Tuesday, 29 November 2016

Social Networks and Privacy.

It's very often hard for social networks to draw a clear line reflecting the intrusion of privacy and maintaining user useful information.
Classic examples would be Facebook and WhatsApp, it's hard for Facebook to suggest friends without necessarily importing all your bio data simply to your national identification data, unless they used WhatsApp data, and at that point WhatsApp bleaches your privacy and Facebook intrudes into your privacy just by simply asking WhatsApp for your phonebook details.

With that in mind therefore it would mean that if your brother has about 16 phone numbers and you have 150 phone numbers, your brother will receive friendship suggestions from Facebook about 150, and you will receive 16 even when in real life you have never met the 16 and he has never met any of the 150. This is good if your new in an area or your village is smaller but when your village is a city your bound to have problems.

In otherwords it's only useful to gather information for internal consumption(determine relationships,social interactions, residence proximity,safety alerts,happening place alerts) rather public consumption(friendship suggestions,news feed filtration).

Tuesday, 22 November 2016

How to root Samsung Galaxy J1 SM-J100H



Bottom of ForThese are the instructions to root Samsung Galaxy J1 SM-J100H using Odin and iRoot application on Windows Computer.
Requirements: Your Samsung Galaxy J1 SM-J100H should have atleast 30-40 percent of battery to perform the rooting process.
Step 1: Download and Install Samsung USB Driver on your computer. If Samsung USB Driver already installed on your computer then Skip this Step.
Step 2Download and extract the root files on your computer. After extracting you will be able to see the following files:
Step 3: Now, Switch off your Smartphone.
Step 4: After switching-off the phone, you need to boot into Download Mode. To boot into download mode Press and hold Volume Down, Home and Power button at same time for 5-8 seconds until download mode is active.
Step 5: In the Download mode you will be able to see a Warning Yellow Triangle Sign. In this situation you have to press the Volume Up key to continue.
Step 6: Now, Open Odin3 (found in the extracted files, that you have downloaded in the Step#2) on your computer. Then connect your Smartphone to the computer.
Step 7: Once you have connected the Smartphone to the computer, Odin will automatically recognize the device and show “Added” message at the lower-left panel.
Step 8: Once your device detected by Odin, click on the PDA button and select the boot.tar.md5 file (you have downloaded this file in step#2).
Step 9: Now, click on the Start button in Odin to begin the Flashing.
Step 10: Flashing usually takes 30-50 seconds to complete. Once flashing process is completed you will be able to see a Green Box with Pass written on it in Odin. During this process smartphone will re-boot automatically.
Step 11: Now, download and install iRoot Application on your Windows Computer.
Step 12: Once iRoot is installed on your computer, Open It.
Step 13: Once iRoot is launched re-connect your phone to the computer. Once your device is connected to the computer then iRoot will detect it automatically.
Step 14: Now, click on the root button to begin the rooting process.
Step 15: Now, iRoot Application will automatically Reboot your smartphone and install the KingUser application.
Step 16: Now, your device is rooted. To make sure you have successfully rooted your Samsung Galaxy J1 SM-J100H, open Applications Menu on your Smartphone and Find KingUser App. If this app exist on your Smartphone then it means you have successfully rooted your device. Congratulations.
Optional: You can also verify the root status of your device by using the Root Checker Application.
Keep in Mind:
[*] No data loss process: Your Personal Data including contacts, pictures, videos, music wont be affected using the above method. In short, no data loss process.
[*] How to unroot: Follow how to unroot or remove the KingUser from any Android Device.
[*] Samsung Stock Firmware: If you are looking for the original firmware for your device then head over to Download Samsung Stock Firmware for all devices page.
[*] Samsung USB Driver: If you are looking for the original USB Driver for your device then head over to Download Samsung USB Driver for all devices page.
[*] Credits: iRoot Application is created by Mgyun Developers. So, Full credits goes to them for creating the appliation

Monday, 14 November 2016

Free ebook

You can download this and start your own search ninja skills
http://buff.ly/2fSgiLy

Saturday, 5 November 2016

Must Read Books for information security and IT Professionals.

Aside from security articles, podcasts and videos, books are great resources for developing new skills, improving one’s career growth, and gaining extensive knowledge in the area of information security. If you are into network security, penetration testing, security research, exploit development, and teaching, then you should update yourself with good books that satisfy your hunger for knowledge.
I have compiled a list of books that I believe could help newbies and experts progress and have fun.


The Web Application Hacker’s Handbook: Finding and Exploiting Security Flaws –This book is one of the most practical guides to finding web application vulnerabilities and a must have for web application security analysts, bug bounty hunters and testers. The book is written by Dafydd Stuttard and Marcus Pinto – co-founders of MDSec. Dafydd Stuttard is also the creator of Burp Suite, which is why Burp has been emphasized in this book.


