joana&pedro

quarta-feira, 1 de julho de 2020

Tu A Harvard Y Yo A Yale

Una de las paradas imprescindibles que teníamos claro que queríamos hacer en nuestro viaje a la Costa Este de Estados Unidos era la visita a dos de las universidades más prestigiosas del país y seguramente del mundo: Harvard en Massachusetts y Yale en Connecticut. Conocidas por ser cuna de ilustres personalidades de todos los tiempos, nuestra visita también venía motivada por servir, ambas instituciones, de escenario de películas o series que hemos visto. Nos encantaron las dos, eso tenemos que decirlo, pero tal vez la arquitectura de una más que la de la otra o la ubicación de una más que la de la otra. Estas son solo dos de las razones que aportamos uno y otra cada vez que nos preguntamos cuál nos ha gustado más, así que estaba claro que nuestro post sobre estas universidades era carne de cañón para el "Tu a…y yo a….". A ver qué te parece a ti. Ella ha elegido escribir sobre la Universidad de Harvard y él lo hace sobre la de Yale y hay que dejar claro que este post lo escribimos desde el punto de vista de un blog de viajes, en ningún momento nos paramos a hacer un análisis académico de ambas instituciones. Esto es para disfrutar y animarte a visitar ambas universidades si pasas por Boston o viajas por la costa de Connecticut.

¿Por qué visitar la universidad de Harvard?

¿Te pregustas si merece la pena destinar parte de tu viaje a Boston para visitar la Universidad de Harvard? Absolutamente sí, esa sería mi respuesta. Conocer Harvard es un sueño no solo para las personas que amamos el cine, también lo es para quienes nos gusta estudiar y soñamos con hacerlo o hacer algún curso en esta prestigiosa institución norteamericana. Según el 2017 Academic Ranking of World Universities (ARWU) de Shanghai Ranking Consultancy, esta universidad ocupa el primer lugar (como viene haciéndolo en los últimos 15 años) con 100 puntos, a tres puntos y medio de la siguiente (Standford) y a más de 42 puntos de la Universidad de Yale. No digo nada más al respecto. Aquí van mis 5 razones por las que me gustó visitar la Universidad de Harvard.

1. Por su historia

Fundada en 1636 Harvard es la institución de educación superior más antigua de los Estados Unidos. Recibe el nombre de su primer benefactor, el joven ministro John Harvard de Charlestown, que a su muerte en 1638 dejó su biblioteca y la mitad de su patrimonio a la institución. Una estatua de John Harvard se encuentra hoy frente al University Hall en Harvard Yard, y es el hito más conocido de la Universidad.

2. Por su ilustre alumnado

Sin duda saber quién estudió en esta universidad hace que la motivación por visitar esta institución aumente sin reserva. Harvard tiene el orgullo de señalar entre sus antiguos alumnos y alumnas y entre su profesorado a 47 premios Nobel, 47 Pulitzer y 32 jefes de estado de todo el mundo, entre ellos ocho presidentes de Estados Unidos como Barack Obama y John F. Kennedy. También han estudiado ahí Michelle Obama, las actrices Natalie Portman y Ashley Judd o los actores Matt Damon o Tommy Lee Jones quien tuvo de compañero de cuarto al que sería vicepresidente de los Estados Unidos, Al Gore.

3. Por ser escenario de películas como…

Pues como 'Love Story' (Arthur Hiller, 1970) protagonizada por Ali MacGraw y Ryan O'Neal, que, como sabrás, cuenta la historia de dos estudiantes de Harvard (que terminan un poco regular, hay que decirlo) y que verdaderamente se rodó en la universidad. Curiosidades de la vida, en el casting de la película también está Tommy Lee Jones quien, como he comentado antes, ha sido alumno de esta universidad en la vida real.

También está presente en la película "La red social "(2010), que cuenta la vida de Mark Zuckerberg durante su época de estudiante en Harvard y la creación de Facebook. Lo curioso es que, según he leído, en realidad las escenas se grabaron en otros campus de Massachusetts, ya que los productores no obtuvieron permiso para grabar en Harvard, aunque también hemos visto una web que la sitúa en Maryland.

