How to detect a hacker attack

2/21/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVO9MiHoA2BShqxOQ9TrA8TP83EYUyW5W2GSitvqe6PpbI-Alo8Qs4ReMfq3R4iUKT5Aqrs_lHPjUw8w_fxxC-6sxFEfh5z85DI_ORvpfXpqgWcpl8FLjfB_1E03NPqlidDsNzozyzfgJf/s1600/Hackers-attack.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Detect a hacker attack" border="0" height="311" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVO9MiHoA2BShqxOQ9TrA8TP83EYUyW5W2GSitvqe6PpbI-Alo8Qs4ReMfq3R4iUKT5Aqrs_lHPjUw8w_fxxC-6sxFEfh5z85DI_ORvpfXpqgWcpl8FLjfB_1E03NPqlidDsNzozyzfgJf/s1600/Hackers-attack.jpg" title="How to detect a hacker attack" width="400" /></a></div>
<br />
Most computer <a href="http://rahlabs.blogspot.in/search/label/Vulnerability" target="_blank">vulnerabilities</a> can be exploited in a variety of ways. Hacker attacks may use a single specific <a href="http://rahlabs.blogspot.in/search/label/Exploit" target="_blank">exploit</a>, several exploits at the same time, a misconfiguration in one of the system components or even a backdoor from an earlier attack.

Due to this, detecting hacker attacks is not an easy task, especially for an inexperienced user. This article gives a few basic guidelines to help you figure out either if your machine is under attack or if the security of your system has been compromised. Keep in mind just like with viruses, there is no 100% guarantee you will detect a hacker attack this way. However, there's a good chance that if your system has been hacked, it will display one or more of the following behaviours.
<br />
<h3>
Windows machines:</h3>
<ul>
<li><i>Suspiciously high outgoing network traffic</i>. If you are on a dial-up account or using <b>ADSL</b> and notice an unusually high volume of outgoing network (traffic especially when you computer is idle or not necessarily uploading data), then it is possible that your computer has been compromised. Your computer may be being used either to send spam or by a network worm which is replicating and sending copies of itself. For cable connections, this is less relevant - it is quite common to have the same amount of outgoing traffic as incoming traffic even if you are doing nothing more than browsing sites or downloading data from the Internet.</li>
<li><i>Increased disk activity</i> or suspicious looking files in the root directories of any drives. After hacking into a system, many hackers run a massive scan for any interesting documents or files containing passwords or logins for bank or epayment accounts such as PayPal. Similarly, some worms search the disk for files containing email addresses to use for propagation. If you notice major disk activity even when the system is idle in conjunction with suspiciously named files in common folders, this may be an indication of a system hack or malware infection.</li>
<li><i>Large number of packets which come from a single address</i> being stopped by a personal firewall. After locating a target (eg. a company's IP range or a pool of home cable users) hackers usually run automated probing tools which try to use various exploits to break into the system. If you run a personal firewall (a fundamental element in protecting against hacker attacks) and notice an unusually high number of stopped packets coming from the same address then this is a good indication that your machine is under attack. The good news is that if your personal firewall is reporting these attacks, you are probably safe. However, depending on how many services you expose to the Internet, the personal firewall may fail to protect you against an attack directed at a specific FTP service running on your system which has been made accessible to all. In this case, the solution is to block the offending IP temporarily until the connection attempts stop. Many personal firewalls and IDSs have such a feature built in.</li>
<li>Your resident antivirus suddenly starts reporting that <i>backdoors or trojans</i> have been detected, even if you have not done anything out of the ordinary. Although hacker attacks can be complex and innovative, many rely on known trojans or backdoors to gain full access to a compromised system. If the resident component of your antivirus is detecting and reporting such malware, this may be an indication that your system can be accessed from outside.</li>
</ul>
<h3>
Unix machines:</h3>
<ul>
<li><i>Suspiciously named files</i> in the <span class="system pop">/tmp folder</span>. Many exploits in the Unix world rely on creating temporary files in the <span class="system pop">/tmp</span> standard folder which are not always deleted after the system hack. The same is true for some worms known to infect Unix systems; they recompile themselves in the <span class="system pop">/tmp</span> folder and use it as 'home'.</li>
<li><i>Modified system binaries</i> such as '<span class="system pop">login</span>', '<span class="system pop">telnet</span>', '<span class="system pop">ftp</span>', '<span class="system pop">finger</span>' or more complex daemons, '<span class="system pop">sshd</span>', '<span class="system pop">ftpd</span>' and the like. After breaking into a system, a hacker usually attempts to secure access by planting a backdoor in one of the daemons with direct access from the Internet, or by modifying standard system utilities which are used to connect to other systems. The modified binaries are usually part of a rootkit and generally, are 'stealthed' against direct simple inspection. In all cases, it is a good idea to maintain a database of checksums for every system utility and periodically verify them with the system offline, in single user mode.</li>
<li>Modified <span class="system pop">/etc/passwd</span>, <span class="system pop">/etc/shadow</span>, or other system files in the /etc folder. Sometimes hacker attacks may add a new user in /etc/passwd which can be remotely logged in a later date. Look for any suspicious usernames in the password file and monitor all additions, especially on a multi-user system.</li>
<li><i>Suspicious services</i> added to <span class="system pop">/etc/services</span>. Opening a backdoor in a Unix system is sometimes a matter of adding two text lines. This is accomplished by modifying <span class="system pop">/etc/services</span> as well as <span class="system pop">/etc/ined.conf</span>. Closely monitor these two files for any additions which may indicate a backdoor bound to an unused or suspicious port. </li>
</ul>
<a href="http://securelist.com/">Source</a>
</div>

