Google is monitoring Wikipedia

2/20/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgknqOI-N3IeaHx9v-_fDQLy5XS6Ba0Q1Nl77Izt2_JPJb2DXY89OgVyB0c-l8hvxfzz-Zj4B-WZqqkbgJv7rkqEaUDyIgFKsoumHsv_gBNZz-XRbHooZq8rxRo2nWmZlGdw65xZjhnKRIj/s1600/google+monitoring+wikipedia.jpg" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img alt="Google is monitoring Wikipedia" border="0" height="185" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgknqOI-N3IeaHx9v-_fDQLy5XS6Ba0Q1Nl77Izt2_JPJb2DXY89OgVyB0c-l8hvxfzz-Zj4B-WZqqkbgJv7rkqEaUDyIgFKsoumHsv_gBNZz-XRbHooZq8rxRo2nWmZlGdw65xZjhnKRIj/s1600/google+monitoring+wikipedia.jpg" title="Google is monitoring Wikipedia" width="400" /></a></td></tr>
<tr><td class="tr-caption" style="text-align: center;"><br /></td></tr>
</tbody></table>
<br />
Thomas Steiner, a Customer Solutions Engineer at <a href="http://rahlabs.blogspot.in/search/label/Google" target="_blank">Google</a> Germany GmbH, Hamburg has created an application that shows in a very clear way, how much of Wikipedia entries are being created or edited by <a href="http://rahlabs.blogspot.in/search/label/Bots" target="_blank">bots</a>, versus humans. He's also written a paper describing his efforts and posted it on the preprint server arXiv.<br />
Many people may not realize it, but some of the information appearing on Wikipedia is put there by bots, rather than human beings. This is because Wikipedia has grown too large to be managed by people alone, especially when noting it's still mostly a volunteer effort.<br />
To keep entries coming and to keep them updated, bots have been created—they grab information from one place and post them into another, thus, they're not actually writers or composer, they're more like auditors updating files automatically. Also, many people may not know that the folks at Wikipedia have also created another information repository—Wikidata—it's a database whose sole purpose is to share data amongst the difference language versions of Wikipedia. If a user in the U.S. enters information about the results of the New York Marathon into a Wiki entry, for example, that data can be automatically ported to Wikidata, where other bots can retrieve it, convert it to the pertinent language and post it to another language version of Wikipedia—all rather seamlessly to readers.<br />
Because of all the automation, some have begun to wonder what portion of Wiki pages are generated by humans versus bots. That's where Steiner comes in—he's written an application that can be <a href="http://wikipedia-edits.herokuapp.com/" target="_blank"><b>accessed and used</b></a> by anyone to see—in real time—what percentage of pages are being written by humans, versus bots.<br />
The application also allows for noting other aspects of Wikipedia—a quick glance, for example reveals that bots are doing a lot more of the work adding information to pages in non-English speaking countries, which suggests that the majority of Wikipedia content is still being created by real human beings in the U.S. and the U.K. The application also monitors activity on Wikidata, for those who are interested and also displays the data for both in a way that shows which bots are most active.<br />
Steiner has also published the code for the application, making it open source. That should allow those who are interested in the murky world of bots to gain an insider's perspective, and perhaps, to add to the applications utility.<br />
<br />
<b>More information:</b> Bots vs. Wikipedians, Anons vs. Logged-Ins, arXiv:1402.0412 [cs.DL] <a href="http://arxiv.org/abs/1402.0412">arxiv.org/abs/1402.0412</a><br />
Abstract <br />
Wikipedia is a global crowdsourced encyclopedia that at time of writing is available in 287 languages. Wikidata is a likewise global crowdsourced knowledge base that provides shared facts to be used by Wikipedias. In the context of this research, we have developed an application and an underlying Application Programming Interface (API) capable of monitoring realtime edit activity of all language versions of Wikipedia and Wikidata. This application allows us to easily analyze edits in order to answer questions such as "Bots vs. Wikipedians, who edits more?", "Which is the most anonymously edited Wikipedia?", or "Who are the bots and what do they edit?". To the best of our knowledge, this is the first time such an analysis could be done in realtime for Wikidata and for really all Wikipedias—large and small. Our application is available publicly online at the URL this http URL, its code has been open-sourced under the Apache 2.0 license.<br />
Source: <a href="http://phys.org/" target="_blank">Phys</a></div>

Google News Wikipedia Google is monitoring Wikipedia

Thomas Steiner, a Customer Solutions Engineer at Google Germany GmbH, Hamburg has created an application that shows in a very clear ...

