Online Hash Generator with PHP Source Code

It's an old little project that I made just to kill time, nothing more. Take the code and hack it in every way you want :D,

 

Result:

 The Project is OpenSource and hosted on github : https://github.com/AnimeshShaw/Online-Hash-Generator

Before trying it yourself please read the HelpDocs: https://github.com/AnimeshShaw/Online-Hash-Generator/wiki/Help-Docs

 

Continue Reading →

Hash Algorithm Identifier | Identify CryptoHash Types

Hash Algorithm Identifier is a tool which can be used to identify almost all types of hashes. This tool can detect the password hash of various forums like MyBB, phpBB3, Drupal, Joomla, wordpress etc.

I wrote a tutorial earlier on how to identify the different types of hashes and you can see that tutorial here. If you don’t know what a Hash Function is then I recommend you to read about it  here

---

Those who have used Kali Linux for different puposes, they might have come across a tool named hash-identifier and the link to the source of the tool :- https://code.google.com/p/hash-identifier/

But the tool is poorly programmed with a huge if-else-if ladder and method construct and some of them are not correct, exceeding 500+ LOC.

---

Here’s my version of HashIdentifier. (# of lines of code : 210 [With New lines and docstrings])

Screenshot

Installing Required Packages using requirements.txt, Starting HashIdentifier Server on localhost, using the webservice

Using Hash Identifier Web Service

Python Code and Demonstration to Use Hash Identifier Web Service

 

The style and design of the code has been kept same as the original hash-identifier in the Google-code project link given above.

How to Use [Instructions for Linux/Mac users] ?

To use this simply run (The app will start):-

python HashIdentifier.py

To give executable permissions, run :-

 

chmod +x HashIdentifier.py

and then starting it by executing (One’s the executable is made you can start it by typing the following text only):-

 

./HashIdentifier.py

If you don’t understand the steps above then don’t worry. I have included a start.sh [for Linux] and a start.bat [for Windows] files to make your life more easier

To execute the start.sh, type the following in the terminal :-

 

sh start.sh

 

Hash-Algorithm-Identifier Web Service

Hash-Algorithm-Identifier is now on Cloud and provides a web service to use it directly in your apps or so and so. The wrapper for web service is provided asweb.py. The Cloud app service is hosted at http://hashid.badwith.computer/

Usage instructions

./web.py or see --help for more options

 

To use the cloud service send a get (for single hash) or post (for multiple hash) request with the hash appended at the end of the url given above. In case you want the result for multiple hashes then in such cases send the hashes as JSON data.

Javascript

var hash = "3da541559918a808c2402bba5012f6c60b27661c";
 cors_request = new XMLHttpRequest();
 cors_request.onreadystatechange = function() {
 if (cors_request.readyState == 4) {
    console.log(cors_request.responseText);
    }
 }
 cors_request.open("GET", "http://hashid.badwith.computer/" + hash);
 cors_request.send();

Python Sample Example

import requests
hsh = "3da541559918a808c2402bba5012f6c60b27661c"
resp = requests.get("http://hashid.badwith.computer/%s" % hsh)
print(resp.text)

Python Example : Multiple hashes

import json
import requests
hashes = {'hashes': [
 "3da541559918a808c2402bba5012f6c60b27661c",
 "912ec803b2ce49e4a541068d495ab570"
 ]}
resp = requests.post("http://hashid.badwith.computer/", data=json.dumps(hashes))
print(resp.text)

The response is received as JSON data. The Demo usage has been already shown above under the screenshots header..

Thanks to moloch for contributing to the cloud app.

About the Code

As it is evident from the code that I have used regular expressions to identify the hashes. The hashes are being identified because they have certain characteristics and when matched properly they will produce the proper results. Using regular expressions to identify the hash makes the code neat and easy to understand. To understand the regex expressions used in the code, VISIT THIS SITE and paste the Regex Expression in its proper place and thereby you get the explanation. 

Suggestion and feedback are welcome. The tool will be updated with more new features and hashes for identification.