Metasploit: The Penetration Tester’s Guide – The best guide for learning Metasploit, writing your own fuzzers, leveraging Metasploit based on the Penetration Testing Execution Standard (PTES), and much more. The book is written by David Keneedy (creator of Social Engineering Toolkit), Jim O’Gorman (co-founder of Social-Engineer.org), Devon Kearns (Metasploit contributor and member of the Offensive Security Team), and Mati Aharoni (founder of Offensive-Security).


Wireless Penetration Testing using Backtrack – This book is intended for security consultants and analysts who are interested in wireless cracking, auditing and wireless security. Although it uses BackTrack as its distribution for wireless penetration testing, the tools used in the book are open source and can easily be downloaded or ported like Aircrack-ng Suite and Wireshark. If you have Kali Linux or BackBox Linux then you should be good to go, since both of these distros have wireless auditing tools pre-installed and Kali Linux is now the new BackTrack Linux. This book should give you the reason to wardrive. The book is written by Vivek Ramachandran who is the founder of SecurityTube.net and the person behind The Caffe Latte attack.


The Tangled Web: A Guide to Securing Modern Web Applications – This book is written by Michał Zalewski a.k.a Icamtuf who is a one of the 15 most influential people in security, among the 100 most influential people in IT, and a security engineer from Google. This is a must read for web developers and web security enthusiasts because it covers brief history of the web, browser security model, web application security, and has a section called Security Engineering Cheat Sheet.


The Browser Hacker’s Handbook – Do you want to control someone’s browser? If yes, then this book for you! The Browser Hacker’s Handbook covers the following topics; bypassing the Same Origin Policy, control browsers (using ARP spoofing, Social Engineering, and phishing), exploiting the browser and its ecosystem (plugins and extensions), Cross-origin attacks, attacking web applications, and attacking networks. The book is written by Wade Alcorn, Christian Frichot, and Michele Orru’ and they are the developers of BeEF (Browser Exploitation Framework) Project.



RTFM: Red Team Field Manual – Nope, not the Read the F***in Manual but a cheat sheet and reference for Linux commands, Windows commands, Nmap commands, sqlmap commands, or commands you may want to use during a penetration test. A handy reference and arsenal for penetration testers on the battlefield! Thanks Ben Clark for creating this book or manual.


Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software – This book is one of the most trusted and awesome books in malware analysis and reverse engineering. The book covers static analysis, how to setup a safe environment for malware analysis, using debuggers and disassemblers (IDA Pro, OllyDbg, and WinDbg), unpacking a malware, analyzing a shellcode and more. I am into exploit development and web and network penetration testing. I have learned new methodologies and malware analysis that has become my point of interest because of this book. This book gives you an edge for CTF games in hacker conferences like DEFCON or ROOTCON.


The Android Hacker’s Handbook – Mobile security is a trend, and emerging threats just keep on coming every day — targeting and bashing Android and iOS phones. This book is an essential guide to securing and auditing Android apps plus Android application building blocks and application security.



Violent Python: A Cookbook for Hackers, Forensic Analysts, Penetration Testers and Security Engineers – This book does not teach you how to code and what are the best practices in Python but leveraging Python for creating your own automation scripts for penetration testing and computer forensics. It gives you an idea on how to create a web scraper, wireless analyzer, sniffer (by using Scapy), fuzzers, bruteforce attack tools, port scanners, botnets, and how to replicate Conficker. Some would say that some Python snippets in the book are badly written but for me it is okay and it is up to you to improve some scripts in the book. A must have for Pythonistas who want to venture into penetration testing, open source intelligence gathering, wireless auditing and forensic analysis.


Malware, Rootkits & Botnets: A Beginner’s Guide – This book is written by Christopher C. Elisan who is the Principal Malware Scientist and Senior Manager of the Malware Intelligence Team at RSA, The Security Division of EMC. As the book says, it is a beginner’s guide to Malware, Rootkits and Botnets which explains how these things work including the history of malware without having the need to be a software engineer, programmer, hacker or a reverse engineer. The book is well written, organized and can easily be understood by newbies.


Black Hat Python: Python Programming for Hackers and Pentesters – This book is written by Justin Seitz, a senior security researcher at Immunity Inc. and the author of Gray Hat Python. This book is ideal for intermediate programmers who want to create a Github-Adware Trojan, extending the Burp proxy with python, network sniffers, web fuzzers or scrapers, keyloggers, and other offensive python projects. This book has a more detailed explanation of the snippets presented in the book than Violent Python however, we can’t compare which two books about Python are better in this article since they have their own uniqueness and specifics.


Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning – This book is written by Gordon Fyodor Lyon, who is the author of open source Nmap Security Scanner and maintains the SecLists.Org, Insecure.Org, SecTools.Org, SecWiki.Org, and Nmap.Org security resource sites. This book describes how to use Nmap and how Nmap works which covers subverting firewalls and intrusion detection systems, optimizing Nmap performance, and automating common networking tasks with the Nmap Scripting Engine (NSE).


Cryptography Engineering – A book written by Niels Ferguson, Bruce Schneier, and Tadayoshi Kohno. This book is formerly known as Practical Cryptography, which is the first edition of the book, and with its second edition, it is fully updated and that Tadayoshi Kohno has been added as one of its authors. It is a sequel and now focuses on how to build a secure system rather than just design a cryptographic protocol.