Most computer vulnerabilities can be exploited in a variety of ways. Hacker attacks may use a single specific exploit , several exploit...

Ubuntu 13.10 Kernel Exploit

2/21/2014 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUzKdvFGwYsPPLYutyQUQA5WqqWeneoTubm7ajR6GHLDx2fDjpWtdMVFfw0r0IiaoPWwrL18QXYDrLJuXY86Q4DupDSK1fXUR1wIh8RHJRib4C0e5B1JejWU7kH-8PG786QANPh5yxS8Xt/s1600/ubuntu+kernel+exploit.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Ubuntu 13.10 Kernel Exploit" border="0" height="187" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUzKdvFGwYsPPLYutyQUQA5WqqWeneoTubm7ajR6GHLDx2fDjpWtdMVFfw0r0IiaoPWwrL18QXYDrLJuXY86Q4DupDSK1fXUR1wIh8RHJRib4C0e5B1JejWU7kH-8PG786QANPh5yxS8Xt/s1600/ubuntu+kernel+exploit.jpg" title="Ubuntu 13.10 Kernel Exploit" width="400" /></a></div>
<br />
A security issue affects Ubuntu 13.10 releases of Ubuntu and its derivatives<br />
<b>Saran Neti</b> reported a flaw in the ipv6 UDP Fragmentation Offload (UFI) in the Linux kernel. A remote attacker could exploit this flaw to cause a denial of service (panic). (<div class="highlight pop">CVE-2013-4563</div>)<br />
<b>Mathy Vanhoef</b> discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker could exploit this error to discover the original MAC address after a spoofing attack.  (<div class="highlight pop">CVE-2013-4579</div>
)<br />
<b>Andrew Honig</b> reported a flaw in the Linux Kernel's kvm_vm_ioctl_create_vcpu function of the Kernel Virtual Machine (KVM) subsystem. A local user could exploit this flaw to gain privileges on the host machine. (<div class="highlight pop">CVE-2013-4587</div>) Various other issues were also addressed.<br />
Andrew Honig reported a flaw in the apic_get_tmcct function of the Kernel Virtual Machine (KVM) subsystem if the Linux kernel. A guest OS user could exploit this flaw to cause a denial of service or host OS system crash. (<div class="highlight pop">CVE-2013-6367</div>)<br />
Andrew Honig reported an error in the Linux Kernel's Kernel Virtual Machine (KVM) VAPIC synchronization operation. A local user could exploit this flaw to gain privileges or cause a denial of service (system crash).<br />
Source:<a href="http://www.ubuntu.com/usn/usn-2117-1/" target="_blank">Ubuntu</a> </div>

Exploit Hacking Kernel Linux News OS Ubuntu Vulnerability Ubuntu 13.10 Kernel Exploit

A security issue affects Ubuntu 13.10 releases of Ubuntu and its derivatives Saran Neti reported a flaw in the ipv6 UDP Fragmentation ...