4. Por lo que hay que visitar, ver y comprar

La universidad cuenta con un Centro de Información situado en el Smith Campus Center, en el 30 de Dunster Street donde te pueden dar toda la información que requieras. Además de los Collegues y las facultades encontrarás bibliotecas, cómo no, museos, 2 teatros y zonas deportivas. Y, por supuesto, la tienda oficial de la universidad (situada en 1400 Quincy St, Massachusetts Av.) para comprar tazas, sudaderas, bolsos y un largo etc. de tu universidad favorita. Aquí tienes la web de la universidaddonde encontrarás más información.

5. Por su ubicación

Y aquí está mi punto ganador frente a Yale si todavía no te había convencido. La Universidad de Harvard, igual que el Massachusetts Institute of Technology (MIT), está asociada a ¡¡¡Boston!!! aunque está al otro lado del río Charles. ¿Qué más se puede decir? ¿New Haven? ¿en serio vamos a comparar Boston con New Haven? No, creo que no. Aquí te doy más razones para amar esta ciudad, nuestro post sobre Boston

Solo me resta comentar que para llegar a Harvard desde el centro de Boston lo más sencillo es coger la línea roja de metro en dirección Alewife y bajar en Harvard, llegarás a Harvard Square o a Church Street que es lo que hicimos nosotros para entrar por la Johnston Gate.

¿Porqué visitar la Universidad de Yale?

Si has estado en Harvard es inevitable que te pases por Yale, ya que la histórica rivalidad entre instituciones es muy conocida. Vamos, que no podrás saber si te gusta una sin visitar la otra, al menos no debería ser así. Y está muy bien recurrir a rankings de todo tipo (veo que incluso hay uno de Shangai, muy bien…), pero los datos cantan y el conjunto no engaña. Yale es la tercera institución de enseñanza privada más antigua de Estados Unidos, el segundo sistema bibliotecario universitario más grande del mundo, con unos 15 millones de ejemplares y cuenta con una de las Facultades de Derecho más conocidas del planeta. O lo que es lo mismo, que en cuestiones académicas, pocas lecciones. Y además de eso, aquí van mis cinco razones para no perderse la visita a Yale. Si has leído el trozo de Harvard (hay que reconocer que es bastante interesante…), a lo mejor las razones te suenan un poco.

1. Por su historia

Yale fue fundada en 1701, sí es más "moderna" que Harvard, pero tampoco nació ayer y quiero pensar que no se trata de una competición de antigüedad, que por esa regla de tres en Europa pueden dar muchas lecciones. Y claro, si hablamos de historia, la de Harvard es muy respetable, pero la de Yale no es escasa. El nombre se debe a uno de sus benefactores, Elihu Yale.

2. Por su ilustre alumnado

Cuidado con esto, que nos ponemos a citar nombres y aquí tampoco se puede parar. El grado de selección aquí también es muy alto, se calcula que sólo el 6 por ciento de quienes aplican acaban siendo aceptados. Aquí han estudiado George W. Bush, Bill Clinton, Hillary Clinton, actores como Paul Newman, Maryl Streep, Jodie Foster o Edward Norton, ex presidentes de diversos países como el mexicano Ernesto Zedillo o el italiano Mario Monti y un listado bastante grande de Premios Nobel y Pullitzer. Uno de sus profesores, Hiram Bingham III descubrió Machu Pichu. Ahí lo dejo…

3. Por ser escenario de películas como…

Pues muy pocas se han rodado en Yale de verdad (a Harvard le pasa lo mismo). Parece que una de las últimas ha sido "Indiana Jones y el reino de la calavera de Cristal". Por cierto, cuentan que el profesorado y el alumnado de Yale sirvió de inspiración para la saga. Pero las referencias a Yale en películas o libros son numerosísimas. Films como "El buen pastor" y libros como "El gran Gastby" o "El curioso caso de Benjamin Button" cuentan con muchas alusiones.

