rajan sharma

2012-01-24T06:28:00.001-08:00

Trick to make Fake and Prank Call

There is a Trick by which we can make Fake and Prank Calland make fool of Friends or People which may have anyTelecom Operator.

This Trick can make anyone's fool and can be used for Fun or Annoying purpose.In this Trick,

>> We can change our Caller ID. This means when you call someone, he / she would see the number you selected on his / her Caller ID Display.

>> We can even change the Pitch of our Voice. Which can result in deep and creepy or high and funny Voice.

How this Trick Works ?

This Trick is basically performed by the Website CrazyCall.net.
So to use this Trick you go visit there Website through this Link CrazyCall.net and then follow the given below simple steps :

>> Firstly you have to select the Country from which you are Calling from.

>> Then choose the Caller ID you want to Display.

>> And then Enter the Number you want to Call.

>> Select the Pitch of the Voice you want.

>> After this, Press "Get Me A Code".

>> Then they will provide you with Number to Call and a Code.

>> Finally Call that Number Provided and then Enter the Code when asked and they will Connect your Call to your Friend with the Caller ID and Voice you have Selected.

Note : The Number they Provide is the International Number. So International Rates Apply.

So this the simple Trick to make Fake and Prank Call.

2012-01-23T08:43:00.000-08:00

How to Crack a Wi-Fi Network’s WEP Password with BackTrack

You already know that if you want to lock down your Wi-Fi network, you should opt for WPA encryption because WEP is easy to crack. But did you know how easy? Take a look.

If the network you want to test is running the more popular WPA encryption, see our guide to cracking a Wi-Fi network's WPA password with Reaver instead.

Today we're going to run down, step-by-step, how to crack a Wi-Fi network with WEP security turned on. But first, a word: Knowledge is power, but power doesn't mean you should be a jerk, or do anything illegal. Knowing how to pick a lock doesn't make you a thief. Consider this post educational, or a proof-of-concept intellectual exercise.

Dozens of tutorials on how to crack WEP are already all over the internet using this method. Seriously—Google it. This ain't what you'd call "news." But what is surprising is that someone like me, with minimal networking experience, can get this done with free software and a cheap Wi-Fi adapter. Here's how it goes.

What You'll Need

Unless you're a computer security and networking ninja, chances are you don't have all the tools on hand to get this job done. Here's what you'll need:

A compatible wireless adapter—This is the biggest requirement. You'll need a wireless adapter that's capable of packet injection, and chances are the one in your computer is not. After consulting with my friendly neighborhood security expert, I purchased an Alfa AWUS050NH USB adapter, pictured here, and it set me back about $50 on Amazon. Update: Don't do what I did. Get the Alfa AWUS036H, not the US050NH, instead. The guy in this videobelow is using a $12 model he bought on Ebay (and is even selling his router of choice). There are plenty of resources on getting aircrack-compatible adapters out there.
A BackTrack 3 Live CD. We already took you on a full screenshot tour of how to install and use BackTrack 3, the Linux Live CD that lets you do all sorts of security testing and tasks. Download yourself a copy of the CD and burn it, or load it up in VMware to get started. (I tried the BackTrack 4 pre-release, and it didn't work as well as BT3. Do yourself a favor and stick with BackTrack 3 for now.)
A nearby WEP-enabled Wi-Fi network. The signal should be strong and ideally people are using it, connecting and disconnecting their devices from it. The more use it gets while you collect the data you need to run your crack, the better your chances of success.
Patience with the command line. This is an ten-step process that requires typing in long, arcane commands and waiting around for your Wi-Fi card to collect data in order to crack the password. Like the doctor said to the short person, be a little patient.

Crack That WEP

To crack WEP, you'll need to launch Konsole, BackTrack's built-in command line. It's right there on the taskbar in the lower left corner, second button to the right. Now, the commands.

First run the following to get a list of your network interfaces:

airmon-ng

The only one I've got there is labeled ra0. Yours may be different; take note of the label and write it down. From here on in, substitute it in everywhere a command includes (interface).

Now, run the following four commands. See the output that I got for them in the screenshot below.

airmon-ng stop (interface) ifconfig (interface) down macchanger --mac 00:11:22:33:44:55 (interface) airmon-ng start (interface)

If you don't get the same results from these commands as pictured here, most likely your network adapter won't work with this particular crack. If you do, you've successfully "faked" a new MAC address on your network interface, 00:11:22:33:44:55.

Now it's time to pick your network. Run:

airodump-ng (interface)

To see a list of wireless networks around you. When you see the one you want, hit Ctrl+C to stop the list. Highlight the row pertaining to the network of interest, and take note of two things: its BSSID and its channel (in the column labeled CH), as pictured below. Obviously the network you want to crack should have WEP encryption (in the ENC) column, not WPA or anything else.

Like I said, hit Ctrl+C to stop this listing. (I had to do this once or twice to find the network I was looking for.) Once you've got it, highlight the BSSID and copy it to your clipboard for reuse in the upcoming commands.

