Screenlogger - A keylogger app for Android and iOS Smartphones

Are you using a pattern lock for your Smartphone to remain untouched from cyber criminals? But you are not aware that even your swipe gestures can be analyzed by hackers.

Neal Hindocha, a security adviser for the technology company Trustwave, has developed a prototype malware for the Smartphones that works the same as a keylogger software for desktop.

The malware dubbed as ‘Screenlogging’, is capable of monitoring finger swipes on the screen of your smart devices in combination with taking screenshots to know exactly how the user is interacting with their phone or tablet, reported by Forbes.

The concept used by him is the same that of Keyloggers, a critical type of malware for cyber criminals, which records the input typed into the keyboard and can easily detect passwords for email, social media and of online bank accounts. In the same way the ‘Screenlogger’ take care of the inputs taped and swiped on the screen. It logs the X and Y coordinates where the user has touched the screen, so a hacker would know what the user is doing and on which application.

Hindocha says, “If you’re monitoring all touch events and the phone hasn’t been touched for at least one hour, then you get a minimum of four touch events, you can assume that is a PIN code being entered.”

He also added that “The more interesting thing is, if you get a screenshot and then overlay the touch events, you’re looking at a screenshot of what the user is seeing, combined with dots, sequentially, where the user is touching the screen.”

But the demonstration of Hindocha works only with the administrative privileges of the device i.e. On the jailbroken iOS and the rooted Android devices only. In order to install the malware, the device should be connected to a computer via USB cable. But this limitation don't mean to relax, because there are many similar vectors available to infect the device.

It would be estimated that the malicious version of the Proof-of-Concept app created by Hindocha, which is capable of tracking taps and swipes of the users’ Smartphone, a malicious hacker might be able to steal PINs, account numbers, passwords and other sensitive information easily.

Hindocha is planning to demonstrate his ‘Screenlogging’ malware at the upcoming RSA Security conference next month.

Like us on Facebook

Shivam Kotwalia, CodeKill

Microsoft's Process Explorer added VirusTotal Multi-Antivirus Scanner support

Process Explorer, a part of the Microsoft’s Sysinternals suite of applications is an alternate task manager for Windows, which offers far more features than 'on-board'.

Microsoft’s Windows Sysinternal Suite has released the latest version of Process Explorer v16.0 that has an awesome feature which allows a user to scan any running program files with a web-based multi-antivirus scanner VirusTotal.

Process Explorer sends the hashes of images and files shown in the process and DLL views to VirusTotal, and if they have been previously scanned, it reports how many antivirus engines identified them as possibly malicious.

This new version of 'Process Explorer' is better than ever before, and is quite fast that allows you to find unwanted malware immediately and respective hyper-linked result takes you to VirusTotal.com's detailed report page and there you can even submit more files for scanning.

Whenever your system starts doing sluggish behavior, you try to find out what all the processes are running and what their state is, or any deadlock has occurred? 

Process Explorer shows information about handles and DLLs of running processes. This tool has a powerful search capability that quickly shows you which processes have particular handles opened or DLLs loaded.

The unique capabilities of Process Explorer make it useful for tracking down DLL-version problems or handle leaks, and provide insight into the way Windows and applications work.

Now you can use VirusTotal to scan the file of a running process on your computer, and to do that you can right-click on the file and select ‘Check VirusTotal’.

With increase in cyber-attacks, job of keeping the antivirus database updated with malicious signature has become very cumbersome. VirusTotal was acquired by Google, provides unbiased service and has real time updates of virus signatures and blacklists.

Both VirusTotal and the Sysinternals tools are great examples of the wealth of first-rate free tools available to IT and developers. Microsoft's collaboration with VirusTotal service is a great initiative to increase the security of windows users. You can download Process Explorer v16.0 here.

Like Us on facebook

Shivam Kotwalia, CodeKill

Facebook domain hacked by Syrian Electronic Army

On the 10th Anniversary of Social networking website Facebook, the hacker group 'Syrian Electronic Army' claimed that they managed to hack into the administrator account of the Facebook's Domain Registrar - MarkMonitor.