4. Por su arquitectura

No debería haberlo dejado para tan tarde, porque es uno de los grandes puntos fuertes. Hace ya casi 100 años Yale tomó como modelo, no sólo educativo, a Oxford y Cambridge y dividió a sus alumnos en comunidades separadas. De esta manera podría ofrecer una atención "personalizada". Es por eso que ahora mismo cuenta con más de 200 edificios, y vaya edificios. Hay diferentes campus y también varias galerías y museos, ya que la universidad cuenta con extensas colecciones. Su patrimonio es riquísimo y ni siquiera se necesita el típico ambiente universitario para disfrutar con la arquitectura. Restos de terodáctilos y pinturas de Picasso conviven como fuente de inspiración para futuras generaciones.

5. Por su ubicación

Muy segura te veo de la fuerza de tu ubicación y hay que reconocer que estar en Boston es una delicia, pero ¿qué me dices de New Haven? Lo mires por donde lo mires todo son ventajas. Está a 200 kilómetros de Boston y a 120 de Nueva York, en un punto intermedio y cercano perfecto y además cuenta con una ciudad que vive enteramente para su universidad. Si aquí vienen alumnos de más de 110 países diferentes es por algo. Así que sí, visitar New Haven es perfecto, porque es visitar Yale. Y si quieres saber más, aquí te dejo el enlace a la web de la universidad de Yale

More articles

Top 9 Best Websites To Learn Ethical Hacking 2018

Phrack Magazine: Digital hacking magazine.
Packet Storm: Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers.
Metasploit: Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit. Get the worlds best penetration testing software now.
KitPloit: Leading source of Security Tools, Hacking Tools, CyberSecurity and Network Security.
Hakin9: E-magazine offering in-depth looks at both attack and defense techniques and concentrates on difficult technical issues.
HackRead: HackRead is a News Platform that centers on InfoSec, Cyber Crime, Privacy, Surveillance, and Hacking News with full-scale reviews on Social Media Platforms.
Exploit DB: An archive of exploits and vulnerable software by Offensive Security. The site collects exploits from submissions and mailing lists and concentrates them in a single database.
The Hacker News: The Hacker News — most trusted and widely-acknowledged online cyber security news magazine with in-depth technical coverage for cybersecurity.
Hacked Gadgets: A resource for DIY project documentation as well as general gadget and technology news.

quinta-feira, 11 de junho de 2020

Best Hacking Tools

MOST USEFUL HACKING TOOL

1-Nmap-Network Mapper is popular and free open source hacker's tool.It is mainly used for discovery and security auditing.It is used for network inventory,inspect open ports manage service upgrade, as well as to inspect host or service uptime.Its advantages is that the admin user can monitor whether the network and associated nodes require patching.

2-Haschat-It is the self-proclaimed world's fastest password recovery tool. It is designed to break even the most complex password. It is now released as free software for Linux, OS X, and windows.

3-Metasploit-It is an extremely famous hacking framework or pentesting. It is the collection of hacking tools used to execute different tasks. It is a computer severity framework which gives the necessary information about security vulnerabilities. It is widely used by cyber security experts and ethical hackers also.

4-Acutenix Web Vulnerability Scanner- It crawls your website and monitor your web application and detect dangerous SQL injections.This is used for protecting your business from hackers.

5-Aircrack-ng - This tool is categorized among WiFi hacking tool. It is recommended for beginners who are new to Wireless Specefic Program. This tool is very effective when used rightly.

6-Wireshark-It is a network analyzer which permit the the tester to captyre packets transffering through the network and to monitor it. If you would like to become a penetration tester or cyber security expert it is necessary to learn how to use wireshark. It examine networks and teoubleshoot for obstacle and intrusion.

7-Putty-Is it very beneficial tool for a hacker but it is not a hacking tool. It serves as a client for Ssh and Telnet, which can help to connect computer remotely. It is also used to carry SSH tunneling to byepass firewalls. So, this is also one of the best hacking tools for hackers.

