[WARHOX] TOP 5 MOST USEFULL TRICKS

tricks #5

"google orbit"

"google epic"

"google space"

"PACMAN"

"google in 1998"

Google is awesome. Yes, there have been questions raised about its new privacy policy and creepy Safari tracking and frankly, it just knows way too much about everyone who has ever created a Google account. But let’s put that aside for a moment and focus on all its cool quirks, shall we?

They’re built into practically every Google product — if you look hard enough, you’ll find that entering the right search term or typing a code can make Google collapse, spin or create fictional characters. Here are 15 easter eggs (hidden, entertaining things developers build into a website or program) for you to discover the next time you’re Googling.

Kali Linux 2018.2 Release

Kali Linux 2018.2 Release

This Kali release is the first to include the Linux 4.15 kernel, which includes the x86 and x64 fixes for the much-hyped Spectre and Meltdown vulnerabilities. It also includes much better support for AMD GPUs and support for AMD Secure Encrypted Virtualization, which allows for encrypting virtual machine memory such that even the hypervisor can’t access it.

Easier Metasploit Script Access
   If you spend any significant amount of time writing exploits, you are undoubtedly familiar with the various Metasploit scripts that are available, such as pattern_create, pattern_offset, nasm_shell, etc. You are likely also aware that all of these helpful scripts are tucked away under /usr/share/metasploit-framework/tools/exploit/, which makes them more than a little difficult to make use of. Fortunately, as of metasploit-framework_4.16.34-0kali2, you can now make use of all these scripts directly as we have included links to all of them in the PATH, each of them prepended with msf-.

root@kali:~# msf-
msf-egghunter          msf-java_deserializer  msf-nasm_shell
msf-exe2vba            msf-jsobfu             msf-pattern_create
msf-exe2vbs            msf-makeiplist         msf-pattern_offset
msf-find_badchars      msf-md5_lookup         msf-pdf2xdp
msf-halflm_second      msf-metasm_shell       msf-virustotal
msf-hmac_sha1_crack    msf-msf_irb_shell

root@kali:~# msf-pattern_create -l 50 -s ABC,123
A1A2A3B1B2B3C1C2C3A1A2A3B1B2B3C1C2C3A1A2A3B1B2B3C1

Package Updates
   In addition to the above changes, there have been updates to a number of applications including Bloodhound, Reaver, PixieWPS, Burp Suite, Hashcat, and more. Since there are far too many packages to include in a default ISO, to see the full list of changes, we encourage you to review the Kali Changelog.

Download Kali Linux 2018.2
   If you would like to check out this latest and greatest Kali release, you can find download links for ISOs and Torrents on the Kali Downloads page along with links to the Offensive Security virtual machine and ARM images, which have also been updated to 2018.2. If you already have a Kali installation you’re happy with, you can easily upgrade in place as follows.

   root@kali:~# apt update && apt full-upgrade

   As always, if you encounter any bugs at all, we implore you to open a report on our bug tracker. We can’t fix what we don’t know about.


What's new in Kali Linux 2018.2 ?
   New Tool Requests: Ropper v1.10.10 - Display info about files in different formats & find gadgets to build ROPs chains (sbrun)

   Tools Upgrade:
    * Bloodhound v1.5.1 (sbrun)
    * OWASP JoomScan Project update (sbrun)
    * Update ExploitDB-Papers (g0tmi1k)
    * Update ExploitDB-Bin-Sploits (g0tmi1k)
    * hashcat v4.0.0 available (sbrun)
    * Update SecLists v1.3 (g0tmi1k)
    * burpsuite 1.7.32 available (sbrun)
    * Upgrade Burpsuite to 1.7.30 (sbrun)
    * reaver v1.6.4 released (muts)
    * pixiewps v1.4.2 released (sbrun)

   Kali Package Bug
    * Dradis fails to run (sbrun) - resolved
    * jsql injection not working even update new version - resolved
    * Gnome NetworkManager OpenVPN immediately disconnecting (rhertzog) - resolved
    * inetsim pem key file is owned by root user - resolved
    * PROBLEM WITH INSTALLING XPLICO ON KALI LINUX (sbrun) - resolved
    * btscanner crashes with the "b" (brute force scan) option (sbrun) - resolved
    * arachni doesn't run with using sudo anymore - resolved

