Ethical Hacking Training with bWAPP Pentest lab

Ethical Hacking Training with bWAPP Pentest lab

                                 Hello buddies, after a short break m back with an interesting post on Creating Pentesting lab with bWAPP. bWAPP is one of the cutest web pentesting lab for beginners to get started and learn Web App hacking. I've wrote many Penetration testing articles, this one is also little amazing and helpful for noobs and beginners.

What is bWAPP ?

bWAPP or a buggy web application is a free and open source web application
build to allow security enthusiasts, students and developers to better secure web applications. It is for educational purposes only. bWAPP contain all types of OWASP Top 10 (2013) Vulnerabilities.

bWAPP have many types of Vulnerabilities like :

·         HTML, SQL, LDAP, XML, Get, Post, Cookies, Command etc Injection

·         Stored, Reflected, DOM, Get, Post etc Cross Site Scripting (XSS)

·         Broken Auth. & Session management

·         Forgot Password, Function, Insecure transport etc

·         Password attacks, Cookie Stealing, HTTP Management etc

·         Strong Session, Logout Management etc

·         Insecure Direct Object Refernce

·         Cross Site Request Forgery (CSRF)

·         Security Misconfiguration 

·         Insecure Cryptographic Storage

·         Failure of Restrict URL Access

·         Insufficient Transport Layer Protection

·         Unvalidated Redirects and Forwads

Others Bugs :

·         Client-Side Validation (Password)

·         Directory Traversal - Files

·         HTTP Response Splitting

·         Information Disclosure - Headers

·         PHP Eval Function

·         Remote & Local File Inclusion

·         Unrestricted File Upload

How to Install bWAPP in Windows ?

It is pretty little hard but very simple, haha just Complete following requirements :

Requirements :

·         WAMP Server (30 mb Download)

·         bWAPP Source Files (Download)

·         Little Brain!

I'll not show any tutorial to install wamp server, because it's simply very easy, download and install wamp server in your system and start it.

·     

·         Start learning from first level to last it's totally free, learn some basic HTTP/ TCP and IP networking.

·         And soon m also gonna post many ethical hacking methods.

Share it and feel free to comment, dare to ask, Knowledge is free. Sharing is caring.

Read more ...

Adding Animated Custom Tabs Trick:

Facebook doesn’t allow users to upload animated GIFs anywhere on the site, so if you wanted to have an animated GIF somewhere, you’re out of luck, unless…

There is a trick that allows anyone, who has the following resources, to bypass this limitation in uploading animated GIFs for custom tabs.

How to Do it:
1) You must have Adobe Photoshop C5 & Quicktime Player.

2) Select the animate GIF you want to upload.

3) Open Adobe Photoshop CS5 and go to File > Import > Video frames to layers. In the File Name box, just enter *.* as your filename and choose your GIF image.

4) Resize your GIF to 111 x 74 pixels to fit the custom tab image .

5) Save your file in a PSD format. Check the save option, ‘LAYERS’

Read more ...

20 Tips On Increasing Your Facebook Privacy And Security

Let’s face it, we all have an embarrassing photo that we don’t want people to see on Facebook. Maintaining privacy on Facebook is important because recruiters, teachers, bosses and college admission committees are highly likely to look at your profile and make judgments about your professionalism based on what they can see. There are many ways to customize your privacy and security on Facebook, but here are 20 tips to get your started:

1.) See what your Facebook timeline looks like to a specific friend or the public.
Facebook has a feature that lets you view what your profile looks like to a specific friend or to the public. To access this feature, go to your Facebook profile and click on the drop-down gear icon at the top-right of the website. After clicking on “View As…”, you will see what your profile looks like to the public. When you click on “View as Specific Person,” you can type in the name of one of your friends to find out what your profile looks like to him or her.

2.) Group friends into lists to customize who can see your content.
All of your Facebook friends can be separated into different lists. This allows you to customize who you can share your content with. For example, I put all of my family members into a list called “Family.” When I want to share status messages, photos, links, and albums that are related to an upcoming family reunion, I can ensure that only my family members see this content.

