Blogger Widgets
Showing posts with label Forensic. Show all posts
Showing posts with label Forensic. Show all posts

Thursday, 19 June 2014

Tough Law on Cybercrime Targets All Kenyans #Hackers #Hacking #Cybercrime #Cyberbulling #Kenya


Kenya still relies on Central Depositories Act and the Penal Code, among other frameworks, that are not clear with regard to arresting and prosecuting cyber-crime suspects. Previously, Kenyans courts were limited in trying offenses committed outside the country. Those found guilty will either be fined up to Sh2 million, be jailed for three years, or both.Courts in the country will soon have jurisdiction to try any Kenyan citizen who commits an offense anywhere in the world if the Cybercrime and Computer Crimes Bill, 2014 becomes law.
The Bill, which was drafted by the office of the Director of Public Prosecution and is to be tabled in Parliament, proposes actions for offence committed in and outside Kenya.
“We need these laws and once in place we have to sensitise Kenyans so that we can deal with cybercrime,” Deputy Director of Public Prosecutions Dorcas Oduor said when opening a forum for stakeholders to discuss the proposed Bill this week. (READ: There’s urgent need for internet law)
Previously, Kenyans courts were limited in trying offences committed outside the country.

DISCLOSE PASSWORDS
Those found guilty of committing the offence on a ship or aircraft registered in Kenya, using a Kenyan domain name or outside the territory of Kenya will also be prosecuted.
They will either be fined up to Sh2 million, be jailed for three years, or both.
Evidence generated from a computer system will also be admissible in a court of law while prosecuting such a crime.
The Bill also proposes that a person who causes a computer system to perform a function, knowing that the access they intend to secure is unauthorised, commits an offence.
“A person who intentionally and without lawful excuse or justification, inputs, alters, delays transmission, deletes, or suppresses computer data, resulting in inauthentic data with the intent that it be considered or acted upon for legal purposes as if it were authentic, commits an offence and is liable upon conviction to a fine not exceeding ten million or ten years imprisonment or both.”

EMOTIONAL DISTRESS
The Bill also proposes that a person who sells, lets to hire, distributes, publicly exhibits through a computer system and puts into circulation, or for purposes of sale, hire, distribution, public exhibition or circulation, makes, produces or their possession any obscene book, pamphlet, paper, drawing, painting, art, representation or figure or any other obscene object commits an offence.
Those using computers to threaten, abuse or insulting words or behaviour, displays publishes or distributes written or electronic material; or distributes, shows or plays, a recording of visual images will be held accountable.
The Bill also proposes action on a person who uses a computer system including electronic communication to harass, intimidate or cause substantial emotional distress or anxiety to another person.
These include communicating obscene, vulgar, profane, lewd, lascivious, or indecent language, picture or image.
Courts will also issue a warrant authorising a police officer or lawful authority, to enter any premises to access, search and seize the thing or computer data.
All public or private corporations processing personal data will be expected to report any security breaches resulting in theft, loss or misuse of data to the police and those who will fail will be committing an offence.
 Depicted from The Daily Nation

Is it worth it?! For others, they need that rush, that adrenaline flow in their blood,so its a fruit that must be eaten-I have one phrase to guide you; that's if you can't stay away from that adrenaline rush: 'Make it hard for them to find you, and impossible for them to prove they've found you' *Winks* Happy Hunting

