Sunday, January 26, 2020

The Security, Functionality, and Usability Triangle


We should keep all three components equally in terms of it's security as if you prioritize any of it's component too much then the other two components might be in danger. 

Friday, January 24, 2020

Network Scanning - UDP and TCP Packet Crafting Techniques using HPING3


In network scanning, your first procedure will be to scan the target network to determine all possible open ports, live hosts, and services running. Knowledge of packet crafting techniques may help you to scan the network beyond the firewall or IDS.

First go to Windows 10 machine and Navigate to Start --> All Apps and click Wireshark to launch the application.




Wireshark main window appears as shown in the screenshot. Double-click the Ethernet interface to start capturing packets.


Wireshark starts capturing the traffic on the Ethernet interface.



Now go to Kali Linux machine




In the Username field type root and click Next.


1.     In the Password field type toor and click Sign In


Open a command terminal and type hping3 -c 3 10.10.10.10 and press Enter.
Here, -c 3 means that we only want to send three packets to the target machine





Here, --scan parameter defines the port range to scan and –S represents SYN flag.




To perform UDP packet crafting, type hping3 10.10.10.10 --udp --rand-source --data 500 and press Enter.



Switch to the Windows 10 machine, click Windows 10. Click any UDP packet to see the packet details. In the packet details pane, expand the Data section to view the data size of the packet.


Click the Restart Packet Capturing icon from the menu bar and click Continue Without Saving button in Unsaved packets… pop-up.


Switch to the Kali Linux machine, click Kali linux, and send a TCP SYN request to the target machine, type hping3 -S 10.10.10.10 -p 80 -c 5 and press Enter.
-S will perform TCP SYN request on the target machine, -p will pass the traffic through which port is assigned, and -c is the count of the packets sent to the Target machine.


Switch to the Windows 10 machine, click Windows 10 and observe the TCP packets captured via Wireshark.


Switch to the Kali Linux machine, click Kali linux and type hping3 10.10.10.10 --flood and press Enter.

2.     Switch to the Windows 10 machine, click Windows 10 and observe the Wireshark window, which displays the TCP packet flooding from the attacker machine.
Stop the packet capture after a while


Double-click the TCP packet stream to observe the TCP packet information. The TCP Packet stream displays the complete information of TCP packet transmitted to the attacker machine and received packets.




Tuesday, January 7, 2020

Advanced network route trace using Path Analyzer Pro (PAP)

The purpose of Path Analyzer Pro?

Path Analyzer Pro is a graphical Route-Tracing application. It can be used to investigate DNS, WHOIS, and network resolution issues. 


Note
You might face difficulties when you are using PAP in Windows 10. But which supports Windows 7 and Windows  XP really well. 

Wednesday, January 1, 2020

Mirroring website using HTTrack website copier

HTTrack is a offline browser which helps you to download World Wide Websites from the internet to a local computer. 

Lets see how it works. 

Go to
https://www.httrack.com/



















Select the platform based on your operating system . Since I use Windows 10 my platform would be Red highlighted one. 



Once you download the HTTrack Please follow below steps. 

Run HTTrack and continue with Next button



Choose a project name and click Next


Enter the URL of the targeted Website or Blog 

Click Finish


The website will be downloaded as below. 


Once mirroring completed you can view the mirrored sites. 


Migrating from firebug to firefox developer edition

Firebug was started 2005 and which helped to inspect, edit, and debug code right in the Firefox browser. It also let you monitor CSS, HTML, and JavaScript live in any web page but it has stopped operating since 2017. Thus Firefox has launched a new browser called  "Firefox Developer Edition" which has more user friendly features with easy accessible to get source code, CSS, HTML etc. 

https://developer.mozilla.org/en-US/docs/Tools/Migrating_from_Firebug

To Open the tools


Firebug can be opened by pressing F12. To open it to inspect an element it is possible to press Ctrl+Shift+C 
The Development Tools share the same shortcuts, but also provide shortcuts for the different panels. E.g. the Network Monitor can be opened via Ctrl+Shift 
the Web Console via Ctrl+Shift+K and the Debugger via Ctrl+Shift+S 

Ping Command

Using #pingcommand utility to find #ipaddress of a target #domain , Find the maximum network frame size and emulate the #tracert. #C...