Google is monitoring Wikipedia

2/20/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgknqOI-N3IeaHx9v-_fDQLy5XS6Ba0Q1Nl77Izt2_JPJb2DXY89OgVyB0c-l8hvxfzz-Zj4B-WZqqkbgJv7rkqEaUDyIgFKsoumHsv_gBNZz-XRbHooZq8rxRo2nWmZlGdw65xZjhnKRIj/s1600/google+monitoring+wikipedia.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Google is monitoring Wikipedia" border="0" height="185" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgknqOI-N3IeaHx9v-_fDQLy5XS6Ba0Q1Nl77Izt2_JPJb2DXY89OgVyB0c-l8hvxfzz-Zj4B-WZqqkbgJv7rkqEaUDyIgFKsoumHsv_gBNZz-XRbHooZq8rxRo2nWmZlGdw65xZjhnKRIj/s1600/google+monitoring+wikipedia.jpg" title="Google is monitoring Wikipedia" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><br /></td></tr>
</tbody></table>
<br />
Thomas Steiner, a Customer Solutions Engineer at <a href="http://rahlabs.blogspot.in/search/label/Google" target="_blank">Google</a> Germany GmbH, Hamburg has created an application that shows in a very clear way, how much of Wikipedia entries are being created or edited by <a href="http://rahlabs.blogspot.in/search/label/Bots" target="_blank">bots</a>, versus humans. He's also written a paper describing his efforts and posted it on the preprint server arXiv.<br />
Many people may not realize it, but some of the information appearing on Wikipedia is put there by bots, rather than human beings. This is because Wikipedia has grown too large to be managed by people alone, especially when noting it's still mostly a volunteer effort.<br />
To keep entries coming and to keep them updated, bots have been created—they grab information from one place and post them into another, thus, they're not actually writers or composer, they're more like auditors updating files automatically. Also, many people may not know that the folks at Wikipedia have also created another information repository—Wikidata—it's a database whose sole purpose is to share data amongst the difference language versions of Wikipedia. If a user in the U.S. enters information about the results of the New York Marathon into a Wiki entry, for example, that data can be automatically ported to Wikidata, where other bots can retrieve it, convert it to the pertinent language and post it to another language version of Wikipedia—all rather seamlessly to readers.<br />
Because of all the automation, some have begun to wonder what portion of Wiki pages are generated by humans versus bots. That's where Steiner comes in—he's written an application that can be <a href="http://wikipedia-edits.herokuapp.com/" target="_blank"><b>accessed and used</b></a> by anyone to see—in real time—what percentage of pages are being written by humans, versus bots.<br />
The application also allows for noting other aspects of Wikipedia—a quick glance, for example reveals that bots are doing a lot more of the work adding information to pages in non-English speaking countries, which suggests that the majority of Wikipedia content is still being created by real human beings in the U.S. and the U.K. The application also monitors activity on Wikidata, for those who are interested and also displays the data for both in a way that shows which bots are most active.<br />
Steiner has also published the code for the application, making it open source. That should allow those who are interested in the murky world of bots to gain an insider's perspective, and perhaps, to add to the applications utility.<br />
<br />
<b>More information:</b> Bots vs. Wikipedians, Anons vs. Logged-Ins, arXiv:1402.0412 [cs.DL] <a href="http://arxiv.org/abs/1402.0412">arxiv.org/abs/1402.0412</a><br />
Abstract <br />
Wikipedia is a global crowdsourced encyclopedia that at time of writing is available in 287 languages. Wikidata is a likewise global crowdsourced knowledge base that provides shared facts to be used by Wikipedias. In the context of this research, we have developed an application and an underlying Application Programming Interface (API) capable of monitoring realtime edit activity of all language versions of Wikipedia and Wikidata. This application allows us to easily analyze edits in order to answer questions such as "Bots vs. Wikipedians, who edits more?", "Which is the most anonymously edited Wikipedia?", or "Who are the bots and what do they edit?". To the best of our knowledge, this is the first time such an analysis could be done in realtime for Wikidata and for really all Wikipedias—large and small. Our application is available publicly online at the URL this http URL, its code has been open-sourced under the Apache 2.0 license.<br />
Source: <a href="http://phys.org/" target="_blank">Phys</a></div>

