There are many different products on the market today. Especially merchants dealing in portable goods such as cosmetics, functional foods, and pharmaceuticals. However, it is unpredictable, there are genuine traders, there are merchants selling fake goods. So how can you check the genuine product?

Usually, with an offer to introduce a product function, you will be instructed to check the barcode to check the genuine product? So can scanning barcodes really check fake and real goods?

Distinguish barcode types

Currently, there are many types of encoding such as Barcode, QR Code, Aztec Code, CrontoSign, Data Matrix.. The most popular in order are still Barcode, QR Code… The use of barcodes is to save space to record information. product information, and the manufacturer on the packaging.

Recognize Barcode

Barcode is a type of barcode with rectangular shape. With the shape of vertical stripes, of different thickness and thinness. The size of the thickness of the Barcode will specify the letter or number. If you often go to the supermarket, you will see the cashier use an infrared scanner to scan the barcode on the product label. After scanning, the computer will decode the barcode to the product name and price. Instead you have to look up the price manually.

You can create your own information encoded with Barcode at the pages Website to create Barcode online.

Recognize QR Code

Unlike Barcode, QR Code has a square shape, at the root there are 3 small squares. The structure of the shaped QRCode seems to be more complex than the Barcode with an unordered maze. You can see the details in the photo below

With a neat structure QRCode is often used on business cards, VCards, or URL encoding. You can create your own encrypted message with QRCode with instructions at AnonyVIet. QRCode is now one of the most used models in the two-dimensional barcode group.

Instructions for scanning barcodes

If you use a Smart Phone, scanning barcodes is very simple. On the Appstore and CH Play, there are many free Apps for you to scan Barcode and QRCode. In which, it must be mentioned that the App of Vietnam is Vietnamese Barcode support on of Android and IOS.

If you often buy Korean products, you can use HiddenTag (Android, IOS) to scan the code. For example, 3CE lipstick products.

Can scanning barcodes check genuine products?

When did the concept of scanning barcodes to check genuine products become so popular? Perhaps it comes from online stores to create trust for customers. As the content of how to distinguish the barcode I just wrote above. You can completely create yourself a Barcode or QRCode.

So with creating such a simple barcode, anyone can do it. Scanning barcodes only has the effect of decoding barcode information into letters or numbers, displaying detailed product information. And that product is real or fake, it depends on the seller’s conscience :D.

Thus, in summary: Barcode Scanner cannot check genuine product.

To avoid buying fake goods, imitation goods, poor quality goods, you should choose a reputable trading shop. Should refer to Google keyword phrases: “distinguish Product’s name counterfeiting”. Then there will be more experience and methods of detecting counterfeit goods for you. Be smart consumers.

Websites always have some security holes that we have no control over. Whether it is big websites like Facebook, Amazon, Ebay…. There are always holes. Hackers will always be on the lookout to attack these security holes. That’s why they created SVScanner.

Websites are like people, no matter how powerful or valuable, there are always holes. You will never make a perfect website with 100% security. Therefore, it is essential that you use the tool to self-test and detect vulnerabilities.

Why self-test and detect vulnerabilities?

Sometimes your website has some security holes that you don’t know about. It will be very dangerous if you do not take precautions before being attacked. Therefore, I share this tool for you to test the site yourself.

To see if it has any security holes that can easily endanger the website. From there, you can fix the vulnerability or take preventive measures. This is one of the best ways to protect your own website. I do not encourage you to use this tool to attack others.

Learn how to use SVScanner

SVScanner helps you scan a website’s vulnerability points and existing vulnerabilities. Tested and working fine on Windows 10 and Distros of Linux. Below is how to configure the user environment for SVScanner.

For Linux

• Install the following PHP Modules: php-cli & php-curl
• Use Git command to Clone Repo to your computer.
  git clone https://github.com/radenvodka/SVScanner.git
• cd to the directory you just cloned.
• Use the php command svscanner.php to run the tool.

For Windows

• Download XAMPP version with PHP7 or higher.
• Download SVScanner from the link below.
• Open cmd and run command php scscanner.php

That’s it, the software will help you detect vulnerabilities from small to large with different levels.

Like Fanpage or follow Website for quick updates of good articles.

Good luck
Lmint.

To be a Hacker does not depend on how powerful your device is, it depends on how good your skills are. Android is one of the most used Operating Systems in the world and loved by developers. The best thing about Android is, it has very few limitations compared to iOS. Especially, you can install Linux applications on Android quite conveniently and you can scan Website security holes on Android. This opens the opportunity to customize it according to the user. We can make it portable hacking device.

Android is really a great operating system, you just have to understand it. Also if you are a Linux lover then you probably know that Android is also built on top of Linux. In addition to the apps introduced below, you can Use Termux to install Hack software on Android phones.

In this article, we will leverage Android to scan websites for vulnerabilities. You need to install some apps to do this. Try these apps and use your Android smartly.

DroidSQLi

DroidSQLi possibly the best app to scan Website security holes on Android. It analyzes websites for each SQL vulnerability one by one.

How to Find a Website with SQL Errors?

DroidSQLi can help you find the latest SQL Injection Google Dorks.

Search for the latest google dorks for SQL Injection sites and select a site and search for dorks on the Google search bar (in Google Home). For example you have a dork as ‘news.php?id=’. Now select a site from the search results.

