Free Screen Sharing and Remote Access Web Tools

How many times it had happened that a person has got a PC problem and the expert is away at some remote location. First person is trying to explain the problem on phone, but not able to explain every detail, and wishes that it would have been better if he was able to share the screens live and the expert could have seen the action live, in front of his eyes.No issues, there are not one, but many applications for screen sharing.

These are all free, and besides rectifying the PC problems remotely, they can be used for collaborative working on with your friends and colleagues. They can also be used, if you want to access files on your PC from a remote location.

So, here we go,

Screen-Sharing and Remote-Collaboration Web tools

1. CrossLoop: Full functionality, simple and clean user interface and fast. I like it. Somewhere I read that it has been included in the best 10 downloads of the year, probably by CNET, (Update courtesy Techblissonline.com: PCWorld)

2. Mikogo: It uses industry-leading 256-AES end-to-end encryption and so is secure. It can be used by upto 10 persons simultaneously. Designed nicely, with a very user friendly platform.

3. TeamViewer: Full featured application. Many modes, the initiator can decide the level of sharing, whether full access or part. Data transfer is encrypted and secure.

4. Yuuguu: A useful application, for both Mac and Windows, and offers full functionalities of screen sharing, collaborative working and also remote access. It also has a chat functionality, which you can use while you are giving or taking help from somebody else. What’s more, it allows you to keep a record of all the conversation.

5. Unyte Lyte: A relatively simple web tool, which doesn’t offer any remote control feature. But a nice advantage is that you can itegrate it into your Skype client.

Besides, these screen sharing tools, there are other web tools also which give you remote access.

1. SoonR: It extends the remote access facility to your mobile also.

2. FolderShare: It supports both Windows and Mac. It si a free utility from Microsoft and with it you can share files upto 2GB in size.

AlonWeb – Free Web VPN Software for Fast Personal Use

Imagine these situations…

* Are you faced with the problem of blocking your favorite websites by your Government, ISP, your company or your college LAN administration?
* Do you want to hide your personal data from hackers and spying eyes, while you surf from a public wifi spot?
* Are you concerned that your network administrator or your company’s IT department might be spying on where you go on Internet, what you send by emails and what you chat while on IM?

If yes, then you might consider to use some Free Web VPN Software, which might protect your anonymity and privacy from spying eyes.

AlonWeb is one such software, which ou can down FREE and install on your system, with a few clicks. Alonweb is just an OpenVPN server, based upon the highly popular OpenVPN platform. You just have to create an account with them and start having fun.

But remember, this useful Free WEb VPN service is free only with a 1000MB per month bandwitdh restriction. This seems just enough for simple browsing the web on a pers onal basis. If you want to go beyond that and use it for downloading your favorite songs, video etc., then you will have to go for their paid version.

Visit Alonweb.

Comodo EasyVPN – Free Web VPN Software for Fast Personal Use

If you are looking for a free VPN Client software to establish your own VPN or peer to peer network in an encrypted secured manner over Internet, then Comodo EasyVPN may be the right choice for you.

This Free VPN software is easy to use and configure and uses 128 bit encryption giving you complete secrecy just like your own cabled LAN right on top of Internet. The features of this great VPN software are huge, just like any other paid software for establishing VPN over Internet. Just take a look at the features.

Features of Comodo EasyVPN

* A secure instant messenger client that allows you to chat and send/receive confidential files over an encrypted communications channel
* Remote desktop control over the computers of other users or to securely telecommute into your office computer
* Allows colloborative working, sharing access to local servers and to to provide access to internal networks for remote workers
* Uses industry standard technologies and protocols so no additional software or hardware reconfiguration is necessary.
* Easy to configure

With this useful free tool, the possibilities are just unlimited; use EasyVPN to share your iTunes music, your photograph collection or even setup a multi-player gaming session.
How to use this Useful Free VPN Software

There are just five simple steps any novice computer user can follow.

