Remote Access to Android Phone from Desktop using 3CX Remote Android App through USB.

Steps :- 

Root your phone. [Optional]

Install  3CX DroidDesktop / 3CX Remote Android Desktop [For using all features of this app, rooting your Android is necessary.]

Office2003 Silent install command

setup.exe /qb+ /l* %temp%\office11.txt COMPANYNAME="Northwind Ltd"

This command line customizes Setup in the following ways:

• Setup does not prompt the user for information, but displays progress indicators and a completion message when it installs Office (/qb+). To disable message, use /qb-.
• Windows Installer logs all information and any error messages (/l*) for Setup.exe to the file C:\Documents and Settings\<Username>\Local Settings\Temp\Office11.txt.
• Setup sets the default organization name to Northwind Ltd.
• Because no custom INI or MST file is specified, Setup installs the same Office features that it would if the user clicked Typical Install in the Setup user interface.

Similar command may work for Office 2007/2010/2013.

Reference : http://office.microsoft.com/en-us/office-2003-resource-kit/methods-of-customizing-office-HA001140194.aspx?redir=0

Tutorial : Starting Off with Python and Pyglet

Hi,

Configuring python with Pyglet is very easy. Many of you might be wondering, why I have chosen Pyglet over Pygame. I have done a significant research around this, what I found that the people are increasingly accepting pyglet over pygame due to many of its benefits. StackExchange is one the most reputed dev forum, people there are recommending pyglet over pygame.
http://stackoverflow.com/questions/370680/differences-between-python-game-libraries-pygame-and-pyglet
http://stackoverflow.com/questions/1260108/start-with-pyglet-or-pygame. 

Elcomsoft Phone Password Breaker

Elcomsoft Phone Password Breaker (EPPB) is a forensic tool which provides access to password-protected backups for smartphones and portable devices based on RIM BlackBerry and Apple iOS platforms. The password recovery tool supports all Blackberry smartphones as well as Apple devices running iOS including iPhone, iPad and iPod Touch devices of all generations released to date, including the latest iPhone 4 and iOS 4.3.

FraudSense: Anti-phishing Platform

FraudSense is a provider of the cloud-based anti-phishing software platform, featuring its proprietary real-time anti-phishing detection algorithms.
FraudSense’s next-generation anti-phishing technology is an innovative weapon in the fight against the ever growing threat of phishing attacks as it enables FraudSense-powered applications and services to identify, target and remove forged websites in real time.
FraudSense identifies and disables fraudulent websites in real-time which are routinely deployed by phishers to lure unsuspecting users to submit their credentials and are key to most online scams.
 Thus minimizing and even completely eliminating financial losses and integrity damage.

FaceNiff : Sniffer for Android mobiles.

FaceNiff is an Android app which requires rooted phone. It sniffs and intercepts web session profiles over the WiFi that your mobile is connected to. It is possible to hijack sessions only when WiFi is not using EAP, but it should work over any private networks (Open/WEP/WPA-PSK/WPA2-PSK).
It’s kind of like Firesheep for android, the only difference is it's bit easier to use & it works on WPA2.

Peepdf v0.1 : Analyze Malicious PDF files.

Peepdf v0.1 has been released recently. peepdf is a Python tool to investigate pdf files & detect whether it's harmful or not. The tool provides all the necessary components that a security researcher could need in a PDF analysis. It shows all the objects in the document showing the suspicious elements, supports all the most used filters and encodings, it can parse different versions of a file, object streams and encrypted files.

Findind Hidden files in ADS (Alternate Data Streams) in Windows

In the previous post, we have known, how to hide files in ADS of files/folder in NTFS file format. In this post we will study ways to find hidden files in ADS. Sysinternals is a tools suite which contains a whole lot of tools meant for manipulating/adding/observing  various features of OS.

Anti arp-poisoning attack tool - ArpON

ARP handler inspection (ArpON) is a portable tool that defends the Man In The Middle (MITM) through ARP Spoofing/Poisoning attacks. It detects and blocks also derived attacks by it for more complex attacks, such as: DHCP Spoofing, DNS Spoofing, WEB Spoofing, Session Hijacking and SSL/TLS Hijacking & co attacks.

SQLmap 0.9 is out.

sqlmap is an open source penetration testing tool developed in Python that automates the process of detecting and exploiting SQL injection and taking over of database servers.  This makes the tool independent from the operating system. sqlmap relies on the Metasploit Framework for some of its post-exploitation takeover features.

Hiding files in ADS (Alternate Data Streams) in Windows

Alternate Data Streams exists in NTFS file streams which can be used to hide sensitive information, even worms, trojans etc. We can hide files in ADS of folders & files. Using ADS required little skill & this security issue is relatively unknown to people. To begin, open cmd & make a folder.
#mkdir C:\folder
#echo this is hidden text > folder:secret
Now, open the folder & check whether there is any file. You will find no file there. The file is in ADS of directory 'folder'.

Knowing QR code.

QR code

QR code stands for Quick Response code which is a 2D bar code, readable by dedicated QR barcode readers and camera phones. The code consists of black modules arranged in a square pattern on a white background. The information encoded can be text, URL or other data.
You can have an idea about QR code from this link 

Researchers Hack GSM phones.

Researchers have shown a simple technique for eavesdropping on individual GSM mobile calls without the need to use expensive, specialized equipment. This kind of GSM snooping has been possible for a long time, but it’s always been very expensive.
During a session at the Chaos Computer Club Congress (CCC) in Berlin, Karsten Nohl and Sylvain Munaut used cheap Motorola handsets running a replacement firmware based on open source code to intercept data coming from a network base station.

Implementing & Preventing SQL Injection Attacks Tutorial -4

This summary is not available. Please click here to view the post.

Send Anonymous SMS within India.

SMS servers are quite common these days but it's really difficult to find a completely anonymous sms server. One such site which sends completely anonymous sms is foosms.com. This site is limited to Indian numbers only.

WackoPicko : Vulnerable website for Security Evaluation

WackoPicko is a vulnerable web applications to hone your skills or test the latest web vulnerability scanner. It allows to check multiple vulnerabilities which you can test.  It was first used for the paper Why Johnny Can't Pentest: An Analysis of Black-box Web Vulnerability Scanners.

AddedDomains.com : Must for Startups

When someone decides for bring up a startup, one of the most important thing one comes across is the domain name. Domain name should be chosen wisely. It shouldn't be a long boring, tough to remember  name or  short, hard to decipher type. You have to make sure the domain name is available and if there are similarly named sites already. Here is a site that will aid choosing an appropriate domain name.

Implementing & Preventing SQL Injection Attacks Tutorial -3

This summary is not available. Please click here to view the post.

Google's new feature: Hacked site alert.

Google has added a new feature to it's search engine. It can alert the users in its search result for websites that might have been compromised by displaying the link - 'This site may be compromised'. When users click the new "This site may be compromised" link, they get directed to more information in the Help Center. The websites flagged as compromised are still accessible.
It's a great idea to alert the naive users from being affected by malware & spyware & avoid affecting other users. Google plans to alert the hacked site's webmaster, as well, Wald said. The search engine giant already provides a notification in search results for sites that are potentially serving up malware.

CONFICKER Worm : How to remove & protect your systems?

If you are a technical user, you can follow these steps:
http://www.microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en
Other customers can follow these steps to remove W32/Conficker.worm and prevent it from spreading:
   1. Install Microsoft Security Update MS08-067: http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx