Hack the WORLD|Stuff for Educational Purpose only

How? It downloads the most important extensions, and install it on your browser. The used extensions has been chosen by a survey among the information security community. Based on it's results,  Firefox Security Toolkit  was made. Also, it allows you to download Burp Suite certificate and a large user-agent list for User-Agent Switcher. Making it one-click away to prepare your web-application testing browser. How does it differs from well-known projects, such as  OWASP Mantra and  Hcon STF  ? OWASP Mantra  and  Hcon STF  are not regularly updated, and needs a lot of work in order to develop and maintain. Meanwhile,  Firefox Security Toolkit  does not need a additional maintaining, although I would be maintaining it for any issues/bugs if needed. The used extensions are downloaded from Mozilla Addons Store with its latest version, to ensure the best testing experience for the penetration tester. Who can use  Firefox Security Toolkit...

For Web App Pentesting /Hacking HTML Hypertext Markup Language (HTML) is the basics for creating web pages and other information that can be displayed in a web browser. So if you don’t know HTML you should first learn it JAVAScript Learning java script. Will help you understand the basics of Cross Site Scripting PHP/SQL Majority of web applications are written using PHP and MySQL .So it is a must to learn PHP For Writing / Understanding Exploits, Shell Codes, Root kits etc C & C++ More than 60 % of the exploits you will find on the web are written in C & C ++, Learning C & C++ will help you understand about Buffer overflows, Stack overflow etc, So learning C and C ++ is must for every hacker/Pen tester Assembly Learning assembly will help you in Writing/understanding Shell codes , Will Help you in Reverse Engineering applications and software’s For Building Tools And Scripts Python Python is a very powerful high level la...

How to open TCP/UDP sockets using a built-in feature in Bash ? Bash shell has a built-in feature that allows to open TCP/UDP sockets using a simple syntax. This is very useful when tools like netcat are not installed or we don’t have the permission to use it. The syntax is $ exec {file-descriptor}<>/dev/{protocol}/{host}/{port} {file-descriptor}  – 0, 1 and 2 are seserved for stdin, stout and stderr respectively. At least 3 must be used. The Bash manual suggest to be careful in using descriptors above 9 since there could be conflict with descriptors used internally by the shell. <>  – the file is open for both reading and writing {protocol}  – TCP or UDP {host}  – ip address or domain name of the host {port}  – logic port Sockets can be closed using $ exec {file-descriptor}<>&- To send a message through the socket echo -e -n "$MSG_OUT" >&3 or printf "$MSG_OUT" >&3 To read a message from the socket read -r -u -n $MSG_IN <...

What is Cuckoo Sandbox? In three words, Cuckoo Sandbox is a malware analysis system. What does that mean? It simply means that you can throw any suspicious file at it and in a matter of seconds Cuckoo will provide you back some detailed results outlining what such file did when executed inside an isolated environment. CuckooAutoInstall was created to avoid wasting time installing Cuckoo Sandbox in  Debian Stable . Usage  Execute the script:  sh cuckooautoinstall.sh Add a password for the user  'cuckoo'  created by the script. Use:  passwd cuckoo  command. Create the virtual machines  http://docs.cuckoosandbox.org/en/latest/installation/guest/  or import virtual machines using  VBoxManage import virtual_machine.ova Add to the virtual machines with HostOnly option using vboxnet0:  vboxmanage modifyvm “virtual_machine" --hostonlyadapter1 vboxnet0  (use this command to list the VMs:  VBoxManage list vms ) Configure cuckoo...