SECURITY BENT

Spawning a TTY Shell

2018-04-21T18:19:00.003-07:00

Spawning a TTY Shell

Often during pen tests you may obtain a shell without having tty, yet wish to interact further with the system. Here are some commands which will allow you to spawn a tty shell. Obviously some of this will depend on the system environment and installed packages.

Shell Spawning

1. python -c 'import pty; pty.spawn("/bin/sh")'

2. echo os.system('/bin/bash')

3. /bin/sh -i

4. perl —e 'exec "/bin/sh";'

5. perl: exec "/bin/sh";

6. ruby: exec "/bin/sh"

7. lua: os.execute('/bin/sh')

8.(From within IRB)

exec "/bin/sh"

9. (From within vi)

:!bash

10. (From within vi)

:set shell=/bin/bash:shell

11. (From within nmap)

!sh

Many of these will also allow you to escape jail shells. The top 3 would be my most successful in general for spawning from the command line.

Metasploit Tutorial | Windows Cracking | Exploit - ms03_026_dcom

2017-05-19T03:45:00.000-07:00

Metasploit Tutorial | Windows Cracking | Exploit - ms08_067

2017-05-18T09:22:00.002-07:00

India: Hackers Infiltrate Govt-owned Bank Systems and Create Fake Trade Docs

2017-01-18T21:27:00.002-08:00

Indian banks are waking up to a new kind of cyber attack. Hackers recently infiltrated the systems of three government-owned banks - two head headquartered in Mumbai and one in Kolkata - to create fake trade documents that may have been used to raise finance abroad or facilitate dealings in banned items. The banks in question discovered that their SWIFT systems - the global financial messaging service banks use to move millions of dollars and documents across borders every day - have been compromised to create fake documents. The banks are still unsure about the origin of the attack and the intention of the hackers. It's learnt that soon after the breaches were reported to the Reserve Bank of India, the regulator last month directed several banks to cross-check all trade documents issued over the past one year.

Source: www.cyware.com

Batch Scripting Lesson 5 - How to use variables in the Batch Scripts

2015-03-29T07:50:00.002-07:00

Batch Scripting Lesson 5

Batch scripting Lesson 4 - User Input Exercise !

2015-03-29T07:48:00.002-07:00

Batch Scripting Lesson 4

Batch Scripting Lesson 3

2015-03-29T07:43:00.002-07:00

Batch Scripting Lesson 3

Batch Scripting Lesson 2

2015-03-29T07:41:00.001-07:00

Batch Scripting Lesson 2

Batch Scripting Lesson 1

2015-03-29T07:35:00.000-07:00

Batch Scripting Lesson 1

Sandisk unveils the 200 GB Micro SD to meet the storage requirement of SmartPhones at MWC2015 !

2015-03-14T10:47:00.001-07:00

Sandisk has announced the first 200 GB Ultra microSD cards at MWC 2015.

While the MWC2015 noticed slew of new smartphones and tech wearables launches on its 1st days at Barcelona, flash memory specialistSanDisk also joined the fray and came up with its latest, Ultra microSDXC UHS-I which will store a whopping 200 GB Storage Giant that can meet the storage requirements of any of the smartphones unveiled at MWC.

While the company announced a number of microSD cards for the smartphone market, its 200 GB storage giant created a new storage record for microSD family.

Replacing previous record holder from its family of the 128GB microSDXC card it introduced last year, SanDisk has increased storage capacity by 56% within the same fingernail-sized form factor. Keeping up with the demands of today’s mobile users, the new card provides the freedom to capture, save and share photos, videos and other files without worrying about storage limitations.

The 200GB memory giant will go on sale probably in the second quarter of 2015 at around a price of $399.99 with 10 years warranty.

Similar to its predecessor, the 200 GB microSDXC UHS-I version is shock proof and waterproof, and resistant to 40F to 185ºF (-40ºC to 85ºC) temperature.

WhatsApp reaches 1 Billion installs on Android, 2nd Non Google App to do so !

2015-03-14T03:33:00.001-07:00

WhatsApp for android has now notched the staggering 1 Billion downloads for android alone, Making it the only 2nd Non- Google App ever to do so.

We Know this because Google Play publishes installation ranges for each app and for WhatsApp this now show between 1 Billion and 5 Billion Downloads..

While many questioned whether facebook had paid too much to aquire WhatsApp and it may be a bad deal,but it is proving to be a success investment for the Facebook. WhatsApp last year had seen a formidable number of increase in the downloads and the number of users. And it has grown even with much more surprising numbers in the last 12 Months.

