Nexus

How to Install Flash in Kali Linux

Read

This is a small guide with instructions that users can copy paste and make Flash work in their Kali Linux. Copy paste supported instruction to make life simpler.

There’s two different ways you can install flash in Kali Linux:

Install Flash from Repository – Usually works
Install Flash Manually – For the rest failed at step 1

Now lets move on to instructions …

Choice 1: Install Flash from Repository:

This is fairly simple and easy and should work from most people out there:

In the terminal:

apt-get install flashplugin-nonfree

and then type in:

update-flashplugin-nonfree --install

That’s it. You flash should be working as expected. Go to testing section at the bottom on this post to confirm installation.

Choice 2: Install Flash Manually

In case you tried Choice 1 and failed, try this steps below to install and activate Flash manually.

Step 2.a: Download the latest Flash Player archive

Launch your browser (I assume IceWeasel?) and download the Flash Player in a separate folder.

At the time of writing this guide the available version was install_flash_player_11_linux.x86_64.tar.gz

Download and save the file in /root directory.

Users should take note that the version used in this guide is x64 which is 64-bit. 32-bit users should choose their versions accordingly.

Download link = http://get.adobe.com/flashplayer/
(Note: Choose Version to download tar.gz for other Linux)

Step 2.b: Untar archive and install

Follow the instructions below:

cd Downloads/
tar xzvf install_flash_player_11_linux.x86_64.tar.gz
cp libflashplayer.so /usr/lib/mozilla/plugins/

That’s it. Those who failed at choise 1, should be able to do this fairly easily. Now move on to ttesting to confirm flash is working as expected.

Testing

First of all, close your browser and re-open.

Many users actually forgets to do this step and later complains Flash ain’t working.

My advise is to bookmark this site to be able to reopen these instructions quickly, or simply copy these into a leafpad/vi/text file.

Go to following website to test if you have Flash player:

http://helpx.adobe.com/flash-player/kb/find-version-flash-player.html

NOTE: Adobe now serves an older version of Flashplayer for Linux. So the above page gives an error…. But just go to Youtube and if you can see a video properly, that means Flash is working as expected. THATS IS UNFAIR!! (Updated: 18/12/2013)

Hang on a second, the main reason you installed Flash is to watch youtube videos, so try that too.

Read More Add comment

How to install Firefox in Kali Linux

By 0x000216

Read

0 Comments

Read More Add comment

How to install Pyrit in Kali Linux?

By 0x000216

Read

0 Comments

How to install Pyrit in Kali Linux - blackMORE Ops

This guide (How to install Pyrit in Kali Linux) is part of a series that guides readers on How to install FGLRX, AMD APP SDK, CAL++ and Pyrit in Kali Linux. The idea is to install correct drivers in Kali Linux for your GPU and use CPU+GPU combination with Pyrit to make raw data crunching faster. An example would be to utilize this combined processing power to crunch though WPA/WPA2 capture file to find Wifi password.

Readers, please follow this series in the following order:

Install AMD ATI Driver (fglrx) in Kali Linux 1.x
How to install AMD APP SDK in Kali Linux?
How to install CAL++ in Kali Linux?
How to install Pyrit in Kali Linux?

Credits:

A big thanks goes to hexed6 from Kali Forums for his original post.

Thanks to hazeman for his CAL++ project in Sourceforge.

Thanks to Pyrit project

Check FGLRX Installation

First check if fglrx module is installed:

lsmod | grep fglrx

You should get a response similar to:

fglrx 2635205 82
button 12945 1 fglrx

Why Pyrit?

Pyrit allows to create massive databases, pre-computing part of the IEEE 802.11 WPA/WPA2-PSK authentication phase in a space-time-tradeoff. Exploiting the computational power of Many-Core- and other platforms through ATI-Stream, Nvidia CUDA, OpenCL and VIA Padlock, it is currently by far the most powerful attack against one of the world’s most used security-protocols.

