Friday 16 November 2012

All Network Balance Transfer trick 2012


H3ll0 FRi3nds...
Today's Topic is Balance transfering From One Cell To Another in same network.
Then Don't Wait For Anyone Go Ahead And Earn more knowledge to your Minds...

1. Airtel Users Simply Dial *141# and follow the instruction

2. TataDocomo users type a SMS as BT MobileNumber Amount and send it to 54321, e.g:- BT 9973548521 25 to transfer Rs.25.

3. Idea users type a SMS as GIVE MobileNumber Amount and send it to 55567 | e.g:- GIVE 8092823031 30 to transfer Rs.30.

4. Uninor Just dial *202*MobileNumber*Amount# e.g:-Dial *202*8271030185*20# to transfer Rs.20

5. Vodafone Just Dial *131*Amount*MobileNo#, e.g:- *131*50*8086618302# for transfer Rs.50.

6. Official Balance Transfer Trick For Aircel
Now u can transfer the aircel Mobile Balance Officially DIAL*122*666# You can transfer 10, 20 and 100Rs

7. Just Follow These Steps For Reliance Gsm Free Balance Transfer Trick :
Step 1: Dial this number *367*3#
Step 2: Then enter *312*3# and mobile(mdn) number
Step 3: Enter the amount you want to transfer
Step 4. Enter the pin. default pin is 1

8. Bsnl balance transfer trick just send: (GIFT mobile noammout) to 53733 example: GIFT 9415646625 50 to 53733 note you can transfer balance to bsnl number only and you can’t transfer balance less than 10rs.

Have Any Query Ask In Commemts
KeEp ViSiTiNg DaIlY

Boost Torrent Speed With Torrent Bitch Without Any Additional Customization


Welcome Back,
Now i Am Sharing a Torrent Client, No i didn't Developed this But Found useful For All Torrent Lovers... :D
Then we are talking about a torrent client, and the name of that one is Torrent Bitch (Funny). Torrent bitch is a very light torrent client and as much powerful than your utorrent , Bitcomet & bittorrent. A Friend Of Me is Suggested To Use This App For Downloading Torrents. After Some days i used torrentbitch and its downloading speed increased by almost 31% and and he is able to download torrent files with a Poor Health...
When You Resume your Torrent utorrent and other torrent clients(except this bitch) Check Your Earlier Downloaded Pieces And Consume Your Time... But Torrent bitch Starts His Work(Downloading) Your Torrent as You Click on Play...
So Here is The Link To Download Torrent Bitch.



Reply In Comments If You Found This Useful For Your Torrents...

Thursday 15 November 2012

How to Change Windows XP Start Button



Step 1 - Modify Explorer.exe File

In order to make the changes, the file explorer.exe located at C:\Windows needs to be edited. Since explorer.exe is a binary file it requires a special editor. For purposes of this article I have used Resource Hacker. Resource HackerTM is a freeware utility to view, modify, rename, add, delete and extract resources in 32bit Windows executables and resource files (*.res). It incorporates an internal resource script compiler and decompiler and works on Microsoft Windows 95/98/ME, Windows NT, Windows 2000 and Windows XP operating systems.

get this from h**p://delphi.icm.edu.pl/ftp/tools/ResHack.zip

The first step is to make a backup copy of the file explorer.exe located at C:\Windows\explorer. Place it in a folder somewhere on your hard drive where it will be safe. Start Resource Hacker and open explorer.exe located at C:\Windows\explorer.exe.

The category we are going to be using is "String Table". Expand it by clicking the plus sign then navigate down to and expand string 37 followed by highlighting 1033. If you are using the Classic Layout rather than the XP Layout, use number 38. The right hand pane will display the stringtable. We’re going to modify item 578, currently showing the word “start” just as it displays on the current Start button.

There is no magic here. Just double click on the word “start” so that it’s highlighted, making sure the quotation marks are not part of the highlight. They need to remain in place, surrounding the new text that you’ll type. Go ahead and type your new entry. In my case I used       

                                               end

You’ll notice that after the new text string has been entered the Compile Script button that was grayed out is now active. I won’t get into what’s involved in compiling a script, but suffice it to say it’s going to make this exercise worthwhile. Click Compile Script and then save the altered file using the Save As command on the File Menu. Do not use the Save command – Make sure to use the Save As command and choose a name for the file. Save the newly named file to C:\Windows.


