Zulu - Zscaler Malware Scanning Service

Zscaler has launched a new free online service called Zulu that can assess the security risk associated with URLs by analyzing the content they point to, as well as the reputation of their corresponding domain names and IP addresses.

Zulu allows security savvy users who investigate various web attacks to choose what User-Agent and Referrer headers the scanner will use when accessing a URL. "A unique benefit of this approach is that we can deliver a risk score even when the page content is no longer available," said Michael Sutton, vice president of security research at Zscaler. "While we can't access the page, we can still assess the URL and host and when they deliver a high risk score despite a lack of page content, one can often conclude the page was indeed malicious but has since been taken down," he explained.

Depending on the type of content a URL points to, Zulu can perform an antivirus scan using the VirusTotal multi-engine service, try to match a file's MD5 hash in Zscaler's database, search for known JavaScript obfuscation patterns and phishing heuristics, or use the company's malware detection technologies.

Hacker will release full Norton Antivirus code on Tuesday

A hacker with code name of 'Yama Tough' announce via Twitter that on Tuesday he will leak the full source code for Symantec Corp's flagship Norton Antivirus software which is 1,7Gb src.

Last week Yama Tough has released fragments of source code from Symantec products along with a cache of emails. The hacker says all the data was taken from Indian government servers. Yama Tough is trying to prove that Indian government was snooping on America and China.

Your Android really needs Antivirus Security ?

       Why shouldn't you protect your Android phone? Why to use an Antivirus for your Android? So that users can protect their devices from trojans, viruses, spyware, and other types of malware. Most people carry a lot of sensitive data on their phones. Recently an SMS Trojan horse posing as a media player began infecting Android phones on Russian networks. Once the victim installed the malicious app, it began sending text messages to premium numbers, leaving the user with a huge phone bill.

Some Best Hacking tools to Start With

These are Top 20 Hacking Tools, the list is can go on, and these are a few to name:


Nessus
The “Nessus” Project aims to provide to the internet community a free, powerful, up-to-date and easy to use remote security scanner for Linux, BSD, Solaris, and other flavors of Unix.
Download Nessus


Ethereal
Ethereal is a free network protocol analyzer for Unix and Windows. Ethereal has several powerful features, including a rich display filter language and the ability to view the reconstructed stream of a TCP session.
Download Ethereal


Snort
Snort is an open source network intrusion detection system, capable of performing real-time traffic analysis and packet logging on IP networks.
Download Snort


Netcat
Netcat has been dubbed the network swiss army knife. It is a simple Unix utility which reads and writes data across network connections, using TCP or UDP protocol
Download Netcat


TCPdump
TCPdump is the most used network sniffer/analyzer for UNIX. TCPTrace analyzes the dump file format generated by TCPdump and other applications.
Download TCPdump


Hping
Hping is a command-line oriented TCP/IP packet assembler/analyzer, kind of like the “ping” program (but with a lot of extensions).
Download Hping


DSniff
DNSiff is a collection of tools for network auditing and penetration testing. dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.).
Download DSniff


GFI LANguard
GFI LANguard Network Security Scanner (N.S.S.) automatically scans your entire network, IP by IP, and plays the devil’s advocate alerting you to security vulnerabilities.
Download GFI LANguard


Ettercap
Ettercap is a multipurpose sniffer/interceptor/logger for switched LAN. It supports active and passive dissection of many protocols (even ciphered ones)and includes many feature for network and host analysis.
Download Ettercap


Nikto
Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 2500 potentially dangerous files/CGIs, versions on over 375 servers, and version specific problems on over 230 servers.
Download Nikto


John the Ripper
John the Ripper is a fast password cracker, currently available for many flavors of Unix.
Download John the Ripper


OpenSSH
OpenSSH is a FREE version of the SSH protocol suite of network connectivity tools, which encrypts all traffic (including passwords) to effectively eliminate eavesdropping, connection hijacking, and other network-level attacks.
Download OpenSSH


TripWire
Tripwire is a tool that can be used for data and program integrity assurance.
Download TripWire


Kismet
Kismet is an 802.11 wireless network sniffer – this is different from a normal network sniffer (such as Ethereal or tcpdump) because it separates and identifies different wireless networks in the area.
Download Kismet


NetFilter
NetFilter and iptables are the framework inside the Linux 2.4.x kernel which enables packet filtering, network address translation (NAT) and other packetmangling.
Download NetFilter


IP Filter
IP Filter is a software package that can be used to provide network address translation (NAT) or firewall services.
Download IP Filter


pf
OpenBSD Packet Filter
Download pf


fport
fport identifys all open TCP/IP and UDP ports and maps them to the owning application.
Download fport


SAINT
SAINT network vulnerability assessment scanner detects vulnerabilities in your network’s security before they can be exploited.
Download SAINT


OpenPGP
OpenPGP is a non-proprietary protocol for encrypting email using public key cryptography. It is based on PGP as originally developed by Phil Zimmermann.

