Wednesday, November 30, 2016
Free Download micromax a26 flash file firmware and tool
Free Download micromax a26 flash file firmware and tool
if your phone is dead when remove battery without turn off your device at this time you need flash or upgrade your device firmware. today i will share with you latest upgrade flash file for micromax a26 smart phone. Now available here micromax a26 flash file. i hope you can solve your device problem if you need any help please contact me.
Available link for download
Eleven Paths Talks Una serie de webcasts tecnológicos
Eleven Paths Talks Una serie de webcasts tecnológicos
Figura 1: Eleven Paths Talks. Una serie de webcasts tecnológicos |
Figura 2: Eleven Paths Talks 1 - Firma biométrica en entornos sanitarios
Figura 3: Eleven Paths Talks 2 - Equipo de respuesta ante incidentes
Figura 4: Eleven Paths Talks 3 - Conociendo la seguridad en sistemas industriales
Figura 5: Eleven Paths Talks 4 - Metodologías de Testing de Aplicaciones
Figura 6: Eleven Paths Talks 5 - Latch en el mundo IoT
Figura 7: Eleven Paths Talks 6 - Gestión de la seguridad
Figura 8: Eleven Paths Talks 7 - Big Data & InfoSec [Portugués]
Figura 9: Eleven Paths Talks 8 - Big Data & InfoSec [Español]
Figura 10: Eleven Paths Talks 9 - Defensa en Profundidad
Figura 11: Eleven Paths Talks 10 - The ISF Standard of Good Practices for Information Security [ENG]
Figura 12: Eleven Paths Talks 11 - Deep Web
Figura 13: Eleven Paths Talks 12 - Técnicas OSINT
Figura 14: Eleven Paths Talks 13 - SealSign en IoT
Figura 15: Eleven Paths Talks 14 - ¿Desaparecerán las contraseñas?
Figura 17: Eleven Paths Talks 16 - Análisis de Riesgos
Sigue Un informático en el lado del mal - Google+ RSS 0xWord
Available link for download
MHL to HDMI screen size
MHL to HDMI screen size
from xda-developers http://ift.tt/2aEB5wW
via IFTTT
Available link for download
Alarm Clock Ultra v2 4 8 Apk Full App Free Download
Alarm Clock Ultra v2 4 8 Apk Full App Free Download
Alarm Clock Ultrav2.4.8
Our Alarm Clock also includes a fantastic looking Stopwatch, a Countdown timer and even an Egg timer with cooking instructions and preset boiling times.
Do not install this alarm clock app on your SD card, plus add Alarm Clock Ultra to the exception list of any task killer.
- Fixed the crash on the alarm list page
Previous Version Fixes:
- Fixed Weather Issue!
- Fixed the Downloading Soothers issue!
- Fixed the Custom Tone on Countdown Timer & Quick Nap Alarm!
- Fixed the Alarm fire on Time Zone Change!
Please rate us if you like the App!
Available link for download
How to increase facebook page likes without a software or website real likes 100 working trick
How to increase facebook page likes without a software or website real likes 100 working trick
- Open Facebook
- Go to any (Facebook #Page ).
- Run As (Normal User) not as admin page!
- Go to ConsoleBox by pressing ( Ctrl + Shift + K ).
- Now past the downloaded code and press enter to start.
- DOWNLOAD AUTO LIKE CODE HERE
Was this helpful comment below....
Available link for download
Moto Z Droid or Moto Z Force Droid â which should you get
Moto Z Droid or Moto Z Force Droid â which should you get
Two phones, both alike in dignity. On fair Verizon, where we lay our scene ...
The Moto Z lands on Verizon on July 28. And if even if youve made up youre mind that youre going be diving into this modular menagerie, youve got a decision to make. Verizon, as its been prone to do with its Droid line of late, has two Moto Zs from which youll need to choose.
In many ways, theyre exactly alike. Same software. Mostly the same internals. And they both use the new Moto Mods accessories.
Lets take a look at the ways in which theyre different, though, and see if we cant figure out which one is for you.
Better battery capacity
Should you ever turn down the opportunity to have more battery? The Moto Z has a 2,600 mAh battery. The Moto Z Force has a 3,500 mAh battery thats about a 34 percent increase. Along with that extra battery comes some extra thickness, however. The Moto Z is a svelte 5.19mm thick (or thin, I guess). The Moto Z Force is 6.99mm. Thats without the stock Style Shell back that comes in the box, however, so youll need to add a couple millimeters for those, too.
