Friday, 24 February 2017

Hamia mtandao mwingine bila kubadili line yako!



 

 MAMLAKA ya Mawasiliano Tanzania (TCRA), imezindua mpango maalum unaomuwezesha mteja kuhama mtandao mmoja wa simu kwenda mwingine bila kubadili namba ya simu, na kueleza hatua 13 za kufuata ili kupata huduma hiyo.

Mkurugenzi Mkuu wa TCRA, Mhandisi James Kilaba, akizungumza na wahariri na waandishi wa vyombo mbalimbali vya habari jana jijini Dar es Salaam, alisema huduma hiyo ni ya hiari na ili mtu aweze kuhama mtandao mmoja kwenda mwingine ni lazima afuate hatua 13.

 

Mhandisi wa Mawasiliano wa TCRA, Mwesigwa Felician, alitaja hatua ya kwanza ya kuhama mtandao mmoja wa simu kwenda mwingine kuwa ni kufika kituo cha mauzo au kwa wakala anayetambuliwa na mtoa huduma anakotaka kuhamia na kumueleza dhumuni lake.

Hatua ya pili, alisema Felician, ni kujaza fomu maalum ya maombi ya kuhamia mtandao aliotaka kuhamia.

Felician alitaja hatua ya tatu kuwa ni kujaza tamko la kukubali kuwa mteja anakubali kuwajibika kwa madeni yoyote ambayo yanatokana na huduma alizokuwa akipata kwa mtoa huduma wa awali kama yatakuwapo.

Felician alitaja hatua ya nne ni kuwa ni kuwasilisha kitambulisho chenye picha ambacho kinaweza kuwa cha taifa, kadi ya mpiga kura, leseni ya udereva, pasipoti au kitambulisho chochote rasmi kinachotambulika.

Alisema pia mteja anatakiwa kuwa na simu ya kiganjani inayofanya kazi yenye namba inayotakiwa kubaki baada ya kuhama mtandao.

Hatua ya tano, Felician alisema ni kuhamisha fedha zilizopo kwenye akaunti ya simu kabla ya kuhama ili kuepuka usumbufu.

Katika hatua ya sita, Felician alisema, mwenye namba ya simu atatakiwa kutuma ujumbe mfupi wa maneno wenye neno HAMA kwenda namba 15080 ambayo ni namba maalum ya kuhama.

Alisema katika hatua ya saba, mteja atapokea ujumbe mfupi wa maneno utakaomjulisha kuwa ombi lake limekubaliwa.

“Hatua ya nane, iwapo namba yako haikuzuiliwa au kusimamishwa kwa muda kutokana na kutokamilisha malipo ya madeni ya mtoa huduma wako wa awali, maombi yako yatashughulikiwa na utajulishwa kwa ujumbe mfupi wa maneno maendeleo ya mchakato huo,” alisema Felician.

KAMA KAWAIDA

Alisema katika hatua ya tisa, mtoa huduma za simu za kiganjani atampatia mteja wake mpya laini mpya ya simu.

Hatua ya 10, Felician alisema, ni kusitishwa kwa huduma za kifedha kwa muda mpaka namba ya mteja itakapohamishwa kwa mtoa huduma mpya. Kuanzia hapo mwenye namba atatumia huduma za kifedha za mtandao mpya kama huduma zipo.

Mhandisi wa Mawasiliano wa TCRA Felician alisema katika hatua ya 11, huduma za kupiga na kupokea simu na ujumbe mfupi wa maneno zitaendelea kama kawaida.

Alisema katika hatua ya 12, mteja atakuwa amehama mtandao mmoja kwenda mwingine na kama patakuwa na ucheleweshaji, ni wa saa kadhaa, lakini ndani ya siku mbili pekee.

“Wakati huo namba yako ya zamani itakuwa imehamishwa kwa mtoa huduma wako mpya na laini yako ya awali haitatumika tena na utapokea ujumbe mfupi wa maneno kuwa uhamaji umekamilika,” alisisitiza Felician.

Katika hatua ya 13, mteja atatakiwa kuweka laini yake aliyopewa kwenye simu na endapo elimu zaidi itahitajika, mteja atatakiwa kwenda kwa mtoa huduma kujua namna ya kutumia huduma hiyo mpya.

MASHARTI NA VIGEZO

Mbali na kuelezea hatua hizo za kujiunga, Felician alisema masharti na vigezo vitavingatiwa ambavyo alivitaja kuwa ni mteja kutoweza kuhama na namba iliyofungiwa au kusitishiwa huduma kwa walipaji wa kabla ya huduma.

Alisema pia mteja hataweza kuhama na salio lililopo na atatakiwa kutumia salio lake kwanza kabla ya kuhama kwani vinginevyo, litapotea.

Pia alisema mteja hataweza kuhama iwapo ana mkopo kutoka kwa mtoa huduma wa awali, mikopo mingine kwa njia ya muda wa maongezi na pesa mtandao.

Felician alisema pia mteja hataweza kuhama iwapo namba yake inahusishwa na uhalifu na imefungiwa.

