Sunday, March 28, 2010

Gmail Alert for Detecting suspicious account activity

Gmail Team have introduced another interesting feature to send security alerts in case of suspicious account activity.
"If it looks like something unusual is going on with your account, we'll alert you by posting a warning message saying, 'Warning: We believe your account was last accessed from...' along with the geographic region that we can best associate with the access," engineering director Pavni Diwanji explained in a blog post


"While we don't have the capability to determine the specific location from which an account is accessed, a login appearing to come from one country and occurring a few hours after a login from another country may trigger an alert."

It was not found working for me when i tested this feature :(

Sunday, March 21, 2010

Virtual TunnelsTools

Last night one of my good friend Sabby told me about a tool Ultravpn to bypass the restricted environment. The tool was a good find for me as an example of openvpn based tools after Aloneweb went out and alwaysvpn getting paid service.
The main key feature which makes it different from other Free VPN services like freevpn , packetix.net , freegate, yourfreedom  is no bandwidth restriction and you will get download speed of 50-60 Kbps per thread.
It seems to be best free vpntool available right now with servers hosted in france. However, i had a different feeling about the site with no source code download link although it says its source code is free which is based on openvpn. Also it states "Your network is as secure as its weakest part. Most certainly, UltraVPN will not be this weakest part." :) .
Tor is also one of the tool used for anonymity and is more secure/transparent  as it blocks Java, Flash, ActiveX, Adobe Plugines and other applications which can lead to stealing of sensitive data. You can also use the Tor for encrypting the communication using Tor as SOCKS proxy for your web browser and other applications like skype and messengers.

Friday, March 19, 2010

Net Cut Tool

It took some time to search for this old tool on net . I am posting it here for download .
NetCut  is a nice tool to perform an ARP spoofing MITM attack .

Also , Here is one of the video which shows the usage of netcut tool to bypass a mikrotik device URL form authentication.

Sunday, March 7, 2010

Malzilla-Malware Hunting Tool ( iframes injection)

As, Malware coders are targetting iframes injection techniques to infect the webpages and it is predicted to be in high volume this year. Here is one tool which let you understand the iframes injection techniques and detection .
  This tool is quite interesting to analyze the Malware scripts in the Webpages . Web pages that contain exploits often use a series of redirects and obfuscated code to make it more difficult to follow. MalZilla is a useful program for use in exploring malicious pages. It allows you to choose your own user agent and referrer, and has the ability to use proxies. It shows you the full source of webpages and all the HTTP headers. It gives you various decoders to try and deobfuscate javascript aswell.

Tuesday, March 2, 2010

Gmail Last Account Activity Flaw

This interesting feature shows the list of IP address from which the account was accessible in past.
Well seems like they are not going to remove this feature from a long time.