How Many Times Has Your Data Been Exposed to Hackers? Take The Quiz And Know

 The New York Times has come up with a quiz that will tell you if your personal information has been compromised during the recent cyber attacks and leaks of major companies.

Hack has become the new ‘viral’ today. Google is filled from news reports to ‘How To’ hacks. Every month there are revelations about companies being hacked, or the government snooping around millions of its citizens- the list is endless. When the Government itself is not safe from the hackers, how can you possibly think to be! In fact, you could be under attack anytime.

New York Times has created a quiz that will tell you how much of your personal information is already out there. The quiz involves some of the major security breaches that have happened in past two years and if you contacted, or used the services of any of these companies.

The quiz will tell you how many times your personal information like address, social security number, email, password, your financial history and even your fingerprints have been compromised.

The New York Times gave the reasons for your information leak and even the guidelines for you to do next if you were the unlucky one.

Even in a utopian online world, 100 percent safety is not guaranteed. But do not worry. With some awareness and security measures, you can at least try to keep yourself safe in future. Use password managers or two-factor authentication. Monitor your bank accounts and report in case of suspicious money transfers. Don’t reveal your personal information on social media.

Take the quiz here and tell your experiences.

USBKill — Code That Kills Computers Before They Examine USBs for Secrets

USBkill — A new program that once activated, will instantly disable the laptop or computer if there is any activity on USB port.

Hey Wait, don’t compare USBkill with the USB Killer stick that destroy sensitive components of a computer when plugged-in.

"USBKill" is a new weapon that could be a boon for whistleblowers, journalists, activists, and even cyber criminals who want to keep their information away from police and cyber thieves.

It is like, if you are caught, kill yourself. In the same fashion as terrorists do.

Here I am not talking about to kill yourself, but to kill the data from your laptop if the law enforcement has caught your laptop.

USBkill does exactly this by turning a thumb drive into a kill switch that if unplugged, forces systems to shut down.

Hephaestos (@h3phaestos), the author of USBkill, reports that the tool will help prevent users from becoming the next Ross Ulbricht, founder of the infamous underground drug marketplace Silk Road, who was arrested in a 2013 FBI raid in which his laptop was seized by law enforcement agencies.

"USBKill waits for a change on your USB ports, then immediately kills your computer," a Github document states.

Completely Wipe up any pieces of evidence before Feds caught you:

Generally, the kind of activities on USB port include the police installing a mouse jiggler – a tool that prevents computer systems from going to sleep, and any USB drive being removed from the computer.

"If this happens you would like your computer to shut down immediately," Hephaestos says. Simply, tie a flash USB key to your ankle, and instantly start USBkill when the police or any other law enforcement official caught you with a laptop.

In case, they steal or take your laptop or computer with them, they would definitely remove the USB drive that will immediately shut down your laptop.

The author of USBkill states that the program could be very effective when running on a virtual machine, which would vanish when you reboot.

The author says that USBKill will be added to additional commands and functions. However, it does work correctly and efficiently in its current state as well.

CRACKING WPA/WPA2 – PSK ENCRYPTION (How To Hack Wi-fi Password)

About a month ago, to my embarrassment, I learned that my Wi-Fi password was so weak that even my 10 year old neighbour could crack it…
No, not really.

• A little Disclaimer – The contents of this post are solely for ethical and educational purposes. You may not use it for unethical purposes. The Author or the Website is not responsible for any damage to yourself, your network, or the computers in you network, should something go wrong. (Basically guys, be careful where you use this and please don’t do anything stupid.)

We’re going to start with a little introduction to Kali Linux, because that is the OS I prefer, is the easiest for this task and comes with all the tools we need. “Kali” is a Linux distribution and is the successor to the much acclaimed Backtrack, which many of you reading this article will probably know of. Now, there are many ways of installing and using Kali, if anyone needs any help, leave in the comments, or Click on This Link How To Install Kali Linux

In this tutorial, I’m going to hack into a Wi-Fi hotspot that I just set up, named – Anonymus.
Now, given that we have Kail Linux, open up a terminal window, type in “ifconfig “. This is going to list all the networking interfaces connected to your device.