Google News Wikipedia Google is monitoring Wikipedia

Thomas Steiner, a Customer Solutions Engineer at Google Germany GmbH, Hamburg has created an application that shows in a very clear ...

Millions of Vulnerable Android Devices Exposed

2/20/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFSeEUslTWF_FPNY8QRBlfYEWBqI3biHqeSj8sY52EGYd6y7xYKq2qTAzeIEUBBAM1fokSkJ_1dfEr8f7heqeuU0xtODAX1sGX-WoyyxPpsmsG7WFodo7p8TrPe1jk8rYPDN_qgnBENcAs/s1600/android-malware.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFSeEUslTWF_FPNY8QRBlfYEWBqI3biHqeSj8sY52EGYd6y7xYKq2qTAzeIEUBBAM1fokSkJ_1dfEr8f7heqeuU0xtODAX1sGX-WoyyxPpsmsG7WFodo7p8TrPe1jk8rYPDN_qgnBENcAs/s1600/android-malware.jpg" width="400" /></a></div>
<br />
Android devices prior to version 4.2.1 of the operating system—70 percent of the phones and tablets in circulation—have been vulnerable to a serious and simple remote code execution vulnerability in the Android browser for more than 93 weeks.<br /><br />Metasploit recently added an exploit module that targets the vulnerability, which was patched in 4.2.2 released one year ago. However, with carriers and device makers reticent to be quick with updates and security patches, close to three-quarters of the Android user base is at risk for attack. For some perspective, Android Central reports that KitKat, the latest version of Android, has yet to hit 2 percent adoption.<br /><br />“I did a quick survey of the phones available today on the no-contract rack at a couple big-box stores, and every one that I saw were vulnerable out of the box,” said Rapid7 senior manager of engineering Tod Beardsley. “And yes, that’s here in the U.S., not some far-away place like Moscow, Russia.”<br /><br />The exploit module, built by contributors Joe Vennix and Joshua Drake, could enable access to the device camera, location data, information stored on a SD card and even the user’s address book. Drake said he was recently able to get code execution on Google Glass using the exploit.<br /><br />The attack exploits a vulnerability that was <a href="http://50.56.33.56/blog/?p=314" target="_blank">disclosed</a> in December 2012. The problem lies with the addJavascriptInterface in WebView. Applications are able to inject Java objects into WebView, including malicious JavaScript which can cause unwanted behavior such as sending expensive SMS messages to premium numbers or giving attackers access to data on the phone. JavaScript can also get around browser security controls, said researcher Neil Bergman, a security consultant who disclosed the vulnerability.<br /><br />Rapid7 said an attacker would need to be man-in-the-middle on a device in order to exploit it, something its new exploit module simplifies. The company demonstrates the exploit in a <a href="https://community.rapid7.com/community/metasploit/blog/2014/02/13/weekly-metasploit-update" target="_blank">video</a>, which is triggered in this case by a malicious QR code the victim scans with their Android smartphone and opens a command shell for the attacker.<br /><br />The best mitigation is to update Android to 4.2.2 or higher, but that isn’t always feasible for users. Device manufacturers and carriers control when updates are rolled out, despite the fact that Google is generally prompt with patches and updates.<br /><br />The carriers and manufacturers have been under fire from privacy and security experts and even the U.S. Federal Trade Commission. Last April, the American Civil Liberties Union asked the FTC to investigate four major carriers, accusing them of deceptive business practices and knowingly selling defective phones to consumers that are shy on security updates and patches. The ACLU requested that the FTC force carriers to warn customers about unpatched vulnerabilities, allow customers with vulnerable phones to escape their contracts without early termination penalties, and provide that customers may exchange at no cost their phones for another that receives regular security updates, or return the phone for a full refund.<br /><br />Last February, the FTC reached a damning settlement with device makers HTC America. The FTC forced HTC to enact expensive security enhancements that included regular security patches for Android devices, establish a security program that focuses on developer security, and submit to security assessments.</div>