* Install the software and create an account
* Create a network
* Invite others to join your network
* Joining an existing networking
* Initiate Secure IM conversations, share files and printers or take remote desktop control of another PC

Commercial use (which is any non-personal use) of EasyVPN requires payment of a fee to Comodo prior to the use of the services.

Download:

Free USB Data Encryption with Rohos Mini Drive

Why You Need Data Encryption on USB Drives

USB flash Drives are meant for portability. By their vary nature they can be easily carried away by you, and if you lose them, then by somebody else.

If you happen to carry sensitive and personal data on your USB drives, then you can imagine how easy it is for somebody to get access to that data, in case you lose a USB Drive. Consider using data encryption tools for safeguarding your data in case of any enatuality.

Rohos Mini Drive – A Free USB Data Encryption Tool

Many times data encryption sunds something geeky to an average user, and that is the reason precisely people do use it. But believe me, data encryption is not so dificult. There are specialized tools, which make your life easier and allow you seamless usability. You may not even be knowing that your data is getting encryption before getting stored on your drives.

Rohos Mini Drive is one such tool, specially designed to create hidden and encrypted partition on the USB flash drive memory. You work with the files on the hidden partition without opening a special program.

Rohos Mini Drive program does not create real partition on the USB flash drive. Thus when you insert your USB drive into USB port only one drive letter will appear in Windows. Second (secured) drive will appear only after you active it by entering a password.

Main Features of Rohos Mini Drive include:

* Creates a virtual encrypted partiton volume (disk) within a USB flash drive free space
* Automatically detects your USB stick config and creates encrypted partition
* Program does not require installation to work with encrypted partiton on a guest computer. You can start it right from USB drive
* Encrypted partition is protected by password
* Encryption is automatic and on-the-fly
* Encryption algorithm: AES 256 bit key lenght. NIST approved.
* Rohos Disk Browser to open encrypted partition without having Admin rights
* Virtual Keyboard – to protect your encrypted disk password from a key logger
* Autorun Folder. Saved program’s/file’s shortcut will automatically start/open up upon disk connection
* The limit of encrypted partition size is 2 GB

Download Rohos Mini Drive

UltraVPN – Free VPN Service for Blocked Sites

There are many forms of Internet censorship. Many a times, a corporate environment, a schools administrations or University IT department blocks the use of certain websites to enable them to restrict the use of Internet. Many a times the IT department blocks the use of chat clients like MSN and Yahoo thinking that they are a big time wasters and affect the productivity of their employees.

Besides that, there are many users, which are overly concerned about their privacy while using Internet and want to hide as many details as possible including their IP and other details.

If you are also working in such an environment and want to access blocked websites, or you want to hide your IP while browsing over Internet, then you may consider using Virtual Private Network, or VPN services. There are lots of VPN services available on Internet using different mode of operations. Some of them are free, while others are paid solution.

UltraVPN is one such Free VPN Service.

What is UltraVPN

UltraVPN is a client/server SSL VPN solution based on OpenVPN. It works by encrypting and anonymizing your network connection. You have to register first on their website and then you can download the free VPN client absolutely free. It simply sits on your system tray. Whenever you want your browsing session to be secured and encrypted, you can just right click it and choose “connect” to use this free VPN service.

Your browsing data passes through the secured servers of UltraVPN, and your privacy is protected.

Is UltraVPN Secure

There are always concerns about the sharing your private browsing data with a third party. However, UltraVPN is an open source applications, which ensures that you can be sure about the source code of the application. However, you have to generate and keep faith in them about the security of your private data, when using this useful free VPN service.

There is yet another concern about the speed of your browsing, because now there is another layer between you and your target webpage. It depends on user to user, and you are advised to keep this factor in mind while opting to use it.

[Download UltraVPN]

Useful OPENSSL Commands

Below are some of very usefull OPENSSL Commands.