8-THC Hydra- It is one of the best password cracker tools and it consist of operative and highly experienced development team. It is the fast and stable Network Login Hacking Tools that will use dictonary or bruteforce attack to try various combination of passwords against in a login page.This Tool is also very useful for facebook hacking , instagram hacking and other social media platform as well as computer folder password hacking.

9-Nessus-It is a proprietary vulnerability scanner developed by tennable Network Security. Nessus is the world's most popular vulnerability scanner according to the surveys taking first place in 2000,2003,2006 in security tools survey.

10-Ettercap- It is a network sniffing tool. Network sniffing is a computer tool that monitors,analyse and defend malicious attacks with packet sniffing enterprise can keep track of network flow.

11-John the Ripper-It is a free famous password cracking pen testing tool that is used to execute dictionary attacks. It is initially developed for Unix OS. The Ripper has been awarded for having a good name.This tools can also be used to carry out different modifications to dictionary attacks.

12-Burp Suite- It is a network vulnerability scanner,with some advance features.It is important tool if you are working on cyber security.

13-Owasp Zed Attack Proxy Project-ZAP and is abbreviated as Zed Attack Proxy is among popular OWASP project.It is use to find vulnerabilities in Web Applications.This hacking and penetesting tool is very easy to use as well as very efficient.OWASP community is superb resource for those people that work with Cyber Security.

14-Cain & Abel-It is a password recovery tool for Microsoft Operating System. It allow easy recovery of various kinds of passwords by sniffing the networks using dictonary attacks.

15-Maltego- It is a platform that was designed to deliver an overall cyber threat pictures to the enterprise or local environment in which an organisation operates. It is used for open source intelligence and forensics developed by Paterva.It is an interactive data mining tool.

These are the Best Hacking Tools and Application Which are very useful for penetration testing to gain unauthorized access for steal crucial data, wi-fi hacking , Website hacking ,Vulnerability Scanning and finding loopholes,Computer hacking, Malware Scanning etc.

This post is only for educational purpose to know about top hacking tools which are very crucial for a hacker to gain unauthorized access. We are not responsible for any type of crime.

More info

Support For XXE Attacks In SAML In Our Burp Suite Extension

In this post we present the new version of the Burp Suite extension EsPReSSO - Extension for Processing and Recognition of Single Sign-On Protocols. A DTD attacker was implemented on SAML services that was based on the DTD Cheat Sheet by the Chair for Network and Data Security (https://web-in-security.blogspot.de/2016/03/xxe-cheat-sheet.html). In addition, many fixes were added and a new SAML editor was merged. You can find the newest version release here: https://github.com/RUB-NDS/BurpSSOExtension/releases/tag/v3.1

New SAML editor

Before the new release, EsPReSSO had a simple SAML editor where the decoded SAML messages could be modified by the user. We extended the SAML editor so that the user has the possibility to define the encoding of the SAML message and to select their HTTP binding (HTTP-GET or HTTP-POST).

Redesigned SAML Encoder/Decoder

Enhancement of the SAML attacker

XML Signature Wrapping and XML Signature Faking attacks have already been part of the previous EsPReSSO version. Now the user can also perform DTD attacks! The user can select from 18 different attack vectors and manually refine them all before applying the change to the original message. Additional attack vectors can also be added by extending the XML config file of the DTD attacker.
The DTD attacker can also be started in a fully automated mode. This functionality is integrated in the BurpSuite Intruder.

DTD Attacker for SAML messages

Supporting further attacks

We implemented a CertificateViewer which extracts and decodes the certificates contained within the SAML tokens. In addition, a user interface for executing SignatureExclusion attack on SAML has been implemented.

Additional functions will follow in later versions.

Currently we are working on XML Encryption attacks.

This is a combined work from Nurullah Erinola, Nils Engelbertz, David Herring, Juraj Somorovsky, and Vladislav Mladenov.

The research was supported by the European Commission through the FutureTrust project (grant 700542-Future-Trust-H2020-DS-2015-1).

