Heartbleed Security Scanner

<div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_rElX5zFlWdrffRizEhNRXOOMqDrpzkNIm4LZrJTpgXspfZBcG0B5Me6DjQqo3rbTJpvF8F8Q9hukOuxKv6QsasJ-HwhuTnhu66g6xdMbUAcj8mB-MPxlXifRbpnalrIzGtlSrFvB1Ig/s1600/detector.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_rElX5zFlWdrffRizEhNRXOOMqDrpzkNIm4LZrJTpgXspfZBcG0B5Me6DjQqo3rbTJpvF8F8Q9hukOuxKv6QsasJ-HwhuTnhu66g6xdMbUAcj8mB-MPxlXifRbpnalrIzGtlSrFvB1Ig/s1600/detector.png" width="200" /></a></div> <div style="text-align: justify;"> Heartbleed Security Scanner for Android helps detect whether your Android device is affected by the Heartbleed bug in OpenSSL and whether the vulnerable behavior is enabled.</div> <div style="text-align: justify;"> </div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> <b><span style="background-color: #f3f3f3;"><span style="color: red;">(Download => <a href="http://adf.ly/6764776/heartbleed-security-scanner" target="_blank">Heartbleed Security Scanner</a>)</span></span></b></div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> Heartbleed Security Scanner is developed by Lookout, the leading mobile security company that builds security & antivirus technology that protects people, business, governments, and critical infrastructure from the growing threats in the post-PC era.<br /> <br /> If you haven’t, please download Lookout Antivirus & Security for complete Android protection including free antivirus, backup, find lost phone and more: <a href="http://ap.lookout.com/SH4U">http://ap.lookout.com/SH4U</a><br /> <br /> ❐ More About Heartbleed Security Scanner<br /> <br /> Heartbleed Security Scanner works by determining what version of OpenSSL your device is using. If your device is using one of the affected versions of OpenSSL, we then check to see if the specific vulnerable feature called heartbeats is enabled.<br /> <br /> Q&A<br /> <br /> ■ What is Heartbleed?<br /> <br /> Heartbleed is a software flaw in the OpenSSL “Heartbeat” function that helps keep secure connections alive. This function was found to be vulnerable to manipulation in a way that allows an attacker to steal up to 64K of data at a time from the active memory of affected systems. The bug, found by researchers from Codenomicon and Google, and filed with the following reference number – CVE-2014-0160, impacts any infrastructure that includes the affected versions of OpenSSL.<br /> <br /> ■ Will Heartbleed Security Scanner fix the Heartbleed vulnerability?<br /> <br /> Heartbleed Security Scanner is not meant to fix this vulnerability, as the vulnerability will need to be patched by Google or your device manufacturer. Heartbleed Security Scanner is only meant to keep you informed about the status of your device. The good news is that Lookout has not yet seen the Heartbleed vulnerability exploited on a mobile device.<br /> <br /> Stay updated with the latest information on our blog: https://blog.lookout.com/blog/2014/04/09/heartbleed<br /> <br /> ■ Will Heartbleed Security Scanner tell me if my apps are affected?<br /> <br /> Heartbleed Security Scanner will not detect whether any of the services or accounts (the apps and websites you visit) on your device are vulnerable. Heartbleed Security Scanner is only meant to detect vulnerabilities in Android.<br /> <br /> In other words, your operating system might be fine, but the websites you’re accessing might not. Look out for emails from companies with whom you have online accounts. If they needed to issue a patch, hopefully they will be alerting their consumers.<br /> <br /> Note on Permissions<br /> Heartbleed Security Scanner only uses the Internet permission when you explicitly share the results of your scan with us. If you choose not to, we won't collect any information.</div> <div style="text-align: justify;"> <span style="background-color: lime;"><br /></span> <br /><b><span style="background-color: #f3f3f3;"><span style="color: red;">(Download => <a href="http://adf.ly/6764776/heartbleed-security-scanner" target="_blank">Heartbleed Security Scanner</a>)</span></span></b></div>

Heartbleed Security Scanner

Heartbleed Security Scanner for Android helps detect whether your Android device is affected by the Heartbleed bug in OpenSSL and whether...

