Self-Keygen and Code Caves

Submitted first CrackMe to crackmes.one

Submitted "GUI-based CrackMe1"
Challenges:
1. Find the serial key
2. Patch to always show the Congrats message.

How to speed up Bitcomet Bittorrent download speeds

Enable UNPNP Port Mapping:

Open the Control Panel.
Click Network and Internet
Click Network and Sharing Center.
In the left pane, click the link for Change advanced sharing settings.
In the Network Discovery section, select the option for Turn on network discovery and click the Save changes button.

[https://www.computerhope.com/issues/ch001367.htm]

Cracking Software

Cracking tools:
https://www.radare.org/r/

http://www.ollydbg.de/

https://x64dbg.com/#start


Tutorials:
https://error4hack.com/x64dbg-tutorial/


Assembly programming:
http://www.interq.or.jp/chubu/r6/masm32/tute/tute001.html

Reverse Engineering:
https://www.youtube.com/watch?v=fv9ii3W5htQ&list=PLHJns8WZXCdvaD7-xR7e5FJNW_6H9w-wC

Python

Setting python tabs:

"[python]": {

        "editor.insertSpaces": true,

        "editor.tabSize": 4  

    }

Hacking Elevators Access Control System

https://null-byte.wonderhowto.com/how-to/hacking-elevators-bypass-access-control-systems-visit-locked-floors-restricted-levels-any-building-0184788/

Hacking Facebook and SS7

https://www.youtube.com/watch?v=kRCIsy9URyw&t=262s

https://www.computerworld.com/article/3058020/hackers-only-need-your-phone-number-to-eavesdrop-on-calls-read-texts-track-you.html

https://www.securitynewspaper.com/2018/02/19/intercept-mobile-communications-calls-messages-easily-without-hacking/

https://medium.com/@vasanthavanan59439/ss7-the-deadliest-attack-6423de7fe8c0

https://blog.securegroup.com/phone-hacking-through-ss7-is-frighteningly-easy-and-effective

https://cyware.com/news/can-you-hack-a-facebook-account-by-just-using-the-phone-number-yes-you-can-19617269

https://alltop9.com/phone-number-facebook-hack/

https://www.rtl-sdr.com/hacking-gsm-signals-with-an-rtl-sdr-and-topguw/

https://www.youtube.com/watch?v=da1CLA82jw8


RTL-SDR
https://www.youtube.com/watch?v=FqtJ-TvtLTQ  [stopped 6.54]
https://www.youtube.com/watch?v=37q53h0b4q8 [ how to setup rtl-sdr in kali linux]


Malaysian Maxis, Digi, Celcom band allocation:
https://www.malaysianwireless.com/2016/02/spectrum-maxis-900mhz-1800mhz/
https://forum.lowyat.net/topic/3333921/all
https://en.wikipedia.org/wiki/GSM_frequency_bands


Sellers:
https://www.lazada.com.my/products/100khz-17ghz-uv-hf-rtl-sdr-usb-tuner-receiver-uv-antenna-diy-kits-i529008531-s1045654004.html?ef_id=EAIaIQobChMIx92f0IWv5gIV2Q0rCh0DSQ-IEAQYASABEgIhFfD_BwE:G:s&s_kwcid=AL!3150!3!244160057898!!!u!294357559827!&exlaz=d_1:mm_150050845_51350205_2010350205::12:1032211143!54400014687!!!pla-294357559827!c!294357559827!1045654004!137976772!244160057898&gclid=EAIaIQobChMIx92f0IWv5gIV2Q0rCh0DSQ-IEAQYASABEgIhFfD_BwE


Go for Rtl2832U, TXC0  0.5 ppm crystal,  R820T2 Tuner

Alternatives to Entropay

https://www.aspkin.com/forums/entropay/122831-alternatives-entropay-closing-down-virtual-credit-card-vcc.html

Kevin Mitnick Quotes

"People are used to having a technology solution [but] social engineering bypasses all technologies, including firewalls," Mitnick said

