It’s Halloween time! Do you celebrate the scariest day of the year?

As you may have noticed the main focus of this issue are Open Source Tools for Hackers, so in the remaining articles you will be able read up on Nmap, WireShark, Hydra, Metasploit, SpiderFoot and many more!

Enjoy your reading,

Hakin9 Magazine’s

Editorial Team

>>Table of Contents<<

If you want to buy this magazine click here

The summertime is almost over! As sad as it is, we hope that you spend your vacation relaxing. Today we would like to present to you our new issue The Power of Scapy! This time we don’t have the main theme as we had in the previous issues. You will find a various article like a report about PokemonGo, an introduction to Raspberry Pi and of course the presentation of Scapy. Github Corner is always open for a new proposition, so if you would like to present your project in our section, just send us an email! As always we’ll finish off the issue with a few links to our blogs, in case you want something a little bit more - we hope that if you don’t frequent our blog already this will give you an incentive to start.

Enjoy your reading,   

Hakin9 Magazine’s  

Editorial Team

>>Table of Contents<<

GitHub Corner

Cybersecurity in Software-Defined Networking (SDN)
by Santiago Hernández Zambrano, José Manuel Postigo Aguilar and Carlos Rodríguez Hernández

Cybersecurity is one of the great challenges facing organizations today, with the safeguarding of the organization’s data and that of its clients and users being a top priority. The year 2015 has been one of the most tumultuous in terms of computer network attacks. Cyberattacks on companies like Ashley Madison and organizations such as the Internal Revenue Service (IRS) in the United States have highlighted the vulnerability of networks and how easily cyber criminals can penetrate them.

Starbucks Critical Flaws Allow Hackers To Phish & Steal User's Creditcards and Perform Remote Code Execution
by Mohamed M.Fouad

Today I will show you how I discovered a lot of critical security vulnerabilities at Starbucks. It can lead to a very harmful impact on all users by forcing users to change their passwords, add alternative emails or change anything in their stored profile settings and steal users’ stored credit-cards. Also, it can allow an attacker to perform phishing attacks on users and remote code execution on Starbucks servers.

Uber Promo-Codes Predictable Vulnerability
by Mohamed M.Fouad

Today I will talk about a high risky vulnerability in Uber that allows an attacker to use the Uber service for free by using other people’s promo-codes.

Vulners – Google for hacker: How the best vulnerability search engine works and how to use it
by Alexander Leonov

A common task - you need to find all information about some vulnerability: how critical the bug is, whether there is a public exploit, which vendors already released patches, which vulnerability scanner can detect this bug in the system. Previously, you had to search it all manually in dozens of sources (CVEDetails, SecurityFocus, Rapid7 DB, Exploit-DB, CVEs from MITRE / NIST, vendor newsletters, etc.) and analyze the collected data. Today, this routine can be (and should be!) automated with specialized services. One of these services is Vulners.com, the coolest search engine for bugs. And most importantly – it’s free and has an open API. Let’s see how it can be useful for us.

Elastix: An Open Source Unified Communications Server: Understanding real-world scenarios and how to minimize security risks
by Sergio Hernandez Rodriguez and Amelia Araneo

In today’s world, VoIP technology is vital to the success of any organization in order to support communications, minimize costs, reduce disruptions to operations and increase profitability. Besides, VoIP is the keystone in new emerging technologies including, but not limited to, “IoT” (Internet of Things), “UC” (Unified Communications), “M-2-M” (Machine-toMachine) systems, among others. Attacks on networks using VoIP could degrade performance, steal important information, and generate large expenses in any organization, if it does not have the correct security mechanisms. If you are reading this, then you might know that VoIP inherited some security issues from the existing layers and protocols. Different signaling protocols have been proposed for VoIP. Currently, SIP is one of the most used because it is standard and presents advantages. As any other Internet protocol, it is susceptible in terms of security, and thus it is prone to receive different kinds of attacks. This article proposes three basic scenarios, representing common network architectures, VoIP supported. A set of general guidelines is established in terms of the aforementioned architectures, in order to provide effective solutions to minimize existing security risks.