Android Malwares Metasploit Vulnerability Millions of Vulnerable Android Devices Exposed

Android devices prior to version 4.2.1 of the operating system—70 percent of the phones and tablets in circulation—have been vulnerable ...

Win 100GB of Free OneDrive Storage

2/20/2014 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg86HugAtKxxTbrrwPJlnhiaSfMo0Z2B6m9vKRfbmYZLdayEwvWYNWSbkGN89QflDKU5JcNKupvMNndXlBpPuwkNolAISMaDoqnUSLcEHxNUlqh50KapZD8CherUF36zhYU5bBT6hreMA8/s1600/Win+100GB+of+Free+OneDrive+Storage.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg86HugAtKxxTbrrwPJlnhiaSfMo0Z2B6m9vKRfbmYZLdayEwvWYNWSbkGN89QflDKU5JcNKupvMNndXlBpPuwkNolAISMaDoqnUSLcEHxNUlqh50KapZD8CherUF36zhYU5bBT6hreMA8/s1600/Win+100GB+of+Free+OneDrive+Storage.jpg" width="400" /></a></div>
<br />
Microsoft yesterday rebranded SkyDrive to <a href="https://onedrive.live.com/about/en-us/" target="_blank">OneDrive</a>, so the company decided to give away 100 GB of storage for one year free of charge for 100,000 users.<br />
<br />
All prizes have been claimed really quickly on Twitter, so Microsoft has <a href="https://twitter.com/onedrive/status/436258376637747201" target="_blank">announced</a> a new contest that could bring users 100 GB of free storage in their accounts.<br />
<br />
Basically, you need to pay a visit to a Microsoft store, log in with your OneDrive credentials (or create an account if you don’t have one right now) and you get a chance to win the grand prize. Microsoft says that 10,000 users will be rewarded with the free storage, with the contest ending on February 23.<br />
<br />
By default, OneDrive comes with 7 GB of free storage, so this could be a really good way to keep more files in the cloud for one year without paying a cent for it.</div>

Cloud Storage Microsoft News OS Win 100GB of Free OneDrive Storage

Microsoft yesterday rebranded SkyDrive to OneDrive , so the company decided to give away 100 GB of storage for one year free of charge f...