What you Need to know about Google Nearline Storage !

2015-03-13T14:36:00.001-07:00

What is Google Nearline Storage ?

Google have announced a new way to store massive amount of data for those who have very large data requirements. That is what is called as Nearline storage, a Cloud based storage technique in order to store 100's of terabyted (TB).

It is presently in Beta and charges are 1 cent per GB per month of data.Calculating the cost, it is cheaper than the Dropbox and the Google Drive Paid versions.

Advantages

This is actually important for the corporate houses who ave massive amount of data and which is not important enough to keep and important to delete.

Google Nearline is faster than the traditional cold stored data and the offline stored data and it could be accessed within seconds.

Google will probably make use of off-site backup creation of the critical information.For nearline google is partnering with many decade old storage companies like Iron Mountain, Geminare, NetApp.

Google Code is Shutting Down !

2015-03-13T11:12:00.001-07:00

Its official that Google Project hosting service i.e. Google Code is shutting Down. If you are having anything hosted on the Google code then please start migrating it to some other free service providers.

Google Code was originally launched in 2006 and has lasted almost a decade .Today the world search engine leader officially announced that they are going to shut down the service.

Google Code projects still remaining will no longer be able to be updated. However you will still be able to read and view source code, issues and wikis.

Official date for the shutdown announced is 25th January 2016.

You can export your current projects to the Github easily. Google has an Export to Github tool to make migration easy.

DIGIT ! A Phone based login system for Twitter on Web .

2015-01-25T06:18:00.003-08:00

Twitter has officially launched there new telephone based login technique called "DIGIT" that allows customers to log in to the vendors and application employing only their telephone. This Function actually helps in lowering the recalling the number of passwords.

This Information comes couple of days later after whatsapp released for giving messages from the browsers on the desktop which is indeed a brand new service.
Whatsapp which explained more 500 million Customers, explained that its web service is going to be a mirror and it require a smartphone which is already obliged and have a working whatsapp installed on it.

Source: techgig.com

5 Ways To Quantify Your Coding Skills

2015-01-11T08:08:00.001-08:00

Some People finds it easy when it comes to quantifying their job performance.For Example Sales person can measure their performance in dollars($) and cents.Marketing Guys can measure it by calculating their target.

But when it comes to Software Developers it becomes sort of question mark. How to Measure the coding skills..?

So how do we can value the application we develop, scale, Test, or Monitor.

Here are the some pretty good approaches which each of us can take to "Quantify our Skills".

1.ALWAYS THINK IN PERCENTAGES(%):

Because programmers can't point directly to numbers or figures like revenue,profit and loss. But that doesn't means that we can't put some percentage to mark ourselves.

Always try to measure yourselves in context to percentage. Try to evaluate what things you have gone through in each project.Try to make note on those and analyse your development.

2.GET INVOLVED WITH THE OPEN SOURCE PROJECTS:

Open Source Projects are the best way to measure yourselves. Try to find work in Open Source Projects because mostly it lets you to involve with others of the same industry and give you a chance to measure yourselves in compare to others which is not actually good in every condition but we are coders we have no choice we do it other way always ;) .

Open Source also gives you a platform for sharing knowledge and skills.

3.ALWAYS MEASURE YOUR PROGRESS NOT PRODUCTS:

Sometimes it takes time.It might be possible that despite of all your efforts you are not able to complete the project on time.But that doesn't count on the roads of your skill development. You just take a look back and count what are the things that you have learned, that's important!.

4.ALWAYS KEEP A JOURNAL:

If you want to prove the value you and your applications will provide. You need some efforts to make your hard labor count. So its always a good practice to make a journal of your project and your development.On the road what was your problems and how you overcome it. This will also help you in future if you face the problem.

5.COLLECT RECOMMENDATIONS:

If you are getting recognized for specific skills and accomplishments,make sure you collect those recommendations.Here linkedin can be a good platform for your help.

Note: Do leave your valuable comments and like us on Facebook. For more news follow us on Twitter.

Step by Step Tutorial on how to search for the XSS vulnearbility on the website

2014-05-23T12:40:00.001-07:00

Step by Step Tutorial on how to search for the XSS vulnearbility on the website

Video Tutorial on "How Man Commands Works" .

2014-03-07T19:15:00.002-08:00

If You want to View the detail Tutorial for the same Video Please Visit my Previous post on the Man Command in Linux on this Link:

Working of the Man Command in Linux

How to Instal OWASP and DVWA Penetration testing lab on your System.