Download OpenPGP

Some Best Free Software for your Desktop and Laptop

Top 10 free software for laptop and desktop to enhance your productivity and security.Software which solve your synchronization, battery, Wi-Fi and USB problems. They’ll make it easier and more fun to get your work done, too.

Synchronization Tools:
If you own a desktop and a laptop, you frequently have to deal with synchronizing files and folders between them. If you’re not careful, you’ll end up working on older files on one computer while the newer versions will on the other. Worse case scenario: when copying files between the machines, you might accidentally overwrite a newer version with an older one. The following three freebies solve those problems for you. They can synchronize your files automatically, and they can even synchronise between PCs and Macs.

SugarSync Free:
This excellent software work as a synchronization tool and also as an automated backup program. Simple to use, it also offers 2GB of free online backup space, takes up little RAM and few system resources, and works with Macs as well as PCs. All that, and it’s free.

Simply install the software on your computers and indicate which folders to synchronise. SugarSync Free then works in the background. If the computer to which you wish to sync is not online, the files will sync to it when it returns. In addition to syncing the files, SugarSync Free backs them up online.

You can do a lot more, too, such as sharing files and folders with other people. The software also keeps older versions of your file online so that you can revert to any of them.

The free edition of the software will synchronise only two computers, and it has a limit of 2GB of online storage space. For-pay versions let you synchronise among multiple PCs and offer faster upload speeds; prices range from $5 per month to $25 per month.

Download SugarSync Free

Windows Live Sync:
What if you want to synchronise your laptop with more than one other desktop or laptop, but you don’t want to spend the money that SugarSync charges for it? Give the free Windows Live Sync a try. With this tool, you can sync folders on as many computers as you want, and you don’t have to pay a penny. Keep in mind, however, that this software doesn’t include online backup; it only synchronises folders from computer to computer.

Download Windows Live Sync

Laptop Battery Managers:
Ah batteries, backbone of every laptop. They never seem to have enough power, and they run out too quickly. here these downloads will help you manage your laptop’s battery life, and they can even help you get more out of your battery.

BattCursor:
You have work to do, but you know that your battery is starting to run out. So you keep checking the laptop’s battery icon to see how much power is left and every time you check, you waste precious time. Sound familiar?

This clever, free program shows your laptop’s remaining battery life on your mouse cursor. The app can display the information on your desktop, as well.

Download BattCursor

BatteryBar:
Want to check battery life, without moving your mouse cursor on battery icon. BatteryBar shows, on your taskbar, exactly how much power you’ve already used and how much you have left. You can set the app to display remaining battery life either as a percentage or as an amount of time.

Hover your mouse over BatteryBar, and you’ll see even more information, including the total battery capacity, the discharge rate, the battery wear, and how much total capacity your battery has in terms of time per full charge.

When you first run the program, it won’t appear to work. You’ll need to configure your taskbar to display it. Right click the taskbar, and select Toolbars, Taskbar. Once you do that, the program will appear.

Download BatteryBar

Wireless Networking Utilities:
One of the main reasons to use a laptop is that you can connect wirelessly when you’re away from your home or office. But finding a connection, and keeping safe when you are connected, can be problematic. Here are two downloads that can help.

Hotspot Shield:
When you use your laptop to connect to a hotspot at a public location such as a coffee shop or airport, you put yourself at risk. Hackers may be able to sniff your data packets, invade your PC and steal your username and password when you log in to websites.

Here’s a freebie that promises to keep you safe by encrypting your connection when you’re at a hotspot so that no one else can read the information you send. The program is extremely easy to use. Install it and it logs you in to a virtual private network (VPN) that performs the encryption.

Download Hotspot Shield

WeFi:
If you’re a laptop owner and a fan of social networking, you can combine the two with WeFi. Not only does this program find hotspots so that you can connect to them, but it also finds people to whom you can connect as well. After you install WeFi, the app lists nearby hotspots along with information about each, such as the signal strength and whether the hotspot is encrypted. To connect to one, double click it. You can also go to a web page that displays a map of where you are and shows nearby hotspots.

To see people who are connected to hotspots near you, click the People tab. You can then see more information about any of them, and get in touch with them via the software.

WeFi also includes a feature that will warn you away from suspicious web pages. If you prefer, however, you can turn it off during the installation process: Uncheck the box next to Include Wi-Fi Secure Browsing.

