The importance of trust and integrity in a VPN provider

Troy hunt's post

Unprotect MS Word files, check ransomware code

An interesting tool to have (especially for ransomware): How to unprotect vb-code from MS Word.

No More Ransom

Europol in collaboration with others have introduced a simple portal to provide all know antidotes to the common cryptoware out there:   https://www.nomoreransom.org/

Update 29-Jul-2016:

Victims of the Chimera ransomware were thrown a lifeline this week after a rival malware author appeared to leak the decryption keys online.

Kudos to competing hackers as well?!

Receive SMS - without actually owning the number

There are lots of websites which ask you for a mobile phone number, and send a sms verification. Top 10 websites which are useful to find a disposable number.

Veil Framework – Antivirus Evasion Framework

As if there weren't already enough frameworks to help the bad guys get organized.

The Veil-Framework is a collection of red team security tools that implement various attack methods focused on antivirus evasion and evading detection.

Details here.

Introducing GoPhish

Gophish – Open-Source Phishing Framework
Making it even easier to create phishing campaigns.

Introducing: Diskpart

Ever thought of having a virtual drive on your Windows PC? Instead of partitioning your hard-disk, how about a virtual container, which would be completely portable and can be carried to any Windows PC?

No special downloads needed: DiskPart is build into Windows. This batch file could help speed things up a bit. If security is of a concern, you could easily use Bitlocker to encrypt the entire drive.

Tool: KeeFarce

KeeFarce allows for the extraction of KeePass 2.x password database information from memory. The cleartext information, including usernames, passwords, notes and url's are dumped into a CSV file in %AppData%

Details here

Introducing Tor Messenger

Much welcomed! Client currently supports:

• Jabber (XMPP) chat protocol
• IRC (Internet Relay Chat)
• Facebook Chat
• Google Talk
• Twitter
• Yahoo!

 Details here

Free Open Source Ransom Ware

Good news for bad guys, we now have an open source ransomware [Hidden Tear], which can be tweaked and used by anyone with literally basic scripting skills. Features include:

• Uses AES algorithm to encrypt files.
• Sends encryption key to a server.
• Encrypted files can be decrypted in decryption program with encryption key.
• Creates a text file on Desktop with given message.
• Small file size (12 KB)
• Undetectable by antivirus programs

Access WiFi From 2.5 miles away!

A $200 device, which will help with anonymity (and much more I am sure)!

Proxyham is comprised of a WiFi-enabled Raspberry Pi computer, along with a three antennas setup. One antenna is used to connect to a source Wi-Fi network at a public place, and the other two antennas are used to transmit the Wi-Fi signal at a 900 MHz frequency.

By relying on a 900 MegaHertz radio connection, ProxyHam effectively connects to a far-away Wi-Fi, with a range of between 1 and 2.5 Miles, depending upon certain interference factors.

Find professional hackers

Now a platform (like finding a freelancer), but out in the open, and not hidden behind tor.

Update 14-Jun-15:
An article which speaks on the kind of requests getting posted on this website.

Introducing Patch My PC

Windows tool, to help patch each and every app/tool on the system. Light weight and portable, must check out.

Introducing MakuluLinux Xfce - fastest Linux Distro Yet!

This distro has the design and speed to impress.

Tor & Sony Playstation DDoS-ed

More troubles for Sony, as their PSN gets DDoS-ed on xmas day! The same group (called Lizard Squad) also attacks Tor - enough to cause a scare and force them to issue a warning.

Some information on Lizard Squad - seems like some kids seeking attention (which is common for DDoS attacks). However, since they have been giving interviews to BBC, we maybe looking at an arrest in the making.

More information out. The sqad is offering DDoS services for a fee. However, the whole setup looks amateurish. Back to my earlier thoughts, that the group seems only minimally competent, and looking for some lime-light.

Update 10-Jan-15:
Not surprisingly two members of the squad get arrested.

List of insecure IP Cams

Update 24-Nov-2014:
Uhhh... the website's guy got a legal warning to take down the website. Now he has a message on the website saying, "Programmer is looking for a good remote job. Skills: Linux, FreeBSD, C/C++, Python, MySQL "
Pity... but funny!!

Update 08-Nov-2014:
A website that indexes all (and a lot!) the cameras running with the default password

This site has been designed in order to show the importance of the security settings. To remove your public camera from this site and make it private the only thing you need to do is to change your camera password.

Arachni - Web Application Security Scanner Framework

A new tool (version-1) is out, for web application scanning. They have a commercial and a free version.

Data Breaches Visualized

A visual representation of the data breaches.

PDF Analysis & Password Cracking Tool

Introducing ParanoiDF

"Bugcrowd is all about connecting independent security researchers with companies big and small"

Introducing BugCrowd