2014-03-04T11:51:00.000-08:00

How to Collect the Ip Address of the Sever hosting different services of the Website

2013-12-26T02:03:00.001-08:00

The top web vulnerabilities

2013-01-19T10:35:00.001-08:00

NOTE: These all 10 are not only the Web Vulnerabilities there are many and many are discovered everyday. These 10 only satisfies the most common and most frequent vulnerabilities which are being noticed on Web Apps.

1. Unvalidated inputs:

Definition: Not checking whether text a user types into a field on a website is appropriate for that field.

Problem: Hackers use these fields to type commands that allow them to scan for vulnerabilities and gain access.

What you can do: Validate that each field accepts only those characters that are common for that field (such as numbers for a post code field) and are an appropriate length. Run the inputs against a small library of post codes and addresses to confirm that the information is valid.

2. Broken access control

Definition: Access controls determine what a user can access after logging in to his personal account and blocks access to other accounts.

Problem: About half of all websites have serious access problems because of poor testing during development.

What you can do: Test all possible permutations of what a user may do to try to access information that is not his own.

3. Broken authentication and session management

Definition: After logging into a website with a user name and password, you receive a cookie that works like a hand stamp at a night club, authenticating your identity as you go through the site.

Problem: Sometimes companies will customize authentication, inadvertently allowing hackers to infiltrate sessions and use the ID cookie to access the legitimate user's account.

What you can do: Rely on the built-in authentication schemes in the application; use secured sockets layer (SSL) to encrypt the session.

4. Cross-site scripting

Definition: When a hacker sends commands embedded in queries to a website.

Problem: A hacker types JavaScript into any text field, such as a change-of-address field. When a legitimate user types information into that field, the JavaScript is activated, which allows the hacker to take control of the session and grants him all the user's session rights, enabling him to move money or steal credit card numbers.

What you can do: Make sure every text field will accept only those characters and length of characters that are suitable for that field--for example, five numbers in a ZIP code field and five numbers only.

5. Buffer overflow

Definition: Allows an attacker to input more information than the buffer can manage.

Problem: Attacker can take control of application server, gaining access to all the data that the server manages.

What you can do: Move away from C++ programming language, which is most vulnerable, to Java or .Net languages. If you must use C++, use static analysis tools to find overflow vulnerabilities.

6. Injection flaws

Definition: Web applications that use interpreters, specific so-called stake words that are instructions for a database to return specific information, are susceptible to commands written in the middle of a query, thereby changing the nature of the query.

Problem: Hacker can send a specific command in a user name and password field so that instead of accessing one file or account attached to that user name and password, the database is commanded to send back all accounts.

What you can do: Use parameter queries, in which the command and data are separate. Each command is associated with certain files, so that a hacker has no way to manipulate the command.

7. Improper error management

Definition: Purposefully inputting errors into fields to receive an error message or to open up a secure area.

Problem: Error messages contain information about the information that may lie underneath, such as receiving an "access denied" message, which indicates a file is associated with the data the hacker input.

What you can do: Keep track of errors and log users out after three errors. Do not provide specific information about the infrastructure or directory in error messages.

8. Unsecured storage

Definition: Not protecting stored data using encryption, not properly securing the keys for accessing encrypted data, and not using effective randomness for passwords.

Problem: Once a hacker gains access to a system, non-encrypted data is easily accessed or hacker can find unsecured encryption keys to gain access to encrypted data.

What you can do: Do not store data that is not absolutely necessary for the operation of the business, and minimize use of encryption. If encryption is used, store the master secret to open the encryption in two locations (say, a configuration file and an external sever) and assemble it at runtime.

9. Denial of Service

Definition: Sending thousands of queries to a Web server to overload the system, slowing it down or causing it to crash.

Problem: While not an attack meant to steal personal information, the attack is meant to be purely malicious by slowing down a business's online services and commerce.

What you can do: Require users to log on to your site so that you process queries only from legitimate users. Limit the number of queries within a certain time frame per user. After three log-in failures, lock out the user for a certain amount of time to thwart a DNS attack on the log-in app.

10. Insecure configuration management

Definition: Unpatched security flaws on server, use of default passwords or improperly secured passwords, improper file and directory permissions, and others.

Problem: A hacker scans for these vulnerabilities, and if found, gains access to administrative and other sensitive accounts.

What you can do: Create configuration security guidelines that lay out the specific steps that developers and Web operations staff must check off. Removes the debate between staff on how to set up proper configuration.

