cash kaching

HERE is Another Way Of Getting Free Airtime Has Just Landed and It's Totally Free And 100% Real and free So No Dulling what are you waiting for??

All You Have To Do Is Follow The Simple Steps Below

1) Click HERE And You Will Be Redirected To A Website

2) Register With Your Name, Phone Number, Email And Select Your Country As Nigeria

3) After Filling The Required Details, Click Register Then Confirm Your Email And BOOM Start Earning

4) Click Play Draw And Start Winning

That's all fellows Start Earning!!

stay tune for more related post Alitech.

HOW TO HACK A WIFI WITH Ubiquiti Wi-Fi Gear Hackable Via 1997 PHP Version

HOW TO HACK A WIFI WITH Ubiquiti Wi-Fi Gear Hackable Via 1997 PHP Version

Ubiquiti Wi-Fi Gear Alitech

Here we bring to you another best tips on wifi hacking tutorial,Ubiquiti Wi-Fi Gear Hackable Via 1997 PHP Version is a great wifi hack tips that was founded and published by ALITECH, let keep going and move forward to the next step ALITECH is always there to serve you in a rightful choice!!!!

We actually use Ubiquiti Wi-Fi Gear and have found it pretty good, I didn’t realise their security was so whack and they were using PHP 2.0.1 from 1997! In this case a malicious URL can inject commands into a Ubiquiti device which surprise, surprise, runs the web service as root.

Apparently, they also got scammed for $46.7 MILLION dollars by some invoice scammer in 2015 – not the sharpest tools in the shed for sure. And the way the app is engineered is so far from best practise I don’t think it’s even read a security 101 on it’s way to production.

Before we processed you may like to read on some of our older posts on : How To Hack A Wireless Network (Wifi) With Hijacker – Reaver For Android Wifi Hacker App
Security researchers have gone public with details of an exploitable flaw in Ubiquiti’s wireless networking gear – after the manufacturer allegedly failed to release firmware patches.
Austrian-based bods at SEC Consult Vulnerability Lab found the programming cockup in November and contacted Ubiquiti – based in San Jose, California – via its HackerOne-hosted bug bounty program. Ubiquiti first denied this was a new bug, then accepted it, then stalled issuing a patch, we’re told. After repeated warnings, SEC has now shed light on the security shortcomings.
Essentially, if you can trick someone using a Ubiquiti gateway or router to click on a malicious link, or embed the URL in a webpage they visit, you can inject commands into the vulnerable device. The networking kit uses a web interface to administer it, and has zero CSRF protection. This means attackers can perform actions as logged-in users.
A hacker can exploit this blunder to open a reverse shell to connect to a Ubiquiti router and gain root access – yes, the builtin web server runs as root. SEC claims that once inside, the attacker can then take over the entire network. And you can thank a very outdated version of PHP included with the software, we’re told.
To be fair, Ubiquiti Wi-Fi Gear is pretty cheap, has good specs and generally works really well. Other than in this case, when it gets mercilessly hacked and some bad actor takes over your entire organisation.

That clearly would not be good.

“A command injection vulnerability was found in ‘pingtest_action.cgi.’ This script is vulnerable since it is possible to inject a value of a variable. One of the reasons for this behavior is the used PHP version (PHP/FI 2.0.1 from 1997),” SEC’s advisory today states.
“The vulnerability can be exploited by luring an attacked user to click on a crafted link or just surf on a malicious website. The whole attack can be performed via a single GET-request and is very simple since there is no CSRF protection.”
The SEC team tested the attack against four Ubiquiti devices, and believes another 38 models are similarly vulnerable. All the affected equipment, according to SEC, is listed in the above advisory. Proof-of-concept exploits were not published as there is still no patch available for the insecure firmware.
Ubiquiti had no comment at time of publication.
This isn’t the first time Ubiquiti customers have been left with an unfixed security cockup by their supplier. A previous flaw was finally patched by a third party back in 2015 after the company failed to fix it in time, despite proof of concept code being in wide circulation.
The flaw is not patched and sadly Ubiquiti hasn’t commented about it nor issued any kind of statement regarding the expectations of its users. It’s pretty likely all Ubiquiti devices are vulnerable to this, so if you use them – be aware.

The full advisory is here: Authenticated Command Injection

UPDATE: Only certain AirOS versions are vulnerable this means UniFi, EdgeMAX and AmpliFi products are not affected.This issue is limited to AirOS and associated products like toughswitch, airgateway etc) and patches have already been released by Ubiquiti as of today.

Source: The Register

Stay tune to ALITECH blog/site for more related post 

How to Hack A wireless network (wifi) with Hijacker – Reaver For Android Wifi Hacker App

How to Hack A wireless network (wifi) with Hijacker – Reaver For Android Wifi Hacker App .
How to Hack A wireless network (wifi) with Hijacker – Reaver For Android Wifi Hacker App .

