Wednesday, January 21, 2009
Few tools help you to perform wireless hacking and those can be used in to save ourselves from such wireless attacks to our wireless equipment like Laptops and practices to follow to secure your Wireless Network against each of these powerful tools.
NetStumbler – Do not broadcast your SSID. Ensure your WLAN is protected by using advanced Authentication and Encryption.
Kismet – There’s really nothing you can do to stop Kismet from finding your WLAN, so ensure your WLAN is protected by using advanced Authentication and Encryption
Airsnort – Use a 128-bit, not a 40-bit WEP encryption key. This would take longer to crack. If your equipment supports it, use WPA or WPA2 instead of WEP (may require firmware or software update).
Cowpatty – Use a long and complex WPA Pre-Shared Key. This type of key would have less of a chance of residing in a dictionary file that would be used to try and guess your key and/or would take longer. If in a corporate scenario, don’t use WPA with Pre-Shared Key, use a good EAP type to protect the authentication and limit the amount of incorrect guesses that would take place before the account is locked-out. If using certificate-like functionality, it could also validate the remote system trying to gain access to the WLAN and not allow a rogue system access.
ASLeap – Use long and complex credentials, or better yet, switch to EAP-FAST or a different EAP type.
Ethereal – Use encryption, so that anything sniffed would be difficult or nearly impossible to break. WPA2, which uses AES, is essentially unrealistic to break by a normal hacker. Even WEP will encrypt the data. When in a Public Wireless Hotspot (which generally do not offer encryption), use application layer encryption, like Simplite to encrypt your IM sessions, or use SSL. For corporate users, use IPSec VPN with split-tunneling disabled. This will force all traffic leaving the machine through an encrypted tunnel that would be encrypted with DES, 3DES or AES.
Be careful and safe to have a great wireless future ahead!!
Labels: Wireless Hacking
Friday, November 14, 2008
A buffer overflow attack is perhaps the most common attack used to compromise the security of a host. This attack can be used to change the function return address and redirect execution to the attacker's code. We present a hardware-based solution, called SmashGuard, to protect against all known forms of attack on the function return addresses stored on the program stack. With each function call instruction, the current return address is pushed onto a hardware stack. A return instruction compares its address to the return address from the top of the hardware stack. An exception is raised to signal the mismatch. Because the stack operations and checks are done in hardware in parallel with the usual execution of instructions, our best-performing implementation scheme has virtually no performance overhead (because we are modifying hardware, it is impossible to guarantee zero overhead without an actual hardware implementation). While previous software-based approaches' average performance degradation for the SPEC2000 benchmarks is only 2.8 percent, their worst-case degradation is up to 8.3 percent. Apart from the lack of robustness in performance, the software approaches' key disadvantages are less security coverage and the need for recompilation of applications. SmashGuard, on the other hand, is secure and does not require recompilation of applications.
Labels: web attacks
Wednesday, November 5, 2008
The Internet is a huge library of billions of web pages, hundreds of search engines, and tons of legal facts just waiting for your use. To begin an investigation, you first need a target, in this case a person. It is best to think optimistically about finding that person. Plenty of information can be obtained on anyone from online references or offline departments, so think positively! With the exception of adoption cases and those that have been closed from the general public, like certain military investigations, everyone leaves a paper trail that can be followed when you know how to go about it. Like all investigators, you should keep notes on what you find. Hopefully this tutorial will allow you to locate the person your searching for quickly, but if you don’t, you might be able to use your common sense to track them down. Please remember, things like this take time and require a lot of patience.Go on start yourself nothin is impossible in the world for you:=)
Labels: internet