Friday, 18 October 2013

Mozilla Firefox Add-ons A Hacker Must Have And Use #Hacker #Infosec #Browser




Firefox's one of the most secure browser in the world,like other browsers Mozilla Firefox has add-ons. This article brings the best and the most effective hacking add-ons ever on Firefox. In short this article's listing the most popular and interesting firefox add-ons that are useful for hackers and also security experts.The list vary from information gathering firefox add-ons to attacking tools/add-ons.
brings you the best and most effective Hacking add-ons ever on Firefox. In short, we are listing a most popular and interesting Firefox add-ons that are useful for Hackers. This list of 11 add-ons vary from information gathering tools to attacking tools. All these add-ons are available for free and you can download from the Mozilla add-on website. So friends lets see what Darkhtu has bring this time for you. I will list them in way from top( I like most) to bottom pattern but note that all of them are extremely good tools. - See more at: http://www.darkhtu.net/2013/10/11-firefox-addons-hacker-must-have-and.html#sthash.DmID8xii.dpuf
brings you the best and most effective Hacking add-ons ever on Firefox. In short, we are listing a most popular and interesting Firefox add-ons that are useful for Hackers. This list of 11 add-ons vary from information gathering tools to attacking tools. All these add-ons are available for free and you can download from the Mozilla add-on website. So friends lets see what Darkhtu has bring this time for you. I will list them in way from top( I like most) to bottom pattern but note that all of them are extremely good tools. - See more at: http://www.darkhtu.net/2013/10/11-firefox-addons-hacker-must-have-and.html#sthash.DmID8xii.dpuf
brings you the best and most effective Hacking add-ons ever on Firefox. In short, we are listing a most popular and interesting Firefox add-ons that are useful for Hackers. This list of 11 add-ons vary from information gathering tools to attacking tools. All these add-ons are available for free and you can download from the Mozilla add-on website. So friends lets see what Darkhtu has bring this time for you. I will list them in way from top( I like most) to bottom pattern but note that all of them are extremely good tools. - See more at: http://www.darkhtu.net/2013/10/11-firefox-addons-hacker-must-have-and.html#sthash.DmID8xii.dpuf
brings you the best and most effective Hacking add-ons ever on Firefox. In short, we are listing a most popular and interesting Firefox add-ons that are useful for Hackers. This list of 11 add-ons vary from information gathering tools to attacking tools. All these add-ons are available for free and you can download from the Mozilla add-on website. So friends lets see what Darkhtu has bring this time for you. I will list them in way from top( I like most) to bottom pattern but note that all of them are extremely good tools. - See more at: http://www.darkhtu.net/2013/10/11-firefox-addons-hacker-must-have-and.html#sthash.DmID8xii.dpuf
brings you the best and most effective Hacking add-ons ever on Firefox. In short, we are listing a most popular and interesting Firefox add-ons that are useful for Hackers. This list of 11 add-ons vary from information gathering tools to attacking tools. All these add-ons are available for free and you can download from the Mozilla add-on website. So friends lets see what Darkhtu has bring this time for you. I will list them in way from top( I like most) to bottom pattern but note that all of them are extremely good tools. - See more at: http://www.darkhtu.net/2013/10/11-firefox-addons-hacker-must-have-and.html#sthash.DmID8xii.dpuf
brings you the best and most effective Hacking add-ons ever on Firefox. In short, we are listing a most popular and interesting Firefox add-ons that are useful for Hackers. This list of 11 add-ons vary from information gathering tools to attacking tools. All these add-ons are available for free and you can download from the Mozilla add-on website. So friends lets see what Darkhtu has bring this time for you. I will list them in way from top( I like most) to bottom pattern but note that all of them are extremely good tools. - See more at: http://www.darkhtu.net/2013/10/11-firefox-addons-hacker-must-have-and.html#sthash.DmID8xii.dpuf
brings you the best and most effective Hacking add-ons ever on Firefox. In short, we are listing a most popular and interesting Firefox add-ons that are useful for Hackers. This list of 11 add-ons vary from information gathering tools to attacking tools. All these add-ons are available for free and you can download from the Mozilla add-on website. So friends lets see what Darkhtu has bring this time for you. I will list them in way from top( I like most) to bottom pattern but note that all of them are extremely good tools. - See more at: http://www.darkhtu.net/2013/10/11-firefox-addons-hacker-must-have-and.html#sthash.DmID8xii.dpuf
brings you the best and most effective Hacking add-ons ever on Firefox. In short, we are listing a most popular and interesting Firefox add-ons that are useful for Hackers. This list of 11 add-ons vary from information gathering tools to attacking tools. All these add-ons are available for free and you can download from the Mozilla add-on website. So friends lets see what Darkhtu has bring this time for you. I will list them in way from top( I like most) to bottom pattern but note that all of them are extremely good tools. - See more at: http://www.darkhtu.net/2013/10/11-firefox-addons-hacker-must-have-and.html#sthash.DmID8xii.dpuf
brings you the best and most effective Hacking add-ons ever on Firefox. In short, we are listing a most popular and interesting Firefox add-ons that are useful for Hackers. This list of 11 add-ons vary from information gathering tools to attacking tools. All these add-ons are available for free and you can download from the Mozilla add-on website. So friends lets see what Darkhtu has bring this time for you. I will list them in way from top( I like most) to bottom pattern but note that all of them are extremely good tools. - See more at: http://www.darkhtu.net/2013/10/11-firefox-addons-hacker-must-have-and.html#sthash.DmID8xii.dpuf
 All the add-on listed on this article are available and free on the Mozilla add-on website.