Quick Links

1. Github Project Page : https://github.com/AnimeshShaw/Hash-Algorithm-Identifier
2. Project Wiki : https://github.com/AnimeshShaw/Hash-Algorithm-Identifier/wiki
3. Read Changelog : https://github.com/AnimeshShaw/Hash-Algorithm-Identifier/blob/master/CHANGELOG.md

Thank you,
Sincerely,
Psycho_Coder

Related articles

• 100 Best Open Source Security Tools
• Using Dban to Securely Wipe data from hard disk
• Generate Wordlists in Backtrack 5 R3 using Crunch
• 80+ Best Free Hacking Tutorials | Resources to Become Pro Hacker
• How To Mount and Unmount a drive on Linux
• How To copy a Very large file to a flash drive in Linux

Continue Reading →

Using Dban to Securely Wipe data from hard disk

"DBAN is free erasure software designed for the home user. It automatically deletes the contents of any hard disk that it can detect. This method can help prevent identity theft before recycling a computer. DBAN is also a commonly used solution to remove viruses and spyware from Microsoft Windows installations. "

--- Original Site < http://dban.org/ >

About its short commings and drawbacks read the info from the original site (link given above)

So lets move directly into how to use it. The tool comes in a iso format and you can either write it on CD/DVD or on flash drive. I would recommenend you to use it on a flash drive since its on 15 mb in size and if you use a CD or DVD then its wasted.

I will first show you how to use dban by creating a Virtual machine for ir. I am using Virtual Box which comes by default in fedora 19 (I am using fedora 19 at present).

So first download the iso file from here : http://sourceforge.net/projects/dban/files/dban/dban-2.2.8/dban-2.2.8_i586.iso/download

The file is only ~15 MB in size and so the download will be quick.  I downloaded it here :-



Now download and install virtual box or VMware Player which ever you wish to use. I am using Virtual Box. If you don't have them already then you can download them from the following :-

Virtual Box : https://www.virtualbox.org/wiki/Downloads

VMware Player: https://my.vmware.com/web/vmware/free#desktop_end_user_computing/vmware_player/6_0

The application I am using is called Boxes and is more like Virtual Box and comes installed with Fedora 21. So open Boxes and click new.



You will get the following screen :-



Click on Continue and the following screen will appear :-



As you can see Virtual Box have already listed the ISO's but if it doesn't shows up then you can Click on Select File and Choose the DBAN ISO file



After you choose open the following screen will appear :-



If you wanna customize then click on customize. After you do so you will :-



But in our case there is nothing to customize we are wiping data. You will probably perform it on your complete HDD and so it unnecessary. If you have done this much then click on Create on Top right corner (in case of Virtual Box)



The following screen will appear showing the different DBAN options and its main interface:-



Click on the blue screen to enter the VM. If you press Enter autonuke setting will start which is the default and the recommended option. To see the other cmmands available press F3. You will see the following :-



We will go with the default option and we will press enter on the first screen screen that appears. After we do so will see the following :-





Now its will list all your HDD or flash drives attached. Now select the drive you want to wipe and press SPACE to select it. You can use UP and DOWN keys to select other drives (if any). After you have done this press F10 to start the process.



You will be able to see the time remaining to complete, no. of rounds or number of steps etc etc.Once the process s complet a black screen will come with the confirmation that the data has been wiped clean :)

---

Install using Flash Drive

To use dban using a flash drive you first need to write it onto the drive itself.

To write the ISO in flash drive I would recommened you to use Universal USB Installer if you're on Windows Since it comes with a pre loaded config for DBAN ISO and so it will be better imho. Linux users can use Unetbootin.

After you have done so simply boot your system and from Boot Options run using the flash drive and the rest i like I explained above after you create the VM.

Thats all for today and I hope you like the tutorial.

 

 

Related articles

• How To Mount and Unmount a drive on Linux
• Generate Wordlists in Backtrack 5 R3 using Crunch
• How To copy a Very large file to a flash drive in Linux
• 80+ Best Free Hacking Tutorials | Resources to Become Pro Hacker

Continue Reading →

100 Best Open Source Security Tools

English: A candidate icon for Portal:Computer security (Photo credit: Wikipedia)

Whether you’re a network administrator, security professional, or an end user, it’s important that you keep your system clean and secure. There are a variety of high quality open source security tools available, and many of them are free. Check out this list to find 100 of the best of them.

 

General

These tools offer a variety of useful security functions.

1. Untangle: Untangle will provide you with spam, virus, and spyware protection, as well as Web filtering, firewall, and more.
2. Network Security Toolkit: This tool combines a variety of open source apps that will help you stay on top of traffic, intrusions, and more.
3. Bastille Linux: With this tool, you’ll answer questions about your security, and will get a custom lockdown for your machine.
4. OSSIM: OSSIM brings together a number of open source security tools to give you network details and stay on top of intrusions.
5. ProShield: Use Proshield to get a scan of your system for up to date software and malware.
6. Hardened Linux: This Linux distribution will help you improve your security.
7. eBox Platform: Use this network management framework for content filtering, proxy, firewalls, and more.sa
8. Kismet: Kismet offers wireless network detection, intrusion detection, and packet sniffing, all in one.
   

