How to Install and Configure OpenVAS: Setup guide

openvas_va

OpenVAS stands for Open Vulnerability Assessment System. It is the collection of several tools and services which offers vulnerability scanning and management solution. OpenVAS is free and it is licensed under GPL (GNU General Public License).

Lets start with the step by step guide on installing and configuring the OpenVAS in linux machine. Here we prefer backtrack to configure the OpenVAS.
openvas_va
Open the Terminal and install openvas by typing the bellow command.
apt-get install openvas

After install perform the registry update with the bellow mentioned command.
apt-get update

After installing OpenVAS you’ll find it installed at the Application menu on top.
The Exact location is the Application – Backtrack – VA – VS – OpenVAS

After that click on openvas Check Setup. It will check for problems with installation and provides effective solutions for it.

add user and set rule if required. also set the password for user.

Now click on  OpenVAS NVT Sync to synchronize an NVT collection with OpenVAS NVT feed. It’ll download latest plugins from NVT. Now start OpenVAS Scanner and it’ll loads the required plugins.

Now open the OpenVAS Mkcert to create the SSL certificate.

Type the bellow command to setup the manager

openvas-mkcert-client -n ovmgr -i

type openvasmd –rebuild to changes to be effective.

To create OpenVAS admin start OpenVAS Administrator and type the bellow mentioned command

openvasad -c ‘add_user’ -n openvasadmin -r Admin

For Setting openvas manager port and address type the bellow mentioned command

openvasmd -p 9390 -a 127.0.0.1

Set the Openvas Administrator address and port as bellow

openvasad -p 9393 -a 127.0.0.1

Now to configure and start the greenbone security demon type the command
gsad –http-only –listen=127.0.0.1 -p 9392

Now you are done and you can access the Greenbone Security Assistant from the browser by typing the url http://127.0.0.1:9392 and give your username and password.

Thanks for reading. Comment below to state your views.

Top 12 ways to save Android Device Battery life

Android Battery

As the android made available to the market, reputation of the other mobiles goes down. It is because the android provides the coolest application support and through that applications mobile becomes the more smarter to perform any task in fractions of seconds on the move. Many of us hates the android phone due to the only one reason and that is the Battery Problem.

Yes Battery Problem, because if you are using the smart applications than it must consumes the more power and also we required the 24*7 internet working to use top coolest application link chat messenger, calling app, email app. blah..blah.. All that internet related application consumes more power and our battery gets dead in few hours.
Android Battery
To get rid of the battery life problem you have to follow the some tips. Just go through the bellow mentioned tips and it will help you to save your android mobile battery life or it extends your mobile battery life.

Appropriate Temperature:

0-45 degree temperature is suitable for the battery charging. Much high or low temperature harm your device. Always keep your mobile in cool/normal temp and keep your mobile out of direct sunlight.

Remove case while charging:

It is recommended to remove your device cover when you are charging the mobile because it will produces the more heat which is dangerous for battery life.

Perform full cycle to charge:

Charge your mobile battery while its get bellow 15%. Charge it from 15% to 100% without pause. Please do not charge if your battery is more than 15% to 20%. Charge only when it required to charge. Perform full cycle from low to full without pause. Because interference by pause may reduce the battery life.

Consumption by Mobile Packet data:

If you do not need the internet connectivity then please turn the packet data off. If you can perform work with 2G data than please do not use 3G or 4G data because it consumes more battery power than 2G.

Disable WiFi:

Everybody gets crazy when free internet is available. Use it when you get but remember that when you don’t require WiFi connection on your device then please turn your WiFi off because WiFi connection consumes much more battery power than 2G or 3G.

Disable Auto Synchronization: 

Auto synchronization is used for the Email or chat services like Google email, contacts, messenger etc and it will synchronize the data from the server of the application and gives you the notification on each update. Please turn Auto sync Off from the settings of your android device when you don’t required.

Screen Timeout:

Longer Screen timeout may consumes some amount of battery and if it is unnecessary, its recommended to use it as 1 minute or shorter.

Disable Bluetooth:

Bluetooth consume a lots of battery power as the WiFi does. So its required to turn off the Bluetooth and use only when you need it.

Disable applications running in background:

Many of android users not considering the background running applications. Users just installs the lots of android applications on mobile, use it on the fly and not quitting it properly so the application still remains running in the background and consumes the much more battery power.

