Download Metasploit: The Penetration Tester's Guide 1st Edition Ebook

Metasploit: The Penetration Tester's Guide 1st Edition Ebook(6.9 MB only) 

Description:

    "The best guide to the Metasploit Framework."—HD Moore, Founder of the Metasploit Project

The Metasploit Framework makes discovering, exploiting, and sharing vulnerabilities quick and relatively painless. But while Metasploit is used by security professionals everywhere, the tool can be hard to grasp for first-time users. Metasploit: The Penetration Tester's Guide fills this gap by teaching you how to harness the Framework and interact with the vibrant community of Metasploit contributors.

Once you've built your foundation for penetration testing, you'll learn the Framework's conventions, interfaces, and module system as you launch simulated attacks. You'll move on to advanced penetration testing techniques, including network reconnaissance and enumeration, client-side attacks, wireless attacks, and targeted social-engineering attacks.

Learn how to:

    Find and exploit unmaintained, misconfigured, and unpatched systems

    Perform reconnaissance and find valuable information about your target

    Bypass anti-virus technologies and circumvent security controls

    Integrate Nmap, NeXpose, and Nessus with Metasploit to automate discovery

    Use the Meterpreter shell to launch further attacks from inside the network

    Harness standalone Metasploit utilities, third-party tools, and plug-ins

    Learn how to write your own Meterpreter post exploitation modules and scripts

You'll even touch on exploit discovery for zero-day research, write a fuzzer, port existing exploits into the Framework, and learn how to cover your tracks. Whether your goal is to secure your own networks or to put someone else's to the test, Metasploit: The Penetration Tester's Guide will take you there and beyond.

Download From Here(mediafire.com)

-- A Black Hack: post

What is a MAC Address?

How do I find a MAC address of network device?

MAC, Media Access Control, address is a globally unique identifier assigned to network devices, and therefore it is often referred to as hardware or physical address. MAC addresses are 6byte (48bits) in length, and are written in MM:MM:MM:SS:SS:SS format. The first 3bytes are ID number of the manufacturer, which is assigned by an Internet standards body. The second 3bytes are serial number assigned by the manufacturer.
MAC layer represents layer 2 of the TCP/IP (adopted from OSI Reference Model), where IP represents layer 3. MAC address can be thought of as supporting hardware implementation whereas IP address supports software . MAC addresses are permanently burned into hardware by hardware manufacturer, but IP addresses are assigned to the network devices by a network administrator. DHCP relies on MAC address to assign IP addresses to network devices.

How do I find a MAC address of network device?

Operating Systems support various commandline and GUI utilities to allow users to find MAC address of the system. On Unix variants including Solaris and Linux support "ifconfig a", "ip link list" or "ip address show" command that displays MAC address of the network device among other useful information. Windows including NT, 2000, XP and 2003 support "ipconfig /all" command that displays MAC address. On a MacOS, one can find MAC address by opening "System Preferences", then selecting "Network".

BIG COLLECTION OF HACKING TOOLS PART-1 [HaCK-PaCK]

I made a collection of some of the hacking tools for you. This pack include following tools in it.

DDoser
Fake Programer
DFP_2.0
HC MSN chatlog stealer
Random tutorials
1337 v1.0
Binders
Commandline Gmailer
Downloader
Email Bomber
FF Pass Stealer
A+ Binders
AES Crypters
Alarm Clock
Antis
Background Worker and Progress bar
Batch virus generator -Source Only
Binder Example
Bomb them Email Bomber
Brute Forcers (need Work)
Builders 101
Chat Spammers
Check Internet
Computer Information
Cyber Spammers
Dark Downloader
Deface Page Generator
Droping a Resource
Easy screen Capture
Email sending
Email Smoker
Embedded Sound
Enable Disable Windows Firewall
Encrypt a text file with RC4
Error Creater
Fake ERror
File Clonner
Filler up 2.5


