::: Credential Harvester Attacker Method Using Social Engineering Toolkit Tutorial :::

Hello friends today i'm going to share a tutorial on "How to get victims username and password credentials ?" by using Social Engineering Toolkit.

Brief Intro : This is a sample demo on one of the attacks in the social engineering toolkit called the Credential Harvester. I'm going to show you ways to hack someone outside the network using your external ip address which you can get at www.ipchicken.com.


WARNING : This is for educational purpose, I'm not responsible for any illegal activities performed by U

Requirements :
1) BackTrack5r3 OS
2) Vmware workstation
3) Basic knowledge on Unix commands 

Follow the below screenshots :

                                                       WARNING : This is for educational purpose only...

Friends last thing i want to say that ... whenever you click on some link spend your few seconds to read it before you face calamity ...

Thank You and Keep Following :)

4 years old Android bug affects 99 percent of devices

Security researchers from bluebox has discovered a 4 year old Android bug ( since Android 1.6 Donut,) and affects 99 percent (or nearly 900 million devices) of devices released in the last 4 years.
This Android vulnerability allows a hacker to modify APK code without breaking an application’s cryptographic signature, to turn any legitimate application into a malicious Trojan, completely unnoticed by the app store, the phone, or the end-user.

"Installation of a Trojan application from the device manufacturer can grant the application full access to Android system and all applications (and their data) currently installed.
The application then not only has the ability to read arbitrary application data on the device (email, SMS messages, documents, etc.), retrieve all stored account & service passwords,
it can essentially take over the normal functioning of the phone and control any function thereof (make arbitrary phone calls, send arbitrary SMS messages, turn on the camera, and record calls). Finally, and most unsettling, is the potential for a hacker to take advantage of the always-on, always-connected, and always-moving (therefore hard-to-detect) nature of these “zombie” mobile devices to create a botnet."

The Bluebox team says the vulnerability was disclosed to Google in February 2013. Now it’s up to device manufacturers to produce and release firmware updates for mobile devices (and furthermore for users to install these updates).

More details : http://bluebox.com/corporate-blog/bluebox-uncovers-android-master-key/

Subscribe the blog for more feeds  ...

Sandboxie ::: Secure Your PC by running Malicious Softwares in a Virtual ENV

Sandboxie runs your programs in an isolated space which prevents them from making permanent changes to other programs and data in your computer.

The red arrows indicate changes flowing from a running program into your computer. The box labeled Hard disk (no sandbox) shows changes by a program running normally. The box labeled Hard disk (with sandbox) shows changes by a program running under Sandboxie. The animation illustrates that Sandboxie is able to intercept the changes and isolate them within a sandbox, depicted as a yellow rectangle. It also illustrates that grouping the changes together makes it easy to delete all of them at once.

Benefits of the Isolated Sandbox

• Secure Web Browsing: Running your Web browser under the protection of Sandboxie means that all malicious software downloaded by the browser is trapped in the sandbox and can be discarded trivially.

• Enhanced Privacy: Browsing history, cookies, and cached temporary files collected while Web browsing stay in the sandbox and don't leak into Windows.

• Secure E-mail: Viruses and other malicious software that might be hiding in your email can't break out of the sandbox and can't infect your real system.

• Windows Stays Lean: Prevent wear-and-tear in Windows by installing software into an isolated sandbox.

Download Sandboxie now and give it a try!

Source : http://www.sandboxie.com/

:::Best Way 2 Make Money Online:::

Web marketing is one of the biggest source of making money. Weather you are earning online as profession or as part time work. Internet is best way but its not so much easy to survive online Because their are too many ways to make money online but difficult part is, which we have to choose and which is easy to understand and having better earning also.
But Today i decided to discuss about the different online methods.Lets get started

1. Cost Per Click ( CPC )

This method is based on earning from click on ads published on your site, web pages, forum or any apps. I have already discuss about cpc in my article about ads. If you want to learn more in details about cpc must read my article about ways to make money from ads.
The following best cost per click networks which offers best rates for every click are 

Google Adsense:-  It one of biggest and popular trusted network by everyone. Google Adsense Offers Highest CPC and CPM rates. But its earning is totally depend on your visitors location and CTR also. It not so easy to get approval of adsense.

Media.net:- This is new network form by partnership of yahoo and bing with media.net. It is good competitor of adsense. It offers good CPC rates as compare to others.

Chitika:- It is also most popular network for CPC. It also offers best revenue from ads but slightly lesser than Adsense

Infolinks:- It is one the best program for text based ads. It offers good revenue for In-text link ads and for other banner ads also.

Bidvertiser:- It is also relative good as compare to others but its is lesser as compare to above programs. But Still it is best one.
  