Ive used both phones. You should never pass up the opportunity for more battery out of the box.
Ive used both phones. And you should never pass up the opportunity for more battery out of the box. Even with external batteries and the 2,200 mAh Moto Mod Power Packs that are available for the Moto Z and Moto Z Force, that extra 34 percent can be the difference between having to top up toward the late afternoon, or not.
The extra thickness on the Moto Z Force means a few things. One is that I dont mind using it without a Style Shell as much. That doesnt mean I wont use it without one, but the option is at least more comfortable. The other is that its going to fit larger hands better than the Moto Z. Thats subjective, but not unimportant.
Higher-resolution camera
The Moto Z and Moto Z Force have similar cameras. Same camera app, same f/1.8 aperture. Theyre both pretty darn good in sunlight, and less so when it gets dark. Theyre both what Id call an above-average camera, though a few steps down from the best available.
The only real difference is that the Moto Z Force has a higher possible resolution 21 megapixels than the Moto Z, which is lower at 13MP. (One thing to keep in mind, however, is that both phones shoot at a wider, 16:9 aspect ratio by default, and dont use the full resolution until you change the setting to accommodate their native 4:3 aspect ratios.)
For my money, Id opt for the Moto Z Force because of its larger battery and better chance at surviving a fall.
For the most part this discrepancy hasnt really affected me any. At least not in the way I shoot and share photos. For things like Facebook and Instagram and your basic social sharing, either one has served me just fine. Its another differentiator for Verizon, I suppose. But merely adding more megapixels doesnt necessarily improve the finished product that much.
ShatterShield
If a bigger battery didnt do it for you, this one might. The Moto Z Force is the second phone to sport "ShatterShield." The short version is that means some extra protection for the display. So youll be able to drop it without the screen breaking into a million pieces.
That doesnt mean you might not kill the phone if it takes a bad fall. Heres the important part from Motos fine print:
The display and embedded lens are warranted against shattering and cracking for four (4) years from the original date of purchase; scratches or other damage to the protective lens is not covered by this warranty, but should always be in place to prevent scratches and other damage to the underlying components. This phone is not shockproof or designed to withstand all damage from dropping.
We dropped the Moto Z Force until it quit working. Actually, lets be more specific. The phone still works. The display, while showing signs of abuse, did not crack. It, uh, just doesnt actually show a picture anymore. So the first four times it took a bad spill ShatterShield worked as advertised. Thats a pretty good insurance policy.
The bottom line
So which phone should you get? The Moto Z, or the thicker, longer-lasting, better protected, higher-resolution Moto Z Force? For my money, Id opt for the latter. The upgraded camera sensor isnt that big a deal for me. But more battery and a better chance at surviving a fall?
Thats worth my money just about every time.
Moto Z and Moto Z Force
- Our Moto Z review!
- Moto Z specs
- Moto Mods custom backs
- Moto Z and Moto Z Force will be Verizon exclusives until the fall of 2016
- The latest Moto Z news
- Discuss in our Moto Z forums
Motorola Verizon
from Android Central - Android Forums, News, Reviews, Help and Android Wallpapers http://ift.tt/2a8HiDN
via IFTTT
Available link for download
Free Twitter with Telenor Pakistan
Free Twitter with Telenor Pakistan
Now enjoy FREE and Unlimited twitter with Telenor. Start following your favorite celebrities; See whats trending, get regular updates of your friends, all this and so much more absolutely free of charges with Telenor Pakistan.
Who can avail this offer?
All prepaid users are eligible for this offer. Customers who dont have internet settings activated can get settings for their device by sending the text message internet to 131How to Activate?
There is no activation mechanism, no subscription fee and no charge.
How free Twitter Works?
Twitter is already active by default on your SIM, so simply logon to m.twitter.com or sign in from twitter application.Note:
- This offer will work on the default browsers and twitter app.
- Offer is valid for both 2G/3G
- All Twitter URLs are free, however, if you click on any third party URL while browsing, it will be charged.
- Limited time offer
- 0.84% higher prices shall be charged in Federal Territory, Baluchistan, AJK and Gilgit Baltistan region.
