Hack Forums
[UPDATED][Tutorial] Tighten up your Anonymity and Security [Tutorial][NEW] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [UPDATED][Tutorial] Tighten up your Anonymity and Security [Tutorial][NEW] (/showthread.php?tid=2878345)

Pages: Pages 1 2 3 4 5 6

[UPDATED][Tutorial] Tighten up your Anonymity and Security [Tutorial][NEW] - EmperorDAZ - Sep 20, 2012

So, there probably are many tutorials about this, but I think I should expand more about the topic I am going to talk today: Anonymity | Security

Let's begin with the Internet Browsers.

(Browser: Google Chrome and Mozilla Firefox)
Recommended plugins:
  • Do Not Track Plus aka DNT+
    [Image: dnt.png]


    This plugin is maintained by Abine,inc and it is free of charge.
    What does it do? : This plugin will block the load of some resources on the webpage known for tracking you. They have 3 categories: Social Networks, Ad Networks and Social Networks. It will also allow you to white-list some sites where you would like the load of such resources.
    Download at: http://#/47a4


  • HTTPS Everywhere
    [Image: HTTPS_Everywhere_new_logo.jpg]


    This plugin was produced as a collaboration between The Tor Project and the Electronic Frontier Foundation.
    What does it do? : This plugin consists on a local database of the hosts that would support HTTPS. You might want to use HTTPS as always as possible in every situation since it will encrypt your connection.
    Download at: http://#/47a6


  • Adblocker Plus aka ABP
    [img=100x100]http://adblockplus.org/images/abp_icon.png[/img]


    Wow, why the hell would I mention an Ad-Blocker? Ads can be consistently annoying and sometimes, they are known to spread malware. Who can tell us, the next time you go to some page, a ''flash'' based Ad pops up and it had a malicious payload? Who can tell us there isn't a new 0 Day exploit awaiting to exploit your precious computer and sending it to the botnet owner network and use it for dark purposes?
    Download at:
    • For Firefox Users: http://#/47aq

    • For Google Chrome Users: http://#/47ar

    • For K-Meleon Users: http://#/47as





Next, we shall move to securing our OS.
  • Windows Operating Systems
    • Secure your OS with Regular Updates
      Reader: "What the hell, why we need the annoying Windows Updates running again? It makes me need to restart my PC after every goddamn update!"

      Windows has it's reasons to make updates. In fact, updates are what makes your computer harder and harder to be exploited. Microsoft releases regularly updates to patch the flaws on your currently running Windows. Without it, the Conficker worm would have been very successful. But Microsoft had to release updates to patch the [ MS08-067 ] vulnerability.


    • Get a good Antivirus and a good Firewall
      Anti-Malware Protection: To be honest, I don't see many goods in getting a AV. Antivirus won't pickup the {currently} FUD viruses (unless by heuristic and luck), so, if you get infected and your AV decides to release the signature updates to detect it, it's already too late. The virus is now probably blocking your AV from working properly now. If you are one of the guys who think the AV is a must, then go ahead and grab one. I have no suggestions on AVs.

      Firewall: Firewalls are indeed a good mechanism to prevent some unauthorized network traffic. Indeed, they also will block/skew most of the Port Scanning techniques. I recommend Comodo Firewall.
      Download at: http://#/47bp


    • Use a Keyscrambler
      So, let's say, you get mysteriously infected with a keylogger. I know, the situation is very delicate now. Wait, how can I prevent this?
      By using a keyscrambler. It will encrypt anything you type on the keyboard at ease. No complicated setup.
      Download KeyScrambler Premium v.2.9.0.1 at: http://#/12wv


    • Use Sandboxie to run suspicious programs
      Sandboxie is a program that will create an isolated environment for a suspicious file. Simply run a file in sandboxie and your files will be freed of harm. Sandboxie is a paid program but you can easily search for it's cracked version around.




  • Linux | Unix based systems
    • Use sudo instead of logging in as root
      With a root account, sometimes, some mistakes can be dreadful. And, with very bad luck, you catch a malware that targeted nix based systems. You are pretty much screwed in these situations.

    • Install rkhunter and chkrootkit utilities.
      These utilities, which can be only executed by root will check your system for known rootkits. Ensure to update the rkhunter definitions file periodically by typing in the terminal:
      Code
      sudo rkhunter --update

    • Install ClamAV virus scanner
      This command-line utility (you can get a GUI for it) will check your systems for any infected file. As usual, ensure to update it regularly.

    • Enable ExecShield Protection (if available)
      This will protect you from Buffer Overflow attacks.
      Link with more information regarding it: http://#/47ce

    • Disable root login from SSH
      This is ridiculous in my opinion and it will only increase the risk if you allow root login.
      Edit the file /etc/ssh/sshd_config
      And find the line with
      Code
      PermitRootLogin yes
      Change it to
      Code
      PermitRootLogin no
      Then save.

