​
Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Monday, 24 July 2017

Cracking Cleanersoft Free Hide Folder Security

Cracking Cleanersoft Free Hide Folder Security


Introduction

Cleanersoft Free Hide Folder is a "security" tool used to hide your folders. The program uses a simple interface that is protected by a password that lets you hides and unhides selected folders. Our target objectives here will be to find where it is hiding the information about what folders are hidden and recover the password.

Finding where the folder information is stored

Well, We will use the easiest approach, see what files and registry keys the program (fhide.exe) writes to using Process Monitor while hiding a folder (in this case C: est). This should show us where it is writing to and it seems this approach worked out well.


Well, What have we here. We see a file operation on my C: est folder, it renamed the folder "CHKDSK.100��" and that is followed by a registry key creation at "HKCUSoftwareMicrosoftWindowsCurrentVersionNamespacegetPrefix0".

First lets confirm the folder was renamed. since it is hidden I will run the command line command "DIR /A:SH CHKDSK.*" (the /A:SH will show hidden and system files and folders). Wow... Its right there, great hiding trick.... is it accessible? Run a "cd CHKDSK.100��". Looks like we can.

Okay, Lets see whats hidden here with a "Dir" command and we see private.txt. Okay, well it should be encrypted right? guess again... "Type private.txt".

Well We are off a bad start for security. But how do we know where these are hidden if we didnt hide them? How can we find them? Well lets check out that registry key. Okay. Lets take a look at the keys here.
  • getPrefix0 = E
  • Declaration0 = X:*XSPWHP.377��
  • Javax0 = X:*gvhg
Hmmm.... Declaration0 and Javax0 both start with X:*, interesting. well. Lets make another hidden folder called C: est123 which becomes CHKDSK.101��. Well, now we have 3 new keys. they are the same names as above but instead we have a one at the end instead of zero.
  • getPrefix1 = E
  • Declaration1 = X:*XSPWHP.373��
  • Javax1 = X:*gvhg321
Okay, Starting to see a pattern. It looks like Declaration is for the new hidden file name. Javax is for what its unhidden name. getPrefix stayed the same. It appears to be a simple substitution cipher. The easy way to figure it out? Well, Let make a folder called C:abcdefghijklmnopqrstuvwxyz1234567890 and put it side by side with encrypted value and we have a key chart ;-).
  • C:abcdefghijklmnopqrstuvwxyz1234567890
  • X:*zyxwvutsrqponmlkjihgfedcba3215894067
Looks like the alphabet is just backwards. "/" becomes "*". The only thing different is the numbers but not that big of a deal, since we now see the key above anyways. So now we can decrypt the Declaration and Javax keys. they point to the folders, both hidden and unhidden names, just as we thought.

The last is the getPrefix key. I had one folder unhidden when I was working and the key value changed to "W". So it seems that "E" means it is hidden, "W" means not hidden. So Id Say we have this down now.

Finding The Password

Last thing to attack is the password for the program (in this case it is "Password"). Lets check more into the registry. There is one more key here:
  • BAR - Kzhhdliw
Surprise. my password and this key are both the same length. the 3rd and 4th characters repeat. Lets just try to decrypt it with our key chart above and... yep, thats our password... So with this information I was able to code a little tool that can exploit this to prove concept for academic reasons (And to only be used for that). I call the tool "Free Unhide Folder" (original huh?).



Resources
CleanerSoft Free Hide Folder:
http://www.cleanersoft.com/hidefolder/free_hide_folder.htm

Substitution cipher:
http://en.wikipedia.org/wiki/Substitution_cipher

Substitution cipher solver:
http://www.purplehell.com/riddletools/applets/cryptogram.htm

Free Unhide Folder (Source[vb.net 2008] and Binary):
http://packetstormsecurity.org/1010-exploits/FreeUnHideFolder.zip

{ Read More }


Wednesday, 14 June 2017

Crack Kaspersky Internet Security 2012 Serial KIS 2012

Crack Kaspersky Internet Security 2012 Serial KIS 2012


Kaspersky Internet Security 2012 versi 12.0.0.374 sudah muncul, dan Zatyabajaitem telat dalam repost dikarenakan sibuk kegiatan coly yang tiada henti. Posting kali ini bagaimana me reset Key Kaspersky agar tetap jalan 90 hari. Jadi kita akan menggunakan KIS 2012 dengan jalan trial secara terus menerus tanpa takut license nya akan expired.
Zatyabajaitem akan bagikan serial kaspersky internet security 2012, crack kaspersky Internet Security 2012, Trial Reset KIS 2012, Serial KIS 2012 agar menjadi full version, Crack KIS 2012, KIS 2012 pro Full Version, resetter Kaspersky Internet Security 2012, resetter KIS 2012, Key Kaspersky 2012, Key KIS 2012 gratis, Key kaspersky Internet Security 2012 free.
Penasaran?? cekidot gan..





Kaspersky Internet Secuirty (KIS) 2012 sedikit lebih mahal dari Kaspersky Anti Virus (KAV) 2012. Kaspersky Internet Security 2012 sangat cocok digunakan untuk computer/laptop yang sering terhubung ke Internet.

