Deauthentication attack on a WiFi network & cracking its password.

Is it possible to crack a WPA/WPA2 secured WiFi password?
Yes! Until & unless you have a fairly strong password which is a combination of letters, numbers and special characters which will make it very very difficult to launch a dictionary attack against your password.
So is it really that simple to break into someone's WiFi network?
Not really, but a little knowledge about a few software can make it quite simple.

Lets have a look at the anatomy of the attack. There are a few steps to gain access to a WiFi network:
1. We need to put our WiFi adapter in monitor mode [ read more ] so that we can capture EVERY wifi packet around us.
2. Note the MAC ADDRESS of the target Access Point & the target machine using "airmon-ng" software.
3. Deauthenticate the target user from the Access Point ( WiFi Network )  it is connected to...using aireplay-ng.
4. The above step will force the user to reconnect to the AccessPoint and at that moment we will capture the WPA handshake [ read more ] using airodump-ng.
Do not be excited, as this WPA handshake is not human readable. We need to further crack it using aircrack-ng with the help of a dictionary or a text file containing many many combinations of passwords. And if the text file contains the passphrase ( the WiFi password ) it will show up on the screen.

*This is just for educational purpose and building your knowledge. I request you to NOT/NEVER use such technique to break into someone's WiFi network. 
Today you might be an attacker but someday you can be a victim as it is almost impossible to prevent deauthentication attack. 
So lets not misuse it.

Below I will show the attack in detail on How it is actually performed.

I am sorry if you are using Windows. It is always better to have Linux installed on your system to practice such kinds of attack. If you don't have Linux I would suggest you to download from the internet. It is always FREE.
If you are using Linux, most probably you will be having the necessary software already installed. ie: airmon-ng, airodump-ng, aireplay-ng, aircrack-ng.
If NOT, you can type the following command which should work:
On your terminal:
type: sudo apt-get install aircrack-ng
This command should install all the software we need for the attack.

First we will need to put our WiFi adapter in monitor mode.
Command:   airmon-ng start wlan0*   [ this commands tells the network adapter to run into monitor mode ]
Explanation: *wlan0 is the name of my WiFi adapter. Your WiFi adapter name may differ. [ Please check using the command "ifconfig"] .
After running this command you will have one more interface called mon0 in addition to wlan0. mon0 is the same interface as wlan0 but in monitor mode.

After putting our interface in monitor mode, we need to know the BSSID ( MAC address ) of the AccessPoint and also the MAC address of the target machine. We can find all this information by running the following:
Command: airodump-ng mon0 --write "fileName"    [ you can replace 'fileName' with whatever name you wish ]
Explanation: Running this command will show something like this:

..image here..


Also we have provided " --write " option to the airodump-ng command so that we can capture all the packets in  a ' .cap ' file.
*Note: We can provide --bssid "AccessPoint's MAC address" option to airodump command so that it will capture only packets belonging to specific AccessPoint.
eg: airodump-ng mon0 --bssid 00:AA:BB:22:CC:DD  --write newFile 
This command will capture network packets only belonging to the MAC Address provided ( AccessPoint ). 

Tip: How to find a WiFi Network's MAC address? 
        run the command sudo iwlist wlan0 scan
A list will be displayed from which you can get the target AccessPoint's MAC address.

moving on....

Now we are all set up. Network adapter is in monitor mode. Capturing the network packets belonging to the target AccessPoint.
Only thing remains is the last step: De authenticate the user connected to that AccessPoint.
To accomplish this, run the following:
Command: aireplay-ng --deauth 24 -a "AccessPoint's MAC Address" -c "Clients MAC Address" mon0 
Explanation: By mentioning --deauth 24  we tell aireplay to send 24 [ you can send as much packet you wish ]  spoofed deauthentication packets to the access point which we define by the option  -a followed by the AccessPoint's MAC address.  Which MAC address to spoof? That we mention by using the -c option followed by the victim's MAC address.
After running this command it will show something like this:

..image here..