DNS Cache Snooping.!! Checking whether the hostname resides in cache of the nameserver users were using currently.

2012-10-18T14:11:00.000-07:00

After Hearing the Word Snooping the First Thing that can come to mind is that What is Snooping..????

So, Snooping means Spying on something or Secretly look on something to findout something really important.

So Now you must be Knowing that we are Gonna Snoop Around the DNS Server.

So lets Start..............

1. Introduction:

DNS or Name Server are the servers that resolve a hostname to their IP representation.There are numerous DNS Servers out there,all of which resolves specific domains,but each of them stores specific DNS records.Those records can be the following: A , MX , NS , AAAA , etc

All the DNS servers are connected together to form a hierarchial DNS networks. For Example if we nslookup any website , it will give its server address, its address , Name , and other Addresses if the website has any.
Let's Check it out for the www.google.com

# nslookup www.google.com 192.168.1.1

Server:    192.168.1.1

Address 1: 192.168.1.1

Name:      www.google.com

Address 1: 173.194.35.148

Address 2: 173.194.35.144

Address 3: 173.194.35.147

Address 4: 173.194.35.145

Address 5: 173.194.35.146

Note: All these commands were tested on the Linux Operating System . It may or may not be possible that the Result may vary as per the different OS.

We can see clearly in the above output that the query returned the different address which are used for the load balancing of the server.

2. DNS Queries:

Yeah we all know that the main job of any of the DNS server id to respond back to the Queries it recieves.

Whenever the DNS server recieves the query regarding the IP Address of the Domain,then it look for the address of the Domain in its cache.

If it Found in its cache then it quickly returns the IP Addresses and if not found then it forwards the query to the other DNS Server.

Whenever the Server recieves the Query , the DNS server checks that which type of query it is.

Whether it is:

1. Recursive query.

2. Interactive Non - Recursive Query.

3. DNS cache snooping.

1. Since the DNS server doesnot have the knowledge about the hostname in query. It will ask its own DNS server to resolve it . The recursive Query thus always returns the IP Address of the domain or the hostname if such IP exist.

2. If DNS server does'nt have the Knowledge about the hostname in the query , it returns the list of DNS servers, which might can have the information about the hostname.

3. DNS CACHE SNOOPING:

a) when non-recursive query are enabled

DNS cache snooping is actually the process of figuring out the already resolved queries by the DNS Server

DNS cache snooping can be useful if we want to check the hostname that the local network already resolved.

This means that the nodes on the local network using that DNS server (the server we are connected and the local network we are connected) requested specific hostname in the near past , which can be used to snoop webpages that the users are visiting at any time.

* A DNS Server is suspectible to DNS Cache snooping if we can make the non-recursive query to a DNS Server looking for already resolved hostnames.

To check whether the DNS Server is suspectible to cache snooping we can try to find out the IP Address of the hostname by querying the DNS Server non-recursively.

Example:

# nslookup -norecursive -type=A www.xyz.com

Server: x.x.x.x

Address: x.x.x.x#53

Non-authoritative answer:

*** Can't find www.xyz.com: No answer

Don't see the output with such a horrifying look , It looks like this because our DNS server was not able to reveal the IP Address after running " -norecursive " command. But we want it to reveal .

So before running the " -norecursive" we will run the same statement with the " -recursive" command.

Now Lets see -

# nslookup -recursive -type=A www.xyz.com

Server:  x.x.x.x

Address: x.x.x.x#53

Non-authoritative answer:

Name: www.xyz.com

Address: x.x.x.x

Here we can see that after using " -recursive" it displays the Name and IP of the hostname.

And note that now if we do " -norecursive" it will display the Name and IP for the same hostname , and that's because now the entry already exists in the cache of the DNS Server.

# nslookup -norecursive -type=A www.xyz.com

Server:  x.x.x.x

Address: x.x.x.x#53

Non-authoritative answer:

Name: www.xyz.com

Address: x.x.x.x

Thus we Have seen that how to figure out if a DNS server is vulnerable to cache snooping.


b) when non-recursive queries are disabled.
For the information i want to mention here that the non-recursive queries are not the big thing , they can be disabled by the administrator at the time of configuring the DNS server.
But yet even the non-recursive queries are not allowed and we have only left with option to use the recursive queries, there are some other ways from where we can define that the certain hostname for which we are passing the query are taken from the cache or not.