Now we're going to watch what's going on with that network you chose and capture that information to a file. Run:

airodump-ng -c (channel) -w (file name) --bssid (bssid) (interface)

Where (channel) is your network's channel, and (bssid) is the BSSID you just copied to clipboard. You can use the Shift+Insert key combination to paste it into the command. Enter anything descriptive for (file name). I chose "yoyo," which is the network's name I'm cracking.

You'll get output like what's in the window in the background pictured below. Leave that one be. Open a new Konsole window in the foreground, and enter this command:

aireplay-ng -1 0 -a (bssid) -h 00:11:22:33:44:55 -e (essid) (interface)

Here the ESSID is the access point's SSID name, which in my case is yoyo. What you want to get after this command is the reassuring "Association successful" message with that smiley face.

You're almost there. Now it's time for:

aireplay-ng -3 -b (bssid) -h 00:11:22:33:44:55 (interface)

Here we're creating router traffic to capture more throughput faster to speed up our crack. After a few minutes, that front window will start going crazy with read/write packets. (Also, I was unable to surf the web with the yoyo network on a separate computer while this was going on.) Here's the part where you might have to grab yourself a cup of coffee or take a walk. Basically you want to wait until enough data has been collected to run your crack. Watch the number in the "#Data" column—you want it to go above 10,000. (Pictured below it's only at 854.)

Depending on the power of your network (mine is inexplicably low at -32 in that screenshot, even though the yoyo AP was in the same room as my adapter), this process could take some time. Wait until that #Data goes over 10k, though—because the crack won't work if it doesn't. In fact, you may need more than 10k, though that seems to be a working threshold for many.

Once you've collected enough data, it's the moment of truth. Launch a third Konsole window and run the following to crack that data you've collected:

aircrack-ng -b (bssid) (file name-01.cap)

Here the filename should be whatever you entered above for (file name). You can browse to your Home directory to see it; it's the one with .cap as the extension.

If you didn't get enough data, aircrack will fail and tell you to try again with more. If it succeeds, it will look like this:

Full size

The WEP key appears next to "KEY FOUND." Drop the colons and enter it to log onto the network.

Problems Along the Way

With this article I set out to prove that cracking WEP is a relatively "easy" process for someone determined and willing to get the hardware and software going. I still think that's true, but unlike the guy in the video below, I had several difficulties along the way. In fact, you'll notice that the last screenshot up there doesn't look like the others—it's because it's not mine. Even though the AP which I was cracking was my own and in the same room as my Alfa, the power reading on the signal was always around -30, and so the data collection was very slow, and BackTrack would consistently crash before it was complete. After about half a dozen attempts (and trying BackTrack on both my Mac and PC, as a live CD and a virtual machine), I still haven't captured enough data for aircrack to decrypt the key.

So while this process is easy in theory, your mileage may vary depending on your hardware, proximity to the AP point, and the way the planets are aligned. Oh yeah, and if you're on deadline—Murphy's Law almost guarantees it won't work if you're on deadline.

Read more: http://mixedtrick.blogspot.com/2012/01/how-to-crack-wi-fi-networks-wep.html#ixzz1kIgop6a

2012-01-10T03:39:00.000-08:00

Google Advanced Search : Search the Thing That You want Exactly

Google Advanced Search : Search the Thing That You want Exactly

Alternate query types

cache:		If you include other words in the query, Google will highlight those words within the cached document. For instance, [cache:www.google.com web] will show the cached content with the word "web" highlighted. This functionality is also accessible by clicking on the "Cached" link on Google's main results page. The query [cache:] will show the version of the web page that Google has in its cache. For instance, [cache:www.google.com] will show Google's cache of the Google homepage. Note there can be no space between the "cache:" and the web page url.

link:		The query [link:] will list webpages that have links to the specified webpage. For instance, [link:www.google.com] will list webpages that have links pointing to the Google homepage. Note there can be no space between the "link:" and the web page url. This functionality is also accessible from the Advanced Search page, under Page Specific Search > Links.

related:		The query [related:] will list web pages that are "similar" to a specified web page. For instance, [related:www.google.com] will list web pages that are similar to the Google homepage. Note there can be no space between the "related:" and the web page url. This functionality is also accessible by clicking on the "Similar Pages" link on Google's main results page, and from the Advanced Search page, under Page Specific Search > Similar.

info:		The query [info:] will present some information that Google has about that web page. For instance, [info:www.google.com] will show information about the Google homepage. Note there can be no space between the "info:" and the web page url. This functionality is also accessible by typing the web page url directly into a Google search box.

Other information needs

define:		The query [define:] will provide a definition of the words you enter after it, gathered from various online sources. The definition will be for the entire phrase entered (i.e., it will include all the words in the exact order you typed them).

stocks:		If you begin a query with the [stocks:] operator, Google will treat the rest of the query terms as stock ticker symbols, and will link to a page showing stock information for those symbols. For instance, [stocks: intc yhoo] will show information about Intel and Yahoo. (Note you must type the ticker symbols, not the company name.) This functionality is also available if you search just on the stock symbols (e.g. [ intc yhoo ]) and then click on the "Show stock quotes" link on the results page.