2. Cost Per Mile ( CPM )

This method is based on earning from every impression made on ads published on your website or blogs. For every 1000 unique impression you will earn money. But difficult task is to choose best network which offers best rates. It is also known as CPM method.
Some best CPM networks are

• Tribalfusion
• BrustMedia
• BuysellAds
• Valueclickmedia
• VibrantMedia
• Adpepper
• Cpxinteractive
• MadadsMedia

3. Sell Affiliates Products

Affiliates marketing is commission based program. Means  for every successful sale made buy you. Then you will earn commission. In my recent article i discuss about Bigrock affiliates program which offers commission for every sale of domains and hosting plans. If you want to learn more about affiliates then i suggest you read in  more detail about affiliates program. 
Here are following Best affiliates which offers good commission

• Google Affiliates
• ClickBank
• Commission Junction
• E-junkie
• Amazon Affiliates
• eBay Affiliates
• DigiResult 
• FreeLancer

4. Cost Per Action ( CPA )

In this method you will earn money for every successful action done by user which required on that spot. It is just like an affiliates but in this network if their ads about filling any details or subscribing email service or any other . If someone fill details required by ads then you will earn for every successful action.

• ClickBooth
• Peerfly
• CPAWay
• MaxBounty
• CPALead
• NeverBlue
• Mgcash

5. Earn From Uploading

Their are many programs which based on download program. But in last few years their are many report about increasing spam in these types of programs. It means for every successful download of your file will get earn. some programs are on premium based but some offers free service.
Some trusted download networks are

• ShareCash.org
• CashFile.org
• Uploadables

6. Write For Other Sites

If you are interested in writing online then this is best to make money . If have knowledge about any specific topic or field. Then the best way is to write articles for other services or you can also hire yourself to write for other blogs who want any author for their blogs.
Below Given are Some networks which gave you money to write for them

• PayPerPost
• Social Spark 
• Sponsored Review
• RevewMe
• Payu2Blog 

7. Complete Online Surveys

This is one of the effective and easiest way for everyone who want to make money online because it don't required any web knowledge or technical skills.  In this network you have to fill the accurate information for every question ask on survey. This is best way to make side earning for working  2,3 hours on internet.
Some Best survey programs are

• MySurvey
• Dollersurvey
• SurveyMonkey
• SurveySpot
• Myview
• ClearvoiceSurvey
• Toluna
• GlobalTestMarket

8. Online Projects / Freelance

It is freelancer job means like data entry jobs. Their are many programs in which you can apply your application or as per rule. Then you have to complete specific project and task. For every successful completing project you will get earn. Their are many programs which are based on freelancer services.
Some Networks which are based on freelancing are below 

• Microworkers
• Elance 
• Fiverr
• Odesk
• BreakStudio
• ConstantContent

9. Selling Products which you own

It is also an effective to way to make money online if you have any product and service which you feel that peoples likes to buy. You can also put your product on online auction which is best idea to earn more. You can also design any product which you own. you can also sell some services or plans online to get earn. 

• Amazon
• eBay
• Quikr
• OLX
• Sell.com
• Gazelle.com

10. Selling Products which you don't own

It just like an affiliates marketing selling any product which you don't owns but you can sell them of any direct advertiser or by using any network. You can also sell spaces on your website or blog for displaying ads of any product. Which help to earn money for every product sale.

• Amazon Associates
• ebay
• Shirtcity
• CafePress

Above Mentions are 10 different ways to start working online. I try to cover more topics as much as possibles. I hope all the above methods are clear and helpful for everyone to make bright future online you have to do work hark. Their are many other networks related to above categories but i publish those which i feel simplest and best.

/*If you find this article helpful then please don't forget to share it with others also. If you feel anything missing, wrong or find any doubt feel free to share your view in below comment box.*/

Happy Earning..
Enjoy(-_-)

How to get a progress bar while copying huge files - ::: Linux tricks:::

Normally cp command does not give you any output while you are copying files. You have no idea how much copying is left to be done. However you can use a slightly different command to copy large with a progress bar shown. pv command does things better.

$ cat originalfile.txt | pv > newfile.txt

ome random, super-cool commands in Linux

• A stopwatch on the terminal

  $ time read

  This will start a stopwatch on your terminal. Simply press Ctrl+D to stop the timer and see the elapsed time.
• How to know how many CPU cores are there on the computer ?

  $ sudo cat /proc/cpuinfo | grep processor | wc -l

  Infact, you can see a lot of info about each of these cores with the command

  $ sudo cat /proc/cpuinfo

• Finding the name of the linux distro running on the computer

  $ sudo cat /etc/issue

• How to know whether you have a 32bit or 64bit OS running on your computer ?

  $ sudo getconf LONG_BIT

• Killing a process that has locked a particular file, when you know the file name that is locked, but don’t know which process is locking it.

  $ sudo fuser -k <file_name>

  This is useful when you get an error saying this particular file is locked by another process. This happens many times when you are updating your linux installation and the process got terminated leaving the /var/lib/dpkg/cache file locked. You get an error when you try to re-start the system update again. You can use this command in such situations.
• Easiest way to re-run the previous command with superuser permissions

  $ sudo !!

This saves you from pressing up arrow and then home key and then typing sudo.