Available link for download
Any way to update A2DP AVRCP to the latest version DT2 Marshmallow 6 0
Any way to update A2DP AVRCP to the latest version DT2 Marshmallow 6 0
from xda-developers http://ift.tt/2aoLBfi
via IFTTT
Available link for download
Huawei UMG1831
Huawei UMG1831
ATTENTION: Huaweisolution nincite en aucune façon au piratage et décline toute responsabilité.
Le déblocage est un processus permettant denlever la restriction SIM imposée par lopérateur.
Selon les lois internationales dans beaucoup de pays, le désimlockage est légal sous certaines conditions. Chaque client a le droit de déverrouiller son appareil après un délai de 6 à 12 mois.
A partir de ce moment deux possibilités soffrent au client soit la solution payante ou gratuite. Cest dans le cadre de la solution gratuite que Huaweisolution vous explique la procédure à suivre pour pouvoir débloquer gratuitement votre clé internet en un temps record.
PROCÉDURE DE DÉBLOCAGE DU MODEM HUAWEI UMG1831
La procédure de décodage du modem Huawei se déroule en trois phases distinctes dont chacune à son importance. Lisez attentivement les explications fournies, la solution est sans risque.Après le déverrouillage du modem, votre clé 3G Huawei sera compatible avec tous les opérateurs.
DC-Unlocker 2 Client Software |
MISE A JOUR FIRMWARE MODEM USB HUAWEI UMG1831
Téléchargez gratuitement les pilotes (drivers) de votre clé internet Huawei. Il est très important de savoir que le tableau de bord générique Mobile Partner sera utilisé pour se connecter au web avec la clé débloquée. Lapplication est mise au point par la société Huawei Technologies Co.,Ltd.Available link for download
Tuesday, November 29, 2016
How to Install CM13 0 Nightly Android 6 0 1 Marshmallow on Galaxy Note II SPH L900 Latest Build
How to Install CM13 0 Nightly Android 6 0 1 Marshmallow on Galaxy Note II SPH L900 Latest Build
Samsung Galaxy Note II is one of the biggest smartphones released on 2012 . The phone features a whopping 5.5-inch display, making it larger than the original Galaxy Note, and is one of the first phones to ship with Android 4.1 Jelly Bean. However, while the Note II boasts an impressive array of specs and features, the phones prodigious size definitely isnt for everyone.
If you are looking to install a new custom ROM on your Sprint Galaxy Note II SPH-L900 then we have here as usual the best Custom ROMs for you.
CyanogenMod 13 [CM13.0] Nightly ROM latest build cm-13.0-20160627-NIGHTLY-l900.zip is released for Sprint Galaxy Note II SPH-L900
CM13.0 will let Galaxy Note II SPH-L900 users taste the sweetness of Marshmallow 6.0.1 such as the battery saving doze functionality and new permissions model, alongside the CM features youd expect.
Follow our guide below to download the Unofficial CM13.0 Nightly and install it yourself.
÷ Prerequisites:
This tutorial is only for installing CyanogenMod 13 [CM13.0] Nightly ROM on Sprint Galaxy Note II SPH-L900. Please do not try on any other Samsung Galaxy Note II variants.
Your phone should be rooted and haveClockworkMod recovery installed from before.
This tutorial will wipe out all your data.Proceed at your own risk.Perform a Dalvik Cache wipe before proceeding from the recovery mode.
Make sure you backup all your data in your phone before proceeding.
Samsung KIES will NOT detect your phone after installing this ROM because it is a custom firmware.
*Disclaimer:
Android Custom ROM fix ® provide various Firmware Updates and Rooting process along with Custom ROM,Modes,file are all belong to their owners/developers. The autor of this site or the developers are not responsible, if you damage or brick your device.Do it on your own risk and follow the instruction properly.
* Important:
Backup important files stored on your device before proceeding with the steps below, so that in case something goes wrong youll have backup of all your important files.
÷ How to Install CM13.0 Nightly Android 6.0.1 Marshmallow on Sprint Galaxy Note II SPH-L900[ Latest Build].
Step 1 Download CM13.0 Android 6.0.1 Marshmallow and Google Apps for your Sprint Galaxy Note II SPH-L900 to your computer.
Step 2 Connect and mount your Sprint Galaxy Note II SPH-L900 USB memory on your computer using the USB cable.
