Technopits

 

 

 Nslookup

 DNS ( Domain Name Servers ) contain all the sensitive information which is essential for to communicate with the network.  

If you are going to send or  receive mail then your network require MX record which record contains the IP address of the mail serve.

  Example

04/18/00 13:55:37 dns example.com
Mail for example.com is handled by server1.example.org
Canonical name: new riders.org
Addresses:
40.40.40.5
 40.40.40.15

That's it attacker gets your ip address. 

Now attacker can start Mapping out the network.

Another alternative for getting your ip address is that simply PING the domain name.

For example .

Pinging newriders.com [20.20.20.8] with 32 bytes of data::

Request timed out.

Request timed out.

Ping statistics for 20.20.20.20:

Packets: Sent = 2, Received = 0, Lost = 2 (100% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms Control-C

After finding your IP address now attacker has a couple of reason to   used this  as a staring point to start with it . 

 We will continue you to update your security !! Subscribe us  and like us.

  We Would like To Have an Interactive session So Comment Your Questions Below ...

Be Updated Be Safe !!

Cheers !!

 

 

 

Spoofing

It  is the process in which somebody tries to get access to your system by pretending as he/she is at trusted person on your system . In this person  alter  his  identity  so anyone can trust them because they have a fake identity of your friend or any relative .

Types of Spoofing

It is of four types :

• IP spoofing.

In this attacker switch it's IP address to gain information and  to get access  on your computer

• Email spoofing. 

In this attacker try to get essential information by sending you a frank emails . They ask you give your valuable information as reply .Your response to their emails will help them in crackiong your password    

• Web spoofing. 

 This is the most popular attack  on the web in this attacker try install their hacking tools on your system in the form of viruses after that they get all your information easily That is they try to install a key logger on your system after that they easily get your password I.D's and many more

 • Non-technical spoofing. 

This is attack involves corruption activities by the employ of a company  or worker who knows the sensitive information  about company  or a system 

Be Updated Be Safe !

Cheers !!

Brute-force Attacks

If  attacker want to crack a  password then he can crack any passwords by  Brute-force attacks he has to try every possible combination of letters, numbers, and special characters until he succeeded  . This is a time taking  method it actually depends on  the efficiency of the processor of  your computer
 

 Hello Readers !!


Generally Unix and Linux base system are suitable for this kind of attacks. And works on scripts . When the core operating system or application is installed, the manufacturers distribute sample files and scripts so that the owner of the system can better

These system works and can use the scripts to develop new applications. From a developer’s standpoint, this is extremely helpful. The most of the people think that Why to create our own  when you can use someone else’s script and just build onto it? In one of my jobs, I programmed and developed source code. Being able to use sample source code as a template helped increase the development time tremendously.
 



One of the main areas where there are a lot of sample scripts is in web development. The earlier versions of Apache web server and some web browsers came with several scripts and most of them had vulnerabilities. Also, a lot of the new scripting tools that come with web browsers enable developers with minimal programming knowledge to develop applications in a relatively short period of time.

 



In these cases, the applications work, but what’s going on behind the scene is usually pretty scary from a security standpoint. There is usually a lot of extraneous code and poor error-checking, which create an open door for attackers. Active Server Pages (ASPs) are a perfect example. Much of the early development that occurred with ASPs left a lot of backdoors that attackers are exploiting. An example is the default web msite that ships with IIS. It has the remote admin tools available from the main page. These tools can be used by an attacker to compromise a system.

Be Updated  Be safe  

cheers !!

Hello Readers !!


These attacks take advantage of the lack of security in   today’s software.In the programming development cycle there are levels in which  one of them is a security check level which is been ignored by the developers because they want to work more and earn more &
It also  major problem with most software that is currently being developed is that the programmers and testers are under very tight deadlines to release a product. Because of this, testing is not as thorough as it should be. To add to this, the problem becomes worse since software that is being developed has so much added functionality and complexity that even if there were more time to test, the chances of testing every feature would still be small. Also, until very recently, consumers were not concerned about security. If it had all of the great features they needed they were happy, regardless of the number of security vulnerabilities that existed in the software. Security should not be an add-on component. To provide a high level of security, it has to be designed into the application from the beginning.

 
Another major problem found in most programs is error-checking. Poor or
nonexistent error-checking accounts for a large number of security holes
found in today’s programs. Buffer overflows are just one example of this
problem.

Be Updated  Be safe  

Cheers !!