Generate a certificate signing request based on an existing x509 certificate
openssl x509 -x509toreq -in MYCRT.crt -out MYCSR.csr -signkey MYKEY.key

Generate a certificate siging request for an existing private key
openssl req -out MYCSR.csr -key MYKEY.key -new

Create self-signed certificate (can be used to sign other certificates)
openssl req -x509 -new -out MYCERT.crt -keyout MYKEY.key -days 365

Generate a new private key and matching Certificate Signing Request (eg to send to a commercial CA)
openssl req -out MYCSR.csr -pubkey -new -keyout MYKEY.key
add -nodes to create an unencrypted private key
add -config <//openssl.cnf><//openssl.cnf></ openssl.cnf=""><//><//openssl.cnf></ openssl.cnf=""><//></ openssl.cnf=""><//></><//><//openssl.cnf></ openssl.cnf=""><//></ openssl.cnf=""><//></><//></ openssl.cnf=""><//></><//></><//></><//>if your config file has not been set in the environment

Decrypt private key
openssl rsa -in MYKEY.key >> MYKEY-NOCRYPT.key

Sign a Certificate Signing Request
openssl x509 -req -in MYCSR.csr -CA MY-CA-CERT.crt -CAkey MY-CA-KEY.key -CAcreateserial -out MYCERT.crt -days 365
-days has to be less than the validity of the CA certificate

Convert DER (.crt .cer .der) to PEM
openssl x509 -inform der -in MYCERT.cer -out MYCERT.pem

Convert PEM to DER
openssl x509 -outform der -in MYCERT.pem -out MYCERT.der

Convert PKCS#12 (.pfx .p12) to PEM containing both private key and certificates
openssl pkcs12 -in KEYSTORE.pfx -out KEYSTORE.pem -nodes
add -nocerts for private key only; add -nokeys for certificates only

Convert (add) a seperate key and certificate to a new keystore of type PKCS#12
openssl pkcs12 -export -in MYCERT.crt -inkey MYKEY.key -out KEYSTORE.p12 -name "tomcat"

Convert (add) a seperate key and certificate to a new keystore of type PKCS#12 for use with a server that should send the chain too (eg Tomcat)
openssl pkcs12 -export -in MYCERT.crt -inkey MYKEY.key -out KEYSTORE.p12 -name "tomcat" -CAfile MY-CA-CERT.crt -caname myCA -chain
you can repeat the combination of "-CAfile" and "-caname" for each intermediate certificate

Extracting Certificate and Private Key Files from a .pfx File

Run the following command to export the private key:
openssl pkcs12 -in certname.pfx -nocerts -out key.pem -nodes
Run the following command to export the certificate:
openssl pkcs12 -in certname.pfx -nokeys -out cert.pem
Run the following command to remove the passphrase from the private key:
openssl rsa -in key.pem -out server.key  

Check a private key
openssl rsa -in MYKEY.key -check
add -noout to not disclose the key

Check a Certificate Signing Request
openssl req -text -noout -verify -in MYCSR.csr

Check a certificate
openssl x509 -in MYCERT.crt -text -noout

Check a PKCS#12 keystore
openssl pkcs12 -info -in KEYSTORE.p12

Check a trust chain of a certificate
openssl verify -CAfile MYCHAINFILE.pem -verbose MYCERT.crt
trust chain is in directory (hash format): replace -CAfile with -CApath /path/to/CAchainDir/
to check for server usage: -purpose sslserver
to check for client usage: -purpose sslient

sslstrip

This tool provides a demonstration of the HTTPS stripping attacks. It will transparently hijack HTTP traffic on a network, watch for HTTPS links and redirects, then map those links into either look-alike HTTP links or homograph-similar HTTPS links. It also supports modes for supplying a favicon which looks like a lock icon, selective logging, and session denial.
To get this running:

Flip your machine into forwarding mode.
Setup iptables to redirect HTTP traffic to sslstrip.
Run sslstrip.
Run arpspoof to convince a network they should send their traffic to you.

