How to Show/Hide Files using Command Prompt

This Trick will help you to show/hide files & folders using command prompt.
This trick is not similar to hiding files from folder options area which is not that secured compared to this.
Only you can make it visible if you know the file name or folder name.
It is useful when you want to see some system folders and files because these type of operations can't be possible by general method.
And if your PC is virus infected,in that case this command will help you to find and that delete virus containing file and often we see sometimes we stored some data in PEN DRIVE but when we open explore PD the data is not visible and we think that maybe file is deleted and but when check space in PD,some space is covered because the file or folder is hidden due to virus or may be due to other reason.
so Just try it out.Only a two step process.

1.   Press windowkey+R: Run command dialog box appears. or go to start and click run.
   
2. Now type "cmd" and hit enter. A command prompt window displays.
3. Now type attrib +s +h E:\myfolder and hit enter.
   
   
   
4. The folder "myfolder" will be hidden which cannot be viewed by any search options.
5.  To view this folder again, use the same command but replace '+' with '-' on both flags 's' and 'h'
   

Transparent Proxies in Squid

With, the extremely uncontrollable growth in the number of Hackers, not only system administrators of servers have to worry about the security of their system, but even if you are running a standalone PPP Linux box, you simply cannot afford to ignore your system's security.

If your system is the main server which communicates with the external untrusted network called the Internet, or even if you simply use your linux box to connect to your ISP and surf the net through PPP, then you should definitely think about installing a firewall on your system.

The preferable and the best option in this case is to install a commercial firewall. However, this option is not always possible and is more often than not unnecesarry. Buying, installing and configuring a good commercial firewall is not only expensive but most beginners find it pretty formidable. OK, I do not want to go through the hassle of a commercial firewall, what do I do? Well, 'ipchains' hold the key for you.

The Firewalling code in the Linux Kernel chnaged considerably after the release of Kernel 2.2. Since then, a lot of new utilites and features have been added. Amongst these improvements, is a kewl feature called 'ipchains', which is primariarly used for configuring the firewalling rules and other such related details.

*************************

HACKING TRUTH: The usage of ipchains is very much similiar to that of ipfwadm. For more information(like,help on setting rules.) refer to the wrapper script:

                                                      /sbin/ipfwadm_wrapper

**************************

Anyway, in this manual, we will learn about how to use ipchains to configure a transparent proxy on your linux box.

So what exactly is a transparent proxy?

Well, a transparent proxy is basically something which fools the client (who connect to the server running the

transparent proxy) into believing that they are directly connected to the web server (and not through a proxy.). OK, I am sorry, that is not exactly the correct way to describe it. ;-) Read on for a better description.

Well, a transparent proxy works in the following manner: It listens to a specific port (like the HTTP port i.e. 80) for any connections. As soon as it gets a request for a connection (in this case a HTTP request for a file.) then it redirects the user i.e. connection to another port on the same machine. Now this new port to which the connection is transferred is actually running a Proxy.

So, in affect what happens is, the client i.e. the user who connects to the server where the transparent proxy installed, assumes that it is directly connected and is communicating with the HTTP daemon. However, the truth of the matter is that all communication is being carried out via the proxy running on the server. All this would be clearer when you see the below picture of what happens:

Client --------> Server(Port 80 or HTTP)

The rules of the ipchains transfers client to the port where the proxy is running. So, now the communication takes place in the following manner:

Transparent proxies with Squid By Ankit fadia hackingtruths.box.sk Proxy Servers

Client --------> Server(Port of Proxy) --------> Server (Port 80 or HTTP)

So, the connection to Port 80 is indirect, however the client has little idea about it.

Now, that you know the working of transparent proxies, let us get down to configuring them on your machine.

However, before we get down to the actual process, you need to check whether this is possible on you system or not.

Simply look for the file:

                                                        /proct/net/ip_fwchains

If you have this file, then well and good, else you will have to recompile your Kernel. However, I am sure almost 98% of you would definitely have this file.

NOTE: In this case, we will be transferring all connections from Port 80 to Port 8080 where Squid runs by default.

You could always transfer connections to any proxy port of your choice, by changing the revelant parts. I have taken up Squid, as it is the most common one.

Firstly, in order to transfer all connections from Port 80 to Port 8080, add the following lines to your startup script, so that they are executed each time you boot up.

