Hack A Trick

FBI will Monitor Social Media using Crawl Application

2012-01-30T07:08:00.001+05:30

The Federal Bureau of Investigation is looking for a better way to spy on Facebook and Twitter users. The Bureau is asking companies to build software that can effectively scan social media online for significant words, phrases and behavior so that agents can respond.A paper posted on the FBI website asks for companies to build programs that will map sentiment and wrongdoing.

“The application must be infinitely flexible and have the ability to adapt quickly to changing threats to maintain the strategic and tactical advantage,” the Request for Information said, “The purpose of this effort is to meet the outlined objectives…for the enhancement [of] FBI SOIC’s overall situation awareness and improved strategic decision making.”The tool would be used in “reconnaisance and surveillance missions, National Special Security Events (NSS) planning, NSSE operations, SOIC operations, counter intelligence, terrorism, and more.

Although the police, including in Britain, already use Facebook routinely to ascertain the whereabouts of criminals, automatically filtering out irrelevant information remains challenging. The new FBI application will be able to automatically highlight the most relevant information. The FBI is seeking responses by 10 February.

Anonymous Takes Down FBI, RIAA, DOJ and White House Following Megaupload Closure

2012-01-20T15:35:00.000+05:30

In a hastily assembled retaliation against the federal shutdown of MegaUpload.com, hacktivist group Anonymous has allegedly taken down a number of websites--including those of the U.S. Department of Justice, the Motion Picture Association of America (MPAA), and the Recording Industry Association of America (RIAA).

According to DownForEveryoneOrJustMe.com, several websites are out of commission as of this writing, likely thanks to DDoS attacks: the U.S. Department of Justice (doj.gov, justice.gov), the U.S. Copyright Office, Universal Music Group, the RIAA, and theMPAA.

At about 2 p.m. on Thursday, @AnonDaily, a Twitter account assumed to be associated with Anonymous, tweeted: "TANGO DOWN! JUSTICE.gov - U.S. Government Website DOWN!" The account has continued to post updates, noting that RIAA, MPAA, Universal Music Group, and U.S. Copyright Office websites were all down, and that Anonymous istrying to knock out several other websites, including the FBI and White House websites.

They are also working on taking down the website of MPAA chief, Chris Dodd, who is a strong supporter of the controversial Stop Online Piracy Act (SOPA) and Protect IP Act (PIPA) bills that are currently making their ways through the congressional circuit. Dodd said Tuesday that yesterday's Internet blackout protests performed by big Web players, including Google and Wikipedia, were an "abuse of power."

Here's what's offline right now, as of 4pm PST:

U.S. Department of Justice
U.S. Copyright Office
Recording Industry Association of America
Motion Picture Association of America
Universal Music Group
BMI Music

Fake Angry Birds Game spreading Malware from Android Market

2012-01-17T16:38:00.001+05:30

From last week premium rate SMS Trojans surfaced in the Android Market. Google has pulled 22 apps that are masquerading as legitimate versions of popular games like Angry Birds and Cut the Rope. Security researchers have discovered a way to bypass an Android smartphone owner's permissions and access private data stored on their smartphone.

Avast Blog explain this as - For example, if someone tried to look for “Cut the rope free”, this malicious application was in the fourth place in the search results. Apps published by the developer Miriada Production may look like well known Android games (Angry birds, Need for speed, World of Goo and others) and users could be easily confused.

The fake apps include "Cut the Rope", "Need for Speed", "Assassins Creed", "Where's My Water? ","Riptide GP", "Great Little War Game", "World of Goo", "Angry Birds", "Shoot The Birds", "Talking Tom Cat 2", "Bag It!" and "Talking Larry the Bird". The apps have been pulled from the Android Market.

The fraudulent apps would install a premium rate SMS Trojan that would rack up hidden charges on the user's phone bill. The apps would lure customers into clicking on options that would send text messages to premium line numbers leaving the user to foot the bill. According to Lookout Mobile Security, the new threat called RuFraud has been found in an initial batch of apps on the Android Market that include horoscope apps, wallpapers, and game apps that pretend to be legitimate games like Angry Birds.What will happens if these threats are installed in your mobile devices? It will attempts to send text messages containing the string “798657” to premium-rate numbers using the infected device’s current default SMS Center (SMSC) by exploiting the Permissions function (android.permission.SEND_SMS), Capable of sending an affected user’s GPS location via HTTP POST, Opens several ports and connects to specific URLs to receive and execute commands from a remote user, Gathers information like International Mobile Equipment Identity (IMEI) and International Mobile Subscriber Identity (IMSI) numbers from infected systems, which is then sent to a specific site and Secretly forwards all incoming text messages to a remote user.