Hacking Windows 7

https://www.youtube.com/watch?v=05o-w3S83sY   [ eternal blue exploit ]

https://www.youtube.com/watch?v=vweWCTVWdxU [ eternal blue - Loi ]

Unlocking Redmi 7A

Followd these instructions:

https://www.androidexplained.com/redmi-7-unlock-bootloader/

Created a xiaomi  account with login:  0174xxxx  and passwd x------
at:  https://account.xiaomi.com/

Downloaded:  this tool:

https://en.miui.com/unlock/download_en.html

connected phone to pc via usb then ran the miflash_unlock.exe

then logged in with the above credentials.
But it asks to wait 168 hours ( 1 week ). Today is 5 Nov, 2019

Others also same:
https://forum.xda-developers.com/Mi-9/how-to/unlocking-bootloader-immediately-t3926424/page11

Other references:
`````````````````````
https://c.mi.com/thread-1857937-1-1.html

Do not logout of xiami account on phone, or you will need to wait another 168 hours:
https://c.mi.com/thread-2262302-1-0.html

WPS attacks

https://www.youtube.com/watch?v=SY0WMHTCCOM

Social engineering tools

Black eye:
https://www.securitynewspaper.com/2019/01/02/fake-any-website-in-seconds-facebook-snapchat-instagram/

https://www.youtube.com/watch?v=C2kg-9YIBxY

Fake Access Point

Ghost Phisher:
https://www.youtube.com/watch?v=CuhtEDdTjdM  [ Not working ]

https://www.youtube.com/watch?v=CLViFZ5Luds  [ Not working ]


https://dalewifisec.wordpress.com/2013/05/16/evil-twin-access-point-attack-explained/


Airgeddon:
https://null-byte.wonderhowto.com/how-to/hack-wi-fi-stealing-wi-fi-passwords-with-evil-twin-attack-0183880/

https://github.com/v1s1t0r1sh3r3/airgeddon/issues/287   [issues]



mdk3 flood ssid:
https://www.youtube.com/watch?v=svAvpcS_UwQ


Fix for network-manager conflict with airmon-ng :
https://rootsh3ll.com/evil-twin-attack/

how to remote desktop

https://www.youtube.com/watch?v=lW5vYPtApLc

Then edit /etc/xrdp/xrdp.ini by adding address=0.0.0.0 below line #background
also set port to 3390 in the  [Globals] section

Then adduser -home /home/eve  eve [ not necessary ] can login as root

/etc/init.d/xrdp start|stop

passwd 123456

No need to adduser. Just logout root on local machine. Then RDP from windows.

Then in windows 10,  rdp client, set to size 1280 by 800 pixels
high color 16 bit

Connect to 192.168.0.105:3390

[no need]
How to fix problem with keyboard fn key always down problem.
RDP to linux from windows. Then press Fn + Esc.
Then logout from windows rdp session. Relogin locally on linux.

[just do this]
Another fix is to logout locally. Then relogin again locally.

Don't waste time with Bug Bounty Hunting

1. Only the elite top few (less than 3%)  are doing well, the rest are doing miserably.
2. It is active income, not passive income.
3. You earn less than insect exterminators: 
     https://www.theregister.co.uk/2019/01/15/bugs_bounty_salary/

4. You work about 75 hours a week but earn only an average of USD187 per month.
     That's 10.7 hours a day and getting paid only USD6.23 per day.

Free online encryption

https://www.online-toolz.com/tools/text-encryption-decryption.php

Physical Hacking

https://www.youtube.com/watch?v=eft8PElmQZM

Capture the flag CTF

http://fstm.kuis.edu.my/blog/what-is-ctf-capture-the-flag/

https://ctf365.com/

https://www.wizlynxgroup.com/news/2019/07/19/pwntilldawn-malaysia-2019/

https://www.quora.com/What-are-the-best-online-hacking-and-CTF-websites

RasPwn OS Setup and Hacks

Setup:
http://raspwn.org/documentation
https://www.instructables.com/id/Learn-to-Hack-Ethically-With-RasPwn-OS/