TOOLS USED IN CYBERSECURITY

In this blog, we will explore all the tools used in cybersecurity……

Before that let’s us undertsand what is a cybersecurity.

Cyber security:

Cybersecurity refers to the practice of protecting computer systems, networks, and digital information from theft, damage, or unauthorized access. It encompasses a wide range of technologies, processes, and practices designed to safeguard against cyber threats, which can include attacks on computers, data, networks, and other digital assets.

IMPORTANCE OF CYBER SECURITY:

• Our identities are increasingly shifting online.
• The supply chains that keep us fed and clothed are all managed through information technology.
• Nearly every aspect of modern life involves sharing digital information.
• Cybersecurity protects all categories of data from theft and damage.
• A strong cybersecurity strategy protects all relevant IT infrastructure layers or domains against cyberthreats and cybercrime.
• Cybersecurity is essential for protecting our digital assets, including sensitive personal and financial information, intellectual property, and critical infrastructure.

Now, let’s looks at the tools:

Submarine Cable Map:

This website provides a detailed and interactive map of the world’s submarine cable systems and landing stations.

**The 5 stages of ethical hacking are**:

1. Reconnaissance: Gathering information about the target system or network.
2. Scanning: Using the information to identify vulnerabilities and weaknesses.
3. Gaining Access: Exploiting the vulnerabilities to gain access to the system or network.
4. Maintaining Access: Establishing a persistent presence and collecting data.
5. Covering Tracks/Clearing Tracks: Erasing the evidence of the hacking activity and providing a vulnerability report.

TYPES OF HACKERS:

A Hacker is a person who is intensely interested in the mysterious workings of any computer operating system. Hackers are most often programmers. They gather advanced knowledge of operating systems and programming languages and discover loopholes within systems and the reasons for such loopholes.

White Hat Hackers: Also known as ethical hackers, they use their skills to help organizations by finding vulnerabilities in their systems and networks before malicious hackers can exploit them.

Black Hat Hackers: These hackers engage in illegal activities for personal gain, such as stealing sensitive information, spreading malware, or disrupting computer systems.

Grey Hat Hackers: Grey hat hackers operate between white hat and black hat hackers. They may break into systems without authorization but do not have malicious intent.

Script Kiddies: These are individuals who lack technical expertise and rely on pre-made hacking tools and scripts to carry out their attacks. They often don’t fully understand the technology behind their actions and are considered the least skilled among hackers.

Essential Cybersecurity tools:

1. Have I Been Pwned: is a popular online service which allows users to check if their personal information, such as email addresses or phone numbers, has been exposed in a data breach.

By entering your email or phone number into Have I Been Pwned, you can see if your information has been involved in any of these breaches. The site also provides details about when and where the breach occurred and what kind of data was exposed.

2. Kaspersky:

It is real-time map provided by Kaspersky, a global cybersecurity company. It is used displays live data on various types of cyber threats happening around the world.

3. VirusTotal:

VirusTotal is a free online service that helps you check if a file or website is safe by scanning it with multiple antivirus programs. When you upload a file or enter a website URL, VirusTotal checks it against a large database of known viruses, malware, and other threats. It provides a report showing whether the file or site is clean or potentially harmful.

4. Security Headers:

Security Headers is a website that checks how well a site is protecting itself using HTTP headers, which are bits of information sent between your browser and the site’s server. These headers are important for security, as they help prevent attacks and protect data.

5. Whois Lookup:

When you use WHOIS Lookup, you can see who owns a domain, their contact information, and other details about the domain’s registration.

It helps you get a clearer picture of who operates and manages websites and online resources.

WHOIS LOOKUP

DOMAIN INFORMATION

6. CyberChef:

An online tool for analyzing and manipulating data.

With CyberChef, you can perform various tasks like encoding and decoding text, analyzing binary data, and extracting information from files.

MORSE CODE: A tool to translate text to Morse code and vice versa, with sound and alphabet options.

MORSE CODE

7. Hudson Rock:

Hudson Rock provides advanced solutions to detect and mitigate cyber threats, particularly focusing on uncovering compromised assets, leaked data, and identifying cybercriminal activities.

8. Leaked Password:

If we use admin as our password, then it shows that the “password has been leaked” with the number of times it been seen before.

But if we another password other then admin, here i have used my own password (Nidhi@2345), then it shows the message as “good news”

WAPPALYZER:

Wappalyzer is a technology profiler that shows you what websites are built with.

Find out what CMS a website is using, as well as any framework, ecommerce platform, JavaScript libraries and many more.

Wappalyzer is more than a CMS detector or framework detector: it uncovers more than a thousand technologies in dozens of categories such as programming languages, analytics, marketing tools, payment processors, CRM, CDN and others.

We, first need to download this extension in our respective laptop into the chrome, once it’s downloaded then we can go in the any domain and through the extension icon, we can explore what websites are built with.

Here, I have taken a example of amazon.com as my domain through this wappalyzer extension I can see what exactly this amozon.com website is made up off.

Like this we can try many other websites.

In the last we had enjoyed playing the “PHISHING QUIZ”

First let us know about PHISHING:

The fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers:

“an email that is likely a phishing scam”

In this quiz, there will be a given problem we have to check whether it is a phishing or legitmate. If the answer is correct it will show the result like this:

In the end it will show the score, by this quiz we learnt the ways of identifying a fraud mails or spam mails sent to us. There are many ways in which we can identify phishing:

• Requests for personal information
• Generic greetings or lack of greetings
• Misspellings
• Unofficial “from” email addresses
• Unfamiliar webpages
• Misleading hyperlinks
• Urgent or threatening language that pressures the recipient to act quickly
• Suspicious links or attachments
• Sender email addresses that don’t match the legitimate organization they claim to represent.

And we also learnt about this “MEDIUM” a wonderful platform where we can use it in many ways like publishing our own ideas, making summary notes, read other blogs which can we helpful for us etc… Got a wonderful website where I can daily write my studied topics in the blog form.