Tuesday, January 21, 2014

Top 8 Linux Forums Worth Bookmarking

  Here are top 8 Linux forums where you can get useful information, such as tips, tricks, introduction, community discussion, specialized discussions, and get immediate resolution pertaining to security, installation, networking and much more.

Ubuntu, Ubuntu forums, LinuxQuestions.org, LinuxQuestions, Linux Forums, Ubuntu community discussions, Debian




1) Ubuntu Forums
You need to register to the site to view the postings on the forum. Various Ubuntu forums include: Ubuntu General Support, Ubuntu Specialized support, Ubuntu community discussions, Ubuntu specialized discussions, and so on.

2) LinuxQuestions.org
By joining the community, users can post topics, receive newsletter, use the advanced search, subscribe to threads and access several other unique features of the site. The site offers quick and simple registration, which is absolutely free.

3) Open Source and Linux Forums
It is an extensive Linux Software Resource, which provides Linux Forums, Linux Server Distro info, Linux Training, and Linux Help. You can also read through useful Articles, Tutorials, News, Downloads and more!

4) Linux Forums
Linux Forums refers to a Linux Help community where users can share their knowledge, resolve problems, learn and interact with each other! Join the forum to find out more information about Linux.

5) Forums
You need to register to the forum to postings, rules and notices, newbie questions, questions about networking, software and applications, as well as questions about sound, multimedia, & Codes. The site also features tutorials and how to articles and so on.

6) openSUSE Forums You need to register before you can post in the forums. The site is available in English, Dutch, French, Japanese, Polish and several other languages, and has around 78,000 listed members.

7) The UNIX and Linux Forums - Learn UNIX and Linux from Experts - It is one of the top free UNIX and Linux System Administration Resource Forums aimed for beginners and gurus who are on lookout for UNIX and Linux help and advice on the Internet.

8) FedoraForum.org You can find useful information on Fedora.

Monday, January 20, 2014

Free Penetration Testing Lab on Your Localhost


If you want to learn Penetration Testing without hacking any public site and you are White Hat this is awesome for you.
What is DVWA?

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that
is damn vulnerable. Its main goals are to be an aid for security
professionals to test their skills and tools in a legal environment,
help web developers better understand the processes of securing web
applications and aid teachers/students to teach/learn web application
security in a class room environment.

DVWA is only to use on localhost or private usage, DON’T UPLOAD IT TO ANY HOSTING ACCOUNT/VPS, BECAUSE ITS DAMN VULNERABLE.

In DVWA you can test your skills and there is video about installing it on Kali Linux:

Protect Your Android Device


Hello, today i will show you how to protect your phone, it include:
  • Locate
  • Backup
  • Remote Control
First of all you need to download ans install  “Lookout Security” on your Android Device.

Now when you downloaded and installed Lookout Security from Google Play, you need to create account and Activate Account.

Now your android is protected, lets login to Control Panel of Lookout and take control of Android phone.
If you think your phone is hijacked, you can simply login to Lookout Security web panel and Lock, Scream, Locate, Wipe or  your Android.
  • Lock – Premium feature! Lock your device to keep prying eyes out of your personal data while you find your device.
  • Scream – Sound a loud alarm to find a lost device nearby.
  • Wipe – Premium Feature! Wipe your device clean and erase all your personal data from your lost device.
  • Locate – Locate your Device on map using GPS.

How to root android phone and tablet


andoid1Android Mobile OS is one of the best mobile operating system that’s why we love it, but rooting your phone can give some amazing features and increased performance, byperforming tasks like wireless tethering, speeding it up with overclocking, or customizing the look of your phone with themes. A rooting Android device unlocks its potential, allowing users to deceive the limitations placed upon it by carriers and hardware manufacturers.
Why to Root?
Starting with why you should root your Android smart phone. You may have encountered with some applications which sometimes require special permission from the Android OS, which is based on Linux and it doesn’t allow. These could be simple as taking a screenshot to higher level permissions to the core Android files. Rooting makes your phone faster, increases battery life, allows it to run more apps, custom software and ROMs which allow complete control over every aspect of your device by allowing superuser and admin level permission.

