Our world is becoming very digitalized, and this process also touches on documentation. Creating documents includes creativity and good writing skills. For example, if you are a student, you might need some assistance with your papers. The best way to resolve writing issues is to contact a writing service, www.essayshark.com, which is irreplaceable when you need help with any type of college papers and other documents.

Secure your documents with passwords

Password protection is one of the best ways to improve your digital document security. Each user must create a strong password that will contain not only letters but also numbers and other specific signs that will make. It’s almost impossible for hackers to violate your privacy. The history of password access control began in the 1970s when computers were started to control by the Resource Access Control Facility. Since then, passwords have been required for almost every action by users, online or offline, which means providing any private information. When it comes to digital documents, using passwords is crucial. If you store your digital documents on your laptop or smartphone, you should protect your device first and secure it with a password, fingerprints, or Face ID, depending on the system’s facilities. Here are some more tips for using passwords to protect essential files and documents:

• The longer password you have, the better
• Do not use the same password for multiple platforms or websites.
• Never write down your passwords on stickers or something you can store behind your computer.
• Regularly change your passwords to prevent violation of privacy.
• Pay attention to security alert messages from the accounts you have.

Audit your security

Today’s technologies are developing very fast, and you must keep your hand on a pulse when auditing your security. Different software requires a different approach to safety, and if you can determine the security vulnerabilities of any system you use, you will be protected. Your documents must be handled and shared according to the insider security policies that are common for your personal computer system or the system of your company. The first step to take in terms of regular security is to remember to update your software and systems according to the schedule of updates and renovations to avoid accessing your secret documents by other parties that are not involved in the process of work and sharing the information.

Watermark your documents

Adding your documents with a specific watermark stamp is an excellent form of making them highly secure. There are various forms of digital watermarks that you can use, which can be dynamic or static. Suppose you want to ensure your digital security level is high and feel safe while using various documents; you should add each copy of your digital documents with a watermark. Watermarks are very effective no matter what type of documents you want to secure. They are widely used in design and companies using vast digital data. Watermarks are irreplaceable if you need to determine such preferences of the document access time, the identity of a person who viewed the document data, and other information about the version of the document.

Encrypt your files

After you finish working with your digital document and ensure you are happy with the final version, check it for plagiarism and end encryption to a document. Encrypting means that all files on your computer will be safe with the highest level of security. Encryption is easy to use. When you add encryption to your files on a computer, you prevent them from reading by people who do not know the password of your encrypted files. Only after entering the password does the file return from the encrypted version to normal. By the way, both widely used systems Mac and Windows, have pre-installed and built-in encrypting systems so you can use them.

One of the very effective ways to secure information in digital documents is by presenting as much data as possible through infographics. Using specifically presented data is helpful if you want to ensure that the information is safe. Work on specific pieces of training for your team to teach employers how to use infographics and how to apply particular instruments to create working content for digital documents. Implementing infographics will let you reach the highest level of digital document security.

Control access to documents

Controlling access to your documents is a great and effective way to secure them. Of course, each file in the private company that works with the vast amount of data must be secured by passwords. Allowing access to new people is common for almost all businesses. However, working with the team means staying in control of and applying the data security policies to each process in the company. Of course, you might think that each team member is reliable, but the security protocols must be followed in any circumstances. Ensure that day by day operations of your company are safe and controlled by specific features that lead to control access.

Afterall

Improving your digital document security is crucial to feeling safe regarding all the information you store within laptops, hard drives, and cloud storage. By reading our article, you can get a working checklist and ensure you follow all our recommendations. First, one should secure digital documents with passwords, which must be strong and contain various symbols, letters, and numbers to avoid hacking. Also, you must check and change your passwords occasionally, and do not use the same password for different accounts. Remember to audit security, implement new technologies to update the software on time, and stay in touch with the latest ideas regarding digital security. Adding watermark stamps on your digital documents is a great way to make them safe and secure. Apply encrypting files and follow the encryption policies, no matter what storage you use for your digital documents. Control access to documents as it is a great and effective way to secure information. Specific features must control the day-by-day operations of your company. We hope these recommendations are helpful and you will use all of them to secure your digital documents.

Airgeddon is a multi-featured tool for penetration testing on WiFi system or wireless networks. This all-in-one WiFi auditing tool is written in bash by v1s1t0r1sh3r3.