• Easily doing a reverse search for a command you entered previously. In bash, simply press Ctrl+R and then start typing the part of the comamnd you remember. Hit enter when you find the command you were looking for. This command gives rise to another neat trick. Suppose you use a lengthy command very frequently during the session. The first time you run the long command, run it as follows

  $ <command> #my_label

  The next time you want to run the same command, all you have to do is press Ctrl+R to start reverse-search and then enter “my_label” followed by enter key… How cool is that !!!.
• How to get vi stlye editing commands working in bash

  $ echo "set editing-mode vi" > ~/.inputrc

• some super useful bash command editing keys
  - Press Ctrl+W to erase a single word before the current cursor position.
  - Press Ctrl+U to erase the entire line before the current cursor position.
  - Press Ctrl+K to erase the entire line after the current cursor position.
  - Press Ctrl+A to go to the beginning of the command.
  - Press Ctrl+E to go the the end of the command.
• How to display a popup notification when a command completes ( requires libnotify to be installed )

  $ wget <URL> ; notify-send "wget" "your download is complete"

  The above command displays a popup notification once wget finishes downloading the file. wget can be replaced by any command actually. The first argument to the notify-send command is the “title” and the second argument is the “body” of the popup notification. You can change it to whatever you like.
• Turning of the monitor to save power when there is no hardware key available to do so(say, on a laptop)

  $ xset dpms force off

• How to copy the output of any command directly to the system clipboard

  $ <command> | xsel --clipboard

• How to open an file from the command line using the default application for that file

  $ xdg-open <file_name>

• How to save the output of any command as an image file

  $ <command> | convert label:@- <image_name.png>

• How to convert an entire man page into pdf format for later viewing

  $ man -t <command_name> | ps2pdf - <command_name.pdf>

• Installing the same packages and software you already have on a fully configured linux system, on another freshly installed linux system in a single command
  First, run this command on the fully configured linux box

  $ sudo dpkg --get-selections > my_linux_software

  Then, transfer this file to the freshly installed linux box an enter the following command

  $ cat may_linux_software|sudo dpkg --set-selections && sudo dselect install

  Ofcourse, you will need network connection on your freshly installed linux box, but you will be saved from laboriously selecting all your favorite software from the software management tool.
• Deleting a particular line number from a given file without opening it in any editor

  $ sed -i 8d <file_name>

  This command deletes the 8th line from the specified file.
• Running a command at a specified time

  $ echo "command you want to run | at 01:00

  Note that the time is in 24hr format.
• How to create a pencil sketch out of any image file

  $ convert <input_image> -colorspace gray \( +clone -blur 0x2 \) \
    +swap -compose divide -composite -linear-stretch 5%x0% <output_image>

  You can ofcourse add an alias or better still, a bash function for such long commands in your ~/.bashrc to make your life easier.
• How to check unread mail from your gmail inbox from the command line

  $ curl -u your_email@gmail.com:your_password --silent \
    "https://mail.google.com/mail/feed/atom" | tr -d '\n' | \
    awk -F '<entry>' '{for (i=2; i<=NF; i++) {print $i}}' | \
    sed -n "s/<title>\(.*\)<\/title><summary>\(.*\)<\/summary.*name>\
    \(.*\)<\/name><email>\(.*\)<\/email>.*/\n\3\(\4\) - \1 - \2\n/p"

  This command might look like too much to handle, but it is really extremely simple. All it is doing is reading from your gmail account’s atom feed and formatting the output using awk and sed. As before, you are better of creating an alias(or a bash function) in your ~/.bashrc for this command.

Hiding a file or directory within an image - ::: Linux Tricks:::

This is one severely cool trick which allows you to hide any file or directory within a harmless looking image. When you click on such a file, all you see is the image on your default image viewer. The image is not altered in any way. What you don’t see is the file you have hidden within the image…. Here is precisely how to do it.

• First you will need a harmless looking .png or .jpg image file… Feel free to download your favorite one from google images.
• Now, the file or directory you wish to hide has to be compressed into a zip archive.

  $ zip -r <compressed.zip> <file1> <dir1>

• Now, cat the image you downloaded with the compressed file you created above

  $ cat image.png compressed.zip > secret.png

  NOTE: do not change the ordering of the image and the compressed file. The image always has to always come first in the cat command.
• Now, remove the files and directories you wanted to hide and also the compressed.zip file using the rm command.

Thats it… You now have a file by the name “secret.png” which if you open, will display the harmless looking image file. Nobody suspects that the image is hiding something sinister(unless ofcourse they are intelligent enough to do a ls -l and see the size of the image file)

Now, all you have to do to get back your secret files and directories is

$ unzip secret.png

Don’t worry if you get some weird warnings or errors when you run the command regarding some invalid content in the header. Thats the whole point you see !!! When we catted the image file at the start of the zip file, we inadvertently modified the header of secret.png, and hence the warnings and errors. Nonetheless, you should now see the compressed.zip file in the directory. Just extract its secret contents with

$ unzip compressed.zip