Millions of Vulnerable Android Devices Exposed

2/20/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFSeEUslTWF_FPNY8QRBlfYEWBqI3biHqeSj8sY52EGYd6y7xYKq2qTAzeIEUBBAM1fokSkJ_1dfEr8f7heqeuU0xtODAX1sGX-WoyyxPpsmsG7WFodo7p8TrPe1jk8rYPDN_qgnBENcAs/s1600/android-malware.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFSeEUslTWF_FPNY8QRBlfYEWBqI3biHqeSj8sY52EGYd6y7xYKq2qTAzeIEUBBAM1fokSkJ_1dfEr8f7heqeuU0xtODAX1sGX-WoyyxPpsmsG7WFodo7p8TrPe1jk8rYPDN_qgnBENcAs/s1600/android-malware.jpg" width="400" /></a></div>
<br />
Android devices prior to version 4.2.1 of the operating system—70 percent of the phones and tablets in circulation—have been vulnerable to a serious and simple remote code execution vulnerability in the Android browser for more than 93 weeks.<br /><br />Metasploit recently added an exploit module that targets the vulnerability, which was patched in 4.2.2 released one year ago. However, with carriers and device makers reticent to be quick with updates and security patches, close to three-quarters of the Android user base is at risk for attack. For some perspective, Android Central reports that KitKat, the latest version of Android, has yet to hit 2 percent adoption.<br /><br />“I did a quick survey of the phones available today on the no-contract rack at a couple big-box stores, and every one that I saw were vulnerable out of the box,” said Rapid7 senior manager of engineering Tod Beardsley. “And yes, that’s here in the U.S., not some far-away place like Moscow, Russia.”<br /><br />The exploit module, built by contributors Joe Vennix and Joshua Drake, could enable access to the device camera, location data, information stored on a SD card and even the user’s address book. Drake said he was recently able to get code execution on Google Glass using the exploit.<br /><br />The attack exploits a vulnerability that was <a href="http://50.56.33.56/blog/?p=314" target="_blank">disclosed</a> in December 2012. The problem lies with the addJavascriptInterface in WebView. Applications are able to inject Java objects into WebView, including malicious JavaScript which can cause unwanted behavior such as sending expensive SMS messages to premium numbers or giving attackers access to data on the phone. JavaScript can also get around browser security controls, said researcher Neil Bergman, a security consultant who disclosed the vulnerability.<br /><br />Rapid7 said an attacker would need to be man-in-the-middle on a device in order to exploit it, something its new exploit module simplifies. The company demonstrates the exploit in a <a href="https://community.rapid7.com/community/metasploit/blog/2014/02/13/weekly-metasploit-update" target="_blank">video</a>, which is triggered in this case by a malicious QR code the victim scans with their Android smartphone and opens a command shell for the attacker.<br /><br />The best mitigation is to update Android to 4.2.2 or higher, but that isn’t always feasible for users. Device manufacturers and carriers control when updates are rolled out, despite the fact that Google is generally prompt with patches and updates.<br /><br />The carriers and manufacturers have been under fire from privacy and security experts and even the U.S. Federal Trade Commission. Last April, the American Civil Liberties Union asked the FTC to investigate four major carriers, accusing them of deceptive business practices and knowingly selling defective phones to consumers that are shy on security updates and patches. The ACLU requested that the FTC force carriers to warn customers about unpatched vulnerabilities, allow customers with vulnerable phones to escape their contracts without early termination penalties, and provide that customers may exchange at no cost their phones for another that receives regular security updates, or return the phone for a full refund.<br /><br />Last February, the FTC reached a damning settlement with device makers HTC America. The FTC forced HTC to enact expensive security enhancements that included regular security patches for Android devices, establish a security program that focuses on developer security, and submit to security assessments.</div>

Android Malwares Metasploit Vulnerability Millions of Vulnerable Android Devices Exposed

Android devices prior to version 4.2.1 of the operating system—70 percent of the phones and tablets in circulation—have been vulnerable ...

Win 100GB of Free OneDrive Storage

2/20/2014 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg86HugAtKxxTbrrwPJlnhiaSfMo0Z2B6m9vKRfbmYZLdayEwvWYNWSbkGN89QflDKU5JcNKupvMNndXlBpPuwkNolAISMaDoqnUSLcEHxNUlqh50KapZD8CherUF36zhYU5bBT6hreMA8/s1600/Win+100GB+of+Free+OneDrive+Storage.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg86HugAtKxxTbrrwPJlnhiaSfMo0Z2B6m9vKRfbmYZLdayEwvWYNWSbkGN89QflDKU5JcNKupvMNndXlBpPuwkNolAISMaDoqnUSLcEHxNUlqh50KapZD8CherUF36zhYU5bBT6hreMA8/s1600/Win+100GB+of+Free+OneDrive+Storage.jpg" width="400" /></a></div>
<br />
Microsoft yesterday rebranded SkyDrive to <a href="https://onedrive.live.com/about/en-us/" target="_blank">OneDrive</a>, so the company decided to give away 100 GB of storage for one year free of charge for 100,000 users.<br />
<br />
All prizes have been claimed really quickly on Twitter, so Microsoft has <a href="https://twitter.com/onedrive/status/436258376637747201" target="_blank">announced</a> a new contest that could bring users 100 GB of free storage in their accounts.<br />
<br />
Basically, you need to pay a visit to a Microsoft store, log in with your OneDrive credentials (or create an account if you don’t have one right now) and you get a chance to win the grand prize. Microsoft says that 10,000 users will be rewarded with the free storage, with the contest ending on February 23.<br />
<br />
By default, OneDrive comes with 7 GB of free storage, so this could be a really good way to keep more files in the cloud for one year without paying a cent for it.</div>

Cloud Storage Microsoft News OS Win 100GB of Free OneDrive Storage

Microsoft yesterday rebranded SkyDrive to OneDrive , so the company decided to give away 100 GB of storage for one year free of charge f...