Download Here

PASSWORD: HACKERINSIDE

How to Hack Android Games – No Root Required

Most of the Android Games are very much addictive and tough to play. Sometimes you may get frustration, if you have unable to cross the level in a game. How will you feel if you are able to play any game by hacking the game by yourself? Yes, you can hack android games easily for unlimited score and points. You yourself can create a modded apk file with your own score and coins or something else. Also you can hack android games in such a way that removes annoying Google Ads. Is this happens in unrooted android devices ? Yes, what I mentioned above, works for unrooted Android devices also. Means you can hack android games with no root required. Let’s begin the small tricky hacking tutorial and get ready to learn to hack android games ( No Root Required for Devices ).

All we do is, we make use of an app which does all things with simple clicks. Lucky Patcher is the app which is used here to hack android games without rooting Android device/Mobile. Make sure, You have Lucky patcher app  installed on your Android device.

About Lucky Patcher App

What Lucky Patcher does is, Lucky Patcher is the application which bypasses in app purchases in an android game. In the sense, you no need to pay real money for buying coins and money in an android game. In this way, you can get coins for free in a game.

Here is a step by step tutorial, to hack android games ( NO ROOT ) using Lucky Patcher. Follow these steps carefully as mentioned.

Steps to Hack Android Games with No Root using Lucky Patcher

   1. First download and install Lucky Patcher on your Android Mobile/device.
   2. After installing open the application.
   3. You will find all available apps and games on your device.

   4.  Select the game which contains in app purchases. Click on the Game to get in app purchases for free.
   5. Tap on “Open menu of patches”.

    6. Select “Create modified APK file “

    7. Now finally tap on “APK rebuilded for InApp and LVL emulation.

    8. Wait for few seconds to complete the process and to rebuild the app.
    9.  Now uninstall the hacked game completely.
    10. Now open file manager and navigate to SD Card>Android>data>com.forpda.lp>files>lucky patcher>modified>required game.
    11. Find your modded game.
    12. Install and enjoy the game.

Note : This trick may not work for some games, but works for many top games like hill climb racing, temple run, subway surfers and some other games.

Download Lucky Patcher

-- A Black Hack: post

24 Great E-Books On Ethical Hacking (Download Free)

Are you an aspiring hacker who wants to get as much info on hacking from online free ebooks as possible but doesn’t know where to get them? We bring you a list of 24 great e-books on hacking with  links for their free downloads. Happy reading!


1. Black Book of Viruses and Hacking : In print for over five years, the book opens a door to answering questions on whether or not it is better to make technical information about computer viruses known or not.

2. The Beginner’s Guide To Hacking Computers Systems : This is a great book for guiding beginners through the basic and advanced steps of hacking. It helps develop user knowledge on various types of  hacking including windows, Linux installation & use, Linux hacking, virus programming, malware programming and Trojan programming among other things.

3. Penentration Testing With Backtrack : The book has been written in Packt's Beginner's Guide format and helps the reader gain knowledge of concepts and understand the techniques to perform wireless attacks in your lab.

4. Hacker’s High School : This book is used by over a quarter of a million students every year and is a straightforward, inexpensive quick reference, with content flexible enough to suit the needs of writers in the humanities, social sciences, sciences, health professions, business, fine arts, education, and beyond.

5. Black Belt Hackers And Complete Hacking : The book addresses the fundamental question of what is ethical hacking in its most elementary form and is a great reference book for beginners.

6. Secrets Of Super And Professional Hackers : The book covers hacking scenarios ranging from the merely mischievous to the criminal, the super hacker known as the Knightmare gives step-by-step instructions in meaningful hacking from a personal computer.

7. Dangerous Google Hacking Database and Attacks: The book takes a look into several case studies on dangerous attacks that have been carried out in the past and how these could have been prevented.

8. Internet Advanced Denial of Service (DDOS) Attack : This book sheds light on the complex form of computer attack that impacts the confidentiality, integrity, and availability of millions of  computers worldwide.