   General Bug: Kali desktop theme background doesn't work for 2560x1600 resolutions (sbrun) - resolved

   Kali Package Improvement
    * Make msfdb more verbose (g0tmi1k)
    * Update Usage Examples of wpscan (g0tmi1k)
    * Add Kali.Training to Firefox Bookmark (sbrun)
    * Make openvas-* more verbose (g0tmi1k)
    * Make beef-xss start/stop more verbose & menu updates (g0tmi1k)
    * Make xplico start/stop more verbose & menu updates (g0tmi1k)
    * Make dradis start/stop more verbose & menu updates (g0tmi1k)
    * Responder - Add ./Tools/* into $PATH (sbrun)

    * metasploit framework's pattern_create and offset (Add to $PATH) (g0tmi1k)

Read more
 * Kali Linux 2017.3 Release
 * Parrot Security OS 3.11 Release

From Kali Linux

Fix PUBG Mobile Error Code 154140712

Hey Guys Welcome in My Blog And Today I Fix PUBG Mobile Error Code 154140712 

So Lets Get Started.

• The main problem Of this error code is that
• Tencent Games Did not Release In Some country's and some time PUBG mobile version Did not ditect your real region and they show you this Error.

To Solve This Error use a VPN connection in your phone with a valid region And i recommende OPERA VPN for this solution install it it's free available on play store.

And Watch This Video Gauide.

Wifiphisher - Phishing attacks with fake WiFi clients

Wifiphisher - Automated victim-customized phishing attacks against Wi-Fi clients

About Wifiphisher

Wifiphisher logo

   Wifiphisher is a security tool that performs Wi-Fi automatic association attacks to force wireless clients to unknowingly connect to an attacker-controlled Access Point. It is a rogue Access Point framework that can be used to mount automated victim-customized phishing attacks against WiFi clients in order to obtain credentials or infect the victims with malwares. It can work as social engineering attack tool that unlike other methods it does not include any brute forcing. It is an easy way for obtaining credentials from captive portals and third party login pages (e.g. in social networks) or WPA/WPA2 pre-shared keys.

   Wifiphisher works on Kali Linux and is licensed under the GPL license.

How it works
   After achieving a man-in-the-middle position using Wi-Fi automatic association techniques (including "KARMA" and "Known Beacons" attacks), Wifiphisher by default redirects all HTTP requests to an attacker-controlled phishing page.

   From the victim's perspective, the  accesattack makes use in three phases:

   1, Victim is being deauthenticated from hers point. Wifiphisher continuously jams all of the target access point's wifi devices within range by forging “Deauthenticate” or “Disassociate” packets to disrupt existing associations.

   2, Victim joins a rogue access point. Wifiphisher sniffs the area and copies the target access point's settings. It then creates a rogue wireless access point that is modeled by the target. It also sets up a NAT/DHCP server and forwards the right ports. Consequently, because of the deauth attack and the automatic association techniques, clients will eventually start connecting to the rogue access point. After this phase, the victim is MiTMed.

   3, Victim is being served a realistic specially-customized phishing page. Wifiphisher employs a minimal web server that responds to HTTP & HTTPS requests. As soon as the victim requests a page from the Internet, wifiphisher will respond with a realistic fake page that asks for credentials or serves malwares. This page will be specifically crafted for the victim. For example, a router config-looking page will contain the brand of the victim's vendor. The tool supports community-built templates for different phishing scenarios.

Performing MiTM attack

Requirements: Following are the requirements for getting the most out of Wifiphisher:
 * Kali Linux. Although people have made Wifiphisher work on other distros, Kali Linux is the officially supported distribution, thus all new features are primarily tested on this platform.
 * One wireless network adapter that supports AP & Monitor mode and is capable of injection. For advanced mode, you need two cards; one that supports AP mode and another that supports Monitor mode. Drivers should support netlink.

