Forem: GOVINDA RAJLE

What Is A Man-In-The-Middle Attack?

GOVINDA RAJLE — Fri, 09 Apr 2021 02:31:57 +0000

A man-in-the-middle attack requires three players. There’s the victim, the entity with which the victim is trying to communicate, and the “man in the middle,” who’s intercepting the victim’s communications. Critical to the scenario is that the victim isn’t aware of the man in the middle.

How Does A Man-In-The-Middle Attack Work?

How does this play out? Let’s say you received an email that appeared to be from your bank, asking you to log in to your account to confirm your contact information. You click on a link in the email and are taken to what appears to be your bank’s website, where you log in and perform the requested task.

In such a scenario, the man in the middle (MITM) sent you the email, making it appear to be legitimate. (This attack also involves phishing, getting you to click on the email appearing to come from your bank.) He also created a website that looks just like your bank’s website, so you wouldn’t hesitate to enter your login credentials after clicking the link in the email. But when you do that, you’re not logging into your bank account, you’re handing over your credentials to the attacker.

Types Of Man-In-The-Middle Attacks

There are 7 types of MITM attacks.
Cybercriminals can use MITM attacks to gain control of devices in a variety of ways.

1⃣ IP spoofing
Every device capable of connecting to the internet has an internet protocol (IP) address, which is similar to the street address for your home. By spoofing an IP address, an attacker can trick you into thinking you’re interacting with a website or someone you’re not, perhaps giving the attacker access to information you’d otherwise not share.

2⃣ DNS spoofing
Domain Name Server, or DNS, spoofing is a technique that forces a user to a fake website rather than the real one the user intends to visit. If you are a victim of DNS spoofing, you may think you’re visiting a safe, trusted website when you’re actually interacting with a fraudster. The perpetrator’s goal is to divert traffic from the real site or capture user login credentials.

3⃣ HTTPS spoofing
When doing business on the internet, seeing “HTTPS” in the URL, rather than “HTTP” is a sign that the website is secure and can be trusted. In fact, the “S” stands for “secure.” An attacker can fool your browser into believing it’s visiting a trusted website when it’s not. By redirecting your browser to an unsecure website, the attacker can monitor your interactions with that website and possibly steal personal information you’re sharing.

4⃣ SSL hijacking
When your device connects to an unsecure server — indicated by “HTTP” — the server can often automatically redirect you to the secure version of the server, indicated by “HTTPS.” A connection to a secure server means standard security protocols are in place, protecting the data you share with that server. SSL stands for Secure Sockets Layer, a protocol that establishes encrypted links between your browser and the web server.

In an SSL hijacking, the attacker uses another computer and secure server and intercepts all the information passing between the server and the user’s computer.

5⃣ Email hijacking
Cybercriminals sometimes target email accounts of banks and other financial institutions. Once they gain access, they can monitor transactions between the institution and its customers. The attackers can then spoof the bank’s email address and send their own instructions to customers. This convinces the customer to follow the attackers’ instructions rather than the bank’s. As a result, an unwitting customer may end up putting money in the attackers’ hands.

6⃣ Wi-Fi eavesdropping
Cybercriminals can set up Wi-Fi connections with very legitimate sounding names, similar to a nearby business. Once a user connects to the fraudster’s Wi-Fi, the attacker will be able to monitor the user’s online activity and be able to intercept login credentials, payment card information, and more. This is just one of several risks associated with using public Wi-Fi. You can learn more about such risks here.

7⃣ Stealing browser cookies
To understand the risk of stolen browser cookies, you need to understand what one is. A browser cookie is a small piece of information a website stores on your computer.

For example, an online retailer might store the personal information you enter and selected on a cookie so you don’t have to re-enter that information when you return.

A cybercriminal can hijack these browser cookies. Since cookies store information from your browsing session, attackers can gain access to your passwords, address, and other sensitive information.

Create your own apis from Google sheet

GOVINDA RAJLE — Mon, 22 Feb 2021 08:06:48 +0000

Hello !, friends

first we need a google sheet for making api fill with dummy data or take actual data , this google sheet will help to make create a api.

after that we have to create on account for creating api link go to sheet best after creating account we need a connection url of the google sheet for that we have to make google sheet public .

After making it public go to sheet best and put google sheet link to the connection Url

after all
Click on the DETAILS button for the your new Connection.

Now Your custom api ready for use !.