You can add your Facebook friends into different groups by going to your profile and clicking on “Friends.” Next to the profile photo of your friends, you will notice a box with the word “Friends” and a checkmark next to it. After you click on that box, you can add your friends into different lists. If you want to create a new list, then you can click on “Add to another list…” and then “+ New List.”

Once your lists are created, you can adjust who you want to share your content with from the posting option under “Update status” that is at the top of your profile and News Feed. If you want to learn how to share content with all of your friends except for a certain group, refer to tip #6.

3.) How to opt out of social ads.
Facebook can use your “Likes” as a way to advertise for brands. If I “like” the Applebee’s Facebook Page, then Facebook would be able to show my profile photo and a tagline that says something along the lines of “Your friend Amit likes Applebee’s, check out the Applebee’s Facebook Page to learn about our newest lunch combo.” To block Facebook from doing this, go to the “Ads” section of your “Account Settings.” Go to the section that says “Ads and Friends,” hit edit and then select “No One” where it says “Pair my social actions with ads for.”

Currently Facebook does not give third party applications or ad networks the right to use your name or picture in ads, but they might do that in the future. You can opt out from this now though. In the “Ads” settings within your “Account Settings” change your preferences to “No one” where it says “If we allow this in the future, show my information to” under “Third Party Sites.”

4.) Set up who can see your future posts.
There is a way to set up a default group of people that can see all of your future posts. Go to your “Privacy” settings under “Account Settings” and select “Who can see my future posts?” If you want to make everything you do on Facebook public from now on, select “Public” under the settings. By selecting “Friends”, only your friends will be able to see your future posts. You can also change it to specific groups and lists as we talked about in Tip #2. In Tip #6, you will learn how to let all of your friends except for a limited group of people from seeing all of your future posts.

5.) Review posts that friends tag you in before they appear on your timeline.
Did you know that you have the ability to review statuses, photos, links and other content that your friends tag you in before they appear on your timeline? This feature is great to have if you have a friend that notoriously tags you in embarrassing photos, videos, statuses or links. You can add this preference by going to the “Timeline and Tagging” within “Account Settings.” You will notice a section there called “Who can add things to my timeline?” Enable the feature that says “Review posts friends tag you in before they appear on your timeline.”

6.) Create a default list of friends that you want to prevent from seeing your whole profile.
In tip #2, I encouraged you to create a list of different groups of friends, including one called “Family.” I also strongly recommend that you create a group to limit certain people from seeing all of your personal Facebook content. After all, you do not want photos of yourself at a bachelor party or News Year’s party surfacing on your boss’ Facebook News Feed. I recommend adding certain friends to a group called “Limited Profile,” “Restricted,” “Limited,” or any other similar name. You may have also noticed that Facebook created a restricted suggested list name automatically called “Restricted.”

This is the group that you want to hide all of your future posts from. You can add people to the restricted group by clicking on “Friends” from your Profile and then adding those individuals with checkmarks to the restricted list.

After you are done creating the restricted list, then I encourage you to refer back to Tip #4 and customizing your future posts to be seen by all of your friends except for your restricted list. You can easily change around the privacy of everything that you are tagged in after it is posted to your profile just in case you want have that specific content become visible for your friends or the public.

7.) Restrict people from seeing posts that you’ve been tagged in on your timeline.
By default, all of your friends can see everything on your timeline. You can restrict certain people from seeing the content on your timeline by going to the “Timeline and Tagging” settings under your “Account Settings.” Click on “Edit” where it says “Who can see posts you’ve been tagged in on your timeline.” You can select options like “Only Me,” “Friends,” “Friends of friends,” your lists of friends and “Custom.” Custom allows you to specify only certain individuals, lists, or all of your friends except for a certain list.

My default setting is that all of my friends can see my timeline except for the restricted group that I created:

8.) Allow only specific individuals (or lists) to see a status, photo, or album that you are posting.
Let’s say that I want to tell my Facebook friend Tyler Winklevoss that I read an interesting article about Bitcoin on FORBES, but I only want him to see it on my News Feed. When sending the article through my status, I would need to change my privacy for this specific post by selecting “Custom” and changing the “Share this with” setting from “Friends” to “Specific People or Lists…” When prompted with who the specific people are that I want to share this post with, I would type in just “Tyler Winklevoss.”