Its recommended to turn of the running Applications which you do not need.
For disabling it go through Settings > Applications > Running Services.

Display Brightness:

Use low screen brightness. Screen brightness consumes the much battery power. Use high screen brightness only when you required in daylight. Adjust it from the Settings > Display > Brightness.

Minimize or close mobile vibration:

Vibration feature consume the more battery power. Use only it in the extreme conditions such as class, meetings etc. Other than that keep your device in general mode or with minimum or no vibration intensity.

Disable Auto System Update:

Auto Update consumes the more battery. We don’t required the systems updates feature everyday. Please turn it off so it will not go for checking the update every time when it connects to the internet.

From above mentioned points now you feels that we are limiting you to use android mobile applications but its the important factors you need to consider if you want your android device with longer battery life and by using device as mentioned above you will surely found significant change in your battery life.

Keep using android and stay tuned to us to get more. Share it to other android users and state your comment bellow.

Steal Data from computer to mobile via USB: For Security Awareness only

USB Cleaver Payload

This article helps you to protect your private data on the computer. This article is for the Security awareness and not for the threaten activities. Malicious activities now a days going rapidly and people loves to do it for fun or some benefits. So it is important to achieve more security for your computer. Consider you are doing all your important work by saving all your passwords on browser such that it becomes easier and no need to retype username and passwords again. Now your friend come to you and say to connect their mobile to your computer to getting some stuff from computer or to charge the mobile. Now you are totally unknown what resided in their mobile.

It is important to check their mobile before allowing them to connect because mobile might have the applications which dumps your computer information. So your friend is not interested in charging the mobile or transferring the data but he is interested in your private confidential data like passwords, Ip and network information which can be easily dumped into their phone.

Lets come to the point. USB Cleaver is the such an mobile software application which allows you to dump passwords and system information from your computer to mobile. It dumps Browser Passwords and Network information like IP address, Gateway, DHCP, NetBIOS state and much more for all Ethernet and wireless network connections.

Download the mobile software USB CLEAVER. Install on your mobile. Connect your mobile to computer.
USB Cleaver Payload
1. Download the Payload file first.
2. Go to the Enable/Disable Payloads
3. Select your payloads to dump and finally Generate the Payloads.
4. Mount mobile with computer and inside sdcard root, you will find go.bat (batch file), Run it.
5. Go to the USB cleaver directory inside SD Card. Here you will find generated log file which you have dumped from the computer by generating payload.

This is how smart peoples steals the data from your computer. So if you are working on your computer then it is important to never allows your browsers to Remember password as it ask you every time with pop-up to “Remember password for this site”. Say Never for this site. It is important to check the third party phone before allowing them to connect to your computer, otherwise it becomes dangerous for you.

Thanks for your kind attention. State your views by commenting and Stay Secured!

When and How to use Google Disavow Tool: Step by Step

Disavow-links-web-master-tools

Its good when you get the natural link building to your site with higher number of links to your site. Its even much more better when you get the links from the relevant site(Niche related) and it’ll stand your blog higher in search engine results pages. But what if your site getting the backlinks from the irrelevant site which is far distinct from your content or you are getting the traffic from the bad and dirty adult or gambling site?  then your site might get affected by the Negative SEO and not performing well in the Google search result.

So to get your site back in the better position in search engine you need to use the Google Disavow tool.

What is Google Disavow Tool –

This Google Disavow tool allows to submit the bad links and tells the Google that don’t consider this sites when serving the search engine results. So Google Automatically neglect such dirty domain and URLs from the search engine and refresh your ranking results. This tool removes all the backlinks made by the bad guy to your site. So this is the best tool to remove the low quality or spammy links from the Website. By submitting the text file with links (bad links) to Google you can ask Google not to take this link into account when Accessing your website.

When We can Use Google Disavow Tool –

You can Submit request if one of the following reason meets to your Site.

  • Traffic from too many Dirty (adult) backlinks to your Site.
  • Your site receives the manual Penalty
  • Traffic drop due to Algorithm Penalty
  • Bad web directory submission.

I faced the Bad directory submission issue with my site. I recently checked my traffic source and got lot of dirty sites links and i was shocked because i never did such type of link building and even i am getting the traffic from dirty site. So i then realized that it might be the reason of web directory submission done by me few months back. If you feels like the same than you could use the Google Disavow tool to request the Google for blocking such spammy links.