By this we can be assured that the victim has been disconnected from the AccessPoint.
And when the victim tries to reconnect to the AccessPoint we would have captured the "WPA 4 way handshake" [ more on this here ]. After this you can press CNTRL+D ( interrupt )  airodump-ng as we have already captured the packet containing the passphrase.
Now that we have captured the WPA handshake [ which contains the passphrase ] its time to crack it using aircrack-ng.
Command: aircrack-ng newFile -w dictionary.txt 
Explanation: Running aircrack-ng mentioning the filename in which we have captured the network packets earlier. The -w command tells aircrack to use the passwords in the text file [ dictionary.txt ] to crack the passphrase. When it matches the passphrase it will show up on the screen like this:

..image here..

For testing purpose you can try to break into your own WiFi network by making a text file containing your own password along with some random names so that you understand how aircrack successfully cracks the passphrase.

Note: It is very difficult to simply break into any WiFi network out there. People have become very careful & cautious regarding their WiFi passwords. This attack is to demonstrate how simple it is to break in to a WiFi network which uses a poor WiFi password, for example simple dictionary words, name of person, name of places, celebrity names etc.

The Dark Web [ a small part of the DEEP WEB ]

How much knowledge do we have about the Internet/Web?

"" In the year 2000, Michael K. Bergman said how searching on the Internet can be compared to dragging a net across the surface of the ocean: a great deal may be caught in the net, but there is a wealth of information that is deep and therefore missed. Most of the web's information is buried far down on sites, and standard search engines do not find it. ""
Source: wikipedia

So today, I thought of having a glimpse of this unknown face of the Internet. It is very easy to visit these kind of websites. Only thing you need to have is TOR browser and enough caution. You really don't have any idea where you can land up. There is a term known as "onionland" which is referred to these websites/areas on the internet which forms the dark web.
These websites uses TOR network to make it "nearly impossible" to find the actual host. Also it becomes double secure as it needs a user to be using TOR network to get access to these websites. These websites have a different top level domain unlike the .com, .net, .org etc... They use  ' .onion ' and you see.. that is where the name "onionland" comes from.

So why do they need to hide from the world? There is only one answer to this question: because they are illegal. You must be wondering that there are already many illegal work going on the internet so why hide? Because you can not imagine the magnitude of the illegal services they provide.

From selling illegal drugs like LSD, DMT, cannabis, cocaine, heroine etc etc to the most sophisticated weapons.. you can find just everything that you can not get on your Google search.
That is what the dark web is about.
Fake  identity proof, fake passports, banking/financial services, hacked credit card numbers, hacked paypal/entropay/neteller/payoneer accounts, counterfeit currencies, foreign currency exchange, hacking services, pornography, escort services,  Hitmen services, military, supply of weapons, stolen items etc etc...

I was totally astonished after watching all this. Hitmen service? Really? WOW! I remember I had bought a game called Hitmen Codename 47 but I never even imagined of buying a real hitmen from the internet.
I wonder how all these even work. Because I would never spend a penny on these services.
I think there is a very less chances of all these websites being genuine. But there are people out there who monitor these websites about the quality of it to let other users know whether it is a scam or genuine. That is how they work...a little money & a leap of faith.

There is a LOT MORE than what I have written here.  But I guess I have given a brief idea about what dark web is all about.

Linux vs Windows

Which operating system do you prefer?
Linux or aWindows ?
Lets talk about both the operating systems.

I won't go very deep about their technical details because I myself don't have vast knowledge about both operating system.. :D

But I will always prefer Linux over Windows as long as I don't have to play Games. For games I use Windows, though now a days Linux is being supported to run even the high-end games..

If you are a Computer Science student and love programming ( even if you don't ) I suggest you to learn Linux. It is a wonderful operating system on which you have complete* control of the system.

