Crackers Methods

Security researchers from PhishLabs have come across a new phishing trend that’s targeting mobile device owners exclusively, with “the highest proportion of attacks” aimed at Facebook users. This new tactic relies on the fact that mobile browsers have very narrow URL address bars, which prevents users from viewing the entire contents of a link. Phishers […]

Cross-site request forgery (CSRF) is a common web application vulnerability, in which an attacker/hacker fools the victim’s browser into generating requests to a website which performs specific actions on behalf of the logged in user or the victim. The web server receiving the request and performs the desired actions of the request, which looks similar

“Mazda cars with next-gen Mazda MZD Connect infotainment systems can be hacked just by plugging in a USB flash drive into their dashboard, thanks to a series of bugs that have been known for at least three years,” reports Bleeping Computer. “The issues have been discovered and explored by the users of the Mazda3Revolution forum

When it comes to simplicity, keystroke injection attacks are ideal. With the tools available in today’s cybersecurity market, the execution of a keystroke injection attack is both easy and effective. The most popular and easily retrieved tool on the market is Hack5’s USB Rubber Ducky. Read more  

It’s been said a million times before: security scanning tools are a necessity for pen-testing, information gathering, and sometimes general computer use. When fulfilled, a security scanner can give you a head start on upgrading your security applications. For pen-testers, a security scanner can be the making or breaking of an important job. Due to

Hydra is a password guessing (cracking) tool that can be used in a wide range of situations, including with the forms-based authentication commonly used in web applications. It is a quick and stable network login hacking tool which uses dictionary or brute-force attacks to try several passwords and login combinations against a login page. Of

This tutorial covers the usage of a very powerful open source intelligence (OSINT) tool known as Maltego. This tool has been mainly designed to harvest information on DNS and whois, and also offers options for search engine querying, SMTP queries, and so on. Maltego offers broadly two types of reconnaissance options, namely, infrastructural and personal.

First of all let us start to explain what port scan and ping sweep is but we decided to lift the explanation from  linuxjournal;  A port scan is a method used by intruders to discover the services running on a target machine. The intruder can then plan an attack on any vulnerable service that she finds.