Hi 🙂

Disclaimer: Ethical Hacking should be always performed on services that provide permissions on doing so, otherwise it cause legal issues and cost you. Generally, ethical hacking is performed to find vulnerabilities of a service by its owner or an authorized party.

To perform ethical hacking on a service that welcomes it, the first step is to gather information about the service. In particular, passive reconnaissance is the process of information gathering about a target service such as a web application. This could include personal or social information such as

• textual data: name, email, phone number, and job information
• image data: computer and desk at the office/home (could leak applications/tools used by a target person)

or location information (mostly physical).

Following are some tools that can be used on Kali Linux for passive reconnaissance.

• theHarvester (built-in to Kali)

For a given domain, it searches information on sources such as google, twitter and yahoo

Command: theHarvster -d <domain> -b <source>

• sublist3r

For a given domain (e.g., example.com) this tool finds subdomain (e.g., sub.example.com) information. It can be installed by command apt install sublist3r. Additionally, this is another online tool that can be used to perform similar information gathering.

Command: sublist3r -d <domain>

• Wappalyzer (Browser add-on)

This tool provides meta information about the implementation of a web application such as version numbers, frameworks used, programming language used, content management used, etc.

• Google Search

It is possible to perform effective search on Google by using specific keywords such as to find for particular type of files at a website you can use

site:<domain> filetype: <file type e.g., pdf, docx, etc>

Cheers !

Hi, in this guide I will explain how to re-flash chaos_calmer on an open WRT device with Barrier Breaker installed. The router I refer is tplink WR841n, which is of hardware version v11. In the official website of OpenWRT, it specifies that the chaos_calmer (15.05.1) of v10 image is compatible with the v11. Therefore, v10 of chaos_calmer image is used in this tutorial.

1. Download tl-wr841n-v10-squashfs-factory.bin on to Windows and rename as wr841nv10_tp_recovery.bin.
2. As explained in post (no.2 under Security –>ethical hacking of this blog ), use WinSCP software to transfer this file to the router. Then flash the image using

   sysupgrade -F -v wr841nv10_tp_recovery.bin

3. Now, wait until the router reboots. Once rebooted you can see the lights of router as shown in the below image.
4. If you try to connect to the router through SSH at this moment, it will ask for a password. Although the default setting has no password, you will get permission denied.
5. Therefore, first use the LuCi GUI comes with chaos_calmer firmware, to set a password.
6. Open the browser –> visit 192.168.1.1 –> You can login to the root user account without a password.
7. Next, click on the “password configuration link” on message at the top. Set a new password, and also select the SSH access interface to lan.–> Save and apply. (Do not open the GUI on more than one tab on the browser. It will avoid saving the settings.)
8. Again, if you try to connect to through ssh. You can use the updated password to login.

Cheers !!! 🙂

The WordPress.com stats helper monkeys prepared a 2015 annual report for this blog.

Here’s an excerpt:

The concert hall at the Sydney Opera House holds 2,700 people. This blog was viewed about 19,000 times in 2015. If it were a concert at Sydney Opera House, it would take about 7 sold-out performances for that many people to see it.

Click here to see the complete report.