Kwa wateja wanaotumia utaratibu wa malipo baada ya kutumia huduma, watatakiwa kulipa madeni ya matumizi yao kabla ya kuhama, alisema.

Wateja hao, watatakiwa pia kukamilisha masharti ya mkataba ya mtoa huduma wake na kutizama masharti ya malipo kila mwezi kwa mujibu wa mkataba kabla ya kuhama, alisema zaidi Felician.

Alisema pia wataendelea kupokea ankara za matumizi hadi namba itakapohamishiwa kwa mtoa huduma mpya.

“Utaendelea kupokea ankara ya mwisho hadi siku 60 baada ya kuhamisha namba yako,” alisema Felician.

“Utapewa mpaka siku 30 za kulipa ankara hizo, vinginevyo utakuwa katika hatari ya uhamaji wako kusitishwa au namba yako kufungiwa.”

Awali akizundua huduma hiyo, Mhandisi Kilaba alisema ili kufahamu mtumiaji wa simu unayempigia amehama mtandao “utasikia milio miwili kabla ya simu kuita.”

“Hii milio ndiyo ambayo watu waliokuwa wanasema TCRA tumeanza kusikiliza mazungumzo ya watu, naomba muwaeleweshe Watanzania.”

Alisema kwa sasa kuna laini za simu milioni 40.1 nchini na kwamba lengo la kuleta huduma hiyo ni kuboresha na kupanua huduma za mawasiliano nchini.

 

Wednesday, 22 February 2017

WIFI HACKING

Hacking wifi password

Requirements:
1.laptop (must have a working wireless chip)

2. Kali Linux OS installed

How To Hack WPA/WPA2 Wi-Fi With Kali Linux & Aircrack-ng

Kali Linux can be used for many things, but it probably is best known for its ability to penetration test, or “hack,” WPA and WPA2 networks.
There are hundreds of Windows applications that claim they can hack WPA; don’t get them! 

              They’re just scams, used by professional hackers, to lure newbie or wannabe hackers into getting hacked themselves. There is only one way that hackers get into your network, and that is with a Linux-based OS, a wireless card capable of monitor mode, and aircrack-ng or similar.

Also note that, even with these tools, Wi-Fi cracking is not for beginners. Playing with it requires basic knowledge of how WPA authentication works, and moderate familiarity with Kali Linux and its tools. If you feel you have the necessary skills, let’s begin:

These are things that you’ll need:
A successful install of Kali Linux
A wireless adapter capable of injection/monitor mode.
A wordlist to attempt to “crack” the password once it has been captured
Time and patience
If you have these then we’re ready to set off

Step One:

Start Kali Linux and login, preferably as root


Step Two:
Plugin your injection-capable wireless adapter, (Unless your native computer wireless card supports it). If you’re using Kali in VMware, then you might have to connect the card via the icon in the device menu

Step Three:
Disconnect from all wireless networks, open a Terminal, and type airmon-ng

This will list all of the wireless cards that support monitor (not injection) mode. If no cards are listed, try disconnecting and reconnecting the adapter (if you’re using one) and check that it supports monitor mode. If you’re not using an external adapter, and you still don’t see anything listed, then your card doesn’t support monitor mode, and you’ll have to purchase an external one. You can see there that my card supports monitor mode and that it’s listed as wlan0.

Step Four:
Type airmon-ng start followed by the interface name of your wireless card. mine is wlan0, so my command would be: airmon-ng start wlan0

The “(monitor mode enabled)” message means that the card has successfully been put into monitor mode. Note the name of the new monitor interface, mon0.

EDIT:

A bug recently discovered in Kali Linux makes airmon-ng set the channel as a fixed “-1” when you first enable mon0. If you receive this error, or simply do not want to take the chance, follow these steps after enabling mon0:
Type: ifconfig [interface of wireless card] down and hit Enter.

Replace [interface of wireless card] with the name of the interface that you enabled mon0 on; probably called wlan0. This disables the wireless card from connecting to the internet, allowing it to focus on monitor mode instead. 

After you have disabled mon0 (completed the wireless section of the tutorial), you’ll need to enable wlan0 (or name of wireless interface), by typing: ifconfig [interface of wireless card] up and pressing Enter.

Step Five:

    Type airodump-ng followed by the name of the new monitor interface, which is probably mon0.

If you receive a “fixed channel –1” error, see the Edit above.

Step Six:
Airodump will now list all of the wireless networks in your area, and a lot of useful information about them. Locate your network or the network that you have permission to penetration test. Once you’ve spotted your network on the ever-populating list, hit Ctrl + C on your keyboard to stop the process. Note the channel of your target network.

Step Seven:
Copy the BSSID of the target network

Now type this vommand:

airodump-ng -c [channel] –bssid [bssid] -w /root/Desktop/ [monitor interface]

Replace [channel] with the channel of your target network. Paste the network BSSID where [bssid] is, and replace [monitor interface] with the name of your monitor-enabled interface, (mon0). The “–w” and file path command specifies a place where airodump will save any intercepted 4-way handshakes (necessary to crack the password). Here we saved it to the Desktop, but you can save it anywhere.