The hacking group changed the Facebook Domain's contact information to a Syrian email address on the company’s WHOIS domain information page, as shown.

"Happy Birthday Mark! http://Facebook.com owned by #SEA" the group tweeted.

Hackers also claimed that it had updated the nameserver information to hijack domain, but the process had to be abandoned because it was "taking too much time..." whereas, Facebook spokesperson did confirm that the website's domain record email contact information had been changed.

Why SEA Targeted Facebook? Syrian activists and Hackers claimed that Facebook has been deleting pages created by dissidents and removing content as it was violating the social network’s standards, according to Facebook, and that important information about the conflict is being lost as a result.

Journalists and activists involved in the Syrian revolution said that the deletion of Syrian opposition pages by Facebook removes important data and context about the revolution there, including some crucial information about chemical weapon attacks last year.

If SEA had succeeded in updating the nameserver record for Facebook, then the millions of users could have been directed to any other defaced or malicious website.

At the time of writing, the registrant contact details were restored and Facebook confirmed that no traffic to the website was hijacked, and that no users of the social network were affected.

33 Free Ebooks On PHP, HTML, CSS and MySQL For Your Benefit!

PHP, HTML and CSS are three languages that are a must for any web developer. Add MySQL to this and you have become a complete web developer. You can build your own website very easily if you know these platforms. Moreover, there are an array of job opportunities that are opened up once you are thorough in these three. So, here are 33 ebooks on the languages that run the internet!

PHP and MySQL

1. PHP and MySQL - 24-Hour Trainer

2. PHP and MySQL The Missing Manual Second Edition

3. PHP Cookbook

4. PHP Solutions 2nd Edition

5. PHP and MySQL Web Development All in One Desk Reference For Dummies

6. PHP in Action

7. PHP Solutions Dynamic Web Design Made Easy

8. PHP5 Power Programing

9. PHP6 MySQL Programming for the Absolute Beginner

10. PHP6 and MySQL5 for Dynamic WebSites

11. Php Architect's Guide to Programming with Zend Framework

12. PHP by Example

13. PHP Solutions Dynamic Web Design Made Easy

14. PHP Solutions 2nd Edition

15. Php Architects Guide To PHP Design Patterns Jason.E.Sweat

16. PHP Game Programming

17. PHP Object Oriented Solutions

18. PHP Programming With PEAR

19. Prentice Hall Php5 Power Programming

HTML and CSS

1. DHTML and CSS Advanced

2. HTML 4 For Dummies, 5th Edition

3. HTML In 10 Simple Steps Or Less

4. HTML Mastery - Semantics, Standards, And Styling

5. HTML, XHTML, & CSS Bible, 3rd Edition

6. Sams Teach Yourself HTML and CSS in 24 Hours

7. Sams Teach Yourself HTML5 Mobile Application Development in 24 Hours

8. CSS - Designing for the Web

9. CSS - The Definitive Guide, 3rd Edition

10. CSS - The Missing Manual

11. CSS Cookbook, 2nd Edition

12. CSS Instant Results

13. HTML & XHTML - The Definitive Guide, 6th Edition

14. HTML, XHTML, & CSS - Visual QuickStart Guide, 6th Edition
Shivam Kotwalia, CodeKill

21 Tips And Tricks For JavaScript Programmers

If you work on the popular JavaScript programming language, we bring you some useful tips and tricks. Read on... 

Have you been programming in JavaScript? It's an important language, but you may be missing out on some of the important tips and tricks here. Use them to make your webpages better and more advanced!