Try the site with the link http://example.com/news.php?id=58. Now add an apostrophe ‘ at the end of the URL like this- http://example.com/news.php?id=58′ and search for it. If the web page is loaded comes with a SQL error warning. Websites are vulnerable to SQL injection errors.

AnDOSid

AnDOSid Really a dangerous app! it is used to DDOS Web sites. AnDOSid can perform DDOS very efficiently.

But DDOS can be more powerful if we do it from multiple devices at the same time. That depends on you whether the Web is strong or weak.

The application comes with a very simple interface. You just need to enter the URL of the target website, the size of the packet, and the time between packet sending.

The tool that displays a popup on startup warns you that the application is illegal and that you must get permission from the owner of the landing page.

Please use it for testing purposes, do not break other people’s websites.

Nipper- Toolkit Web Scan really a great tool to scan Website security holes on Android. It has the features of crawling, finding exploits through ExploitDB and Brute force WordPress Admin.

Nipper’s interface is quite simple, helping you not to get confused when using it. You just need to enter the URL of the target website. The tool collects basic information like server IP address, hosting details, etc. If you want more information, you can use DNS Lookup and Nmap.

In the three dots in the top left corner, you will find options to search for Website vulnerabilities.

Admin Panel Finder

Admin Panel Finder is the application to find the admin login link of the Website. This application has a big role in the category we are discussing. There are many websites that have the Admin login page hidden to protect it from attacks.

For example, in case your Website has a SQL Injection error, hackers can exploit your Database. But if you hide the website admin login link, it will help you avoid logging in to the web even though he has your user and password.

If it is a Hack you can use Admin Panel Finder to scan the admin link. Thanks to the creators of the app for making these possible for Android.

Now open the app and set the URL of the target website. The application will scan the website for all possible queries and if the queries match it, it will display the admin page.

NDroidMap

NDroidMap is the Nmap version for Android and it is available on the Google play store. Open the application and set the URL of the target website and press Run. NDroidMap will scan all open ports on that Website.

Nmap can be one of the best used tools used by Hackers to check Website Port. It has a big role in the field of Ethical Hacking.

This post is by you Thinh Thanh Duong Group NANO Team introduce. Briefly, this is a tool to help you Scan IP in the internal system, and can Shutdown or control internal machines through support functions. Don’t play around with the net shop lest you get hit.

Advanced IP Scanner has the ability to scan all the IP addresses of your computer, works fast and is very easy to use for Windows users. This is a very necessary tool for network administrators as well as net shop owners. In about 5-10 seconds, this software will list all the machines on the local network and provide easy access to resources such as HTTP, HTTPS, FTP or shared folders.

Download Advanced IP Scanner

With Advanced IP Scanner, users can turn on and off the machine remotely. This application also integrates with Radmin remote access software to support easy computer control to execute commands to turn on and off the machine.

When using software to scan for security holes, it is often not possible to bypass the WAF trick wall, just send the first request and it will be blocked, including crawling. You can bypass WAF by changing the packet’s header with one of the following headers. Depending on each Scan Tool, there will be a different way to change.

In addition to changing the Header, you need to pay attention to adjust Chrome’s user-agent, encoding to UTF-8, reducing the frequency of sending Requests. So the possibility Bypass WAF with tool scan vulnerability will be more effective.

List of Headers used to Bypass WAF

X-Forwarded-Host
X-Forwarded-Port
X-Forwarded-Scheme
Origin:
nullOrigin: [siteDomain].attacker.com
X-Frame-Options: Allow
X-Forwarded-For: 127.0.0.1
X-Client-IP: 127.0.0.1
Client-IP: 127.0.0.1
Proxy-Host: 127.0.0.1
Request-Uri: 127.0.0.1
X-Forwarded: 127.0.0.1
X-Forwarded-By: 127.0.0.1
X-Forwarded-For: 127.0.0.1
X-Forwarded-For-Original: 127.0.0.1
X-Forwarded-Host: 127.0.0.1
X-Forwarded-Server: 127.0.0.1
X-Forwarder-For: 127.0.0.1
X-Forward-For: 127.0.0.1
Base-Url: 127.0.0.1
Http-Url: 127.0.0.1
Proxy-Url: 127.0.0.1
Redirect: 127.0.0.1
Real-Ip: 127.0.0.1
Referer: 127.0.0.1
Referrer: 127.0.0.1
Refferer: 127.0.0.1
Uri: 127.0.0.1
Url: 127.0.0.1
X-Host: 127.0.0.1
X-Http-Destinationurl: 127.0.0.1
X-Http-Host-Override: 127.0.0.1
X-Original-Remote-Addr: 127.0.0.1
X-Original-Url: 127.0.0.1
X-Proxy-Url: 127.0.0.1
X-Rewrite-Url: 127.0.0.1
X-Real-Ip: 127.0.0.1
X-Remote-Addr: 127.0.0.1
X-Custom-IP-Authorization:127.0.0.1
X-Originating-IP: 127.0.0.1
X-Remote-IP: 127.0.0.1
X-Original-Url:
X-Forwarded-Server:
X-Host:
X-Forwarded-Host:
X-Rewrite-Url:

In the following article, I will guide you to scan Website vulnerabilities with Nuclei and configure it to bypass WAF when blocked.