Key-Features of Airgeddon

Airgeddon has so much features for WiFi hacking. They are following:

• Interface mode switcher (Monitor-Managed) keeping selection even on interface name changing.
• DoS over wireless networks using different methods (mdk3, mdk4, aireplay-ng). “DoS Pursuit mode” available to avoid AP channel hopping (available also on DoS performed on Evil Twin attacks).
• Full support for 2.4Ghz and 5Ghz bands.
• Assisted WPA/WPA2 personal networks Handshake file and PMKID capturing
• Cleaning and optimizing Handshake captured files.
• Offline password decrypting on WPA/WPA2 captured files for personal networks (Handshakes and PMKIDs) using dictionary, bruteforce and rule based attacks with aircrack, crunch and hashcat tools. Enterprise networks captured password decrypting based on john the ripper, crunch, asleap and hashcat tools.
• Evil Twin attacks (Rogue AP)
  • Only Rogue/Fake AP mode to sniff using external sniffer (Hostapd + DHCP + DoS).
  • Simple integrated sniffing (Hostapd + DHCP + DoS + Ettercap).
  • Integrated sniffing, sslstrip2 (Hostapd + DHCP + DoS + Bettercap).
  • Integrated sniffing, sslstrip2 and BeEF Browser Exploitation Framework (Hostapd + DHCP + DoS + Bettercap + BeEF).
  • Captive portal with “DNS blackhole” to capture wifi passwords (Hostapd + DHCP + DoS + Dnsspoff + Lighttpd).
  • Optional MAC spoofing for all Evil Twin attacks.
• WPS features
  • WPS scanning (wash). Self parameterization to avoid “bad fcs” problem.
  • Custom PIN association (bully and reaver).
  • Pixie Dust attacks (bully and reaver).
  • Bruteforce PIN attacks (bully and reaver).
  • Null PIN attack (reaver).
  • Known WPS PINs attack (bully and reaver), based on online PIN database with auto-update.
  • Integration of the most common PIN generation algorithms (ComputePIN, EasyBox, Arcadyan, etc.).
  • Offline PIN generation and the possibility to search PIN results on database for a target.
  • Parameterizable timeouts for all attacks.
• Enterprise networks attacks
  • Fake AP using “smooth” and “noisy” modes capturing enterprise hashes and plain passwords.
  • Custom certificates creation.
• WEP All-in-One attack (combining different techniques: Chop-Chop, Caffe Latte, ARP Replay, Hirte, Fragmentation, Fake association, etc.).
• Compatibility with many Linux distributions (see Requirements section).
• Easy targeting and selection in every section.
• Drag and drop files on console window for entering file paths or autocomplete using tab key on every path input for easier use.
• Dynamic screen resolution detection and windows auto-sizing for optimal viewing.
• Controlled Exit. Cleaning tasks and temp files. Restoring nftables/iptables after an attack that require changes on them. Option to keep monitor mode if desired on exit.
• Multilanguage support and autodetect OS language feature (see Supported Languages section).
• Help hints in every zone/menu for easy use.
• Auto-update. Script checks for newer version if possible.
• Docker image for easy and quick container deployment. Use already built image on Docker Hub or build our own.
• Http proxy auto detection for updates.
• Wayland graphic system supported (not only X window system).
• Tmux support for headless (systems without X window) environments.
• Multiple configurable options based on fallback substitution variables options system which allow to configure many enhancements like enable/disable colors, 5Ghz band, auto updates, hint printing, etc.
• Full compatibility with iptables and nftables with autodetection and possibility to force iptables by setting an option.
• Available plugins system to let the community create their own content in an easy and flexible way using the created function hooking system. More info at Plugins System section.

Installing Airgeddon on Kali Linux

We can install airgeddon from it’s GitHub repository by cloning/downloading the repository. But in Kali Linux 2021.1 update this tool is added to Kali Linux repository. We can install it by simply using apt-get install command from any version of Kali Linux:

sudo apt-get install airgeddon

This command will install airgeddon on our Kali Linux system. The above command will prompt for root password and disk space permissions. After that this airgeddon and it’s essential requirements will be installed.

Airgeddon also requires some additional tools to use all it’s features. To install them all on our Kali Linux we use following one liner command:

sudo apt install bettercap isc-dhcp-server hostapd hostapd-wpe udhcpd mdk4 hcxdumptool lighttpd hcxtools -y

Now we can use airgeddon on our system.

Requirements for Airgeddon

• WiFi networks for testing.
• WiFi adapter that supports monitor mode & packet injection [List].

Using Airgeddon on Kali Linux

Now we can run following command to run airgeddon on our Kali Linux system.

sudo airgeddon

Then airgeddon will open in front of us as shown in the following screenshot:

After it will ask to check for all the tools installed or not, we need to press ↵ Enter to continue.