A Bug Hunter’s Diary: A Guided Tour Through the Wilds of Software Security – I am a bug hunter myself and somehow this book gave me a good inspiration not just to deal with web application bugs but also software bugs. This book is a story and proof-of-concepts on how Tobias Klein found bugs for applications like VideoLAN’s VLC media player, Sun Solaris kernel, FFmpeg multimedia library, WebEx ActiveX, Avast! AV, OSX TTY IOCTL, etc. by getting or gaining the control of the instruction or program counter control (EIP, RIP, R15 or PC). The book does not include a working exploit code or a shellcode since the author’s home country (Germany) forbids the distribution of hacking tools, scanners, and exploits. No need to be disappointed about that since there are other books and resources that talks about exploit development like Jon Erickson’s Hacking: The Art of Exploitation (2nd Edition). Readers should have a fair understanding of Assembly, C, C++ programming languages to enjoy this book.


Hacking: The Art of Exploitation, 2nd Edition – If you think that Tobias Klein’s A Bug Hunter’s Diary: A Guided Tour Through the Wilds of Software Security is not enough since you really want to exploit buffer overflow vulnerability in order to spawn a shell, then this book is for you. This book is not intended for script kiddies but people who want to graduate from being a script kiddie since this book will teach you about the true hacker culture and exploitation by creating your own proof of concepts.


Thursday, 3 November 2016

Ultimate Windows program Collection 2016


Whenever we buy new computers we always run on line and try to download as many programs on our computer as possible and then it finally hits us that most of the programs we downloaded are no longer useful so we uninstall them. This list consists of all the programs that you will ever need on your computer should you ever want to do something extra with your computer.
1. Firefox and chrome. These are browser that you can use to access the Internet. You may have to install both since sometimes one becomes useful when another fails.
2. Internet Download manager. You use it as and when you need to download something at super faster speeds, it supports resumes and planned downloads , you can even queue up your downloads
3. Driver genius these is a big tools to get you all the drivers that your computer will ever need to be able to use a particular device, for example blue tooth, wireless, Ethernet as long as the are compatible with your computer.
4. Winrar/ 7Zip this is use to compress and decompress files. These two programs are used to open ZIP, RAR, ISO, LZH, TAR, 7Z, GZ, BZ2,ARJ, Z which are all file compression formats.
5. Codec pack K-lite. These are for your sound
6. VLC. When you need the best player for your videos or music files this comes close to only cinema
7. Ccleaner. This is for cleaning your computer of space eating files, you can run it bi-weekly for the best experience.
8. Kaspersky this has been seen as the best anti virus to ever protect you computer, however if you can't afford the paid version then I recommend you use updated versions pf avast along side windows defender.
9. Img burner / Ashampoo for writing data to CD/DVD
10. MS Office/Libre Office. You can choose to use Microsoft office as long as you are on windows and  have a license key other wise use Libre office which is free and open source and has more functionalities.
11. Adobe reader / FOXIT you will always come across a file or two that is a PDF and these two applications will open these files with a lot of ease.
12. U torrent some times there is a need to download a file or two but they are usually torrents for example the TAILS ISO is provide as a torrent and U torrent will come in handy at this moment.
13. Revo uninstaller sometimes you may try to un install a program but it magically failes to get uninstalled the best option is use Revo unistaller.
14. Malware bytes. In the age of hacks and attacks you need a program that can protect you from being infected with malware and becoming a server for the same.
15. Team viewer. You get to access another computer from your computer as if you are physically on that other computer.
16. Folder lock these will always keep private folders private
17. Sandboxie for virus testers and those who don't trust what they have downloaded.
18. VMWare workstation. You can use it to test new software or operating systems, sometimes you use it to run other operating systems on one computer
19. Cyberghost VPN anonymous browsing. Privacy is a basic need and extreme measures are sometimes necessary where the basic security is in question.
20. Notepad++/gedit, these are used to open text files but advanced users use them for programming.
21. Bonus: Python/Java these are programming languages and once in a while you may get a pinch or itch to develop something, and these two may be the best options to choose from.

This is just a starting point but very sufficient for all computer users.

Tuesday, 1 November 2016

Password Managers

With a growing number of people having more that one website to login to there is a need for password mangers, to help you remember as many passwords as possible or else you will end up just having to reset your password always which may not work in all case, as some website only have fewer options.
There are many password keepers out there and this list is just a tip of the iceberg for the best password mangers for windows, Linux and Apple devices.

  • Keeper Password Manager
  • LastPass Password Manager
  • LogMeOnce Password Manager
  • KeePass Password Manager
  • Apple iCloud Keychain
  • SpiderOak Encryptr Password Manager
  • RoboForm Password Manager
  • 1Password Password Manager
  • mSecure Password Manager
  • OneSafe Password Manager
  • SplashID Safe Password Manager
  • Google Online Password Manager
  • Passpack Online Password Manager