Query modifiers

site:		If you include [site:] in your query, Google will restrict the results to those websites in the given domain. For instance, [help site:www.google.com] will find pages about help within www.google.com. [help site:com] will find pages about help within .com urls. Note there can be no space between the "site:" and the domain. This functionality is also available through Advanced Search page, under Advanced Web Search > Domains.

allintitle:		If you start a query with [allintitle:], Google will restrict the results to those with all of the query words in the title. For instance, [allintitle: google search] will return only documents that have both "google" and "search" in the title. This functionality is also available through Advanced Search page, under Advanced Web Search > Occurrences.

intitle:		If you include [intitle:] in your query, Google will restrict the results to documents containing that word in the title. For instance, [intitle:google search] will return documents that mention the word "google" in their title, and mention the word "search" anywhere in the document (title or no). Note there can be no space between the "intitle:" and the following word. Putting [intitle:] in front of every word in your query is equivalent to putting [allintitle:] at the front of your query: [intitle:google intitle:search] is the same as [allintitle: google search].

allinurl:		If you start a query with [allinurl:], Google will restrict the results to those with all of the query words in the url. For instance, [allinurl: google search] will return only documents that have both "google" and "search" in the url. Note that [allinurl:] works on words, not url components. In particular, it ignores punctuation. Thus, [allinurl: foo/bar] will restrict the results to page with the words "foo" and "bar" in the url, but won't require that they be separated by a slash within that url, that they be adjacent, or that they be in that particular word order. There is currently no way to enforce these constraints. This functionality is also available through Advanced Search page, under Advanced Web Search > Occurrences.

inurl:		If you include [inurl:] in your query, Google will restrict the results to documents containing that word in the url. For instance, [inurl:google search] will return documents that mention the word "google" in their url, and mention the word "search" anywhere in the document (url or no). Note there can be no space between the "inurl:" and the following word. Putting "inurl:" in front of every word in your query is equivalent to putting "allinurl:" at the front of your query: [inurl:google inurl:search] is the same as [allinurl: google search].

2012-01-10T03:23:00.001-08:00

World's cheapest tablet 'Akash' launched in Inndia

World's cheapest tablet 'Akash' launched in India, Prize of the tablet "Akash" is only $60 (rs.3,000) in india currency

Lake a Look Of Aakash

2012-01-10T03:15:00.000-08:00

New Sony Technology : The NextGen Computer

Technology is finally catching up to the imaginations of movie creators. The main item in this post is Sony’s new Nextep Computer. Even though this computer isn’t set for released until 2020, it still shows how far we have come in the last 50 years. I’m stillwaiting for the robot Companions like in Blade Runner, Cherry 2000, Weird Science and even a little something for the women like in A.I Artificial Intelligence, but this will do for now.

The Nextep Computer is made out of a super flexible OLED touchscreen, it has a holographic projector(for screen), pull-out extra keyboard panels and social networking compatibilities. Those are just some of its specs and functions as of today, so imagine what all this device will do in 10 years when released.

http://youtu.be/vTFZ0I0R0Ug

2012-01-10T03:08:00.000-08:00

Firfox addon to login multiple Facebook account

For many reasons peoples need to create multiple accounts in Facebook, Gmail, orkut etc. But what would you do if you want to login to your two or more facebook accounts simultaneously in your favorite browser like firefox. Sure, you need to logout from one account first and need to login to other one. This is because all browsers like mozilla stores cookies in thier databank while you login to an account in a web page.

There is an addon application called multifox for Mozilla Firefox which allows you to isolate between cookies by starting new identity profile windows to open another facebook account or gmail account simultaneously.

How To Install And Use Multifox.

Go to this page and and install multifox by clicking allow button on the top.
Restart Firefox
Click File >> New Identity Profile
Open facebook and enter you second account login details
Do the same for all website like gmail and orkut
You will be notified the number of identity profiles opened by a blue mark on the rigt side of the address bar.