Download WeFi

USB Flash Drive Programs:
USB flash drives are designed to be portable, just like your laptop. But they can be problematic. For one thing, how can you make sure that your files aren’t compromised in the event that you lose your drive? We have a few downloads to help with that, and more.

PortableApps:
If your laptop or netbook has only a modest hard drive, you may not be able to fit all of your applications on it. Microsoft Office, for example, can occupy plenty of hard disk space and leave you little room for anything else.

With PortableApps, you won’t have that problem. In this download you get a full suite of free applications, including OpenOffice.org, which has a word processor, a spreadsheet, a presentation program, a database, and a drawing program. You’ll also find an antivirus utility, a slimmed down version of Firefox, and more. In addition to the applications, you get backup software, plus a menu that makes accessing all of the programs easy.

The Light version takes up just 150MB installed, and the more full featured Standard version consumes 355MB. You can install the software on your laptop or netbook of course, but to save space you can install the programs on a USB drive and even run them from there. You can store your data on the USB drive as well. No matter how little storage space your laptop or netbook has, you’ll be set.

Download PortableApps Standard

TrueCrypt

USB drives are a great way to carry work with you when you travel. They’re light, they’re cheap, and they have enough capacity to handle large image files, hefty documents, and entire presentations. But you can easily lose or misplace them, a serious problem if your files are personal or sensitive.

The free TrueCrypt does an excellent job of keeping your files safe from prying eyes, even if your USB drive falls into the wrong hands. You get a choice of many different encryption algorithms, including the powerful 256-bit AES and 448-bit Blowfish methods. The program will not just encrypt the files and folders, but also hide them so that no one but you knows that they are there.

This isn’t the most intuitive of programs to work with, so take some time to read the manual and be sure to use the program’s built-in wizards.

Download TrueCrypt

Enjoy...!!!

Run your Trial Software Lifetime

With help of this post you can run any trial software which comes with some finite timeline period - for example 15 days trial - you can run it for your lifetime period just in 2 simple steps without changing date/time and registry:


Step 1: Download RunAsDate, and open it.

Step 2: Now click on Browse - select application, installed date of that application - and click run.

Important Note:


1: Note down the date and time, when you install the software for the first time.
2: Once the trial period expires, you must always run the software using RunAsDate.

3: After the trial period is expired, do not run the software(program) directly. If you run the software directly even once, this hack may no longer work.

4: It is better and safe to inject the date of the last day in the trial period. For example, if the trial period expires on dec 31 2011 then always insert the date as dec 30 2011 in the RunAsDate.

Easy Photo Resize Tool

Looking for some easy photo resize tool then say thanks to faststone.org, they provide you very light weight  but effective solution for rezing your photo with many other options. Just try it.

Click here to Download FastStone Photo Resizer.

Close all open application with one click

At the end of the day I always like to close the open applications to prepare my computer for the next day. Since I rarely reboot my desktop, I manually close each application. Depending on the number of open applications this can be a waste of time.   The people at NTWind Software have a perfect utility for this situation aptly called Close All Windows. Instead of manually closing each application just click the Close All Windows button on your taskbar.


To get started head over to NTWind Software and download the latest version of Close All Windows.


After the file is downloaded extract the CloseAll folder to a permanent location on your computer.  Since Close All Windows is an application I extracted the folder to C:\Program Files\ where applications are typically installed.

For easy access it is best to pin the application to the taskbar. Drag the Close All Windows application from the CloseAll folder onto the taskbar.

Congratulations, you are now more efficient.

3D Cube Virtual Desktop for Windows 7

Hey friends, now you can enjoy popular 3D cube desktop of ubuntu in windows 7 also by using yod'm. Yod'm 3D is a virtual desktop manager that allows you to have 4 different desktops arranged on a 3D cube.  Holding down CTRL+SHIFT and using the left or right arrow keys rotate the cube showing the virtual desktops. Alternatively, you can click and drag your mouse to switch desktops.


Click here to DOWNLOAD.

Add "Take Ownership" to Explorer Right-Click Menu in Win 7 or Vista

Taking ownership of system files or folders in Windows 7 or Vista is not a simple task. Whether you use the GUI or the command line, it takes far too many steps.
Thankfully somebody created a registry hack that will give you a menu item for “Take Ownership” that will handle all the steps for you.  (If you are the person that originally made this script, let me know and I’ll give you credit)
Here’s what the new right-click menu will look like after installing this registry hack.

Install
Download and unzip the files contained in the zipfile. Double-click the InstallTakeOwnership.reg file and click through the prompts. No reboot necessary.
Uninstall
Double-click the RemoveTakeOwnership.reg file and click through the prompts. No reboot necessary.