This is what my post would look like after I change my privacy setting, write my status, and add the FORBES link:

After hitting “Post,” only Tyler Winklevoss and I would be able to see this post rather than all of his friends and all of my friends. This feature can also be used for Facebook statuses that do not necessarily have a link, photo, or video attached to them. I tend to use this feature with specific people that I have an inside joke with.

9.) Block people from being able to post to your Timeline.
You can block people from adding content to your timeline by selecting “Timeline and Tagging” under “Account Settings.” At the very top, you will notice a section called “Who can add things to my timeline?” You can customize this feature by selecting “Friends” or “Only Me.” Selecting “Only Me” means that nobody else can post on your timeline. I have seen some of my Facebook friends set their timeline to “Only Me” when their birthday is coming up so that their Facebook wall does not get flooded with posts.

10.) Block people from seeing your friends list, your followers and people/lists you follow.
On Facebook, there is a way to block people from seeing who your friends are. You can edit this information by going to your profile and clicking on “Friends.” From there, click on the pencil icon and then Edit Privacy:

When your privacy settings open, you can edit who can see your friend list. This feature also lets you set who can see the people/lists that you follow and who can see your followers on your timeline:

11.) Edit privacy for specific photo albums.
Did you know that you can edit the privacy for every specific photo album that you have uploaded? Go to your profile and select “Photos.” From there, click on “Albums.” At the bottom-right of each photo album, you will see an icon that controls who exactly can see that specific album.

12.) Prevent Facebook from detecting your face when your friends upload photos.
When a friend of yours uploads a photo, Facebook may suggest tagging you if their algorithm detects that your face is in the photo. If you want your profile to be excluded from Facebook’s facial recognition feature, you can adjust these settings by going to the “Timeline and Tagging” section under “Account Settings.” Click on Edit next to where it says “Who sees tag suggestions when photos that look like you are uploaded?” Select “No One” in that preference.

13.) How to disable website instant personalization.
There are certain websites that use information from your Facebook account to deliver a personalized experience. These websites pulls information that you and your Facebook friends have made public. For example, Yelp.com will show you local reviews that your Facebook friends have made and RottenTomatoes.com shows you movie reviews that your friends have made:

You can disable this feature by going to your “Account Settings” and then clicking on “Apps.” Scroll down to where it says “Instant personalization” and remove the checkmark where it says “Enable instant personalization on partner websites”

14.) How to remotely sign out of your account.
If you have used Facebook at the library or a friend’s computer and forgot to log out, then you may be relieved that there is a way to sign out of your account remotely. You can do this by going to your “Account Settings” and then “Security.” At the bottom of the page, you will notice a section called “Active Sessions.” When you hit “End All Activity,” Facebook will log out your account from every computer and mobile device that you have an active session in. You can also log out of each specific computer or mobile device instead of ending all of your sessions.

15.) Require a security code to access your account.
If you want to add an extra layer of security for accessing your Facebook account, then you can require a security code to get into your profile from computers or devices that you have not used before. The security code is sent to your mobile device. This feature can be found under “Account Settings” and “Security.” Click on Edit where it says “Login Approvals” to get started. Facebook will also send you a confirmation code at the mobile number that is associated with your account. Note that this feature does not work with landlines or Google Voice.

16.) Receive notifications when your account is accessed from a device you haven’t used before
Facebook has a way of notifying you when your account is accessed from a computer or device that you have not used before. You can receive the notifications by e-mail or text messages/push notification. This feature can be accessed under “Account Settings” and “Security.” This preference can be found under “Login Notifications.”

17.) Block people from seeing you on Facebook entirely
If someone is bullying or harassing you online, then you should block them. After blocking someone, that person can no longer see things that you post on your timeline, tag you, invite you to events/groups, start a conversation with you, or add you as a friend. You can access this feature by going to your “Account Settings” and selecting “Blocking.” This feature is under “Block users.”

18.) Block your profile from search engines.
If you do not want people to find your Facebook profile by searching for your name on a search engine, then you can control that preference through your privacy settings.

You can do this by going to “Account Settings” and then selecting “Privacy.” Go to the section that says “Do you want other search engines to link to your timeline?” under “Who can look me up?” Remove the checkmark where it says “Let other search engines link to your timeline.”