This can be done in two ways:
1. By checking the Time the query takes to process:
If the Query time is exactly equal to the time that it takes to send packets to the server, then it is quite much possible that the entry exists in the cache and have been accessed from there itself.
We can check this by using the ping command and checking the total RTT(i.e round trip time) of the ICMP packets being sent to the server. Let us look at the example:
# ping -c 3 8.8.8.8

PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.

64 bytes from 8.8.8.8: icmp_req=1 ttl=47 time=29.7 ms

64 bytes from 8.8.8.8: icmp_req=2 ttl=47 time=30.7 ms

64 bytes from 8.8.8.8: icmp_req=3 ttl=47 time=30.6 ms

--- 8.8.8.8 ping statistics ---

3 packets transmitted, 3 received, 0% packet loss, time 200ms





Now we had the total time used to send the packets. Now we had to check the query request time by requesting any hostname using the DNS nameserver. We will be using dig command here...


# dig @8.8.8.8 www.google.com

; <<>> DiG 9.9.1-P2 <<>> @8.8.8.8 www.google.com

; (1 server found)

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39294

;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:

; EDNS: version: 0, flags:; udp: 512

;; QUESTION SECTION:

;www.google.com.                        IN      A

;; ANSWER SECTION:

www.google.com.         256     IN      A       173.194.35.146

www.google.com.         256     IN      A       173.194.35.144

www.google.com.         256     IN      A       173.194.35.145

www.google.com.         256     IN      A       173.194.35.147

www.google.com.         256     IN      A       173.194.35.148

;; Query time: 31 msec

;; SERVER: 8.8.8.8#53(8.8.8.8)

;; MSG SIZE  rcvd: 123


now calculate the average time for both the sending packets and making query request. we found here that both the timings are same , hence this shows that the hostname already exist in the cache.
Similarly do it for the other hostname as per your wish and see what is the output , based on the output you will know that the particular hostname lies there in the cache or not.
2) By Checking the TTL when querying the vulnerable DNS server
As we have no choice other than using the " recursive "command , the another way to determine that the hostname exists in the cache or not we can look after the TTL value which should be low if it already exist in the cache.
We can check the TTL value by executing the command below:
# nslookup -type=A www.google.com 8.8.8.8 -debug
Server:         8.8.8.8

Address:        8.8.8.8#53

------------

QUESTIONS:

www.google.com, type = A, class = IN

ANSWERS:

->  www.google.com

internet address = 173.194.35.146

ttl = 300

->  www.google.com

internet address = 173.194.35.148

ttl = 300

->  www.google.com

internet address = 173.194.35.144

ttl = 300

->  www.google.com

internet address = 173.194.35.145

ttl = 300

->  www.google.com

internet address = 173.194.35.147

ttl = 300

AUTHORITY RECORDS:

ADDITIONAL RECORDS:

------------

Non-authoritative answer:

Name:   www.google.com

Address: 173.194.35.146

Name:   www.google.com

Address: 173.194.35.148

Name:   www.google.com

Address: 173.194.35.144

Name:   www.google.com

Address: 173.194.35.145

Name:   www.google.com

Address: 173.194.35.147

In the above output the TTL value is Considerably low (i.e 300) which means that this hostname already resides in the cache of the DNS server.Similarly we can check for another hostnames of our choice to know whether it resides in the cache or not.


CONCLUSION: 
So friends here we come tot he end of this tutorial. Here we seen that how can we see and query a DNS server to tell us that whether the hostname exits in the cache or not i.e whether it has been already resolved by the Specific DNS server or not.
This can be used to lookout that what hostname the users of that server were using recently.

NOTE: Here we have not discussed how to snoop the webpages but i will update that too, research work on that is in progress , so stay tuned.
Thank you for reading.
Admin

Linux File System Tutorial Part 2

2012-08-20T09:39:00.001-07:00

Hello and welcome to the second part of the Linux File system Tutorial.

In this tutorial we will be discussing these 4 directories of the Linux File System Structure.

home , initrd , lib , lost+found .

So lets Begin....

1. home

To view the home directory type ls home/

Thic command will show the user in the home structure.Actually this will also be the home directory for the user from whom you are logged in.

for Eg: i am logged in as nishant so its showing me nishant as the user. i.e nishant is my home directory.

to check you can type : whoami

this command will tell you how we are logged in and with what privileges.
For Eg:
[root@nishant/]#
here user nishant is logged in with the root privileges.

but for the most part when you create users on the system a home directory will be created for them within the home directory.

i.e
/home/<username>
Eg:
/home/nishant
if we had created a user with the name nishant.

Note: We know that it is getting messup and complicated so we advise to do the practical of the tutorial to understand it more clearley.

