HTTP (Hypertext Transfer Protocol)

HTTP (Hypertext Transfer Protocol) is the set of rules for transferring files (text, graphic images, sound, video, and other multimedia files) on the

World Wide Web. As soon as a Web user opens their Web browser, the user is indirectly making use of HTTP. HTTP is an application protocol that runs on top of the TCP/IP suite of protocols (the foundation protocols for the Internet).

HTTP concepts include (as the Hypertext part of the name implies) the idea that files can contain references to other files whose selection will elicit
additional transfer requests. Any Web server machine contains, in addition to the Web page files it can serve, an HTTP daemon, a program that is designed to wait for HTTP requests and handle them when they arrive. Your Web browser is an HTTP client, sending requests to server machines.
When the browser user enters file requests by either “opening” a Web file (typing in a Uniform Resource Locator or URL) or clicking on a hypertext link, the browser builds an HTTPrequest and sends it to the Internet Protocol address (IP address) indicated by the URL. TheHTTP daemon in the destination server machine receives the request and sends back the requested file or files associated with the request. (A Web page often consists of more than one file.)

Read More

Computer Ports – Name and Location Of Connections On Computer

For those of you who do not know what the connectors or connections on the back of your computer are called or where they are located… We have created a number of Computer Port Charts and other computer peripheral charts to help you identify the common connectors and ports on the back of your desktop computer or laptop. The charts include location for sound, audio, video, usb, serial and parallel ports. Included are separate charts forhard drives, desktop ram memory, laptop ram memory and a chart that explains everything on the back of your computer by name, location and illustration.

Computer ports are connecting points or interfaces with peripheral devices that work to communicate with your computer.

Computer Ports Identification Chart

Most Common PHYSICAL computer ports:

– USB Port (Universal Serial Bus): Created in the mid 1990’s to standardize communications between computers and peripheral devices. USB ports can be used as a power supply for different devices like cellphones, cameras, laptop coolers and more. There are four different types of USB computer ports: USB 1.0 and 1.1 released between 1996 and 1998 with a speed range starting from 1.5 Mb/sec up to 12 Mb/sec. Then USB 2.0 was released in 2000 with a maximum speed of 480 Mb/sec. Finally USB 3.0 was released in 2008 with a maximum speed of 5 Gb/sec.

– Ethernet / Internet Ports: were first introduced in 1980 to standardize the local area networks (LAN). Internet ports use RJ45 connectors and have speeds between 10 Mb/sec – 100 Mb/sec – 1 Gb/sec – 40 Gb/sec – 100 Gb/sec.

– IEEE 1394 Ports: This technology was developed by Apple between 1980 and 1990 with the name “FireWire” and it is the equivalent of the USB.

– TRS Ports: Used for receiving and transmitting analog signals mainly audio.

– PS/2 Ports: Introduced in 1987 to replace the serial mouse and keyboard.

– Serial Port: Uses the DB9 socket connector and transfers information one bit at a time between the computer and external peripherals.

– VGA ports (Video Graphics Array): This port has 15 pins on three rows and it is used for connecting the monitor with the video adapter from the computer motherboard to display video on your monitor.

– HDMI (High Definition Multimedia Interface): Ports on computer to transmit High Definition (1080p+) Video from the computer video card to the monitor.

– DVI (Digital Visual Interface): Computer ports used to transmit uncompressed digital video data.

Common Computer Ports Chart

Desktop Ram Identification Chart

Hard Drive Identification Chart

Notebook RAM Memory Identification Chart

Back of Computer Port Identification Illustration

Read More

Remote Desktop Protocol (RDP)

Remote Desktop Protocol (RDP) is a secure network communications protocol for Windows-based applications running on a server.

RDP allows network administrators to remotely diagnose and resolve problems encountered by individual subscribers. RDP is available for most versions of the Windows operating system as well as Mac OS X. An open source version is also available.

Noteworthy properties of RDP include encryption, smart card authentication, bandwidth reduction, resource sharing, the ability to use multiple displays and the ability to disconnect temporarily without logging off. RDP also allows redirection of functions such as audio and printing.

RDP can support up to 64,000 independent channels for data transmission. Data can be encrypted using 128-bit keys and the bandwidth reduction feature optimizes the data transfer rate in low-speed connections.

The protocol has presented some security issues, however. For instance, if an administrator opens a thin-client connection between computers, an attacker who is able to break into the RDP connection would have administrator privileges on both computers. It is generally recommended that RDP only be used when it is absolutely necessary and that both the administrator and end user run with the lowest level of privileges possible.

Read More

ImageTragick Exploit Used in Attacks to Compromise Sites via ImageMagick 0-Day

Two Russian security researchers revealed a few hours ago a vulnerability in the ImageMagick image processing library deployed with countless Web servers, a zero-day which they say has been used in live attacks.

Nicknamed ImageTragick and identified via the CVE-2016–3714 vulnerability ID, the issue has a massive attack surface, since alongside the GD library, ImageMagick is one of the most used image processing toolkits around.

Attackers can take over servers via ImageMagick

According to the two researchers, there are more than one vulnerabilities in ImageMagick, but the one they call ImageTragick has been used to compromise websites via malicious images uploaded on the server.

The zero-day, which they say is trivial to execute, is still unpatched, but the ImageMagick project has been notified today.