1. Convert a JavaScript Array into the Comma Seperated Value (CSV) format

The valueOf() method is used to convert a javascript array into the CSV format.

var arr = ['abc', 'bcd', 'cde', 'def'];

var str = arr.valueOf();

//print str: abc,bcd,cde,def

You can also use the pipe (|) instead of commas. For this you have to use the join() method.

var arr = ['abc', 'bcd', 'cde', 'def'];

var str = arr.join("|");

//print str: abc|bcd|cde|def

2. Converting CSV into Javascript array

For this you will use the split() method. The method can be used to split a string separated by any token into a Javascript array.

var str = "a, b, c, d";

var arr = str.split(",");

//print arr[0]: a

3. Remove elements of an array by their index

Use the splice() method for this. The splice method can add and remove elements from an array.

function removeByIndex(arr, index) {
arr.splice(index, 1);
}

test = new Array();
test[0] = 'Apple';
test[1] = 'Ball';
test[2] = 'Cat';
test[3] = 'Dog';

alert("Array before removing elements: "+test);

removeByIndex(test, 2);

alert("Array after removing elements: "+test);

4. Remove elements of an array by value

function removeByValue(arr, val) {
for(var i=0; i if(arr[i] == val) {
arr.splice(i, 1);
break;
}
}
}

var somearray = ["mon", "tue", "wed", "thur"]

removeByValue(somearray, "tue");

//somearray will now have "mon", "wed", "thur"

A method (removeByValue in example) has to be defined for removing elements by their value. New functions can be defined to classes at runtime in Javascript using prototypes.

In the code fragment given below, a removeByValue() method has been created inside the Array class.

Array.prototype.removeByValue = function(val) {
for(var i=0; i if(this[i] == val) {
this.splice(i, 1);
break;
}
}
}
//..

var somearray = ["mon", "tue", "wed", "thur"]

somearray.removeByValue("tue");

//somearray will now have "mon", "wed", "thur"

5. Call a JavaScript function as a string

The code fragment given below allows you to call a function simply by its name.

var strFun = "someFunction"; //Name of the function to be called
var strParam = "this is the parameter"; //Parameters to be passed in function

//Create the function
var fn = window[strFun];

//Call the function
fn(strParam);

6. Generating a random number between 1 to n

This code is useful in generating random numbers for games etc.

//random number from 1 to N
var random = Math.floor(Math.random() * N + 1);

//random number from 1 to 10
var random = Math.floor(Math.random() * 10 + 1);

//random number from 1 to 100
var random = Math.floor(Math.random() * 100 + 1);

7. Capturing a browser close button event or to exit the page in JavaScript

The browser’s close event is usually captured in order to tell the user about unsaved data that they may need to save.





8. Capture a back button

The usage is quite similar to above, except you capture the back button event rather than close.

window.onbeforeunload = function() {
return "You work will be lost.";
};

9. Check if the form is dirty

For this, forsIsDirt is used. The function returns a Boolean value (true of false) based on whether the user has made any virtual changes to the HTML form of a website,

/**
- Determines if a form is dirty by comparing the current value of each element
- with its default value.
=*
* @param {Form} form the form to be checked.
* @return {Boolean} true if the form is dirty, false
* otherwise.
*/
function formIsDirty(form) {
for (var i = 0; i < form.elements.length; i++) {
var element = form.elements[i];
var type = element.type;
if (type == "checkbox" || type == "radio") {
if (element.checked != element.defaultChecked) {
return true;
}
}
else if (type == "hidden" || type == "password" ||
type == "text" || type == "textarea") {
if (element.value != element.defaultValue) {
return true;
}
}
else if (type == "select-one" || type == "select-multiple") {
for (var j = 0; j < element.options.length; j++) {
if (element.options[j].selected !=
element.options[j].defaultSelected) {
return true;
}
}
}
}
return false;
}
window.onbeforeunload = function(e) {
e = e || window.event;
if (formIsDirty(document.forms["someForm"])) {
// For IE and Firefox
if (e) {
e.returnValue = "You have unsaved changes.";
}
// For Safari
return "You have unsaved changes.";
}
};

10. Disabling Back button

For this, you have to put the code in the page that you don’t want the user to go back to.



onpageshow="if (event.persisted) noBack();" onunload="">

11. To delete multiple values from the listbox

You have to create a function to remove multiple values.

function selectBoxRemove(sourceID) {

//get the listbox object from id.
var src = document.getElementById(sourceID);

//iterate through each option of the listbox
for(var count= src.options.length-1; count >= 0; count--) {