10 Web Sites Every Student Should Know

2012-01-06T22:34:00.000-08:00

12:03 PM rajan sharma No comments

Many of my friends ask me for this and now here they are for you
HowStuffWorks
Ever wanted to know How CD burners work? What the sun is made of? These questions, and a large amount of others related to computers/electronics, automobiles, science, entertainment, and people, are all answered at this award-winning Web site.Just type a query into the search window or peruse the topics by category. Extras include free newsletters, surveys, and printable versions of all answers.
MSN Encarta
The free Encarta site features more than 4,500 articles pooled from Microsoft Encarta and comes with dictionaries, map, fast facts, interactive quizzes, useful homework tools, and more.
Refdesk
Since 1995, Refdesk.com, that stands for "reference desk," has served as a one-click springboard to many of the Web's top dictionaries,biographies, calculators, atlases, news headlines, and search engines. The site also includes a handy "homework helper" section that provides help in all subjects to students in every grade.
Download.com
Many of u know it.Download.com the ultimate file repository that links to thousands of downloadable free or shareware programs. This includes utilities for Windows, Macintosh, and Linux, Internet tools, desktop dictionaries and language translators, Pocket PC and Palm applications, and of course, computer games. Visitors can search by typing in a keyword or by perusing the many sections.
Novelguide.com
The easy answer to those black- and yellow-striped Cliff Notes is Novelguide.com, a reliable and free source for literary analysis of classic and contemporary books such as Mark Twain's Huckleberry Finn and Fyodor Dostoyevsky's Notes from the Underground. The site offers character profiles, metaphor and theme analysis, and author biographies.
Math.com
This site provides help in a number of maths-related subjects,e.g basic grade-school math, calculus, algebra, geometry, trigonometry, and statistics. Practice exercises are automatically graded, and this free site also features a glossary, calculators, homework tips, math games, and lesson plans for teachers.
Wolfram Mathworld
With more than 12,600 entries,it is the most extensive mathematics resource.
FreeTranslation
Sprechen Sie Deutsch? Perfect for language studies, this handy Web site automatically converts text from one language into another,e.g English to Simplified Chinese or French to English. Simply type and paste up to 10,000 characters (about 1,800 words) into the search window and then select the desired language. Or, you can cut and paste a Web URL to convert the entire site.
Shakespeare Online
ARE u crazy about SHAKESPEARE. On the aptly named Shakespeare Online site, visitors can read every play or poem from the world's most celebrated writer and, more importantly, make some sense of his works with free analysis and famous quotes.
Science Made Simple
Science classes including the difficult science projects aren't as easy for some to grasp as for others. At Science Made Simple, kids of all ages can get detailed answers to many of science's questions, read current news articles related to science, get ideas on school projects, and take advantage of unit conversion tables. Users can also find out if their school's textbooks pass the test.

2011-10-03T10:31:00.001-07:00

SURF ANY BLOCK WEBSITE IN YOUR COLLEGE.

10:27 AM rajan sharma

I am writing this article on free proxy software to help you unblock myspace, bebo, friendster or orkut login.

Free Proxy server softwares:

1. VPNs (Virtual Private Networks) :

To start with, I will put VPNs in first place. Virtual Private Networks (VPNs) not only help you unblock myspace, bebo, friendster or orkut login, but also help you to remain maximum anonymous on web.
I have informed you about two VPNs: Itshidden.com and CyberGhost proxy software.
I personally use Itshidden.com as my proxy server software as it is giving me good proxy speed. I have tried out CyberGhost even but Itshidden.com is much better than CyberGhost free proxy software.

2. Tor :

This is used on a large scale on internet to maintain online anonymity. This can also be used to get unblock proxy servers to unblock myspace, bebo, friendster, orkut login. Tor is a network of tunnels which allows users to maintain their privacy on internet. It is just same as VPNs.

3. Hotspot Shield :

I am really impressed with the speed of proxy servers it provides. It is one of the fastest proxy software I have seen. But, I am ranking it low because of its advertisements. Its free proxy server service shows you ads which is really annoying and you have to install addons like AdsBlockPlus to remove these ads. Otherwise, its the best proxy software.

4. Ultrasurf :

If you are looking for free full version proxy software, which can provide you mostly US based proxy servers to unblock myspace, bebo, friendster or orkut login, then you should use Ultrasurf and surely you’ll love it. It provides you with 3 proxy servers which are having good speed and it also displays the percentage of speed to help you choose best proxy server out of available 3 free proxy servers.

5. Hide my IP :

This proxy software was demanded to me by many readers and I received many emails after I posted an article on it. No doubt, Hide my IP is a good proxy software. But, it has its own drawback of trial version and you have to pay for using it for long time.

6. Hide Your IP Address :

This free proxy software not only provides you with free proxy servers, but also has useful proxy feature of Proxy Checker. You can adjust your level of anonymity and proxy server speed from setting tab of Hide Your IP address proxy software.
Also, there are other free proxy softwares like ProxyWay , ProxySwitcher which needs to be mentioned over here. I hope you all will be able to get your best free proxy software to unblock myspace, bebo, friendster, orkut login. If you have any problem in using free proxy softwares to unblock myspace, bebo, friendster, orkut login, please mention it in comments.
Enjoy free proxy softwares to unblock myspace, bebo, friendster, orkut login…

2011-10-03T10:29:00.000-07:00

How to Block a Website ?

3:09 AM rajan sharma No comments

Some times it becomes necessary to block a website on our Computers for one or other reason. You can easily and effectivily block access to a website by adding it to your Windows HOSTS file. Once the website is blocked in the HOSTS file, it will not appear in any of the browsers. That is, the website becomes completely unavailable.