Click here to DOWNLOAD.

OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release

The third beta of OWASP Mantra Security Toolkit has been released. One of the main features of this version is the multi-language support. Mantra now supports Hindi and Spanish, in addition to English. If you can give us a helping hand by translating Mantra into more languages, feel free to contact us and we will look forward to see you in Team Mantra. This version is based on Firefox 7.0.1 and comes with some new extensions which you will definitely find useful. One of the other changes is renaming the "Ayudha" menu back to "Tools". We all are comfortable with "Tools" and we decided to keep it intact.


This is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers, security professionals, etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software. Mantra is a security framework which can be very helpful in performing all five phases of attacks including reconnaissance, scanning and enumeration, gaining access, escalation of privileges, maintaining access, and covering tracks. Apart from that, it also contains a set of tools targeted for web developers and code debuggers which makes it handy for both offensive security and defensive security related tasks. Click Here to Download OWASP Mantra.

Jynx Kit (LD_PRELOAD) Userland Rootkit Released

Jynx Kit is a LD_PRELOAD userland rootkit. Fully undetectable from chkrootkit and rootkithunter. Includes magic packet SSL reverse back connect shell based on SEQ/ACK numbers in a single packet. Solid building block for further LD_PRELOAD rootkits. Click here to DOWNLOAD.

Submitted by ErrProne (www.blackhatacademy.org)

Metasploit Community Edition - Advance penetration testing tool by Rapid7

Open-source penetration testing "Metasploit Framework" Rapid7 a project funded by the U.S. on October 18 (U.S. time), and penetration testing tools platform to Metasploit Framework "Metasploit Community Edition" was released. Available for free download from its Web site.

According to Rapid7 Chief Security Officer and Metasploit Creator HD Moore, "The best way to tackle the increasing information security challenge is to share knowledge between practitioners, open source projects and commercial vendors."

Community Editioin is based on the Metasploit Framework, a combination of the basic user interface available in commercial versions. Using penetration testing exploit basic, GUI simple, that provides entry-level modules such as a browser. You can verify any exploitable vulnerabilities, that can streamline vulnerability management and data protection. Can also import third-party vulnerability scanning reports.

The Community edition sports a version of the slick interface that the commercial version of Metasploit uses, making it easier for everyone to use the very popular pen test tool. The Community edition is free and HD Moore, founder of Metasploit says it will always be free, but it is not open sourced. The Metasploit framework which powers both the community and commercial versions is open source and Moore says that will also always be the case.

The capabilities of Metasploit Community include:

• A simple graphical user interface, which makes it much easier to get started with vulnerability verification and security assessments than command-line based alternatives.
• Network discovery, enabling users to map their networks by identifying hosts, scanning for open ports and fingerprinting their operating systems and services.
• Integration with vulnerability scanners, so scan data from Rapid7 Nexpose, Nmap and a dozen other solutions can be imported directly into Metasploit Community. Nexpose scans can also be initiated and sites imported directly from within Metasploit Community.
• Basic exploitation, enabling users to verify which vulnerabilities are actually exploitable and must be remediated - and which ones don't. This increases productivity and reduces the cost of a vulnerability management program and helps prevent data breaches.
• Module browser, leveraging the world's largest database of quality-assured exploits so users can easily find the right exploit. Each module includes a reliability ranking, indicating its typical success rate and impact on the target system.
• Security and IT professionals can easily upgrade from Metasploit Community to Metasploit Pro, continuing to work with the familiar interface on the existing installation. Metasploit Pro adds more powerful capabilities, including smart exploitation, password auditing, Web application scanning, post-exploitation, social engineering, team collaboration, comprehensive reporting and enterprise-level support.
• More details about the Community Edition can be found in a post on the Rapid7 Community blog. Metasploit Community Edition is available to download from the Rapid7 web site. The open source version of Metasploit is released under a three-clause BSD licence.

Encipher It : Easiest Browser based Advanced

Encipher It : Easiest Browser based Advanced Encryption Tools [Video Demonstration] "Encipher It" One of the best and easiest AES Text encryptor for Google Mail or anything else. It Provide more secure PBKDF2 (Password-Based Key Derivation Function) key generation. It use Advanced Encryption Standard to protect your data. All encoding/decoding is performed locally in your browser. Video Demonstration by Network NUTS: Subscribe "Network Nuts" You Tube Channel for More Linux Tutorials.

Click on link to watch Video Demonstration by Network NUTS:

Internet Download Manager 6.07 with lifetime password (IDM 6.07)

Click here to download latest IDM v 6.07