Here, we only need (wlan0) which is our Wi-Fi card, so we can disable the others by doing “ifconfig <name of the interface> down”.
(“lo” does no matter)…

Now, we type “airmon-ng start wlan0”

(airmon-ng is just a tool for monitoring air traffic, “start” basically starts the tool, and “wlan0” specifies the interface we are using for monitoring)
It’ll probably show “some processes that could cause trouble”, we’ll simply kill those processes by entering “kill <process ID>”.

Now if we do “ifconfig”, it should show us the newly made monitoring interface “mon0”.

Then, put in, “airodump-ng mon0”.
In the screenshot below, the highlighted bssid is our target (and it is my own), named “Anonymus”, the channel is 13 as we can see under the “CH” column.

For our next step we type in, “airodump-ng –c <channel> -w <name> –bssid <bssid> mon0”.

Let me explain a few things here, “airodump-ng” is a tool for capturing Wi-Fi packets, “<channel>” means the channel your target is running on, “-w” basically writes a file by the name that succeeds it in “<name>”, (I did “handshake” just for the convenience of it) bssid is a string of numbers specific to a hotspot.

Now, open up a new terminal and type in “aireply-ng -0 0 –a <bssid> mon0”, this command send a deauthentication signal (usually called a deauth packet) to all the devices connected to that hotspot. Then after a few seconds we stop it by “Ctrl+C”. Now, as we can see, the other terminal shows that the WPA Handshake was successfully captured.

We can close both windows at this point, and open a new one. Type “ls”; that should list the files in the current directory. We can clearly see that the files from the above operation are present. But we only need the file ending with “-01.cap”.

Then we do, “aircrack-ng –w <full location of the wordlist> <the file name>”.

You may be asking what wordlist? What is that sh*t?
A Wordlist is a file containing thousands of known and possible passwords, which you can download from the internet (“specifying from the internet” – We ain’t dumb, boy! :P). The one I used can be found here. The list contains 982,963,904 words exactly all optimized for WPA/WPA2. Would also just like to point out that this is not my work, I got it from forums.hak5.org. It was a guy who compiled a whole load of useful lists, including his own to come up with 2 lists (one is 11gb and one is 2gb) I will be seeding this torrent indefinitely since it is shareware and awesome!

It will then start searching for matching keys in the word list. Now the time that this will take is solely dependent on the strength of the password. The stronger the password the more time will it take. For very strong passwords, check this out. For tips on creating your own strong password – Top 10 Tips to Create a Strong Password
After completion it looks something like the screenshot below. In it, you can see that it tested 45688 keys and my key was the 45689th. I purposely put futurama because frankly, futurama is awesome! Also it is a very weak password (People reading this, if your password is “futurama”, you’re cool! The Hell? Change it right now!)

Now that we know the password, lets test it…

Annnnd… Voila! it works!

Knowing this you will be…

But beware, don’t use it on a Lannister… (Because a Lannister always pays his debts :P)
For those of you who didn’t understand that reference, #GameOfThrones!

YOUR SMARTPHONE IS STILL SPYING ON YOU AFTER TURNING IT OFF – ANDROID

Security experts have recently found that your smartphones are spied even your phone is switched off.Security researchers have unearthed a new Android Malware called PowerOffHijack.  PowerOffHijack because the nasty malware has a very unique feature – it hijacks the shutdown process of user’s mobile phone.Next time you turn off your Android phone, you might want take the battery out just to be certain.

After pressing the power button, you will see the real shutdown animation, and the phone appears off. Although the screen is black,your been spied.According to the company, PowerOffHijack malware infects devices running Android versions below 5.0 (Lollipop) and requires root access to perform the tasks.

PowerOffHijack malware has already infected more than 10,000 devices, mostly in China.PowerOffHijack malware has ability to silently send lots of premium-rate text messages, make calls to expensive overseas numbers, take photos and perform many other tasks even if the phone is supposedly switched off.

Note: Simple method to get rid of you being spied is by taking out the battery after u switch off your smartphone.