2. initrd

This Directory is actually Red-Hat Specific. So there is some deviation from the file system hierarchial standard.

This particular entry should not be removed by anyone on the system it is temporarily mount when the system is booting for a RAM disc.

When the system Boots Red-Hat Linux Temporarily mounts areas in the memory to this particular location on the disc.

To see we can do ls initrd/

Here we can see that this directory contains nothing and its empty because it is already occupied when the system boots.

Some Examples of the initrd commands are:
init0 , init6 etc

3. lib

lib directory contains shared libraries . To see this directory

ls lib/

This command will show you all the libraries .
Eg: lib SSL , lib SSH , lib crypto etc

Note: You can consider these lib directories equivalent to the windows operating system's "DLL" management.

4. lost+found

Lost and Found directory is exatly what its name tells. Its has fragmented portion of the hard disk,lost files etc.
To see this Directory:

ls lost+found/ -all or ls lost+found/

Note: If you find this directory empty then don't panic it does'nt means that your system is suffering this means that your system is working great. Because Finding enteries in this directory means that your system may have the fragmentation problem, Which may lead to the potential Disk Problem or other kind of problem. etc.

These Directory is only for you to locate the files which has been fragmented or accidently deleted or not fully deleted and like wise.

So here we come to the end of the the second part of the tutorial....hope you all are liking and most of all understanding the tutorials....see we know it is quite difficult to understand the tutorials without a video training material, so we advise that keep doing the tutorials as the commands are stated ..... you won't be needing any of the video tutorial then...

Keep doing the Practicals....!! It will help you alot...!! :D :D :D

Linux File System Tutorial Part 1

2012-08-13T13:36:00.001-07:00

Today I am Posting here the Tutorial on Linux File System (LFS).

Every Linux File System includes some of the Basic Directories which are installed or are there on the System at the time of Installation of the Distribution.
Basically there are actually 17 Directories which are Installed at the time of Installation of any Linux Distribution.
You can view these Directories either graphically or using console.

To see Graphically (Taking on Red Hat Linux 9 Distribution)

Just click on the "Root's home" icon on your desktop and replace the "/root" with only "/" in the address bar of the window.

This will take you to the all the Files and directories available in the root or on the System.

Note: But its recommended that you must use the console method if you are the beginer with the linux file system, that will help you learn more clearley.

To see Using Console (Taking on Red Hat Linux 9 Distribution)

By Default shell takes you to the "home directory" and if you are logged in as the root user your home directory will tbe the "/root".

To show all the pre installed directories we have to go to the very root of the system i.e root of the directory which is indicated by the "/".

to go to "/" if you are not presently in the very root of the directory.

type "cd /" without quotes and press enter.

after this your address must look like this

[root@rhle /]#

now do "ls" without quotes

This command will display all the various root files and directories that are available that can we use.These Directories are installed or made by default when we are installing the Distribution.

Following are the List of Directories which are Displayed i.e Which are Installed already on the system:

1.bin 2. dev 3. home 4.lib 5. misc 6.opt 7. root 8. tmp 9. var 10. boot 11. etc 12. initrd

13. lost+found 14. mnt 15. proc 16. sbin 17. usr

Note : In the First Part of the Tutorial we will be dicussing only 4 Directories

i.e bin, boot, dev, etc.
The remaining of the Directories will be Discussed in the next part of the tutorial.

So lets start with the first one...

1. bin

"bin" directory is designed to have by default basic binaries. Basic Binaries are the commands or you can say system utilities which are accessible by all the users of the system. Almost all the commands that we use for most part in Red Hat Linux enviornment for most of the user of the system are found in the bin directories.

we can do ls bin/ to see all the directories and files present inside the bin directories.

some are as follows:

ln - it is used for creating links.

gawk

cut and many more.

Some of the example of the utilities that the bin directory includes are as

1.ls - to list all files

2.clear - to clear the screem

3.cat - to view the file in txt format or else also

4.cp - to copy the file

5.mv - to move the file

6.date - to reveal the system date

7.dd

8. df

9.echo - to print anything on the screen just like printf in 'c'

10. kill - to kill any process

11. ps - to show the process status

To know where the particular binary is located we can use which command.

syntax: which <binary name>

Eg: which ls

which cp

which dd and so on.

2.boot:

This Directory basically deals with the kernel of the system so it includes various files related to the kernel.

To see the files inside the boot directory we can do

ls boot/ and press enter

The above command will list all the files under the boot directory which are related to the kernel even including the kernel itself. You can see the kernel in this list.