How do users get these threats?

Trend Micro has reported several incidents wherein malware came disguised as Android apps. Samples of Android malware found in the wild include:

ANDROIDOS_DROIDSMS.A: Came disguised as Windows Media Player.
ANDROIDOS_DROISNAKE.A: Came in the form of a game known as Tap Snake.
ANDROIDOS_GEINIMI.A: Came in the form of Trojanized apps hosted in certain third-party app stores in China.
ANDROIDOS_ADRD.A: Comes in the form of a Trojanized wallpaper app.
ANDROIDOS_LOTOOR.A: Trend Micro’s detection for Trojanized versions of legitimate apps like “Falling Down”.
ANDROIDOS_BGSERV.A: Trojanized version of Android Market Security Tool, which was released to address the modifications done by AndroidOS_LOTOOR.A.

Trend Micro Suggest "Users can also check the developer’s profile for other apps. Google also offers developer ratings, as well as the status 'Editor’s Choice' that can further validate the developer’s legitimacy. It is also a good practice to check app ratings and user feedback for more verification. The user rating and feedback feature give people a more accurate view of the experiences users have when using or installing the app. You can find it just below the app icon.,".

How to detect a keylogger in a system

2012-01-17T15:59:00.000+05:30

Keylogger is the software program or a hardware which reads and store all the key stroke by a user in the system it is installed.

Having a keylogger in the system means you are going to loose some thing big. If your system is infected by a keylogger, your email id, facebook account, bank account and all other secure data is on the risk. Now a days hackers are active enough and many website offering free software download with keyloggers attached in it. So you need to know how to protect your system from keyloggers. If you want to know how to detect a keyloggers in a system, you can follow these points:

Check the task list by press ctrl+alt+del in windows. Examine all the tasks running in your system, if you are unsure about a task look it up on a search engine.

Run your antivirus checker, it's possible this will pick up the Keylogger on your system.

Use the system configuration utility to determine which task are loaded at start-up (type "msconfig" in the run box to start).

Download a specific keylogger detector program, and see if it detects anything.

Scan your hard disk for the most recent files stored. Look at the contents of any files continually updating (these might be logs created by antivirus).

How to Remove Facebook Timeline

2012-01-16T13:55:00.001+05:30

We all know that Facebook Implemented Timeline Feature for all people. Some people liked it and some people really hated it. Firstly people wanted timeline, but after sometime, they started neglecting it and thumbs down for Timeline!! Even Facebook did not give any response on how to Disable Facebook Timeline. Well, Many of my friends too asked me that how can they Remove Facebook Timeline. However, this is now possible using a trick. In this series, I am going to shareHow to Remove Facebook Timeline!!!

How to Remove Facebook Timeline:

For Mozilla Firefox:

Open Firefox Browser and Add this User Agent Switcher Addon. After installing it, Restart your browser.

Now go to Tools<Default User Agent<Internet Explorer and Select Internet Explorer 7.

Now go to your Facebook Profile. You might be seeing that the page is having errors and unnecessary spaces between them. So follow the link and Install FB Purity Extension in your Firefox Browser.

So, that's all! Refresh your Facebook profile. And you will be seeing that your old profile look is back!

For Google Chrome:

Go to your desktop. Right Click on Google Chrome's Shortcut and Click on Properties.

Now properties Window will open. Go to Shortcut Tab. Now you need to add some changes in theTarget.

Paste the following code in the Target window after the : “C:\ProgramFiles\Google\Chrome\Application\chrome.exe”

Code to add For Windows Vista & Windows 7 Users.

–user-agent=”Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)”

Code to add for For Windows XP Users.

–user-agent=”Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)”

Remember, you need to leave space between:

“C:\Program Files\Google\Chrome\Application\chrome.exe”<SPACE>–user-agent=”Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)”

Apply it and Hit OK.

Now go to your Facebook Profile. In this you will be seeing that you are having errors in your timeline. So Now you need to install FB Purity in your Chrome Browser.

Refresh your Profile page (Ctrl+F5) !!

So that's all!! You got rid of Facebook Timeline in Chrome too!!

URL redirection Vulnerability in Google

2012-01-16T12:28:00.001+05:30

An open redirect is a vulnerability that exists when a script allows redirectionto an external site by directly calling a specific URL in an unfiltered,unmanaged fashion, which could be used to redirect victims to unintended,malicious web sites. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect.