Step 3 Now copy/paste the downloaded Android 6.0.1 ROM zip file and Google Appszip files to your SD card. Make sure the files are in the SD card root (not in any folder).
Step 4 Then turn OFF your phone and disconnect from the USB cable.
Step 5 Now to get in the Recovery Mode. Switch ON the phone while pressing and holding Volume Up + Home + Power buttons together
Step 6 Once you are in ClockworkModRecovery, select perform a full data wipe by selecting wipe data/factory reset. Use the Power button to select everything while in the Recovery Mode.
Step 7 Then, perform a cache wipe by selecting wipe cache partition .
Step 8 Now this is optional, but it is recommended to perform a wipe of your dalvik cache as well. You will not get into boot loops or any other errors. From CWM recovery, go to advanced and then select wipe dalvik cache.
Step 9 Then go back to the main recovery screen and select install zip from SD card.
Step 10 Now select choose zip from sdcard. Using your volume keys, navigate to the Android 6.0.1 ROM zip file that you copied to your SD card and select it using the Power button. Confirm the installation on the next screen and the installation procedure should start now.
Google Apps: Repeat the above step for the Gapps zip file as well and install it on your phone.
Step 11 After the installation completes, go to +++++Go Back+++++ and reboot the phone by selecting reboot system now from the recovery menu.
Your Sprint Galaxy Note II SPH-L900 will boot now and it might take about 5 minutes to boot on your first time. So, please wait.
Thats it Your Sprint Galaxy Note II SPH-L900 should now have CM13.0 Nightly Android 6.0.1 Marshmallow latest build installed on your phone! Go to Settings > About phone to verify.
For More Samdjng Galaxy Note II Brand New Firmware & Custom ROM keep checking AndroidCustomROM Fix ®
Like this post? PLZ Hit the share buttons below to share this article with your friends on Facebook, Google + and Twitter.
PLZ Follow Us On Flipboard 4 More latest custom ROM fix.
PLZ Use the comment box below to contribute more ideas & Suggestions .
Best Regards.
cm-13.0-20160618-NIGHTLY-hiaeul.zip
Available link for download
Find success on Google Play What app developers can learn from games
Find success on Google Play What app developers can learn from games
Posted by Matteo Vallone, Business Development Manager at Google Play
(As a way to reach more app developers and help them grow successful businesses on Google Play, this post was first published on The Next Web Ed.)
There is much common ground between freemium apps and games businesses when it comes to achieving success. Users are, however, more used to paying for games than apps, stemming from the history of traditional gaming consoles. Moreover, mobile games are also able to easily offer virtual goods across a range of price points to suit every pocket. This means that game developers have had plenty of opportunity to learn about how to improve onboarding, conversion, and ultimately the user Lifetime Value (LTV). So what can app developers learn from game developers? Here are some best practice tips and insights from successful game developers that can be applied to many apps, today.
Drive app success the game developer way:
1. Optimize retention before investing in acquisition
Retention is king, and retention drives conversion. For games developers, retention is the key measure of game quality and whether it appeals to players.
Most game developers will soft launch to beta testing communities or test markets. During this phase, the game is tweaked to optimize retention by looking into specific areas, such as tutorial completion, level difficulty and conversion. Developers can then track retention using the Cohorts reports in Google Analytics. Once retention is satisfactory, the developer can go to full launch and start investing in user acquisition.
2. Retain users with step-by-step engagement
The first seven days after install are the most critical for retention: users install several apps to try them, and decide in the first few days which ones they want to keep using. If you can retain for that time span, your app is more likely to become part of the users daily routine.
There are some simple ways to progressively build user engagement. Its important to present a strong story that explains why that app is relevant to the user, while introducing them to key features. Then place features that offer the user value early, so they can be found without much effort.
This is a not a one-size-fit-all. To find the right solution, a developer needs to first make assumptions on what user flows can improve retention and then run A/B tests to validate or correct them. For example, a developer could think that introducing sign-in later in the user flow might improve retention. Also, the developer needs to keep in mind what the key long term engagement metrics are for the individual app (such as photos uploaded or the number of articles read) and measure the impact of the different onboarding flows on those metrics as well.
In general, these principles are good places to start optimizing your onboarding:
- Look for ways to let the users experience the app straight away, rather than taking them through a long, complex setup.
- Present activation moments such as registering an account, uploading a video, or finding friend gradually
- Start by requiring minimal investment by the user, then ask them for more details as they are needed to use the apps features.