19.) Stop a Facebook friend from chatting with you through Facebook Chat
You may have a friend on Facebook Chat that constantly messages and distracts you. There is a way to stop them from messaging you on Facebook Chat without removing them as your Facebook friend. You can set this up by clicking the gear icon on the Facebook Chat box from your computer and clicking “Advanced Settings.” Enter that friend’s name where it asks you to input “Turn on chat for all friends except…” You can also turn on chat for only some specific friends or lists with this feature. And of course you can turn off chat altogether.

20.) Have you been hacked? Here’s how you get your account back.
If you have been hacked, Facebook has a way of blocking hackers from getting back into your account. You can get your account back by visiting https://www.facebook.com/help/hacked and following the instructions. Facebook will ask you to create a new password after you enter your old password. Facebook will also ask you if one of the e-mail addresses connected with your account is compromised. You can disconnect that e-mail from being associated with your Facebook account going forward. You may also want to review your purchase history if you have Facebook Gift Cards or other credits.

Read more ...

Computer motherboard buying tips

For users planning on building a computer, a motherboard can be a confusing and sometimes frustrating decision. Below we have listed some considerations and tips when looking at purchasing a computer motherboard.

Type

The type, or form factor, of the motherboard is a crucial consideration when looking at a motherboard. There are various form factors and not all computer cases can accommodate each form factor. Today, the most commonly found and used motherboard is the ATX motherboard. When looking at the motherboard, make sure your case supports your motherboard form factor. Additional information and help with the form factors can be found on our motherboard page

When looking at who to purchase a motherboard through, consider all different brands of motherboards and vendors who sell those motherboards, as all motherboards have positive and negative reviews. A listing of motherboard links and manufacturers can be found on themotherboard section of our network.

Considerations

CPU socket or slo

There are a wide variety of different CPU Sockets and Slots. When looking at purchasing a motherboard, ensure it is compatible with the CPU you have or that it will be compatible with the CPU you plan on purchasing.

Additional information about CPUs and the Sockets or Slots can be found on our CPU buying tips page.

Drive connectors

Drive connectors can be an important consideration when purchasing a computer. Determine the interface of the drives you plan on using, and ensure that the motherboard supports that interface or has the connector for that interface. An example of such an interface is IDE, EIDE or SCSI.

Additional information about hard drive buying tips can be found on our Hard drive buying tips page.

Additional information about CD-ROM buying tips can be found on our CD-ROM buying tips page

Memory slots and type

Today, there is a wide variety of different types and speeds of memory. When looking at purchasing a motherboard, ensure that it is compatible with the memory you currently have or plan on purchasing. 

Additional information about Memory buying tips can be found on our Memory buying tips page.

Slots

The available slots can be an important consideration. Below is a listing of the different slots used in motherboards.

1. PCI Express - The latest and greatest slot and bus type.
2. AGP - AGP, or Advanced Graphics Port, is used for video cards as a replacement for PCI.
3. AMR - AMR, or Audio Modem Riser, is a slot that is used for Audio and Modem cards and is found on some motherboards. This is not a critical slot and has been replaced by the CNR.
4. CNR - CNR, or Communication and Network Riser, is a slot that supports audio, modem, USB, and Local Area Network cards. This slot is highly recommended for any user building a large amount of computers as the cards are cheaper than the standard PCI or ISA cards.
5. ISA - Today, ISA is becoming obsolete and is not found on all motherboards. Unless you have old ISA cards that need to be used, it is recommended you purchase a new motherboard with no ISA slots and additional PCI slots.
6. PCI - The most widely and commonly used slot

Jumpers

Jumpers are overlooked when considering a motherboard; however, they can be an important consideration, especially for users who plan on overclocking their computer. Below is a listing of some of the jumpers that should be asked about or known when purchasing a computer motherboard.

1. Does the motherboard have a clear CMOS jumper?
2. Does the motherboard have CPU settings jumpers? Or is it configured through CMOS? Is it auto detect?
3. Does the motherboard have onboard video or sound? If yes, can they be disabled with jumper or is it done through CMOS? Note: either way is fine as long as it can be disabled.

