Nilesh Kumar

Finally after doing  a lot of research while getting while getting the following error while installing Drozer on OSx/ linux: "The following error occurred while trying to add or remove files in the installation directory:     [Errno 13] Permission denied: '/Library/Python/2.7/site-packages/test-easy-install-3959.pth' The installation directory you specified (via --install-dir, --prefix, or the distutils default setting) was:     /Library/Python/2.7/site-packages/ Perhaps your account does not have write access to this directory?  If the installation directory is a system-owned directory, you may need to sign in as the administrator or "root" account.  If you do not have administrative access to this machine, you may wish to choose a different installation directory, preferably one that is listed in your PYTHONPATH environment variable................" This happens due to the fact that you don't have root permissi...

During one of the recent android pentest, I was required to install sshDroid, a very popular ssh server meant for Android device. For few hours it worked fine until the next day, I encountered the following nasty error: "Warning: Remote Host Identification Has Changed!......" I know I had messed up it somehow so getting that message. So I found a way to do away with this: Run the following command from your client terminal: ssh-keygen -R Once that is done, do an ssh again to the remote host: ssh username@remotehost port (optional) And we are done. Happy hacking!

A good read: http://resources.infosecinstitute.com/security-vulnerabilities-of-voice-recognition-technologies/

The following vulnerabilities are found in voice biometrics: Replay: The biggest concern is the replay attack. Hackers might attempt to gain unauthorized access to a voice authenticated system by playing back a pre-recorded voice sample from an authorized user. Need to implement proper anti-replay/ spoofing measures. Voiceprint re-enrollment (Social Engineering): The malicious user claims to the contact center agent that they are unable to authenticate with their voice, and that their voiceprint needs to be re-enrolled. If the agent complies, a fraudster can be enrolled in the system and be provided with access to a legitimate account. Brute Force attack: This attack consists of a fraudster calling the IVR or call center numerous times until their voice is mistakenly accepted by the voice biometric system as belonging to a legitimate account holder. Vulnerability testing conducted on deployed voice biometric systems indicates that the rate of a success of a brute force attack is...

Pros: Less prone to compromise: Contrary to PIN/ Passwords storages compromised and stolen and replayed, the voice prints can not be replayed. Thus a compromised voiceprint is unusable for account access. Anti reversing: A voiceprint is a hashed string of numbers and characters that represent how a specific individual’s voice rates on the myriad of characteristics being measured Also, it’s not possible to reverse engineer it to recover someone’s voice. Proactive detection of known fraudsters: Each time a fraudster speaks within an IVR or to a contact center agent, the fraudster leaves his/her voiceprint in the same way that our fingers leave fingerprints when we touch an object. This enables an organization to create and store voiceprints of known fraudsters. Non guessable: A voice is unique to the individual. It can’t be guessed unlike PINs or passwords. Cost effective: The cost of implementation is low because there is no special hardware required. A simple telephone or microph...

https://portswigger.net/burp/help/proxy_options_invisible.html