Contact us

Comments

Post a Comment

Popular posts from this blog

Session Hijacking using XSS

Image
Session Hijacking Session hijacking can be defined as impersonating and sending a request as a user other than yourself. In layman's language, it is similar to plane hijacking, where a terrorist takes control of the plane except that here the hacker takes control of the session. It can be done in many ways, the most common being stealing the cookies of a user. Procedure 1) Find the website which is vulnerable to XSS. Let us assume that a site abc.com is vulnerable to XSS. 2) Assume that when a search (which is vulnerable to XSS) is performed on the website, parameters are passed in the url in the format http://abc.com/?s=hello 3) Now we need to save the cookies of the user. 4) Copy the code from my repository at  https://github.com/rohankalra97/Session-Hijacking/blob/master/stealer.php  and save it as stealer.php 5) Replace the 5th line with the url which you want the user to be finally redirected to. 6) Create an empty file with name log.txt . 7) Now pu...
Read more

SS7 Vulnerability Explained

Image
What is SS7? Signalling System No 7 (SS7)  is an international telephone signalling protocol which was developed in 1975 . SS7 is designed to operate in two modes: associated mode and quasi-associated mode. The diagram shows a basic  structure of the network. Customers are connected at End Office. It is directly connected to service switching point (SSP) which converts the dialed digits to signalling messages. Then the SS7 network routes the signals to its destination using  signal transfer point ( STP). The vulnerability Signalling System No 7 (SS7) vulnerability is found in the mobile network which allows hackers to read your text messages, listen to your calls or track your mobile location. It was first discovered in 2014 where some German researchers demonstrated the exploit. Many people think that it had been known to many government secret agencies but was not made public for security reasons.  “It’s like you secure the front door of the ho...
Read more

Kali Linux: VMWare or Dual Boot

Image
People usually ask me whether they should dual boot their system with Kali Linux or install it as a virtual machine. Everyone has their own opinion on it but if you ask me I say it depends . Virtual Machine If you are new to this field I will recommend you to boot it on a virtual machine. This is because it will allow you to share data between operating systems. Moreover you won't have to worry about frequent windows updates since they are known to sometimes corrupt the MBR. If you mess up with drivers/kernel in Kali booted in VMware you wont have much problem in re-installing it. That said, there are various other problems associated with it. You cannot use your GPU with it. It is required to crack hashes or is used in software where high computation power is required. Secondly, there may be some network issues with it. Dual Boot Now if you have some experience in using linux, you should prefer dual booting your laptop. There are some workarounds that you have to do if y...
Read more