What are the Deep Web Technologies ???

• I2P – This is an anonymity network which you may find slightly more techie to install and get running, but once you do there are some great tools and apps, including one to make it easier for you to set up your own hidden blog.
• FAI (Free Anonymous Internet) – Based on blockchain technology, this network allows for the anonymous publishing and browsing of content and has a social network style homepage that lets you follow other users, share content with your followers, and tip the creators of content you like.
• FreeNet – One of the older and most highly regarded systems, FreeNet combines deep web with DarkNet. This means that you can maintain a list of trusted peers and either connect to them only, or connect to them in preference to less trusted peers. As far as I know, this gives the highest level of privacy and security of any system, but does require a little more effort to make the most of.
• ZeroNet – Based on torrent technology in combination with Bitcoin encryption, this is a new system which is not well developed but which I think holds promise for the future.

Finding Your Way Around the Deep Web

Finding your way around the hidden interent is just the same as finding your way around the regular internet. You can use a search engine or a directory website like Tor Hidden Wiki which contains a list of interesting links, but is often out of date and is not free from scams.

There is even a search engine specifically for searching hidden services and which allows you to view dot onion websites through a proxy – even if you don’t have TOR installed. It can be found at Onion.City and it is perhaps the easiest and most convenient way to access the hidden internet, but please remember that if you don’t have TOR installed and just use a proxy service like this you aren’t anonymous yourself.

If you are looking for how to access the infamous dark markets then you may like to start off by taking a look at DNStats which offers information about a wide variety of different dark markets including stats about their ‘uptime’, the technology they use, what you can buy there, reviews and more. For more detailed information about how to use these markets please read our article How To BuyThings from Dark Web Markets

For more in depth information about encryption technology and hidden internet applications of all kinds I also recommend browsing the articles on DeepDotWeb from time to time.

Read More

How To Access The Deep Web or DarkNet – A Beginner’s Guide

You may have heard that there is some mysterious hidden internet called the ‘Deep Web’ or the ‘DarkNet’ that you can’t get to from Google, and which is hidden from most web surfers. Perhaps tales of the dark marketplaces selling all kinds of legal and illicit goods anonymously for Bitcoin have picqued your curiosity, and you would like to take a look around and see what they are like. Perhaps you live in a country where social media and ordinary internet sites are censored and you would like to visit a place where everyone is free to speak their mind freely and without fear of repurcussion. Or perhaps you simply care about your privacy and security online and are attracted to the idea of an internet space where users are not constantly tracked, monitored, and analysed by manipulative marketeers, government spies and malicious hackers. All of these are common reasons why people become interested in visiting this hidden, anonymous internet space – but if you are like 99% of people you probably don’t have a clue how to access the so-called ‘darknet’ or ‘deep web’.

Many people find the idea of even trying to access and use the deep web a little bit intimidating and scary, and if you are a complete beginner to this kind of stuff you are probably feeling the same. You may be concerned over what you will see, who you might meet, or what other concequences there may be for using something so strongly linked in the popular imagination to illicit activity. Please do not worry. You will not find anything which you haven’t looked for, and the beauty of the darknet is that nobody you meet will know who you are – you are just another anon – and there is a great security in that. You will be safe and you will suffer no negative consequences for visiting the darknet. You will also have no technical trouble learning how to access the darknet and find your way around once you have read this beginner’ guide which will hopefully tell you everything you need to know!

 How To Access The Deep Web or DarkNet – A Beginner’s Guide

As stated above, the deep web is not a single location, but a whole class of different locations which share one thing in common – that they are hidden from search engines and regular internet users. Different areas of the deep web therefore have different requirements for you to be able to access them, and any technology which you use will only give you access to its specific area of the hidden internet. Having said that, there is a very small number of technologies used to create what is popularly called the ‘deep web’ or ‘darknet’, and one in particular which the vast majority of people use – TOR.

TOR is an acronym which stands for ‘The Onion Router’. It got that name because of the many layers you would have to peel back to find the real identity of any of its users.

Tor is primarily a ‘privacy network’ which lets people use the regular internet without being tracked. It does this by bouncing communications around a lot of different computers, so rather than user A asking for a webpage from server Z, user A asks user B to ask user C to request the webpage (of course this is a massive simplification and is pretty inaccurate really, but it does give you are rough idea of what is happening). This means that any third party who is trying to spy on people will find it very difficult to tell who is actually viewing the webpage, or sending the email, or whatever it may be.

