Findind Hidden files in ADS (Alternate Data Streams) in Windows

In the previous post, we have known, how to hide files in ADS of files/folder in NTFS file format. In this post we will study ways to find hidden files in ADS. Sysinternals is a tools suite which contains a whole lot of tools meant for manipulating/adding/observing  various features of OS.

Anti arp-poisoning attack tool - ArpON

ARP handler inspection (ArpON) is a portable tool that defends the Man In The Middle (MITM) through ARP Spoofing/Poisoning attacks. It detects and blocks also derived attacks by it for more complex attacks, such as: DHCP Spoofing, DNS Spoofing, WEB Spoofing, Session Hijacking and SSL/TLS Hijacking & co attacks.

SQLmap 0.9 is out.

sqlmap is an open source penetration testing tool developed in Python that automates the process of detecting and exploiting SQL injection and taking over of database servers.  This makes the tool independent from the operating system. sqlmap relies on the Metasploit Framework for some of its post-exploitation takeover features.

Hiding files in ADS (Alternate Data Streams) in Windows

Alternate Data Streams exists in NTFS file streams which can be used to hide sensitive information, even worms, trojans etc. We can hide files in ADS of folders & files. Using ADS required little skill & this security issue is relatively unknown to people. To begin, open cmd & make a folder.
#mkdir C:\folder
#echo this is hidden text > folder:secret
Now, open the folder & check whether there is any file. You will find no file there. The file is in ADS of directory 'folder'.

Knowing QR code.

QR code

QR code stands for Quick Response code which is a 2D bar code, readable by dedicated QR barcode readers and camera phones. The code consists of black modules arranged in a square pattern on a white background. The information encoded can be text, URL or other data.
You can have an idea about QR code from this link 

Researchers Hack GSM phones.

Researchers have shown a simple technique for eavesdropping on individual GSM mobile calls without the need to use expensive, specialized equipment. This kind of GSM snooping has been possible for a long time, but it’s always been very expensive.
During a session at the Chaos Computer Club Congress (CCC) in Berlin, Karsten Nohl and Sylvain Munaut used cheap Motorola handsets running a replacement firmware based on open source code to intercept data coming from a network base station.

Implementing & Preventing SQL Injection Attacks Tutorial -4

This summary is not available. Please click here to view the post.

Send Anonymous SMS within India.

SMS servers are quite common these days but it's really difficult to find a completely anonymous sms server. One such site which sends completely anonymous sms is foosms.com. This site is limited to Indian numbers only.

WackoPicko : Vulnerable website for Security Evaluation

WackoPicko is a vulnerable web applications to hone your skills or test the latest web vulnerability scanner. It allows to check multiple vulnerabilities which you can test.  It was first used for the paper Why Johnny Can't Pentest: An Analysis of Black-box Web Vulnerability Scanners.

AddedDomains.com : Must for Startups

When someone decides for bring up a startup, one of the most important thing one comes across is the domain name. Domain name should be chosen wisely. It shouldn't be a long boring, tough to remember  name or  short, hard to decipher type. You have to make sure the domain name is available and if there are similarly named sites already. Here is a site that will aid choosing an appropriate domain name.