How to take Backup of your Blog

2/05/2014 cyb3r.gladiat0r 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTVuHbfRD2MxETpzmVtJuXAmI21t8zPsIRjujyM-pex3g9TlCfgd-tp1oQNJDEcreDaiBX93_9SzKYjj-uoy7poH1oDs6t5XhbPuQ-rQg4-S-1Wd4aWEsMLMzu2xSyGbyaa4Ag_DBDcSc/s1600/backup-blogger-blog.jpg" imageanchor="1"><img border="0" height="198" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTVuHbfRD2MxETpzmVtJuXAmI21t8zPsIRjujyM-pex3g9TlCfgd-tp1oQNJDEcreDaiBX93_9SzKYjj-uoy7poH1oDs6t5XhbPuQ-rQg4-S-1Wd4aWEsMLMzu2xSyGbyaa4Ag_DBDcSc/s640/backup-blogger-blog.jpg" width="640" /></a></div>
Learn how to create a <a href="https://www.hackerschronicle.com/search/label/Backup">backup</a> of your blogger blog with a click. You can download the entire blog include posts and comments.<br />
The Import & Export feature in Blogger is now live and can be accessed from the Settings tab of your Blogger dashboard.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8El39C0MyIUp_c4Db6qZzyKR1e7pmAMOGPKjNwpYoIIlkJ-8uaK8fPE0wKuK09ZDzLwP1fv4_qoBtGlo56mFlIxpCDv-blRGA5tlAzgPkTQcVu1jzkH5rmXA3rTyW7thjKwYvl5p4Slk/s1600/blog-backup.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="201" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8El39C0MyIUp_c4Db6qZzyKR1e7pmAMOGPKjNwpYoIIlkJ-8uaK8fPE0wKuK09ZDzLwP1fv4_qoBtGlo56mFlIxpCDv-blRGA5tlAzgPkTQcVu1jzkH5rmXA3rTyW7thjKwYvl5p4Slk/s640/blog-backup.png" width="640" /></a></div>
With “Export Blog,” you can easily create a complete backup of your <a href="https://www.hackerschronicle.com/search/label/Blogging">Blogger</a> blog on to the hard drive and this may come handy in situations when you accidentally delete some old blog post or if <a href="https://www.hackerschronicle.com/search/label/Google">Google</a> blocks your blog due to policy violations – at least you’ll have a local copy of all the content that you may publish elsewhere.<br />
<br />
Other that creating a safe backup, you may also use the export (followed by import) function to merge multiple blogs into one.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA39zCanKO-7PjU8fV9Bb7leUppqmirGNfz3YFbwMF6_KVXu4IZbmS0KO7wvTLenoaS2En3dQnUS4eqQ2DovzyZ6RSaXZwqvlWQbj1v3CN4B3aBghtGiseN12Dwm_PL-UkRLvTnx6Pc3o/s1600/blog-backup-2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA39zCanKO-7PjU8fV9Bb7leUppqmirGNfz3YFbwMF6_KVXu4IZbmS0KO7wvTLenoaS2En3dQnUS4eqQ2DovzyZ6RSaXZwqvlWQbj1v3CN4B3aBghtGiseN12Dwm_PL-UkRLvTnx6Pc3o/s640/blog-backup-2.png" width="640" /></a></div>
Open your Blogger dashboard and choose Settings -> Other. Here you’ll see an option that says “Export Blog” – click the link and it will download a copy of your blog posts and comments to the hard disk in Atom (XML) format.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQmTHtSbZ7RFGlpIo-v7CwL_Fuc08HftyzfYhZPcQ_WDwkdx7I5zljClkjVv2XzRY9ZjzxZsE5sCkNxO-3uFDP0McyyqIChzROzohgQO2L-jkzyBLwAPjLZlE0bCceGGtum3wDKkA36mI/s1600/blog-backup-3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="106" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQmTHtSbZ7RFGlpIo-v7CwL_Fuc08HftyzfYhZPcQ_WDwkdx7I5zljClkjVv2XzRY9ZjzxZsE5sCkNxO-3uFDP0McyyqIChzROzohgQO2L-jkzyBLwAPjLZlE0bCceGGtum3wDKkA36mI/s640/blog-backup-3.png" width="640" /></a></div>
<br /></div>

Backup Blogging Blogspot Tutorials How to take Backup of your Blog

Learn how to create a backup of your blogger blog with a click. You can download the entire blog include posts and comments. The Import...

