Friday, September 19, 2014

Motorola Assist


Motorola Assist recognizes when you shouldn’t be bothered, like when you’re sleeping or in a meeting. After hours, it only lets important calls through. It even knows when you’re driving and can automatically read out new text messages or play music. When you’re at home it can announce calls. You can set actions and exceptions so that they work exactly how you want them to.

New Updates: Home and Driving Modes
There are two apps 'Motorola Contextual Services and Assist Apps' in this zip folder. You have to install both of them.



         


Like it ? Share it.

Wednesday, September 17, 2014

Request and Response Interception in Burp Suite


We have already discussed almost all basic theories about burp suite. Now, Let’s do some practical things with burp suite. You should not jump into practical thing directly without reading Basic theories. If you are wondering for Basic theory then you can visit my previous articles about burp suite which are based in theory. I am providing the link below.

Requirement:
2. Burp Suite
3. Firefox or Iceaweasel
5. Basic Theories Target Taband Proxy Tab




What we are going to do ?
We will understand how interception work, how we can add a scope in burp suite for particular target and how request and response works.

1. First of all start mysql and apache server for running mutillidae
   Open Terminal
  • Type service mysql start and Press Enter
  • Type service apache2 startand Press Enter

   Now start burp suite by terminal
  • Type burpsuite.jar and Press Enter 

(Click image for large view)



2. Burp Suite has been opened. Go to Proxy Tab then Intercept Sub-tab. There you will see intercept is off.


3. We have seen our interception is off in burp suite so, let’s see what happen when we browse any url in our web browser which is configure with burp suite. We will not use any website to do these testing because that will be illegal so we will use our mutillidae this is our own web server.
Write 127.0.0.1/mutillidaein your web address and Press Enter. Web site responds without any trouble.


4. When we come to intercept sub-tab there are also no web traffic records available.
 We have configured well burp with our browser but still burp is not capturing any web traffic from browser why ?
Very simple answer, because we turned off intercept while browsing the website so, burp could not capture any data. If you are beginner and trying to test any web and your burp is also not getting traffic from the browser then you should look at once your intercept is On or Off.


5. In the Site Map sub-tab we can see which url we have visited it doesn’t matter intercept on or off.

--------------------------------------------------------------------------------

6. Now, Let’s Turn On interception in Intercept sub-tab


7. Go to Proxy Tab then Option Sub-tab. There you will see intercept Client Request and Responsesection you just need to uncheck Match type : URL boxes. (If already unchecked leave this step)


8. Go to Target Tab then Scope Sub-tab. There you will see Include in scope section, you need to delete all the scopes from there if you have added any.


9. Go to your web browser and open 127.0.0.1/mutillidae


10. Go to Burp Suite there you will see it send request to server for response. You need to click on forward for forwarding the request to server so you will get the response from server.


11. Here, We got the response.


12. Go to your web browser, our web browser is still waiting for response.


13. Go to Burp Suite and Click once again on Forward button so, Our web browser should get their response.


14. Here, our web browser got the response.

------------------------------------------------------------------------------
15. Go to Proxy Tab then Option Sub-tab. There you will see intercept Client Request and Responsesection you just need to check Match type : URL boxes. (If already checked leave this step)


16. Intercept should be turn On.


17. Go to your web browser and open 127.0.0.1/mutillidae


18. Interception is On but Burp suite could not get any traffic from web browser.
Why?
Because, We did setup (step 15) burp to get traffic for particular target not for all which are browsed by web browser but we are not getting any traffic because we did not add any target to burp suite yet for getting the traffic.


19. Here we will add a particular url target for getting the traffic on burp. Go to Target tab then Site mapsub-tab and Right Click on the url which one you want to test then Click on Add to Scope.


20. Now we gave burp suite a particular target for testing so if you will browse any other url on same browser it will not effect on burp. I like this method because it do not intercept other websites during your testing. For example I have added 127.0.0.1/mutillidae as a scope means as target. Now I need to search something on google or I am also using facebook while testing for discussion with my team or whatever reason in same browser which is configure with burp suite. If you added a scope 127.0.0.1/mutillidae burp will not show you any traffic for other sites like google search or facebook. It is trace only your target url activity.
As you can see we have added a scope from site map sub-tab. You can also add scope manually by clicking on Add button there you need fill up some details like Protocol, host/Ip range, Prot etc. You can also Enable or Disable your scope by clicking on the check box in include in scope section.


21. Intercept should be On.


22. Go to Web Browser and Open URL 127.0.0.1/mutillidae You will notice it is waiting for response.


23. Burp sends request to server for response. Click on Forward button for getting response.


24. Here, We got response.


25. Go to Web Browser there you will see it is still waiting for response.


26. Go to Burp Suite and click on Forward button so your web browser will response.


27. Here, we got response.  


 (Click image for large view)

Like it ? Share it.