//if the option is selected, delete the option
if(src.options[count].selected == true) {

try {
src.remove(count, null);

} catch(error) {

src.remove(count);
}
}
}
}

12. Select or Deselect All from Listbox

The code fragment below allows you to do this.

function listboxSelectDeselect(listID, isSelect) {
var listbox = document.getElementById(listID);
for(var count=0; count < listbox.options.length; count++) {
listbox.options[count].selected = isSelect;
}
}

13. To move selected items up or down

To do this, make a function like below.

function listbox_move(listID, direction) {

var listbox = document.getElementById(listID);
var selIndex = listbox.selectedIndex;

if(-1 == selIndex) {
alert("Please select an option to move.");
return;
}

var increment = -1;
if(direction == 'up')
increment = -1;
else
increment = 1;

if((selIndex + increment) < 0 ||
(selIndex + increment) > (listbox.options.length-1)) {
return;
}

var selValue = listbox.options[selIndex].value;
var selText = listbox.options[selIndex].text;
listbox.options[selIndex].value = listbox.options[selIndex + increment].value
listbox.options[selIndex].text = listbox.options[selIndex + increment].text

listbox.options[selIndex + increment].value = selValue;
listbox.options[selIndex + increment].text = selText;

listbox.selectedIndex = selIndex + increment;
}
//..
//..

listbox_move('countryList', 'up'); //move up the selected option
listbox_move('countryList', 'down'); //move down the selected option

14. Move options to the left or right using Listbox

function listbox_moveacross(sourceID, destID) {
var src = document.getElementById(sourceID);
var dest = document.getElementById(destID);

for(var count=0; count < src.options.length; count++) {

if(src.options[count].selected == true) {
var option = src.options[count];

var newOption = document.createElement("option");
newOption.value = option.value;
newOption.text = option.text;
newOption.selected = true;
try {
dest.add(newOption, null); //Standard
src.remove(count, null);
}catch(error) {
dest.add(newOption); // IE only
src.remove(count);
}
count--;
}
}
}
//..
//..

listbox_moveacross('countryList', 'selectedCountryList');

15. To initialize an Array using the series of numbers

The code fragment given below will help with this.

var numbers = [];
for(var i=1; numbers.push(i++)<100;);
//numbers = [0,1,2,3 ... 100]

16. Rounding off numbers to ‘x’ decimal places

var num = 2.443242342;
alert(num.toFixed(2)); // 2.44

The toFixed(x) method used here provides x length after the decimal point. On the other hand, toPrecision(x) provides x total length.

num = 500.2349;
result = num.toPrecision(4); // result will equal 500.2

17. To check if a string contains a substring

Use the code below.

if (!Array.prototype.indexOf) {
Array.prototype.indexOf = function(obj, start) {
for (var i = (start || 0), j = this.length; i < j; i++) {
if (this[i] === obj) { return i; }
}
return -1;
}
}

if (!String.prototype.contains) {
String.prototype.contains = function (arg) {
return !!~this.indexOf(arg);
};
}

18. Removing duplicates

Use the removeDuplicates method for this.

function removeDuplicates(arr) {
var temp = {};
for (var i = 0; i < arr.length; i++)
temp[arr[i]] = true;

var r = [];
for (var k in temp)
r.push(k);
return r;
}

//Usage
var fruits = ['apple', 'orange', 'peach', 'apple', 'strawberry', 'orange'];
var uniquefruits = removeDuplicates(fruits);
//print uniquefruits ['apple', 'orange', 'peach', 'strawberry'];

19. Trimming a string

This can be used to remove spaces from both sides of a string.

if (!String.prototype.trim) {
String.prototype.trim=function() {
return this.replace(/^\s+|\s+$/g, '');
};
}

//usage
var str = " some string ";
str.trim();
//print str = "some string"

20. Redirect a webpage

window.location.href = "http://viralpatel.net";

21. Encoding a URL

The envodeURIcomponent function should be used for this.

var myOtherUrl =
"http://example.com/index.html?url=" + encodeURIComponent(myUrl);


Like Us on Facebook
Shivam Kotwalia, CodeKill