1. Go to your HOSTS file which is located at:

C:\WINDOWS\SYSTEM32\DRIVERS\ETC for Vista and XP
C:\WINNT\SYSTEM32\DRIVERS\ETC for Win 2000
C:\WINDOWS for Windows 98 and ME

2. Open HOSTS with Notepad.
The default Windows HOSTS looks like this:
______________________
# Copyright © 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a “#” symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
#
127.0.0.1 localhost
_____________________________
3. Directly under the line that says 127.0.0.1 Localhost, you will want to type:
127.0.0.1 name of the URL you want to block
For example to block the website MySpace.com, simply type:

127.0.0.1 myspace.com
127.0.0.1 www.myspace.com

Other parts of MySpace could be blocked in a similar way:

127.0.0.1 search.myspace.com
127.0.0.1 profile.myspace.com
etc etc etc…

It is necessary to add a website with and without the “www.”. You can add any number of websites to this list.

4. Close Notepad and answer “Yes” when prompted.

5. After blocking the website, test it in any of the browser. If every thing is done as said above,the website must not appear in any of the web browsers. You should see a Cannot find server or DNS Error saying: “The page cannot be displayed”. I have also created a virus to block a website which automatically blocks a list of websites as specified in the source program.

Some people suggest that your add a website to the Internet Explorer ‘Privacy’ settings. This does not block a site. It only stops that site from using cookies.

2011-10-03T10:24:00.000-07:00

How to protect your website from hackers | how to secure your website !

This post is for website admins who didnt bother there website's security. so every website owner especially noobs should follow certain steps to protect ther website from hackers as now days cyber crime is on "boom"
...:D..!!

Hackers have lots of reasons for attacking your website and protecting it is the only solution. So, what steps can you take to protect your site from these hackers?

Hackers are constantly attacking websites and one day, even if your site is not experiencing huge traffic levels, a hacker might come calling at your door to test your security levels. How do you stop them from gaining access and possibly taking control of your website?

Passwords
Your site admin must have a strong password – never ‘password’ or other obvious words. A medium strength password will include a combination of numbers and letters, ideally using upper and lower case letters. Make it stronger by including other characters, such as @ – ? etc. Anything that you can add that means your password is not a straight forward word or two can really improve it.

Ideally, also sign on with a user name that is not obvious – not ‘admin’, ‘administrator’ and so on. This way the hacker must guess user name and password. And if you can move your administration area to an unusual directory, then the hacker might not even be able to find it!

Watch what is happening
Monitor failed logon attempts to the admin and maybe close it down if there are too many. Be on the look out for multiple failed attempts from the same IP address and multiple failed attempts on the same user name. Hackers might use networks of computers to constantly submit different passwords to your admin and if these are hijacked computers, they will have different IP addresses, but they will all attack the same userid.

Be alert to traffic patterns
Watch your traffic stats for sudden interest in pages, especially pages that shouldn’t be there and protect the code from SQL injection. And if any part of your website is uploading files then validate the format. I like to check that images are a valid image format and then put them through a resize algorithm. That way php / asp files cannot be uploaded and ran should a hacker gain entry to an admin system.

SQL injection
This is a popular way of reading your tables and trying to find out if you have passwords stored there and other malicious tricks, such as uploading content to your pages. Make sure that you use correct escape routines to remove any attempts to inject SQL into your code and on pages where all that is needed is a read only access, just use a read only user id. Then if someone slips in extra code the potential damage might just be limited.

You can also validate inputs to prevent SQL injection. For example, if you are expecting to be passed an id that is an integer, then test that it is an integer. If not, then I like to just exit the code immediately so that there are no extra clues given and the page stops loading immediately.

i want to you to download this website vulnerability scannner tool called ACUNETIX

6 Basic Website Security Steps

In my quest to beat the hackers who have had a go at some customer websites, I have created a list of a few basic security steps for people building their own websites. Please do leave comments of any others you can think of.

1) Make sure that passwords are not readable in your database.
Yes, it can make life more difficult when you need to reset your own password, but if a hacker manages to gain read access to your database (which can be quite easy, see step 5) then if passwords are on show they can access anything. Even if you just create an MD5 checksum of the password so that it is difficult to read, that is a step in the right direction.

2) Give your logons good user names.
In single user systems it is tempting to do without user names or use basic names such as ‘admin’. Don’t! If a hacker has to find out a username and a password they are much less likely to get through. Store them on separate tables in your database, or in a single user (or limited user) environment, why not store the username in the PHP / ASP? A username is a good protection against brute force attacks.

3) Check what you upload!
Does your admin allow you to upload files to your server? This is what a hacker wants – then they can upload their backdoors. If you are expecting to upload images check the file is an image (jpg, gif etc). If it is meant to be PDF validate that. Then, rename the file to hide it! For example picture.jpg might become 1.jpg.