brings you the best and most effective Hacking add-ons ever on Firefox. In short, we are listing a most popular and interesting Firefox add-ons that are useful for Hackers. This list of 11 add-ons vary from information gathering tools to attacking tools. All these add-ons are available for free and you can download from the Mozilla add-on website. So friends lets see what Darkhtu has bring this time for you. I will list them in way from top( I like most) to bottom pattern but note that all of them are extremely good tools. - See more at: http://www.darkhtu.net/2013/10/11-firefox-addons-hacker-must-have-and.html#sthash.DmID8xii.dpuf
brings you the best and most effective Hacking add-ons ever on Firefox. In short, we are listing a most popular and interesting Firefox add-ons that are useful for Hackers. This list of 11 add-ons vary from information gathering tools to attacking tools. All these add-ons are available for free and you can download from the Mozilla add-on website. So friends lets see what Darkhtu has bring this time for you. I will list them in way from top( I like most) to bottom pattern but note that all of them are extremely good tools. - See more at: http://www.darkhtu.net/2013/10/11-firefox-addons-hacker-must-have-and.html#sthash.DmID8xii.dpuf
1. Tamper Data
   

Tamper data is an great tool to to view and modify HTTP/HTTPS headers and post parameters. We can alter each request going from our machine to destination host with this. Thus it helps in security testing web application by modifying POST parameters. It can be used in performing XSS and SQL Injection attacks by modifying header data. Add Tamper data to Firefox: https://addons.mozilla.org/en-us/firefox/addon/tamper-data/
 

2. Firebug
   

Firebug is a nice add-on that integrates a web development tool inside the browser. With this tool, you can edit and debug HTML, CSS and JavaScript live in any webpage to see the effect of changes. It helps in analyzing JS files to find XSS vulnerabilities. It’s an really helpful add-on in finding DOM based XSS for security testing professionals. Add firebug to your browser : https://addons.mozilla.org/en-US/firefox/addon/firebug/
 
 

3. Hackbar  

Hackbar is a simple penetration tool for Firefox. It helps in testing simple SQL injection and XSS holes. You cannot execute standard exploits but you can easily use it to test whether vulnerability exists or not. You can also manually submit form data with GET or POST requests. It also has encryption and encoding tools. Most of the times, this tool helps in testing XSS vulnerability with encoded XSS payloads. It also supports keyboard shortcuts to perform various tasks.I am sure, most of the persons in the security field already know about this tool. This tool is mostly used in finding POST XSS vulnerabilities because it can send POST data manually to any page you like. With the ability of manually sending POST form data, you can easily bypass client side validations of the page. If your payload is being encoded at client side, you can use an encoding tool to encode your payload and then perform the attack. If the application is vulnerable to the XSS, I am sure you will find the vulnerability with the help of the Hackbar add-on on Firefox browser. Add Hackbar to Firefox: https://addons.mozilla.org/en-US/firefox/addon/hackbar/
 




 4. Cookies Manager +  
Cookie Manager is one of the greatest tool ever made. Using this tool you can actually play with cookies. You can alter almost all cookie using this tool. You can use Cookies manager to view, edit and create new cookies. It also shows extra information about cookies, allows edit multiple cookies at once and backup/restore them. Add Cookies Manager to Firefox: https://addons.mozilla.org/en-US/firefox/addon/cookies-manager-plus/
 
5. NoScript  

No Script add-ons greatness is beyond imagination. With this tool you can monitor each an every script running on website, you can block any of scripts and see what actually that scripts does on website. But this add-on is for experts, newbies will face problems using this. Note: If you are testing XSS, HTTPS header modifications, Injection attacks on any website you need to disable this plugin because it will not allow you to do so.  Add NoScript to Firefox: https://addons.mozilla.org/en-us/firefox/addon/noscript/
 
6. Grease Monkey  

Grease Monkey is an counter part of No Script, its actually behaves opposite of Noscript. We use Noscript to block the scripts and use GreaseMonkey to run the scripts. It allows you to customize the way a web page displays or behaves, by using small bits of JavaScript.  Add Grease Monkey to Firefox : https://addons.mozilla.org/en-US/firefox/addon/greasemonkey/
 


 7. User Agent Switcher

User Agent Switcher add-on; adds a one click user agent switch to the browser. It adds a menu and tool bar button in the browser. Whenever you want to switch the user agent, use the browser button. User Agent add on helps in spoofing the browser while performing some attack. Add user agent Switcher to Firefox: https://addons.mozilla.org/en-US/firefox/addon/user-agent-switcher/
 

8. CryptoFox  

CryptoFox is an encryption or decryption tool for Mozilla Firefox. It supports most of the available encryption algorithm. So, you can easily encrypt or decrypt data with supported encryption algorithm. This add-on comes with dictionary attack support, to crack MD5 cracking passwords. Although, it hasn’t have good reviews, it works satisfactorily. Add CryptoFox to Firefox: https://addons.mozilla.org/en-US/firefox/addon/cryptofox/
 

