Lilith – Web Application Security Audit Tool

LiLith is a tool written in Perl to audit web applications. This tool analyses webpages and looks for html form tags , which often refer to dynamic pages that might be subject to SQL injection or other flaws. It works as an ordinary spider and analyses pages, following hyperlinks, injecting special characters that have a special meaning to any underlying platform.
Any Web applications scanner can never perform a full 100% correct audit. Therefore, a manual re-check is necessary. Hence, be aware that Lilith might come up with several false positives.
LiLith is a program that verifies the security of a web application. As a security consultant, the author often sees web applications that contain security flaws. A web application is a complex entity and cannot be fully checked with “just any tool”, therefor I recommend you to manually verify any results.
How the entire “scanning” process works is different from so called “CGI scanners”, such as nikto and n-stealth. This program will surf to a website and crawls through all the links, just as a user would to. On any possible input field, such as text boxes, page id’s, … LiLith will attempt to inject any characters that might have a special meaning for any underlying technology such as SQL.
For more information, it is recommended to read the following white paper: web dissection using lilith.
You can download Lilith here:
lilith-06atar.gz

Read More

How To Become Completely Untraceable - Ethical Hacking

Definition:
The act of keeping your identity hidden online by using connection methods and encryption methods, to make yourself untraceable to a person, website, company, school or whatever else you are doing/connecting to.

Uses of Anonymity:

• Stay hidden when attacking a website or scanning it for vulnerabilities.


• Keep your browsing history/activity hidden when at work, school, library or even your family computer.


• Keep your IP ( Internet Protocol Address ) hidden from victims of a RAT (Remote Administration Tool) or a botnet.


• Bypassing ISPs service usage limits.

What is a VPN ?

A VPN is an acronym for Virtual Private Network, it is a server that is used to connect to a LAN ( Local Area Network ) securely. VPNs will encrypt your connection information and hide your real IP from websites, people and it will keep your connection encrypted so you won't be able to get traced.

List of good Free VPNs:

• Cyberghost VPN
  • You must create an account.
  
  
  • Download Link
  
  


• Pro XPN
  • Create an account.
  
  
  • Download Link
  
  


• Open VPN
  • Downloads.
  
  
  • Open VPN requires configuration files. You add them to C:\Program Files\OpenVPN\config
  
  


• Hot Spot Shield
  • HSS is OpenVPN based, you download the client and it will hide your IP.
  
  

Paid VPNs:

Why are paid VPNs better than free ?
They are more secure and keep no logs. When free ones will keep logs and aren't as securely encrypted as a paid.

• BlackShades VPN
  • Pretty much the best product line on HackForums, you can never go wrong with a BlackShades product.
  
  


• nVPN ( OpenVPN based )
  • Amazing speeds and panel controls and really simple set up.
  
  


• iPredator
  • Not known around HF as much, but it's good.
  
  

What is SOCKS 4/5 ?
SOCKS is the internet protocol that makes it easier for packets to be routed between the client/server via a proxy server. The SOCKS protocol has a designated port, but is not limited to that port. This port number is 1080.

Socks will let you get by the network firewall, usually with schools or workplaces, they will have a block on the browsing you are allowed to do.

What is HTTP Proxy ?
A HTTP ( Hypertext Transfer Protocol ) proxy is kind of the same thing as a SOCKS 5, except the fact it using the HTTP protocol instead of the SOCKS protocol. When a browser is configured with a HTTP proxy, it just hooks through the proxy server and bypasses any firewall put in place on the LAN ( Local Area Network )

Web proxies and Proxy client/managerseb Proxies

• Proxy Filter ( By Omniscient )


• Hide my ass


• Proxify


• FoxyProxy ( Firefox addon )

Proxy Manager

• Tor
  • Download the client.
  
  
  • READ THE PAGE. Tor isn't as safe as people think it is.
  
  

What is SSH and SSH Tunneling ?
SSH is the acronym for Secure Shell, it is an network protocol used to connect to Linux&Unix based machines. This will let you access the shell (Terminal) via a remote connection to the machine/server. The default port for SSH connection is 22.

SSH tunneling is using the SSH protocol to hook through the machine/server as you send a command through your internet, say loading Google, your machine will send the data through the "SSH Tunnel" and your IP will be hidden from the website. As your data is going through the "tunnel" it is encrypted using a Public-Key encryption.

What is MAC Address and MAC Address Spoofing ?

MAC address is the acronym for Media Access Control address it's the unique identifier for a network interface. I like to think of it as the fingerprint of your connection.

MAC address spoofing is using a program (You can do it manually but program is much easier.) to change your MAC address so it doesn't leave behind your networks "fingerprint." Without doing this, you will never be FULLY anonymous.


MAC Address Spoofers.

• SMAC
  • Download link. (CNET)
  
  


• NMAP
  • Download page.
  
  
  • –spoof-mac is the command you use to spoof your MAC with NMAP.
  
  
  
  

Read More

Boost Your Internet Security

Everybody loves the web. Over a billion people make use of it just about every day regarding entertainment, work and keeping in touch withfriends. During the past two decades the society has long been transformed. The way in which society, work, communities and news is distributed internationally has irrevocably modified the way in which a lot of people see our society.
As the net has become included in a lot more aspects of everyday life, its abilities and uses have increased exponentially. Consumers are able to successfully manage his or her daily life by the net. People can go shopping on the Internet, use online banking and also phone via the online. It is tough to think of jobs which have not already transferred over to the Internet.
Nonetheless, with this reliance upon the net comes a bigger risk. With more important information saved on the net than previously, thieves are increasingly turning their interest to Internet crime. To combat this, many software programs, web sites and technologies have been designed to guard consumers and net users. Anti-virus software, anti-spyware programs, pop up blockers and password managers have already been constructed with Internet security in mind.
Then again, great password security really should not be over looked. Having a robust password is an essential, first line defence in the combat versus online crime. There are actually quite a few aspects to possessing a powerful password. The first one is size: the longer your password, the more powerful it is. A ten character password definitely will take more time to hack compared to a five character password. It is at your discretion precisely how lengthy you want it but being at least eight characters is the lowest suggested length for a rather solid account password.
Many other important suggestions are: to not use a single word for your password, to not start using frequent sequences of characters (for example 123 or abc), to make certain you have different kinds of characters (which includes lower and upper cased characters, digits and special characters). It is a really great idea to use a random sequence of letters that you train yourself to remember. Nonetheless this is typically really tricky to do. Particularly taking into consideration it is best practice to also use a unique password for each and every account which you own (that way, if a single password is affected, it’s an isolated instance).
This is why an online password program is fantastic. Online password managers remove much of the hard work in using a secure password. By using a password program you can save all your passwords online to a program or a site but simply by making use of one, you will also be able to own a much more stronger password. Since it takes away the stress of trying to not forget a password, you can literally have virtually any mix of letters for passwords and not stress about failing to remember them.
Password managers are great way to increase your online security. And if you make us of a web-based password manager then you can log in from anyplace and always be able to remember your passwords. Additionally, many of them also have auto login functions which will let you to securely log into your accounts with just a single click of a button. This is great because it saves you time but it also defends you from lots of possible crime online.

Read More