How to Root Android Phone or Tablet?

Internet is loaded with tonnes of rooting methods and software, and one of the best method that I’ve tested is via SRS One Click Root. SRS-Root is an easy to use solution for rooting your android device, the software contains multiple exploits to gain root access on your device. Benefits of using SRS-Root :
SRSRoot Supports Android versions 1.5, 2.1, 2.2, 2.3, 3.1, 3.2, 4.0, 4.1, 4.2
Root latest models like Samsung Galaxy S2 / S3, Note / Note2
Option to remove root from your device by one-click
Powered by SRS Server “Safe Rooting without flashing your device”

Procedure to Root Android Phone or Tablet :
Download and Install SRS-Root link1 link2
Enable ‘USB debugging’ on your device (you can find this in the settings menu)

android 2
Enable ‘Unknown Sources’ on your device (you can find this in the settings menu)
android 3
Connect your Phone or Tablet to the computer (If needed install the android drivers)
Click on Root Device(All Methods) and wait till it’s finished.
Clik on UnRoot Device(If you want to UnRoot)

Warnings :
Before you root your Android phone or tablet, there are a few things you should be aware of :

Warranty – Some manufacturers or carriers will use rooting as an excuse to void your warranty. However, rooting will not actually damage your hardware. You can “unroot” your device and manufacturers won’t be able to tell if it’s been rooted.
Security – Google Wallet, in particular, has a vulnerability on rooted devices that could allow other apps to access your PIN and other wallet information. Google Wallet displays a warning message if you run it on a rooted device.

[DOWNLOAD] ULTIMATE ANDROID PENTEST PACK!

cyanogenmod-cm-a-r_130050829989 


 Summary:

The best programming techniques are often the shortest and simplest—the hacks. In this compact and infinitely useful book, Android expert Carlos Sessa delivers 50 hacks that will save you time, stretch your skills, and maybe even make you smile.


About this Book:
Hacks. Clever programming techniques to solve thorny little problems. Ten lines of code that save you two days of work. The little gems you learn from the old guy in the next cube or from the geniuses on Stack Overflow. That’s just what you’ll find in this compact and useful book.The name 50 Android Hacks says it all. Ranging from the mundane to the spectacular, each self-contained, fully illustrated hack is just a couple of pages long and includes annotated source code. These practical techniques are organized into twelve collections covering layout, animations, patterns, and more. What’s Inside:
Hack 3 Creating a custom ViewGroup
Hack 8 Slideshow using the Ken Burns effect
Hack 20 The Model-View-Presenter pattern
Hack 23 The SyncAdapter pattern
Hack 31 Aspect-oriented programming in Android
Hack 34 Using Scala inside Android
Hack 43 Batching database operations
Plus 43 more hacks!

Most hacks work with Android 2.x and greater. Version-specific hacks are clearly marked.
Purchase of the print book includes a free eBook in PDF, Kindle, and ePub formats from Manning Publications.
About the Author

Carlos Sessa is a passionate professional Android developer. He’s active on Stack Overflow and is an avid hack collector.


Exploiting any network device using XSS Framework (Tested on Android 4.1)

Exploiting using XSSF working for exploit any network device. I created video demonstration about exploiting Android 4.1 using latest Chrome for Android.
OK, first of all you need to insert XSSF in Metasploit, thats not hard, just DOWNLOAD zip package, extract it and add files in metasploit modules/plugins… you can see details in Video.
After that you need to type “load xssf” to load script, once it’s loaded you need to type “xssf_urls” to show URL for victim and all other urls you need, you will see “XSSF test page” – that’s URL for your Victim.
Once your victim opened URL you need to type “xssf_victims” to show victims that opened that link, then you need to specify ID and select victims ID to see more about victim and collect cookie or inject code in his browser, you can see more in video:

13 Super Intelligent Actions To Help You Get Your Dream IT Job

There are indeed a thousand certified professionals around the world who have taken all those perfect jobs who were actually meant for you. Well now it’s your time. With these actions you don’t have anything to loose, but these might help you to find the best job on the planet, prove that your are ready to be interviewed. It’s time to let them find you.

