Medusa Bruteforcer

Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible. The author considers following items as some of the key features of this application:

• Thread-based parallel testing. Brute-force testing can be performed against multiple hosts, users or passwords concurrently.
• Flexible user input. Target information (host/user/password) can be specified in a variety of ways. For example, each item can be either a single entry or a file containing multiple entries. Additionally, a combination file format allows the user to refine their target listing.
• Modular design. Each service module exists as an independent .mod file. This means that no modifications are necessary to the core application in order to extend the supported list of services for brute-forcing. 

This tool could be used with one of the dictionaries I posted to test the security of your password, or by someone trying to bruteforce into your SSH for example. This is just another reason as to why you should choose a very secure password like S0meP4ss[1984] or something of the like. This way you don't have to worry about hackers trying to bruteforce your logins.

Example usage for bruteforcing SSH;

medusa -h IP Address -u username -P dictionary -O logfile -protocol

medusa -h 88.213.43.13 -u root -P /home/Desktop/dictionary.txt -O mlog -M ssh

Scanning random IP ranges for specific ports with NMAP

This will be a quick example of how Nmap can scan a random IP range for specific ports with the scanner Nmap.

Nmap ("Network Mapper") is a free and open source (license) utility for network exploration or security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It was designed to rapidly scan large networks, but works fine against single hosts. Nmap runs on all major computer operating systems, and official binary packages are avalable for Linux, Windows, and Mac OS X. In addition to the classic command-line Nmap executable, the Nmap suite includes an advanced GUI and results viewer (Zenmap), a flexible data transfer, redirection, and debugging tool (Ncat), and a utility for comparing scan results (Ndiff).

Example command;

nmap -iR <# of ips> -oG filename -A -p 21-25, 8080 --open

nmap -iR 1000 -oG nlog -A -p 21-25 --open

Pretty obvious, but this scans 1000 random ips for open ports 21-25 (Telnet, FTP, SSH) and only displays the IP if it has an open port. It also runs a OS detection, service detection and traceroute due to the "-A". It then logs the scan as nlog. Do note this is a noisy scan due to all the service and OS detections, which means you could detected/block it.

Snort Intrusion Detection System (IDS)

Snort can perform protocol analysis and content searching/matching. It can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more. It uses a flexible rules language to describe traffic that it should collect or pass, as well as a detection engine that utilizes a modular plug-in architecture. Snort has a real-time alerting capability as well, incorporating alerting mechanisms for syslog, a user specified file, a UNIX socket, or WinPopup messages to Windows clients. Snort has three primary uses: a straight packet sniffer like tcpdump, a packet logger (useful for network traffic debugging, etc), or a full-blown network intrusion prevention system.

Here's an example of its usage, if we just wanted to run it in sniffer mode we would use the following;

snort -v

This will just show the headers, if you would like to see the data you can use this command;

snort -v -d

This will display the packets data, but you can also see the data link layers header you can add a "-e" and in addition you can set it to log the packets by issuing the following;

mkdir slog

snort -d -e -v -l ./slog

or you can use -L to log to a file rather than a directory.

This will automatically run it in sniffing mode. If you want to use snort as an IDS, you must set up a snort config file which once completed can be used as shown below;

snort -c snort.conf

And that's the very basics of snort, this tool is very configurable and extremely useful. To download it or read more you can visit the site here. You can also use the apt-get or yum command.

Aspartame created from Monsanto's Genetically Modified bacteria.

The manufacturers of the most prevalent sweetener in the world have a secret, and it`s not a sweet one. Aspartame, an artificial sweetener found in thousands of products worldwide, has been found to be created using genetically modified (GM) bacteria. What`s even more shocking is how long this information has been known. A 1999 article by The Independent was the first to expose the abominable process in which aspartame was created. Ironically, the discovery was made around the same time as rich leaders around the globe met at the G8 Summit to discuss the safety of GM foods.

The 1999 investigation found that Monsanto, the largest biotech corporation in the world, often used GM bacteria to produce aspartame in their US production plants. The end result is a fusion between two of the largest health hazards to ever hit the food industry -- artificial sweeteners and an array of genetically altered organisms. Both have led to large-scale debate, with aspartame being the subject of multiple congressional hearings and scientific criticism. Scientists and health advocates are not the only ones to speak out against aspartame, however. The FDA received a flurry of complaints from consumers using NutraSweet, a product containing aspartame. Since 1992, the FDA has stopped documenting reports on the subject.

Learn more: http://www.naturalnews.com/030918_aspartame_GM_bacteria.html#ixzz1ABtQzIJC