Proxy Chaining

 

A proxy is a server that acts as a gateway between your computer and your destination (website, IRC chat, etc.). These proxies receive requests from users to view, for example, a web page. The proxy will then forward the request to the internet, find your requested page,then send the web page back to you, the user. Most proxies come with a cache (sounds like “cash”) feature that saves former websitesthat were visited on that proxy. Think of cache as a proxy’s storage room. Each site that you make the proxy visit, it saves in its ownstorage area (cache). So if the user or someone else requests the same site again later on, the proxy will go back into its cache, find theweb page and send it back to the user. This saves time because the proxy doesn’t have to go search the Internet for the web page. It just pulls the site out of its cache.

Metasploit

Metasploit took the security world by storm when it was released in 2004. It is an advanced open-source platform for developing, testing, and using exploit code. The extensible model through which payloads, encoders, no-op generators, and exploits can be integrated has made it possible to use the Metasploit Framework as an outlet for cutting-edge exploitation research. It ships with hundreds of exploits, as you can see in their list of modules. This makes writing your own exploits easier, and it certainly beats scouring the darkest corners of the Internet for illicit shellcode of dubious quality. One free extra is Metasploitable, an intentionally insecure Linux virtual machine you can use for testing Metasploit and other exploitation tools without hitting live servers.

Metasploit was completely free, but the project was acquired by Rapid7 in 2009 and it soon sprouted commercial variants. The Framework itself is still free and open source, but they now also offer a free-but-limited Community edition, a more advanced Express edition ($3,000 per year per user), and a full-featured Pro edition ($15,000 per user per year). Other paid exploitation tools to consider are Core Impact (more expensive) and Canvas (less).

The Metasploit Framework now includes an official Java-based GUI and also Raphael Mudge’s excellent Armitage. The Community, Express, and Pro editions have web-based GUIs. For downloads and more information, visit the Metasploit homepage.

 

Download

Aircrack-ng

Aircrack-ng

Aircrack is a suite of tools for 802.11a/b/g WEP and WPA cracking. It implements the best known cracking algorithms to recover wireless keys once enough encrypted packets have been gathered. . The suite comprises over a dozen discrete tools, including airodump (an 802.11 packet capture program), aireplay (an 802.11 packet injection program), aircrack (static WEP and WPA-PSK cracking), and airdecap (decrypts WEP/WPA capture files). For downloads and more information, visit the Aircrack homepage.

 

Download

 

Nessus Vulnerability Scanner

Nessus is one of the most popular and capable vulnerability scanners, particularly for UNIX systems. It was initially free and open source, but they closed the source code in 2005 and removed the free “Registered Feed” version in 2008. It now costs $1,200 per year, which still beats many of its competitors. A free “Home Feed” is also available, though it is limited and only licensed for home network use.

Nessus is constantly updated, with more than 46,000 plugins. Key features include remote and local (authenticated) security checks, a client/server architecture with a web-based interface, and an embedded scripting language for writing your own plugins or understanding the existing ones. The open-source version of Nessus was forked by a group of users who still develop it under the OpenVAS name. For downloads and more information, visit the Nessus homepage.

Download

 

Wireshark

Wireshark (known as Ethereal until a trademark dispute in Summer 2006) is a fantastic open source multi-platform network protocol analyzer. It allows you to examine data from a live network or from a capture file on disk. You can interactively browse the capture data, delving down into just the level of packet detail you need. Wireshark has several powerful features, including a rich display filter language and the ability to view the reconstructed stream of a TCP session. It also supports hundreds of protocols and media types. A tcpdump-like console version named tshark is included. One word of caution is that Wireshark has suffered from dozens of remotely exploitable security holes, so stay up-to-date and be wary of running it on untrusted or hostile networks (such as security conferences). For downloads and more information:

Download

 

Google Dorks for SQL Injection

 

This is a list of dorks you can use to help you find SQL injection vulnerable websites using google search. Simply goto google and typeinurl:dorkhere

trainers.php?id=
article.php?ID=
play_old.php?id=
declaration_more.php?decl_id=
Pageid=
games.php?id=
newsDetail.php?id=
staff_id=
historialeer.php?num=
product-item.php?id=
news_view.php?id=
humor.php?id=
communique_detail.php?id=
sem.php3?id=
opinions.php?id=
spr.php?id=
pages.php?id=
chappies.php?id=
prod_detail.php?id=
viewphoto.php?id=
view.php?id=
website.php?id=
hosting_info.php?id=
gery.php?id=
detail.php?ID=
publications.php?id=
Productinfo.php?id=
releases.php?id=
ray.php?id=
produit.php?id=
pop.php?id=
shopping.php?id=