9. Computer Hacking & Malware Attacks for Dummies: This is a book on preventive techniques and examines some great security measures which are present across the world. The great thing is that it has been updated to cover the latest hacks for Windows 7 and the newest version of Linux.

10. G-mail Advance Hacking Guides and Tutorials : Another great book on preventive techniques, the book is a lesson on how to secure Gmail, the world’s most used emailing service.

11. Vulnerability Exploit & website Hacking for Dummies : The book has some brilliant insights into Metasploit, and its commercial equivalent CORE IMPACT. It provides the ultimate ethical hacker's pot of gold — a screenshot of a critical server's command prompt.

12. Web App Hacking (Hackers Handbook): This is a highly successful book and now comes with great insights into web applications, which are now the front door to most organizations, exposing them to  attacks that may disclose personal information, execute fraudulent transactions, or compromise  ordinary users.

13. Security Crypting Networks and Hacking: Now in its second edition, the book offers 125 concise and practical hacks, including more information for Windows administrators, hacks for wireless networking.

14. Botnets: The Killer Web Application Hacking: The book is based on real world cases of botnet attacks to underscore the need for action and used public domain tools like OurMon.

15. Hacking Attacks and Examples Test: The book is a step by step on how-to drilldowns for installing and configuring your Tiger Box operating systems, installations, and configurations for some of the most popular auditing software suites.

16. Gray Hat Hacking and Complete Guide to Hacking: This is an insight into thwarting malicious network intrusion by using cutting-edge techniques for finding and fixing security flaws.

17. Advance Hacking Exposed Tutorials: This book works brilliantly for those looking to finding out about how a fail-safe system was cracked and how one can better protect oneself.

18. 501 Website Hacking Secrets: "This book concisely identifies the types of attacks which are faced daily by Web 2.0 sites, and the authors give solid, practical advice on how to identify and mitigate these threats." --Max Kelly, CISSP, CIPP, CFCE, Senior Director of Security, Facebook. One needn’t say more.

19. Internet Security Technology and Hacking: The book addresses questions on whether hacking attacks are morally justified? Hacking, Counterhacking, and Society is a valuable addition to the library of anyone concerned with the growing number of Internet security issues and intrusions facing society today.

20. CEH Certified Ethical Hacker Study Guide: The books lets you prepare for the challenging CEH Certified Ethical Hackers exam and provides a full coverage of exam topics, real-world examples, and includes a CD with chapter review questions, two full-length practice exams, electronic flashcards and a glossary of key terms.

21. Advanced SQL Injection Hacking and Guide: The book ensures that IT professionals apply security principles in the context of their daily job scope

22. Web Hacking & Penetration Testing: The books serves as an introduction to the steps required to
complete a penetration test or perform an ethical hack.

23. OWASP Hacking Tutorials and Web App Protection: The book gives detailing on the different tools for exploitation, about metasploit and armitage.

24. CEH - Hacking Database Secrets and Exploit: This book gets into the latest edition gets into current threats and details the new menace of APT (advanced persistent threats), embedded hacking, database hacking, and significant coverage of mobile devices.

-- A Black Hack: Post

How To Use Google As A Proxy

We often use schools and colleges internet connections, but they usually block access to undesired web sites (the "black list"). In order to access those sites you can do is use google translate as  proxy to bypass this restrictions. So lets get into it.

Method 1

1. Visit whatismyipaddress and note down you real Ip Address
2. Now Go to Google Translate
3. From Under Detect Language, Chose your language in my case English
4. Now type http://whatismyipaddress.com/  in text area and click on translate
5. Now check your Ip Address, Its different from the real one.

Method 2

1. Go to link given below:
http://www.google.com/translate?langpair=es|en&u=blackohack.blogspot.com
2. Change blackohack.blogspot.com to website you like to visit.
3. Done!