Monitoring

With these tools, you’ll get constant monitoring of your security.

1. Nessus: Use this free scanner to stay on top of your vulnerabilities.
2. Nagios: This host and network monitoring tool will let administrators handle outages before clients and users are affected.
3. AWStats: Use AWStats to get a look at attacks on your server.
4. Honeytrap: With this tool, you’ll get advanced warning about attacks.
5. The Multi Router Traffic Grapher: Use this tool to monitor your SNMP network devices.
6. Snort: Snort is an incredibly effective intrusion detection system.
7. BASE: This tool works well with Snort to make your intrusion detection data more easy to understand.
8. Internet Secure Access Kit: This suite will help you restrict and monitor access on your network.
9. Afick: Afick will help you stay on top of changes to your system.
10. Network Security Analysis Tool: Use this tool to scan your network for vulnerabilities.
11. Nagios: This program will monitor your enterprise network services, environmental factors, host resources, and point out potential vulnerabilities.
12. JbroFuzz: With this tool, you can test the integrity of your network.
13. Yet Another Security Monitoring Interface: This web based application will help you take a look at the data flow in your router.
14. ettercap: Ettercap will monitor your LAN, staying on top of content, live connections, and other potential attacks.
15. Metasploit: Often used by hackers, you can test your system with this tool.
16. SNARE: Make use of this tool that collects and analyzes your event log data.
17. Nikto: Nikto will scan your web servers for problems and dangerous files.
    

Email & Spam

Use these tools to keep your email secure.

1. Spam Assassin: This anti-spam tool will help you keep your email neat and clean.
2. Tiger Envelopes: This email encryption tool works with a variety of programs, including Thunderbird and Outlook.
3. Anti-Spam SMTP Proxy Server: Use this application to filter out spam and viruses.
4. Spamato: With this client-side spam filter, you can keep the junk out of your Outlook, Thunderbird, and other popular email clients.
5. phPOP3clean: Use this scanner to look for worms, spam, blacklisted words, as well as blacklisted domains.
6. Thunderbird: This open source email program has a variety of tools for keeping spam and viruses at bay.
7. Mailsaurus: This email client will encrypt all of your data so that no one can read your email.
8. MailCleaner: With this filtering application, you can keep the spam and viruses out.
9. Web Stat: Want to know how much spam you’re blocking? Use this tool that will display your level of blocked spam graphically.
   

Anti-Virus

With these tools, you can protect your computer and network from viruses.

1. FullControl: This software will stay on top of all the programs running on your computer and verify their integrity.
2. ClamAV: Make use of this excellent antivirus tool to keep your machine free of viruses.
3. ClamWin: If you want to take advantage of ClamAV on your Windows machine, make use of this tool.
4. Moon Secure Antivirus: This antivirus scanner also features a firewall.
5. Winpooch Watchdog: Winpooch will stay on top of spyware, trojans, and viruses.
6. Softlabs AntiVirus: Using this antivirus tool, you can scan your email for phishing and viruses.
   

Firewall

Use these firewall tools to keep unwanted intruders and items out of your system.

1. SELinux: Using SELinux, you can set mandatory access control features for Linux.
2. m0n0Wall: This tool offers both firewall and VPN.
3. ShellTer: ShellTer offers a firewall with SSH protection.
4. Endian Firewall Community: Use this tool to turn an old PC into an appliance that provides a variety of security functions.
5. FirewallPAPI: This system will stay on top of your network traffic.
6. SmoothWall Express: Use SmoothWall to turn a PC into a firewall appliance for your network.
7. WIPFW: Use this tool to monitor and filter packets entering your network.
8. Fail2Ban: Fail2Ban will stay on top of log files and look for failure prone IPs, which will be blacklisted.
9. Vyatta: Turn to Vyatta to get an enterprise class firewall for free.
10. ISP-FW: With this server side firewall application, you can get packet filtering and monitoring.
11. Firewall Builder: This tool will make it easy to establish rules for your firewall.
12. AppArmor: Create policy-based profiles to control access to applications with AppArmor.
13. Firestarter: Make use of this firewall if you want to get your firewall security up and running in a hurry.
14. Linux Embedded Appliance Firewall: This firewall tool will help you shore up your security.
15. IPCop: With this tool, you can turn any PC into a firewall appliance to get your network secure.
    

Files & Data

Keep your files, data, and transfers secure with these tools.