*if you are a superuser/root

So why do most of the Computer geek love Linux?
First of all  IT IS COMPLETELY FREE. You can download the OS from a wide variety of Linux Distribution available online and install it on your computer. It does not require a very high end computer config. Linux will happily run even if it has a 1GB RAM, 25 GB Hard Disk, No Graphic Card...
It also depends upon your usage. Obviously you can not run a web server using such config. But yes, you can learn about Linux,  Terminal (command line), file system, Bash programming etc..
The best part of Linux is it always comes with all the basic software package installed. ie: almost all famous programming languages like C++, Python, Java, Perl, PHP etc and some services like Apache web server, MySQL, SSH and sometimes DNS servers like bind9...etc..

One feature about Linux that I loved the most is IF you are not root/superuser you can not change ANY configuration files, password etc... or lets say in simple words that if you are not root you can not edit any important files on the system. To edit system files you need to become root using the command "su - " or simply "su" which will then ask you to enter the password. After entering the correct password the prompt will change and you will come to know that you now possess root privilege.

*Be careful. root CAN DO/CHANGE/DELETE ANYTHING & the system won't even warn before changing even the most IMPORTANT configuration files of the system. Because root is root. :D

Because of this feature it becomes very hard to hack into a Linux system until & unless the malicious user gets to know your root password as Linux won't allow any user other than root to edit or delete system important files.
Also you don't have to worry much about viruses affecting your Linux system. There are hardly any Linux viruses out there as compared to Windows.


Linux Terminal: As the name seems, Terminal is considered as the heart of the Linux operating system. You can almost do ANYTHING from the Terminal. It is equivalent to Windows command prompt but is considerably more reliable and powerful than the Windows CMD.
In fact almost every user has a Terminal window open while running Linux as it is useful to do just anything on the Linux OS. Want to install chrome? firefox? programming languages? web services? move files, create folders, delete files.. etc etc.... everything can be done from the command line.
And all of this is possible because of a very powerful command line interpreter (CLI) called Bash (Bourne Again SHell). Bash is the most popular and widely used shell as compared to other shells like ksh, csh/tcsh.
It is itself a programming language. Imagine a programming language running on a command line? How powerful and useful it can be.
Linux is very vash. We can never have the complete knowledge of it. We can keep on learning new things every new day.
So if you really love computers, programming and want to know how a computer ACTUALLY works then search for a good Linux distro today itself, install it and start exploring. I assure you that your love towards computers will be doubled.

Talking about Windows..
Windows is a wonderful operating system. Very simple & elegant. Very good for users with less technical knowledge about computers. Loads very quick when freshly installed but gradually becomes a little slow while loading. At least for me it works this way.
I love Windows because it was the operating system that I used after getting my first desktop PC back in 1997. It can run any games, softwares ( exe files), movies, etc etc.. After all it was made for these  kind of uses. Unlike Linux which runs on super computers/web servers etc. I have hardly heard about any web server or super computer running Windows OS/Server.

Talking about its safety... To be honest after using Linux I am a bit scared to even touch those .exe  files. I have learnt what potential threat those exe file may contain.
There are billions of exe files all over the web/Internet waiting to be downloaded by a user which contains malware, adware, viruses, etc.
Because of this threat it has become a necessity to have a "good Antivirus" installed on your computer running Windows. There are 60-70% of computer users running Windows on their system which makes it the top & easy target of Hackers/Attackers.
Windows users are free to download & install any software from anywhere on the internet/websites which makes it a major security issue. Unlike Linux where there are very few chances of a software being affected by malware/virus as we almost all of the time download software package from its own advanced package tool ( apt ) which are mostly updated and checked by millions of "good users" which eventually makes it impossible to affect your OS.

Talking about basic programs/programming languages, Windows still does not come with any  programming language or any web server installed. Other important services like SSH, DNS, Databases are far out of question.

And to be honest I have never ever in my life used the command prompt of Windows other than these commands:  getmac ( know your PC's MAC address), ipconfig ( know your Internet Protocol settings)
Because it is not even close to the word "powerful" as compared to Linux's Bash Terminal.
In fact I can write a whole new post of hundred pages on Linux Bash Terminal but can not do the same for the Windows CMD prompt, thought I agree it is capable of doing many system related task. But still never that good.

As far as running games, developing/editing movies/images are concerned I think Windows still remain the *best choice* for doing all these kind of work.