How to take Backup of your Blog

2/05/2014 cyb3r.gladiat0r 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTVuHbfRD2MxETpzmVtJuXAmI21t8zPsIRjujyM-pex3g9TlCfgd-tp1oQNJDEcreDaiBX93_9SzKYjj-uoy7poH1oDs6t5XhbPuQ-rQg4-S-1Wd4aWEsMLMzu2xSyGbyaa4Ag_DBDcSc/s1600/backup-blogger-blog.jpg" imageanchor="1"><img border="0" height="198" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTVuHbfRD2MxETpzmVtJuXAmI21t8zPsIRjujyM-pex3g9TlCfgd-tp1oQNJDEcreDaiBX93_9SzKYjj-uoy7poH1oDs6t5XhbPuQ-rQg4-S-1Wd4aWEsMLMzu2xSyGbyaa4Ag_DBDcSc/s640/backup-blogger-blog.jpg" width="640" /></a></div>
Learn how to create a <a href="https://www.hackerschronicle.com/search/label/Backup">backup</a> of your blogger blog with a click. You can download the entire blog include posts and comments.<br />
The Import & Export feature in Blogger is now live and can be accessed from the Settings tab of your Blogger dashboard.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8El39C0MyIUp_c4Db6qZzyKR1e7pmAMOGPKjNwpYoIIlkJ-8uaK8fPE0wKuK09ZDzLwP1fv4_qoBtGlo56mFlIxpCDv-blRGA5tlAzgPkTQcVu1jzkH5rmXA3rTyW7thjKwYvl5p4Slk/s1600/blog-backup.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="201" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8El39C0MyIUp_c4Db6qZzyKR1e7pmAMOGPKjNwpYoIIlkJ-8uaK8fPE0wKuK09ZDzLwP1fv4_qoBtGlo56mFlIxpCDv-blRGA5tlAzgPkTQcVu1jzkH5rmXA3rTyW7thjKwYvl5p4Slk/s640/blog-backup.png" width="640" /></a></div>
With “Export Blog,” you can easily create a complete backup of your <a href="https://www.hackerschronicle.com/search/label/Blogging">Blogger</a> blog on to the hard drive and this may come handy in situations when you accidentally delete some old blog post or if <a href="https://www.hackerschronicle.com/search/label/Google">Google</a> blocks your blog due to policy violations – at least you’ll have a local copy of all the content that you may publish elsewhere.<br />
<br />
Other that creating a safe backup, you may also use the export (followed by import) function to merge multiple blogs into one.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA39zCanKO-7PjU8fV9Bb7leUppqmirGNfz3YFbwMF6_KVXu4IZbmS0KO7wvTLenoaS2En3dQnUS4eqQ2DovzyZ6RSaXZwqvlWQbj1v3CN4B3aBghtGiseN12Dwm_PL-UkRLvTnx6Pc3o/s1600/blog-backup-2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA39zCanKO-7PjU8fV9Bb7leUppqmirGNfz3YFbwMF6_KVXu4IZbmS0KO7wvTLenoaS2En3dQnUS4eqQ2DovzyZ6RSaXZwqvlWQbj1v3CN4B3aBghtGiseN12Dwm_PL-UkRLvTnx6Pc3o/s640/blog-backup-2.png" width="640" /></a></div>
Open your Blogger dashboard and choose Settings -> Other. Here you’ll see an option that says “Export Blog” – click the link and it will download a copy of your blog posts and comments to the hard disk in Atom (XML) format.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQmTHtSbZ7RFGlpIo-v7CwL_Fuc08HftyzfYhZPcQ_WDwkdx7I5zljClkjVv2XzRY9ZjzxZsE5sCkNxO-3uFDP0McyyqIChzROzohgQO2L-jkzyBLwAPjLZlE0bCceGGtum3wDKkA36mI/s1600/blog-backup-3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="106" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQmTHtSbZ7RFGlpIo-v7CwL_Fuc08HftyzfYhZPcQ_WDwkdx7I5zljClkjVv2XzRY9ZjzxZsE5sCkNxO-3uFDP0McyyqIChzROzohgQO2L-jkzyBLwAPjLZlE0bCceGGtum3wDKkA36mI/s640/blog-backup-3.png" width="640" /></a></div>
<br /></div>

Backup Blogging Blogspot Tutorials How to take Backup of your Blog

Learn how to create a backup of your blogger blog with a click. You can download the entire blog include posts and comments. The Import...

