Saturday 29 March 2014

Difference between http and https..?

I know most people don't know exactly what's the difference between these two protocols. So, I thought I would explain you guys a lil.. :)

Lets start then....


HTTP -
HTTP is Hyper Text Transform Protocol and is transmitted over the wire via PORT 80(TCP). You use HTTP when you are browsing the web. It is encrypted using SSL, meaning that your session cannot be observed by a third party. 





HTTPS -
HTTPS (Hypertext Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a Web protocol developed by Netscape and built into its browser that encrypts and decrypts user page requests as well as the pages that are returned by the Web server. HTTPS is really just the use of Netscape's Secure Socket Layer (SSL) as a sublayer under its regular HTTP application layering. (HTTPS uses port 443 instead of HTTP port 80 in its interactions with the lower layer, TCP/IP.) SSL uses a 40-bit key size for the RC4 stream encryption algorithm, which is considered an adequate degree of encryption for commercial exchange. 
Although it may be encrypted does not mean its safe, there are tools out there to decrypt the information being sent over the wire, although its more difficult to do so.






Note - The icon of the lock that appears in your browser's status bar when you establish an https connection. You can click this icon to view the details of the connection, and to identify with whom you are connecting.


Protocol Villa:
Amish Trivedi

Monday 3 March 2014

Check for Open Ports in your Computer

In this post you will get info related to different ports used by your computer while it's on and connected to network through command promt i.e. cmd.


Step 1:

Open up command prompt. Press "START" and "RUN" type "cmd" and use the command "netstat -a"
Now you will get up a list so showing you people so are connected to your computer. This list will look like this.

Proto: TCP 
Local Address: thiscomputer3123:1031
Foreign Address: thiscomputerhaha342:ftp
State: ESTABLISHED

"Proto" shows what Protocol it is in this case it is (Transmission Control Protocol) TCP.
"Local Address" This is your computer also you see a number behind your computer name. 1031 this is the port so is used by your computer.
"Foreign Address" This is the Remote computer and the port is ftp. (File Transfer Protocol) so the port is 21 since the Default port to FTP is 21.
"State" This shows you if the computer is connected to you or not. ESTABLISHED means that it is connected to you.

So now you know how to read the result. Lets go to Step 2.

Step 2:

Ports:

0 - 1023 = This ports are used by "Services"
1024 - 49151 = This ports are used by "Network" etc Your Internet Browser and E-Mail clients.
49152 - 65535 = This ports are used by private users they are rarly used so this may indicate that you are infected with something.

Step 3:

You can easy check out the ports just with do a Google search. Open up your "Internet Browser" type "www.google.com" in the address bar and type in "Port 1031" now it will give you sites about the "1031 port" or you may search for Trojan Horse port list or something like that to check out if the port is a Trojan Horse.

*****************************************************************************