Showing posts with label Hackers. Show all posts
Showing posts with label Hackers. Show all posts

Friday, October 23, 2015

#94 The Hacker Search Engine “Shodan” is the Scariest Search Engine on Internet

Launched in 2009, Shodan is more of a prying eye across the world through the IoT rather than just a simple search engine. John Matherly, its creator, named his project after the villainous computer in the video game System Shock. As at present, Shodan is living up to his name. Already designated as ‘world’s scariest search engine’, it is commonly called the hacker search engine.


Shodan shows you what Google doesn’t. Designed with an aim to link all the devices connected to the Internet, it took no time to become a play zone for hackers and experimenters. Shodan works by collecting and stacking HTTP addresses from various devices linked over the Internet across the world. The indexing is done on the basis such as country, OS and brand.

Shodan’s scanning power can be assumed from the fact that it can detect the traffic lights, security cameras, control systems for gas stations, power grids, and even nuclear power plants. Most of these public services use little measures for online security and once exposed to hackers or terrorist organizations, the results could be disastrous.

If you have installed Telnet enabled security cameras in your home for “security”, then you might want to put them away. Hackers can breach into your system if your IoT hub is exposed on the Internet using this hacker search engine. It won’t be easy, however, it is not impossible either.

There are a number of devices out there that still run on their default passwords or no passwords at all. Shodan crawls through the Internet for such accessible devices and you are shown 50 of those if you have an account on Shodan. If you could give the website the reason to check these devices with their fees, you would get information of all the devices.

Though, even if you can,  we highly recommend you to not misuse Shodan, the hacker search engine.

#83 Meet these five child hackers who could become top cyber security researchers

Meet these 5 child geniuses who could be the future of cybersecurity


The cyber security industry is hunting for new talent due to a severe shortfall of skilled professionals in this field and it seems the industry is already getting five child geniuses.

In this article we will see how these five child geniuses got recognition and why we feel they could be the future of cybersecurity industry, provided they too choose to pursue a career in this field and choose to be on the side of white hats rather than black!

Reuben Paul: Ethical hacker and a CEO of Prudent Games 


Reuben, Paul, is a nine year old boy who is just a third grader and studies in Harmony School of Science located in Austin, Texas.

At the age of nine, most of the kids would be busy playing with their toy cars or may be involved in playing some video games. However, Reuben has already established himself as an ethical hacker.

Last year during a B-Sides security conference, Reuben took to the stage to promote safer smartphone security. He demonstrated how within a matter of few minutes hackers can easily steal all the important data from your Android smartphone including contact details, call logs and messages.

During his speech, Reuben emphasized the importance of being careful whenever one downloads the apps on their device. He also showed that the seemingly safe software tool can be potentially dangerous if it has been infected with malware and it can help cybercrooks to snoop on the user’s location and also get access to sensitive data.

While speaking to Fox News, Reuben had said: “If a child can do it, then a regular hacker can do it… so I just want everybody to be aware [and to] be more careful when you download games and stuff like that.” 

iDigitalTimes quotes: “9 Year Old Reuben, Paul is kid by day and cyber security researcher by night, hoping to make the world a safer place, one app at a time.” Reuben is also CEO of Prudent Games at this young age. Prudent Games basically designs educational apps that teaches people about the security threats.

Betsy Davies: Hacked public Wi-Fi network in less than 11 minutes


Betsy Davies, a seven year old British girl was able to hack the public Wi-Fi network following a short video tutorial.

Earlier this year, when a seven year old primary kid showed the danger of public WI-Fi hotspots, it caused a storm in the world of cybersecurity industry.

VPN Provider ‘Hide My Ass’ carried out an experiment as a part of public awareness campaign to show how easy it is to break into the public network.

Under the guided experiment carried out by Channel 5 News and Virtual Private Network (VPN) provider Hidemyass.com, Betsy was provided with a laptop, a short online tutorial and a volunteering member who was willing to be hacked in an environment which resembled to that which is found in almost 270,000 public hotspots in United Kingdom.

Surprisingly, Betsy was able to hack the open Wi-Fi and steal the traffic of the volunteer in just 10 minutes and 54 seconds. Betsy managed this by setting up a Rogue Access Point, which is normally used by hackers to carry out the “Man in the Middle” (MiTM) attack on the overly trusting web surfers to sniff web traffic.

Kristoffer Von Hassel: Exposed the Xbox password flaw at the age of 5 


Kristoffer Von Hassel, a five year old boy exposed the Xbox password flaw for which he has been officially added to the list of Microsoft’s recognized security researchers.