Step 2 – Modify the Registry

!!!make a backup of your registry before making changes!!!

Now that the modified explorer.exe has been created it’s necessary to modify the registry so the file will be recognized when the user logs on to the system. If you don’t know how to access the registry I’m not sure this article is for you, but just in case it’s a temporary memory lapse, go to Start (soon to be something else) Run and type regedit in the Open field. Navigate to:

HKEY_LOCAL_MACHINE\ SOFTWARE\ Microsoft\ Windows NT\ CurrentVersion\ Winlogon

In the right panel, double click the "Shell" entry to open the Edit String dialog box. In Value data: line, enter the name that was used to save the modified explorer.exe file. Click OK.

Close Registry Editor and either log off the system and log back in, or reboot the entire system if that’s your preference. If all went as planned you should see your new Start button with the revised text.


Please Reply If Helps or Reply + Repute if Really Helps

Create Your Own Authenticated Gateway And Command Your Network



Use PF to keep unauthorized users off the network.

Firewalling gateways have traditionally been used to block traffic from specific services or machines. Instead of watching IP addresses and port numbers, an authenticated gateway allows you to regulate traffic to or from machines based on a user's credentials. With an authenticated gateway, a user will have to log in and authenticate himself to the gateway in order to gain access to the protected network. This can be useful in many situations, such as restricting Internet access or restricting a wireless segment to be used only by authorized users.

With the release of OpenBSD 3.1, you can implement this functionality through the use of PF and the authpf shell. Using authpf also provides an audit trail by logging usernames, originating IP addresses, and the time that they authenticated with the gateway, as well as when they logged off the network.

To set up authentication with authpf, you'll first need to create an account on the gateway for each user. Specify /usr/sbin/authpf as the shell, and be sure to add authpf as a valid shell to /etc/shells. When a user logs in through SSH, authpf will obtain the user's name and IP address through the environment. After doing this, a template file containing NAT and filter rules is read in, and the username and IP address are applied to it. The resulting rules are then added to the running configuration. When the user logs out (i.e., types ^C), the rules that were created are unloaded from the current ruleset. For user-specific rule templates, authpf looks in /etc/authpf/users/$USER/authpf.rules. Global rule templates are stored in /etc/authpf/authpf.rules. Similarly, NAT entries are stored in authpf.nat, in either of these two directories. When a user-specific template is present for the user who has just authenticated, the template completely replaces the global rules, instead of just adding to them. When loading the templates, authpf will expand the $user_ip macro to the user's current IP address.

For example:

Code:
pass in quick on wi0 proto { tcp, udp } from $user_ip to any \

  keep state flags S/SA

This particular rule will pass in all traffic on the wireless interface from the newly authenticated user's IP address. This works particularly well with a default deny policy, where only the initial SSH connection to the gateway and DNS have been allowed from the authenticating IP address.

You could be much more restrictive and allow only HTTP-, DNS-, and email-related traffic through the gateway:

Code:
pass in quick on wi0 proto tcp from $user_ip to any \

  port { smtp, www, https, pop3, pop3s, imap, imaps } \

  keep state flags S/SA

pass in quick on wi0 proto udp from $user_ip to any port domain
After the template files have been created, you must then provide an entry point into pf.conf for the rules that authpf will create for evaluation by PF. These entry points are added to your pf.conf with the various anchor keywords:

Code:
nat-anchor authpf

rdr-anchor authpf

binat-anchor authpf

anchor authpf

Note that each anchor point needs to be added to the section it applies to—you cannot just put them all at the end or beginning of your pf.conf. Thus the nat-anchor, rdr-anchor, and binat-anchor entries must go into the address translation section of the pf.conf. Likewise, the anchor entry, which applies only to filtering rules, should be added to the filtering section.

When a user logs into the gateway, he should now be presented with a message like this:

Code:
Hello andrew, You are authenticated from host "192.168.0.61"

The user will also see the contents of /etc/authpf/authpf.message if it exists and is readable.