A complete command should look similar this: 

airodump-ng -c 10 –bssid 00:14:BF:E0:E8:D5 -w /root/Desktop/ mon0

Now press enter.

Step Eight:
Airodump with now monitor only the target network, allowing us to capture more specific information about it. What we’re really doing now is waiting for a device to connect or reconnect to the network, forcing the router to send out the four-way handshake that we need to capture in order to crack the password. 

            Also, four files should show up on your desktop, this is where the handshake will be saved when captured, so don’t delete them!
But we’re not really going to wait for a device to connect, no, that’s not what impatient hackers do. We’re actually going to use another cool-tool that belongs to the aircrack suite called aireplay-ng, to speed up the process.

Instead of waiting for a device to connect, hackers can use this tool to force a device to reconnect by sending deauthentication (deauth) packets to one of the networks devices, making it think that it has to reconnect with the network.
Of course, in order for this tool to work, there has to be someone else connected to the network first, so watch the airodump-ng and wait for a client to show up.

It might take a long time, or it might only take a second before the first one shows. If none show up after a lengthy wait, then the network might be empty right now, or you’re to far away from the network.
You can see in this picture, that a client has appeared on our network, allowing us to start the next step.

Step Nine:
Leave airodump-ng running and open a second terminal. In this terminal, type this command:

aireplay-ng –0 2 –a [router bssid] –c [client bssid] mon0

The –0 is a short cut for the deauth mode and the 2 is the number of deauth packets to send.

-a indicates the access point/router’s BSSID, replace [router bssid] with the BSSID of the target network, which in my case, is 00:14:BF:E0:E8:D5.

-c indicates the client’s BSSID, the device we’re trying to deauth, noted in the previous picture. Replace the [client bssid] with the BSSID of the connected client, this will be listed under “STATION.”

And of course, mon0 merely means the monitor interface, change it if yours is different.
My complete command looks like this: 

aireplay-ng –0 2 –a 00:14:BF:E0:E8:D5 –c 4C:EB:42:59:DE:31 mon0

Step Ten:
Upon hitting Enter, you’ll see aireplay-ng send the packets. If you were close enough to the target client, and the deauthentication process works, this message will appear on the airodump screen (which you left open):

This means that the handshake has been captured, the password is in the hacker’s hands, in some form or another. You can close the aireplay-ng terminal and hit Ctrl + C on the airodump-ng terminal to stop monitoring the network, but don’t close it yet just incase you need some of the information later.
If you didn’t receive the “handshake message,” then something went wrong in the process of sending the packets.

Unfortunately, a variety of things can go wrong. You might just be too far away, and all you need to do is move closer. The device you’re attempting to deauth might not be set to automatically reconnect, in which case you’ll either have to try another device, or leave airodump on indefinitely until someone or something connects to the network. If you’re very close to the network, you could try a WiFi spoofing tool like wifi-honey, to try to fool the device into thinking that you’re the router. However, keep in mind that this requires that you be significantly closer to the device than the router itself. So unless you happen to be in your victim’s house, this is not recommended.

Do note that, despite your best efforts, there are many WPA networks that simply can’t be cracked by these tools. The network could be empty, or the password could be 64 characters long, etc.

Step 11:
This concludes the external part of this tutorial. From now on, the process is entirely between your computer, and those four files on your Desktop. Actually, it’s the .cap one, that is important. Open a new Terminal, and type in this command: 

aircrack-ng -a2 -b [router bssid] -w [path to wordlist] /root/Desktop/*.cap
-a is the method aircrack will use to crack the handshake, 2=WPA method.

-b stands for bssid, replace [router bssid] with the BSSID of the target router, mine is 00:14:BF:E0:E8:D5.

-w stands for wordlist, replace [path to wordlist] with the path to a wordlist that you have downloaded. I have a wordlist called “wpa.txt” in the root folder.

/root/Desktop/*.cap is the path to the .cap file containing the password. The * means wild card in Linux, and since I’m assuming that there are no other .cap files on your Desktop, this should work fine the way it is.
My complete command looks like this:

aircrack-ng –a2 –b 00:14:BF:E0:E8:D5 –w /root/wpa.txt  /root/Desktop/*.cap

Now press Enter

Step 12:
Aircrack-ng will now launch into the process of cracking the password. However, it will only crack it if the password happens to be in the wordlist that you’ve selected. Sometimes, it’s not. If this is the case, you can try other wordlists.

If you simply cannot find the password no matter how many wordlists you try, then it appears your penetration test has failed, and the network is at least safe from basic brute-force attacks.
Cracking the password might take a long time depending on the size of the wordlist. Mine went very quickly.
If the phrase is in the wordlist, then aircrack-ng will show it too you like this:

The passphrase to our test-network was “notsecure,” and you can see here that it was in the wordlist, and aircrack found it.
If you find the password without a decent struggle, then change your password, if it’s your network. If you’re penetration testing for someone, then tell them to change their password as soon as possible

If you’re penetration for your own use then enjoy

DISCLAIMER: Hacking is illegal, I’ll not be held responsible in case or by any means you get caught and be sued.