10 Data Scientist Skills to get hired

GOVINDA RAJLE — Mon, 22 Feb 2021 07:11:13 +0000

Mathematical base
-Statistics Fundamentals with Python
-Data Scientist with Python
-Foundations of Probability in Python
-Linear Algebra for Data Science in R
-Machine Learning Fundamentals with Python
Programming

-Python Programming
-Machine Learning Scientist with Python
-Deep Learning in Python
-Data Scientist with Python
-Google's Python Class
-R courses:
-Introduction to R
-Data Scientist with R
-Machine Learning Scientist with R
Working with databases

-Fundamentals of Structured Query Language (SQL)
-SQL for Data Science
Data preprocessing

-Data Science Methodology. Data Preparation
-Exploratory Data Analysis
Algorithms
Skills specific to the selected field of analysis
Ability to convey your idea
Teamwork
Ability to see the commercial side of the issue
Critical thinking

Setup for a Flutter Development

GOVINDA RAJLE — Sun, 14 Feb 2021 04:46:12 +0000

Hola! Amigos,
so today we will building first flutter app in andriod studio.
what we need for this we need a andriod studio or visual studio code ,anything from that you make comfortable for development

andriod studio https://developer.android.com/studio

or
visual studio code
https://code.visualstudio.com/

In andriod studio add/instll plugins
-flutter
-dart
2.flutter sdk

https://flutter.dev/docs/get-started/install/windows

*download the flutter sdk for
-window 10
-linux
for linux you can just use a command it will install a sdk of flutter
sudo snap install flutter --classic
and also , you can follow steps of this link
https://flutter.dev/docs/get-started/install/linux

Now, go to downloded flutter sdk extract to andriod folder
C:\Program Files\Android\flutter

after extracting add to the folder path to the environment vairables,then we have to check
all things are correctly instlled or not to check we have to to cmd
open cmd as administrator mode

-C:\Users>flutter 

-C:\Users>flutter doctor

after doing this painful things start the andriod studio
-create a new flutter project
-select the flutter appliction for beginners
- now select the sdk for flutter as we set

-C:\Program Files\Android\flutter

after all things go to finish ,all set now
you can start building apps with a flutter and dart

Build Your first React app

GOVINDA RAJLE — Fri, 04 Dec 2020 04:33:29 +0000

React is a opensource & a one of most popular javascript front-end frameworks for building web application & for create dynamic apps in 2020. It is created by faceboook.
React makes it painless to create interactive UIs. Design simple views for each state in your application, and React will efficiently update and render just the right components when your data changes.

System Setup

Before really starting with React we first need to make sure that the basic system setup is available.

The first prerequisite which needs to be installed on the development system is Node.js and NPM (Node.js Package Manager). NPM comes bundled with Node.js, so you only need to make sure that you have Node.js installed.
Use Vscode editor for React development , it will help to make work easier,
You can quickly check if an up-to-date version of Node.js is already installed on your system by executing the following command:
To check Node version use terminal

node --version

To check NPM version use terminal

npm --version

Getting started with react

For getting started with react just need to setting up for new react project is to use the create react app script ,to execute this script we need to use npx , by this command which make it possible to execute the script without prior downloading the package :

Write this command in terminal

npx create-react-app my-react-app

Here a my-react-app is project name , you can use any name as project name .

If you didn't have install npm you can install by following command :

npm install -g create-react-app

Check version of npm

create-react-app --version

Hacktoberfest 2020 contributions

GOVINDA RAJLE — Fri, 16 Oct 2020 04:05:17 +0000

What is Hacktoberfest?

Hacktoberfest is a month-long celebration of open source software run by DigitalOcean in partnership with GitHub and Twilio. Hacktoberfest is open to everyone in our global community!

How to participate?

You just need to make five contributions to open source before October 31 and can receive a free Hacktoberfest t-shirt.

*How can a beginner participate?

Step 1: Register or login to github.com
Step 2: Register to Hacktoberfest.
https://hacktoberfest.digitalocean.com/
Contribute to these four (4) repositories or any others repositories you like, check instructions to contribute in each repositories.
Step 4: Check your progress from here.
Step 5: Digital ocean will ask
for shipping address via email.
Step 6: Wait for that awesome Hacktoberfest t-shirt from Github & Digital Ocean.

How to Make contribution to open source `

1] Go to link https://github.com/DSC-COEA-Ambajogai/Hactoberfest2020
2] fork this Repositories into your github account
3] After fork write programs as per given info
4] make Full request
5] after pull request it will be merge into Repositories as soon as

After merge it will be updated in Hacktoberfest site
As like this we have to make 4 full request after that you are able to get T-Shirt (limited edittion)