If you examine /var/log/daemon, you should also see log messages similar to these for when a user logs in and out:

Code:
Dec  3 22:36:31 zul authpf[15058]: allowing 192.168.0.61, \

  user andrew

Dec  3 22:47:21 zul authpf[15058]: removed  192.168.0.61, \

  user andrew- duration 650 seconds

Note that since it is present in /etc/shells, any user that has a local account is capable of changing his shell to authpf. If you want to ensure that the user cannot do this, you can create a file named after his username and put it in the /etc/authpf/banned directory. The contents of this file will be displayed when he logs into the gateway. On the other hand, you can also explicitly allow users by listing their usernames, one per line, in /etc/authpf/authpf.allow. However, any bans that have been specified in /etc/authpf/banned take precedence over entries in authpf.allow.

Since authpf relies on the SSH session to determine when the rules pertaining to a particular user are to be unloaded, care should be taken in configuring your SSH daemon to time out connections. Timeouts should happen fairly quickly, to revoke access as soon as possible once a connection has gone stale. This also helps prevent connections to systems outside the gateway from being held open by those conducting ARP spoof attacks.

You can set up OpenSSH to guard against this by adding these to lines to your sshd_config:

Code:
ClientAliveInterval 15

ClientAliveCountMax 3

This will ensure that the SSH daemon will send a request for a client response 15 seconds after it has received no data from the client. The ClientAliveCountMax option specifies that this can happen three times without a response before the client is disconnected. Thus, after a client has become unresponsive, it will be disconnected after 45 seconds. These keepalive packets are sent automatically by the SSH client software and don't require any intervention on the part of the user.

Authpf is very powerful in its flexibility and integration with PF, OpenBSD's native firewalling system. It is easy to set up and has very little performance overhead, since it relies on SSH and the operating system to do authentication and manage sessions.


And ? your done Tongue

How Firefox Works Know Your Browser


A Web browser is sort of like the tires on your car. You don't really give them much daily thought, but without them, you're not going anywhere. The second something goes wrong, you definitely notice.

Chances are, you're reading this article on Internet Explorer. It's the browser that comes already installed on Windows operating systems; most people use Windows, and most Windows users don't give a second thought to which browser they're using. In fact, many people aren't aware that they have an option at all.

Options are out there, however -- some people call them "alternative browsers," and one of them has been steadily chipping away at Internet Explorer's dominance. It's called Firefox. From its origins as an offshoot of the once popular Netscape browser, Firefox is building a growing legion of dedicated users who spread their enthusiasm by word of mouth (or blog).

In this article, we'll find out what makes Firefox different, what it can do and what effect an open-source browser might have on the Internet landscape.

Streamlined
-----------
Firefox is a relatively simple application without a lot of extra features and plugins included that many users won't need. This keeps the file size small, and it means that Firefox will run well even on older computers without using up a lot of system resources. Firefox proponents claim it's also more resistant to crashing.

The easiest way to learn about Firefox is to go ahead and download it (it's free). You can find it at the official site:http://www.mozilla.org/products/firefox/. If you're hesitant to install and learn to use a new program, rest assured that Firefox looks and acts very similar to Internet Explorer and most other Web browsers. There's even a feature for IE users that lists the expressions you're familiar with and tells you the corresponding Firefox names for those functions.

At the top of the screen, you'll find a bar for typing in Web addresses, a small search panel and a row of buttons -- the typical tools for common Web-surfing activities. Forward, back, home, reload and stop can all be found in this basic setup. These buttons, like just about everything else in Firefox, are fully customizable. You can rearrange them, get rid of some of them or add new ones.

firefox toolbar

Now, if Firefox is so similar to Internet Explorer, why bother switching? There are quite a few reasons, but the most important for many users is security.

There is much debate over the security of Web browsers, stemming mainly from Internet Explorer's vulnerability as a common target for hackers and virus writers. Microsoft regularly releases patches and updates to fix security holes in Internet Explorer that might allow someone to install malicious software or steal information from a computer. Firefox has not been the focus of hackers so far, but that doesn't mean it's inherently safer. For now, Firefox is enjoying a reprieve from viruses and hackers primarily because, compared to the widespread use of Internet Explorer, it is relatively small-time. Hackers haven't bothered exploiting Firefox yet, because the low yield means it wouldn't be worth their efforts. If Firefox ever achieves dominance among Web browsers, that can be expected to change. See the Firefox Security section to learn more.

