What is WEP Encryption and its Security

WEP encryption (Wired Equivalent Privacy, or Wired Equivalent Privacy) is a cipher, implemented in the 802.11 wireless connection protocol, which encrypts the information we will pass between two points so that it can only be access to them and interpret them the points that have the same key.

In general, a wireless router or Access Point will only allow access to those terminals that have the same WEP encryption key.

This key can be of three types:

64-bit WEP key .-, 5 characters or 10 hexadecimal digits (0 to 9””””A to F preceded by the string”0x”).

128-bit WEP key .-, 13 characters or 26 hexadecimal digits (0 to 9””””A to F preceded by the string”0x”).

256-bit WEP key .-, 29 characters or 58 hexadecimal digits (0 to 9””””A to F preceded by the string”0x”).

The one most often used is 128 bit, offering a good level of protection without being overly long and complicated.
The 256-bit WEP encryption is not supported by many devices.

A WEP key can decipher (there are programs for it), but this requires an uninterrupted traffic data for a given time (in fact, enough data and enough time).

Obviously, the higher the level of encryption and key more complicated the more difficult it will be to decipher.

It does not take the same (given data volume and time) to crack the WEP encryption key of 64 bits of 128 bits, and there are also no relationship between arithmetic, ie it does not take twice as crack a WEP key of 128 bits a 64-bit.

Although it is possible to crack these encryption keys, do not think that is easy or quick. A good key 128-bit WEP encryption (if not a 256-bit) can be almost unreadable if we have ensured that is sufficiently complicated.

Most key-cracking programs are based on a series of more or less logical sequence with which it begins to attack our system to enter. Obviously, a key rate takes seconds 1234567890 be located, but no one thinks (or should it occur) to this key.

We should avoid keys that contain sequences related to us (dates, names, places), and phrases, as it is the first thing you try this type of program. This is not only valid for a WEP key, but for any kind of key you say. We should also avoid key easy as consecutive sequences of keys or numbers.

For safety it is strongly recommended wherever possible to enable MAC address filtering. An also read my post on Wifi Security

A MAC (Media Access Control address) is a hexadecimal identifier of 48 bits. This address is unique for each device, not being a user-modifiable parameter (each card or network interface has its own MAC address, set by the manufacturer.)

Read More

Firesheep:Trick to Hack Facebook and Twitter Password on Wifi

Do you access your Facebook or Twitter account while you are on a public network like your college’s or office’s unsecured wifi.Then this is the time that you should think about your account security.If you think that facebook or Twitter are secured websites then it’s the time to face the reality they are not secured.Whenever you login into your facebook or twiiter account check the address bar of your browser you will see something like http://www.facebook.com/home.php? Similar is the case with twitter.They use http protocol instead of secured https protocol.But if you login into your gmail account you will notice that it uses https protocol.

So, the trick I am telling you works only on websites like facebook,twiiter,flickr but not on secured websites like Gmail.So here is Trick to Hack Facebook and Twitter Password on Wifi and also the method of protection from this hack.This trick doesnot require any programming knowlege and everyone can use this trick easily.

1.Download firesheep Firefox extension.This is a freeware extension for firefox browser.

2.  Once installed it will open a sidebar window into your firefox browser.

3.Now it will show all the people who are connected to unsecured wifi network.Once they login into your facebook or twitter account you will get a notification and with a single click you can login into their account.

This whole thing work on the technique of cookie hijacking.Once your session cookie is hacked then anybody can login into your account.These cookies can be easily caputered on unsecured wifi network.

The best way to protect yourself from such a hacking trick is to avoid using your facebook or twitter accounts on unsecured wifi networks as it is a security lapse from the websites not on your side.

Note:-This article is to inform you about how your password can be hacked and how to prevent it.This article is purely for educational purposes.

Read More

Trick on How To Download Songs From Raag.fm

Raag.fm is one of the most popular online songs streaming website.It has some very rare songs and latest arrivals especially Punjabi songs that are sometimes not available on other websites.So, In this post I will tell you the trick on How you can Download Songs from raag.fm

This trick is not limited only for raag.fm but it can be used for most of the online streaming websites.Before I give you the whole trick let me explain the basic concept of how online streaming works so that you can know where this trick will work and on which websites it wont work.

How Online Streaming of Songs Work?

The songs that are streamed are stored on the server of the websites.Whenever you play a song usually a Flash/javascript player opens so that you cannot get the direct links of the song on the server.But you may have noticed that if you play the complete songs once it will can be played again (if you haven’t closed the music player) even if you disconnect your Internet connection.This is because the song is already stored in the cache of the web Browser.

Trick to Locate The Cache Folder

If you are able to locate the cache of the song which has been already played in the music player then it means that you have downloaded the song.It is quite easy to locate the cache folder in google chrome so I recommend you that you you should use google chrome for this trick.