SMS Spoofing with Kali Linux

2/04/2014 cyb3r.gladiat0r 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZaWqW0Nr7W0f4fGzgndnUMsWs_Q9PjVXDCQlT3vpsbQXLhtiMuhKok4-Ua8x4bKl1NncsY_WmGOSqQ9sLxhn33yQs_hClDrKwqwjCcW5acFFvZHRlfRRHz5bvYme415azN0upsvfAS1E/s1600/sms-spoofing-with-kali-linux.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="206" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZaWqW0Nr7W0f4fGzgndnUMsWs_Q9PjVXDCQlT3vpsbQXLhtiMuhKok4-Ua8x4bKl1NncsY_WmGOSqQ9sLxhn33yQs_hClDrKwqwjCcW5acFFvZHRlfRRHz5bvYme415azN0upsvfAS1E/s1600/sms-spoofing-with-kali-linux.png" width="320" /></a></div>
The new <a href="http://rahlabs.blogspot.in/search/label/Kali%20Linux" target="_blank" title="Kali Linux">Kali-Linux (BT6)</a> comes with many advance and increasing features and one of its incredible feature is its <a href="http://rahlabs.blogspot.in/search/label/Social%20Engineering" target="_blank" title="SMS Spoofing">SMS spoofing</a> weapon. So today we will have fun with this feature and see how easily we can spoof SMS. This is an amazing and improved feature that has made many security professionals think. Anyone can easily spoof sms from various numbers and there is no chance to be caught. This feature is located in the SET (<br />
<div class="highlight">
Social Engineering toolkit</div>
). For this go to <br />
<div class="system pop">
Applications>>Kali Linux>>Exploitation tools>>se-toolkit</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD7LUvR5wkJHcfuwywWyS8z-qFBHF9UG5V9EYW_WHhr4FsJTukdlBovVeDhkyrUOu0ANdVsEBBkcygkc0YSXgyV6e3n0bsAINNwTTFnfriOUtGP-53xhIjXTPVNcyEQlGSLxrcFlhiU4g/s1600/sms-spoofing-1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="261" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD7LUvR5wkJHcfuwywWyS8z-qFBHF9UG5V9EYW_WHhr4FsJTukdlBovVeDhkyrUOu0ANdVsEBBkcygkc0YSXgyV6e3n0bsAINNwTTFnfriOUtGP-53xhIjXTPVNcyEQlGSLxrcFlhiU4g/s1600/sms-spoofing-1.jpg" width="400" /></a></div>
<strong>Next select option 7</strong>: SMS spoofing attacks<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKPPP66NzWepyjZnA3xU6EVKQefx3RBOqEsa6WU3o3Wua5UGSHw-yNzYIiVsf0912t00dtw6O9Fz8DDwQrtPNIXhedtxDOYqhTvk0LCS4YGOgz6rcoTsGsgIOOTGq7fEPXkJXj1L09psc/s1600/sms-spoofing-2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="162" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKPPP66NzWepyjZnA3xU6EVKQefx3RBOqEsa6WU3o3Wua5UGSHw-yNzYIiVsf0912t00dtw6O9Fz8DDwQrtPNIXhedtxDOYqhTvk0LCS4YGOgz6rcoTsGsgIOOTGq7fEPXkJXj1L09psc/s1600/sms-spoofing-2.jpg" width="400" /></a></div>
Then <strong>select the option no 1</strong>: Perform SMS spoofing attack<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEOqd6qvxgz5361vD2fDpSNyQvWw31EuNgNis0qRxW3AaRJTRyZttO_sMxX8VET9gschrKyoYj8d0OTLspaaew9rix_uNaGio6VNthG0PM1zVpNaX5d8Wl4ZqjWuiahBRdRbygR2Jiyqs/s1600/sms-spoofing-3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="165" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEOqd6qvxgz5361vD2fDpSNyQvWw31EuNgNis0qRxW3AaRJTRyZttO_sMxX8VET9gschrKyoYj8d0OTLspaaew9rix_uNaGio6VNthG0PM1zVpNaX5d8Wl4ZqjWuiahBRdRbygR2Jiyqs/s1600/sms-spoofing-3.jpg" width="400" /></a></div>