Installation
   git clone https://github.com/wifiphisher/wifiphisher (Download Wifiphisher)
   cd wifiphisher
   sudo apt-get update && sudo apt-get install python-setuptools (If your Debian distributions have not installed library of Python setuptools)
   sudo python setup.py install (Install Wifiphisher)

   Alternatively, you can download the latest stable version from the Releases page.

Usage
   Run the tool by typing sudo wifiphisher or sudo python bin/wifiphisher (from inside the tool's directory).

   By running the tool without any options, it will find the right interfaces and interactively ask the user to pick the ESSID of the target network (out of a list with all the ESSIDs in the around area) as well as a phishing scenario to perform. By default, the tool will perform both Evil Twin and KARMA attacks.

   wifiphisher -aI wlan0 -jI wlan4 -p firmware-upgrade --handshake-capture handshake.pcap

   Use wlan0 for spawning the rogue Access Point and wlan4 for DoS attacks. Select the target network manually from the list and perform the "Firmware Upgrade" scenario. Verify that the captured Pre-Shared Key is correct by checking it against the handshake in the handshake.pcap file.
   Useful for manually selecting the wireless adapters. The "Firmware Upgrade" scenario is an easy way for obtaining the PSK from a password-protected network.

   wifiphisher --essid CONFERENCE_WIFI -p plugin_update -pK s3cr3tp4ssw0rd

   Automatically pick the right interfaces. Target the Wi-Fi with ESSID "CONFERENCE_WIFI" and perform the "Plugin Update" scenario. The Evil Twin will be password-protected with PSK "s3cr3tp4ssw0rd".
   Useful against networks with disclosed PSKs (e.g. in conferences). The "Plugin Update" scenario provides an easy way for getting the victims to download malicious executables (e.g. malwares containing a reverse shell payload).

   wifiphisher --noextensions --essid "FREE WI-FI" -p oauth-login -kB

   Do not load any extensions. Simply spawn an open Wi-Fi network with ESSID "FREE WI-FI" and perform the "OAuth Login" scenario. Use the "Known Beacons" Wi-Fi automatic association technique.
   Useful against victims in public areas. The "OAuth Login" scenario provides a simple way for capturing credentials from social networks, like Facebook.

   To see the help section, enter this command: wifiphisher -h

Screenshots

Targeting an access point

A successful attack

Fake router configuration page

Fake OAuth Login Page

Fake web-based network manager

Help needed
   If you are a Python developer or a web designer you can help us improve wifiphisher. Feel free to take a look at the bug tracker for some tasks to do.

   If you don't know how to code, you can help us by proposing improvements or reporting bugs. Please have a look at the Bug Reporting Guidelines and the FAQ document beforehand. Note that the tool does not aim to be script-kiddie friendly. Make sure you do understand how the tool works before opening an issue.

Credits: The script is based on an idea from Dan McInerney back in 2015. A full list of contributors lies here.

License: Wifiphisher is licensed under the GPL license. See LICENSE for more information.

Project Status
   Wifiphisher's current version is 1.4. You can download the latest release from here. Otherwise you can get the latest development version by cloning this repository.

Disclaimer
   Usage of Wifiphisher for attacking infrastructures without prior mutual consistency can be considered as an illegal activity. It is the final user's responsibility to obey all applicable local, state and federal laws. Authors assume no liability and are not responsible for any misuse or damage caused by this program.

Note
   Be aware of sites pretending to be related with the Wifiphisher Project. They may be delivering malware.

    For Wifiphisher news, follow us on Twitter or like us on Facebook.

Download Wifiphisher

See Wifiphisher website 

Enable Google AMP (Accelerated Mobile Pages) on Blogger Blogs with this Easy Gauide

Hi Guys Welcome In My Blog And Today I Teach you A Simple Trick To Enable Google AMP (Accelerated Mobile Pages) on Your Blogger Blogs.

So Let's Get Started.

If you have a working blogger blog or a website without AMP support Follow This Steps.

1. First Go-to Blogger.com And login into your Account.
2. And Navigat to theme Section And click on edit HTML And search <head> Tag in you HTML 

First You Need To Know That After Enabling AMP On Your Blogger Blogs You Get Many AMP Errors In Your Search Console