USB ports

While all motherboards today have USB ports, ensure that the motherboard you plan on purchasing has USB ports.

Effects

Upgrading and replacing a new computer motherboard may have the below effects on the computer.

• Speed up the overall performance of the computer. May not be noticeable.
• Allow for new improved hardware to be added into the computer.

Motherboard installation

Additional help and information about installing a computer motherboard and other computer hardware can be found through our Installation section.

Read more ...

Computer monitor buying tip

Purchasing a computer monitor can be one of the most important pieces of the computer since it is what you are going to be staring at while on the computer and a poor monitor can cause eye strain and a bad experience.

Technology

CRT - Today, one of the most commonly used technologies for computer monitors. CRT, or Cathode Ray Tube, is a technology much like what you will find on most TVs. CRT monitors are an affordable solution; however, they are bulky and very heavy.

Flat Panel and LCD - LCD, or Liquid Crystal Display, monitors are similar to what is found on portable computers. LCD monitors overall display much sharper of an image, are lighter and more space efficient; however, they are much more of an expensive solution for desktop displays.

Size

When considering purchasing a monitor utilizing the CRT technology it is important to consider the following:

Dimensional Size Size can be one of the more important considerations when purchasing a computer monitor. Monitors are available in 15",17", 19", and 21." Like most things, larger is more expensive. The larger the screen, the more viewable space you have to work with. We recommend users that plan on utilizing their computer for more than one-two hours a day and have the available space purchase at least a 17" monitor. Users who plan on using the computer for graphic art or cad, we highly recommend utilize at least a 21" monitor. Finally, users with little space or plan on using the computer for word processing and e-mail may want to consider a 15" monitor.

Viewable Size - The viewable size of the monitor is an important consideration and can vary by manufacturer. The viewable size is the size of the viewable area and not the complete monitor.

Dot and stripe pitch

When purchasing a monitor, Dot Pitch or Stripe Pitch is an important consideration. Dot Pitch measurement is found on most monitors and defines the amount of space (in millimeters) that separates two adjacent pixels that are the same color. The smaller the Dot Pitch, the sharper the image. We recommend that when purchasing a monitor the Dot Pitch be no bigger than 0.25

Stripe Pitch is a measurement used with Trinitron or Diamondtron monitors and is a measurement (in millimeters) that separates two like-colored stripes. The lower the Stripe Pitch the higher the quality of image.

When looking at monitors you should only see a Dot Pitch measurement or a Stripe Pitch measurement. You should not see both of these measurements measuring the same monitor.

Finally, these two different measurements should not be a measurement comparison when deciding between two or more monitors, each technology is different.

Resolution

Resolution is the maximum resolution of pixels capable of being shown horizontally x vertically. Be cautious when purchasing a monitor at any size that advertises a large resolution size such as 1,600 x 1,200 for a 15" monitor.

Some monitor manufacturers may allow for such high resolutions at a high cost but most users never need such resolutions. As the monitor increases in size, the image display will decrease; below is a listing of a usable resolution limit by the size of the monitor. These sizes can be debated but are the standard and most viewed resolutions.

15" 800 x 600 or 1,024 x 768
17" 1,280 x 1,024
19" 1,280 x 1024
21" - 1,600 x 1,200

Refresh rate

The refresh rate is a measurement of the number of times per second the screen is redrawn. This measurement is measured in hertz and it is recommended that a monitor have at least a refresh rate of 75 MHz at the resolution you want to run at.

Controls

When purchasing a monitor, it is important to look at the available controls of that monitor. The controls allow for modification or adjustment of the viewable settings.

Price range

When purchasing a monitor, expect to pay much less than an LCD or Flat Panel display. In addition, the larger the monitor the more money you can expect to pay. When purchasing a monitor, expect to pay the following by size.

15" display: $200 or less
17" display: $200 to $400
19" display: $400 to $1,000
21" display: $700 to $2,000

Ready to buy

Once you have reviewed the appropriate information and believe that you are ready to make a purchase of a new monitor, ensure that the source that you plan on purchasing the monitor from is a reputable source and you have reviewed our section on what to look out for when purchasing over the Internet.

Computer Hope is ready to setup and help you with issues you may encounter during the purchase and installation of your monitor regardless if you purchase through us or another vendor.