9. SQL Inject Me  

SQL Inject Me is another nice Firefox add-on used to find SQL injection vulnerabilities in web applications. This tool does not exploit the vulnerability but display that it exists. SQL injection is one of the most harmful web application vulnerabilities, it can allow attackers to view, modify, edit, add or delete records in a database.The tool sends escape strings through form fields, and tries to search database error messages. If it finds a database error message, it marks the page as vulnerable. Hackers can use this tool for SQL injection testing. Add SQL Inject Me to Firefox: https://addons.mozilla.org/en-us/firefox/addon/sql-inject-me/ 
 

10.  XSS ME  

Cross Site Scripting is the most found web application vulnerability. For detecting XSS vulnerabilities in web applications, this add-on can be a useful tool. XSS-Me is used to find reflected XSS vulnerabilities from a browser. It scans all forms of the page, and then performs an attack on the selected pages with pre-defined XSS payloads. After the scan is complete, it lists all the pages that renders a payload on the page, and may be vulnerable to XSS attack. Now, you can manually test the web page to find whether the vulnerability exists or not. Add XSS ME to Firefox: https://addons.mozilla.org/en-us/firefox/addon/xss-me/
 

11.  Passive Recon
 

Last but not the least. Passive recon is a good information gathering tool. 
PassiveRecon provides information security professionals with the ability to perform "packetless" discovery of target resources utilizing publicly available information. It gathers information like DnsStuff tool available on backtrack.
Add Passive Recon to Firefox: https://addons.mozilla.org/en-US/firefox/addon/passiverecon/



---------------------------- Source Of The Article -------------------------------




Tuesday, 15 October 2013

Penetration Testing Tools #Infosec #Websecurity #Forensic #Penetration

Here is a compilation of multiple forensic and penetration testing tools for applications, networks, and websites.
image

                                       [Image: sitelogo.png]
Nmap is a very versatile tool developed to scan addresses (IPV6 included), this tool allows the users to gather a mass amount of information about the target quickly, information including open ports, + much, much more. Nmap supports a large number of scanning techniques such as: UDP, TCP connect(), TCP SYN (half open), ftp proxy (bounce attack), ICMP (ping sweep), FIN, ACK sweep, Xmas Tree, SYN sweep, IP Protocol, and Null scan.
—————————————————————————————————————————————-

                              [Image: IXcgJ.png]
A very powerful network troubleshooting and analysis tool, WireShark provides the ability to view data from a live network, and supports hundreds of protocols and media formats.
—————————————————————————————————————————————-
                             [Image: logooxid.png]
Cain and Abel is a revolutionary tool that provides many functions that are able to do various password retrieval jobs, cracking passwords, sniffing networks, and routing/analyzing protocols. This tool is Windows-only, unlike many other tools that exist, this is a pleasant twist to modern penetration testing and forensic tools.
—————————————————————————————————————————————
                         [Image: logo.png]
MetaSploit, a very powerful network security and analysis tool, used often for penetration attacks, this tool has a clean interface and easily gathers the information that you seek.
[Image: HkR4k.png]—————————————————————————————————————————————                                                                                                                              
Ettercap is a suite for man in the middle attacks on LAN. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols (even ciphered ones) and includes many feature for network and host analysis. (Taken from their website)
———————————————————————————————————————————-
                                image
The Nessus tool provides high-speed data discovery, asset profiling, configuration auditing, and vulnerability analysis of networks.
—————————————————————————————————————————————

                               [Image: 7diZx.png]
Havij is the most common and heard of testing tool for SQLI injection and many other web-based injection types. It fluently provides the site’s scan, admin look-up, password cracking, and database retrieval. It literally makes it a breeze to hack, and find, vulnerable websites
—————————————————————————————————————————————
                             http://i.imgur.com/6GXN9.png
Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities. (Taken from http://portswigger.net/burp/)
—————————————————————————————————————————————-
                   [Image: L4fYp.png]
Acunetix is a strong, and very popular website security tool. It provides many tools to test your website, (or others) for various injections. Acunetix WVS automatically checks your web applications for SQL Injection, XSS & other web vulnerabilities.
—————————————————————————————————————————————-
            [Image: CPoer.png]

Back Track is a widely popular bootable Live-CD of a Linux Distro. Back Track offers a vast variety of penetration testing tools, along with those for network attacks, and supports many other forms of testing/attacking, for VOIP networks, Websites + more. The tool’s interface and design provides an easy to use layout.

Credit goes to: TEAM IHA