SMS Spoofing with Kali Linux

2/04/2014 cyb3r.gladiat0r 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZaWqW0Nr7W0f4fGzgndnUMsWs_Q9PjVXDCQlT3vpsbQXLhtiMuhKok4-Ua8x4bKl1NncsY_WmGOSqQ9sLxhn33yQs_hClDrKwqwjCcW5acFFvZHRlfRRHz5bvYme415azN0upsvfAS1E/s1600/sms-spoofing-with-kali-linux.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="206" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZaWqW0Nr7W0f4fGzgndnUMsWs_Q9PjVXDCQlT3vpsbQXLhtiMuhKok4-Ua8x4bKl1NncsY_WmGOSqQ9sLxhn33yQs_hClDrKwqwjCcW5acFFvZHRlfRRHz5bvYme415azN0upsvfAS1E/s1600/sms-spoofing-with-kali-linux.png" width="320" /></a></div>
The new <a href="http://rahlabs.blogspot.in/search/label/Kali%20Linux" target="_blank" title="Kali Linux">Kali-Linux (BT6)</a> comes with many advance and increasing features and one of its incredible feature is its <a href="http://rahlabs.blogspot.in/search/label/Social%20Engineering" target="_blank" title="SMS Spoofing">SMS spoofing</a> weapon. So today we will have fun with this feature and see how easily we can spoof SMS. This is an amazing and improved feature that has made many security professionals think. Anyone can easily spoof sms from various numbers and there is no chance to be caught. This feature is located in the SET (<br />
<div class="highlight">
Social Engineering toolkit</div>
). For this go to <br />
<div class="system pop">
Applications>>Kali Linux>>Exploitation tools>>se-toolkit</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD7LUvR5wkJHcfuwywWyS8z-qFBHF9UG5V9EYW_WHhr4FsJTukdlBovVeDhkyrUOu0ANdVsEBBkcygkc0YSXgyV6e3n0bsAINNwTTFnfriOUtGP-53xhIjXTPVNcyEQlGSLxrcFlhiU4g/s1600/sms-spoofing-1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="261" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD7LUvR5wkJHcfuwywWyS8z-qFBHF9UG5V9EYW_WHhr4FsJTukdlBovVeDhkyrUOu0ANdVsEBBkcygkc0YSXgyV6e3n0bsAINNwTTFnfriOUtGP-53xhIjXTPVNcyEQlGSLxrcFlhiU4g/s1600/sms-spoofing-1.jpg" width="400" /></a></div>
<strong>Next select option 7</strong>: SMS spoofing attacks<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKPPP66NzWepyjZnA3xU6EVKQefx3RBOqEsa6WU3o3Wua5UGSHw-yNzYIiVsf0912t00dtw6O9Fz8DDwQrtPNIXhedtxDOYqhTvk0LCS4YGOgz6rcoTsGsgIOOTGq7fEPXkJXj1L09psc/s1600/sms-spoofing-2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="162" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKPPP66NzWepyjZnA3xU6EVKQefx3RBOqEsa6WU3o3Wua5UGSHw-yNzYIiVsf0912t00dtw6O9Fz8DDwQrtPNIXhedtxDOYqhTvk0LCS4YGOgz6rcoTsGsgIOOTGq7fEPXkJXj1L09psc/s1600/sms-spoofing-2.jpg" width="400" /></a></div>
Then <strong>select the option no 1</strong>: Perform SMS spoofing attack<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEOqd6qvxgz5361vD2fDpSNyQvWw31EuNgNis0qRxW3AaRJTRyZttO_sMxX8VET9gschrKyoYj8d0OTLspaaew9rix_uNaGio6VNthG0PM1zVpNaX5d8Wl4ZqjWuiahBRdRbygR2Jiyqs/s1600/sms-spoofing-3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="165" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEOqd6qvxgz5361vD2fDpSNyQvWw31EuNgNis0qRxW3AaRJTRyZttO_sMxX8VET9gschrKyoYj8d0OTLspaaew9rix_uNaGio6VNthG0PM1zVpNaX5d8Wl4ZqjWuiahBRdRbygR2Jiyqs/s1600/sms-spoofing-3.jpg" width="400" /></a></div>