4) Do not directly access uploaded images.
If a hacker can upload a file, then they need to find out where it is stored. But, if you instead use a picture resizing routine which has the uploads directory hard coded, then there is no clue as to what directory the files are stored in. If a hacker realises that the uploaded files are well hidden it might be enough to make them leave your site alone.

5) Validate all input string parameters.
To gain read access of the database a hacker can try to manipulate inputs. So, make sure the values are what you expected. For example, if you have mypage.php?id=1 and the id is a number, then fail the script immediately if the id is not numeric.

If you are passing a string, within the PHP / ASP check it for an exact match on expected results before using it within a MYSQL query. You can do this by running through the database values or a hardcoded list.

If you are running a search function then this is a lot more difficult to protect, but not impossible. Make sure you use the POST method and check the referring page is on your website. If possible, remove all non alpha-numeric characters or at the very least backslash out quotes. If you don’t then they will cause problems anyway in genuine searches.

6) Monitor failed logons.
And maybe even those queries detected in step 5. If the logon fails, send yourself an email. If there is a brute force attack you might find your email box suddenly filled up, so you might prefer to use a separate email address for this. If you want to be really clever monitor the failed logon attempts and lock your admin out for an hour after a few failed attempts.

thanxx for reading well do comment if u got any query :)

2011-09-27T10:16:00.000-07:00

How to Remove MALWARE from PC: Step by Step Guide

Malware, short for malicious software, is software designed to secretly access a computer system without the owner's informed consent. The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.

The best-known types of malware, viruses and worms, are known for the manner in which they spread, rather than any other particular behavior. The term computer virus is used for a program that has infected some executable software and that causes that when run, spread the virus to other executables. Viruses may also contain a payload that performs other actions, often malicious. A worm, on the other hand, is a program that actively transmits itself over a network to infect other computers. It too may carry a payload.

These definitions lead to the observation that a virus requires user intervention to spread, whereas a worm spreads itself automatically. Using this distinction, infections transmitted by email or Microsoft Word documents, which rely on the recipient opening a file or email to infect the system, would be classified as viruses rather than worms.

In my experience, malware is one of the most common and annoying issues a PC owner has to combat. Fortunately with a handful of free tools it’s easy to keep malware in check. Here’s how I do it with free tools.

1. RUN CCLEANER

Get Ccleaner and install it. It’s free. The purpose of Ccleaner is basically to tidy up your computer so the next two tools have fewer files to scan and can then finish their scans MUCH faster. So open Ccleaner and then look at the following screenshot:

When you’re in the “Cleaner” tab click “Run Cleaner.” Then click it a couple more times and make sure that your result is the same as mine in the above screenshot. You want it to remove some stuff the first one or two times you run the cleaner, but after that you don’t want there to be anything to remove. If you find after each successive cleaning that Ccleaner continues to find things to remove, you can bet you’ve got at least some kind of malware.

Now go to the “Registry” tab and then “scan for issues.” Fix those issues, but be sure to save a backup of that registry file somewhere in case you accidentally remove a registry value that was important to system function.

Next go to the “Tools” tab and select the “Uninstall” button. Ccleaner does a great job of uninstalling programs and with this tool you’ll be able to uninstall all those applications you don’t need. So get rid of the MSN Toolbar as well as any program that looks phony. My rule of thumb for people who don’t know what programs they should keep is “if it looks legit, it probably is.” “Innocent until proven guilty” is another good rule of thumb. Uninstall what you don’t use now.

2. RUN MALWAYREBYTES

Get Malwarebytes, it is a phenomenal application that removes a lot of malware from your computer. You really don’t need any screenshots of this application to understand how it works. You open the program, select “quick scan” and away you go. It really does a great job of walking you through the process.

Note that while Malwarebytes does dectect and remove malware from your PC, it does not provide real-time protection. As a matter of fact there really isn’t any application, paid or free, that provides good real-time protection from malware (you can quote me on that one). To get rid of malware you’re really going to just have to run this program from time to time.

3. RUN SUPER ANTISPYWARE

Get Super Antispyware (get the free version). This application does much the same thing as Malwarebytes, but by using two applications the chances of a piece of malware slipping by are slim. When you run Super Antispyware for the first time it’s going to ask you a bunch of questions, choose whichever answer you want, you’re not going to affect anything crucial no matter how you answer.

Go ahead and click “Scan your computer” and then select “Perform quick scan.” Super Antispyware will likely take longer to finish than anything else you’ve done so far, so expect that. When it’s done scanning you’re going to see this screen:

Of course, it may have found more pieces of malware than it did on my PC, but note that at this point it’s just telling you that in scanning, it has found these things. To remove them from your computer you have to now click the “Next” button.

4. RUN CCLEANER AGAIN

Now that you’ve run your Malwarebytes and Super Antispyware fire up Ccleaner one last time. Clean the registry as well as your temporary internet files again, just like you did in step #1. This makes sure that there are no straggling thingies hanging around your registry and such. Now would also be a good time to look in Ccleaner under the “Startup” menu and remove any suspicious things which are trying to start themselves each time you fire up your computer.