Firefox Features and Extensions
Firefox comes with a few useful features that set it apart from Internet Explorer 6 -- so useful, in fact, that Microsoft included a lot of them in Internet Explorer 7 (released in October 2006). One of the most noticeable is tabbed browsing. If you are browsing in Internet Explorer 6, and you want to visit a new Web site while keeping your current one open, you have to open a completely new browser window. Intensive Web surfing can result in browser windows cluttering up your taskbar and dragging on system resources. Firefox solves that by allowing sites to open in separate tabs within the same browser window. Instead of switching between browser windows, a user can change between two or more different sites by clicking on the tabs that appear just below the toolbar in Firefox.

Firefox also has a built-in pop-up blocker. This prevents annoying ads from popping up in front of the browser window. You can configure it to let you know when pop-ups are blocked and to allow certain pop-ups from certain sites. This lets you enable pop-ups that are useful windows as opposed to unwanted ads.

One feature of Firefox that is vital to some users is that it is a cross-platform application. That means that Firefox works under several different operating systems, not just Windows. For now, all versions of Windows from 98 and up are supported (as well as Windows 95, though it's a bit more difficult), along with Mac OS X and Linux.

There's another notable Firefox feature that might be the coolest. It's like when someone asks you what you'd wish for if you could only have one wish, and you say, "I'd wish for unlimited wishes." Firefox extensions mean the browser has an almost unlimited number of features, with new ones being created every day. Still, the program remains fairly small, because users only add the extensions they want to use.

extensions manager
All of the extensions that have been added to Firefox show up in the Extensions Manager, which allows them to be configured or uninstalled easily.

Junior high school students probably don't need stock market tickers, while people doing serious research don't necessarily need an MP3 player built into their browser. If there's a feature from another browser that you really like, chances are someone has made an extension so that it can be included in Firefox.

Where do all these extensions come from? They're a product of Firefox's open source nature (see What does "open source" mean?). Not only is the code to Firefox available for examination and use, but Firefox provides developer tools for free to anyone who wants to create an extension.

Msfupdate not working with "no version information available" error by Shubham Mittal (@k@ Upgoingstaar)


A few days back while working with my testings and research, i came across an error which was continously depriving me of updating my metasploit framework. Error message was something like this :

(Click on Image to Enlarge)

No version available and blah blah blah. For that, i ignored it for a couple of days due to workload and downloaded exploits manually. But when it seemed kiddish to me, i got into roots. I soon realized that the "no version information available" error , here, meant that the library metasploit does not have a version to refer and hence it is not updating to any further version. Was quite kiddish, but realistic too. So i checked its libraries :

(Click on Image to Enlarge)

libssl.so.0.9.8 do not have a link to /usr/lib/ where as the entire library actually relies on the same. So what we need to do is : 
Backup the library that is erroring msf.
Create a link between the library msf and /usr/lib/

Do this : 

(Click on Image to Enlarge)

Once you are done with all this stuff, go ahead and update your metasploit. You will get a smile on your face.

(Click on Image to Enlarge)

So this was how you dont need to put back your actions if you get any error anywhere, just like in case of msf. 

Enjoy hacking, enjoy exploitation. :)

Contact the CEO of a company with a social approach by Shubam Mittal (@k@ Upgoingstaar)

Most of the time when you will send a mail to info@anycompany.com, believe me there are very less number of chances that you will get a good response. Reason being as simple as the number of bounces which you email will get until it reaches the right person. So why not send it directly to the targeted person.

Making my words straighter, don’t you think writing this mail directly to the CEO of that company will do some good? 

I was going through some chrome extensions and got something which can help this deed. Yeah, we can go ahead and get the EMAIL ID of a CEO directly without any co-operation from any Living Body.