After that again <strong>select option no 1</strong>: SMS Attack single phone number<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEio1qgvT7dvyG6pp4UE1q8pT2cH2L0yXTQsFd8Id2k289b5f6q1HmJZzGQP0AZg8EYqbYOAhjB3oYkKEFmlGVsuqkC_t-gsO0Z-36KcS1Q7NW_APMnE_IOXHOOvSwrymWn0jrrCSkc6bpE/s1600/sms-spoofing-4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="237" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEio1qgvT7dvyG6pp4UE1q8pT2cH2L0yXTQsFd8Id2k289b5f6q1HmJZzGQP0AZg8EYqbYOAhjB3oYkKEFmlGVsuqkC_t-gsO0Z-36KcS1Q7NW_APMnE_IOXHOOvSwrymWn0jrrCSkc6bpE/s1600/sms-spoofing-4.png" width="400" /></a></div>
Now enter the <strong>victim’s Phone-number</strong> with its country code<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSAJEzPB30n-n28joYCd0_B2Bz8YUsW3BRBtxDEZaS9xvrEUbHTD7Fh65udmcPfPT6-Wr3TG7ubKtyRI864YJ23rB0VjZy_OG1QbSJgl5wap05Lsya6LJw1hzPGfg7FWCRfbIAWH34n9c/s1600/sms-spoofing-5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSAJEzPB30n-n28joYCd0_B2Bz8YUsW3BRBtxDEZaS9xvrEUbHTD7Fh65udmcPfPT6-Wr3TG7ubKtyRI864YJ23rB0VjZy_OG1QbSJgl5wap05Lsya6LJw1hzPGfg7FWCRfbIAWH34n9c/s1600/sms-spoofing-5.png" width="400" /></a></div>
Now <strong>select a template</strong> or use predefined templates as shown in below image<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYCybiCSY8_I9vobvcDbDSI9rJ9f6RtN1FjUycLOEdlKhNFldWZrDdtbk7geKnP-L8xIuVBSpl-OwAwQhjx-A4G-thP8ij9hYaA1_sW58LzhPm3Fp4_R3natojXEHaw89ofesQN9oWXNg/s1600/sms-spoofing-6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYCybiCSY8_I9vobvcDbDSI9rJ9f6RtN1FjUycLOEdlKhNFldWZrDdtbk7geKnP-L8xIuVBSpl-OwAwQhjx-A4G-thP8ij9hYaA1_sW58LzhPm3Fp4_R3natojXEHaw89ofesQN9oWXNg/s1600/sms-spoofing-6.png" width="400" /></a></div>
I am selecting a fake police SMS <strong>option 19</strong><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtm9hazd8vKrnumOLZCKoeDqiJXKzO9t4KDDcOUjMBTXI7cNCGAY_PXAnYcBcLJL71MjZLEmdiJTiatrAvI_piTm7d623HOkMZexGuLmRAiwxTcmFHgPyxTNlBmiDizPRoF4t90UrUZfQ/s1600/sms-spoofing-7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtm9hazd8vKrnumOLZCKoeDqiJXKzO9t4KDDcOUjMBTXI7cNCGAY_PXAnYcBcLJL71MjZLEmdiJTiatrAvI_piTm7d623HOkMZexGuLmRAiwxTcmFHgPyxTNlBmiDizPRoF4t90UrUZfQ/s1600/sms-spoofing-7.png" width="400" /></a></div>
Now it’s almost done, from here you can choose the predefined <a href="http://rahlabs.blogspot.in/search/label/Android" title="Android">android </a> emulator or use your the SMS accounts. Thus, either you can start a war or stop it by sending SMS from fake locations.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivRSG7b0Lf4MKEk5YnoCH83EkIN815u9EJnMNKx-e5Uukq2Vyv0PTx0r26U9ckR2sdCbrXjVK5uiOv_q088ROOhKUEuaSoNd4vwUp052hbziFpFBmwY_-ImZLMEDR_sxRJiwMznMM1d4k/s1600/sms-spoofing-8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivRSG7b0Lf4MKEk5YnoCH83EkIN815u9EJnMNKx-e5Uukq2Vyv0PTx0r26U9ckR2sdCbrXjVK5uiOv_q088ROOhKUEuaSoNd4vwUp052hbziFpFBmwY_-ImZLMEDR_sxRJiwMznMM1d4k/s1600/sms-spoofing-8.png" width="400" /></a></div>
<strong>Don't</strong> use these tricks in unethical way. Have fun! <a href="http://mile2.com/" rel="nofollow" target="_blank">Source</a><br />
<br /></div>