Related links

inBINcible Writeup - Golang Binary Reversing

This file is an 32bits elf binary, compiled from go language (i guess ... coded by @nibble_ds ;)

The binary has some debugging symbols, which is very helpful to locate the functions and api calls.

GO source functions:

- main.main

- main.function.001

If the binary is executed with no params, it prints "Nope!", the bad guy message.

~/ncn$ ./inbincible

Nope!

Decompiling the main.main function I saw two things:

1. The Argument validation: Only one 16 bytes long argument is needed, otherwise the execution is finished.

2. The key IF, the decision to dexor and print byte by byte the "Nope!" string OR dexor and print "Yeah!"

The incoming channel will determine the final message.

Dexor and print each byte of the "Nope!" message.

This IF, checks 16 times if the go channel reception value is 0x01, in this case the app show the "Yeah!" message.

Go channels are a kind of thread-safe queue, a channel_send is like a push, and channel_receive is like a pop.

If we fake this IF the 16 times, we got the "Yeah!" message:

(gdb) b *0x8049118
(gdb) commands
>set {char *}0xf7edeef3 = 0x01
>c
>end

(gdb) r 1234567890123456
tarting program: /home/sha0/ncn/inbincible 1234567890123456
...
Yeah!

Ok, but the problem is not in main.main, is main.function.001 who must sent the 0x01 via channel.

This function xors byte by byte the input "1234567890123456" with a byte array xor key, and is compared with another byte array.

=> 0x8049456: xor %ebp,%ecx

This xor, encode the argument with a key byte by byte

The xor key can be dumped from memory but I prefer to use this macro:

(gdb) b *0x8049456
(gdb) commands
>i r ecx
>c
>end
(gdb) c

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x12 18

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x45 69

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x33 51

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x87 135

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x65 101

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x12 18

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x45 69

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x33 51

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x87 135

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x65 101

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x12 18

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x45 69

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x33 51

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x87 135

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x65 101

Breakpoint 2, 0x08049456 in main.func ()
ecx 0x12 18

The result of the xor will compared with another array byte, each byte matched, a 0x01 will be sent.

The cmp of the xored argument byte,
will determine if the channel send 0 or 1

(gdb) b *0x0804946a
(gdb) commands
>i r al
>c
>end

At this point we have the byte array used to xor the argument, and the byte array to be compared with, if we provide an input that xored with the first byte array gets the second byte array, the code will send 0x01 by the channel the 16 times.

Now web have:

xorKey=[0x12,0x45,0x33,0x87,0x65,0x12,0x45,0x33,0x87,0x65,0x12,0x45,0x33,0x87,0x65,0x12]

mustGive=[0x55,0x75,0x44,0xb6,0x0b,0x33,0x06,0x03,0xe9,0x02,0x60,0x71,0x47,0xb2,0x44,0x33]

Xor is reversible, then we can get the input needed to dexor to the expected values in order to send 0x1 bytes through the go channel.

>>> x=''
>>> for i in range(len(xorKey)):
... x+= chr(xorKey[i] ^ mustGive[i])
...
>>> print x

G0w1n!C0ngr4t5!!

And that's the key :) let's try it:

~/ncn$ ./inbincible 'G0w1n!C0ngr4t5!!'
Yeah!

Got it!! thanx @nibble_ds for this funny crackme, programmed in the great go language. I'm also a golang lover.

Continue reading

HOW TO HACK A FACEBOOK ACCOUNT? STEP BY STEP

Phishing is the way to obtain sensitive information such as usernames, passwords, and credit card details or any other confidential information, often for malicious reasons, by disguising as a trustworthy entity in an electronic communication. Phishing is typically carried out by several ways like email spoofing or instant messaging, and it often directs users to enter personal information at a fake website, the look and feel of which are almost identical to the legitimate one. In this tutorial, I will be showing how to hack a facebook account through phishing.

SO, HOW TO HACK A FACEBOOK ACCOUNT?

There are few techniques by which you can hack a facebook account but here the easiest way we'll discuss.