Kaspersky Internet Security 2012 memproteksi dari viruses, Phising attact, malicious website, Trojans, spam, hackers, dan lainnya. Teknologi mutakhir, pendekatan hybrid untuk menggabungkan keamanan digital yang inovatif, teknologi berbasis cloud dengan perlindungan antivirus maju untuk memberikan respon lebih cepat, lebih efektif dan lebih kompleks saat ini dari ancaman yang terus berkembang. Anda, data pribadi Anda dan PC benar-benar dilindungi sebagai Anda bekerja, bank, toko dan bermain online.

Kelebihan Kaspersky Internet Security 2012:
1. Nikmati perbankan online secara aman dan berbelanja
2. Mendapatkan perlindungan efektif dari ancaman tidak dikenal.
3. Berkomunikasi pada keselamatan jaringan sosial favorit Anda
4. Mendapatkan perlindungan langsung dari ancaman yang muncul
5. Memutar kembali perubahan yang dilakukan oleh malware
6. Manfaat dari hybrid protection
7. Melindungi identitas Anda dari serangan phishing

Download KASPERSKY INTERNET SECURITY 2012 di bawah

DOWNLOAD KIS 2012

Cara menginstall dan me RESET Kaspersky Internet Security 2012:

1. Install dulu KIS 2012 nya
2. Setelah terinstall pilih menu trial nya (30 hari)
3. Setelah aktif 30 hari, matikan self-defense nya pada menu setting (jangan di centang) kemudian klik apply dan OK.



4. Setelah di pastikan self defense tidak dicentang, lalu klik exit KIS pada icon bawah kanan PC kamu. Caranya, klik kanan pada icon kaspesky tersebut, dan pilih exit.

5. Kemudian buka Task Manager kamu ( Ctrl + ALT + DEL ),klik pada toolbar processes .. dan pastikan avp.exe tidak ada..

6. Kemudian, jalankan file removal key 2012 dengan cara klik kanan pada file removal key 2012, dan klik Run As Administrator.
Tujuan dari Removal Key 2012 adalah untuk menghilangkan key dari kaspersky 2012. Kemudian biasanya PC akan meminta restart, klik restart :)

7. Setelah PC km restart, buka kembali KIS kamu, dan pastikan serial key trial 30 hari kamu hilang. Jangan panik, jangan gila, karena ini bagian dari proses nya :) .. ikuti langkah selanjutnya gan

8. Buka kaspersky nya, dan klik �insert your activation code here� di bagian bawah KIS 2012 kamu. Kemudian akan muncul 2 pilihan , �Activate the aplication� dan "Buy Activation Code"
Kamu pilih yang "Activate the aplication", dan klik.

9. Kemudian masukan serial nya AAAAA-AAAAA-AAAAA-AAAA3 dan klik next.

10. Dan akan muncul activation failed, jangan khwatir, sekarang klik Browser, dan arahkan pada file pada folder yang sudah saya siapkan "Reg Trial 90 Hari"
Pilih salah satu reg yang zatyabajaitem siapkan dan klik open.

11. Eng ing Eng..KIS 2012 kamu sudah trial 91 hari.. :D

NB: Jika masa 91 hari hampir habis, kamu bisa lakukan ulang cara di atas lagi, sehingga tidak akan habis 91 hari nya, kkkkkkk

Sewaktu mendownload Crack dan Serialnya, pastikan ANTIVIRUS kamu tidak aktif, karena biasanya file akan di anggap virus hacktool. padahal bukan virus :)

Untuk mendownload Removal Key 2012 dan Serial nya, klik link di bawah ini:
PASSWORD RAR: zatyabajaitem

Removal Key 2012 Reg Trial 90 Hari

Ditunggu saran, kritik yang mendukung nya..ty gan
{ Read More }


Tuesday, 18 April 2017

Covered entities and medical device security

Covered entities and medical device security


Mac McMillan has an interesting quote in a recent article, "FDA Warnings About �Cyberattacks� Give CEs Leverage to Demand Better Security."
So where is OCR in all this? McMillan says the agency has been putting �pressure� on FDA and the Office of the National Coordinator for Health Information Technology (ONC) about this issue. However, OCR spokeswoman Rachel Seeger would say only that OCR had no �substantive� or �direct role in FDA�s guidance or warning.� 
McMillan says there is talk of creating some kind of system for assessing medical device security features akin to HHS�s meaningful use certifications that apply to electronic health records. Only those that meet certain criteria, which include certain access controls, can be purchased with federal funds (RPP 9/12, p. 4). CMS and ONC maintain a list of certified EHRs.
A version of this question was discussed by panelists from CMS and FDA (audio recording conveniently below).  In February 2012, I moderated a panel at the NIST Information Security & Privacy Board on the topic of economic incentives to improve medical device security.  The audio recording and discussion questions can be downloaded from our blog post.  The high bit: at the time, there were very few economic levers for covered entity to incentivize better cybersecurity in manufacturing of medical devices.  The draft guidance from FDA may provide an important lever for covered entities so that patients ultimately have safer and more effective medical devices.

-Kevin Fu
{ Read More }