We can expect a five year old kid to play the Microsoft Xbox Game as well as know the operating system. However, just imagine if a five year kid starts finding a security vulnerability in the system? It just seems impossible; however, little Kristoffer Von Hassel discovered a back door into one of the most popular gaming systems and that is the Xbox Game.

Last year, Kristoffer Von Hassel was in the spotlight for this achievement.

We had reported that this five year old did not steal passwords. Instead, when he entered a password in his dad’s Xbox gaming system for the first time it went wrong and he was directed to a password verification screen where he used to just tap the space bar a few times and then press enter and surprisingly he was able to enter into the Xbox Live account of his dad.

The young kid was able to play games in which he was not supposed to play on the Xbox Game and in addition he was even able to access the YouTube.

Kristoffer’s parents discovered this and were completely surprised. His dad, Robert Davies, a security engineer at San Diego-based ServiceNow, an enterprise IT cloud services company, then reported the flaw to Microsoft.

Microsoft instantly fixed the bug and also rewarded Kristoffer with $50, four games and in addition also gave him a year-long subscription to Xbox Live from Microsoft.

Microsoft has included Kristoffer’s name in the list of recognized security researchers and Kristoffer now has his own Wikipedia page.

Some people feel that a young kid, a mere 5 years old, cannot do all this alone. However, Davies says that Kristoffer had already mastered a number of other tech skills. Davies recalls that at the age of one, Kristoffer has been able to bypass the toddler lock screen on a smartphone just by holding down the home key!

Unnamed Canadian: At the age of 12, this boy was able to attack government websites and cause them lot of damage

Way back in 2012, an unnamed Canadian who has been then just 12 years old and a fifth grader launched a series of Denial-of-Service (DoS), spoofing and even defacement attacks against the Canadian government websites in support of the Quebec student protests. It seems the young protester even passed the data which was stolen from the government websites to the Anonymous group in exchange for video games.

The young hacker was from Montreal and also pleaded guilty for being responsible for the shutdown of a number of government sites, including the Quebec Institute of Public Health and the Chilean government.

It seems due to the attack some government sites had to be closed for as long as long two days.

According to the local authorities, the child had been hacking since the age of nine and has already caused a damage of about $60,000 to the government.

Definitely, this kid might pursue a career in the cybersecurity industry, however, would it be under the black hats or white hats, is a big question.

CyFi: Exposed the zero day flaw in games on iOS and Android devices 

In January 2011, a 10 year old security researcher, who goes by the pseudonym ‘CyFi’, was in news for exposing a zero day exploit in games on iOS and Android devices.


This young Californian school girl first discovered the flaw when “she started to get bored” with the pace of farm style games.

The first DefCon Kids at DefCon 19 was held in August 2011, where CyFi presented her findings on the zero day flaw in the games on the iOS and Android devices which was confirmed to be of a new class of vulnerability by experts.

While speaking to CNET, CyFi said:”It was hard to make progress in the game, because it took so long for things to grow. So I thought, ‘Why don’t I just change the time?'”

Most of the game in which CyFi discovered the flaw have time dependent factors. For instance, in the case of farm style games, planting corn might take 10 real-time hours to mature in the game. However, manually advancing the phone or tablet’s clock forced the game further ahead than it really was, opening up the exploit.

CyFi further also added that many games have check points which detect and block this manipulation, but it seems there are still ways around to jump these check points. CyFi also mentions the ways which can help, such as disconnecting the phone from WI-Fi and making additional adjustments in the clock.

CyFi's real identity is being protected. She was already a Girl Scout and a state ranked downhill skier. In addition, the little girl was already an artist who gave a spontaneous 10 minute speech in front of a thousand people at the San Francisco Museum of Modern Art.

Wednesday, March 4, 2015

#31 How to Become a Teen Hacker

Hello,
Friend's today I am going to show you how to became a teen hacker.
What exactly is a real hacker, and how do I become one?



Read following steps:


Step 1:

Be a teen. That is the essential part of being a "Teen Hacker."  




Step 2:

Learn the different types of hackers. 

  • Type A (rookie hacker): This type of hacker is interested in new technology and hacks that others are preforming. What distinguishes these hackers from others is that they simply don't have the amount of computer expertise to preform many/any hacks. Every hacker starts out as a Type at A.
 
  • Type B (beginner): Has the know-how to solve basic/intermediate computer problems and write basic programs. If you are a Type B hacker, you will make numerous mistakes, some minor, some major.
 
  • Type C (intermediate hacker): Comfortable fiddling with hardware and software alike. Likes to build computers, root cell phones and tablets, and test all electronic devices to their limits. Most Type C, D, and E hackers have their own websites and networks.
 
  • Type D (expert hacker): King of all other hackers. Can hack almost any piece of software or hardware in almost every way imaginable. Becoming a Type D hacker takes a lot of practice and dedication.
 