Usually such sensitive bug fixing operations would be carried out in complete privacy, but their decision to go public was influenced by the fact that attackers used the zero-day to compromise servers, and the researchers wanted to give webmasters the opportunity to mitigate the attacks.

Mitigation instructions are available on ImageTragick’s website. Proof-of-concept code (Metasploit modules) will be published later on today.

Hackers only need to find websites that allow users to upload photos

Because ImageMagick is at the base of many image processing libraries and modules, used across a large number of programming languages like Ruby, JavaScript, PHP, Java, and more, any website, running on any platform is vulnerable to this zero-day.

The only condition is that users are allowed to upload files to the server, and a large number of websites do via “user avatar” options.

The researchers declined to reveal any clues regarding the exploitation routine, but based on the mitigation advice, it involves magic bytes and ImageMagick coders.

Magic bytes are the first few bytes of a file used programmatically to identify the image type (GIF, JPEG, PNG, etc.). ImageMagick coders are ImageMagick modules that read and write data to specific image file types.

The researchers said that there’s an RCE (Remote Code Execution) bug somewhere in there, that allows attackers to write code to the server. If an attacker is skilled enough, he can upload a malicious image, which uses the zero-day to write a webshell to disk and uses it to take over control of the entire server.

UPDATE: The first exploits have surfaced here and here.

Read More

Social Engineering: The Art of Human Hacking

Kevin Mitnick the most famous all time best top 1 social engineers proved how social engineers dangerous and can Hack Human with the art of social engineering, as the book name implies this books reveal all the secret of social engineering. this is very intresting ebook rather then other because for computer hacking you need the computer device, Internet and a knowledge so you know what you are going to do. but for social engineering you don’t need any of this, you need to learn how to manipulate people mind so they will do what you want to do from them.

DOWNLOAD LINK:
Click Here

Read More

hashcat – Multi-Threaded Password Hash Cracking Tool

hashcat claims to be the world’s fastest CPU-based password recovery tool, while not as fast as GPU powered hash brute forcing (like CUDA-Multiforcer), it is still pretty fast.

hashcat was written somewhere in the middle of 2009. Yes, there were already close-to-perfect working tools supporting rule-based attacks like “PasswordsPro”, “John The Ripper”. However for some unknown reason, both of them did not support multi-threading. That was the only reason to write hashcat: To make use of the multiple cores of modern CPUs.

Granted, that was not 100% correct. John the Ripper already supported MPI using a patch, but at that time it worked only for Brute-Force attack. There was no solution available to crack plain MD5 which supports MPI using rule-based attacks.

Hashcat, from its first version, v0.01, was called “atomcrack”. This version was very poor, but at least the MD5 kernel was written in assembler utilizing SSE2 instructions and of course it was multi-threaded. It was a simple dictionary cracker, nothing more. But it was fast. Really fast. Some guys from the scene become interested in it and after one week there were around 10 beta testers. Everything worked fine and so requests for more algorithm types, a rule-engine for mutation of dictionaries, a windows version and different attack modes were added. These developments took around half a year, and were completely non-public.

Features

• Multi-Threaded
• Multi-Hash (up to 24 million hashes)
• Multi-OS (Linux, Windows and OSX native binaries)
• Multi-Algo (MD4, MD5, SHA1, DCC, NTLM, MySQL, …)
• SSE2, AVX and XOP accelerated
• All Attack-Modes except Brute-Force and Permutation can be extended by rules
• Very fast Rule-engine
• Rules compatible with JTR and PasswordsPro
• Possible to resume or limit session
• Automatically recognizes recovered hashes from outfile at startup
• Can automatically generate random rules
• Load saltlist from external file and then use them in a Brute-Force Attack variant
• Able to work in an distributed environment
• Specify multiple wordlists or multiple directories of wordlists
• Number of threads can be configured
• Threads run on lowest priority
• Supports hex-charset
• Supports hex-salt
• 80+ Algorithms implemented with performance in mind

DOWNLOAD LINK:

hashcat-0.46.7z

Read More

Radare – The Reverse Engineering Framework

Radare started out as a simple command line interface for a hexadecimal editor supporting 64 bit offsets to make searches and recovering data from hard-disks. It has evolved into a project that is composed of a hexadecimal editor as the central point of the project with assembler/disassembler, code analysis, scripting features, analysis and graphs of code and data and easy unix integration. Essentially, it has become a reverse engineering framework, with plugins and much more.

radare2 itself is the core of the hexadecimal editor and debugger. Allows to open any kind of file from different IO access like disk, network, kernel plugins, remote devices, debugged processes and handle any of them as if they were a simple plain file.

It implements an advanced command line interface for moving around the file, analyzing data, disassembling, binary patching, data comparision, searching, replacing, scripting with Ruby, Python, Lua and Perl.

Features

• CLI and visual modes
• Yank and paste
• Perl/Python scripting support
• Virtual base address for on-disk patching
• vi-like environment and command repetition (3x)
• Debugger for x86-linux/bsd and arm-linux
• Data bookmarking (flags)
• Scripting (no branches or conditionals yet)
• Own magic database (rfile)
• Little/big endian conversions
• Data search
• Show xrefs on arm, x86 and ppc binaries
• Data type views
• Data block views
• Visual mode commands

DOWNLOAD LINK:
radare2-0.9.7.tar.xz

Read More