Note: The server IP is xxx.xx.xx.xx

ipchains -A input -p TCP -d 127.0.0.1/32 www-j ACCEPT

ipchains -A input -p TCP -d xxx.xx.xx.xx/32 www-j ACCEPT

ipchains -A input -p TCP -d 0/0 www-j REDIRECT 8080

NOTE: If you are using ipfwadm, then add the following lines to the startup script:

ipfwadm -I -a-a -P tcp-s any/0 -D 127.0.0.1

ipfwadm -I -a-a -P tcp-s any/0 -D xxx.xx.xx.xx

ipfwadm -I -a-a -P tcp-s any/0 -D any/0 80 -r 8080

Once this is done, then configure Squid by following the below process. Please note that you need atleast Squid 2.x to be able to make use of Transparent Proxies. Anyway, to configure Squid, edit the,                                                                          /etc/squid/squid.conf file and

make the following changes:

httpd_accel_host virtual

httpd_accel_port 80

httpd_accel_with_proxy on

httpd_accel_uses_host_header on

Then,restart Squid by typing:

                                                      /etc/rc.d/init.d/squid.init restart

Linux Users: I also suggest you compile and execute the following C program. It is simply great and allows you to configure or control Firewall rules etc.

Yup, your transparent proxy is configured and running!!!

Kali Linux offers new brand of pen-testing tools

By Selena Frye

BackTrack Linux no more. The popular open source package of penetration testing tools now has a new platform and a new name.

BackTrack Linux, a specialized distribution of penetration testing tools, has long been a favorite of security specialists and IT pros. It is often a tool recommended in TechRepublic discussions and in round-ups of open source tools for IT pros. The creators of BackTrack recently announced that in lieu of a new version, they have instead built a brand new distribution called Kali Linux that fulfills the same general purpose.

Writing five days after its initial release, the Kali team reported over 90,000 downloads and had already added more documentation and even an early bugfix. But what exactly is new in Kali and why did they scrap BackTrack and start all over? After putting together a wishlist of what they wanted in the next version of BackTrack, the developers realized they were looking at major changes:

We realized it would be easier to start afresh, using new technologies and processes than to try to patch up our existing environment to conform to Debian policies and standards.

So the first big change was platform — from Ubuntu to Debian. Debian-compliant packages and Filesystem Hierarchy Standard (FHS) compliance were two things that fed into this decision: “What this means is that instead of having to navigate through the /pentest tree, you will be able to call any tool from anywhere on the system as every application is included in the system path.”

Here are some of the highlights of Kali:

• More than 300 penetration testing tools included
• Still funded by Offensive Security
• ARMEL and ARMHF support, including for these arm devices: rk3306 mk/ss808, Raspberry Pi, ODROID U2/X2, and Samsung Chromebook
• Fully customizable
• Multilingual support
• Still free!

Here is a link to the download page, where you can read more about their recommendations and the versions available.

Hack Gmail/ Yahoo /Facebook Password by brute force attack using Hydra - Backtrack

First, lets take a quick overview about what we're going to do here. We'll apply different passwords on the target's Gmail id from a password list using Hydra which is available with Backtrack. That's why I still love it. :) It'll easily get back the password on successful login.

Requirements:

• A password.txt file with a list of expected passwords, Either write your own
• Backtrack 5 (any version)
• Internet Connection

Lets Hack something for real,

Turn on your Backtrack machine :P
Navigate to Applications > Backtrack > Privilege Escalation > Password Attacks > Online Attacks > hydra-gtk and launch the hydra tool

 Now, under the Target tab set following parameters
Single target > smtp.gmail.com
port > 465
Protocol > smtp
and check > use SSL, show attempts and Be Verbose

Click on Password tab, set these parameters
Username > target email address
Password List > select the Password.txt file
check the option > try Login as password

Now move to start tab and click on start button at the bottom to begin the attack.

If everything goes well, then you'll get the password.



Note: Using a brute force attack from a Password list will never guarantee any successful result it depends how lucky you're. Hacking someones account without their permission is a crime so do use at your own risk. I'm not at all responsible in case you get your ass behind the bars.

Happy Hacking. :)

"The quieter you become, the more you are able to hear."
SOURCE: www.hackthedark.com
POSTED BY: INCR3DIBL3 H4CK3R