- Treat permissions as a service for the user. For example, if you want users to register, show them in advance that, by making their experience more personal, theyll get more value from the app.
Finally, ensure the user can understand the value of your app before you start asking them to pay. Game developers are particularly good at letting their users try most or all product features for free in in a set number of days or sessions.
A great tool to help analyze how users are engaging (or not) with the app is through the Flow Report in Google Analytics. Using this report, a developer can see how users navigate through the app and where they leave to identify potential roadblocks.
3. Target the right offers at the right users
Understanding different groups of users in-app purchase behavior is the key to devising strategies to encourage them to spend.
Start by identifying groups of users by how they spend and much they are likely to spend. It may be by age group, the channel that brought the install, or in-app behaviour. Use the Segment builder in Google Analytics to identify and define these groups of users. Then, tailor in-app purchase offers to match the segments spending behavior. For example, for segments where multiple users tend to spend more in one go, but spend infrequently, offer them in-app features bundled together.
4. Offer in-app purchases when users are most likely to spend
Users are also more likely to spend, if the purchasing experience is frictionless, and even more so when they can see how the expenditure will add value. So:
- Present purchase opportunities to users when theyre most likely to need or want it and explain to the user why its relevant.
- Make purchasing accessible easily from within the app with a minimum number of taps. For example, offer an upgrade button on the footer of relevant screens.
Like all good game developers, they focus on building good experiences that retain and engage users through constant testing and analytics. First impressions are important, so users need to be able to quickly understand the importance of the app and easily navigate through the onboarding experience. And to start generating revenue, it is important to be thoughtful about how to make in-app purchases actionable.
Watch Matteos Playtime 2015 session The rules of games, for apps to hear more in-depth insights which app developers can learn from games with best practices and developer examples:
You can also watch the other sessions from Google Playtime 2015 to learn more about tools and best practices which can help you find success with business on Google Play.
Available link for download
Google Tweaks Mobile Search UI
Google Tweaks Mobile Search UI
Google tweaked the mobile search interface. Theres now a menu that lets you view the original image, open the list of saved images, search by image and send feedback. Theres also a redundant "visit page" link below the image.
Google brought back the title of the page and thats a good thing because you can find more details about the image. Hopefully, Google will also bring back the snippets.
You can find some screenshots for the old interface in this post.
Available link for download
Huawei S4011
Huawei S4011
Available link for download
Google Animal Sounds
Google Animal Sounds
Google has a special card for animal sounds. Search for [cat sound], [what sound does a zebra make], [animal sounds] and you can actually play the sound directly from the search page, whether youre using the desktop Google site or the mobile sites and apps.
This works for 19 animals: tiger, lion, elephant, zebra, ape, sheep, duck, rooster, turkey, owl, cat, pig, cow, dog, moose, raccoon, horse, humpback whale, bowhead whale.
Google uses MP3 files like www.google.com/logos/fnbx/animal_sounds/cat.mp3 for playing animal sounds, so they work in almost any modern browser that supports HTML5 audio. For some reason, turtles are no longer available in the card, but you can still find the MP3 file: www.google.com/logos/fnbx/animal_sounds/turtle.mp3.
An article from Indian Express mentions that "the sounds have been recorded from live animals" and the feature works for "the top searched for animals in Google and animals with some of the most iconic sounds". It was supposed to be launched back in January, but Google announced it in March.
{via Mashable}
Available link for download
Cómo Intermitente Rom Sony Xperia Play R800i Via Flashtool
Cómo Intermitente Rom Sony Xperia Play R800i Via Flashtool
Completo tutorial para flashear Sony Xperia Play R800i con el software Flashtool, y les dejo los Firmwares originales para todas las regiones del mundo. Sony Xperia Play R800i flashtool puede ser utilizado para instalar ROMs o firmwares en los dispositivos xperia también se puede utilizar para obtener acceso root, flashear recoverys, flashear ROMs modificadas, hacer particiones e instalar kernels. En nuestros tutoriales solemos utilizar este software para realizar muchos procedimientos, como son el flasheo de una ROM, la instalación de un nuevo Recovery etc.