Make Sure that you have enabled to View hidden Files and Folders.

• The cache folder for Google Chrome in Windows 7 can be located at

C:\Users\USER_NAME\AppData\Local\Google\Chrome\UserData\Default\Cache

C, being the system root. If you are not sure about the system root you can replace C: with %systemroot%.

Also donot forget to replace USER_NAME to your windows username

• The cache folder for Google Chrome in Windows Xp can be located at

C:\Documents and Settings\USER_NAME\Local Settings\Application Data\Google\Chrome

Once you go to the cache folder you will probably see hundreds of files.

Trick to Find Song In cache folder

As you will probably see hundreds of files with random names and no extensions it can be quite difficult to locate the song.But you will see that most of the files will have very small size like less then 500 kb.So sort the files according to their size.

As songs have usually size of 3 mb to 8 mb you can easily recognize you song.Play the file with Vlc player.If this is song you were looking for then copy it and paste it at your desired location by renaming the song with the extension of .MP3 (Make sure you haveunchecked hide files files extension in folder options in control Panel)

Websites On which this Trick Will not Work

There are some famous websites like in.com and probably others which do not save any cache file on your browser.So this trick will not work on these type of website.To test whether this trick will work or not the website simply play the complete song replay it and disconnect the Internet in between if the songs plays continuously the this trick will work else Find Another Website

Note:-Cache of the song will be stored on when you have played the complete song.So,Do Not panic if the cache doesn’t appear.Wait for the song to be completed.

Read More

Trick on How to Convert Firefox into keylogger

Do you want create your own working undectable keylogger and without any programming knowledge.The keylogger can store all the usernames and passwords of mozilla firefox without the user’s consent.

How this Keylogger Works?

Whenever you login into any website using mozilla firefox browser it always ask’s you whether you want to Save password or not for that website.

We will be using a script that will not give the user option to save the password instead it will automatically save the passwords without user’s consent and we will retrieve them later.

Can this be detected by antivirus?

I have scanned it with Mcafee,Norton and Avast and it is totally undetectable.

Does It work on all websites?

It is working on almost all websites like facebook,hotmail,reddit and digg.But this trick somehow failed on Gmail.

Now I will give you the step by step tutorial on how to use this trick

1. Download this script here
2. Now go to the following address

If you are Windows user then goto

C:/Program Files/Mozilla Firefox/Components

If you are MAC user then goto

Applications > Right click Firefox > Show Package Contents >Contents/MacOS/Components

1. Now find a file nsLoginManagerPrompter.js and copy it to somewhere safe location because we will be replacing this file in next step.
2. Extract the script folder that you have downloaded in first step and copy and paste the nsLoginManagerPrompter.js from the folder to the folder mentioned in step 2.
3. So now your firefox keylogger is ready.Now Each and every username and password will be automatically saved.

The next step is to retrieve the username and passwords that have been stored in your firefox browser.

It is very easy to retrieve the password from firefox using firepasswordviewer.You can read the complete tutorial here.

Read More

How to Secure your Gmail Account from Hackers

All of us have our Email Accounts on Gmail, Yahoo, Hotmailetc.Phising and hacking are on the rise and many of us have already faced the situtaions when our email Id has been compromised.It is very difficult to estimate the loss which one undergoes once his email ID has been hacked.

Now you can add an extra layer of security in your Gmail Account.After enabling this feature you have to enter an addtional verification code (sent to your mobile) to login into your account.So,if somebody hacked your password even then he won’t be able to access your email account.

How to Secure Gmail Account:-

• Login to your Gmail Account.
• Now open this link  https://www.google.com/accounts/SmsAuthConfig.
• Click on the Start Setup button.

• Choose a verification method.By selecting Text message (SMS) or voice call you will recieve the verification code on you phone either as text message or as a call.

• Enter the appropriate information about your country and Mobile Number.

• Choose SMS text message or Voice call option according to your need. (I prefer SMS text message).
• After giving your mobile number test your phone by clicking on the Send Codebutton.

• Now you will receive a verification code on your given mobile number and type that code in the verification field and click on Verify button.
• After verifying your number click on the Next button.

If you lost your mobile or your number is not available when you need it. For this you can save backup codes in to your computer.

• Click on Next button again.
• Here you will see 10 Backup verification codes. Choose Print codes or Save to text file option whatever you like but keep it safe and don’t lose it.
• Check mark the box and click on Next button.

• Here give your working alternative number. And click on Next button.
• Now again click on the Next button again and then click on the Turn on 2-step verification button.

• Click OK.

That’s it ! Now you have been added 2-step verification security to your Gmail account. Now whenever you will enter your password it will ask you to enter verification code without it you won’t be able to login to your Gmail Account.

Read More