Thursday, September 15, 2016

OSWAP Directory Buster

A good hacker will not directly attack a website without proper information gathering. It is a good practice of understanding the structure of a website by busting the directories and files.

This may give you an opportunity to find some hidden and confidential dictories and files that are considered to be inaccessible by the public. This may lead you to gain important information like password, encryption keys, certificate files etc.

Before getting into it, I ll show you some additional details
  •  Code 100 -> Continue : codes in this range denotes that the user / client request has not been completed for some reasons but the client can continue.
  •  
  • Code 200 -> Successful : Codes in this range denotes that the request was successful.
  • Code 300 -> Multiple Choice : Codes in this range denotes bad request . The most common codes are 404 [not found ] and 403 [forbidden].

Busting Time 

Goto Applications -> kali LInux -> Web Application -> Web Crawlers -> dirbuster
 Now, open DirBuster and enter the target website. Don't forget to mention http | https and port number 80 | 443 . eg: http://www.examplewebsite.com:80


Wordist:

Next, all you have to do is to choose the wordlist which contains the directories and files names. Here I've chose /usr/share/dirbuster/wordlists/directory-list-2.3-medium.txt

Finally, when we click the "start" DirBuster will generate GET requests and send them to the target website with a request for watch of the files and directories listed in our wordlist.
Once everything finished all the directories and files will be busted to you.

Saturday, August 20, 2016

Top 10 Activities in Internet that makes you sit in Jail.



1.OPEN WIFI

Are you having a open wifi access at your home? Be ready to answer cops about the purpose.
* It is considered to be an offence to have an open wifi access point because there are chances to sniff the packets of the users who are using your account.
* Also, anyone can use your network with criminal intentions,that you may be answerable.

Better use WPA/2 with strong passwords to avoid getting caught.

2. Deleting your Search History

Although it is usual for us to delete the search history in our browser but there is a problem of doing it. If you happen to get caught for some hacking allegations cops will check your browser history, if it is not there..Then you have to sit behind bars. Even Indian Government  insisting people to have their search history for the past three months..

3. Posting Offensive and abusive contents in social Media.

This is simply a wrong doing of posting offensive and abusive contents in social media, may be they wont consider this if you do this against some common people, but if you do against a actor or actress then you have to face many consequences. So dont post gossips online.

4. Online Gambling

This is quite banned in some of the countries but not in many countries because of the implementation in the deep web. So better check for the policies before playing gambling online.

5. Dancing videos in Online

You'll be arrested if the cops find you dancing in a video.. though it is not illegal but it is banned in some mid east countries.

6. Commenting on Facebook and twitter.

Check before posting your comments in your facebook or twitter.. abusive comments are considered to be an offence. Also confirm that no one is using your Facebook or twitter instead of you.. you have to face the consequences.

7. Sharing Files in Internet

Do not share files that consist of malicious contents. If the owner of the website found that you are sharing a malicious file through his website..You have to sit behind bars..you may ask how can they find it, the answer is often website owners has malicious file checking system in their server.

8. Using Sniffers in Public Network.

It often happens for hackers to use public networks for sniffing passwords and raw data. It is an offence if you get caught for using sniffers in public network.

9. Accessing others account.

This is also consider as a part of cracking which is exactly illegal. Don't open others account even if you have their passwords and details.

10.  Plagiarism

If want to add someones content in your website, you have to ask them their permission. Most of the content posting websites will have a content tracking system that was monitored by 3rd party website. If you post you'll get caught for plagiarism.

There are many activities which can put you behind bars but this is the top most.