NightCrawler: WebScraper on Python
by snoopymx

Everybody can imagine how life was for an average software developer 20 years ago. At the early stages of computer programming, develop and maintenance of large-scale software was a very difficult task. If you have some knowledge of C programming, you probably will agree with the fact that it’s a little hard to create and maintain data structures such as lists, trees or graphs in that language. These structures, although very powerful, are more delicate in the sense that you need to pay attention to the details, not only “the solution”. You have to deal with memory allocation (malloc) and if your code is not well designed, you probably are going to have memory leaks (valgrind and gdb helps a little).

Power of Scapy
by Omar Ahmed

When I was introduced to Scapy for the first time, four years ago, I didn't know much about the tool, and I thought I would try it, to see its limits, and back then there was literally just a few resources about this tool. Now after four years, I would say that this tool has no limits. When using Scapy you have infinite possibilities.

Raspberry Pi for Hacking
by Luis Borralho

In this article, I will show how to install a penetration testing operating system, used for hacking, on a Raspberry Pi 2 and how to do some basic configurations, like hardening your ssh connection to your Raspberry Pi, to make it connectable via vnc server, in a way that if you’re not so comfortable with the command line, you can use graphic access to it from your network. This article is not intended to teach you how to hack, but to be able to create your own Raspberry box for hacking purposes, white hat ones I hope :). I hope you will enjoy.

Get Kali Linux running on Cloud
by Carlos Rombaldo Jr

When it comes to open source tools for hackers, it is impossible not mention Kali Linux, which offers a complete set of free security tools out of the box and ready to rock. In addition, nowadays we have uncountable cloud providers offering cheap or even free virtual machines, why not have a Kali Linux instance running on Cloud? Unfortunately, most cloud providers do not offer Kali as supported flavour. This article presents a technique that allows you to install Kali in such environments. This technique consists of installing Kali by launching two virtual machines, one for Kali itself and another to provide the resources required to install from network boot using the PXE technology. These machines are referred to here as KALI VM and PXE VM respectively.

PokemonGo: Malware Analysis Report
by Dhawal Desai

PokemonGO has recently created a sensation within the gaming community. This is a one of a kind mobile game that links the real world with the virtual world. The application is built on Niantic’s Real World Gaming Platform that uses real locations, encouraging players to search far and wide in the real world to discover Pokémon. PokémonGO enables you to find and catch various species of Pokémon as you explore your surroundings. In this game, the player plays as a trainer with an objective to train, compete and capture.

Blog News

Protecting WordPress CMS as Simple as Breath

by  Karen Shahbazian

huge apology for our delay, we had so many articles that it took us longer than  usual to put this new issue together . But the new Hakin9 is finally out! As always we would like to send a big “THANK YOU!” to our reviewers and proofreaders. We wouldn’t be able to do this without you!

Many of you are probably on vacations, sitting on the beach and relaxing, or climbing mountains, parachute jumping or simply spending time with your family. Wherever you are, I hope  you have an amazing time! To make your vacations even better we prepared a new issue, so take a break and join the WordPress world!

>>Table of Contents<<

If you want to buy this magazine click here

Welcome everyone to the first Hakin9 issue in 2016! It’s been more than a month since our last regular issue, but we are definitely back in the game and ready to face new challenges! We hope that this New Year will bring you joy and happiness.

We would also like to thank you for all your support. It means a lot to us, more than you know. We would love to invite you to follow us on Twitter and Facebook, and don’t forget to check our blog regularly!

Do you like our magazine? Would you like to share something with us? Which topics are you most interested in? Do it, like it, share it! We appreciate your every comment. You are the ones who shape Hakin9!

