background preloader

Security

Facebook Twitter

About Hackers & Hacks. Top 50 Hacking Tools That You Must Have. Whether you are a Penetration tester, a hacker or an aspiring newbie trying to learn Cyber Security, you must have a nice catalogue of tools to make your life easier.

Top 50 Hacking Tools That You Must Have

While these tools do make working simpler but cannot compensate for the vast amount of knowledge required in this field. Kerberos: The Network Authentication Protocol. Recent News Old news is archived. 24 Feb 2015 - krb5-1.11.6 is released The krb5-1.11.6 source release is now available. 18 Feb 2015 - krb5-1.12.3 is released The krb5-1.12.3 source release is now available. 11 Feb 2015 - krb5-1.13.1 is released.

Kerberos: The Network Authentication Protocol

MIT Formally Kicks Off Cybersecurity Work. Security MIT Formally Kicks Off Cybersecurity Work By Dian Schaffhauser03/16/15 MIT has shared additional details on how it plans to spend a $15 million cybersecurity grant.

MIT Formally Kicks Off Cybersecurity Work

Introduction to Hacking. 5 Killer Tricks to Get the Most Out of Wireshark. Wireshark has quite a few tricks up its sleeve, from capturing remote traffic to creating firewall rules based on captured packets.

5 Killer Tricks to Get the Most Out of Wireshark

Read on for some more advanced tips if you want to use Wireshark like a pro. We’ve already covered basic usage of Wireshark, so be sure to read our original article for an introduction to this powerful network analysis tool. Network Name Resolution While capturing packets, you might be annoyed that Wireshark only displays IP addresses. You can convert the IP addresses to domain names yourself, but that isn’t too convenient. Wireshark can automatically resolve these IP address to domain names, although this feature isn’t enabled by default. You can enable this setting by opening the preferences window from Edit -> Preferences, clicking the Name Resolution panel and clicking the “Enable Network Name Resolution” check box.

Start Capturing Automatically. Wireshark Display Filters. Training. HTG Explains: The Difference Between WEP, WPA, and WPA2 Wireless Encryption (and Why It Matters) Even if you know you need to secure your Wi-Fi network (and have already done so), you probably find all the encryption acronyms a little bit puzzling.

HTG Explains: The Difference Between WEP, WPA, and WPA2 Wireless Encryption (and Why It Matters)

Read on as we highlight the differences between encryption standards like WEP, WPA, and WPA2–and why it matters which acronym you slap on your home Wi-Fi network. What Does It Matter? You did what you were told to do, you logged into your router after you purchased it and plugged it in for the first time, and set a password. What does it matter what the little acronym next to the security encryption standard you chose was? As it turns out, it matters a whole lot: as is the case with all encryption standards, increasing computer power and exposed vulnerabilities have rendered older standards at risk. Security Intelligence Operations - Cisco Systems. CyberCIEGE Educational Video Game. An innovative video game and tool to teach computer and network security concepts CyberCIEGE enhances information assurance and cyber security education and training through the use of computer gaming techniques such as those employed in SimCity™.

CyberCIEGE Educational Video Game

In the CyberCIEGE virtual world, users spend virtual money to operate and defend their networks, and can watch the consequences of their choices, while under attack. Difference between WEP, WPA and WPA2 (Which is Secure) BESbswyBESbswy.

Difference between WEP, WPA and WPA2 (Which is Secure)

InfoSec Handlers Diary Blog - Hashing Passwords. After talking about SQL Injection, this is the second part of the mini series to help you protect yourself from simple persistent attacks as we have seen them in the last couple months.

InfoSec Handlers Diary Blog - Hashing Passwords

A common MO employed in these attacks is to steal passwords from a database via sql injection. Later, the attacker will try to use these passwords to break into other sites for which users may choose the same password. Of course, part of the problem is password reuse. Cryptography - Windows 7 Password Hash Security. Wi-Fi Protected Setup Flaws Make Wireless Network Brute-force Attacks Feasible.

Design flaws in the Wi-Fi Protected Setup (WPS) wireless standard can make it easier for attackers to obtain access codes for secured wireless networks by brute force.

Wi-Fi Protected Setup Flaws Make Wireless Network Brute-force Attacks Feasible

The vulnerabilities identified by security researcher Stefan Viehbock affect a large number of WPS-enabled routers and wireless access points. The WPS standard was created in 2007 by the Wi-Fi Alliance in order to provide non-technical users with a simple method of setting up wireless networks. The standard supports several Wi-Fi authentication methods including one that requires pushing a physical button on the router and one that uses a predefined PIN number printed on a sticker by the device manufacturer.