In addition to this enhanced privacy for web browsers, TOR also offers a way for people to host ‘hidden services’. A TOR hidden service is  a website or app of some kind whose location is hidden in exactly the same way that the true location or identity of web browsers is hidden by TOR in the example above. These hidden services can only be accessed by other TOR users – not by regular search engines or regular internet users. You can recognize them by their address – it will end in .onion and is often composed of a seemingly random string of characters. Once you have TOR installed on your computer you can visit these hidden services, which include the infamous dark markets where bitcoin, drugs and hacked credit card details are ubiquitous, in exactly the same way that you would access a regular website.

Installing TOR on your computer is incredibly simple. It is no different from installing any other piece of software. It is also very easy to use – when you open TOR you will see that it is just a web browser which you use exactly the same way as you would any other web browser. In fact, it is based on Firefox so if you have ever used that browser you will find it to be very familiar indeed. For those in need of more rigorous privacy and security there is also a TOR operating system called TAILS (The Amnesiac Incogneto Live System) which you can run from a USB stick, but for most people the browser is sufficient.

You can download the TOR browser here.

Using a VPN with Tor

Virtual Private Networks or VPNs are another kind of privacy software which masks your IP address (hiding who you are) but do not allow you to access hidden deep web sites.

Some users make use of a VPN in addition to Tor, in order to hide the fact that they are using Tor. This is not necessary, but some people just want that extra level of privacy. I recommend IPVanish if you’re looking for a VPN that works well with Tor and provides an excellent service for a fair price.

Read More

A new Android banking Trojan has been discovered

Security researchers from SfyLabs have discovered a new Android trojan called “Red Alert 2.0” that has been created and distributed over the past several months by a new threat actor. The capabilities of the malware are similar to those of other Android banking Trojans, such as the use of overlays to steal login credentials, or SMS control and contact list harvesting.

The Red Alert trojan has many new features to ensure that it still effective. The malware can block and log incoming calls of banks, which could affect the process of fraud operation departments at financials that are calling victims on their infected smartphone about a possible malicious activity.

The trojan also uses Twitter to evade losing bots when the C2 server is taken offline. If the bot fails to connect to the hardcoded C2 it will recover a new C2 from a Twitter account. We have noticed this feature before in the desktop banking trojans, but it’s the first time to see it occurring in an Android trojan.

According to SfyLabs:
“The shift of malware campaigns from desktop (Windows) to mobile (Android) seems largely related to the fact that these days most transactions are initiated from mobile devices instead of the desktop. This motivates actors to invest in developing solutions that target Android and have the same capabilities as the malware variants that have been evolving on the desktop for years. “

Read More

Several WordPress Sites Hacked via Recently Patched Flaw

A critical vulnerability disclosed last week by the WordPress developers was already exploited and thousands of websites are already hacked, the security firm Sucuri warned on Monday.

At the end of last month, WordPress 4.7.2 was released.The developers of the popular content management system (CMS) informed that the latest version has patched three vulnerabilities, including cross-site scripting (XSS), SQL injection and access control issues.

Just roughly one week later, the developers admitted that the version 4.7.2 patched yet another flaw, described as the unauthenticated privilege escalation and the content injection vulnerability affecting REST API. This security hole allows a hacker to modify the content of any post or page on the targeted site.

This flaw, identified by the researchers at Sucuri, was already disclosedone week after the release of WordPress 4.7.2 just to give users enough time to patch their latest installations. However, according to Sucuri, many of the WordPress websites still have not updated.

Sucuri has tracked four different defacement campaigns. They started seeing the first attacks leveraging this vulnerability in less than 48 hours after the official disclosure.

In one of these campaigns, the attackers replaced the content of more than 60,000 web pages with their “Hacked by” messages. In the other three operations, two of which are sharing a single IP address, have each targeted nearly 500 pages.

The SecurityWeek has noticed that some of the compromised websites have also been re-defaced by a fifth actor. Fortunately, some of the affected sites have already been cleaned up and updated to WordPress 4.7.2.

“There’s already a few exploit attempts that try to add spam images and content to a post. Due to the monetization possibilities, this will likely be the #1 route to abuse this vulnerability,” explained Daniel Cid, CTO and founder of Sucuri.