Backtrack Hacking Hacking Tutorials Kali Linux SMS Spoofing Social Engineering Tutorials SMS Spoofing with Kali Linux

The new Kali-Linux (BT6) comes with many advance and increasing features and one of its incredible feature is its SMS spoofing weapon. ...

Tutorial on How to Hack Terminal Services

12/10/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="font-family: "verdana" , "sans-serif"; font-size: 8.5pt;">If  you want to do any MS Terminal Server cracking you basically have your  choice of three tools that can do it for you; TSgrinder, TScrack, and a  patched version of RDesktop. This article and its companion Video:  Terminal Server / RDP Password Cracking, takes you step-by-step through  the concepts, tools and usage. <br />
<br />
</span><br />
<div class="MsoNormal" style="margin: 0in 0in 0pt;">
<span style="font-family: "verdana" , "sans-serif"; font-size: 8.5pt;">TSGrinder is readily available from <a href="http://www.hammerofgod.com/download.html" target="_blank">http://www.hammerofgod.com/download.html</a>. </span></div>
<div class="MsoNormal" style="margin: 0in 0in 0pt;">
<span style="font-family: "verdana" , "sans-serif"; font-size: 8.5pt;"><br />
TSCrack you'll have to google for as it is not readily available anymore.</span></div>
<span style="font-family: "verdana" , "sans-serif"; font-size: 8.5pt;"><br />
Rdesktop  v1.41 can be downloaded from <a href="http://www.rdesktop.org/" target="_blank">http://www.rdesktop.org/</a> and you'll need  the patch from <a href="http://foofus.net/" target="_blank">foofus.net</a> <a href="http://www.foofus.net/jmk/rdesktop.html" target="_blank">http://www.foofus.net/jmk/rdesktop.html</a>.</span><br />
<br />
<h3 align="left">
Part 1: MS Terminal Services Overview</h3>
Hacking Exposed Windows Server 2003 goes a great overview, I won't  plagiarize it all here, so check it out for me details and the  references section of this paper for some MS references.  <br />
Prior to Terminal Services, Windows did not provide the ability to run  code remotely in the processor space of the server. Another way to put  this is there was no way to have an "interactive" session on the server.  There were tools like wsremote or psexec or VNC. If an attacker got a  non administrator level account on a remote machine they could map  shares and copy files but had a difficult time running code on the  server. Now, with Terminal Services, an attacker can log on as a non  privileged user and run exploit local exploit code via the Terminal  Services GUI. These attacks used to be fairly limited to local physical  attacks or from users who actually logging into your domain but now if  the server has Terminal Services (2000 server 2003 server) or RDP  (Windows XP) running the attack vector increases.  <br />
Terminal Services by default listen on port 3389 (but can be changed by editing the registry).  <br />
If you want to change the listening port, edit this registry key:  <br />
<span style="font-family: "courier new" , "courier" , "mono";">\HKLM\System\CurrentControlSet\Control\Terminal Server\WinStationRDP-TCP Value : PortNUmber REG_DWORD=3389 </span> <br />
To turn on Terminal Server/RDP, edit this registry key (or to turn it on via command line):  <br />
<span style="font-family: "courier new" , "courier" , "mono";">reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 </span> <br />
With this command you can enable the RDP Service.  <br />
<h3>
<b>Password Cracking Basics</b></h3>
There are three types of password attacks:  <br />
<u>Brute Force</u>: A cryptanalysis technique or other kind of attack  method involving an exhaustive procedure that tries all possibilities,  one-by-one. [1] For example, the program might follow a sequence like  this:  <br />
"aaaaaaaa"<br />
"aaaaaaab"<br />
"aaaaaaac" ...  <br />
Until the password is found  <br />
<u>Dictionary Attack</u>: An attack that tries all of the phrases or  words in a dictionary, trying to crack a password or key. A dictionary  attack uses a predefined list of words compared to a brute force attack  that tries all possible combinations. [2]  <br />
<u>Hybrid Attack</u>: A hybrid attack is a mixture of a brute force  attach and a dictionary attack. There are many different ways a hybrid  attack can be performed, in it's simplest form a hybrid attack may  simply add a couple of numbers to the end of each dictionary word tried,  this increases the number of tested combinations without having to  resort to a true brute force attack. Cracking software will often use a  combination or selection of all three methods to try and guess your  password. [3]  <br />
<h3>
Terminal Services Enumeration</h3>
You can google for "/TSWeb/default.htm"  <br />
<br />
Figure 1.1: Output of a google search for /TSWeb/default.htm  <br />
You can nmap for port 3389  <br />
  <br />
Figure 1.2: A Nmap scan looking for port 3389 open on the Class C.  <br />
<br />
Figure 1.3: Results on the Nmap Scan looking for open port 3389.  <br />
You can use ProbeTS (<a href="http://www.hammerofgod.com/download/probets.zip" target="_blank">http://www.hammerofgod.com/download/probets.zip</a>):  <br />
  <br />
Figure 1.4: The output of probeTS.  <br />
<h3>
Terminal Services Connections</h3>
Let's see what a regular Terminal Services connection looks like.  <br />
  <br />
Figure 1.5: the Terminal Services/RDP Client on Windows 2000 Pro to a Windows 2000 Terminal Server.  <br />
<br />
Figure 1.6: Issuing a command over the Terminal Services Client.  <br />
<h3>
Part 2: TSGrinder</h3>
From the TSGrinder website:<br />
"TSGrinder is the first production Terminal Server bruteforce tool. The  main idea here is that the Administrator account, since it cannot be  locked out for local logons, can be brute forced. Also having an  encrypted channel to the TS logon process sure helps to keep IDS from  catching the attempts.  <br />
TSGrinder is a "dictionary" based attack tool, but it does have some  interesting features like "l337" conversion, and supports multiple  attack windows from a single dictionary file. It supports multiple  password attempts in the same connection, and allows you to specify how  many times to try a username/password combination within a particular  connection.  <br />
Also, the problem you describe can be exacerbated in that administrator  account can be brute-forced without creating a log entry, by attempting 5  logons and disconnecting before Windows disconnects and logs after the  sixth failure."  <br />
Let's see TSGrinder in action. I had to use the Windows XP RDP client on  Windows2000 SP4 to get TSGrinder to work properly. I did not need  roboclient.zip that it mentions on the website.  <br />
  <br />
Figure 2.1: TSGrinder being run with no arguments.  <br />
  <br />
Figure 2.2: TSGrinder using a dictionary attack against the administrator account.  <br />
  <br />
Figure 2.3: A failed attempt.  <br />
<br />
Figure 2.4: if TSGrinder guesses the password it will log into the terminal services and immediately disconnect.  <br />
  <br />
Figure 2.5: A successful attempt with TSGrinder.  <br />
<br />
Figure 2.6: TSGrinder supports 2 threads. Here you can see two threads running the attack.  <br />
<br />
Figure 2.7: A successful attempt with TSGrinder that used 2 threads to run the attack.  <br />