To help support Computer Hope you can purchase directly through our well-known associate, Amazon. Click the below browse button to begin browsing through the video card section.

Read more ...

Computer modem buying tips

Today, with the set standards of V.90, purchasing a modem is a much less confusing task and sometimes considered easy.

Before purchasing a modem, take the below into consideration. Today, with the popularity of the Internet and multimedia over the Internet, broadband is becoming widely available. If available in your area, you may want to consider purchasing a broadband solution, such as DSLavailable through a phone or third-party company, Cable available through your local cable provider, Satellite available through a third-party, or through a large ISP such as MSN or AOL.

If a broadband connection is not available in your area, below are some recommendations to consider when purchasing a computer modem.

Standards

Originally, when the 56k connection was introduced, there was not a set standard between two major modem manufacturers, causing there to be two different technologies: X2 and KFlex. Each of these technologies allowed for a modem to connect at higher speeds, but only if the Internet Provider supported the technology. Because of the difficulties and issues with these two different technologies, one technology emerged out of the two, called V.90. This technology allows users of any brand of modem to connect at higher speeds.

Today, all modems (purchased new) are V.90 and this is no longer a concern. Additional information and history about each of these technologies can be found on our Modem Standard page.

Interface

Interface can be an important when considering purchasing a modem. It is important that your computer has the available connections and resources when purchasing a modem.

PCI/ISA (Internal) PCI/ISA modems are modems that are found in most computers today. These modems are installed internally into the computer with an available connection on the back of the modem for the phone line. Before purchasing an internal modem make sure the computer has the required slot. In addition, verify that your computer has the available resources. You can sometimes have difficulties installing a modem if a serial device, such as a Serial mouse or Serial PDA, is connected to the computer.

Serial (External) - A serial modem connects to the serial port located on the back of the computer. These modems are easy to install; however, they can cost more than an internal modem as you pay additional money for the plastic cover. Before purchasing a serial modem verify your computer has an available serial connection on the back of the computer; devices such as a serial mouse may already be utilizing your serial port. Some computers may have two serial ports; if this is the case and only one serial port is currently being utilized, verify that the second port can be enabled or is already enabled in CMOS.

PC card (PCMCIA) - Solution used with portable computers, PC Card modems are fairly cheap and relatively easy to install in the computer.

If a modem is already present in your portable computer but you want to upgrade or the internal modem has gone bad, it is important that you verify the pre-existing modem can be disabled before installing the new modem.

USB - A new solution, USB allows a user to install up to 127 devices on the computer and is available for PC and Mac. Before purchasing this solution, verify that your computer has a USB connection. If no USB connection is available, an additional card needs to be installed in the computer.

Connection

Internal, External, or USB modem - Today, all modems have a RJ-11 connection, which is a standard phone connection, on the modem. If important to you, verify that the modem has two available RJ-11 connections. One of these connections will connect the modem to the phone and the other can be used for an office phone. This can be very useful for a home or office computer that may need a phone next to it.

PC Card Modem - PC Card Modems used with laptop and other computers have different methods of connecting to a phone line. X-Jack and a Dongle are two of the more popular connection types used for PC Card Modems. If you are purchasing a new PC Card Modem make sure the connection works for you.

Internet availability

Unfortunately, not every location in the world has the availability to connect to the Internet. If you live in a rural area, make sure you can connect to an Internet service locally without incurring any long distance charges.

Price range

The price range of a modem is ranged by the speed of the modem, if it is external or internal, and the brand of the modem.

Internal Modem: $80 and below
External Modem: $100 to $150
USB Modem: $140 to $200
PC Card Modem: $50 to $200

Ready to buy

Once you have reviewed the appropriate information and believe that you are ready to make a purchase of a computer modem, ensure that the source that you plan on purchasing the modem from is a reputable source and you have reviewed our section on what to look out for when purchasing over the Internet.

Computer Hope is ready to setup and help you with issues you may encounter during the purchase and installation of your modem, regardless if you purchase through us or another vendor.

To help support Computer Hope, you can purchase directly through our well-known associate, Amazon. Click the below browse button to begin browsing through the modem section.

Read more ...