Note that it takes some time to recognize at a glance what you need and what you don’t need in the startup menu. If you have any doubt as to what a program does in your start menu, use Google before you remove it.

Boosting Wi-Fi signals

2011-09-27T10:11:00.000-07:00

Boost Your Wi-Fi Signals With Beer Cans

I love a good hack, especially one that requires me to throw back a cold one before hand (or during). This simple wifi boost has actually been shown to increase signal strength by at least 2 to 4 bars. And, well, I will drink to that.

These instructions came to us via The Chive and we think they are most definitely worth checking out. But here is the most important question: what kind of beer will you use?

For this project you are going to need scissors, a utility knife, some adhesive putty and an empty beer can. More than one empty beer can is acceptable but don’t kid yourself, the router only needs the one.

The first step is to wash out your empty beer can, unless of course said beer is a can of Pabst Blue Ribbon. If it is PBR, promptly go drink a better beer. You really should be ashamed of yourself.

Once the can has dried, you will want to remove it’s pull tab.

Only perform this next step if you have not been drinking. Using the utility knife, saw off the bottom of the can. Chances are your can will not have a red dotted line. If you see one, put down the knife…you’ve had too much beer.

You’ll notice in the above step that the can’s pull tab has returned. Clearly, there are only two possible reasons for this. One, you are really drunk and you never removed the tab in the first place. Or–the more likely answer–beer cans can regenerate themselves.

It’s the home stretch! You just need to attach your modded beer can to the wifi router. Hopefully no other parts of the can have actually grown back. You now have beer-fi!

So, what kind of beer did you use?

How To Add BigRock Domain To Blogger

2011-09-26T11:45:00.000-07:00

How To Add BigRock Domain To Blogger
Tuesday,27,sept , Rajan Sharma

Buy Form Bigrock.com, This Tutorial will explain how to setup Your bigrock domain for blogger.

Lets Start :-

Note : Its assumed that you have already purchased the domain name.

Step 1. Login to your bigrock account

Step 2. Click on "Domains" (from navigation - menu) and then click on "List All Orders". A list showing all your domains will be displayed.

Step 3. Click on the domain.

Step 4. Click on the DNS tab (found on the top navigation - menu) and then on "Manage DNS". We will have to make changes in the DNS settings.

Step 5. Click on CNAME Records and then on "ADD CNAME RECORD"

We will now add two CNAME records one with the www prefix and the other without the www prefix. Why this is important is explained with an example.

Suppose you have registered yourdomain.com.
Adding two CNAME records would allow us to point both http://www.yourdomain.com and http://yourdomain.com to your blogspot blog. Thus even if someone does not type in the www prefix, he would be able to access your blog.

Step 6. Adding the CNAME Record

1. With the WWW prefix
For Host Name type "www"
For Value type in "ghs.google.com" (within the space provided for typing in a fully qualified domain name) and then click on Add Record and you record would be saved.

2. Next we have create another record without the www prefix
Again click on Add CNAME record.
For Host Name enter nothing
For Value type "ghs.google.com" and click on Add Record

Step 7. The final step is link the domain to your blogspot blog. Go to your blogger dashboard and click on settings and then on publishing. Next Click on "switch to custom domain" and then on "advanced settings"

Here enter your domain with www prefix as http://www.yourdomain.com and hit the save button. Click on the publishing tab again and select Redirect yourdomain.com to www.yourdomain.com.
You're Finished Now :)

Important Note : It will take some time for domain name to work as yourdomain.com

Top Indian hackers

2011-09-25T12:24:00.000-07:00

Top Indian Hackers List: Indian Hackers Facts | Real Truth Revealed

Top Indian Hackers List: Indian Hackers Facts | Real Truth Revealed

There has been a lot of commotion in the Indian Hacking scene lately, and I expressed some pretty strong views regarding that. When it comes to hacking, every other guy tends to tape the "hacker" word with his name/codename without even realizing its significance. Then there is Facebook ...Have a look at it -

Seriously guys..what were they thinking ?! I am still counting the number of “Indian Cyber Army” India has and the number of groups tend to increase recycling all the content, same VIP forums, same deface techniques, zero original research. Then there is Ankit Fadiya...dont let me even get started

In the end tired of all the bullshit around, I decided to cover an article on the REAL INDIAN HACKERS (or Hackers of Indian Origin), folks who are actually dedicated to security and are hackers in real sense. Lets start, shall we ?

Also have a look @ Website Defacement Proves You are Impotent

& also @ Ethical Hacker Ankit Fadia Hacking Seminar Truth Reveled: Pure waste of Time
Pranav Mistry

The famed 6th sense developer,Pranav Mistry is a research assistant and a PhD candidate at MIT Media Lab. SixthSense has recently attracted global attention. Among some of his previous work, Pranav has invented Mouseless - an invisible computer mouse; intelligent sticky notes that can be searched, located and can send reminders and messages; a pen that can draw in 3D; and a public map that can act as Google of physical world. Pranav has commercialized his invention, the sixth sense and SixthSense is now being actively used at NASA.