--A Black Hack: Post

How hack LAN in Cyber Cafe

Friends i am very much interested in hacking.
Well its soo easy trick to hack system.
I am providing you steps to hack others system:

1)Click on Start.
2)Go to all programs>accessories.
3)Right click on command promt and then click properties.
4)Click on Find target.
5)Now you entered in system 32.
6)Now search this file "ddeshare" without quotes.
7)Double click on Ddeshare.
8)Now go to shares and then click "trusted shares".
9)You will be seeing many terminals (computers)connected to lan.
10)Just double click on any of the system you want to hack.
This is you can hack others system which is connected to lan..
I dont know whether this tricks works in your college or not.
Why because few colleges will be using high security alerts.

Well i can successfully hack others system.
Hopefully i found few information about hacking lan.
First of all we have to hack system administration password.
This can be done only by braking (PDC)Primary domain controller.
PDC can be brake only when we are able to hack First system. And then take sam db to break administration password.
Better to use tool from your system that enables you to use IPC connections to send executable files.
Here i am giving you trick to hack admin password:

first of all you have to scan the range for open 139, 445,3389,6129..
139,145 -->ipc hacking...
3389 --->remote desktop connetion(Best way for hacking :) )
6129 ----->It means that there is ranning dameware server.......

We can also hack admin password by using telnet hacking.

This trick is good enough for cracking administration password...

--A Balck Hack: post

10 most notorious hacker groups to have ever touched a keyboard

Yes, a 'hacker' is a person who has extraordinary knowledge of computers and is skilled at exploiting weaknesses in computer networks. Yes, it is not the perfect definition, but the basic idea is, the 'term' hacker doesn't automatically mean criminal. While some are activists (hacktivists), others are ethical. Then there are those who do use their skills for criminal activities. In any case, one thing that is certain is that a hacker is a person who possesses extraordinary grasp over computers and deserves some respect for the same. When a few of them get together, well, that is indeed a scary proposition!

Here are the 10 most notorious hacker groups to have ever touched a keyboard.

1. Chaos Computer Club: This group made a name for itself by hacking the Bildschirmtext computer in Germany and taking 134,000 Deutsch Marks from a bank in Hamburg. They did this to prove that the security system was flawed and returned the money they took the next day. They also protested against the French nuclear testing using hacking, by exposing a Trojan horse spyware device being used by the Germany government. The group was formed on 12 September 1981 in Berlin.

2. Global kOS: Pronounced Global Chaos, this group created as much of it as they could, that too on a global scale. Their members included AcidAngel, Shadow Hunter, The Assassin etc. and the group has been credited with providing a number of automated hacker tools to the world. One of the most famous out of these tools was ‘Up Yours’, which was used to bring down the websites of 40 politicians, MTV and the Ku Klux Klan. There are also tools like kOS crack and BattlePong.

3. The Level Seven Crew: This hacker crew took its name from the seventh level of hell, as depicted in Dante’s Inferno. In this, the seventh level is ‘the violent’ level. In 1999, the first crew hacked into 60 high profile computer systems. These included names like NASA, Sheraton Hotels and The First American National Bank. They are believed to be the first group to have hacked into a Moroccan domain. The group was known for their hacktivism and disbanded in 2000.

4. globalHell: This group was co-founded by Patrick Gregory, a street-gang member from Houston, Texas. It has been said to be behind the destruction of data on 115 websites, information trafficking and millions of dollars worth of damages. Ironically, Gregory had turned towards computers to escape his gang life. Rather, he ended up creating a 60 member crew of hackers, who treated the internet like their streets and wreaked havoc.

Gregory’s crew has also been credited with online extortion and defacing the United States Army’s website when they wrote “global hell will not die”, on it. Interestingly, Chad Davis, another co-founder for the group, was arrested in 1999 and sent to prison for six months, along with a fine of $8,054, became an independent security consultant later.