Why, Where And How To Start Programming And Approach To Hacking

Recently, we’ve been having requests and answers which needed a basic knowledge of programming languages to be fully understood.Sometimes starting studying programming languages can be seen as a long and tedious process, particularly when people discover hacking and try some tools for the first time. GUIs for hacking are everywhere nowadays, but their objective is to be PoC (Proof of concepts, see, there’s a whole dictionary behind every topic that you should know when starting studying it, hacking too, though I don’t know it all), to be something to show how easy hacking can be (not to be misunderstood with “hacking is easy”, better “see how easy hacking you is? Go and fix this”).So you basically can’t hack without programming knowledge, as you would just randomly press buttons and writing senseless commands. Once you start digging in the programming field, you’ll slowly fill those commands with sense, and you’ll be able to understand how the tools you use work. 

You should never run programs that you don’t know how they work, especially in the hacking field, because you don’t know the consequences of a failed attack or of a successful but noisy one.

I wanted to apologize for any grammar error you might encounter, please let me know if you find any, I’m not mother tongue.

Interesting, So Programming Knowledge Is Important…

Yes! And, because I like lists, let me recap some of the most valuable reasons why programming is that important:

-First thing first, technology and Information Technology is considered the future, so programming (IMHO) is the key to understand the future by taking notions from the past (story of IT is fascinating too, I’m always amazed).

-Speaking about hacking without programming knowledge, it’s like building a house with only half of the ground floor. You can build one or two floors, then it will fall poorly, leaving you with rocks only. Being blind on this topic can cause you serious problems with law if something goes wrong, but more importantly you actually don’t know what you are doing.

-Sure you encounter errors sometimes, right? A better understanding of how computers work can give you the skill to solve problems without the constant help of someone else, not only in the IT field, but also in the pure logic one, as training your brain in always positive. And trust me, programming is the way to go.

-Using someone else’s tool is, quoting Cracker Hacker, “no fun”. This is actually true, what kind of satisfaction would you feel id you hacked something without even knowing how it happened? With programming knowledge you might be able to not only understand someone else’s code, but also program tools yourself, and once you understand the basic logic it’s not that hard.

-The vantages are infinite after all, just think about smartphone apps (iOS apps are written in C-objective btw), web applications, java running almost everywhere…

So Yeah, Where Do I Start From?

Wrong approach.

As long as we talk about following lessons, the only problem is that “so yeah” (but I think that readers don’t have this kind of behavior really), but learning programming is a need first of all. You write a program when another one misses a feature you need, or if there’s actually no tool that does what you want.

And the sad thing is that there’s no cookbook for it, no step by step how to solve errors. Sure problem solving is a natural skill (you’ll need it so much), but it’s directly generated by the will of doing what you are doing.

So, in case you didn’t understand it, last warning: this is in fact a long process and it is required. No cool tricks to show to friends allowed (newbies, don’t worry, just trying to scare unwilling people).

Formal Recomposition, May I Know Where to Start From?

Yes.
But keep in mind that I’m not a teacher neither I’m trying to be one.

School, courses or self-teaching doesn’t matter: find you own way, I’m just posting some start points suggested by me and other Null byte users. I’m personally studying it as with the self-teaching way, but if you are able to frequent a stable course, I recommend you to do it (waiting for experts thoughts…).

Understanding the basics of programming doesn’t take too long if you have an advanced knowledge about computers. The hard part is the experience building, and the time spent really depends on each person.

I wrote this article as an inspiration, because I want it to be a general topic about programming and ways to approach this world, as recently there has been a lot of confusion about explaining this to newbies, so if you have any correction or new resource you’d like to add, please participate and write it in the comments.I think that we should build a public of people where the most have this kind of knowledge, but there’s absolutely nothing to say about what Null Byte taught until now. I also take the occasion to thank this amazing community which is doing a very great job, especially in pointing newbies in the right direction, so thank you, everyday user of Null Byte.

Resources

I’m going to divide the resources in sections, for a better reading and documenting. future updates will be made for references posted in the comments that might deserve to be added.

General understanding

-Introduction to computer science and programming @ MitOpenCourseware (also linked on the main page): As the Video Lectures list shows, this is a very general though specialized introduction to computer science hosted by Mit. In my opinion this is very reliable and should out stand in this list. I’m quoting the description: “This subject is aimed at students with little or no programming experience. It aims to provide students with an understanding of the role computation can play in solving problems. It also aims to help students, regardless of their major, to feel justifiably confident of their ability to write small programs that allow them to accomplish useful goals. The class will use the Python™ programming language.” This course, as said, aims to provide students also with problem solving, which is one of the points I highlighted in the introduction. The programming language used is Python, one of the most common when talking about hacking.