<h3>
Part 3: TScrack</h3>
From the TScrack documentation:<br />
"The Windows Terminal Services facility offers graphical desktop  sessions to remote clients. Terminal Services enables users to work in a  windows session that exists on the server. The client functionality is  basically reduced to the functionality of a terminal, all it does is  display the session screen, and collect user input.  <br />
TScrack applies AI technology (Artificial Neural Networks) to scrape the  screen contents of the graphical logon, in order to enable a simple  dictionary based cracking algorithm to perform efficiently against the  graphically presented logon dialogs and message boxes.  <br />
This is very similar to the technology used i.e. in Optical Character  Recognition (OCR), Face- and Image recognition in general.  <br />
TScrack was written for two purposes:  <br />
a) To provide a tool to assess password security of MS RDP servers<br />
b) As proof of concept code, to point out that graphical logons are by  no means secure from automated cracking / password guessing tools <br />
  <br />
Figure 3.1: TScrack being run with no arguments.  <br />
<br />
Figure 3.2: TScrack being run against a Windows Server 2003 Terminal Server  <br />
<br />
Figure 3.3: TScrack successfully cracking the password  <br />
<br />
Figure 3.4: TScrack also does multithreading cracking, use the –t option for 2 connections <br />
  <br />
Figure 3.5: TScrack with two simultaneous connections running  <br />
<br />
Figure 3.6: TScrack successfully cracking the password  <br />
TScrack was updated to v2.1 to include brute force attacks (something TSGrinder does not do).  <br />
<br />
Figure 3.7: TScrack in Brute force mode (-B option & max word length of 6)  <br />
**Note 1: I attempted to use the –N (no logging option). Windows Server  2003 still logged every failed attempt to log on (which is good).  <br />
<br />
Figure 3.8: TScrack in Brute force mode with the –N (no logging) option  <br />
<br />
Figure 3.9: Even with –N enabled Windows Server 2003 logged the  attempts. I did not test every configuration on every type of OS, I just  noticed it was logging the attempt and shared the info.  <br />
**Note 2: I also had to drastically change the default password policy  on Server 2003 to put an easy to crack password. I chose a password of  "chrisg" as the password I wanted to brute force.  <br />
<br />
Figure 3.10: Here is the default password policy for Windows Server 2003  <br />
<br />
Figure 3.11: What I changed the password policy to, to allow "chrisg" as a password  <br />
**Note 3: I had to run TScrack 2.1 on windows 2000 machine; it wasn't  working properly on Windows XP SP2. Also, If you are getting a MSRDP.OCX  error, then uninstall TScrack using the "-U" option then reinstalling  by issuing TScrack.exe –h.  <br />
<h3>
Part 4: Rdesktop & BruteForcing RDP with Rdesktop patch</h3>
Download rdesktop version 1.41 from the website:  <br />
<a href="http://www.rdesktop.org/%20" target="_blank">http://www.rdesktop.org/%20</a><br />
<a href="http://prdownloads.sourceforge.net/rdesktop/rdesktop-1.4.1.tar.gz?download%20" target="_blank">http://prdownloads.sourceforge.net/rdesktop/rdesktop-1.4.1.tar.gz?download%20</a>  <br />
Download the rdp-bruteforce patch from <a href="http://foofus.net/" target="_blank">foofus.net</a>:  <br />
<a href="http://www.foofus.net/jmk/rdesktop.html%20" target="_blank">http://www.foofus.net/jmk/rdesktop.html%20</a><br />
<a href="http://www.foofus.net/jmk/tools/rdp-brute-force-r422.diff%20" target="_blank">http://www.foofus.net/jmk/tools/rdp-brute-force-r422.diff%20</a>  <br />
Paste the patch into the source directory and apply the patch  <br />
<span style="font-family: "courier new" , "courier" , "mono";">SegFault:/Users/chrisgates/Desktop root# cd rdesktop-1.4.1<br />
SegFault:/Users/chrisgates/Desktop/rdesktop-1.4.1 root# patch -p1 -i rdp-brute-force-r422.diff<br />
patching file orders.c<br />
patching file orders.h<br />
patching file rdesktop.c<br />
patching file rdesktop.h<br />
patching file rdp.c<br />
patching file secure.c<br />
patching file xkeymap.c</span>  <br />
compile and install rdesktop:<br />
<span style="font-family: "courier new" , "courier" , "mono";">./configure<br />
make<br />
sudo make instal</span>l  <br />
Start X-Windows/X-Darwin/X11(I used X-Darwin installed using fink using  Mac OS X Tiger). Shouldn't be an issue if you are using an linux flavor  with a GUI.  <br />
Now start Rdesktop with your passlist and user or userlist:  <br />
<span style="font-family: "courier new" , "courier" , "mono";">SegFault:~/Desktop/rdesktop-1.4.1 chrisgates$ rdesktop -u administrator -p pass.txt <a href="tel:192.168.0.105" target="_blank" value="+911921680105">192.168.0.105</a></span>  <br />
**you'll need to run this from X-Darwin/X-Windows/X-11, if you run it from the command line it will say something like:  <br />
<span style="font-family: "courier new" , "courier" , "mono";">ERROR: Failed to open display: </span> <br />
If everything is working right you'll see it opening the Rdesktop trying  to log in and then exiting. Check your command line output to see if  you were able to guess the password.  <br />
  <br />
Figure 4.1: Running Rdesktop with no parameters gives you the help menu.  <br />
  <br />
Figure 4.2: Issuing the command line parameters to start Rdestop in *nix in XDarwin.  <br />
<br />
Figure 4.3: Rdestop brute forcing the accounts.  <br />
The following output was against an XP Pro SP2 host. With XP if the user  is currently logged in, they will be forced to log off if you connect  to the machine over RDP.  <br />
<span style="font-family: "courier new" , "courier" , "mono";">SegFault:~/Desktop/rdesktop-1.4.1 chrisgates$ rdesktop -u noone -p pass.txt <a href="tel:192.168.0.105" target="_blank" value="+911921680105">192.168.0.105</a></span>  <br />
<span style="font-family: "courier new" , "courier" , "mono";">Starting dictionary attack against server <a href="tel:192.168.0.105" target="_blank" value="+911921680105">192.168.0.105</a><br />
-------------------------------------------------------<br />
Retrieved connection termination packet.<br />
Account credentials are NOT valid.<br />
Retrieved connection termination packet.<br />
[failure] User "noone" Password "test"<br />
Retrieved connection termination packet.<br />
Account credentials are NOT valid.<br />
Retrieved connection termination packet.<br />
---SNIP---<br />
[failure] User "noone" Password "admin"<br />
Retrieved connection termination packet.<br />
Account credentials are NOT valid.<br />
Retrieved connection termination packet.<br />
[failure] User "noone" Password "administrator"<br />
Valid credentials, however, another user is currently logged on.<br />
[success] User "noone" Password "noone"<br />
SegFault:~/Desktop/rdesktop-1.4.1 chrisgates$ </span> <br />
  <br />
Figure 4.4: The command line output of the successful attack against XP SP2 but with the user logged in.  <br />
Let's see Rdesktop against a Windows Server 2003.  <br />
<br />
Figure 4.5: Rdesktop against Windows Server 2003 against the "chris" account.  <br />
<br />
Figure 4.6: Rdesktop successfully cracking the password with a dictionary attack.</div>