5. TeaMp0isoN: This group was started in 2010 by a 16-year-old hacker with the alias TriCk. TeaMp0isoN was responsible for hacking into NATO, Facebook and the English Defense League. In addition, this group stole personal data from Tony Blair by hacking into his email account. They also attacked Research In Motion, the company that developed the BlackBerry, in 2011, by defacing their blog. They did this because the company planned to help the police during the England riots that year. The group wrote on the blog, “We are all for the rioters that are engaging in attacks on the police and government.”

6. Network Crack Program Hacker Group: NCPH was formed in China in 1994. It is led by Tan Dailin (screen name Wicked Rose), who is said to be working for the Chinese army. While the size of the crew is unknown, it is said to be consisting of 10 members, with Dailin and three others at the top.

The GinWui rootkit, created by Wicked Rose, was used in attacking the US Department of Defense in 2006. According to Wicked Rose, NCPH has a sponsor who pays them for their activities. This benefactor is believed to be the People’s Liberation Army.

7. LulzSec: With the motto, “Laughing at your security since 2011,” Lulzsec is credited with attacking Fox.com, an X-Factor database, Sony, FBI and CIA. The group has caused damages worth billions of dollars. The group exposed the contact information for 73,000 contestants when they hacked the X-factor database. Important members of LulzSec were arrested in 2012 by the FBI. They were turned in by the group’s leader Sabu. But LulzSec reappeared within three months, hacking a singles in military dating website, claiming that the crew has been ‘reborn’.

8. Masters of Deception: This group was formed in 1989 and played rival to Legion of Doom, a Texas-based hacker group. The two were bitter rivals, who always tried to stay ahead of each other. This later turned into an all out war with class and racial overtones being added to the fray.

The group carried out an attack, which has been called one of the most extensive thefts of computer information ever known. The top five members of the group were arrested by the Secret Service eventually and charged with computer tampering, computer and wire fraud, illegal wiretapping, and conspiracy. They all pleaded guilty.

9. Milw0rm: This hacktivist group was formed on 3 June 1998 and made the Bhabha Atomic Research Center in India their primary target. The group took 5 MB of classified files related to India’s last five nuclear tests and deleted data from two servers. It also posted anti-nuclear messages on the website. Milw0rd also hacked into the website of web hosting company EasySpace and posted an anti-nuclear message on 300 websites, including those of Wimbledon, FIFA World Cup, Drew Barrymore and the Saudi Royal Family.

10. Anonymous: Not much needs to be said about this group. It is perhaps the most famous and notorious of all hacker groups ever. The group has attacked the Pentagon, threated to take down Facebook and threatened Los Zetas, the Mexican drug cartel. In addition, it has also declared a war against Scientology. They go by the motto, “We are Anonymous. We are Legion. We do not forgive. We do not forget. Expect us.”

Like>> Comment>> Share It Loud>>
===========================
-- A Black Hack: Post
===========================

What does “white hat” and ‘black hat” mean?

These are commonly used marketing terms, as you know, and I am not positive where they originate, but I can make a very good guess. Go back to early Western movies and you’ll see where this comes from: the characters that had white hats were invariably the good guys, and the characters with black hats were the bad guys.

As film critic Roger Ebert notes in his review of the Western classic

Shane: “Shane wears a white hat and Palance wears a black hat, but the buried psychology of this movie is a mottled, uneasy, fascinating gray.”
Or the more pretentious Premier review of The Three Burials of Melquiades Estrada: “Three Burials is beautiful, authentic and brutally observant of human nature. With real Tex-Mex backdrops instead of the usual Monument Valley vistas and characters too complex to withstand simple white-hat/black-hat reductionism, Three Burials is a visionary portrait of the New West.”
Back to the computer world. Free software guru Richard Stallman, in his book Free as in Freedom: Richard Stallman’s Crusade for Free Software, notes: “The urge to confine the culture of computer hacking within the same ethical boundaries is well-meaning but impossible. Although most software hacks aspire to the same spirit of elegance and simplicity, the software medium offers less chance for reversibility. Dismantling a police cruiser is easy compared with dismantling an idea, especially an idea whose time has come. Hence the growing distinction between “black hat” and “white hat” — i.e., hackers who turn new ideas toward destructive, malicious ends versus hackers who turn new ideas toward positive or, at the very least, informative ends.”
In the marketing and search engine optimization sense, “white hat” techniques are those that are legit, aboveboard, ethical and honest, while “black hat” techniques are also known as dirty tricks, using techniques that are typically banned or prohibited by vendors or service providers.
Behind this all, however, is a troubling possibility that there’s an element of racism involved with this nomenclature too. Why would “white” be good, positive and truthful, while “black” is bad, evil and unethical? Consider “white lies” as another example of this: hopefully that’s not the etymological basis of this phrase, but it’s something to think about when you talk about how you’re a ‘white hat marketer’ or similar.