A similar vulnerability is reported in Google by "Ucha Gobejishvili ( longrifle0x )". This problem may assist an attacker to conduct phishing attacks, trojan distribution, spammers.

Url: https://accounts.google.com/o/oauth2/auth?redirect_uri=http://www.something.com

Same vulnerability in Facebook, Discovered by ZeRtOx from Devitel group:

http://www.facebook.com/l.php?h=5AQH8ROsPAQEOTSTw7sgoW1LhviRUBr6iFCcj4C8YmUcC8A&u=www.something.com

Impact of Vulnerability :

The user may be redirected to an untrusted page that contains malware which may then compromise the user's machine. This will expose the user to extensive risk and the user's interaction with the web server may also be compromised if the malware conducts keylogging or other attacks that steal credentials, personally identifiable information (PII), or other important data.
The user may be subjected to phishing attacks by being redirected to an untrusted page. The phishing attack may point to an attacker controlled web page that appears to be a trusted web site. The phishers may then steal the user's credentials and then use these credentials to access the legitimate web site.

HTTPS Everywhere | protection against Firesheep attack

2012-01-02T21:28:00.002+05:30

Firsheep add-on is an easiest method to hack facebook, Gmail or any other account over an unsecured wireless network.today I am going to say you how to protech yourself from this attack.This new trick is HTTPS Everywhere Firefox add-on
The Electronic Frontier Foundation developed HTTPS Everywhere before Firesheep came on the scene, but it’s revamped it to offer more robust protection against Firesheep snooping.

Many websites offer limited support for encryption over HTTPS, but they make it difficult to use. They may default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site. The HTTPS Everywhere extension fixes these problems by rewriting all requests to these sites to HTTPS. HTTPS Everywhere alters browsing so that your default connection is no longer unencrypted http but the more secure, encrypted https whenever a site offers that capability.

restriction:

HTTPS Everywhere can protect you only when you’re using sites that support HTTPS and for which HTTPS Everywhere includes rules

Firefox users can get it by clicking here:

https://www.eff.org/files/https-everywhere-latest.xpi

hack a website using c99 script

2012-01-02T11:09:00.000+05:30

The c99 shell script is a very good way to hack a php enable web server. You have to find an unsecure uploader to upload this file to the server. Here i used unsecure uploader means the uploader which can’t check for file extension and allow us to upload our executable scripts to the server.

This c99 shell allows an attacker to hijack the php enable web server. This script is very user friendly and having very good interface so it is easy to use. You can issue any php command to run on the web server. You can use any of the commands given in the script to run on the web server.

NOTE: This post is only for educational purpose. We advice you not to try this on any website. Use of this script on any website is illegal.

For hacking a website using C99 script follow these steps.

1) Find a php web site with an uploader.
2) Test the file uploader to be secure or not by uploading files with a server executable extension.
3) If uploader is unsecure then upload the shell script.
4) Execute the uploaded code by navigating to the uploaded page.
5) A c99 script GUI will show up with a lot of options and details.
6) Look for the server details if the safe mode is on or off. If safe mode is off then the entire web server can be controlled by the script. If its on then on the directory in which c99 shell script is uploaded can only be controlled by the script.
7) Apart from being able to chmod, modify and delete files c99 also lets its user brute force the ftp but it requires an additional dictionary file which can run into hundreds of MBs.

NOTE: You can also execute this script on the web server by RFI

Search the and download the script from google. or download from link
c99
but upper link may not work because script will soon be deleted by the file host.

Patator – Multi Purpose Brute Forcing Tool

2012-01-01T10:09:00.000+05:30

This tool has many advanced features which are not available in other brute force attack tool. This tool is multithreaded and easy to use.

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.When Medusa, Hydra or other brute-force tools fail to do what you want, Patator might be what you need.