There is one more directory inside this directory i.e you can see is the grub directory.

Grub is the boot loader of the system,it is related to the kernel. It starts the system so its also located here in the boot.

when will do "df -h" it will list all the physical partition on the system hard disk.

3. dev

This directory is very important directory because the physical devices which are attached to your linux system can be found within the 'dev' directory.

we can explore the dev directory by doing the 'ls dev/' without quotes

After you list the files of the dev directory you will see many types of the devices listed. These devices entry in here are almost for all the devices that you can imagine.

If we insert a USB in the system which is compatible with the linux there will be a device located in the '/dev' directory that will support your particular piece of hardware. Or if you install the software that comes with the device there will be dev file that will be placed in '/dev' directory for you.

In addition in /dev directory we can find files for the standard input devices i.e keyboard,mouse,monitor,printer,headphones (all USB devices).

4. etc:

as per the File system hierarchial structure the 'etc' directory must contain configuration files,host specific files.

So anything specific with the particular host should be contained in the etc directory and typically you will find the configuration files that pretends to following

IP addresses information, DNS Information, DHCP Information, Network Informationn etc.

/etc structure are assigned by the file system structure to contain the host specific files.

Eg: Files that will end with extension ".conf"

To view the .conf files.

we have to do this:

cd etc/ - this will take you inside the etc directory

ls *.conf -this will list all the configuration files. For Eg: dhcpd.conf and many others.

So here we come to the end of the first part of the tutorial will see you soon in the second part of the tutorial. There we will be discussing the another 4 directories.

Thank you.

How to get Dual Monitor Display of the single Computer ...!!

2012-05-22T02:26:00.000-07:00

Note: These are the steps to have Dual display of your 1st monitor on your second monitor, also you can call it as a extended display as usually used in the cubicles of the IT companies.

So here we go.........

You can never have enough screen space. Instead of buying a larger computer monitor, you can buy an inexpensive second monitor or make use of a spare one and connect it to your computer (if you're using Windows 7, Windows Vista, or Windows XP)—instantly doubling your desktop space.

Dual monitor setup checklist

There’s a good chance you already have everything you need to set up your second monitor.

If you need more detail about the necessary equipment.

-Two monitors (one, if you’re setting up a laptop), which may be flat-panel LCD monitors or CRT monitors or one of each—it doesn’t matter. You can even use a TV screen as a monitor. If you’re going to buy a monitor, there are many points to consider in addition to the price. For example, picture quality, screen size, screen resolution, compatibility with your computer port, higher contrast ratio, and richness of color are some of the most important factors.

Although we refer to two monitors in this article, you can use more than two as long as you have the connectors available on your computer.

-Two monitor cables to connect the monitors to the computer (one for a laptop). These need to match the connection types available on your computer.

-A monitor connection on your computer for each monitor you want to connect. These may be Digital Visual Interface (DVI) connectors, Video Graphics Array (VGA) connectors, HDMI (High Definition Multimedia Interface) connectors, or S-Video connectors for using your TV as a monitor. The connections will need to match the monitor cables. These ports connect to video cards in your computer. They are usually located on the back of your desktop computer and on the side or back of your laptop computer.

-If you don’t have the connectors you need for your monitors, you can install a video adapter to change the connector type, or, if you’re using a desktop computer, you can replace your video card or install additional cards. This involves opening your computer, so you may want to seek assistance from a local computer retailer or watch this video for help to do it yourself.

How to set up your second monitor

Connect the monitor cables

When you’re ready to connect the monitor cable to the connector on your computer, make sure the monitor is plugged in and turned on. Your computer should automatically detect the second monitor, although you may have to restart your computer first. If you’re using Windows XP, you’ll need to enable Dualview.

When your computer detects the monitor, it should also automatically detect and apply the display settings appropriate for the monitor.

Configure your displays

You may want to adjust display settings yourself, as described in the following articles.

Settings For Windows 7

The settings shown here are for Windows 7, but they are basically the same as those available for Windows Vista and Windows XP. If necessary, you can drag the monitor icons so that they are arranged in the same way as the monitors on your desk. Click Identify to verify which monitor is 1 and which monitor is 2. You’ll see the numbers appear on your monitors.

Under Multiple displays, you can also adjust what you see on the second monitor. You have the following choices:

-Extend your displays. This spreads your desktop over both monitors and lets you drag items between the two screens. This is how most people use two monitors, and it's the default setting for desktop computers. After your monitor is set up, you can use your mouse to grab the title bar (the top portion) of a window and drag it to your new display. If a window does not move when you drag it, double-click the title bar first, and then drag it.

