What is ethical hacking ?

What is ethical hacking ?

  April 05, 2020

What is ethical hacking?

We all know about 'Hacking'. It's penetrating into someone's system without their permission. An 'Ethical Hacker' is that good hacker, who finds potential threats in a system, to stop other hackers from penetrating into them. 

So, there are three types of hackers: White hat hackers or ethical hackers, grey hat hackers, black hat hackers. 

Black hat hackers are those who hack for their own purposes and do harm to the system. Black Hat hacking is illegal and black hat hackers are actually criminals. Grey hat hackers are actually those hackers who hack just for fun. They don't have a particular reason to hack, and most of the time they don't do any big harm to the system. Grey Hat hacking is also illegal. 

And finally, they added white hat hackers, good hackers who try to penetrate into a system to find out its vulnerabilities. A white hat hackers finally make a report of the vulnerabilities he had found and all the process he has done to penetrate into that system and submit it to the authority. Here the authority can be the system administrator or a company who has hired that ethical hacker. 

Some Books You Should Read :

Ethical hackers must maintain these responsibilities:

Number 1, he must have the proper written permission to penetrate into that system, from the system administrator. if an Ethical Hacker tries to hack into a company's system or website, then the hacker must have permission from the company to penetrate into their system and find out the vulnerabilities. 

Number 2, he must respect the individual's or the company's privacy. 

Number three, he must inform the system authority about the vulnerabilities he had found. 

And ethical hacker can work towards being a CEH, a certified ethical hacker. The best certification is done from EC Council. 

Some people think that hacking is hacking, there are no such words like ethical hacking or black Hat hacking. But it's not true. Ethical hackers hack for the good, reports vulnerabilities found in that system to the administrator, and makes no harm to that system, while a Black hat hacker does harm to that system and the hacks that system for his own purposes. Black Hat hacking is illegal while ethical hacking is not illegal. Many companies hire advanced ethical hackers to penetrate into their system and find the vulnerabilities. An ethical hacker can get a high salary job. 

There is no career in black Hat hacking and black Hat hacking can send you to the jail, ethical hackers are highly paid and there is a good career option in ethical hacking. In India there is a huge demand for ethical hackers and penetration testers, there are not so many ethical hackers in India. So this is a great career option in India.

Be connected to our block, more updates about ethical hacking and penetration testing. Subscribe for the best video tutorials out there on the Internet to help you become a certified ethical hacker. I hope you got the answer to what is ethical hacking and how you can choose ethical hacking as a career option.

                                              

What Is A Malware?

What Is A Malware?

  April 04, 2020

What Is A Malware? How Does Malware Work? 

A Malware is a special type of program, designed to harm your machine. A Malware can steal data from your device or system. It can also hijack your device or system. There are different types of Malware: 

Spyware: 

A spyware is designed to spy your device or system and steal data from it. Spyware can steal your username and passwords from your computer or mobile. It is used to leak secret data to the hacker to make their work easier. 

Adware:

And adware is designed to show ads on your device. By showing ads, the adware creator actually gets paid. It can be easily installed on an android phone and shows the user is irrelevant ads. 

Rootkit: 

Rootkit can gain access to the root of your device and install adware or other types of Malware to harm your device or to steal data from your device. 

Viruses:

Viruses can also be described as malware. A virus can harm your device, leak sensitive information from your device like username and passwords and credit card details. That's why it is the most dangerous type of Malware. 

Keyloggers:

Keyloggers are one of the most dangerous types of Malware. A Keylogger records your keystrokes. It is used to sniff usernames and passwords from your device. Suppose you have a keylogger installed on your computer and you type your username and password in Gmail or Facebook or anywhere, what a keylogger does is, it records your keystrokes and sends it to someone else so that he can easily find out your usernames and passwords. 

Malware

How can a Malware get into your device:

Downloading software from unknown sources:

if you download any software from unknown sources then there is a chance that a Malware is bound with that software. installing that software the Malware also gets installed automatically. Many times Malware is installed by inserting a pen drive or CD drive into your device that is taken from unknown sources.