The company’s WAF network has seen an increasing number of exploit attempts, reaching nearly 3,000 on Monday.

1.5M Unpatched WordPress Sites Hacked

.

Experts say that the attackers have taken a liking to content-injection vulnerability that is disclosed last week which is patched in WordPress 4.7.2. It has been exploited to used to deface 1.5M sites so far.

This issue has evolved into “one of the known worst WordPress related vulnerabilities to come up in some time,” researchers at WordFence, a Seattle-based firm that makes WordPress security plugins, said on Thursday.

WordPress has silently patched this issue. An unauthenticated privilege escalation vulnerability in the REST API endpoint, which is when it pushed version 4.7.2 on Jan. 26. A core developer with in the CMS said the following week that they waited to disclose this vulnerability to ensure that millions of more sites could deploy this update. WordPress has a feature which automatically updates the CMS on the majority number of sites, but some users choose not to use it and test updates before applying them.

Mark Maunder, the WordFence’s Chief Executive Officer, said that researchers have seen the biggest spike in attacks on this Tuesday when the company has blocked roughly 13,000 attacks from campaigns which are 20 and different.

The reason for the influx, Maunder said, is because at the beginning of the week attackers refined their attacks to bypass a rule that WordFence and other companies had implemented. While WordFence was quick to engineer a new rule to prevent the bypass, attackers were still able to succeed in infecting a slew of sites–more than 800,000 over a 48-hour period from Tuesday to Wednesday–he said.

In some instances, hackers are competing to compromise sites that haven’t yet applied the fix. WordFence researchers claim they’ve come across some sites where multiple hackers attempt to take credit on multiple pages for hacking them. The defacing and re-defacing will likely continue until those sites apply the 4.7.2 fix, Maunder says.

Read More

Several vulnerabilities have been patched in WordPress

WordPress 4.8.2 is now available. The new security release came with several patches that fix 9 vulnerabilities affecting version 4.8.1 and earlier, including cross-site scripting (XSS), SQL injection, path traversal and open redirection vulnerabilities.

The SQL injection vulnerability has been discovered and reported by Slavco, the issue exists due to the $wpdb->prepare() can generate unexpected and unsafe queries leading to possible SQL injection. The core is not directly vulnerable to this flaw, but they have added hardening to stop plugins and themes from accidentally causing a vulnerability.

Five XSS vulnerabilities that affect oEmbed discovery, the visual editor, the plugin editor, template names and the link modal. The vulnerabilities have been discovered by security researchers and a member of the WordPress Security Team, the flaws were patched in the latest version of WordPress 4.8.2.

Two path traversal vulnerabilities that affect the customizer and file unzipping code have discovered and reported by another member of the WordPress Security Team and Alex Chapman.

The last one is an open redirect vulnerability that was discovered on the user and term edit screens. Reported by Yasin Soliman (ysx).

WordPress is reportedly the most popular website management or blogging system in use on the Web, supporting more than 60 million websites.

Read More

Top 10 WiFi Penetration Testing Tools Used by Hackers

Many people come in search of us for WiFi penetration testing tools. This post is especially for those who is in need of WiFi hacking tools.

Note: We are not responsible for any damage that cause you. Make sure you use these tools for experiment purposes only in controlled environment.

1.Aircrack

Aircrack-ng is the next generation of Aircrack with lots of new features and  mainly used by hackers to hack WiFi connections. Aircrack-ng is an 802.11 WPA-PSK and WEP  keys cracking program that can recover keys. Aircrack-ng cracks WEP keys using the FMS attack, PTW attack, and dictionary attacks, and WPA using dictionary attacks.

2.AirSnort

AirSnort supports both Windows and Linux operating system  but there is no longer updates for this tool. It is popular tool for decrypting WEP encryption on a Wi-Fi 802.11b network. This tool might be outdated, but still you can download it free on sourceforge.

3.Kismet

Kismet another great software used as network detector, packet sniffer for 802.11 a/b/g/n layers. This software support Linux, OSX, Windows and BSD platforms. It identifies networks by collecting packets and detecting standard named networks and detecting hidden networks.

4.Cain and Able

Cain and Able best, recommended and popular tool for password sniffing. It recover passwords by sniffing the network, cracking encrypted passwords using dictionary, brute-force and cryptanalysis attacks and more options. It can also recover wireless network keys by analyzing routing protocols.