-Duplicate your displays. This displays the same desktop on both monitors. For a laptop, this is the default setting. This is useful if you're giving a presentation with your laptop connected to a projector or large monitor.

-Show your desktop on only one monitor. This is most commonly used with a laptop if you want to keep your laptop screen blank after you connect to a large desktop monitor.

When you disconnect the additional monitor, the original display settings are restored to your primary display. In addition, all open files and program windows are moved to the primary display. The next time that you connect the same monitor, the Windows operating system automatically applies the display settings that you used the last time that you connected this monitor.

Troubleshooting: Normally, the process of setting up and using a second monitor is seamless and automatic. However, because it involves hardware and software from multiple sources, you may need to troubleshoot problems and make adjustments. For example, if your computer fails to detect the second monitor, first make sure it’s plugged in and turned on, and then, in the display settings, click Detect. Or your computer might not support multiple displays. Visit Microsoft Update, click Custom, and install any available hardware updates. You may also need to visit your computer manufacturer's website to install an updated display driver. Or you may need to install an additional display adapter. Read this troubleshooting article for Windows Vista which also includes tips that pertain to other versions of Windows.

You’ll find that having two monitors can forever change the way you work with your computer. Be creative and experiment with the sizing of application windows and what information you can keep in constant view while doing multiple tasks. If you’re looking for more ideas on what to do with all of the extra viewing space you will have, read the article, Work and play better with multiple monitors.

To change your display settings to extended

Open Screen Resolution by clicking the Start button , clicking Control Panel, and then, under Appearance and Personalization, clicking Adjust screen resolution.

Click the drop-down list next to Multiple displays, click Extend these displays, and then click OK.

Note

If you don't see an option named Multiple displays in your display settings, then Windows isn't detecting a second monitor plugged into your desktop computer. Or, it is not detecting an external monitor plugged into your laptop. When Windows detects this monitor, it will appear in the drop-down list next to Display. If you don't see it listed there, try clicking Detect.

Make sure the monitor you want to extend your desktop to is turned on and plugged into the correct video port on your computer. You might also need to select the correct source labeled on your monitor's controls to ensure the monitor is using the correct video port. For more information, check the manual for your monitor or go to the manufacturer's website.

How to Clean duplicate files in your system.

2012-04-29T06:24:00.000-07:00

Dupliacate Files are something which are in every PC but users are unaware of it or in some cases they don't know that how to remove it permanently.

here's the solution "Duplicate remover".

Using Duplicate Remover you can find duplicate files,photos,exe,musics,documents and much more and delte them.

Features:

1 . Find Duplicate Files, Images and Music

2 . Find Similar Images - rotated, resized and more!

3 . Find duplicate music, by tags or audio

4 . Find entire duplicate folders

5 . Search Inside Zip files

6 . Helpful selection assistant

Download Duplicate Cleaner

Click to download

Duplicate cleaner is a useful program to help you organize the contents of your home hard drive or corporate network.

You'd be surprised just how many redundant or duplicate files you could find forgotten in an obscure documents folder. Duplicate Cleaner will deep scan for all types of files - photos, music, films/video, Word documents, PowerPoint presentations, text files - you name it, if it appears twice on your computer then Duplicate Cleaner will find it. Once these files are found you are provided with helper tools to enable you to select which copies to delete or move.These files can be deleted to the recycle bin, moved into an archive elsewhere, or replaced with hardlinks

Duplicate Cleaner has found some duplicate files.

Duplicate files are arranged into Groups, each group containing alike files. Right-clicking on a file gives more options.

bThe Selection Assistant. This tool helps you with the task of selecting files to delete or move.

The Delete, Move and Hardlink window.

Options Menu.

Features (Duplicate Cleaner Free)

Find Duplicate Files by content, fast!

Cleaner hard drives means faster performance

Fast Scanning and accurate duplicate comparison (Uses the MD5 Hash algorithm)

Deep scans music - locate duplicate music formats (includes MP3, iTunes (M4A) and more.)

Flexible search parameters

Intelligent Selection Assistant

Search home or networked drives

Search multiple locations

Export / Import results in CSV format

View Path,Size and Date of files

Large, resizable list window

Image preview window

Delete duplicate files to the Recycle bin

Move dupe files to a new location

Turn duplicate file into hard links (NTFS file systems only)

Protection for Windows and system files

Supports multiple languages

For Microsoft Windows XP, Windows Vista and Windows 7.