REQUIREMENTS

Phisher Creator ( Fake page generator)
Hosting ( To host a fake page). Either you can purchase one or also can use free hosting like 110mb.com. But in free hosting, the account will be suspended after a few logins.

STEPS TO FOLLOW

Download phisher creator and run it.
As you run it, you'll see a screen like the shown below. Here you can type the fields as I have done.
Once you hit the Create Phisher button, it'll create a fake facebook index page and fb_login.php file in the output folder.
Now you need to upload these both files index.html and fb_login.php to the hosting account.
After uploading the file, open the index.html file path. It will open up a page like same facebook page as you can see below.
We're all done, now we just need to copy the URL of our fake page and distribute it to the victims, you just have to trick them with your social engineering that how you convenience them to open this URL to login facebook. Once someone tries to login through your fake facebook page URL, you'll get their account username and password in the log_file.txt in the same directory of hosting where you have uploaded index.php and fb_login.php.

Hope it'll work fine for you and you have learned how to hack a facebook account. If you find any question or query related to this, feel free to comment below or you can also follow another way that might work well for you to hack facebook account.

Quando eu te falei em amor

Quando os meus olhos te tocaram
Eu senti que encontrara
A outra, metade de mim
Tive medo de acordar
Como se vivesse um sonho
Que não pensei em realizar
E a força do desejo
Faz me chegar perto de ti

Quando eu te falei em amor
Tu sorriste para mim
E o mundo ficou bem melhor
Quando eu te falei em amor
Nos sentimos os dois
Que o amanha vem depois
E não no fim

Estas linhas que hoje escrevo
São do livro da memória
Do que eu sinto por ti
E tudo o que tu me das
É parte da história que eu ainda não vivi
E a força do desejo
Faz me chegar de ti

Quando eu te falei em amor
Tu sorriste para mim
E o mundo ficou bem melhor
Quando eu te falei em amor
Nos sentimos os dois
Que o amanha vem depois e não no fim

André Sardet

Collide

The dawn is breaking
A light shining through
You're barely waking
And I'm tangled up in you
Yeah

But I'm open, you're closed
Where I follow, you'll go
I worry I won't see your face
Light up again

Even the best fall down sometimes
Even the wrong words seem to rhyme
Out of the doubt that fills my mind
I somehow find, you and I collide

I'm quiet, you know
You make a first impression
I've found I'm scared to know
I'm always on your mind

Even the best fall down sometimes
Even the stars refuse to shine
Out of the back you fall in time
I somehow find, you and I collide

Don't stop here
I've lost my place
I'm close behind

Even the best fall down sometimes
Even the wrong words seem to rhyme
Out of the doubt that fills your mind

You finally find, you and I collide
You finally find You and I collide
You finally findYou and I collide
Howie Day

Everything

You're a falling star, You're the get away
car.
You're the line in the sand when I go too
far.
You're the swimming pool, on an August day.
And You're the perfect thing to see.

And you play it coy, but it's kinda cute.
Ah, When you smile at me you know exactly what you
do.
Baby don't pretend, that you don't know it's
true.
Cause you can see it when I look at you.

And in this crazy life, and through these crazy
times
It's you, it's you, You make me sing.
You're every line, you're every word, you're
everything.

You're a carousel, you're a wishing well,
And you light me up, when you ring my bell.
You're a mystery, you're from outer space,
You're every minute of my everyday.

And I can't believe, uh that I'm your man,
And I get to kiss you baby just because I
can.
Whatever comes our way, ah we'll see it
through,
And you know that's what our love can do.

And in this crazy life, and through these crazy
times
It's you, it's you, You make me sing
You're every line, you're every word, you're
everything.

So, La, La, La, La, La, La, La
So, La, La, La, La, La, La, La

And in this crazy life, and through these crazy
times
It's you, it's you, You make me sing.
You're every line, you're every word, you're
everything.
You're every song, and I sing along.
Cause you're my everything.
yeah, yeah

So, La, La, La, La, La, La, La
So, La, La, La, La, La, La, La

Michael Bublé