This tool support

ftp_login : Brute-force FTP
ssh_login : Brute-force SSH
telnet_login : Brute-force Telnet
smtp_login : Brute-force SMTP
smtp_vrfy : Enumerate valid users using the SMTP VRFY command
smtp_rcpt : Enumerate valid users using the SMTP RCPT TO command
http_fuzz : Brute-force HTTP/HTTPS
pop_passd : Brute-force poppassd (not POP3)
ldap_login : Brute-force LDAP
smb_login : Brute-force SMB
mssql_login : Brute-force MSSQL
oracle_login : Brute-force Oracle
mysql_login : Brute-force MySQL
pgsql_login : Brute-force PostgreSQL
vnc_login : Brute-force VNC
dns_forward : Forward lookup subdomains
dns_reverse : Reverse lookup subnets
snmp_login : Brute-force SNMPv1/2 and SNMPv3
unzip_pass : Brute-force the password of encrypted ZIP files
keystore_pass : Brute-force the password of Java keystore files

Download:

http://patator.googlecode.com/files/patator_v0.3.py

Pak Cyber Combat Squad Hacked 165 Indian Websites In The Month Of December

2011-12-27T18:04:00.002+05:30

Since last few years Pakistani hackers are hacking Indian websites. They have hacked several Indian high profile sites which includes BSNL too. Yes Pakistani hackers have hacked BSNL website on 27/10/2011.

But this time a Pakistani hackers group ‘Pak Cyber Combat Squad’ hacked 165 indian websites in the month of December. 1st they hacked 100 indian websites on December 12 and they have poasted the links of all the hacked site at http://www.pastie.org/3011079 where they have written that ‘100 more sites got 0wned by Krayzie & Unkn0wn’. This is the case of December 12,2011.

Pakistani hackers group “Pak Cyber Combat Squad” again hit the mark on the 3rd week of December. These are the links:

• http://commotradehub.com/
• http://wtsjobs.com/
• http://wtsacademy.org/
• http://wtsjobs.in/
• http://wtsacademy.com/
• http://wtsacademy.in/
• http://freshersindia.in/
• http://aviskarinfrastructure.in/
• http://daibadeepinfotech.com/
• http://smslane.in/
• lhttp://tigroup.in/
• http://vision28.com/
• http://microtechsols.com/
• http://multilevelmarketingsoftware.in/
• http://domso.in/
• http://bcig.in/
• http://vaaptechnology.com/
• http://sujankumarsarkar.com/
• http://webims.in/
• http://mlmgoogle.com/
• http://globeoneservices.com/
• http://ecogreenmkt.in/
• http://tfkolkatabsnl.co.in/
• http://day2dayinvestments.com/
• http://webtechsols.in/
• http://a1services.co.in/
• http://djshelly.com/
• http://velamaritime.gr/
• http://asteltech.com/
• http://divineconsultants.in/
• http://jakly.com/
• http://dynacon.in/
• http://asteltech.com/
• http://ivineconsultants.in/
• http://dynacon.in/
• http://wwsols.com/
• http://samridhee.com/

But the fact is that this group has continued hacking more and more Indian sites. About two days back,they have again hacked 18 more Indian sites.

These are the hacked site:

1. http://www.123businesstips.com/
2. http://www.123financemanagement.com/
3. http://www.123indianfashion.com/
4. http://www.123jewelryshopping.com/
5. http://www.123luxuryhotels.com/
6. http://www.123musicmasti.com/
7. http://www.123weddingsupplier.com/
8. http://www.3waylinkbuilding.com/
9. http://www.aieee-india.com/
10. http://www.dreamzcraftweddingplanner.com/
11. http://www.freelanceseo.in/
12. http://www.jobbridge.in/
13. http://www.pinklotusboutique.com/
14. http://www.pinklotusboutique.in/
15. http://www.ramsinghmedicalstores.info/
16. http://www.sachinsaxena.in/
17. http://www.sanchiweblead.com/
18. http://www.traveltalks.org/

After hacking the above mentioned sites they have added a picture and the following messages were written there:

‘krayzie &unknown was here for a while !’they also added that they love to break highly secured server.

How to send password protected Email

2011-12-27T12:21:00.000+05:30

Now a days, Email is the most common media for information interchange. It is used by most of the working person. Most of the popular email servers such as GMail, Yahoo mail, Hotmail and many other provide this email service for free. Users need to create a free account and then they can use their account for sending and recieveing emails.

But Cyber criminals are always try to hack passwords of users email account to read emails and misuse the account. Do you know? you can also protect each mail sent by you with a password for better information security. If some one maneged to get into the account, he would not be able to read the email without knowing the password

. To send the password protect email, you have to use a third party service named as LockBin

go the link http://www.lockbin.com/lockbin.php
Fill the form and send the mail. And also inform receiver that you have sent the mail and password as well
Recipient will get the email with a link. To read the email, he will have to go the link and verifiy the password which you have entered while sending the email.
After submitting password Receiver can view message.