Monday, September 1, 2014

Difference Between Linux and Windows Based Web Hosting

Many people get confused while choosing web hosting. This is very genuine because everyone wants the best. If you are also planning to purchasing web hosting and you are also feeling confuse between these.
We are going to share with you some difference between Windows and Linux based web hosting. After reading these difference you will be understand the concept behind Windows and Linux Web hosting as well it will help you to choose your work based hosting.

Below are Difference:
  • Windows servers run Plesk and Linux servers run cPanel. Many people like Linux because of cPanel.
  • Linux supplies telnet or ssh access. it’s not that Windows can’t do that, but it’s very rarely offered by hosting admins.
  • Some people may site FrontPage extensions as a Windows exclusive feature, but some Linux servers will provide this as well.
  • Linux, file and directory names are case sensitive. So if you name a file AboutUs.html, and another page in the same directory as aboutus.html, you actually will have to completely different pages. Your visitors will have to enter your page URLs precisely or risk landing on 404 error pages. Windows servers however really don’t care about upper and lowercase. On a Windows server, you would only have one aboutus.html page, no matter where you put or left out capitalization.
  • The website uses a dynamic scripting technology such as ASP (A Microsoft based technology), or PHP / PERL (Linux based technologies). A Windows-based hosting solution will run a Microsoft Windows server with IIS (Internet Information Server), and is necessary to run an ASP / ASP.NET scripted website. A Linux-based platform is typically used for PHP, Perl, and most other types of websites. Basically, unless your website uses ASP (pages ending in the .asp extention), Windows hosting is not necessary. Unless you have websites which need specific Windows applications, Linux is the preferred choice.

Below are some Specification difference between Linux and Windows Hosting:

Windows applications which require a Windows server:
  • ASP Classic
  • ASP.NET
  • MSSQL (Microsoft SQL Server)
  • MS Access (Microsoft Access)
  • Visual Basic Development
  • C#
  • Remote Desktop (dedicated server only)
Applications that require a Linux-based server.
  • SSH
  • FrontPage Extensions
  • Scripts or applications that require specific Apache modules
Type of Control Panel : Windows servers and Linux servers use different control panels.
  • cPanel is available on all Linux-based hosting plans, such as Linux Shared, Reseller, VPS and Linux Dedicated Servers.
  • WHM (Web Host Manager) is available on Linux Reseller, VPS and Dedicated Servers.
  • Plesk is available on Windows Shared and Dedicated Servers.
Although people consider Linux to be more secure than Windows, both operating systems are equally secure. Security really depends more upon the server setup and the administrators running the server.


Like it ? Share it.

Friday, August 15, 2014

8 Android Apps You Need Now


1. GOOGLE TRANSLATE
We've seen a few clever translation apps in our time, but recently Google Translate has crushed them all. It now offers (sometimes clunky, word-for-word) translations of over 70 languages with input via text, handwritten words or symbols, spoken words or even text recognition via the camera. It can then give you the translation in the form of text or speak it for you.
The core app can do all this with a data connection, and language packs can be downloaded for free so you can use it abroad without the need for Wi-Fi or the fear of roaming data charges.

2. AUDIBLE FOR ANDROID
Audio books! A bit like radio shows that you actually want to listen to, a bit like podcasts before all the funny people stopped doing them, a bit like books being read to you (OK, mostly the latter), audio books are a treat to be savoured.
Amazon's Audible app is a gateway to its own audio book service, drawing you in with free tasters of some of its best sellers. It's worth downloading even if it's only for those free nibbles.

3. NAVFREE
You've got Google Maps already and that's lovely. However, that relies on a data connection, which isn't always available even in your home nation and will sting you with ludicrous charges abroad. Navfree is based on an open-source map database and provides mapping and voice-guided sat-nav for no cash at all.
You can load it with paid extras if you like, but it's fine as it is. Download the local variant for any country you're visiting before you leave and you'll always have a map and a sat-nav tool at your hip. 

4. ANY.DO TO-DO LIST & TASK LIST
We're all busy. Busy creating Stuff To Do lists and sticking them in our bags, on the front door, in our back pockets and tapping them into note apps on our phones. Any.do is the best way to keep on top of all those loose ends, thanks to its cloud syncing and sharing skills. You can have it running as a live widget on your homescreen and also separate your tasks into different folders.

5. COMICS
With access to over 45,000 comics from DC, Marvel, Image Comics, IDW and Disney, the Comics app is the place to go for all things graphically novel. You get quite a few freebies to get you started, with more free titles released each week. Paid-for comics will typically set you back between £0.69 and £2.49. The app really comes alive on larger devices, where you can pore over the panels in a more leisurely manner than on a phone.