Link:- SSLStrip

sslsniff

This tool was originally written to demonstrate and exploit IE's vulnerability to a specific man-in-the-middle attack. While Microsoft has since fixed the vulnerability that allowed leaf certificates to act as signing certificates, this tool is still occasionally useful for other purposes. It is designed to MITM all SSL connections on a LAN, and dynamically generates certs for the domains that are being accessed on the fly. The new certificates are constructed in a certificate chain that is signed by any certificate that you provide.

For a long time this was still useful in its original context with the default certificate that was provided, as certificates that were generated by non-singing certificates that were expired would trigger a click-through warning in some browsers which indicated the certificate in question was expired, but not that the whole certificate chain was completely invalid. These days some browsers, specifically Firefox 3, are more heavy-handed.

It is useful for deploying other vulnerabilities as well, some of which are public knowledge. This is the tool that the people who pulled the recent MD5 hash collision publicity stunt used to demonstrate MITM attacks with their rogue CA-certificate.

The three steps to get this running are:
Download and run sslsniff-0.5.tar.gz
Setup iptables
Run arp-spoof

Advanced Encryption Standard by Example

The following document provides a detailed and easy to understand explanation of the implementation of the AES (RIJNDAEL) encryption algorithm. The purpose of this paper is to give developers with little or no knowledge of cryptography the ability to implement AES.

Download the paper in PDF format here

Data encryption & Tokenization Truths

Data encryption truths
Truth 1: If you encrypt data and lose the encryption key, the data is lost forever. There is
no way to get it back.
Truth 2: If you encrypt data and don!t control access to the keys, you haven!t secured the
data at all.
Truth 3: The fewer places you store the sensitive data, the better.

Tokenization truths
Truth 1: While field sizes increase when encrypting data; token size can follow the same
size and format of the original data field.
Truth 2: Using tokens in place of actual credit card numbers or other sensitive data can reduce
the scope of risk by limiting the number of places ciphertext resides.
Truth 3: Tokens can be used as indexes in key table relationships within databases, while
ciphertext cannot.
Truth 4: For instances where employees do not need to see the full encrypted value, using
mask-preserving token values in place of encrypted data reduces the scope of risk.
Truth 5: There is one-to-one relationship between the data value and token throughout
the enterprise, preserving referential integrity.

The fewer places you store the sensitive data, the better. Token server attributes and best practices Tokenization provides numerous benefits to organizations that need to protect sensitive and confidential information. Fortunately, token servers that support best practices are emerging to make it easier for enterprises to implement tokenization.

Look for a token server with the following attributes:
• Reduces risk - Tokenization creates a central, protected data silo where sensitive data is
encrypted and stored. Using a token server should greatly reduce the footprint where sensitive
data is located and eliminate points of risk.
• No application modification - Token servers generate tokens that act as surrogates for
sensitive data wherever it resides. Tokens maintain the length and format of the original
data so that applications don!t require modification.
• Referential integrity - Token servers enforce a strict one-to-one relationship between
tokens and data values so that they can be used as foreign keys and so referential integrity
can be assured whenever an encrypted field is present across multiple applications and data sets.
• Control and flexibility - The best token servers will give IT complete control of the
token-generation strategy. For example, the last four digits of the data can be preserved in
the token, allowing the token to support many common use-cases.
• Streamlines regulatory compliance - A token server enables organizations to narrow
the scope of systems, applications and processes that need to be audited for compliance
with mandates such as PCI DSS.

Source:-  InSecure & nuBridges

Free PGP Webmail service - HushMail

If you don’t have the time or wish to download, install and configure PGP-based software application for email encryption, there’s an easier solution available for you. HushMail offers a free, web-based email service that has a built-in support for PGP email encryption.

All encryption and decryption is done on-the-fly and completely transparent to you. You can also upload your friend’s public-key to the HushMail server using HushTools, and likewise, your friend can download your public key so that both of you can send secure emails back and forth.
Another cool feature that Hushmail offers is the ability to send encrypted emails to someone without them having to use any encryption software. If you both have a shared-secret (password), you can send someone an encrypted email that they can decrypt later using the shared-secret. [via Bauer-Power]