5.WireShark

Wireshark is a free and open-source packet analyzer. It can capture live data from Ethernet, IEEE 802.11, ATM, Bluetooth, USB and many others. It supports Linux, Windows, OSX, Solaries, FreeBSD and others.

6.CommView for Wi-Fi

CommView for WiFi is a powerful wireless network monitor and analyzer.It works on 802.11 a/b/g/n/ac networks. It supports Windows 7/8/8.1/10 both 64 and 32 bit versions. It scans the air for WiFi stations and access points. It can view detailed IP connections statistics: IP addresses, ports, sessions, and much more!

7. Airjack

AirJack is a device driver (or suit of device drivers) for 802.11(a/b/g) raw frame injection and reception. It is ment as a development tool for all manor of 802.11 applications that need to access the raw protocol.

8.inSSIDer

inSSIDer, free tool which displays every wireless hotspot’s MAC address, encryption, signal strength and channel. This tool was opensource long back but now it cost $19.99. This software received award as “Best Opensource Software in Networking”.

9.WepAttack

Wepattack is an open source Linux tool for 802.11WEP keys. This tool is based on dictionary attack on WEP keys in WLAN networks.

10.NetStumbler

Last but not the least, NetStumbler is also called as Network Stumbler used in Windows to detect Wireless LANs using 802.11 b/a/g networks. Down version of the tool is available and also knows as MiniStumbler

Note: We cannot provide links for the above penetration testing tools, because few of those software contains virus, so kindly google it.

Read More

The Top 10 Wifi Hacking Tools in Kali Linux

How to hack WiFi is second popular search after how to hack a Facebook. Most of the routers are not correctly configured and are susceptible to various kinds of attacks.

A lot of the router manufacturers and ISPs are still turning on WPS by default on their routers which makes the wireless security and penetration testing an even more important. Using the below Top 10 Wifi Hacking Tools you will be able to test your own wireless networks to find potential security issues.

1 Aircrack-ng

Aircrack is one of the very popular tools for WPA/WPA2/WEP cracking. The Aircrack-ng suite contains tools that help to capture packets and handshakes, de-authenticate connected clients and generate traffic and also tools to perform brute force and dictionary attacks. Aicrack-ng is an all-in-one suite that contains the following tools and many others:
– Aireplay-ng to generate traffic and client de-authentication

– Aircrack-ng for wireless password cracking

– Airbase-ng to configure fake access points

– Airodump-ng for packet capturing

If you wish to use this tool, make sure your Wifi card is capable of packet injection.

2 Reaver

Reaver is definitely second one in the top 10 Wifi hacking tools. Reaver is a very popular tool for hacking wireless networks. Reaver targets specifically the WPS vulnerabilities. The Reaver performs brute force attacks on WPS (Wifi Protected Setup) registrar PINs to recover the WPA2/WPS passphrase. Since there are many router manufacturers who turn on the ISPs by default, a lot of routers are vulnerable to this  attack out of the box.

3 Pixiewps

PixieWPS is a new tool included in Kali Linux. Pixiewps also targets a WPS vulnerability. PixieWPS is written in C and it is used to brute force WPS PINs offline and exploits the low or non-existing entropy of vulnerable access points. This is also called a pixie dust attack. PixieWPS needs a modified version of Wifite or Reaver to work with. Considering the recent growth of this tool, itstood 3rd in our list.

4 Wifite

Wifite is an automated tool and expects a very little work form the user. When start-up it asks a few parameters to work with and then it will  do all the hard work. Wifite attacks multiple wireless networks that use encryptions like with WEP/WPA/WPA2 and WPS. It captures the WPA handshakes, spoof your MAC address and safe the cracked passwords, automatically de-authenticate connected clients.

5 Wireshark

Wireshark is one of the top network security analyzing tools available online. Using Wireshark you can analyse a network to with a great detail and see what’s happening inside.

6 oclHashcat

oclHashcat is not a dedicated Wifi hacking tool and it also does  not come with  Kali Linux. But it can do brute force attacks and dictionary attacks on captured handshakes at a very high speeds  using the raw power of GPU. Comparing to other tools like Aircrack-ng suite, oclHashcat  is fast since it is using  a GPU instead of a CPU. An average GPU can do upto  50,000 combinations per second with oclHashcat.