In the above screenshot we can see that we have all the tools. Now we plugin our external USB WiFi adapter that supports monitor mode and packet injection. Then we again need to press ↵ Enter again to continue.

Here we can see the list of interfaces on our system, as the following screenshot.

In our case our wlan1 interface supports monitor mode and packet injections, so we press 5 and hit ↵ Enter. This will tell airgeddon that we are going to work with that interface.

After that we got the main menu of airgeddon script.

Here at the top we can see our interface name and mode. The mode is ‘managed’ we need to change it to ‘monitor’ mode. Here everything is very clear and simple.

We can use option 2 to change the interface mode to monitor. We press 2 and ↵ Enter.

In the above screenshot we can see that our interface is changed from wlan1 to wan1mon and the mon is for monitor mode.

Now we can perform attacks using this script. For example here we demonstrate handshake capturing and evil-twin attacks using airgeddon on Kali Linux.

Capture and Crack Handshake File using Airgeddon

For an example first we capture handshake of a wireless network. Now what is handshake file? We know if we previously used a WiFi network using password and the password isn’t changed then we can easily connect to the network because of the handshake file. This file stores the password with encryption.

To perform handshake capture attack we enter in the handshake tools menu by pressing 5 and ↵ Enter. Then the handshake menu comes in front of us as the following screenshot.

Here the option number 6 is for capture the WiFi handshake. So we press 6 and hit ↵ Enter.

We did not choose any network, so airgeddon is redirect us to select a target WiFi network. We need to press ↵ Enter to continue.

Here we explore for target WiFi network. We can start the attack by pressing ↵ Enter, when we think we have found our target network we can press CRL+C to stop searching.

Here we can see that a another window is opened to search for networks. We can see that we have only target. So we can stop the search by pressing CTRL+C. Then it will show the list of targets.

As we told, we have only one WiFi network (we live in a remote area). That’s why airgeddon automatically select this. Otherwise we need to select the number of the WiFi network to select it.

We press ↵ Enter to continue. 

Now airgeddon got a valid target it it asks to continue the handshake capture. We again press ↵ Enter to continue.

Then airgeddon again prompts for the methods to capture the handshake file, as we can see in the following screenshot.

For an example we choose the deauth attack (No. 1). So we choose number 1 and press ↵ Enter.

Here we need to type of the value in seconds. We can simply press ↵ Enter to left it on it’s default value, which is 20. Then it show us some advises as we can see in the following screenshot:

We can see in the above screenshot that the tool is going to capture the handshake. It also advice us to not close the windows manually during handshake capturing. We will know when airgeddon capture the handshake file. We need to press ↵ Enter to continue.

Then we can see some terminal window is opened in front of us in the following screenshot. We should not close them. 

To clear some things here airgeddon sending de-authentication packets to the network, then all the WiFi users will disconnect for some seconds for the flood. Whenever the devices trying to connect back the WiFi network airgeddon will capture the handshake file.

After successfully capturing the handshake file these will close automatically, and show us a congratulations message. It also asks where we want to save our handshake file. The default is under /root/handshake**.cap as we can see in the following screenshot.

Here also we goes with the default by just pressing ↵ Enter. Then the handshake file is stored successfully on the root folder. Handshake capturing is complete now. We can press ↵ Enter again to back in the menu.

We can press 0 and ↵ Enter to return to the main menu.

Our captured handshake file is stored on /root/ directory. We can see it by opening our thunar file manager with root permission (sudo thunar).

We can crack the handshake file in various way. We can use airgeddons menu Airgeddon > Offline WPA/WPA2 decrypt menu > Personal > (aircrack + crunch) Bruteforce attack against Handshake/PMKID capture file. We also can use aircrack-ng or some other brute-forcing tool. There are also some online tools are available.

Evil Twin Attack using Airgeddon

We can do a lot of attacks using airgeddon. Evil twin is one of them. In this attack we create a copy of our target access point and whenever the user of the access point try to connect with our fake access point with their access point’s password we got it. But why they do it?

Because we continuously send de-authentication packets to the target access point (AP), so that the user will not able to connect with the original AP, and got trapped.

First of all we set the mode to monitor. Then we choose ‘Evil Twin attacks menu’ by pressing 7 and ↵ Enter.

Here we need to explore for the target by typing 4 as we did in the previous attack. We got auto-selected because we have only one target nearby.

Then we click ↵ Enter to continue. We get back to the ‘Evil Twin attacks menu’. Here we choose 9 for captive portal attack.

Now here we choose option 2 for ‘Deauth aireplay attack’.