Hope this definition proves helpful to you!

-A Black Hack: Post

Android Penetration Testing Applications

For any IT Security Enthusiastic , Android Penetration Testing has always been a topic of intrest . The number of Android Users is ever increasing and has crossed the number of Computer users far back . Android supports many penetration testing tools within itself for the IT security reseach analysts to perform the penetration tests from the mobile devices themselves . Well if  penetration testing is possible by using the Android Smartphones , then who would care to carry bulky system to various locations to carry out your penetration testing. Penetration testing requiers the involvement of the person into their system, but by using your Android Smartphone, you can perform it at any location in the best way you can at any time.

List of Penetration testing Applications for the Android OS
Networking Testing Applications for Android

Port Scanner: This Application allows the penetration tester to scan ports on a remote host via its IP or domain name (in case of a website) so you can know which ports are open on the host. The Application supports 3G network , protocol recognition among other features .

Fing: Fing is a professional App for network analysis. A simple and intuitive interface helps you evaluate security levels, detect intruders and resolve network issues. It helps you to find out which devices are connected to your Wi-Fi network, in just a few seconds.

Network Discovery: Network Discovery Application  is quiet similar to Fing. This Application is used for the Live host discovery and works as a port scanner for a local area network as well.

tPacketCapture: tPacketCapture does packet capturing without using any root permissions. tPacketCapture uses VpnService provided by Android OS. Captured data are saved as a PCAP file format in the external storage.

Droidsheep: Droidsheep Android application is written by Andrew Koch. It works as a session hijacker for non-encrypted sites and allows you to save cookies files/sessions for later analysis. It is no longer available from the developer’s site i.e. droidsheep.de , however you can still find it on freeweb hosting sites uploaded in the groups . Download and Install at your own risk .

FaceNiff: FaceNiff is an app that allows you to sniff and intercept web session profiles over the WiFi that your mobile is connected to. It is possible to hijack sessions only when WiFi is not using EAP, but it should work over any private network.

These applications gives the Penetration Tester the liberty to do major network security analysis with just the Android phone .

Nessus: Nessus the most popular penetration testing tool that is used to perform vulnerability scans with its client/server architecture. Nessus Android app can perform following tasks.

    Connect to a Nessus server (4.2 or greater)
    Launch existing scans on the server
    Start, stop or pause running scans
    Create and execute new scans and scan templates
    View and filter reports

Shark for Root: Traffic sniffer, works on 3G and WiFi (works on FroYo tethered mode too). To open dump, use WireShark or similar software, to preview dump on phone, use Shark Reader.

PacketShark: This is a packet sniffer application. Features include friendly capture options interface, filter support, live capture view, and Dropbox upload of captured files. It allows viewing of the captured packets — no need to install other application as a viewer.

Network Mapper:

    A very fast net scanner for network admins that can scan your network in the office and export as CSV via Gmail to give you a map of what devices are on your LAN.
    Includes a port scanner for security audit scans and a MAC vendor database to identify NIC manufacturers.
    Can detect firewalled and stealthed computers, quite useful if you are looking for a Windows/firewall box that you can’t see on your network.
    Useful if you want to find FTP servers, SSH servers, SMB servers, etc. on your network and would help you to diagnose faults.
    You can save the scan results as a CSV file, which can be imported into Excel/Google Spreadsheet/LibreOffice.