So for doing this, you have to count on me (only for about 5 minutes) and do what i say. 
1.   Find out the Person: Go to the site of that company and find out whom you have to deal with, i.e. the person whose email id you will find out. If you are unlucky, you may not get anything. Don't loose hope. Go to Google and give some commands at its search bar. Within in a short span of time, you will hold the name of person whom you have to target. 
2.  Use Rapportive: We will be using Rapportive extension for Reverse Engineering the work, so load your browser with this extension.
3.  Integrate it with Gmail: Once you have installed Rapportive, open Gmail in a new tab and you will see a "rapportive" link coming on your screen.


You can also integrate it with other your other Social Accounts.

 

Reverse Engineer the Email IDs: Finally we have to check out some common combinations like firstname.L@company.com, firstname@company.com, firstname.lastname@company.com, firstname.LE@company.com, f.lastname@company.com. As you will try, you will get the following two responses:

Example: Rapportive Profile Not Found


Example: Rapportive Profile Found

Once you have this, you had got their twitter and other accounts. But the story doesn’t ends up here. For these accounts, you also need to verify them. If it is a twitteraccount, check the number of their followers. If the profile seems to be active and connections are more than 400, then is must be fine. Reason why I am putting down emphasis on twitter; if you mention anything with @their_twitter_name, it will give a direct notification to them.

Similarly for their LinkedIn account, if they have less than 500 connections that may raise points of issues for whether they use it properly or not? Moreover, whether they accept connections or not?

Google Account can be checked similarly too with the working status of the profile. Sometimes, even phone number is found but don’t get greedy. Don’t make a call until you are a good Social Engineer.

So, with this stuff, I will wish u Best of luck mates. I hope you are not going to mess up.

List of All Popular Hacking and Security Conferences by Shubham Mittal (@k@ Upgoingstaar)


I was just wondering around to have a look on the most famous conferences for Hackers and when i got to know about so many people and groups running these motivating communities, I set up myself for listing nearly all HACKERS conferences happening here and there. I might have missed some conferences and if yours is not on the list, I am sorry about it. Please let me know about yours so that I can include it too.

1. DefCon

DEF CON holds the title of world's largest annual hacker convention. It was first held in Las Vegas, NV in 1993 and continues today. Attendees include a wide range of personalities interested in the hacking world, general interest groups, federal government employees, lawyers, and hackers. Its focus ranges from computer and hacking related subjects, social events, and contests such as creating the longest Wi-Fi connection to  cracking computer systems to non-related computer contests. The best known contest is Capture the Flag where teams of hackers attempt to attack and defend computers and networks.

Official Website: https://www.defcon.org/

2. Black Hat

The Black Hat Briefings is a computer security conference that brings together a variety of people interested in information security. Representatives of federal agencies and corporations attend along with hackers.

Black Hat is composed of two major sections, the Black Hat Briefings, and Black Hat Trainings. Training is offered by various Computer security vendors, in effort to keep the conference vendor-neutral. In the past, the conference has hosted the National Security Agency's Information Assurance Manager course, and various courses by Cisco SystemsOffensive Security, and others.

Official Website: http://www.blackhat.com/

3. DerbyCon

At DerbyCon security professionals from all over the world come to hang out. Next DerbyCon 2.0 will is going to held this September 27-30th, 2012. They had pulled in over as much as 1,100 people with an amazing speaker lineup and a family-like feel. Their basic goal is to keep it around the same size and maintain a close-knit conference where they can all come together to learn and share ideas.


4. NullCon
















Null is an open source community full of Security Professionals who love to share their knowledge with means of various monthly meets, seminars and conferences. In India, they are the biggest Security community with chapters in 7 major cities. Nullcon Security Conferences is an Initiative by Null - The Open Source
Community. It Is Moreover is a unique platform for security companies/evangelists to showcase their research and technology. Nullcon hosts Prototype, Exhibition, Trainings, Free Workshops, null Job Fair at the conference.

Official Website: http://nullcon.net


5. ShmooCon


ShmooCon is an American hacker convention organized by The Shmoo Group. There are typically about 35 different talks and presentations, on a variety of subjects related to computer security and cyberculture.

Official Website: http://www.shmoocon.org/







6. OWASP



OWASP also conducts its annual international information security conference, and the last one was OWASP InfoSec India Conference 2012 - "India's Cyber Security Kumbh", which was held from August 24-25, 2012 in Delhi NCR, India.
OWASP events in India have become a distinguished platform to bring industry leaders, InfoSec professionals, developers, regulators and high-profile officials from defence and security establishments together from around the world.