PS: best choice against Linux. Because there is always an Apple iMAC to develop/edit images/videos far better than Windows. :P

TOR - The Onion Router | Browse anonymously

Ever wanted to browse the internet without anyone tracking you? or Did you ever thought if there can be something which will allow you to browse websites which your ISP is not allowing you to visit or... the websites which your government has blocked permanently or wanted to post something very  very bad on some website but afraid of being tracked?
Whatever the reason is, there is something which allows you to do JUST WHAT YOU WANT, browse ANONYMOUSLY.
No! This is not some cheap software for 29$/yearly....etc..etc...
This is "The Onion Router" short for TOR.
It is totally free to use and at the same time help other users like you to browse internet with privacy.
Also there are many private and hidden services running on the internet using such type of network .  That part of the web is known as "dark web". As the name seems this area of the web works in the dark, which means one can not simply search for them on search engines neither are they indexed on search engines. They have different domains unlike the .com, .net, etc... Some have good purpose while others are illegal.

For more details on dark web visit dark web


You can download TOR for windows from their website  TOR.
or if you are using Linux you can download from TOR for Linux.

More on TOR: more details
Setting up TOR as a exit/non-exit relay: click here [ for advanced users ]

Retrieving data from corrupt WindowsOS

Has it ever happened that your Windows OperatingSystem somehow managed to crash because of Virus, Malware etc..etc.., you are not able to load the operating system and you are worried about the important data you might lose? It would be very pleasing for you to hear that "your" data in the hard disk is always safe UNLESS your hard disk has got corrupted. Thus it is always useful to keep a bootable USB drive containing the Windows OS or Linux Live OS.

It is more handy to have a Bootable Linux USB. It can help you to get your data even if you are not able to load WindowsOS completely.

Every Linux distribution that you download also has a Live format. You simply have to download the .ISO image file  of a Linux that you like and make a bootable USB/CD/DVD using a software like RUFUS (Windows), UNetbootin (Linux/Windows/MacOS).

Live Linux helps you load the Linux operating system directly without installation. Later you have an option on the diesktop to Install Linux on your hard disk.

Linux Mint is most widely & famous Linux distribution used all over the world. Also it is very simple for beginners.
You can download it for free from their site below:

https://www.linuxmint.com/download.php

 Also it can help you repair your file system to a certain extent if it has any bad sector. You can run fsck (files system consistency check) command in Linux terminal by typing:
fsck /dev/sdaX
to run a consistency check of your hard disk.
(sda X is the name/label for your hard disk. Usually it is name sda or sda1)

Link to download RUFUS: https://rufus.akeo.ie/

Link to download UNebootin: https://unetbootin.github.io/

nmap [ network mapper ] - A powerful network mapping n scanning software.

Nmap is a powerful network scanner which allows you to discover host, their operating system, scan their ports and many more tasks on a network. The software was originally written by Gordon Lyon (also known by his pseudonym Fyodor Vaskovich) used to discover hosts and services on a computer network. It is generally used as  a command line interface [ CLI ] but also support graphic user interface [ GUI ]. But mostly people would love to use it as a command line interface rather than using the GUI. It is a very powerful tool which you will surely feel while using it. So what are you waiting for ? Go visit Fyodor's website where there are detailed information and guides on how to use the nmap scanner. You can also download the software through the website.   

For downloads: http://nmap.org/download.html

Do use the software with care.  -_-

How to get the old facebook chat.

Many of you must not be liking the new facebook chat that they have introduced recently. So if you would like to switch to the old facebook chat you can do that easily by following these easy steps:

Firefox users: Just visit this Firefox add-on page and click on the button which says "Add to firefox". After downloading the add-on you must be able to use the old facebook chat. Most probably you won't need to restart firefox for the changes to take effect. You are done with it.

Chrome users: Chrome users need to download this app and you just need to refresh the facebook website and you will get the old facebook chat.

Opera users: Download this app and you will get the old facebook chat.