Airgeddon will ask us some question. First it will ask that if we want to integrate “DoS pursuit mode”. The default is N for no, we also know that our AP will not change the channel in this case, so we press ↵ Enter to keep it default. Then it will ask if we want to spoof our mac address. We also goes with default (that is N).

Now airgeddon will ask us that have we captured the handshake of this access point. In our above attack we had captured it. So we choose Y for yes. Then it will prompt for the location of the handshake file, and we provide it, as we can see in the following screenshot:

Then it asks the location where the saved password will stay in a text file. Default location is under /root/ directory. We again goes with the default by just pressing ↵ Enter.

We can see in the above screenshot that our path is valid and we can move forward by pressing ↵ Enter.

In the next step airgeddon will create a phishing page and asks us for it’s language, as we can see in the following screenshot:

Here we choose 1 to select English, and press ↵ Enter.

Now airgeddon is ready to run the attack. All parameters and requirements are set. The attack is going to start. Multiple windows will be opened, don’t close anyone. When we want to stop the attack press ↵ Enter on this window and the script will automatically close them all.

We can see lots of terminals here for various works like de-authentication, control, DNS, Web Server etc.

Now we can see on our mobile device that we are not connected to our locked main WiFi access point and there are another access point with same name, in the following screenshot:

Whenever we connect to the other network. It automatically redirect to log in, as shown in the following screenshot:

Now here if our target use the password it will show the user that it was correct password.

We get it on our txt file on root directory. It also shown in the control terminal window. We need to keep the terminal windows open until the user did not put his password on the login screen. Hope target is not sleeping.

Here in this evil twin attack we are using the handshake file to check the password is correct or not. If they put the wrong password then it will notice it. Isn’t is amazing?

There are many types of attacks we can perform using airgeddon against a wireless network. Here we discuss about only two type because everything is very easy here. We just need to select the options only, everything will be done by the script automatically.

This is how we can install and use Airgeddon on Kali Linux. This is a very easy but powerful tool for WiFi auditing.

Airgeddon is specially designed for Linux. Airgeddon did not compatible on MacOS/OSX, because Aircrack suite does not support airodump and aireplay for OSX/MacOS, and iwconfig does not exist in OSX/MacOS.

Airgeddon is not working with any Linux distribution run under Windows subsystem (WSL). Airgeddon also didn’t support native OpenBSD and FreeBSD, iwconfig command not working there and ifconfig shows different output.

Warning:- Attacking other’s network or WiFi is not legal. We publish this article for educational purpose and tested things on our own devices. If anyone attacks on others devices then we and the tool creator will not be responsible for that.

Stay updated with our articles by following us on Twitter and GitHub. Be a part of the KaliLinuxIn community by joining our Telegram Group, where we focus on Linux and Cybersecurity. We’re always available to help in the comment section and read every comment, ensuring a prompt reply

There are lots of scanning tools used by cybersecurity professionals. Not arguably Nmap is the most famous scanning tool, but it is very slow. There are lots of more useful scanners. Masscan is the fastest port scanner in the world, but masscan is not so accurate.

If we need a enough fast scanner that gives us much reliable result we can choose Unicornscan. Unicornscan comes pre-installed with Kali Linux.

Unicornscan is a asynchronous based scanner (unlike nmap is synchronous based). That’s why it is faster.

Unicornscan was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. It is released for the community to use under the terms of the GPL license.

Key-Features of Unicornscan

Unicornscan is an attempt at a User-land Distributed TCP/IP stack. It is intended to provide a researcher a superior interface for introducing a stimulus into and measuring a response from a TCP/IP enabled device or network. Although it currently has hundreds of individual features, a main set of abilities include:

• Asynchronous stateless TCP scanning with all variations of TCP Flags.
• Asynchronous stateless TCP banner grabbing
• Asynchronous protocol specific UDP Scanning (sending enough of a signature to elicit a response).
• Active and Passive remote OS, application, and component identification by analyzing responses.
• PCAP file logging and filtering.
• Relational database output.
• Custom module support.
• Customized data-set views.
• Has its TCP/IP stack, a distinguishing feature that sets it apart from other port scannersHas its TCP/IP stack, a distinguishing feature that sets it apart from other port scanners.

Scanning With Unicornscan

While Unicornscan comes built into Kali Linux we don’t need to install it. If if we need to install it we can use following command:

sudo apt-get install unicornscan

First we start with basic scan. To perform a basic scan we can use following command:

sudo unicornscan 192.168.112.57

The output of the command shows in the following screenshot:

Here we have run unicoenscan on a Metspliotable2 machine and we can see that the normal scan has listed all the opened TCP ports of host machine. It’s kind of similar to -Ss scan in NMap.