DroidSQLi: DroidSQLi is the first automated MySQL Injection tool for Android. It allows you to test your MySQL-based web application against SQL injection attacks.

DroidSQLi supports the following injection techniques:

    Time based injection
    Blind injection
    Error based injection
    Normal injection

It automatically selects the best technique to use and employs some simple filter evasion methods.

Sqlmapchik: sqlmapchik is a cross-platform sqlmap GUI for the popular sqlmap tool. It is primarily aimed to be used on mobile devices. The easiest way to install sqlmapchik on an Android device is to download it from Google Play.

dSploit: dSploit is an Android network analysis and penetration suite which aims to offer to IT security experts/geeks the most complete and advanced professional toolkit to perform network security assessments on a mobile device. Once dSploit is started, you will be able to easily map your network, fingerprint alive host’s operating systems and running services, search for known vulnerabilities, crack logon procedures of many tcp protocols, perform man in the middle attacks such as password sniffing, real time traffic manipulation, etc.

These are the available modules in the app:

    RouterPWN
    Trace
    Port Scanner
    Inspector
    Vulnerability Finder
    Login Cracker
    Packet Forger
    MITM

Revenssis Penetration Suite: Revenssis Penetration Suite is a set of all the useful types of tools used in Computer and Web Application security.

    Web Vulnerability Scanners including:
    SQL injection scanner
    XSS scanner
    DDOS scanner
    CSRF scanner
    SSL misconfiguration scanner
    Remote and Local File Inclusion (RFI/LFI) scanners
    Useful utilities such as:
    WHOIS lookup, IP finder, Shell, SSH, Blacklist lookup tool, Ping tool
    Forensic tools (in implementation) such as malware analyzers, hash crackers, network sniffer, ZIP/RAR password finder, social engineering toolset, reverse engineering tool.
    Vulnerability research lab (sources include: Shodan vulnerability search engine, ExploitSearch, Exploit DB, OSVDB and NVD NIST)
    Self scan and defense tools for your Android phone against vulnerabilities
    Connectivity Security Tools for Bluetooth, Wifi and Internet. (NFC, Wifi Direct and USB in implementation)

zANTI: zANTI is a comprehensive network diagnostics toolkit that enables complex audits and penetration tests at the push of a button. It provides cloud-based reporting that walks you through simple guidelines to ensure network safety.

zANTI offers a comprehensive range of fully customizable scans to reveal everything from authentication, backdoor and brute-force attempts to database, DNS and protocol-specific attacks – including rogue access points.
Orbot: Orbot is a free proxy app that empowers other apps to use the Internet more securely. Orbot uses Tor to encrypt your Internet traffic and then hides it by bouncing through a series of computers around the world. Tor is an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis.

    Orbot is the safest way to use the Internet on Android. Period. Orbot bounces your encrypted traffic several times through computers around the world, instead of connecting you directly like VPNs and proxies. This process takes a little longer, but the strongest privacy and identity protection available is worth the wait.
    Use with Orweb, the most anonymous way to access any website, even if it’s normally blocked, monitored, or on the hidden web.
    Use Gibberbot with Orbot to chat confidentially with anyone, anywhere for free.
    Any installed app can use Tor if it has a proxy feature, using the settings. You can use private web searching with DuckDuckGo.
    Orbot can be configured to transparently proxy all of your Internet traffic through Tor. You can also choose which specific apps you want to use through Tor.
    Orbot is free software.

OpenVPN: OpenVPN Connect is the official full-featured Android VPN client for the OpenVPN Access Server, Private Tunnel VPN and OpenVPN Community, developed by OpenVPN Technologies, Inc.