Here we are again with the best wifi hacking  tools for you (Alitech humble follower) follow the step and provide the requirements as listed below so let being (straight to the point) 

Hijacker is a native GUI which provides Reaver for Android along with Aircrack-ng, Airodump-ng and MDK3 making it a powerful Wifi hacker app.

It offers a simple and easy UI to use these tools without typing commands in a console and copy & pasting MAC addresses.v

Features of Hijacker Reaver For Android Wifi Hacker App

Information Gathering

  • View a list of access points and stations (clients) around you (even hidden ones)

  • View the activity of a specific network (by measuring beacons and data packets) and its clients

  • Statistics about access points and stations

  • See the manufacturer of a device (AP or station) from the OUI database
  • See the signal power of devices and filter the ones that are closer to you

  • Save captured packets in .cap file

Reaver for Android Wifi Cracker Attacks

  • Deauthenticate all the clients of a network (either targeting each one or without specific target)
  • Deauthenticate a specific client from the network it’s connected
  • MDK3 Beacon Flooding with custom options and SSID list
  • MDK3 Authentication DoS for a specific network or to every nearby AP
  • Capture a WPA handshake or gather IVs to crack a WEP network
  • Reaver WPS cracking (pixie-dust attack using NetHunter chroot and external adapter)

Other Wifi Hacker App Features

  • Leave the app running in the background, optionally with a notification
  • Copy commands or MAC addresses to clipboard
  • Includes the required tools, no need for manual installation
  • Includes the nexmon driver and management utility for BCM4339 devices
  • Set commands to enable and disable monitor mode automatically
  • Crack .cap files with a custom wordlist
  • Create custom actions and run them on an access point or a client easily
  • Sort and filter Access Points and Stations with many parameters
  • Export all gathered information to a file
  • Add a persistent alias to a device (by MAC) for easier identification 

Requirements to Crack Wifi Password with Android

This application requires an ARM Android device with an internal wireless adapter that supports Monitor Mode. A few android devices do, but none of them natively. This means that you will need a custom firmware. Any device that uses the BCM4339 chipset (MSM8974, such as Nexus 5, Xperia Z1/Z2, LG G2, LG G Flex, Samsung Galaxy Note 3) will work with Nexmon (which also supports some other chipsets). Devices that use BCM4330 can use bcmon.

An alternative would be to use an external adapter that supports monitor mode in Android with an OTG cable.

The required tools are included for armv7l and aarch64 devices as of version 1.1. The Nexmon driver and management utility for BCM4339 are also included.

Root is also necessary, as these tools need root to work.

Other tools to check out would be:

– More wifi hacking  tools loading....  Stay tune to for more related posts hope these work for you.. 

You can download Hijacker Reaver for Android Wifi Hacker App here:

Or read more here.

Always remember to share your thoughts on all our post Alitech is always online to reply you in definite ways

Alitech. ...

Eraser – Windows Secure Erase Hard Drive/HARD DISC Wiper

Eraser – Windows Secure Erase Hard Drive/HARD DISC Wiper 

Eraser  wiper by alitech

Eraser – Windows Secure Erase Hard Drive/HARD DISC Wiper

These article  by Alitech speak  about  how to eraser or wipe your computer hard drive,not to talk much let being  on aspect of easer. 

Eraser is a Windows focused hard drive wiper and is currently supported under Windows XP (with Service Pack 3), Windows Server 2003 (with Service Pack 2), Windows Vista, Windows Server 2008, Windows 7,8 ,10 and Windows Server 2012.Secure drive erasure methods are supported out of the box. Erases files, folders and their previously deleted counterparts. Works with an extremely customizable scheduler.

