Cross Site Scripting (XSS) is a code injection vulnerability found in web applications and is generally used by malicious hackers to hijack a legitimate user’s session with the website. XSS vulnerabilities are caused because of improper validation of user input by the Server and then sending this invalidated input back to the user in some exploitable form. A great resource to track the latest XSS vulnerable software, websites and latest research is XSSed.com
Read more…
Categories: Network Security, Network Tools, Tips, Tutorials Tags: Arne, Input Output, Latest Software, Legitimate User, Malicious Hackers, Output Tags, Pointer, Scripts, Software Websites, Validation, Video Series, vulnerabilities, Vulnerability, Web Applications, xss
Below is most common used wireless routers admin password list, and at the bottom i have a link to a huge db of passwords for wireless routers.
Read more…
Categories: Network Security, Network Tools, Wireless Security Tags: Admin Password, hacking, Huge List, network, Password List, passwords, Passwords List, wireless, Wireless Routers
Hackers lie. Skillful hackers lie well. And well-rounded hackers can lie both to people and to machines.
Read more…
Categories: Linux / Unix, Network Security, Network Tools, Tips, Tutorials Tags: Address Resolution Protocol, Arp Cache, Arp Poisoning, Arp Request, Arp Requests, Arp Table, Company Contact, Contact List, Hp Laserjet Printer, Ip Addresses, Local Network, Mac Address, Mac Addresses, Mayhem, Message Types, Receptionist, Reverse Arp, Roll Call, Short Term Memory, Social Engineering
Introduction
Imagine a world without tracert/traceroute. You would be sending your precious packets out into the big wide world with no idea where they go and what they might meet when they are out there. When you set up routers with complex route statements you wouldn’t really know if everything you want is travelling the path you intend it to. When that pesky machine across the internet is "hammering" away at your mail server and you’d really like to know where it is you would be "blind". Enter traceroute, the network administrator’s personal "tracker".
Traceroute was originally conceived as a hack by Van Jacobson in about 1988. He needed to find a way to delineate the path his packets were taking through a routed network to troubleshoot some problems. There were no tools available to do this and there was no clear and easy answer. With knowledge of how the network works Van created traceroute. The solution is elegant in it’s pure simplicity. It’s all in the TTL…..
NOTE: My definition of a "hack" has always been that it is the use of the knowledge regarding how a system works to obtain results that the system was not intended to provide. As such I have always been extremely impressed by the pure simplicity of traceroute as a perfect example of a true "hack" of a system. It’s a little thing of beauty.
Read more…
Categories: Linux / Unix, Network Security, Network Tools, Tips, Tutorials Tags: Act, Bandwidth, Control Message, Good Reason, hack, Imagine, Internet Control Message Protocol, Internet Protocol Ip, ip address, Mail Server, Network Administrator, Router, Simplicity, Thing Of Beauty, traceroute, Ttl, Van Jacobson
John the Ripper is a decrypting program for passwords. Although it has many
functions we will be looking at using it as a decryper for password files
you possess.
Read more…
Categories: Network Security, Network Tools, Password Recovery, Server Security, Tips, Tutorials Tags: decryper, hack, hacked, hacking, jhon, JTR, linux, linux recover password, lost password, network, networking, passwd, Password Recovery, permission, ping, ripper, sniffer, tutorial, windows, WORDFILE
Below is list of Linux Security Tools that you must know about as being Linux Administrator.
Read more…
Categories: Network Security, Network Tools, Server Security, Wireless Security Tags: Add new tag, backdoor, browser, Chkrootkit, clamav, data acquisition, Denyhosts, Dsniff, Etherape, Ettercap, exploit scanner, firewall, GnuPG, hacking, Hping3, ICMP, IPv4, IPv6, john, john the ripper, Kismet, linux, monitoring tool, MTR, NBTscan, Nemesis, Nessus, Netcat, netdude, network, network analyzer, Network Mapper, network monitor, network security auditor, network traffic analyzer, networking, ngrep, nmap, Ntop, OpenSSH, Packet Injection, password meter, ping, port scanner, privacy, privacy guard, protection, Rkhunter, rootkits, scapy, security, sniffer, SNMP, Snort, SSH, system security, Tcpdump, tcpreplay, tcptrace, tiger, tripwire, unix, virus utility, vulnerabilities, wireless, Wireless Network, wireshark
Port Scanner :
A port scanner is a piece of software designed to search a network host for open ports. This is often used by administrators to check the security of their networks and by crackers to compromise it. To portscan a host is to scan for listening ports on a single target host. Read more…
Categories: Network Security, Network Tools Tags: angry ip scanner, firewall, hacking, icmp tools, ip, ip address, ip packets, ipchain, iptables, Mac ip scanner, namp, network, networking, ping, port scanner, security, superscan, tcp ip, TCP SYN, traceroute, windows ip scanner
What is Net Tools :
Net Tools is a comprehensive set of host monitoring, network scanning, security, administration tools and much more, all with a highly intuitive user interface. It’s an ideal tool for those who work in the network security, administration, training, internet forensics or law enforcement internet crimes fields. Net Tools is mainly written in Microsoft Visual Basic 6, Visual C++, Visual C# and Visual Studio .NET.
Read more…
Categories: Network Security, Network Tools, Wireless Security Tags: Anonymous, cpu, dhcp, dns, DOS, email bomber, Encryption, flooder, ftp, http, ip, ip address, monitoring, net meter, netstat, network, Network Tools, networking, nmap, ping, port scanner, sniffer, SNMP, spoofer, tracert, trojan, trojan hunter, whois