One more thing told by the Matt Cutts, in the Question – See what he says,

“If you are worried about someone trying to do negative SEO on your site or it looks like weird bots building the links to your site and you don’t know from where it came then its the perfect time to use the Disavow tool. You can tell the google that this is the weird domain and i have nothing to do with it and you have no idea what this bot is doing by making links than you can Disavow it on the Domain level also.”

Watch the below Official Google webmaster YouTube channel video by Matt Cutts answering the question –

https://www.youtube.com/watch?v=eFJZXpnsRsc

So you can use this tool to remove the webspam even if you don’t have the unnatural links message in your Webmaster Manual action console and helps the google to crawl the better contents. Now i think you have better idea on when to use the Google Disavow tool.

How to Use Google Disavow tool –

Now its time to know how to Use this Google feature to request reconsider your site in terms of rankings. Follow the easy steps by step guide below.

How to Collect the Bad Links – To collect the spammy backlinks to your site. Go to the Google Webmasters Tools > Search Traffic > Links to your Site> Who links the Most > More>> ‘Download More sample links’ and ‘Download latest links’ as shown in the Image below.

Google-webmasters-links

– After collecting the links check the links list and verify it.
– Contact the Domain owner through their website contact page or email to remove the links of your site.
– Wait for few days for mail response.
– If the site owner not respond to the Email then you can make the
Disavow text file.

Making Disavow Text File it easier. Mention the Entire URL of the Site to which you want to Disavow or if you feels like number of bad links from the same site then just Disavow the entire domain.

Contents of the Files –

Disavow-file
Here the # indicates the comment you can add to remember the changes you made to the file. Add the URL or the entire the Domain to Disavow.
If you are adding the entire domain then Add as mentioned in the last line
domin:badsite.com – will consider the non-www and www links both. so only add the domain without www. For mentioning the URL use the method as used in first two lines after comment. i.e. http://badsite.com/stuff/xyz.html

Save the text File and Go to the Google Disavow Tool.
Select your site in the Drop-down and click on Disavow links as shown in the Image below

Disavow-links-web-master-tools

Now you are prompted with the caution message as shown in the Image below that you should use this tool with care and inappropriate mentions of links may harm or create the potential issue to your site performance. But its ok to continue as we have number of Spammy and low quality links.

continue-Disavow

Click on choose file we have created and Submit it to Google. Now if you are succeed in submission of the Lists then it’ll show the success message as in the below screen.

after-Disavow

Now you are done ! It will take few time to be effective. It is based on the number of URL in the file and may take upto week or even month sometimes. See the official Google Guide
Keep patient.

Final Words –

Disavow tool provides nice feature to remove toxic backlinks from the site and helps your site to position better in the search engine result pages by protecting site against the Negative SEO. Keep using the tool nicely and make your website safe and secure !

Share your Disavow tool experience and spread your knowledge.

Verify weebly site with webmasters: Alternative to HTML file Upload

Google-webmaster-HTML-Tag-site-verification

Weebly is the easy website or blog building platform. It’s totally newbie friendly. No coding required. Anybody can easily drag and drop and make the site in few minutes. It is also having the high ranking in the Google and #1 to provide free website building support. It is the one of the most lovable site compared to other web creation sites. After building if you want to track the performance through webmasters tools then you can!

If you do not know how to verify the weebly site or failed to verify with the HTML file upload option then here is the Alternative.

Verify weebly site with HTML meta tag:

Go to the Google Webmasters Tools, Add the site which you want to verify excluding www. i.e. “yoursite.com” or “yoursite.weebly.com”.

On the next page it will ask Verify your ownership of website. HTML file upload is the option but sometimes it doesn’t works !

I suggest you to move to the Alternative Methods as shown in image below. Click on the radio button “HTML Tag”. It’ll shows the code as shown in the picture.
Google-webmaster-HTML-Tag-site-verification
Copy that code and move to your weebly site and inside the Settings> SEO there is the “Header code” option available. Paste the copied code inside the header code as mentioned below. Save the Site and Publish it !
HTML-tag-verification-weebly
Now move to the Webmasters tools and click on verify button. Hope you are succeeded in verification.

Thanks and comment below if it worked for you.