- ARCHIVOS NECESARIOS :
- Controlador USB PC Componion [For Windows] o [For Mac]
- Xperia FlashTool [DESCARGAR]
- Rom, Firmware Sony Xperia Play R800i [DESCARGAR]
- Bateria por lo menos al 50%
- PASOS A SEGUIR :
- Cuando Flashtool haya acabado de descargar la imagen de Android, quedará guardada en C:/Flashtool/Firmwares como un archivo FTF
- Desconectar el cable USB Xperia Play R800i
- Apagar el celular
- Presionar y mantener el botón volver atrás / volumen abajo (en los terminales modernos de Sony el botón de bajar el volumen suele hacer ahora esta función, no obstante es mejor consultar para cada dispositivo la tecla específica)
- Conectar el cable USB al teléfono
- Soltar el botón de volver atrás / volumen abajo cuando la imagen que muestra qué botón pulsar desaparezca, El proceso de flasheo comenzará, y veremos esta pantalla
- Espera entonces a que Flashtool termine con el proceso. Después se te pedirá que vuelvas a encender tu teléfono. Si todo ha ido bien.
ya tendrías tu teléfono con un nuevo firmware actualizado y listo para funcionar Sony Xperia Play R800i. Si te animas a probar Flashtool.
Available link for download
Monday, November 28, 2016
I hope the Note 7 still comes with a non edge variant
I hope the Note 7 still comes with a non edge variant
Just a little over a week from now, Samsung will be holding another Unpacked event on August 2nd, unquestionably to unveil this years Galaxy Note. Similar to how Microsoft chose to make Windows 10, skipping right over 9, Samsung is rumored skip over the Galaxy Note 6 name and jump ahead to the Galaxy Note 7. This move makes sense as it unifies the names between their Galaxy S7 flagships released earlier in the year, and (coincidentally) would also line up with Apples (presumably named) iPhone 7, which will likely show up sometime in September.
from PhoneDog.com - Latest videos, reviews, articles, news and posts http://ift.tt/2a6fjQT
via IFTTT
Available link for download
Huawei half year profit up 40 thanks to solid smartphone sales
Huawei half year profit up 40 thanks to solid smartphone sales
Huawei seems to be one of the few smartphone vendors actually making fat stacks of cash out of smartphones rather than having their mobile division propped up by other business units. While Huawei also makes plenty of its money from enterprise and network infrastructure globally, it is also enjoying solid growth in smartphone sales.
See also: Huawei announces super-affordable honor 8 with P9 specs16In its most recent financial report, issued today, Huawei reported H1 smartphone revenue is up 40% over the same period last year, despite a recent downturn. While the company didnt provide a per-division breakdown of the figures, it reported audited sales revenue across its three core businesses of CNY245.5 billion (~$36.7 billion).
As Sabrina Meng, Huaweis chief financial officer notes, "We are confident that Huawei will maintain its current momentum, and round out the full year in a positive financial position backed by sound ongoing operations."
Speaking about the consumer business specifically, Huaweis statement notes it has "maintained steady growth globally. Its flagship products, such as the P9, Mate 8, Honor V8, and MateBook, have all won significant support from consumers around the world. Huawei has become one of the most favored device brands in nearly 30 countries".
With a great lineup of solid devices at every price point, diverse portfolio, high-performing other business units and a strict adherence to its "pipe strategy", Huawei is on the up and up. Although the reception of the Huawei P9 might not have been as strong as the company would have liked, the upcoming Mate S2 and Mate 9 (expected at IFA 2016) will likely set the flagship record straight.
What do you think of Huawei? What is your favorite Huawei device?
from Android Authority http://ift.tt/2a8sl0a
via IFTTT
Available link for download
Copy Pega
Copy Pega
Buenoooo haciendo un copy y paga de las cosas mas interesantes q encuentre x hay, pero claro indicando su correspondiente Fuent333....
o.O
Available link for download
Merapi Tool Latest Setup V1 2 1 Free Download
Merapi Tool Latest Setup V1 2 1 Free Download
Available link for download
Free Download Nokia 3120 Rm 364 Latest Flash File
Free Download Nokia 3120 Rm 364 Latest Flash File
Device Hang problem, Power Auto Restart, Mobile slowly working you need to upgrade your device firmware or flash you phone. if you need flash file please download this its working 100%.