Hacking Hacking Tutorials Server Tutorials Tutorial on How to Hack Terminal Services

If you want to do any MS Terminal Server cracking you basically have your choice of three tools that can do it for you; TSgrinder, TScrac...

Install Backtrack 5 On Samsung Galaxy Tab

12/05/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhggrX7gsNFCquys849k4w921e7vHUQvt4zX0gXR1YZM7UjLHPfnCriTC5ZSLJpqggMASD-8eJY_6Hc90OKCQMAtBkGWzIFlnLXcFFUW2_DAUNTMdlc4P2o74MVqYGtjO4w8psV-6VSSY6O/s1600/IMG_7595-768608.jpg"><img alt="Install Backtrack 5 On Samsung Galaxy Tab" border="0" id="BLOGGER_PHOTO_ID_5681247311530902882" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhggrX7gsNFCquys849k4w921e7vHUQvt4zX0gXR1YZM7UjLHPfnCriTC5ZSLJpqggMASD-8eJY_6Hc90OKCQMAtBkGWzIFlnLXcFFUW2_DAUNTMdlc4P2o74MVqYGtjO4w8psV-6VSSY6O/s320/IMG_7595-768608.jpg" title="Install Backtrack 5 On Samsung Galaxy Tab" /></a></div>
<br />
First thing after I get Samsung Galaxy Tab 10.1 is how can I change or add some feature about penetration testing to my Tab. So after I read "How to install Backtrack5 on Motorola Xoom by Pual[.]com, I think I can install Backtrack 5 in my Tab too. That's it. I create this tutorial after I'm successful to installing Backtrack 5 on my Tab. But please do all the steps with you risk!!!!.<br />
1. Download <a href="http://forum.xda-developers.com/attachment.php?attachmentid=593613&d=1305168395" target="_blank">rooting file</a> and transfer it to the tab.<br />
2. Go into the recovery mode with hold "Power Button and Low Volumn Button" for rebooting and when you see the 2 icon press "Low Volumn" and press "High Volumn" or "Power Button" for go to recovery mode.<br />
3. Choose "apply the update from sdcard" and choose "rooting file"<br />
After this step, you're tab was rooted now.<br />
4. Download requirement files<br />
- <a href="http://www.megaupload.com/?d=S6HSZL8H" target="_blank">P7500DXKH4_P7500OLBKH1_P7500XWKG1_HOME.tar.MD5</a><br />
- <a href="http://www.multiupload.com/5RMKLEFCTA" target="_blank">001001-P7500_KI1_Restock.zip</a><br />
- <a href="http://www.multiupload.com/CRBRV18830" target="_blank">001003-Overcome_10.1_Series_v1.1.0_P7500_Full.zip</a><br />
- <a href="http://www.multiupload.com/REAMDK5J7U" target="_blank">002001-Overcome_CWM_Recovery_v4.1.1.5.tar</a><br />
- <a href="http://droidbasement.com/galaxy/kernels/2636/20/p4-ux/boot-cm_2636.4_p4_ux-oc-xtra-vfpv3-d16_fp-091311.zip" target="_blank">Overclock Kernel </a><br />
*** you can change Overcome_10.1_Series_v1.1.0_P7500_Full.zip to another Custom ROM just like Starburt or something like that.<br />
5. Extract<br />
<div class="system">
001001-P7500_KI1_Restock.zip</div>
6. Go into the recovery mode with hold "Power Button and Low Volumn Button" for rebooting and when you see the 2 icon press "High Volumn" or "Power Button" for go to download mode.<br />
7. Open Odin3_v1.85 and click PDA -> P7500OXAKI1_P7500XXKI1_P7500XXKI1_HOME.tar.MD5 -> start<br />
The tab will restart after this step is done.<br />
8. Copy file Overcome_10.1_Series_v1.1.0_P7500_Full.zip and boot-cm_2636.4_p4_ux-oc-xtra-vfpv3-d16_fp-091311.zip to the tab<br />
9. Go to the download mode again.<br />
10. In the Odin, click PDA -> Overcome_CWM_Recovery_v4.1.1.5.tar -> start<br />
11. Go to the recovery mode<br />
12. Go to install menu -> choose zip from internal storage with data wipe -> Overcome_10.1_Series_v1.1.0_P7500_Full.zip -> install menu -> choose zip from internal storage -> boot-cm_2636.4_p4_ux-oc-xtra-vfpv3-d16_fp-091311.zip<br />
13. Now you're root and get the new custom ROM. So install Android SDK and download Backtrack5 ARM version.<br />
- <a href="http://developer.android.com/sdk/index.html#top" target="_blank">Android SDK </a><br />
- <a href="http://www.backtrack-linux.org/downloads/" target="_blank">Backtrack 5 ARM</a><br />
14. Copy Backtrack into your tab or use the adb for install busybox and upload Backtrack into the tab.<br />
<div class="command wobble-horizontal ">
<code class="prettyprint"> Go to C:\Program Files\Android\android-sdk\platform-tools<br />
adb.exe shell<br />
mkdir /sdcard/BT5<br />
exit<br />
adb.exe push busybox /sdcard/<br />
adb.exe push installbusybox.sh /sdcard<br />
adb.exe push fsrw /sdcard/BT5/<br />
adb.exe push mountonly /sdcard/BT5/<br />
adb.exe push bootbt /sdcard/BT5/<br />
adb.exe push bt5.img.gz /sdcard/BT5/<br />
adb.exe push unionfs /sdcard/BT5/<br />
</code></div>
<br />
***If you use SSHDroid to enable SSHD in your tab.[Default SSH User: root and Password: admin]<br />
15. Go to the terminal of Tab with ConnectBot and choose local to connect in your Tab. I don't know you can use sshd to complete this step or not but you can try it for easy typing.<br />
16. Remove the Tab from PC.<br />
17. Go to /sdcard/BT5 and unzip bt5.img.gz<br />
<div class="command wobble-horizontal ">
<code class="prettyprint">cd /sdcard/BT5<br />
gunzip bt5.img.gz</code></div>
<br />
18. Start BT5<br />
<div class="command wobble-horizontal ">
<code class="prettyprint">sh bootbt</code></div>
<br />
19. So now you're in the chroot of Backtrack5<br />
<div class="command wobble-horizontal ">
<code class="prettyprint"> net.ipv4.ip_forward = 1<br />
ls /pentest/<br />
backdoors databaseexploits passwords scanners stressing voip<br />
cisco enumeration forensics pythonsniffers tunneling web</code></div>
<br />
20. Run the startvnc<br />
<div class="command wobble-horizontal ">
<code class="prettyprint">startvnc</code></div>
<br />
*** You can change resolution of vnc with nano /usr/bin/startvnc<br />
21. Now vnc is running, you can check what is the port number that was use by vnc with<br />
<div class="command wobble-horizontal ">
<code class="prettyprint">netstat -napt</code></div>
<br />
21. Now you can connect vnc server with androidVNC or whatever that you can find in the Android Market.<br />
*** Default password of vnc server is "toortoor"<br />
22. Finally you can do anything that you can do in Backtrack5 on your Tab, have a nice hack<br />
<div dir="ltr">
</div>
</div>

Backtrack Hacking Hacking Tutorials Linux OS Tricks Tutorials Install Backtrack 5 On Samsung Galaxy Tab

First thing after I get Samsung Galaxy Tab 10.1 is how can I change or add some feature about penetration testing to my Tab. So after I ...