Why a Secure Erase Hard Drive Wiper is important?A lot of people underestimate the importance of this, especially if you are throwing out an old hard disk or selling something on that contains a hard disk (an old laptop or desktop).Your first thought may be that when you ‘delete’ the file, the data is gone. But that is not true, when you delete a file, the operating system does not really remove the file from the disk; it only removes the reference of the file from the file system table.The file remains on the disk until another file is created over it, and even after that, it might be possible to recover data by studying the magnetic fields on the disk platter surface.Before the file is overwritten, anyone can easily retrieve it with a disk maintenance or an undelete utility.That is why it’s critical to erase your disks properly before finding them a new home (be that a bin, recycling plant or selling them on).Depending on the value of the date, select one of the below secure wipe algorithms.Secure Erase Hard Drive Wiper MethodsEraser is a hard drive wiper for Windows which allows you to run a secure erase and completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns.Pseudorandom data, 1 Pass, The fastest wiping scheme. Your data is overwritten with random data (if you use a CSPRNG the data is indistinguishable from random noise.)British HMG IS5 (Baseline), 1 Pass, Your data is overwritten with zeroes.Russian GOST P50739-95, 2 Passes, GOST P50739-95 wiping scheme calls for a single pass of zeroes followed by a single pass of random dataBritish HMG IS5 (Enhanced), 3 Passes, British HMG IS5 (Enhanced) is a three pass overwriting algorithm: first pass – with zeroes, second pass – with ones and the last pass with random data.US Army AR380-19, 3 Passes, AR380-19 is data wiping scheme specified and published by the U.S. Army. AR380-19 is three pass overwriting algorithm: first pass – with random data, second with a random byte and the third pass with the complement of the 2nd passUS Department of Defense DoD 5220.22-M (E), 3 Passes, DoD 5220.22-M (E) is a three pass overwriting algorithm: first pass – with zeroes, second pass – with ones and the last pass – with random dataUS Air Force 5020, 3 Passes, US Air Force 5020 is a three pass overwriting algorithm with the first pass being that of a random byte, followed by two passes of complement data (shifted 8 and 16 bits right respectively)US Department of Defense DoD 5220.22-M(ECE), 7 Passes, DoD 5220.22-M(ECE) is seven pass overwriting algorithm: first, fourth and fifth pass with a random byte, its 8 right-bit shift complement and 16 right-bit shift complement; second and sixth passes with zeroes, and third and seventh pass with random dataCanadian RCMP TSSIT OPS-II, 7 Passes, RCMP TSSIT OPS-II is a seven pass overwriting algorithm with three alternating patterns of zeroes and ones and the last pass – with a random byteGerman VSITR, 7 Passes, The German standard calls for data to be overwritten with three alternating patterns of zeroes and ones and in the last pass with random dataSchneier’s Algorithm, 7 Passes, The Bruce Schneier algorithm has seven passes: first pass – with ones, the second pass – with zeroes and then five times with random dataYou can download Eraser here:Eraser 

Or read more here.

DOWNLOAD CHIPSEC – Platform Security Assessment Framework For Firmware Hacking!!!! HACK to learn dont learn to HACK

DOWNLOAD CHIPSEC – Platform Security Assessment Framework For Firmware Hacking!!!!  HACK to learn dont learn to HACK

HELLO followers ALITECH is here again for you with one of the best Technology tips for you..
A chipsec , what is it all about ? we dont know but we soon know so let begin

CHIPSEC is a platform security assessment framework for PCs including hardware, system firmware (BIOS/UEFI), and platform components for firmware hacking.

It includes a security test suite, tools for accessing various low-level interfaces, and forensic capabilities. It can be run on Windows, Linux, Mac OS X and UEFI shell.

You can use CHIPSEC to find vulnerabilities in firmware, hypervisors and hardware configuration, explore low-level system assets and even detect firmware implants.
What does CHIPSEC Platform Security Assessment Framework Do?

CHIPSEC has a bunch of modules focusing on areas such as Secure Boot, System Management Mode (SMM/SMRAM), BIOS and Firmware security, BIOS write protection etc.

Modules such as:
– SMRAM Locking
– BIOS Keyboard Buffer Sanitization
– SMRR Configuration
– BIOS Protection
– SPI Controller Locking
– BIOS Interface Locking
– Access Control for Secure Boot Keys
– Access Control for Secure Boot Variables
CHIPSEC Firmware Hacking Warnings

1. CHIPSEC kernel drivers provide direct access to hardware resources to user-mode applications (for example, access to physical memory). When installed on production systems this could allow malware to access privileged hardware resources.

2. The driver is distributed as source code. In order to load it on Operating System which requires kernel drivers to be signed (for example, 64-bit versions of Microsoft Windows 7 and higher), it is necessary to enable TestSigning (or equivalent) mode and sign the driver executable with test signature. Enabling TestSigning (or equivalent) mode turns off an important OS kernel protection and should not be done on production systems.

3. Due to the nature of access to hardware, if any CHIPSEC module issues incorrect access to hardware resources, Operating System can hang or panic.

You can download CHIPSEC here:

Or read more here.

NOTE: Remember Drop your comments on these post ,hope it work for you and you should know how to use it!!


Whatsapp group chat by Alitech including telegram, Facebook and more check it out!!!

Whatsapp group chat by Alitech including telegram, Facebook and more check it out!!!  
Alitech whatsapp group chat

Alitech is almost  every where like MTN (Every where you go)

Check  out the listed and available social media which we are available  on @Alitech

Alitech telegram channel/group ▶ Channel:Click here to join

Group:Click here to join

Alitech Facebook pages/group ▶Facebook page @Alitechblog: Click here to join

Facebookpage @official  esgistline/Alitechzy: Click here to join

Alitech Facebook group  chat @: Click here to join

Alitech whatsapp group/channel▶

Channel still loading...

Group @:Click here to join

You can also tweet us on twitter @esmerheel
And instagram #IG @esmerheel

Kindly share, support, follow and like us on our listed social media blog as listed above ,And as you do so we promise  not to make you down.

Alitech the home of technology..

Contact us /whtasapp pchat @07066670798.