Available link for download
Sunday, November 27, 2016
Metasploit Hookear con NetRipper los navegadores para robar las contraseñas de Facebook Gmail o Twitter
Metasploit Hookear con NetRipper los navegadores para robar las contraseñas de Facebook Gmail o Twitter
Metasploit: Cómo hookear con NetRipper los navegadores para robar las contraseñas |
La herramienta tiene una versión para Windows con un binario o .EXE, una versión para PowerShell y otra versión en forma de módulo de Metasploit. A mí me llamó la atención tanto el script de PowerShell, ya que se podría utilizar con el Powershell Empire y utilizarlo como script de post-explotación y la versión de Metasploit, ya que junto a una sesión de Meterpreter podríamos hacer grandes cosas. Para este artículo decidí orientarlo hacia el caso de Metasploit.
Instalación de NetRipper en Metasploit
Tal y como se puede leer en el Github de la herramienta, su instalación es básica, simplemente descargar los ficheros, por ejemplo, con un git clone. Después, hay que seguir los pasos que se detallan a continuación:
Figura 2: Instalación de NetRipper en Metasploit |
Cómo se puede ver el proceso de instalación o de adición al framework es sencillo. Antes de continuar con el artículo vamos a pararnos a visualizar la siguiente imagen sobre dónde NetRipper se inyecta y cómo funciona.
Figura 3: Esquema de hooking de NetRipper |
Se puede consultar más detalles sobre la charla de la Defcon y sobre el funcionamiento de la herramienta en la dirección URL de las diapositivas de Ionut Popescu, autor de la investigación y de la herramienta.
PoC: Hookeando navegadores y obteniendo contraseñas de Gmail o Facebook
La prueba de concepto la comenzamos en el estado en el que el auditor o el atacante ya tienen la sesión de Meterpreter conseguida. Sin perder la sesión ejecutamos el comando background y, posteriormente, cargamos el módulo de netripper con la instrucción use post/windows/gather/netripper. Tal y como se puede ver en la imagen, el módulo ofrece diferentes opciones, a través de sus atributos.
Figura 4: Opciones de NetRipper |
Hay varios atributos que tenemos que configurar. El primero, y el requerido sí o sí, es el identificador de sesión. Tenemos que indicar por cual sesión queremos ejecutar el módulo de post-explotación. En esta prueba de concepto utilizaremos la sesión número 1 conseguida previamente para ejecutar el código.
Por otro lado, hay que configurar el atributo PROCESSNAMES, indicando cual es el nombre del proceso al que NetRipper debe hacer el hook. Para este ejemplo, utilizaremos iexplore.exe, para ello ejecutamos set PROCESSNAMES iexplore.exe. Podríamos separar por comas e intentar hacer hooking a más procesos que nos interesasen.
Una vez configurado se puede ejecutar el comando run y el módulo será ejecutado a través de la sesión de Meterpreter. El módulo listará los procesos y se quedará con los procesos que encajen con los valores indicados en el atributo PROCESSNAMES, tal y como se puede ver en la imagen.
Figura 5: Hooking en Internet Explorer |
En este instante vemos que tenemos 2 procesos de Internet Explorer hookeados. En la siguiente ruta de la máquina comprometida se comenzará a escribir ficheros de texto con las peticiones HTTP que el navegador envía, justo antes de que se cifren.
Figura 6: Ficheros con peticiones HTTP realizadas |
Si echamos un ojo, por ejemplo al fichero que comienza con el PID_iexplore.exe_EncryptMessage.txt podemos ver las peticiones en texto plano. La máquina víctima es un Windows 8.1, se puede ver en la petición a través del User-Agent. La petición POST queda al descubierto con NetRipper y obtenemos el usuario y contraseña.
Figura 7: Fichero con petición HTTP que almacena usuario y contraseña de Google |
Es cierto que un KeyLogger podría darnos un resultado similar, y Metasploit también tiene esta posibilidad. Lo que no lograríamos sería la limpieza y todos los datos que obtenemos con NetRipper, ya que como se mencionó anteriormente, quizá solo podamos robar una cookie y eso ya es mucho. Si la víctima visita Facebook y hace login o simplemente tiene una sesión abierta, le podríamos robar la cookie de sesión.
Figura 8: Credenciales de Facebook en sesión HTTP |
En la siguiente anterior vemos cómo robar la contraseña de Facebook, lo único que tenemos que hacer es visualizar el fichero indicado anteriormente. Como nota aclaratoria, con Meterpreter podremos descargar los ficheros de texto con esta información que NetRipper genera en la máquina comprometida. El comando que debemos utilizar es download [ruta origen] [ruta destino].
