Encryption and Decryption

How to create your own encryption and decryption software !

Lets get to know what encryption and decryption is about before we create our own software.

Encryption is the process of converting plain text data also known as plaintext into something that appears to be random and meaningless (cypher text).

Decryption is the process of converting cipher text back to plaintext.

Encryption techniques can be basically divided in to two. That is using Symmetric and Asymmetric. Below will provide you an understanding on these concepts.

Asymmetric

Asymmetric encryption doesn't require to have a pre-shared key for communication. In this case the receiver and the sender has two keys assigned for them namely Private key and a Public key. Private key is only know the the owner and the Public key is known to every one.  Any message encrypted by a private key can only be decrypted by its relating public key and vice versa.

Well known asymmetric algorithms used as Deffie-Hellman, DSS, RSA, EIGamal and Elliptical curve techniques. Calculation used in theses algorithms are more complicated than in symmetric , hence it requires higher computational power and lacks speed. This is typically used in low volume cryptographic mechanisms

Symmetric

Symmetric encryption is also known as the shared secret key.  This is because the same pre-shared key is used in the process of encryption and decryption. Encryption algorithms used in the process such as DES, 3DES, AES, IDEA, RC2/4/5/6 are based on simple mathematical operations. Symmetric encryption uses keys with less key length as both parties guarding the key. This leads to faster execution.

Here is my encryption program.When the user click "Encrypt My Files" it will open the "File Manager " and user will have to select files to encrypt.

Now user will have to enter a password of eight characters long and press the "Proceed" button.
Then it will encrypt selected files.

In the decryption process when the user click on the "Decrypt My Files" button it will open the "File Manager" and user will have to select encrypted files to decrypt.

For the decryption process we have to use the same password that we use to encrypt and press the "Proceed" button.Then it will decrypt the files.

You can download the program

https://github.com/achalapramuditha/encryption-and-decryption/tree/master

March 24, 2017

Learn to make Phishing Page for Facebook

 Making a Phishing Page for facebook  is very easy. Lets learn how to make a phishing site of our own.

A phishing site an attempt to get the personal information such as username, password etc by using a fake page! They send out e-mails that appears to come from the legitimate websites such as e-bay,Paypal etc and when you click those links they ask you to enter your details such as password, e-mail, Credit card number and once you enter your details the phisher will get all your details!

I will be demonstrating how to create a phishing site based on Facebook.

Step 1:

Now go to www.facebook.com (Make sure that you are logged out!).Now Right click anywhere on the facebook home page and click on “view page source” from the menu. Alternatively you can get the source code of any site like gmail, facebook that as login form and create the phishing page by following other steps as it is.

Step 2:

After clicking on “view page source” ,a new window will open with html coding in it.Press CTRL+A your keyboard to select the entire code and then press CTRL+C your keyboard to copy the code.

Step 3:

Open Notepad and paste the entire code in it, now scroll notepad to the top. Press CTRL+F of your keyboard and find “action=” without inverted comma’s.there will be two “action=” you are interested in the first one.

Step 4:

Now Replace the highlighted text as shown in the picture given below with word “face.php” .

Step 5:

Go to File>Save as and save your file with the filename “index.php” without inverted comma. Press OK if it shows up a warning!

Step 6:

After change POST method like "face.php" user name and password are send face.php file.

Step 6:

After get result  "face.php" user name and password are send it my email.

Step 6:

After hosting I will get the login details to my email account as follows.

Below is the link I have used to host the phishing website.

 Creating the Phishing web site .

https://facccbook.000webhostapp.com/

All the files related to this demonstration are saved in my GitHub account.You can access them by this link 

https://github.com/achalapramuditha/pishing

How to identify a phishing mail and be safe from them if received ?

It is important for us to be logical and always alert when dealing with communication of any sort and the below tips will further help you to be safe and identify phishing emails.

1. Link to a fake site :- The email will provide a link requesting the user to click on in order to direct the victim to gather his personal information
2. Urgent action will be required :- Normally phishing mails require the receiver to act quickly in order to get details. The mail will have an urgent call for action.
3. The senders email address will not match the legitimate senders email address.
4. The mail will require your personal details such as credit card number and account details.
5. Email says that you have won a competition that you have not entered.

• Do not click on the links or download or open any attachments provided form unknown and suspicious senders.
• Make sure you check thoroughly for the given tips above to make you self safe form being a phishing victim .
• Protect your computer with firewalls, spam filters and an antivirus guard.
•  Allays be logical and be alert. 
• Update your web browser