NinjaWPass to secure wordpress.

NinjaWPass is a free WordPress plugin written to protect your blog administration console. It makes it basically impossible for a hacker who stole your password to log in to your console.
The way it works is simple but very efficient and it is being used by some large banking corporations in order to protect their customers online accounts

All you need to do is to define a second password (AKA the NinjaWPass password) from 10 to 30 characters.
At the WordPress login prompt, besides your current password, you will be asked to enter 3 randomly chosen characters from your NinjaWPass password. Whether your computer is infected by a keylogger or someone is spying over your shoulder, this protection will keep them away.

Additionally, the plugin offers the possibility to receive an alert by email whenever someone logs into your WordPress admin interface.

Installation :

NinjaWPass can be installed just like any other WP plugins.

1) Download the plugin to your local computer
2) Log into your WordPress admin console and click on the 'Plugins' menu, then 'Add New' submenu and select 'Upload'.
3) Upload the zip files; the plugin will be automatically installed.
4) Click on the 'Plugins' menu again, then 'Installed Plugins' submenu and activate NinjaWPass.
5) Click on its 'Settings' link and setup your new password.

Afterward, simply log out of WordPress and you will see NinjaWPass nicely integrated into the login form.

 Download  NinjaWPass

Browser in the middle attack tool

Browser-in-the-middle is a bashscript that uses ettercap, metasploit and the beEF framework to make attacks that injects code in pages users visited on the internet from the local network.

- uses ettercap to launch a man in the middle attack 
- ettercap modifies traffic so evil javascript or iframes are added 
- victim's browser will be redirect to the attackers webserver 
- the webserver will be running the msf autopwn module or the beEF framework to launch browserexploits are other browser related attacks. 

SQLMap -- SQL injection tool download

 sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Features

• Full support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase and SAP MaxDB database management systems.
• Full support for six SQL injection techniques: boolean-based blind, time-based blind, error-based, UNION query, stacked queries and out-of-band.
• Support to directly connect to the database without passing via a SQL injection, by providing DBMS credentials, IP address, port and database name.
• Support to enumerate users, password hashes, privileges, roles, databases, tables and columns.
• Automatic recognition of password hash formats and support for cracking them using a dictionary-based attack.
• Support to dump database tables entirely, a range of entries or specific columns as per user's choice. The user can also choose to dump only a range of characters from each column's entry.
• Support to search for specific database names, specific tables across all databases or specific columns across all databases' tables. This is useful, for instance, to identify tables containing custom application credentials where relevant columns' names contain string like name and pass.
• Support to download and upload any file from the database server underlying file system when the database software is MySQL, PostgreSQL or Microsoft SQL Server.
• Support to execute arbitrary commands and retrieve their standard output on the database server underlying operating system when the database software is MySQL, PostgreSQL or Microsoft SQL Server.
• Support to establish an out-of-band stateful TCP connection between the attacker machine and the database server underlying operating system. This channel can be an interactive command prompt, a Meterpreter session or a graphical user interface (VNC) session as per user's choice.
• Support for database process' user privilege escalation via Metasploit's Meterpreter getsystem command.

Video Demo:

Joomscan details

Joomscan is one of penetration testing tool that help to find the vulnerability in Joomla CMS. The Updated version can detects 673 vulnerabilities . Detects file inclusion, sql injection, command execution vulnerabilities of a target Joomla! web site. 

Downlaod Joomscan

How to use Joomscan?

Best hacking program ever...!!

Today we are going to discuss about the best hacking tool ever..

Its non other than Backtrack 5 R3..

It has hundreds of genuine hacking tools that include :-

Aircrack -ng

Airmon -ng

Social engineering toolkit

Reverse engineering

Data exploit kit

MySQL hacking 

And much more..!!!!!!

You can download backtrack from its official website..

Note!! : Don't forget to see that your system is 32 bits or 64 bits.....

Secure , Multi-vendor strategy is crucial for cloud.

A few weeks ago, one of the well-regarded vendors of the cloud storage world, Nirvanix, abruptly announced that it was closing its doors, giving its more than 1000 customers just two weeks to migrate their data off Nirvanix systems.However, if you are, or plan to be, a consumer of cloud services, Nirvanix should serve as a reminder of how important it is to have an end-to end plan for your cloud lifecycle. Here, I'll cover some basics for your planning.

See the password behind asterisk (*******)

Hello Guys,
    Now I am Gonna Show You How to Get Password Behind the Asterisk, that is *******.(This is Mostly Work on Internet Explorer May be on Others Also)

So, Lets Start..... (This is Only for Educational Purpose)

1) Goto Any Login Page, (I have Choose Yahoo.com)

2)Now U have Enter User-Id and Password (If not already added)

Now You Have Password But you cant read..
So Follow the Important Step..
Erase Your Whole Address bar (i.e, http://.....)
And Enter Following Java Script Code.
javascript: alert(document.getElementById('Passwd').value);


Now Press ENTER..... or Click on Go...
You will Get Error.... But that error is Your Password.

Make your computer boot very fast.

1. Press start > Run then type msconfig and press enter.


Go to the startup tab. Here you will see a list of startup items. These are all the programs that automatically start when you boot your PC. It is these that slow down the boot up process.


  So uncheck all the unwanted items like ms-office, messengers other utilities that u may not need at startup). Don't uncheck your antivirus software.


Restart your Pc to and see for yourself, your pc will now boot faster.... 
   
2. A great new feature in Microsoft Windows XP is the ability to do a boot defragment.
 This places all boot files next to each other on the disk to allow for faster booting. By default this option is enabled, but on some systems it is not, so below is the information on how to turn it on:


Go to Start Menu and Click Run
Type in regedit then click ok
Find "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Dfrg\BootOpt imizeFunction"
Select "Enable" from the list on the right
Right on it and select "Modify"
Change the value to Y .
Reboot your Pc and see the change yourself.

Remove Newfolder.EXE OR Virus

Here are simple steps following which you can get the worm removed from your system:

1.Download this file:Registry_Repair.

2.Double click on that downloaded registry file, you will be asked weather you’re sure to add this to registry, click yes.

3.Restart your system.

4.Search for the file svhost32.exe and delete it if its found.

5.Search for the file svhost.exe and delete it if its found.

HOW TO INSTALL PAID APPS FOR FREE ON YOUR APPLE DEVICE

http://ghost.25pp.com/soft/pp.exe
link to download the Software
Visit http://tipsandtricksforfree.blogspot.in
To Get Amazing Tricks For Computer Free..

Please Like And Suscribe