1. Darik’s Boot and Nuke: If you want to wipe out a hard drive, just boot up with a disk containing this tool.
2. Packet Generator: Use this tool to optimize the routing schematics for your network.
3. Paros: Paros intercepts data, offering a way to evaluate web application security.
4. Cyberduck: With this tool, you can transfer files to remote computers and networks.
5. WinSCP: Use this SFTP and FTP client for secure file transfes.
6. Eraser: This tool will eliminate files by overwriting them several times, so that they can’t be read using digital forensic tools.
   

Encryption & Cryptography

Make use of these encryption and cryptography tools to stay secure.

1. KeyCzar: Use this toolkit to make cryptography easier to use in applications.
2. Cameloid: Keep your voice connections safe with this encryption tool.
3. GNU Privacy Guard: This encryption tool uses a number of different encryption algorythms.
4. TrueCrypt: Use TrueCrypt to encrypt a partition or drive, or create a virtual encrypted disk within a file.
5. Cryptonit: Secure your files and address books with this encryption tool.
6. Checkpoint Commander: This tool will both encrypt and completely erase your files.
7. AxCrypt: AxCrypt is a simple encryption tool that will allow you to encrypt files with just a few clicks.
8. Magikfs: You can hide your files using this tool with a steganographic filesystem.
9. FreeOTFE: This tool will create secure virtual drives on your PC.
10. Cryptology: Cryptology offers encyption that integrates into Windows Explorer right-click menus.
    

Passwords

With these tools, you can keep your passwords handy and secure.

1. KeePass: Use this password safe to keep all of your passwords safe and encrypted.
2. CiphSafe: This tool will encrypt your usernames and passwords for popular Internet websites.
3. Password Safe: Password Safe will help you create strong passwords and can store multiple password databases.
4. Keep It Secret! Keep It Safe!: With this tool, you can store your important usernames and passwords in an encrypted file.
   

Remote Access

Use these tools for secure remote access.

1. OpenSSH: With this tool, you can safely operate a remote host.
2. Stunnel: Stunnel will encrypt your TCP connections inside SSL connections.
3. OpenVPN: Get safe VPN access using this tool.
4. SSL-Explorer: This web-based VPN server will allow you to use a standard browser.
5. Open SSL: This tool uses Transport Layer Security and Secure Socets Layer protocols to keep you safe.
6. strongSwan: strongSwan offers an IPsec-based VPN tool for Linux.
7. PuTTy: Get remote access with this telnet/SSH client.
8. UltraVNC: Use this tool to get safe and secure remote access.
   

Networking

These tools will help you operate a more secure network.

1. Nmap: Nmap will help you stay informed of all of the hardware that is connected to your network.
2. Wireshark: Using Wireshark, you can take a look at all of the traffic that passes over your Ethernet network.
3. Bro: Bro offers network intrusion detection that will passively monitor your network traffic for anomalous traffic behavior.
4. Network Simulator and Network Animator: With this tool, you can test your network flow to prevent bottlenecks and promote better routing.
5. OCS Inventory NG: This tool will provide you with a list of hardware and software on your network.
6. Netcat: Netcat is a simple utility that will help you read and write data across UDP or TCP network connections.
7. Angry IP Scanner: This tool will scan IP adresses and ports on your network.
8. Ossec HIDS: With this intrusion detection system, you’ll find out when your network is being attacked.
9. TcpDump: If you’re looking for a light, secure packet sniffer, check out this tool.
10. The Network Visualizer: Get graphic information on your network activity using this tool.
    

Miscellaneous

Check out these tools for even more open source security applications.

1. Tripwire: Find out when changes are made to your system by using this tool.
2. Firefox: A very popular web browser, Firefox offers a variety of secure options and add ons.
3. The Sleuth Kit: With this kit, you can recover deleted files.
4. JAP: This tool will allow you to browse the Internet anonymously.
5. iSAK: Using this tool, you can filter out specific types of websites.
6. Advisory Check: This tool will read RSS and XML security feeds to monitor the security of the software you’re using.
7. Babel: Babel will let you know about all of the security flaws that you have in your system.
   

Originally Posted on : http://www.mastersincriminaljustice.com/blog/2008/100-best-open-source-security-tools/

 

Related articles

• 80+ Best Free Hacking Tutorials | Resources to Become Pro Hacker
• Lightweight Introduction to Cryptography | Terminology, Security Goals and Cryptographic Attacks
• Crawling Net-Security.org Archive Magazines using Python
• List Of Steganography Tools
• Generate Wordlists in Backtrack 5 R3 using Crunch
• Recommended Books to become a Java Hero from Java Zero

Continue Reading →