Install Pyrit in Kali

Install prerequisites

apt-get install libpcap-dev

Remove existing installation of pyrit

apt-get remove --purge pyrit

If you are not using a clean install of Kali (not recommended), you may need to issue the following command:

rm -r /usr/local/lib/python2.7/dist-packages/cpyrit/

Download pyrit

svn checkout http://pyrit.googlecode.com/svn/trunk/ pyrit_svn

Install Pyrit

cd pyrit_svn/pyrit/
./setup.py build install

Install CAL++ plugin

cd ../cpyrit_calpp/

Edit setup.py

Edit setup.py file and modify/replace the followings:
find VERSION = '0.4.0-dev' and replace with VERSION = '0.4.1-dev'
find CALPP_INC_DIRS.append(os.path.join(CALPP_INC_DIR, 'include')) and replace with

CALPP_INC_DIRS.append(os.path.join(CALPP_INC_DIR, 'include/CAL'))

Save and quit, then issue the following command:

./setup.py build install

There will be several warnings, but hopefully no errors and everything will be installed.

Test cpyrit

List available core

pyrit list_cores
...

Output

The following cores seem available...

#1: 'CAL++ Device #1 'AMD GPU DEVICE''
#2: 'CPU-Core (SSE2)'
#3: 'CPU-Core (SSE2)'
#4: 'CPU-Core (SSE2)'

Benchmark Pyrit

pyrit benchmark
...

Output

Computed 7548.89 PMKs/s total.
#1: 'CAL++ Device #1 'AMD GPU DEVICE'': 5599.3 PMKs/s (RTT 1.4)
#2: 'CPU-Core (SSE2)': 685.6 PMKs/s (RTT 3.0)
#3: 'CPU-Core (SSE2)': 688.5 PMKs/s (RTT 3.0)
#4: 'CPU-Core (SSE2)': 691.9 PMKs/s (RTT 3.0)

Read More Add comment

Useful Google hacks

By 0x000216

Read

0 Comments

I’ve been searching Internet and found lots of interesting info about how to use Google for hacks and different intuitive ways to use search strings to get useful information. Googledorks already uses these to compile their lists. However I was unable to find some information and explanations in there. So I’ve decided to compile a nice guide for Useful Google Hacks and Tricks for readers and myself. I’ve included as much credits I can at the bottom of this post including authors websites, however, if I’ve missed any, feel free to comment and I’ll ensure they are included. Also note that, these information’s are publicly available in many websites, so it was quite hard for me to credit original authors/finders.

Useful Google Hacks

Google is #1 ranked search engine in modern internet. They are a giant who got access to your website, your mobile, your eCommerce site, your IRC site and god knows what else. That means they get a massive amount of information’s and data. Out of those there’s always the chance of leaked sensitive data such as server config, password file, backup file, proprietary materials such as eBooks, Music, PDF, Word Documents, Serial Number etc. In this post I will try to show how to use Google hacks to gather information and looks for exploitable information. If you find something important, please try to contact the owner and report the search string to Google rather than abusing it. I am not responsible how readers might or mights not use the information provided below. Read my Disclaimer and Privacy Policy.

Hacking Security Cameras

Now this is a known one, We’ve all tried it at some point. I am not even sure if this is allowed or not, but I definitely think IP cameras should be more secured so that people can’t look into your Baby Monitor or simple Home Security Cameras. Different vendors provided product specific patches in different times, be sure to spread the word so that you’re not the victim of unsolicited prying.

There exists many security cameras used for monitoring places like parking lots, college campus, road traffic etc. which can be hacked using Google so that you can view the images captured by those cameras in real time. All you have to do is use the following search query in Google. Type in Google search box exactly as follows and hit enter

inurl:”viewerframe?mode=motion”

Click on any of the search results (Top 5 recommended) and you will gain access to the live camera which has full controls.

You now have access to the Live cameras which work in real-time. You can also move the cameras in all the four directions, perform actions such as zoom in and zoom out. This camera has really a less refresh rate. But there are other search queries through which you can gain access to other cameras which have faster refresh rates. So to access them just use the following search query.

intitle:”Live View / – AXIS”

Click on any of the search results to access a different set of live cameras. Thus you have hacked Security Cameras using Google.

