Posts

USB forensic : Find the history of every connected USB device on your computer

Image
Sometime we need to know what USB devices were connected to our computer in our absence.These information could be very useful for forensic examiner or in general case also where we just want to know what USB devices were used . How do this works We all know about registry on windows, a registry is a database in windows which stores settings of the operating system, hardware devices, software programs and user preferences settings. Whenever we insert a USB drive in a computers a registry key with name "USBSTOR" is created this registry key store information about that USB device and whatever info the OS need to know can be found in this registry key.  Finding the all attached USB history To find the usb  history of your device just do the following step below  STEP 1  Go to run and type "regedit".  STEP 2: In the registry go to  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR and there you will find a registry ke...

Netflix account takeover using Google Obscure email vulnerability

Image
 What is Obscure email vulnerability Obscure email vulnerability in Gmail is interaction between two different ways of handling e-mail addresses which means shaquibdexter@gmail.com would be same as shaquib.dexter@gmail.com and this is also same as dexters.h.a.q.u.i.b@gmail.com. But in case of netflix they don't ignore the dotted part so all of them are unique email address for netflix and each one can be used for registering a new account. So this difference can be exploited . The phishing part  Try the Netflix signup form until you get a gmail.com address which is already registered by some user, for example you find the victim shaquibdexter.   Create a Netflix account with address shaquib.dexter   Sign up for free trial with any card no (that card should be throwaway card).   When Netflix applies the active card check, cancel the card. Wait for Netflix to bill the cancelle...

Improve your internet security by blocking malicious domains

Image
 What is this In this post i will show you how can you block all malware domain which host malicious code on their sites which can compromise your system or your browser by saving some bad cookies or malware on your computer, not only this it will also block ads and online tracking cookies. How do this works   This work by creating a host file by replacing your host file. This host file get a list of all those malicious domain name and will create a rule to block all those sites on your system. How does it block site They redirect all those domain to your local address that means all those blocked site in the list will redirect to 127.0.0.1 which is your own computer and your computer will never allowed to communicate to that address .  How to use this  Using this program is very easy just follow some easy steps below and you are good to go  STEP 1 .   Open your terminal and type git clone https://github.com/zant95...

Top security and privacy tool for internet security and privacy protection

Image
We all use internet in our day to day life for communication, file sharing,social networking and for lot of other reasons. But we are also aware of how privacy invasion is increasing day by day with increasing of Black Hats, even some sites also stores Cookies to track your online activity about what sites you are visiting so that they can show you relevant ads based on your browsing history. Apart from these there are lot of unknown online threats we are not aware of. I always make sure to keep my online accounts ,privacy and data secure by using lot of tools and techniques and i decided to share all these tools and techniques with you guys so that you can also make yourself hackproof (almost). Best online resources justdelete.me  Some company make it really difficult to delete your account from their server Justdelete.me make it easy to do this for you, they generate url for you to easily delete your account from web services. Just click on the site name and ...

Crawling pastebin to find specific pastedump

Image
In this post we will crawl into pastebin.com to find specific pastebin dump. For example if we want to find paste for specific keyword like "password" we can get all the paste containing that keyword. Preparing the Attack Usually some sites don't allow web crawling and by doing so you may get banned from accessing that site, which will also make this method vain.  So before doing this i recommend you to use THIS tool to anonymize all your traffic so that if we get banned we can switch our IP address immediately.  Start the Attack STEP 1 Clone into this URL by typing https://github.com/kahunalu/pwnbin.git STEP 2 Now type python pwnbin.py -k pass -n 10 -m 10 here "-k" is the keyword you want to search for "-n" is the number of paste you want to crawl and "-m" number of keywords matches you want.  As we can see above we have found a match and it's now saved to log.txt file so it's time to see the dump co...

Hide secret message inside an Image using LSB-steganography

Image
Imagine a scenario where we want to send a confidential message and don't want anyone except the recipient to read it. We will use every possible methods to make our message hidden from any third person. So here i am going to use LSB-Steganography method to hide our message inside an image. What is LSB  image source  Least Significant bit also called RightMost Bit is a lowest bit of a binary number. For example in binary number 10010010, "0"is the least significant bit.  What is LSB-Steganography  image source LSB-Steganography is a steganography technique in which we hide messages inside an image by replacing Least significant bit of image with the bits of message to be hidden.   By modifying only the first most right bit of an image we can insert our secret message and it also make the picture unnoticeable, but if our message is too large it will start modifying the second right most bit and so on and an attacker can notice the cha...