So here's your action plan:

IT Jobs, It placement, hired, jobs, Google, Microsoft, Apple, Job in IT, Software companies, jobs in software companies, technology jobs




1. Create an additional email account, as professional as possible.

Time needed: 10m

Create one unique and professional id and use it only for your job related tasks. Your goal is to be as professional as possible. You can use a firstname@secondname.com or firstname.surname@gmail.com format. Also you can buy your own domain via GoDaddy.com for $9 and create your email account there for free. Use this email to send all your resumes and to contact with recruiters.

2. Create a brilliant CV (Use these 10 Tips To Make Your Resume Shine!

Time needed: 2-3h

Out of all the resumes that the employers receive only the first 10-20 resumes are read line by line while on the rest, recruiters only glance through the education, experience and certifications columns. This is why you must create an optimal CV.

3. Create a LinkedIN Account.

Time needed: 10m

LinkedIN is still the number one place to receive a job offer. Create your account as professionally as possible and make sure you add all the information from your CV like your experience, trainings, certifications.

4. Optimise Your LinkedIN Profile for Certifications.

Time needed: 30m

LinkedIN, like Google, has its own search engine. After typing any keyword, like CCNA or MCSA some people appear on the first place and some on the last. Why? The keywords are the key! Use your highest certifications and experiences as your key words. Recruiters doing a research start with the first page, so make sure you are there!

5. Connect with recruiters and HR people.

Time needed: 30m

This is indeed important because when you connect to a person there is a chance that they will look you up whenever they have a job offer that fits you. Secondly, keyword optimisation on LinkedIN works even more effectively when the researcher is directly connected to the person's profile.
Search the recruiters with your certification, for example recruiter ccie. Then connect with those people and write two-three sentences about you.

6. Become a member of LinkedIN groups.

Time needed: 30m

Join groups on LinkedIN. You can belong to 50 groups and use this privilege. Find groups connected with your certifications and your skills. You can find tons of job offers. Try also to answer some questions and create some interesting topics to become more visible.

7. Login to Branchout.

Time needed: 15m

It’s a quite new career network on Facebook. You can find more and more recruiters here. So complete your profile, add information about your experience and certifications. You should also connect with some recruiters via Branchout.

8. Login to Telent.me

Time needed - 15m

Talent.me is also a career networking site. Just create a profile and update information about your certifications. In your free time, connect with recruiters and other professionals.

9. Follow recruiters.

Time needed: 10-30m

Use Twitter to follow recruiters. A lot of them tweet new job offers on Twitter. Make a connection with them, retweet their job offers to your friend. Make sure they know about you.

10. Upload Your CV everywhere with ResumeRabbit.

Time needed: 15m

You can upload your CV to all job portals, but it’s an easier way. Use ResumeRabbit. It will post your resume to 85 job portals and you do not need to think about updating each site. Just send once and forget.

11. Use Topsy.

Time needed: 10m

Topsy is an amazing tool to search all Social Media networks. Just type any keyword (ccie job, hire MCSA, CWNA, etc.) to search Twitter for new job offers. You can also create an alert or RSS filter. When someone types your keyword on twitter, you will receive a message about it.

12. Become a Professional on 1st page in Google.

Time needed: 1h

If a recruiter already has your CV, he might then search for you on Google to find something more about you. So make sure that Google provides only professional information about you on the first page of search results. Just move to the Incognito Mode in your browser and type your name in the search box. And if you are finding something inappropriate about yourself on the first page, don’t worry, You can change that. Create pages which are more respectable in the Google search engine like create a page on About.me, create a Quora account, and make sure your LinkedIN account is updated. You can also create your own page-resume.

13. Networking.

Time needed: Whole Life

This is probably the most important and time taking actions from all what we have mentioned here. Friends and colleagues are indeed the most important asset for you if you want to get hired at the right place. Think of an employer asking his friend if he knows any brilliant candidate for any particular opening. And your friend says, “Ofcourse, I know an amazing guy and he will be the best suited for this job.” Now you do not need to worry about the requirement process.

So take your time and connect with other professionals, let them know about job offers your know, share your knowledge with them. Go to each conference and connect with people. Maybe someday one of them will tell you about your new dream job.