Hacking Personal and Confidential Documents

Using Google it is possible to gain access to an email repository containing CV of hundreds of people which were created when applying for their jobs. The documents containing their Address, Phone, DOB, Education, Work experience etc. can be found just in seconds.

intitle:”curriculum vitae” “phone * * *” “address *” “e-mail”

You can gain access to a list of .xls (excel documents) which contain contact details including email addresses of large group of people. To do so type the following search query and hit enter.

filetype:xls inurl:”email.xls”

Also it’s possible to gain access to documents potentially containing information on bank accounts, financial summaries and credit card numbers using the following search query

intitle:index.of finances.xls

Hacking Google to gain access to Free Stuffs

Ever wondered how to hack Google for free music or eBooks. Well here is a way to do that. To download free music just enter the following query on Google search box and hit enter.

“?intitle:index.of?mp3 eminem“

Now you’ll gain access to the whole index of Eminem album where in you can download the songs of your choice. Instead of Eminem you can substitute the name of your favorite album. To search for the eBooks all you have to do is replace “Eminem” with your favorite book name. Also replace “mp3″ with “pdf” or “zip” or “rar”.

Using specialized search strings in Google

If I remember correctly, recent Google update (from HTTP to HTTPS) and backend modification fixed some of the following issues. However, here goes:

METHOD 1

For Example we can find:
Credit Card Numbers
Passwords
Software / MP3′s
…… (and on and on and on) Presented below is just a sample of interesting searches that we can send to Google to obtain info that some people might not want us having.. After you get a taste using some of these, try your own crafted searches to find info that you would be interested in.

Try a few of these searches:

 intitle:”Index of” passwords modified
 allinurl:authuserfile.txt
 “access denied for user” “using password”
 “A syntax error has occurred” filetype:ihtml
 allinurl: admin mdb
 “ORA-00921: unexpected end of SQL command”
 inurl:passlist.txt
 “Index of /backup”
 “Chatologica MetaSearch” “stack tracking:”
 Amex Numbers: 300000000000000..399999999999999
 MC Numbers: 5178000000000000..5178999999999999
 visa 4356000000000000..4356999999999999
 “parent directory ” /appz/ -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
 “parent directory ” DVDRip -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
 “parent directory “Xvid -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
 “parent directory ” Gamez -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
 “parent directory ” MP3 -xxx -html -htm -php -shtml -opendivx -md5 -md5sums
 “parent directory ” Name of Singer or album -xxx -html -htm -php -shtml -opendivx -md5 -md5sums

Notice that I am only changing the word after the parent directory, change it to what you want and you will get a lot of stuff.

METHOD 2

Put this string in Google search:

?intitle:index.of? mp3

You only need add the name of the song/artist/singer.

 Example: ?intitle:index.of? mp3 jackson

METHOD 3

Put this string in Google search:

inurl:microsoft filetype:iso

You can change the string to whatever you want, ex. Microsoft to adobe, ISO to zip etc…

“# -FrontPage-” inurl:service.pwd

FrontPage passwords.. very nice clean search results listing !!

 “AutoCreate=TRUE password=”

This searches the password for “Website Access Analyzer”.

“http://:@www” domainname

This is a query to get inline passwords from search engines (not just Google), you must type in the query followed with the the domain name without the .com or .net

“http://:@www” bangbus or “http://:*@www”bangbus

Another way is by just typing

 “http://bob:bob@www”

“sets mode: +k”

This search reveals channel keys (passwords) on IRC as revealed from IRC chat logs.

 allinurl: admin mdb

Not all of these pages are administrator’s access databases containing usernames, passwords and other sensitive information, but many are!

allinurl:authuserfile.txt

DC Forum’s password file. This file gives a list of (crackable) passwords, usernames and email addresses for DC Forum and for DCShop (a shopping cart program(!!!). Some lists are bigger than others, all are fun, and all belong to Googledorks. =)

intitle:”Index of” config.php

This search brings up sites with “config.php” files. To skip the technical discussion, this configuration file contains both a username and a password for an SQL database. Most sites with forums run a PHP message base. This file gives you the keys to that forum, including FULL ADMIN access to the database.