    • Setup DenyHosts to countermeasure Brute-Forcers (SSH)
      We all hate those brute-forcers trying to penetrate our PC. So here's a guide on how to setup DenyHosts.
      URL: http://#/47d3

    • Use Public Key Based Authentication (SSH)
      Tip: Never use passphrase-less keyfiles.
      URL: http://#/47d6



  • Android
    • Get Wifi-Protector
      This application will protect you from ARP poisoning attacks and ARP based Denial of Service Attacks (Works better with ROOT support). This is a paid application but here I release the free .apk
      Download at: http://#/47ct



  • General
    • Do NOT use telnet
      Telnet has been proven extremely dangerous, since it transmits it's data in PLAINTEXT. Anyone sniffing on the network will quickly get access to your stuff. Instead use SSH which is much more safe and it's data transmission is ENCRYPTED

    • Use SFTP instead of FTP
      The same reason from above, FTP also transmits data in PLAINTEXT.




Now, let's move on to Anonymity.
  • Use VPNs that stores NO logs
    These kind of VPNs, will ensure that the police won't have any evidence (except your physical computer) regarding your actions. Most of the VPNs store logs and the few who don't are paid ones. If you are really in need for a free one I suggest proXPN but I am not sure if they store logs or not.

  • Use truecrypt
    This amazing software will encrypt the data in your drives with some pretty strong Algorithms. It is both available for Windows and Linux Operating systems and have their portable version.
    Some HF wrote a guide about it: http://#/47dh

  • TOR is NOT 100% safe.
    Although TOR is a very nice ''network", it's not 100% safe. The data is encrypted and transmitted though various nodes. Good. But the data must be decrypted at the Exit Node so it can reach the internet and retrieve/submit it's data. But this data is in "plaintext" now. Who can guarantee us that the dudes running the Exit Nodes aren't sniffing the traffic? Even with the use of SSL, what if they launch a SSLstrip attack? See, it's wasn't that safe as it sounded at first. So, don't use TOR when you are going to use online services that require "login" else you run a risk of getting your credentials or cookies stolen. TOR does NOT support UDP protocol, so don't use any Bittorrent client with it.
    Here you have a list of the TOR projects: http://#/47du



Misc.
  • Use online virus scanning engines
    So we downloaded X file from the internet, how can we be sure that it isn't infected? Simple. Submit to one of these online virus scanning sites that will scan your file with 20+ more antivirus engines. Such sites for example Virustotal.com will even submit your files to analysis to several AV vendors to see if there's any FUD malicious code on it. If there is, it will be added to the signature database of them.

  • Make a Self-Destruct message after being read
    So, we may have to tell someone stuff which is incredibly secret or we don't anyone else other than the person you talking to see it. Privnote.com exactly provides that. After you writing a small note, it will generate an URL which you will send that to your friend. Once the URL is browsed/clicked, the note self-destructs and it's irrecoverable.

  • Use an encrypted chat server that stores NO logs
    So, we have to talk about something highly confidential but we all know that the logs always comes to ruin up our lives. Fear no more! With ChatCrypt.com which uses AES-256 CTR encryption on messages we all can talk about whatever we want without fearing the others and the logs.



I took 1 hour writing this (probably more, I am regularly updating this thread), please leave feedback | comments. Thank you and I hope you enjoyed reading this.

PS: Really like my job? Drop me a bitcoin at 1PQbbxLJqxfQifbPUHATxG4RdPVe6rYY9m to fund my crazy projects*. 😝
 - The current crazy project is to make a render farm 😝

* - sandeep1024 - Sep 20, 2012

nice info and thanks for tools good work :)

* - Cyba - Sep 20, 2012

Very nice tutorial, good job mate. ;)

* - ali_3boody - Sep 20, 2012

great informations thank you alot .

* - frankie777 - Sep 20, 2012

Very nice tutorial man, worth more than the over an hour you put in. Keep it up

* - akon24 - Sep 20, 2012

Thanks for the tutorial m8 .

The best defense is a good offense

* - Zymfk - Sep 20, 2012

Very nice tutorial, I'll bookmark this for later.

Thanks for sharing this to the noobs of HF, makes them feel more secure.

* - Chelsea Monday - Sep 20, 2012

Good TUT, very nice job. Didn't know about DNT, so thank you.

* - Dr. Michio Kaku™ - Sep 20, 2012

Very HQ tutorial.
Thanx for this mate.

* - samrokzz - Sep 20, 2012

Nice info .
Good tutorial. Thanks for sharing this .

* - EmperorDAZ - Sep 21, 2012

Thank you everyone for your feedback.

* - Dimeblade - Sep 22, 2012

really useful TUT, Thankx for the post. :D

* - EmperorDAZ - Sep 23, 2012

@Dimeblade Thank you.

186 views and only 11 replies? What the hell...

* - Yugen - Sep 23, 2012

Amazing Tutorial you have made here.I love how you covered everything,Even a few new thing's that i did not know about :).Thank's.

* - 33Arsenic - Oct 1, 2012

Good tutorial, great information, thanks for sharing!