques. ...