It is rumored that Facebook tried to acquire the technology from Pranav for a reportedly $2 billion and 5% ownership of Facebook, but Pranav decided to open source it instead.

Thats what any real hacker do. Hats Off to him.

Koushik Dutta or “Koush”

“Set Your Phone Free..”

Rings a bell ? Koushik Dutta or “Koush” is responsible for Clockworkmod recovery and Rom Manager for Android rooting and the core member of famed UnrEVOked team. He has been a .net developer from heart and had his internship initially at Microsoft and is a former MVP. He decided to leave Microsoft and hack Android cellphones like there was no tomorrow. Sony approached him after geohot humped them like anything but he politely declined .

Bravo for his efforts, we are able to root painlessly using UnREVOked.
Now only if UnrEVOked can release UnrEVOked 3.33 soon :)

Vivek Ramchandran

Vivek Ramachandran has been working in the computer and network security domain, in some form or the other, for the past 7 years and has worked with Industry giants like Reliance, Cisco, Microsoft. He was among the Top 10 Indian finalists in the Microsoft shootout competition among the list of 65000 participants. Then he decided to join Airtight Networks and there discovered Caffe Latte attack attack along with his colleague MD Sohail Ahmad from Airtight Networks ,the wifi hacking technique that doesn't required you to be in active vicinity of the wifi zone.

That said, he is one of the researcher to lookout.

Almost everybody at NULL Security Community & Garage4hackers

I said it before and I will say it again, the Only active Indian hacking community is NULL community, and the best Indian Hacking Forum where real hackers meet is garage4hackers.com hands on.

Shoutz to garage crew :)

Folks at Indian Honeynet Chapter

Now we are talking..Indian Honeynet chapter is the collaborative effort of the best geeks and hackers .The focus of honeypot is on Worms and Botnets and developing an Open Source tool to study and counter brute force attacks/ phishing through wifi. Its also being setup as potential web-app honeypot,and aims on improving detection and forensic techniques. Heading the ship are L Shriram, K K Mookhey, Amit Chugh, Asim Jakhar and a lot of professionals who are dedicated in the field of computer security.

The genius of the Indian system is that instead of making machines tamper proof and more efficient, they arrested him.

2011-09-25T02:15:00.000-07:00

What is a Hacker? Hacker is a term used to describe different types of computer experts, who employ a tactical, rather than strategic, approach to computer programming, administration, or security. An exception to the expert sense is use of the term by the popular media and the general population to mean "computer criminal," with no indication of level of skill, expertise, or understanding implied. In the field of computer security, hacker translates to a person able to exploit a system or gain unauthorized access through clever tactics and detailed knowledge. In computer programming, hacker means a programmer who hacks or reaches a goal by employing a series of small changes or additions to exploit or extend existing code or resources. In technical fields outside of computing, hacker is sometimes extended to mean an expert who has particularly detailed knowledge or cleverly circumvents limits." - http://en.wikipedia.org/wiki/Hacker

Your Ad Here

In common usage, a hacker is a person who breaks into computers, usually by gaining access to administrative controls.The subculture that has evolved around hackers is often referred to as the computer underground. Proponents claim to be motivated by artistic and political ends, and are often unconcerned about the use of criminal means to achieve them.

Hacker attitudes Several subgroups of the computer underground with different attitudes and aims use different terms to demarcate themselves from each other, or try to exclude some specific group with which they do not agree. Eric S. Raymond advocates that members of the computer underground should be called crackers. Yet, those people see themselves as hackers and even try to include the views of Raymond in what they see as one wider hacker culture, a view harshly rejected by Raymond himself. Instead of a hacker – cracker dichotomy, they give more emphasis to a spectrum of different categories, such as white hat (ethical hacking), grey hat, black hat and script kiddie. In contrast to Raymond, they usually reserve the term cracker to refer to black hat hackers, or more generally hackers with unlawful intentions.

White hat

Main article: White hat

A white hat hacker breaks security for non-malicious reasons, for instance testing their own security system. This type of hacker enjoys learning and working with computer systems, and consequently gains a deeper understanding of the subject. Such people normally go on to use their hacking skills in legitimate ways, such as becoming security consultants. The word 'hacker' was originally used to describe people such as these.

Grey hat

Main article:

A grey hat hacker is a hacker of ambiguous ethics and/or borderline legality, often frankly admitted.

Black hat

Main article:

A black hat hacker is someone who subverts computer security without authorization or uses technology (usually a computer or the Internet) for vandalism (malicious destruction), credit card fraud, identity theft, intellectual property theft, or other types of crime.

Script kiddie

Main article:

A script kiddie is a non-expert who breaks into computer systems by using pre-packaged automated tools written by others. These are the outcasts of the hacker community. Also referred to as a Skiddiot.