-Choosing a programing language @ MSDN: In case you don’t know MSDN (Microsoft Developer Network), you’ll learn to rely on it while studying programming languages. This is a very interesting, though a bit outdated in terms of time and not contents, writing about choosing the programming language that fits to you. Although as a developer you should be able to work with multiple languages, it points you in the right direction, and also helps you to better understand low and high level programming, the differences and the features they offer.

-Introduction to programming in C, Podcast: Introduction to C and programming concepts and syntax.

Learning

-Learn C @ Learn-C.org: The C programming language is a basic knowledge that IMO everyone should have. My studies started with C, and C is still widely used today. Also deserving to be mentioned the languages C++ and C objective, which are currently used for many applications, e.g. iDevices applications are written in C objective.

-Code Academy: As initially suggested by CyberHitchHiker, this “Academy” is a very interesting and reliable resource to learn major web development and scripting languages like HTML, CSS, JS, Ruby and Python. 

Post learning and hacking references

As suggested by ghost_, a useful way to get into the topic of hacking is frequenting “information security news sites, as it’s always good to stay in the know”.

-CSO Online: suggested by ghost_, this is a valuable reference for news about information security aimed to every security enthusiast.

-Infosec Institute: A huge documentation about hacking is hosted here, I recommend you to visit Infosec Institute.

-Null Byte: You can’t skip this one. This is the best community I’ve ever found about hacking, so go check every Linux Basics how-to (you should also have Bash knowledge), read this introduction to hacking and tools and you can start hacking like a pro (a thank to OTW for the time spent on these awesome posts)!

Warning: I only checked the validity of every reference I posted, not followed the actual courses, so if you notice something strange is going on with any reference, I’ll provide to remove them asap. If this post is somehow considered spam, please provide to remove it as soon as possible.

Notes

And the list goes on and on.

And I repeat it: I just wanted to start a constructive topic about programming to point newbies in the right direction and to teach myself new things, so that everyone can learn from this.

Because of this post being extremely subjective, please correct any error you find in the comments and I’ll provide to edit, as I want it to be as clear as possible.

Thank you for reading.

______________________________________________________________

Source: http://anonhq.com/start-programming-approach-hacking/

How To Hack Any Account like Facebook ,Twitter , Gmail ,Hotmail ,Skype and yahoo etc.(Cookie Stealing Attack)

Using this method you can hack Any Account like Facebook ,Twitter , Gmail ,Hotmail ,Skype and yahoo etc.

This works At LAN(local Area Network) . Its best place to hack at university, cafe , public place where computer
are on one LAN simple Example WI-Fi.

What is Cookies And how the use of stealing cookies?

Cookies are file’s that stored on Any computer’s By any website when a you visits them . The cookie used by the web server to check the authenticate the Real user . Like you Enter Login in Facebook then a unique string’s Generated and the one copy saved in the web server and other is saved on your Browser as a Cookie file . Both are matched when you open a Account. So then finally we will start.

Step 1:
Download the Wire Shark and install it.

Step 2:
Next open the Wire Shark and then click on interface.

Step 3:
Next choose a interface which is received and sending packet and click on start

Step 4:
Continue the sniffing for around like 10 minutes.

Step 5:
After a maximum 10 minute stop the sniffing by going to a capture menu.

Step 6:
Its important step, now filter to http. cookie contains “datr”. Then filter the all search for http cookies with a name of datr and there is Facebook authentication’s cookie.



Step 7:
Now click on it and then go to the copy > Bytes > Printable Text only



Step 8:
Now for next step you must have 3 thing,
1. Mozilla Firefox [browser]
2. Grease Monkey[add-on]
3. Cookie injector[code]
and then open www.facebook.com make sure you are not login.



Step 9:
Press the button Alt+C to bring up a cookie.




Step 10:
Injector and then Simply paste in a cookie value into it.




Step 11:
Now refresh your page so then finally you Enter the Victim Account.