How To Setup and Use Tor Browser

 

Setup and Use Tor Browser

What you need:

• Tor Browser Bundle – http://www.torproject.org/download/

1. Download the Tor Browser Bundle from the link above. It requires no installation, simply extract it and run.
2. Make sure Vidalia is working. Vidalia indicates Tor is running via the green onion icon in your task bar, or a dark onion icon with an X if it is not. You can start or stop this by right clicking the icon and choosing start or stop.
3. Try using your browser with Tor and make sure your IP is being anonymized. You can do this by visiting http://check.torproject.org (if you’re using a firewall, make sure you allow local application connections to local port 8118 and 9050, and outgoing connections on TCP port 80 and 443.)
4. Using Tor alone isn’t enough to be completely anonymous. To ensure your privacy, it is highly recommended you disable all browser plugins such as: Java, Flash, ActiveX, RealPlayer, Quicktime, and Adobe’s PDF plugin.
5. Disable cookies when possible, as malicious websites can use them to track your browsing history. Always use HTTPS instead of HTTP when available.
6. In the Firefox browser, goto Tools > Options > …
7. …Content > Uncheck Enable Javascript
8. …Privacy > History settings changed to Use custom settings for history
9. …Privacy > Uncheck all but Automatically start Firefox in private browsing session
10. Tools > Add-ons > Torbutton/Options > Security Settings > …
11. …Dynamic Content > Check Disable updates during Tor usage
12. …Dynamic Content > Check Close all Tor windows and tabs on toggle
13. …Dynamic Content > Check Close all Non-Tor windows and tabs on toggle
14. …History > Check Block history reads during Non-Tor
15. …History > Check Block history writes during Non-Tor
16. …History > Check Clear history on Tor toggle
17. …Forms > Check Block password+form saving during Non-Tor
18. …Cookies > Check Clear cookies on Tor toggle
19. …Startup > Uncheck Tabs loaded in Non-Tor
20. …Shutdown > Check Clear cookies during any browser shutdown
21. …Headers > Check Don’t send referer during Tor usage
22. Navigate in Firefox > Navigation Bar > …
23. …about:config > privacy.clearOnShutdown.passwords change value to true
24. …about:config > privacy.clear.OnShutdown.siteSettings change value to true
25. …about:config > network.http.keep-alive.timeout change value to 600
26. …about:config > network.http.max-persistent-connections-per-proxy change value to 16
27. …about:config > network.http.pipelining change value to true
28. …about:config > network.http.pipelining.maxrequests change value to 8
29. …about:config > network.http.proxy.pipelining change value to true
30. …about:config > network.http.sendRefererHeader change value to 0
31. …about:config > network.http.sendSecureXSiteReferer change value to false
32. …about:config > network.prefetch-next change value to false
33. The following steps are to be applied in …Tor BrowserDataPolipopolipo.conf
34. censorReferer change value to true
35. serverMaxSlots change value to 32
36. maxConnectionRequests change value to 3000
37. maxPipelineTrain change value to 32
38. dontIdentiyToClients change value to true
39. Use the following websites to check your anonymity:

• http://decloak.net
• http://anonymous-proxy-servers.net/en/anontest
• http://deanonymizer.com
• http://panopticlick.eff.org
• http://browserspy.dk

1. Configure Tor as a non-exit relay by going to Vidalia Settings > Sharing > Check Relay Traffic for the Tor network > Exit Policies > Uncheck all

You are now able to browse in privacy!

What is the Tor Browser Bundle?

 

Tor Browser Bundle

The Tor software protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, it prevents the sites you visit from learning your physical location, and it lets you access sites which are blocked.

The Tor Browser Bundle lets you use Tor on Windows, Mac OS X, or Linux without needing to install any software. It can run off a USB flash drive, comes with a pre-configured web browser to protect your anonymity, and is self-contained.

 

https://www.torproject.org/projects/torbrowser.html.en

 

 

The Little Black Book of Computer Viruses: The Basic Technology (PDF) $3.99

 

Little Black Book of Computer Viruses

The Little Black Book of Computer Viruses has seen 5 years in print.

Download

How To Lock A Folder

 

1. Open Notepad and Copy code given below into it.