7 Fern Wifi Cracker

Fern Wifi Cracker is a wireless security auditing and attack tool and it is written in Python. It is the first tool in this list to have a graphical user interface.

8 Wash

Wash is a tool to determine whether an access point has WPS enabled or not.

9 Crunch

Crunch is a great and easy to use tool for generating custom wordlists which can be used for dictionary attacks.

10 Macchanger

Last but not least in this top 10 Wifi Hacking Tools is Macchanger. Macchanger is a little utility which can be used to spoof your MAC address to a random MAC address or you can make up your own.

What is your favorite tool?

Would you agree with our list?

Share your thoughts and suggestions in the comments section below.

Read More

How to Create a Virtual Hacking Lab For Pentesting

Hello  my dear budding hackers. Everyone that is new to hacking will eventually realize that they need a medium where they can work in and practice. Just like any other profession, you will become a better a better hacker by more and more practice.

For all those beginners, today we will show you how to create a virtual pentesting laboraoty and start practicing:

Step 1: Download VMware Workstation or Player

Virtual machines and a virtual network are the safest and  best bet when it comes to  setting  up a hacking lab. There are many virtualization systems out there, which include Citrix, KVM, Microsoft’s Virtual PC,Oracle’s VirtualBox, and Hyper-V, and VMware’s Workstation, VMware Player and ESXi. For creating a laboratory environment, I strongly recommend VMware’s Workstation or Player. Workstation is commercial product which costs under $200, while the Player is free. You can also get a free 30-day trial of Workstation.

Player is very limited and just useful to play VMs , while Workstation on the other side can create and play VMs. Let’s download VMware’s Player or Workstation here.

Download Kali VMware Images

Once you have downloaded and installed your virtualization system, our next step is to download the VMware images of Kali provided by Offensive Security. With these images, you won’t have to create the virtual machine, but simply run it from Workstation or Player—Offensive Security has already created this image for you. This means that once you have downloaded the VM of Kali, you can then use it in either Workstation or Player.

Unzip Images

Once you have completed the download, you will need to unzip the files. There are many zip utilities available for free including like example,7-Zip, WinZip, WinArchiver, etc. Download and install one and unzip the files. In the screenshot below.

Open VMware Image

Once all your files are unzipped, our next step is to open this new virtual machine. Make note of the location where you have unzipped those virtual machine image. Then, go to either VMware Workstation or Player and go to File -> Open like in the screenshot below.

This will now open a window just like that in the screenshot below. You can see that my Kali image was stored under documents, so I would now browse there and double-click on the folder.

When you do so, VMware will start your virtual machine and greet you with a screen like below.

You are done with setting up your virtual lab. Seel free to post any doubts in the comments below.

Read More

What is Blue Whale Game ?

Blue Whale Game - Suicide Challenge hits UK, 'children as young as seven discover craze'

THE infamous Blue Whale Game is a monstrous online challenge that aims to goad vulnerable youngsters into taking their own lives. The vicious viral game is spreading online via social media accounts, and reports suggest it has come to UK schools and is being played by children as young as seven-years-old.

Blue Whale Game has purportedly arrived in the UK.

The twisted viral challenge, which encourages participants to kill themselves, appears to have hit UK schools.

According to one online security expert, schoolchildren as young as seven years-old have heard about the infamous Blue Whale Game.

The Blue Whale Game aims to push vulnerable youngsters into taking their own lives.

The suicide challenge has already been linked to some 130 deaths in Russia.

Earlier this summer, the parents of a 16-year-old in Georgia, USA blamed the Blue Whale Game for the death of their daughter.

“I start researching and start reading more about the game, what it’s asking. Then I start to put some of the pieces – how during the weekend she asked me to step on the roof of the house,” the mother

There are hundreds of posts related to the sick trend on social media.

The Blue Whale Game sees youngsters assigned one challenge a day for a 50-day stretch.

Tasks are dolled-out by an anonymous administrator and participants are required to submit photo evidence each day to prove the challenge was completed.

Blue Whale is so named because of the way whales will sometimes beach themselves and then die.

As the tasks become more extreme over the 50 day period, some group administrators have encouraged members to self-harm – with some scoring the shape of a whale into the skin on their forearm.

On the 50th day, group members are purportedly encourage to take their own lives.

Online child protection specialist Jonathan Taylor has told Sky News that children in Year 3 in the UK education system have heard about the infamous challenge.