eggdrop filetype:user user

These are eggdrop config files. Avoiding a full-blown discussion about eggdrops and IRC bots, suffice it to say that this file contains usernames and passwords for IRC users.

intitle:index.of.etc

This search gets you access to the etc directory, where many many many types of password files can be found. This link is not as reliable, but crawling etc directories can be really fun!

filetype:bak inurl:”htaccess|passwd|shadow|htusers”

This will search for backup files (*.bak) created by some editors or even by the administrator himself (before activating a new version). Every attacker knows that changing the extension of a file on a Web server can have ugly consequences.

Let’s pretend you need a serial number for Windows XP Pro.

In the Google search bar type in just like this –

“Windows XP Professional” 94FBR

the key is the 94FBR code.. it was included with many MS Office registration codes so this will help you dramatically reduce the amount of ‘fake’ porn sites that trick you.

or if you want to find the serial for Winzip 8.1 – “Winzip 8.1″ 94FBR

If you managed to find something useful using these search methods, I suggest you try out this guide:

How to hack Remote PC (Windows 2003 server) with Metasploits

Metasploit is a powerful took which helps users to pentest their system. It’s easy to use and it’s informative at the same time.

Using special search string to find vulnerable websites

Following search strings in Google will come up with bunch of results. You can try one at a time and run SQLmap to pentest a vulnerable website

inurl:php?=id1
inurl:index.php?id=
inurl:trainers.php?id=
inurl:buy.php?category=
inurl:article.php?ID=
inurl:play_old.php?id=
inurl:declaration_more.php?decl_id=
inurl:pageid=
inurl:games.php?id=
inurl:page.php?file=
inurl:newsDetail.php?id=
inurl:gallery.php?id=
inurl:article.php?id=
inurl:show.php?id=
inurl:staff_id=
inurl:newsitem.php?num= andinurl:index.php?id=
inurl:trainers.php?id=
inurl:buy.php?category=
inurl:article.php?ID=
inurl:play_old.php?id=
inurl:declaration_more.php?decl_id=
inurl:pageid=
inurl:games.php?id=
inurl:page.php?file=
inurl:newsDetail.php?id=
inurl:gallery.php?id=
inurl:article.php?id=
inurl:show.php?id=
inurl:staff_id=
inurl:newsitem.php?num=

I have shown you this info to let you know that there is a real risk putting your info online. If you do want to buy stuff online make sure the site you are using is secure normally if a site is secure you will see a pop up saying you are now entering a secure part of the site or a symbol of a padlock at the bottom of your browser or just use pay pal, pay pal is very safe to use. But most of the time just use common sense if a site looks cheap it normally hasn’t got the protection to keep your info safe. I am not saying don’t buy stuff online because that is one of the best thing’s about the internet i am just saying be aware of websites that want your bank details and there is no symbol of a padlock at the bottom of your browser.

Thanks for reading. Please share.

Sources and Credits as due:

Read More Add comment

Nexus

How to Install Flash in Kali Linux

Choice 1: Install Flash from Repository:

Choice 2: Install Flash Manually

Step 2.a: Download the latest Flash Player archive

Step 2.b: Untar archive and install

Testing

How to install Firefox in Kali Linux

Introduction

Close IceWeasel

Install Firefox in Kali Linux

Testing

How to install Pyrit in Kali Linux?

Credits:

Check FGLRX Installation

Why Pyrit?

Install Pyrit in Kali

Install prerequisites

Remove existing installation of pyrit

Download pyrit

Install Pyrit

Install CAL++ plugin

Edit setup.py

Test cpyrit

List available core

Output

Benchmark Pyrit

Output

Useful Google hacks

Useful Google Hacks

Hacking Security Cameras

Hacking Personal and Confidential Documents

Hacking Google to gain access to Free Stuffs

Using specialized search strings in Google

METHOD 1

METHOD 2

METHOD 3

Using special search string to find vulnerable websites

Recent Posts

Facebook