listchan©

Search This Blog

Clickjack Tester

Get link
Facebook
X
Pinterest
Email
Other Apps

Clickjacking Exploit Proof-of-Concept

Get link
Facebook
X
Pinterest
Email
Other Apps

More Features

Clickjack Tester

Search This Blog

List: Protecting your Windows Computer

*Photo from Pixabay Microsoft Windows has the biggest demographic of computer users in the world. Simply put: Most computers are Windows. It is thus very important to learn some basic cybersecurity skills and cybersecurity tools when using Microsoft Windows machines. This is a non-exhaustive list, however it should provide some background on how to properly protect a Windows PC, at least on the most basic level. 1. Windows Defender Update > Open Windows Defender by going to Start, then typing "Windows Defender". From there, click "Windows Security". Under "Virus and Threat Protection", go to "Virus and Threat Protection Updates", and update it. 2. Windows Defender Scan > The most basic is "Quick Scan", which is under the front page of "Virus and Threat Protection". It does a heuristic scan of the computer's running services and is generally well enough for simple malware. 3. System File Checker > Go to "c...

List: Good References for Cybersecurity Experts

Photo from Pixabay Good References for Cybersecurity Experts Reading and learning are very important in cybersecurity. This is because a lot of new things in the infosec world happen all the time. 1. News compilations, Example: https://threatpost.com/ > These websites are good as compilations of different news from different topics related to cybersecurity. They are not limited to a specific specialization but have advisories on them from everything like webapp defense to CISA practices. 2. Vendor-specific news, Example: https://bits.debian.org/ > Some vendors ie Windows, Cisco, etc have their own blogs or news logs with their RSS feeds that are maintained by the vendor company itself. This means it is updated according to the software's needs 3. Cybersecurity-specific, enterprise blogs, Example: https://www.bitdefender.com/blog/hotforsecurity/ > Some vendors in enterprise solutions such as Kaspersky o...

List: Protecting Your Facebook, Twitter, or Instagram Accounts

Protecting your Social Media Accounts (Facebook, Twitter, Instagram, etc) Your social media accounts can be hacked by those who want to ruin your day. There are many ways you can protect yourself for those hackers, and thankfully these are very easy and wouldn't take too much effort. You will only need a few minutes of your day to get them done. 1. Have different passwords for different accounts Different passwords for different accounts mean that if one account is compromised the others would not be in trouble. For example, you can have a different password for Facebook, Gmail, and Twitter, which means that if a hacker got the password for one, they won't get it for all of them. 2. Do not click links that you do not trust Some websites can have weaknesses (vulnerabilities) that can be used to attack your accounts if you were to click on them, sometimes by stealing cookies or infecting your device. 3. Do not download or run apps you do not trust Sometimes apps can be ...

Cybersecurity certification - certificates of the future

*Photo from Pixabay It is important that one has a proper roadmap of what certificate to have so as to do properly. Certificates from different organizations provide you with extra credibility. Some companies look for these certificates. Some companies also lean toward a specific skillset. You have to note that some organizations are more trustworthy than others, but in general, these certification organizations help make your CV more attractive. Organizations to look out for in cybersecurity are: 1. CompTIA 2. ISC(2) 3. Offensive Security 4. EC-Council And many more. You have to realize that this is not the only ones in the list of good companies -- there are plenty more out there. Each organization tends to follow a specific lineup of certificates, however it is possible to make your own along the way. They tend to go from entry-level to advanced. However, skipping can be an option. Examples of Offensive Security certificates https://www.offensive-security.com/ 1. PWK -...

List: To-do List When Making VPS/RDP

Photo from Pixabay To-Do List When Making DigitalOcean VPS/RDP This is a to-do list of what to expect and follow when making a DigitalOcean VPS and eventually giving it Remote Desktop connection. Follow them step-by-step. They were made to be as specific as possible. This has been tested as of July 2021. 1. Have a credit card ready with at least 5 dollars 2. Sign up for DigitalOcean account https://cloud.digitalocean.com/registrations/new 3. Verify your email 4. Sign in https://cloud.digitalocean.com/login 5. Input payment info 6. Make a DigitalOcean Project https://cloud.digitalocean.com/projects 7. Create > Droplet 8. Choose Debian > Basic > Regular Intel with SSD 9. Choose $10/mo or $15/mo (don't worry, you have free credit) 10. Choose a datacenter 11. Choose Authentication > Password 12. Create a root password 13. Click "Create Droplet" 14. Go to CMD or Terminal then type ssh <root@yourDropletIPaddress> 15. Type "yes" 16. Log in wi...

List: User Agents

Photo from Pixabay User Agents Useful when doing stealthy VAPT, or when trying to view a website as another device. "User-agent" is the header in the HTTP Request that says what device you are viewing the server as. Ie What browser, what OS, what version, even region sometimes. Etc. This allows the server to change content dependng on what your device is. 1. Mediapartners-Google > Used by Google Ads for scraping content that should be shown in advertisements 2. Chrome on Mac: Mozilla/5.0 (Macintosh; Intel Mac OS X 11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 > Used by Google Chrome if run on a Macintosh OSX device like a Macbook etc 3. AdsBot-Google-Mobile-Apps > Similar to Mediapartners but more tailored towards mobile apps 4. Firefox on Windows 10: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0 > Used by Mozilla Firefox if run in a Windows 10 Machine 5. iPad: Mozilla/5.0...

List: Cybersecurity tools

Photo from Pixabay Basic tools in cybersecurity 1. Google Dork Cheatsheet https://gist.github.com/sundowndev/283efaddbcf896ab405488330d1bbc06 2. Metasploit https://www.metasploit.com/download and BEEF https://github.com/beefproject/beef/wiki/Installation 3. Nmap https://nmap.org/download.html 4. Burp Suite https://portswigger.net/burp/communitydownload and Zaproxy https://www.zaproxy.org/download/ 5. Test labs e.g. https://information.rapid7.com/download-metasploitable-2017.html 6. Dirb https://tools.kali.org/web-applications/dirb and DirBuster https://sourceforge.net/projects/dirbuster/ 7. WhatWeb https://github.com/urbanadventurer/WhatWeb or Wappalyzer https://addons.mozilla.org/en-US/firefox/addon/wappalyzer/ 8. LinEnum https://raw.githubusercontent.com/rebootuser/LinEnum/master/LinEnum.sh or Linpeas https://raw.githubusercontent.com/carlospolop/privilege-escalation-awesome-scripts-suite/master/linPEAS/linpeas.sh 9. Winpeas https://raw.githubusercontent.com/carlospolop/pr...

Powered by Blogger