What Is Acunetix ?

Hi Guys...This is DJ Alone...Today I Was Just Checking My Friend's Site...and Found Lot Of Vulnerabilities In It...How To Check Ur Website is Vulnerable Or Not... So Let's See How What It Can Do For Us ?

What Is Vulnerability ?

In computer security, a vulnerability is a weakness which allows an attacker to reduce a system's information assurance...
Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw... To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness. In this frame, vulnerability is also known as the attack surface...

What Is Acunetix ?

Acunetix is a Vulnerability scanner That Helps U To Find Vulnerability In Ur Site... It Is A Most Used Tool...By Using Acunetix U Can Easily Find Vulnerabilites In Ur Site...U Can Easily Fix Errors & Secure Ur Website Easily...


Is Your WebSite Vulnerable ?

• 70% of all cyber-attacks target web applications
• Make sure your website isn't vulnerable to web attacks
• Check if it is with Acunetix WVS

Easily Scan Your Website For

• SQL Injection
• Cross-Site Scripting
• Other vulnerabilities

Generate Regulatory Compliance Reports

• PCI DSS Data
• OWASP Top 10 Vulnerabilities
• HIPAA Compliance Reports

Advanced Penetration Testing Tools

• HTTP Editor
• Sniffer
• Fuzzer
• and more...

Scan Web 2.0 Applications

• State of the art CSA engine
• Comprehensive scan of latest web technologies

In Next Post I Will Post The Link Of Acunetix For My Readers...

Posted By आर्यावर्त8:31 AM

0

Continue Reading

BackBox 3.1 Released

Hi Guys...This is DJ Alone... This Post is About BackBox Linux...

Recently I Has Installed BackBox in My PC... And I'm In Love With It...

So, When I See It's New Version Released...I Had Decided To Make This Post...

BackBox is a Linux distribution based on Ubuntu. It has been developed to perform penetration tests and security assessments. Designed to be fast, easy to use and provide a minimal yet complete desktop environment, thanks to its own software repositories, always being updated to the latest stable version of the most used and best known ethical hacking tools...

BackBox Desktop

Black Box is the another version of the Linux distribution. It is one of the Powerful Distribution of Linux for the pentester and the security assessment guys. It is totally featured with Network and informatic System Analysis tools. There are tonnes of tools that are used by an Ethical hacker and a Pentester.
Finally Black Box team have announced the new release of Black box, which is featured with Linux 3.2 and xfce 4.8...

BackBox Tools

BackBox Linux 3.1 New Features :-

1) Fixed the several Bugs

2) Improved performance

3) Improved WiFi Drivers

4) Featured with new and more powerful tools as like  Backfuzz, beef,  htexploit, metasploit, sqlmap, websploit, weevely, wpscan, zaproxy, etc...

5) Improved Auditing menu...

BackBox Terminal

BackBox Linux 3.1 Download

http://www.backbox.org/downloads

Posted By आर्यावर्त9:37 PM

0

Continue Reading

How To Secure Your WORDPRESS WebSites

Hello Guys,...This is DJ Alone...

Today I'm going to tell you the most important steps to do to have a more secured Wordpress blog. I think wordpress is the most used Webapps on cyber now; however, it's almost the easiest to be hacked and defaced! But, on the other hand, securing your wordpress is so easy. specially on linux servers...

Note:- This tutrotial is based on linux commands...so, if you're a windows server user this tutorial is not for you... 
so, lets start with our steps...

1. Harder & Longer Password

 Wordpress Hashes are so hard to crack (hardest for me xD) so making you password harder than "123456" , "admin" , "password" could help you ALOT! The first thing a hacker would do is guess your password, if he failed he'll brute force it! Hard password can save you from almost 50% of the attacks ! (In My Point of view ) When we say "hard password" it means using special characters like (@, () , [] , {} , ^ , % ,$ ,#,!,) and so on.. A longer password would not only secure you from Brute forcing, but even if you have a vulnerability like SQL injection for example and the attacker got a hash of your password (which is a Long and Full of special characters password) it would be hard as hell to crack it! and it will take them forever to crack it...

2. Securing From Symlink 

Symlink is the most common way of hacking nowadays, and securing your website from it is will help you much! For those who don't know what symlinking is can read my Symlink tutorial here.  now to secure your blog from this kind of attack, you just have to change the permissions of you configuration file. You can do that though FTP, Cpanel, a shell, etc.  just change the configuration file (wp-config.php in your case =) ) to 400
you can do that in a shell by running this command: 
chmod 400 wp-config.php
and other ways are easy, just press on the option and change (in FTP and cpanel) and always remember to remove your shell as soon as you finish working on it! xD  Chmoding this file to 400, will not allow the attack to read your configuration file from another user! and that's about it...

3.Security From Deface

 If a hacker managed to get in your admin panel (somehow)...maybe through a Trojan on your PC or something you should close all the ways that let him upload a shell or deface your website! What you can do it change the permission of all the pages (index.php, 404.php, footer.php, etc etc) in the theme to 400 (Example: chmod 400 page.php) or through your ftp or cpanel because if those files are writable there is a big change that the attacker change their source to a shell source code and deface you...



4. Finding Vulnerability & Removing It

Scan it every month just to check if any plugin have any vulnerability or something. that will make you faster than the hacker by discovering the vulnerability and patching it before someone else exploit it. and second thing you want to do is being up-to-date with 133day.com and Wordpress forums they post any discovered vulnerability and sometimes its patches. This will help you to be less exploitable....


5. Some Quick Tips

 NEVER use the same password in two different things that is related to your website....for example your Database's password & Cpanel's password, website's password and Database's password... Always use different passwords...Disable FTP when there is no use of it...Don't use "admin" or "administrator" as your username...Change Admin Panel's Password every two weeks....

Read this article on Wordpress official website (Click Here) For more security Following the above steps can prevent almost 98% of the attacks on your wordpress blog :) Hope you liked it! thanks for reading....

Credits To :- http://securitygeeks.net/

Posted By आर्यावर्त11:58 PM

0

Continue Reading