Sometimes visiting harmful websites can also install Malware into your device. Have you ever seen that visiting some mobile websites causes your phone to vibrate automatically and a warning pops up that your device is infected with viruses? That is an indication that your device can really get affected. Many times there is a download button there. If you click on the download button and let the app get downloaded (thinking that it is anti-virus), surely it is a virus, hernia device.  

That's how Malware can affect your device and still sensitive information from it. Subscribe to this blog to get more updates about this topic and to stay secure from cyber threats.

How do I protect my website from hackers?

How do I protect my website from hackers?

  April 03, 2020

How do I protect my website from hackers?

Today we are going to talk about how to protect your website from hackers. These days hacking, black is a very common thing. Black hat hackers from all around the world can try to hack your website and take it down, steal data or they can just hack your website for fun. So making your website secure is very important these days then it was before. Most of the people don't care about the security of the websites and often they get hacked. So if you're conscious about the security of your website then you must follow these things: 

1) secure server call on now this is the first thing you must care about while making a website. You should host your website on a secured server/ cloud. Buying server/ cloud from a genuine cloud provider is the best. 

2) SSL certificate: if you get https on in simple words SSL certificate then your website will become a bit more secure. This will ensure Secure data connection with the server. 

3) DOS/DDOS protection: No this is one of the most important things you should get for your website. DDOS attacks are very easy to do and often websites get down temporarily or permanently due to DDOS attacks. Mainly WordPress websites which are hosted on a cheap server gets attacked by DDOS attacks very easily and they become down/unavailable for several hours or permanently. For protection against DDOS attacks, you can use a service called CloudFlare. I will write a different topic about CloudFlare after some days so you can subscribe to my blog using your email address. 

4) prevent SQL injection: If you are still using PHP 3 codes or old codes then your site may be is vulnerable to SQL injection. Now, this alone is a big topic and I will cover it in another article. SQL injection mainly hat SEO database and can override its data. 

5) Bad Programming/JavaScript vulnerabilities: If your website is made by some amateur website designer/website developer then maybe it has too many vulnerabilities. Script injection can be done in such badly programmed websites. So you should take care about these matters. 

So there are some simple things you should follow to protect your site from hackers. I will write more articles about this topic later so please subscribe to this blog using your email address.

Keep Your Data Safe: Safety From KeyLoggers

Keep Your Data Safe: Safety From KeyLoggers

  April 02, 2020

Keep Your Data Safe: Safety From KeyLoggers

Suppose you have a program on your computer, whose job is to send a complete list of all the buttons you press on your keyboard every day to a person, without your knowledge. All day long, you are logging in to your email, you are doing online banking, going to different websites, buying something with your credit card, or more. All these information when you are giving, using your keyboard, it's just getting sent to another end of the world ... now you can understand that I'm talking about the keyloggers.

I have seen a facility in Kaspersky Internet Security 2011that they have given a module called Virtual Keyboard. Believe it, it's a hard job to write using it.

QFX Software has come up with a 'key scrambler' to help you to cope with this kind of pain. Let's see how it works;

Before going to see how 'key scrambler' works, let's know some key points;

Important Path: 

When you type something with your keyboard, those keys reach the specified application through the operating system. (Suppose you are giving your name and password to Mozilla Firefox).

Key Logger: 

The key logger is a type of mailwire that is created by cyber criminals to steal your important information, just when you type something with your keyboard. Key loggers steal your information just before they reach specific apps.

Now let's see how the Key Scrambler works;

Encryption used to prevent Keyloggers

As soon as you press any key on the keyboard, the 'Key Scrambler' software inside the Kernel encrypts it.

Then when you reach the Destination app, 'Key Scrambler' decrypts it again, so that you can show what you have given.

No matter what kind of logger they are, they will only see your information encrypted version.

If you want, you can download the key Scrambler software from here.