Pentest

Four Types of Nmap Scans Every Beginner Should Know (Part-2)

Fadıl

This is the second part of Four types of nmap scans every beginner should know and you can read the first part here. I have discussed TCP and TCP connect scan there in that post and if you didn’t read it then first go and read it

Ping Scan(-sP)

Ping scan is a normal scan that you can perform without using nmap i.e.. with your default terminal in Linux or Unix based systems and from cmd in Microsoft Windows systems.

Top 10 Operating Systems Hackers Use!

Fadıl

Many users have a problem to choose the operating system, while many don’t want to change, Hackers have problem with their pre-installed Windows operating system.

Now its time to pause window and switch to some more advanced operating system for ethical hacking, pentesting. Weakness in the operating system is best for a hacker to gain access, while open source makes the operating system to run at a better cost.

Remember ethical hackers can only fight with another black hat when they are on the same platform.

How To Ensure Your Site Is Safe From Day One

Fadıl

Protecting your website needs to be your priority from the very first day that it’s online.  In essence, website security is something you should build right into the foundations of your web pages and hosting servers.

Why? Because your website, whether it’s loaded with financially valuable information or not, is extremely valuable to hackers for all sorts of reasons. For many malicious online players, simply having access to your hosting server or your sites part of a shared server is prize enough to make hacking you worthwhile.

Brute Forcing SSH with Hydra

Aytekin Done

The secure shell, SSH protocol is a network protocol that is used to establish an encrypted channel across an open network between a server and a client. In general, a public/private key pair allows users to log in to a system without requiring the password. The public key is present on all systems that require a secure connection. The authentication is based on the private key, well SSH verifies the private key against the public key. On the target systems, the public key is verified against a list of authorized keys that are permitted to remotely access the system. This supposedly secured the communication between the client and the server. SSH is vulnerable to a Brute-Force Attack that guesses the user’s access credentials. For this example, we will use a tool called Hydra. It also supports attacks against the greatest number of target protocols. Let’s start cracking. There are two versions of Hydra. The command-line version, and the GUI version, which is called Hydra-GTK.  So for this example, we will invoke Hydra from the command line.