Free Rainbow Tables » Distributed Rainbow Table Generation » LM, NTLM, MD5, SHA1, HALFLMCHALL, MSCACHE. CCENT CCNA ICND1 640 822 Official Cert Guide, 3rd Edition. Computer acting funny? It may be infected with a virus! One great thing about computers is that they often warn us when something is wrong.

Computer acting funny? It may be infected with a virus!

Sometimes they suddenly slow down to a crawl, other times they start to freeze up or even crash for what seems to be no reason at all. Most of the time though, there is a reason why our computers start to act funny. One of those reasons is due to malware and viruses. No one likes to have a computer virus, but if you do happen to catch one, it’s important to know the warning signs so that you can take care of the problem as soon as possible.

Storing Passwords - done right! Written by: Christoph Wille Translated by: Bernhard Spuida First published: 1/5/2004 Viewed 257725 times. 1766 ratings, avg. grade 4.76 In very many - not to say almost all - Web applications user data is administered, from Web forum to Web shop. These user data encompass login information of the users which contain the password besides the user name - and this in plain text. A security leak par excellence. Why is storing the user name and password in plain text a security leak? Well, imagine a cracker gaining system access through eventual OS or server software errors, and being able to read the user database. List of Rainbow Tables.

This page lists the rainbow tables we generated. LM rainbow tables speed up cracking of password hashes from Windows 2000 and Windows XP operating system. NTLM rainbow tables speed up cracking of password hashes from Windows Vista and Windows 7 operating system. Hexadecimal encode and decode. Compendium. Nessus Vulnerability Scanner. Detect & Assess Nessus is continuously updated with information about advanced threats and zero-day vulnerabilities, and new types of regulatory compliance configuration audits. Report & Take Action Report what matters to responsible parties with exploitability, severity modification, scan scheduling and deliver remediation reports via targeted emails.

Nessus. PsExec. Introduction Utilities like Telnet and remote control programs like Symantec's PC Anywhere let you execute programs on remote systems, but they can be a pain to set up and require that you install client software on the remote systems that you wish to access. PsExec is a light-weight telnet-replacement that lets you execute processes on other systems, complete with full interactivity for console applications, without having to manually install client software.

PsExec's most powerful uses include launching interactive command-prompts on remote systems and remote-enabling tools like IpConfig that otherwise do not have the ability to show information about remote systems. BackTrack Linux - Penetration Testing Distribution. Snort.Org. SecTools.Org Top Network Security Tools. NetworkMiner - The NSM and Network Forensics Analysis Tool.

NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows (but also works in Linux / Mac OS X / FreeBSD). NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the network. NetworkMiner can also parse PCAP files for off-line analysis and to regenerate/reassemble transmitted files and certificates from PCAP files. NetworkMiner makes it easy to perform advanced Network Traffic Analysis (NTA) by providing extracted artifacts in an intuitive user interface.

The way data is presented not only makes the analysis simpler, it also saves valuable time for the analyst or forensic investigator. NetworkMiner has, since the first release in 2007, become a popular tool among incident response teams as well as law enforcement. NetworkMiner showing files extracted from sniffed network traffic to disk. Penetration Testing Software. RealSense™ Technology. OpenVAS - OpenVAS - Open Vulnerability Assessment System Community Site.

Scanning the Internet with Nmap (Defcon 16) Tutorial. Scanning The Internet With Nmap (Defcon 16) Nmap - Free Security Scanner For Network Exploration & Security Audits. TCPDUMP/LIBPCAP public repository. Wireshark · Go deep. LogMeIn - Remote Access and Desktop Control Software for Your Computer. Communication Consolidation. Open Port Check Tool. John the Ripper password cracker.

John the Ripper is free and Open Source software, distributed primarily in source code form. If you would rather use a commercial product tailored for your specific operating system, please consider John the Ripper Pro, which is distributed primarily in the form of "native" packages for the target operating systems and in general is meant to be easier to install and use while delivering optimal performance. This version integrates lots of contributed patches adding GPU support (OpenCL and CUDA), support for a hundred of additional hash and cipher types (including popular ones such as NTLM, raw MD5, etc., and even things such as encrypted OpenSSH private keys, ZIP and RAR archives, PDF files, etc.), as well as some optimizations and features. Unfortunately, its overall quality is lower than the official version's. Requires OpenSSL. There are unofficial binary builds (by John the Ripper user community members) for Windows, Linux, Solaris, and Mac OS X.

Www.sans.org/security-resources/tcpip.pdf. Nmap - Free Security Scanner For Network Exploration & Security Audits.