    Does not require a rooted device.
    Easily import .ovpn profiles from SD card, OpenVPN Access Server, Private Tunnel or via a browser link.
    Improved power management – preferences setting allows VPN to pause in a low-power state whenever screen is blanked or network is unavailable.
    Android Keychain integration – OpenVPN profiles may reference a cert/key pair in the Android keychain.
    Supports hardware-backed keystores
    Support for multi-factor authentication using OpenVPN static and dynamic challenge/response protocols.
    Full IPv6 support (at both the tunnel and transport layer).

Orweb: Orweb is the most privacy-enhancing web browser on Android for visiting any website, even if it’s normally censored, monitored, or on the hidden web. Orweb is the safest browser on Android. Orweb evades tracking and censorship by bouncing your encrypted traffic several times through computers around the world, instead of connecting you directly like VPNs and proxies. This process takes a little longer, but the strongest privacy and identity protection available is worth the wait.

    Orweb bypasses almost every kind of network restriction.
    Orweb does not store any information about the websites you visit.
    You can prevent sites you visit from installing any cookies (which could track your web activities), allow them selectively, or allow any site to create cookies.
    JavaScript, a common attack method for malicious software, is disabled by default.
    Orweb is opensource.
    Orweb attempts to prevent Flash from loading on sites you visit, blocking many common security threats.
    Orweb is available in: Arabic, Chinese, Dutch, English, Esperanto, Farsi, French, German, Hungarian, Italian, Norwegian, Russian, Spanish, Swedish and Tibetan.

Due to the rapid increase in the Android Operating System , these tools and applications come quiet in handy while penetration testing . Achieve anonimity and perform web application Assessments on a Palm size Androis Smart Phone, a dream come true for the penetration testers .

Discalimer  : Penetration testing without authorisation is punshable offence in Law . This artical is meant for the educational purposes only .

- Black Hack: post

7 Miscellaneous Hacking Attacks Ever Happened

1.) GIFAR:

Graphics Interchange Format Java Archives (GIFAR) was a malware that lets attacker piggy back victim’s HTTP cookies. This attack had been done by four persons namely John Heasman, Rob Carter, Nathan McFeters, and Billy Rios. We are placing it at top because it was very widespread due to use of GIF (image file) and JAR (Java Archive). In this attack, GIF or JAR file executes a malicious code on the users’ side. This attack was not able to execute automatically, but users need to be logged in on the website hosting the image.

2.) Google Gears Cross-Origin Model Exploit:

This hacking attack was done by Yair Yamit and it was related to abusing the Google Gears loader’s tendency in order to disregard a Gears workers file header as it loads it. Google Gear is a browser extension that lets developers create richer and responsive web application. In this attack, attacker create a text file that has malicious gear commands.

4.) Clickjacking:

This attack was discovered by Robert Hansen and Jeremiah Grossman. They Demonstrated that stealing the “clicks” away from users via link redirects or streaming videos is possible care of an arbitrary JavaScript code. This attack was mostly used against Facebook and Twitter to gain likes and followers.

4.) The Safari Bomber:

This attack had been discovered by Nitesh Dhanjani. He revealed that a rogue website has the capability to “carpet bomb” a user’s Windows desktop or Mac OS X’s downloads directory with malicious codes using the Safari browser.

5.) Opera Exploitation:

This attack had been done by Stefano Di Paola. He demonstrated that exploitation of opera mostly revolves around stealing history, creating a botnet, or redirecting users to a hacker-controlled rogue website.

6.) HTML 5 Abuse:

This attack was discovered by Alberto Trivero. He demonstrated that structured client-side storage technology of HTML 5 is very, very vulnerable to an assortment of creative and not-so-creative hacker techniques all aimed at stealing stored data from a target’s computer.

7.) Flash Parameter Injection:

This attack was discovered by Adi Sharabani, Ayal Yogev, and Yuval Baror. They produced that a presentation showcasing just how a cyber attack could use the Flash parameter to load malicious movies and attack a Flash-based system even after the vulnerability is patched. You can read more about this attack here.