"Last week I was in a primary school and a Year 3 pupil, a boy, asked me about it,” he said.

"I would not be speaking to primary school children about Blue Whale but they know about it. When I asked who else had heard about this you had 20 hands go up.

"The children are talking about Blue Whale.

"They may not know exactly what they are talking about but the curiosity of a child ... they may then go on to the internet to see what they can do."

The vast majority of reported fatalities have been reported in Russia, however incidents linked to the Blue Whale Game have also surfaced in Ukraine, Estonia, Kenya, Brazil and Argentina.

Read More

Best Hacking Tools Of 2017

Top 10 Best Free Hacking Tools Of 2017 For Windows, Mac OS X and Linux

Technology and hacking is a field that’s constantly changing. To go along with these changes, some hacking tools become better with time, some stay stagnant while at other times, a new tool might cause the good kind of chaos. Since the past few years, we have been releasing list of the top free hacking tools to keep you – our readers stay abreast with the latest and greatest in the genre. To follow up our best Hacking tools of 2016, below is the updated list for this year.

To add to our previous lists, we’ve also taken into consideration views and feedback of people across the worldwide web to tailor this year’s list. Therefore these tools make an appearance from a host of targeted areas such as Application Specific Scanners, Debuggers, Encryption Tools, Password Crackers, Port Scanners, etc.

How to hack Wi-Fi using your Android smartphone

On a side note, these tools do come bundled in with pentesting Linux distro’s such as Kali Linux or BackBox, therefore, installing an appropriate Linux hacking box might just make your life easier while using them – at the very least you’ll have up-to-date repositories. That being said, let’s dive in to the best hacking tools of 2017:

• Nmap (Network Mapper) | Best Hacking Tools Of 2017

Nmap is a well known and open source tool for hackers. This software is primarily used for security audits and network discovery.Literally, thousands of system admins all around the world will use nmap for network inventory, check for open ports, manage service upgrade schedules, and monitor host or service uptime. As a tool it makes use of raw IP packets in ways to determine the hosts available on the network, what services are these hosts providing information about, operating systems, type/version of filters/firewalls, etc. next time you see a hacker’s screen on the big screen, its most likely to be Nmap.

• Metasploit Penetration Testing Software | Best Hacking Tools Of 2017

This is one of the most popular pentesting framework around. Those unfamiliar with it can consider it as a ‘collection of hacking tools and frameworks’ – useful to carry out a range of tasks. Its the tool of choice for cyber-security professionals and ethical hackers. Metasploit is basically a computer security project that provides users with information regarding known security vulnerabilities which can be vital as well as help in creating penetration testing and IDS testing plans, strategies and methodologies for exploitation.

• John The Ripper | Best Hacking Tools Of 2017

This is one of the most popular password cracking tool most widely used to carry out dictionary attacks. John the Ripper takes text string samples (from a text file, referred to as a ‘wordlist’, containing popular and complex words found in a dictionary or real passwords cracked before), encrypting it in the same way as the password being cracked (including both the encryption algorithm and key), and comparing the output to the encrypted string. If nothing else, this tool wins the prize for the best name.

• THC Hydra | Best Hacking Tools Of 2017

THC Hydra usually works in unison with John the Ripper. This is also a popular password cracking tool which is backed by an active and experienced development team. Essentially THC Hydra is a fast and stable Network Login Hacking Tool that will use dictionary or brute-force attacks to try various password and login combinations against an log in page.

• OWASP Zed | Best Hacking Tools Of 2017

The Zed Attack Proxy (ZAP) is now one of the most popular OWASP projects. This tool is very efficient in terms of ease of use and its ability to find vulnerabilities in web applications. ZAP is a popular tool owing to the support it enjoys and thus makes it an excellent choice for those that work in the domain of cyber-security.  ZAP provides automated scanners as well as various tools that allow you the cyber pro to discover security vulnerabilities manually. Understanding and being able to master this tool would also be advantageous to your career as a penetration tester.

• Wireshark | Best Hacking Tools Of 2017

Wireshark to put it simply – captures data packets in real-time and then displays in a readable format (verbose). The tool (platform) has been highly developed and it includes filters, color-coding and other features that lets the user dig deep into network traffic and inspect individual packets. If you intend to follow pentesting or cyber-security as a career choice, then learning Wireshark is an absolute necessity.

