Author Topic: Some of the Basic Online Attacks  (Read 1619 times)

0 Members and 1 Guest are viewing this topic.

Offline HTTP

  • Serf
  • *
  • Posts: 28
  • Cookies: -19
    • View Profile
Some of the Basic Online Attacks
« on: April 21, 2015, 11:10:13 pm »
These days, WiFi hacking is a very big issue. Especially Rogue AP's. There will be always ways for black-hat's to find new ways to attack you over wireless, there is no way to fully stay safe and anonymous online. You are at big risk when using free or even paid access points.


You should always use a VPN, this is an obvious one. This will encrypt your traffic, making it harder for the hacker to decipher the information being sent to him, if the attacker is performing a MiTM attack on the network. You'll also stay more anonymous on the network, always use the most advanced encryption algorithm available to you. OpenVPN per say.


Be aware of information you are providing. Do not ever, not even with a VPN, do banking or log into social media on networks. There is a large chance you are on a rogue access point, at least these days. You may not even know it, the hacker might have performed a de-authentication attack, and automatically logging you into the rogue access point. Making you oblivious to the fact your information is being recorded.


When using an access point, check if the headers of your websites are using HTTPS, and not HTTP. If a site like facebook is displaying a HTTP, don't log in. Someone is likely recording your information. Obviously, some attacks like SSLSTRIP makes it so it says SSL on there, and changing it to HTTPS. But you are mostly safe from SSL stripping, as most sites uses TLS these days.


Is it redirecting you or asking for information when using the access point? Someone is probably doing a Evil Twin attack on the network if this is happening, as I stated above, do not ever give out credit card information. The attacker, if using evil twin, might have setup a page asking for credit card information, automatically giving you errors like, "Please use a different card, that card is not supported." But storing the data, and having you put in more credit cards, and therefor storing more information. It's a very damaging and dangerous attack.


This is just the very basics, just wanted to make "some" aware.