Una PoC de NetRipper para robar cuentas de Facebook en vídeo
En el siguiente vídeo tienes un ejemplo de cómo un Windows 8.1 es vulnerado con Metasploit a través de una versión vulnerable de Easy File Sharing FTP. Una vez que el equipo con Windows 8.1 es controlado con Meterpreter, se utiliza el módulo de post-explotación de NetRipper para hookear Internet Explorer y robar las credenciales de un inicio de sesión en Facebook.
NetRipper es una potente herramienta integrada con el framework de Metasploit, lo cual hace que un proceso complejo o que pueda llevarnos más tiempo en una auditoría podemos realizarlo rápidamente. Interesante herramienta que debemos llevar en la mochila en una auditoría interna.
Autor: Pablo González Pérez (@pablogonzalezpe)
Escritor de los libros "Metasploit para Pentesters", "Ethical Hacking" y Pentesting con Powershell
Sigue Un informático en el lado del mal - Google+ RSS 0xWord
Available link for download
Actualizar Backtrack 5 R2 al Backtrack 5 R3
Actualizar Backtrack 5 R2 al Backtrack 5 R3
Actualiza Desde BackTrack 5 R2 para BackTrack 5 R3
Despues del lanzamiento del BT5 R3 el 13 de Agosto, podemos actualizar este desde la version anterior el BT5 R2...
En primer lugar, usted querrá asegurarse de que su actual sistema está totalmente actualizado:
apt-get update && apt-get dist-upgrade
Herramientas de 32 bits
Available link for download
Introducing the second class of Launchpad Accelerator
Introducing the second class of Launchpad Accelerator
Originally posted on Google Developers blog
Roy Glasberg, Global Lead, Launchpad Program & Accelerator
This week Launchpad Accelerator announces its second class, which includes 24 promising startups from around the world. While the number of accelerators is at an all-time high, we take a different approach with Launchpad Accelerator, a program that exclusively works with late-stage tech startups in emerging markets -- Brazil, Indonesia, India and Mexico.
See what its like to participate in the Accelerator.
We provide comprehensive mentorship that delivers results, says Jacob Greenshpan, one of Launchpads lead mentors. We start by running a patient diagnostic to determine each startups critical challenges, and then deploy precise mentorship, actionable solutions, and Google resources that enables the app to scale.
Class 2 kicks off June 13. The startups will descend on Google HQ for an intensive 2 week bootcamp. Under the tutelage of Google product teams and mentors from the global Launchpad network, they will receive intensive, targeted mentoring, equity-free funding, and more benefits during the 6-month program.
Heres the full list of startups (by country):
Brazil
BankFacil | Emprego Ligado | AppProva | GetNinjas | Edools | Love Mondays |
Indonesia
HijUp | Talenta | Jarvis Store | Ruangguru | IDNtimes | Codapay |
India
Taskbob | Programming Hub | ShareChat | RedCarpet | PlaySimple Games | MagicPin |
Mexico
Aliada | SaferTaxi | Conekta | Konfio | Kichink | Miroculus |
Googles Scalerator Drives Results for Alumni
What advice do Class 1 alumni give to the new intake? Come to the accelerator with an open mind. You will be shocked to find how many things are going wrong in your app. Thankfully the mentors will help you implement better solutions, says Vinicius Heimbeck, Founder of Brazilian mobile game developer UpBeat Games.
UpBeat Games had more than 1,000% increase in daily app installations in Asia during the period of a feature, as well as a 200% overall increase in active users after following a long list of improvements Accelerator mentors suggested. We made optimizations that led us to be featured in Google Play, which changed everything for us.
See Upbeat Games at the Accelerator in this video.
Believe you can build a world class product. The mentors will push you to bet on yourself, says Amarendra Sahu, Nestaway Co-founder and Class 1 alumni. NestAway just closed a $30M Series C, one of the largest investment rounds in India this year.
Your biggest enemy is not failure; it is the temptation to be ordinary. But the mentors will push you to build an extraordinary product and scale an extraordinary startup," says eFishery Co-founder and CEO Gibran Chuzaefah Amsi El Farizy, who was announced as one of the top 27 leaders in Indonesias startup ecosystem, after participating in the Accelerator program.
Available link for download