• Aircrack-ng | Best Hacking Tools Of 2017

For those of you who need to penetrate and audit wireless networks, you’ve just found your new best friend.  The Aircrack suite of Wifi (Wireless) hacking tools are legendary because they are very effectively when used in the right hands. For those new to this wireless-specific hacking program, Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking hacking tool that can recover keys when sufficient data packets have been captured (in monitor mode). Aircrack-ng implements standard FMS attacks along with some optimizations like KoreK attacks, as well as the PTW attacks to make their attacks more potent.

• Maltego | Best Hacking Tools Of 2017

Finally we come across one tool that’s different from the pack. Maltego has been designed as a platform to deliver an overall view of cyber threats to the local working environment of an organization. One of the main reasons for Maltego’s popularity is its’s unique perspective in offering both network and resource based entities is the aggregation of information sourced throughout the web

• Cain and Abel Hacking Tool | Best Hacking Tools Of 2017

Usually abbreviated to just Cain – this is highly popular hacking tool that finds many mentions across tutorials. At its core, its a Windows password recovery tool with the ability to be used in a myriad of ways. For example, white and black hat hackers use Cain to recover (i.e. ‘crack’) many types of passwords using methods such as network packet sniffing and by using the tool to crack password hashes

• Nikto Website Vulnerability Scanner | Best Hacking Tools Of 2017

This is another highly preferred pentesting tool of choice. This is an open source scanner that is able to identify and detect vulnerabilities in web servers. The system searches against a database of over 6800 potentially dangerous files/ programs when scanning software stacks. Nikto, like other scanners out there, also scans for outdated (unpatched) versions of over 1300 servers, and version specific problems on over 275 servers.

Read More

Ethical Hacking

Here are the top 8 websites to learn ethical hacking

Everybody wants to learn hacking in today’s age. However, this is not an easy task until you have basic knowledge about computers and network security. For beginners to know, there are two types of Hacking Ethical (White Hat) and Unethical (Black Hat). Unethical hacking is considered illegal while ethical hacking may be regarded as legal.

We provide you with a list of websites that offers you white hat content. However, it is important to note that as a beginner to not perform any hacking & cracking tactics that breach any cyber law.

Hackaday

Hackaday is one of the top ranked sites that provide hacking news and all kinds of tutorials for hacking and networks. It also publishes several latest articles each day with detailed description about hardware and software hacks so that beginners and hackers are aware about it. Hackaday also has a YouTube channel where it posts projects and how-to videos. It provides users mixed content like hardware hacking, signals, computer networks and etc. This site is helpful not only for hackers but also for people who are in the field of Digital Forensics and Security Research.

Evilzone Forum

This hacking forum allows you see the discussion on hacking and cracking. However, you need to be a member on this site to check out queries and answers regarding ethical hacking. All you need to do is register to get your ID to get an answer for your queries there. The solution to your queries will be answered by professional hackers. The Remember not to ask simple hacking tricks, the community people here are very serious.

HackThisSite

HackThisSite.org, commonly referred to as HTS, is an online hacking and security website that gives you hacking news as well as hacking tutorials. It aims to provide users with a way to learn and practice basic and advanced “hacking” skills through a series of challenges, in a safe and legal environment.

Break The Security

The motive of the site is explained in its name. Break The Security provides all kind of hacking stuff such as hacking news, hacking attacks and hacking tutorials. It also has different kind of useful courses that can make you a certified hacker. This site is very helpful if you are looking to choose the security and field of hacking and cracking.

EC-Council – CEH Ethical Hacking Course

The International Council of Electronic Commerce Consultants (EC-Council) is a member-supported professional organization. The EC-Council is known primarily as a professional certification body. Its best-known certification is the Certified Ethical Hacker. CEH, which stands for Comprehensive Ethical Hacker provides complete ethical hacking and network security training courses to learn white hat hacking. You just have to select the hacking course package and join to get trained to become a professional ethical hacker. This site helps you to get all kinds of courses that make you a certified ethical hacker.

Hack In The Box

This is a popular website that provides security news and activities from the hacker underground. You can get huge hacking articles about Microsoft, Apple, Linux, Programming and much more. This site also has a forum community that allows users to discuss hacking tips.

SecTools

As the name suggests, SecTools means security tools. This site is devoted to provide significant tricks regarding network security that you could learn to fight against the network security threats. It also offers security tools with detailed description about it.

Read More