6. VLC FOR ANDROID BETA
Wouldn't it be lovely if there was one video format to rule them all, like MP3 is to music? Well, dream on... Until that day you'll be thankful for VLC, which aims to play every video format you'll ever encounter. If you like to source your movies from varied locations you'll find this one of the most useful apps on your phone or tablet. It's ad-free and doesn't try to harvest all your personal data either, which makes a nice change. 

7. RUNKEEPER - GPS TRACK RUN WALK
If you're putting yourself through a fitness grind alone, this virtual back-patter will help spur you on. It tracks all your runs, walks and rides, then does the maths to tell you (and the entire world via social media) how many calories you've burnt, how far you've gone and generally how heroic you've been over the past week or so. The in-app purchase model keeps it all nice and tidy too, so even in the basic free format it's a very neat app to use. 

8. DROPBOX
As Android moves closer to home computer territory, syncing photos, music and work documents is increasingly important. As a free service, Dropbox offers 2GB of pleasingly simple online storage which is automatically synced whenever you log in from any of your devices – very useful for occassional file transfers, semi-permanent documents and shared folders. The Android app is nothing fancy but it doesn't need to be, getting the job done without fuss. 



Like it ? Share it.

How to use zenmap in Kali Linux


Intro - Zenmap is the official Nmap Security Scanner GUI. It is a multi-platform (Linux, Windows, Mac OS X, BSD, etc.) free and open source application which aims to make Nmap easy for beginners to use while providing advanced features for experienced Nmap users. Frequently used scans can be saved as profiles to make them easy to run repeatedly. A command creator allows interactive creation of Nmap command lines. Scan results can be saved and viewed later. Saved scan results can be compared with one another to see how they differ. The results of recent scans are stored in a searchable database.

1. How to open Zenmap
A. GUI Method
Application → Kali Linux → Information Gathering → DNS Analysis → Zenmap
                                                                      (Click on image for large view)

B. Open Terminal and type zenmap and hit enter

2.  In Target area you have to write an IP address or a range of IP address as a shown this in namap tutorial. There is Profile area. In this area you can choose your scan type like intense scan, quick scan etc. In command area you can use each nmap command but by default zenmap already has some commad as you can see in image. If you want a advance scan then you can write your commnad .

3. After scanning we got all open ports details, OS details, MAC address and other details of our target IP

4. Here we can see only Port and Host details

5. Here we can see Host details
(Click on image for large view)



Like it ? Share it.

Friday, August 1, 2014

CCleaner


CCleaner can clean your android phone in a minute. Now You can clean your Browser cookies, apps cache etc. in one tap.

Optimize and Clean
● Speed up your phone and remove junk safely
● Clean application cache, download folders, browser history, clipboard content and more
● Delete call logs and SMS messages individually, in bulk, by age or by contact

Reclaim Storage Space
● Streamline your Android smartphone or tablet
● Quickly and easily uninstall multiple unwanted applications
● Free up valuable storage space on your device

Easy to Use
● Optimize your Android in just a few clicks
● Simple, intuitive user interface which is easy to navigate
● Totally free from Ads and clutter
● Fast, compact and efficient with low memory and CPU usage

Monitor your System
● Check the usage of your CPU
● Keep track of your RAM and internal storage space

● Check out your battery levels and temperature

          



Like it ? Share it.

Introduction Burp Suite Part VIII (Comparer Tab)


Burp Comparer is a simple tool for performing a comparison (a visual "diff") between any two items of data. 
Some common uses for Burp Comparer are as follows: 
  • When looking for username enumeration conditions, you can compare responses to failed logins using valid and invalid usernames, looking for subtle differences in the responses.
  • When an Intruder attack has resulted in some very large responses with different lengths than the base response, you can compare these to quickly see where the differences lie.
  • When comparing the site maps or Proxy history entries generated by different types of users, you can compare pairs of similar requests to see where the differences lie that give rise to different application behavior.
  • When testing for blind SQL injection bugs using Boolean condition injection and other similar tests, you can compare two responses to see whether injecting different conditions has resulted in a relevant difference in responses.
Word compare - This comparison tokenizes each item of data based on whitespace delimiters, and identifies the token-level edits required to transform the first item into the second. It is most useful when the interesting differences between the compared items exist at the word level, for example in HTML documents containing different content.
Byte compare - This comparison identifies the byte-level edits required to transform the first item into the second. It is most useful when the interesting differences between the compared items exist at the byte level, for example in HTTP requests containing subtly different values in a particular parameter or cookie value.
(Click image for large view)




Like it ? Share it.