Read more »

Warning: Heartbleed bug is back and it's in reverse

<div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyoLzMkNH-Q400g5viiV0MFk7dezifVuC2APw1IsYjLtPaj6DCZH3Tya2N_wpp4ku9ipSUrQ3Hsn0mUdIgx1DYmVFZrvc8oI7eD7XNMjepo6DjbLWe5nKpBJMfe3LuM36s5M5Kimdm86A/s1600/heartbleed-server.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="180" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyoLzMkNH-Q400g5viiV0MFk7dezifVuC2APw1IsYjLtPaj6DCZH3Tya2N_wpp4ku9ipSUrQ3Hsn0mUdIgx1DYmVFZrvc8oI7eD7XNMjepo6DjbLWe5nKpBJMfe3LuM36s5M5Kimdm86A/s1600/heartbleed-server.jpg" width="320" /></a></div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> Users of Android phones running a particular version of the Jelly Bean operating system should take extra care with free Wi-Fi hotspots and unfamiliar websites as they are vulnerable to a new variant of the "Heartbleed" bug, IT experts warn.<br /> <br /> The Android 4.1.1 system is susceptible to the "Reverse Heartbleed" virus - a variation of the bug that has alarmed authorities worldwide and last week helped hackers to steal social insurance numbers from the Canada Revenue Agency.<br /> <br /> With the original Heartbleed, hackers use a flaw in the encryption tool Open SSL to attack computer servers and gain access to users' communication records, login usernames and passwords.<br /> <br /> "As for Reverse Heartbleed, it is not a hacker who attacks a server, but a server that attacks users," said Hong Kong Computer Emergency Response Team's senior consultant Leung Siu-cheong.<br /> <br /> Users of Android 4.1.1 who connected to a bad server, website or android application were putting themselves at risk of being hacked, he said.<br /> <br /> "A bad server could be disguised as a free Wi-fi hotspot," he added.<br /> <br /> Gabriel Leung Shing-koon, general manager of EMC Hong Kong and Macau, said users could get around the Reverse Heartbleed bug by upgrading their operating system.<br /> <br /> However, some machines cannot be upgraded beyond Android 4.1.1.<br /> <br /> And even if users did upgrade, they would still be vulnerable to the original Heartbleed virus.<br /> <br /> He said internet users needed to check their service providers had addressed, or "patched" the Heartbleed bug, or had plans in place to do so.<br /> <br /> Heartbleed, he said, was more of a challenge for service providers because users could do very little to protect themselves if they were using a server that had not been patched.<br /> <br /> And if the server had not been patched, any information transferred during an encrypted session would be vulnerable to observation and sensitive information could be stolen.<br /> <br /> He said after patches were in place, users should change their passwords and other sensitive data. They should also monitor their accounts for unauthorised activity or transactions.<br /> <br /> Canadian police last week arrested and charged a 19-year-old man with the theft of 900 taxpayers' data that had been made vulnerable by the Heartbleed bug.<br /> <br /> To check if your phone uses Android 4.1.1, go to "Settings" and "About phone". Some websites provide tools to check for vulnerability to Heartbleed. Enter the website address or host name of the e-mail server and the tool will indicate if it is vulnerable.</div>

Warning: Heartbleed bug is back and it's in reverse

Users of Android phones running a particular version of the Jelly Bean operating system should take extra care with free Wi-Fi hotspots...

Read more »

Millions of Android Devices Vulnerable to Heartbleed Bug

<div style="text-align: justify;"> <div class="separator" style="clear: both; text-align: center;">  <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWblFrQFD0nn6vYXvVN3JngIE9POXxej_zC1JQ-WuZQczzegPbKcNYlwhuaimQVcr0hpWd7p50oxJmozmPahx_H54OrXtrcmygroOWARqPnqfGDajrDFKXTwuXKY-HYX_7h9NL-S6t6io/s1600/Heart-bleed-logo.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWblFrQFD0nn6vYXvVN3JngIE9POXxej_zC1JQ-WuZQczzegPbKcNYlwhuaimQVcr0hpWd7p50oxJmozmPahx_H54OrXtrcmygroOWARqPnqfGDajrDFKXTwuXKY-HYX_7h9NL-S6t6io/s1600/Heart-bleed-logo.jpg" width="320" /></a></div> Millions of smartphones and tablets running Google Inc. (GOOG)’s Android operating system have the Heartbleed software bug, in a sign of how broadly the flaw extends beyond the Internet and into consumer devices.<br /> <br /> While Google said in a blog post on April 9 that all versions of Android are immune to the flaw, it added that the “limited exception” was one version dubbed 4.1.1, which was released in 2012.<br /> <br /> Security researchers said that version of Android is still used in millions of smartphones and tablets, including popular models made by Samsung Electronics Co., HTC Corp. and other manufacturers. Google statistics show that 34 percent of Android devices use variations of the 4.1 software. The company said less than 10 percent of active devices are vulnerable. More than 900 million Android devices have been activated worldwide. </div>

Millions of Android Devices Vulnerable to Heartbleed Bug

  Millions of smartphones and tablets running Google Inc. (GOOG)’s Android operating system have the Heartbleed software bug, in a sign o...