7. ClubHack

They started in 2007 conducting and witnessing a lot of action with their aim of making the genera people including media and professionals more aware and serious about Security.



Official Website: http://www.clubhack.com/





8. HITB




Official Website: http://conference.hitb.org/

9. HOPE

HOPE (abbreviation of Hackers on Planet Earthconference series is sponsored by the hacker magazine 2600: The Hacker Quarterly and typically held at "Hotel Pennsylvania", in Manhattan, New York City. Held biennially in the summer, there have been nine conferences to-date; the most recent occurring 13–15 July 2012.



The "Last HOPE" took place 18–20 July 2008 at the Hotel Pennsylvania.The name referred to the expectation that this would be the final H.O.P.E. conference due to the scheduled demolition of its venue, the Hotel Pennsylvania. The "Next HOPE" was scheduled for Summer 2010. At the closing ceremony it was revealed that the use of the word "last" could also refer to the previous event, or one that had ended (referring to The Last HOPE itself).


Official Website: http://www.hope.net/


10. Malcon

MALCON is an annual information security conference focusing exclusively on malware. They aims for bringing together the Malware and InfoSec researchers from the world to share key research insights into building and containment of the next generation malwares. The first MalCon conference took place in December 2010 at Mumbai and Pune, India. They have their audience in Security Professionals, Government Employees, lawyers, journaalists and hackers with interest in malwarism.

Official Website: http://www.malcon.org/

11. SummerCon

Summercon is one of the oldest hacker conventions, and the longest running such conference in America. It helped set a precedent for more modern "cons" such as H.O.P.E. and DEF CON, although it has remained smaller and more personal. Summercon has been hosted in cities such as Pittsburgh, St. Louis, Atlanta, Washington, D.C., Austin, Las Vegas, and Amsterdam. Originally run by Phrack, the underground ezine, and held annually in St. Louis, the organizational responsibilities of running Summercon were transferred to clovis in 1998 and the convention took place in Atlanta, dubbed 'Summercon X'.


Official Website: http://www.summercon.org/

12. SourceConference

SOURCE Conference is the world's premier conference and training event to focus on bringing together the business and technical communities. At SOURCE, technical experts publish advanced research and network for job opportunities, while executives keep up with the technology that shapes their important decisions. Both leave SOURCE with an understanding of each other's perspectives on the critical security problems that face the world.




13. Hacker Halted

A complete and comprehensive conference workshop that educates and equips its participants with the in-depth knowledge of understanding vulnerabilities and countermeasures to overcome the security infringements present today.This conference is a global series of Computer and Information Security conferences presented by EC-Council. The objective of the Hacker Halted conferences is to raise international awareness towards increased education and ethics in IT Security. The event is currently in its 14th year. Also present at Hacker Halted is EC-Council's H@cker Halted | Academy, trainings and workshops led by EC-Council instructors and trainers.

Official Website: http://www.hackerhalted.com/

14. PhreakNIC

PhreakNIC is an annual hacker and technology convention held in Nashville, Tennessee. It is organized by the Nashville 2600 Organization and draws upon resources from SouthEastern 2600 (se2600).



PhreakNIC continues to be a long-time favorite among hackers, security experts and technology enthusiasts. PhreakNIC currently holds claim as the oldest regional hacker con and is one of the few hacker cons run by a tax-free charity

PhreakNIC is attended by hackers and other technology enthusiasts from across the United States, although, as a regional conference, most of its attendees come from a two-state radius around Tennessee, including groups from MissouriOhioWashington, DCGeorgiaKentucky, and Alabama.

Official Site: http://phreaknic.info/

15. KiwiCon

Kiwicon provides a venue for hackers and computer security professionals as well as other interested parties to get together and share knowledge, war stories and to consume a startling amount of beer. In the spirits of H.O.P.E. and DEFCON, Kiwicon intends to bring together the best and brightest from academia, the computer security industry, the hacker underground, those who manage critical infrastructure and law enforcement.
The conference format allows for talks of various lengths on a wide range of subjects of interest, informal discussions, socialising and competitions. In the past there has been free coffee, free breakfast, and always a healthy amount of free beer.