Important: Sometimes the facebook chat will be showing 0 Friends online even if there are friends online so you just need to go offline once and come back online and it will show the online friends once again.

Facebook tip: Some of you guys must be having many such friends to whom you would not like to chat

or whatever. So you can make a friend list so that you will be seen online to only those people you choose. This can be done by making friend list. When you click on chat window you can see the friend lists option on the top left. Click on it and type whatever name you would like to keep and hit enter. A small button will appear right next to the name you mentioned and even when you hover your mouse on your friend list name an edit button will appear on the right side of the name which will let you add friends to whom you wish to be seen online. The button will appear green which means you are online and grey means you are offline.

Hope it helped you.

Creating an invisible folder..

Have you ever wanted to hide any folder on your PC from your dad, brother or your friends ? You can do that without using any software. Yes, you heard it right! But I can not say that it is a foolproof idea. But if you are careful, no one will be able to see your folder. It is always a good idea to hide such things in this folder that even if you get caught the consequences are not bad enough.

So follow the below steps to make your folder invisible:

1. Rename the folder by pressing the ALT key and 0160 using  Num Pad. ie: "ALT + 0160" You actually don't have to press the + sign in Num pad. Just press and hold down the ALT key and type 0160 using Num pad, thats it. After this press enter and  you will be able to see an empty space there that means you are half done.

2. Now that we have renamed the folder as an empty space we will now have to change the folder icon to something that could not be seen.

• Right click folder

• Go to properties

• Select the Customize tab and then press the Change Icon button that is seen at the lower left corner.

• Look out for an empty space and select it and then press OK.

• Done. Your folder is now invisible.

 Note: If you press "ALT+A" which is a shortcut to SELECT ALL then even the invisble folder gets selected and the folder can be seen clearly.

--> Below is an images to guide you through the whole process easily.

You must be a bit confused by watching 3 folder with a same name ie: "Something"

Even you can create folder with same name by using   "ALT + 0160"

The three folder with the same name in the image above are actually not the same name.

 Folder 1: Something 

 Folder 2: SomethingALT0160

 Folder 3: SomethingALT0160ALT0160

Hope you understand what I am trying to explain above.. Try it..  :)

Good luck.

Setting up Microsoft Outlook with your e-mail Account. ( here we use Gmail for example. )

I assume that you might be having some basic knowledge about E-mail clients, eg: Microsoft Outlook, Mozilla Thunderbird etc. *But here I will only be guiding you on how to setup Microsoft Outlook( 2003 ). By doing some simple settings in your E-mail clients mentioned above you are able to sync your e-mail account with your E-mail client. Suppose for example you sync your Gmail account with Microsoft Outlook then you will be able to view and read your mails even when you are offline. Its great, isn't it? OK. Lets start so that we are able to view our e-mails of our Gmail account in Microsoft Outlook. Below is a step by step guide which will help you to setup the whole thing. I hope you have already installed Microsoft Outlook 2003. Open Microsoft Outlook 2003.  A small window appears ( as shown below ). *Keep on clicking on the images 1 by 1 for further steps.

(1) First you need to configure your gmail account, its easy follow the steps shown in the Picture below. (*click on image.)

(2) After configuring Gmail open Microsoft Outlook 2003. And follow the steps below..

After doing this click OK. And you are almost done.

It will take a while to download your mails from your gmail account to your PC. And there you go, you have just setup your Microsoft Outlook 2003 to receive your google mails to your PC, you can read your e-mails even when you are offline.. Enjoy!

Phishing [ security ].

Phishing: In the field of computer security, phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords, credit card numbers etc.

Example: Suppose you need to visit a website called www.examplee.com. So here an attacker may make a spoof of that website. ie: the whole website may look the same, but he can record the details like username and passwords which you will be using to sign in to the website.  An attacker may own a website called www.example.com which looks similar like the first mentioned. Suppose  a user happen to mistypes the website address he will become a victim of website phishing. He might think he is in a proper website but he is not. And the sensitive data he will enter may be recorded by the attacker.

For a more detailed information on Phishing please visit » Wikipedia.