Read more »

dSploit For Android

<div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj54ffFmSxwAtHK23r6erpw4GvI9Dmrs1O6DbD_sTJsIuPHlCkhg9hpR7hXDJy9T0Fy_XdxAHn7n6NDLVkpxnbvM9WgoIwueww4oOPEhVY74AzqfrN_xEW-oLKQ59_AqLpmrLHs7ORu1Fs/s1600/unnamed.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj54ffFmSxwAtHK23r6erpw4GvI9Dmrs1O6DbD_sTJsIuPHlCkhg9hpR7hXDJy9T0Fy_XdxAHn7n6NDLVkpxnbvM9WgoIwueww4oOPEhVY74AzqfrN_xEW-oLKQ59_AqLpmrLHs7ORu1Fs/s1600/unnamed.jpg" width="320" /></a></div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> dSploit is an Android network analysis and penetration suite which aims to offer to IT security experts/geeks the most complete and advanced professional toolkit to perform network security assessments on a mobile device.<br /> Once dSploit is started, you will be able to easily map your network, fingerprint alive hosts operating systems and running services, search for known vulnerabilities, crack logon procedures of many tcp protocols, perform man in the middle attacks such as password sniffing ( with common protocols dissection ), real time traffic manipulation, etc, etc .<br /> This application is still in beta stage, a stable release will be available as soon as possible, but expect some crash or strange behavior until then, in any case, feel free to submit an issue here on GitHub.<br /> <span style="color: red;"><b>(Download =></b> <a href="http://adf.ly/kxACR" target="_blank">dSploit 1.1.3</a>)</span></div> <div style="text-align: justify;"> <span style="color: red;">(<b>Download</b> => <a href="http://p.pw/baaXWz" target="_blank">dSploit 1.1.3</a>)</span><br /> <br /> <span style="color: lime;">FEATURES</span><br /> <br /> <b>WiFi Cracking</b><br /> The WiFi scanner will show in green access points with known default key generation algorithms, clicking on them allows you to easily crack the key, supported models: Thomson, DLink, Pirelli Discus, Eircom, Verizon FiOS, Alice AGPF, FASTWEB Pirelli and Telsey, Huawei, Wlan_XXXX, Jazztel_XXXX, Wlan_XX, Ono ( P1XXXXXX0000X ), WlanXXXXXX, YacomXXXXXX, WifiXXXXXX, Sky V1, Clubinternet.box v1 and v2, InfostradaWifi.<br /> <br /> <b>Trace</b><br /> Perform a traceroute on target.<br /> <br /> <b>Port Scanner</b><br /> A syn port scanner to find quickly open ports on a single target.<br /> <br /> <b>Inspector</b><br /> Performs target operating system and services deep detection, slower than syn port scanner but more accurate.<br /> <br /> <b>Vulnerability Finder</b><br /> Search for known vulnerabilities for target running services upon National Vulnerability Database.<br /> <br /> <b>Login Cracker</b><br /> A very fast network logon cracker which supports many different services.<br /> <br /> <b>Packet Forger</b><br /> Craft and send a custom TCP or UDP packet to the target, such as Wake On LAN packets.<br /> <b><br />MITM</b><br /> A set of man-in-the-midtle tools to command&conquer the whole network.<br /> <b><br />Simple Sniff</b><br /> Redirect target’s traffic through this device and show some stats while dumping it to a pcap file.<br /> <b><br />Password Sniffer</b><br /> Sniff passwords of many protocols such as http, ftp, imap, imaps, irc, msn, etc from the target.<br /> <b><br />Session Hijacker</b><br /> Listen for cookies on the network and hijack sessions.<br /> <b><br />Kill Connections</b><br /> Kill connections preventing the target to reach any website or server.<br /> <b><br />Redirect</b><br /> Redirect all the http traffic to another address.<br /> <b><br />Replace Images</b><br /> Replace all images on webpages with the specified one.<br /> <b><br />Replace Videos</b><br /> Replace all YouTube videos on webpages with the specified one.<br /> <b><br />Script Injection</b><br /> Inject a JavaScript in every visited webpage.<br /> <br /> <b>Custom Filter</b><br /> Replace custom text on webpages with the specified one.<br /> <br /> Requirements<br /> ARM: Your device must have an ARM cpu.<br /> Gingerbread: An Android device with at least the 2.3 ( Gingerbread ) version of the OS.<br /> Root: The device must be rooted.<br /> BusyBox: The device must have a BusyBox full install, this means with every utility installed ( not the partial installation ).</div> <div style="text-align: justify;"> <br /></div> <div style="text-align: justify;"> <span style="color: red;"><b>(Download =></b> <a href="http://adf.ly/kxACR" target="_blank">dSploit 1.1.3</a>)</span></div> <div style="text-align: justify;"> <span style="color: red;">(<b>Download</b> => <a href="http://p.pw/baaXWz" target="_blank">dSploit 1.1.3</a>)</span></div>

dSploit For Android

dSploit is an Android network analysis and penetration suite which aims to offer to IT security experts/geeks the most complete and adv...

Read more »