  • Type E (Business hacker): Turns computer knowledge into cash. Type E hackers can do things for money, such as rooting devices, selling custom operating systems and programs, and fixing computer problems. These people are most often also Type C or D hackers.
 
  • Type F (illegal hacker): Called "crackers" by some, you do not want to be one of these.




Step 3:

Define "real." In the context of computers, real can be defined as someone who makes computers do things they do not currently do, or perfects things they do poorly.  



 
Step 4:
 
Limit your scope. Will you work primarily with Hardware or Software? Do not decide "both" because you will work with both no matter what. The decision determines where to start to focus. 
 
 
 
Step 5:
 
Learn how to use a computer. Learn every function, every component. This will teach you the arena in which you will work, and focus your attention.    
 
 
 
Step 6:
 
Read everything you can find. Learn what has been done, and how. This will teach you what can be done, and refine your focus. You might even find something that interests you.  
 
  • Duplicating what has been done before is a good first step in experimenting.
 
 
 
Step 7:
 
Begin to experiment with hardware and software to learn how to control a computer into directions you've never read about one going.
 
 
 
Step 8: 
 
Learn a high-level language of your choice. A high level language is a programming language that is high above the level of machine language (1s and 0s), and tend to use many more English words that we can comprehend. Programs are then converted by a compiler to machine code or a language that the computer can understand and work with. Some suggested languages to learn are C or C++, Java, or BASIC. Also, assembly for the x86 platform, and a scripting language such as Perl. Learning to script in Batch is very useful, as Batch language is very simple and gives you much control over Windows computers. 




Tips 

  • Question everything, especially what you know to be true.
 
  • Listen to others. Have friends. Have fun. Girls and boys can both be geeks.
 
  • Finding a helpful community can help you get started.
 
  • Remember the RFCs and keep them "Holy" (if you can get an RFC changed while you're a teenager, change it ruthlessly).
 
  • Do not do it for money. Greed stifles to create profit. Computer fraud gets you in jail!
 
  • Google, Linux, Firefox, Wikipedia, and wikiHow are perfect.

  • Learn everything. Try. You never will, but you should try.
 
  • Focus your attention. Try. If you stop having fun, you might not cut out to be a hacker.
 
  • Portable HDDs and mountains upon mountains of useful portable software are also your best friend.
 
  • Do not do it to "change the world." The world changes itself. You'd love to change the world, but they won't give you its source code.
 
 
 
Warnings
 
  • You might hack and crack someone else's computer. Watch out.
 
  • You can crack/ hack hotmail passwords (MSN). It has been done, but it is about the most difficult thing to do. Think about it. You're probably hacking into a system of the same people that made the system you are working with (but with Hotmail, they have a known security vulnerability.)
 

Wednesday, February 18, 2015

#4 Hacker News




Hackers rob $1 billion from 100 banks in massive online theft
Hackers use malware to infect computers of bank employees and surveillance systems to carry out their heist.


[UPDATE 04:13 pm]: Kaspersky has released its report on the bank hack and has revealed how to detect if a bank PC has been infected:
[ORIGINAL STORY]: In one of the largest reported hacking crimes ever, cyber criminals  from Russia, China and Europe have stolen approximately $1 billion from 100 banks and financial companies across 30 countries. According to a report from Kaspersky, the hackers started their heist in 2013 with the help of malware, and it’s still in process. Kaspersky has released an early copy of the report to the New York Times and is expected to issue it to the general public at its security summit which will begin tonight.


RELATED STORIESIntel Curie: The Brain for low-cost, low-power... Algerian hackers attack DRDO and five other... Russian hackers steal 1.2 billion passwords,... Pakistani hackers reportedly deface Rajasthan... Indian and Pakistani Hackers wage war online How to improve your Firefox browsing experience Carbanak, the hacking group as labeled by Kaspersky, sent malware through emails containing links and videos to bank employees, and infected the employees’ computers and the companies’ surveillance systems. Thereafter, the hackers recorded sensitive data from the company’s systems and used it to transfer money to their own fake accounts or to even make ATMs automatically dispense cash at a certain time so that they could collect it.


Even though the scope of the crime is huge and the concerned parties have been briefed about Kaspersky’s findings, no bank or financial institution has stepped forward and confirmed the theft. The affected banks and companies hail from the US, Japan, Germany, Russia, Ukraine, China, Canada and some other European countries. Indian banks are not expected to be on that list, but we’ll get a clearer idea tonight after Kaspersky publishes its report.

Nokia C1 renders leak ahead of launch, hints at 4GB RAM and dual rear cameras

Is Nokia working on its own AI assistant for smartphones? Nokia is planning its return to the smartphone industry with two new flagshi...