Enjoy your reading,

Hakin9 Magazine’s Editorial Team

If you are not a subscriber and want to buy this magazine click here

 Download Preview

TABLE OF CONTENT

Analysis of Linux Malware Tsunami Using Limon
By Monnappa K A

A number of devices are running Linux due to its flexibility and open source nature. This has made the Linux platform the target for malware attacks, so it becomes important to analyze the Linux malware. Today, there is a need to analyze Linux malwares in an automated way to understand its capabilities.

Never Assume Secure
by Paul Janes

It’s been a wild ride in the world of cyber security the past few years. Large corporations and small businesses alike have not been immune to the wrath of nation states, hacktivists, and professional hackers for hire. And don’t think it’s only crafty pros who are bent on mayhem. In the past two weeks alone, three teenagers and a 20-year-old have been arrested in the British telecom hack of Talk Talk, which potentially affected well over 1 million customers. This was Talk Talk’s 3rd known breach since December 2014 (Khandelwal, 2015).

Modern Age: WordPress Security Threats
by Aaditya Purani

The Internet has become a medium to connect billions of people online. Until afew years ago, people used to hire programmers to code their site. To overcome that, Web Content Management Systems were created which allow nontechnical users to build a website with little or no programming knowledge. Now, anyone can start their own blogs, Business, Forums and Organizations. It helps us to bring our ideas and projects to life in an “online” environment. Some of the Web CMS are WordPress, Joomla and Drupal. The most popular content management system is WordPress.

The Life Of A Vulnerability
by Louay Saleh

Battles are always about attack and defense. In military wars, armies combat on the battlefields and the one that wins is the one that had successful attacks on the other, which failed to strongly defend. In politics, the people overthrow their government by attacking its failed policies; while the latter is also not able to defend back by satisfying their needs either by convincing them with those rejected policies or issue new acceptable ones. In sports, the player or the team wins the match by attacking the opponent persistently and also defending against receiving goals or losing points.

Deanonymization
by Alexander Antukh

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and individuals to share information over public networks without compromising their privacy. 

Agents of Shield: Diagnosis and Prevention of Dos/DDos Attacks
by Anthony Caldwell & Ronan Dunne

Given the relentless growth of online activities worldwide, the threat landscape utilized by hackers has become vast and complex. Reports indicated that individuals and organizations alike will continue to succumb to online threats and attacks. In 2014 survey conducted by the Cyberedge group, the report published that 71% of those surveyed were affected by a successful attack (Cyberedge, 2015). While a security mindset has led to some progressive security improvements in the dominant platforms for business and personal use such as Microsoft Windows® are leading to a decline in the number of vulnerabilities discovered, there are other problems emerging.

Formula Injection
by Samrat Das

To start with, Web Application Penetration Testing is the name given to software testing that focuses on web applications. Most websites out are vulnerable to wild attacks due to lack of security tests. Over 70 attacks exist which can result in a fatal impact on websites. Web Application Penetration Tests are legitimate hacking attacks carried out to discover all such vulnerabilities and inculcate proper remediation before launching the application to users.The OWASP Testing Guide is a popular testing list which is preferred by pentesters to audit applications.

Web Applications Pentesting Tools: Burp Suite Playbook
by Pranav Jagtap

Web Application pen testing can be done through various tools available. This article will mainly focus on ‘Burp Suite’ tool and its various interesting features. After reading this article, the reader will be able to configure burp suite with the browser, exploit XSS using burp plugins and will know how to use different tabs of burp suite.

How To Develop Secure Software - Action Plan To Make Secure Software
by Jeevan Dahake

The purpose of this article is to provide a guideline for secure software development. Easily avoided software defects are a primary cause of commonly exploited software vulnerabilities. By identifying insecure coding practices and developing secure alternatives, software developers can take practical steps to reduce or eliminate vulnerabilities while developing software product.

“Startup is a company that spends most of its time searching”

Interview with Yevgeniy (Jim) Brikman, founder of Atomic Squirrel
by Marta Sienicka, Marta Strzelec