Official Website: https://www.kiwicon.org/


16. InfiltrateCon

Infilterate is the first depp technical conference by Immunity which focuses on entirely technical issues. This conference is more focused towards those who have their excellent minds always working in offensive security issues. No policy or high-level presentations, just hard-core thought provoking technical meat. World-renowned researchers focused on the latest technical issues will do the presentations – demonstrating techniques you can’t learn about anywhere else. In order to keep Infiltrate accessible, we are limiting attendance to 100 attendees.


Official Website: http://infiltratecon.net/

17. SANS

SANS is the most trusted and by far the largest source for information security training in the world. They offer training through several delivery methods - live & virtual conferences, mentors, online, and onsite.


Official Website: http://www.sans.org/


18. HackBattle


This time the Hack Battle is fully integrated in the TNW2012 Conference ending with the grand finale of the Hack Battle presentations on stage during the Conference.
The TNW Kings of Code Hack Battle brings world leading platforms (API's and SDK's) together with an exclusive international group of coders (frontend and backend developers and designers).

19. LayerOne

LayerOne is a computer security conference located in Anaheim, California. They have been eight years old in the market and they feature speakers from all across the globe. The topics these guys covers range from lockpicking and MPLS security to covert data gathering and HIPAA compliance. This is due to fact that the spekers here come from a diverse background and include a focus not just on the nuts and bolts of technology but the social impact as well. 


Official Website: http://www.layerone.org



20. PacSec

The PacSec meeting provides an opportunity for foreign specialists to be exposed to Japanese innovation and markets and collaborate on practical solutions to computer security issues. In a relaxed setting with a mixture of material bilingually translated in both English and Japanese, the eminent technologists can socialize and attend training sessions.

The presenters are experienced security professionals at the vanguard of leading information security technology as well as experienced instructors who have prepared tutorials intended to help you stay abreast of the latest developments in this rapidly moving technological field. The best, and brightest, have assembled unique new material to help you maintain your technological leadership - which they will present at this conferences.
Official Website: http://pacsec.jp/

21. SecTor



SecTor was founded on a passion for security and it doesn’t take long to realize that security extends far beyond the bits and bytes.  They assure to ensure that they will provide quality content – current information you can’t get anywhere else.   The same rigor and dedication that their advisors apply to the selection of the technical content is also invested in selecting the management track session. Marketing fluff is not allowed or tolerated.  Their conferences includes latest research, approaches, trends, Privacy and Compliance Issues, networking stuff, purist approach and experts from around the world.


Official Website: http://www.sector.ca/

22. NotaCon
File:Notaconlogo.png

NOTACON is an annual event that focuses on people who like to build, make, break and hack stuff. For many, it is a different kind of conference experience, while maintaining some familiar aspects of other hacker conferences. Showcasing: technologies, philosophy and creativity often overlooked at other events.



Official Website: http://www.notacon.org/




23. United Security Summit

The UNITED ("Using New Ideas to Empower Defenders") Security Summit is the venue for innovation and collaboration in the security community. At UNITED, security professionals engage in straight talk, share actionable advice and debate issues. This year's theme, "Truth, Lies & Decisions: moving forward in an insecure world," continues the tradition. They target their audience in IT Security directors, managers, architects, practitioners,Analysts, etc.

Official Website: http://www.unitedsummit.org

24. HacKid
HacKid is a new kind of conference focused on providing an interactive, hands-on experience for the entire family — kids aged 5-17 & their parents — in order to raise awareness, excitement and understanding of technology, gaming, mathematics, safety, privacy, networking, security and engineering and their impact on society and culture.



25. Athcon
AthCon is an annual, European two-day conference targeting particular areas of information security. It’s aim: to bring leading information security experts together. Attacking techniques of exploitation and various forms of penetration testing have become an important component of any organisation. This conference aims to provide a venue for understanding the ever evolving changes as well as new threats.

Official Website: http://athcon.org/

So for any instance you want to attend a conference, or speak something of your own stuffz, or play the CTF, look around these conferences and keep exploiting around.