After that again <strong>select option no 1</strong>: SMS Attack single phone number<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEio1qgvT7dvyG6pp4UE1q8pT2cH2L0yXTQsFd8Id2k289b5f6q1HmJZzGQP0AZg8EYqbYOAhjB3oYkKEFmlGVsuqkC_t-gsO0Z-36KcS1Q7NW_APMnE_IOXHOOvSwrymWn0jrrCSkc6bpE/s1600/sms-spoofing-4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="237" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEio1qgvT7dvyG6pp4UE1q8pT2cH2L0yXTQsFd8Id2k289b5f6q1HmJZzGQP0AZg8EYqbYOAhjB3oYkKEFmlGVsuqkC_t-gsO0Z-36KcS1Q7NW_APMnE_IOXHOOvSwrymWn0jrrCSkc6bpE/s1600/sms-spoofing-4.png" width="400" /></a></div>
Now enter the <strong>victim’s Phone-number</strong> with its country code<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSAJEzPB30n-n28joYCd0_B2Bz8YUsW3BRBtxDEZaS9xvrEUbHTD7Fh65udmcPfPT6-Wr3TG7ubKtyRI864YJ23rB0VjZy_OG1QbSJgl5wap05Lsya6LJw1hzPGfg7FWCRfbIAWH34n9c/s1600/sms-spoofing-5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSAJEzPB30n-n28joYCd0_B2Bz8YUsW3BRBtxDEZaS9xvrEUbHTD7Fh65udmcPfPT6-Wr3TG7ubKtyRI864YJ23rB0VjZy_OG1QbSJgl5wap05Lsya6LJw1hzPGfg7FWCRfbIAWH34n9c/s1600/sms-spoofing-5.png" width="400" /></a></div>
Now <strong>select a template</strong> or use predefined templates as shown in below image<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYCybiCSY8_I9vobvcDbDSI9rJ9f6RtN1FjUycLOEdlKhNFldWZrDdtbk7geKnP-L8xIuVBSpl-OwAwQhjx-A4G-thP8ij9hYaA1_sW58LzhPm3Fp4_R3natojXEHaw89ofesQN9oWXNg/s1600/sms-spoofing-6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYCybiCSY8_I9vobvcDbDSI9rJ9f6RtN1FjUycLOEdlKhNFldWZrDdtbk7geKnP-L8xIuVBSpl-OwAwQhjx-A4G-thP8ij9hYaA1_sW58LzhPm3Fp4_R3natojXEHaw89ofesQN9oWXNg/s1600/sms-spoofing-6.png" width="400" /></a></div>
I am selecting a fake police SMS <strong>option 19</strong><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtm9hazd8vKrnumOLZCKoeDqiJXKzO9t4KDDcOUjMBTXI7cNCGAY_PXAnYcBcLJL71MjZLEmdiJTiatrAvI_piTm7d623HOkMZexGuLmRAiwxTcmFHgPyxTNlBmiDizPRoF4t90UrUZfQ/s1600/sms-spoofing-7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtm9hazd8vKrnumOLZCKoeDqiJXKzO9t4KDDcOUjMBTXI7cNCGAY_PXAnYcBcLJL71MjZLEmdiJTiatrAvI_piTm7d623HOkMZexGuLmRAiwxTcmFHgPyxTNlBmiDizPRoF4t90UrUZfQ/s1600/sms-spoofing-7.png" width="400" /></a></div>
Now it’s almost done, from here you can choose the predefined <a href="http://rahlabs.blogspot.in/search/label/Android" title="Android">android </a> emulator or use your the SMS accounts. Thus, either you can start a war or stop it by sending SMS from fake locations.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivRSG7b0Lf4MKEk5YnoCH83EkIN815u9EJnMNKx-e5Uukq2Vyv0PTx0r26U9ckR2sdCbrXjVK5uiOv_q088ROOhKUEuaSoNd4vwUp052hbziFpFBmwY_-ImZLMEDR_sxRJiwMznMM1d4k/s1600/sms-spoofing-8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivRSG7b0Lf4MKEk5YnoCH83EkIN815u9EJnMNKx-e5Uukq2Vyv0PTx0r26U9ckR2sdCbrXjVK5uiOv_q088ROOhKUEuaSoNd4vwUp052hbziFpFBmwY_-ImZLMEDR_sxRJiwMznMM1d4k/s1600/sms-spoofing-8.png" width="400" /></a></div>
<strong>Don't</strong> use these tricks in unethical way. Have fun! <a href="http://mile2.com/" rel="nofollow" target="_blank">Source</a><br />
<br /></div>

Backtrack Hacking Hacking Tutorials Kali Linux SMS Spoofing Social Engineering Tutorials SMS Spoofing with Kali Linux

The new Kali-Linux (BT6) comes with many advance and increasing features and one of its incredible feature is its SMS spoofing weapon. ...