If we need to run basic scan using unicornscan on multiple hosts then we can run following command:

sudo unicornscan 192.168.112.57 192.168.102.100

In this case we run the scan cammand and put 2 hosts divided with ‘space’.

We also can run it against live websites, here we want that unicornscan send 30 packets per second, so we use -r30 flag. We also look for TCP ports so we can run the scan using -mT scan (T is for TCP). So the command will be following:

sudo unicornscan -r30 -mT adaptercart.com

And we got the result as we want. As we can see in the following screenshot:

In the above screenshot we can see that unicornscan scans the website’s TCP ports.

We have seen that unicornscan scans the TCP ports using -mT flag, but if we want to scan UDP ports then we can try with -mU flag. Mind the similarities then it will be easy to remember. The command will be as following:

sudo unicornscan -r300 -mU 192.168.112.57

The screenshot is following:

In the above screenshot we can see that we got UDP ports only from the hosts.

We can save the scan result in a PCAP file using following command:

sudo unicornscan -r300 -mU 192.168.112.57 -w udpports.pcap

Using the above command (-w flag) we can save the scan result in a PCAP file. We can choose any name, for an example we have chosen “udpports”. The file will be saved on our home/user directory, as we can see in the following screenshot:

This the the basic uses of Unicornscan. If we want to learn more advanced scans then we can see the help menu of Unicornscan by applying following command:

sudo unicornscan -h

This is how we can scan a host or a website using Unicornscan on our Kali Linux system.

Love our super easy articles ? Don’t wanna miss new articles? We post updates of our articles on GitHub and Twitter. Make sure to follow us there to read and learn about cybersecurity.

Have any problem or any question? Please don’t hesitate to ask us in the comment section. We read every comments and we always reply.

As businesses globally are growing to meet the most immediate requirements of customers and provide them with best-in-class experiences that form impressions leading to increased brand loyalty.

To increase the accuracy and efficiency of operations and to avoid wastage, they are starting to integrate Internet of Things devices as part of their network infrastructure.

Earlier, IoT was an emerging technology, but today, it has become the most indispensable technology driving change in different industries across sectors. But the catch with these devices is that they are highly vulnerable to cyber attacks due to the low level of security that they come with.

Increased organizations are looking forward to investing in some form of IoT security for the same reason.

Through our blog, we will take a look into some of the most immediate attacks threatening IoT devices today.

But first, let us understand what IoT devices are.

What are IoT devices?

Internet of Things devices are devices used on a day-to-day basis. They comprise sensors, locks, payment kiosks, smart-accessories, and cameras. These devices are connected to external wireless networks or the internet. This external connectivity allows devices to track, monitor, and control assets. A typical IoT system must comprise a CPU, a system software, and in some cases, SIM cards are used to connect IoT devices to the network. IoT devices transmit data using Bluetooth, Wifi, or a data network. They accumulate, process and exchange a lot of data in the interconnected network without much security apart from the default password, making them highly vulnerable to cyber-attacks.

One research found that the growing use of IoT devices would result in a significant rise in the data that is generated. It was found that by 2025, over 73.1 zettabytes will be generated by IoT devices alone. That is a lot of data indeed and protecting all of that data would be a herculean challenge. And the question that remains is whether they are prepared for it.

Why are businesses utilizing IoT devices?

Businesses across multiple sectors are utilizing IoT devices for bolstering their efficiencies and providing new experiences to customers. From the usage of IoT for easy payments at the point of sale to using IoT devices for monitoring assets, IoT devices have become the means of increasing efficiencies across different verticals in businesses. A Forbes research found that over 58% of finance companies have adopted IoT devices for improving productivity and efficiency. It is reasonably clear that businesses today have become highly reliant on IoT devices.

Let us take a look at some of the real-world applications of IoT:

IoT in the industrial sector

IoT devices are used in the industrial sector for smoothening operations. It is used for industrial applications such as monitoring and tracking assets, quality control in production, remote production, and predictive maintenance.

IoT in the transport sector

In the transport sector, IoT devices are used for applications such as tracking goods carriers, measuring weight, and optimizing route plans by keeping track of temperature and conditions. 

PoS devices

Retail stores, hotels, and restaurants are using hand-held IoT devices at their Point of Sale as a means to ease payment for providing new experiences to customers and obtaining key data on sales. 

IoT in the healthcare sector

IoT is helping healthcare workers be it on the frontline or in the operating theater. IoT devices are made specifically to monitor heart rate, blood sugar, and the functioning of internal organs.

Why do IoT devices pose a major security risk?