The Mole – Automatic SQL Injection SQLi Exploitation Tool

2011-12-20T22:34:00.001+05:30

Advance automatic sqli tool which is easy to use. It only takes URL and the valid string to detect the injection and exploit.

Features:

Support for injections using Mysql, SQL Server, Postgres and Oracle databases.
Command line interface. Different commands trigger different actions.
Auto-completion for commands, command arguments and database, table and columns names.
Support for query filters, in order to bypass certain IPS/IDS rules using generic filters, and the possibility of creating new ones easily.
Developed in python 3.

Download for Windows

Download for Linux

[VIDEO]Yeahh!! It Happens on Live Television – How to Stop Spreading This Spam

2011-12-16T21:47:00.004+05:30

My Facebook timeline (you no longer call it wall after the facebook update) was filled with this spam video from many friends who clicked on the link on their timeline. The thumbnail posted along with the link on the timeline looks like a video and adding to it the most cleverest part the spammer did was adding the users name on the post in the timeline. This urges the user to further think the video was posted by his/her friend since it directly calls out their name and asks them to watch the video.

Though you may already be knowing that it was a spam after you clicked on the link, You still might be spamming your friends timeline every hour or so and many of my friends told they had no idea how it was happening. This post will help you to stop the spam post from being spread on your friend’s timeline.

How the Spam Infected You

Given below are the steps that you passed through when you clicked on the link on your timeline.

Step 1. You clicked on the link and Landed on a page which is similar to the one below.

Step 2.You were asked to click on the Install Plugin in order to watch the video, You were so desperate to watch the video that you least bothered to look around the page and notice that its not a Trustworthy Youtube page. Finally you clicked on the link.

Step 3. You clicked on Allow incase you were using Firefox.

Step 4. You clicked on Install after the countdown. If you had bothered to look a bit you would have noticed the site serving the addon under the Youtube Extension heading.

Step 5. Refreshed the page > Either watched a lame fake video else Punched your fist on the desk realizing it was fake. :/

How to Disinfect Yourself from the Spam.

Firefox Users -

Step 1. Open Browser > Click on Options > Addons OR Press Ctrl + Shift +A.

Step 2. Click on Remove button beside the Youtube Extension or something similar.

Step 3. Restart Browser.

Chrome Users -

Step 1. Open Browser > Click on the Spanner Icon (Settings) > Tools > Extensions.

Step 2. Click on Remove button beside Extension Youtube or something similar.

After performing the above steps, It is recommended to use CCleaner application and clear all cookies and caches of your browsers.

How to Prevent Spam Posts on Your Timeline.

Till the spam is blocked, It is recommended that you disable others ability to post on your timeline.

To block it, Follow these instructions.

Open Privacy Settings > How you connect > Who can post on your timeline > Change it to ‘Only Me’.

These instructions should save you from the spam attacks, Do read our Facebook Security Guide for more information on protecting your account.

How to like stories on your wall in facebook at one click

2011-12-05T20:30:00.001+05:30

Do you know? you can like all stories on your wall at one click in facebook. I know its foolish to like all the stories without knowing what they are. But many people do it for fun. And i saw many people who really like all the stories which they see on the wall.

But assume how much time it will take to go on each story and like it. It will take time and effort.

But I have a nice tool which can save your time and effort both. If you have Google chrome web browser, you can do it at a click. If you do not have Google chrome Browser, you can download it a click.

Now open Google chrome and click on the link below

http://www.chromeextensions.org/social-communications/facebook-like-all/

this is the Google chrome extension named as Like All. Install it in your browser.

Now go to your wall and click on the like button at the top rightof your browser.

Now you have liked all the stories at a click

Pak Cyber Combat Squad hackers hacked more than 100 websites

2011-12-05T20:20:00.001+05:30

pakistani hackers are busy in attacking websites and taking them down. They have claimed to hack more than 100 websites and also posted a the links on http://pastebin.com/ZprLHntT

Pak Cyber Combact Squad, the hacker group has also posted the deface message,”We can see that you are trying to free us from the tyrannical regime of dictators where we have freedom, and are replacing it with a so called democracy where the political parties are just legalized form of street gangs, You killed our children in the name of revolution, You bombed and destroyed our homes in the name of collateral damage and left many of us disabled.”

I have also seen a news in Hindustan Times website saying that BSNL website was also hacked by Pakistani hacker groud Pakistan Cyber Army.\According to Telecom Talk, the hack was first spotted at 2:21 am on December 4th, 2011, and the group comprises of five hackers by the aliases x-c0p, nginx-adm1n, enc0der, k3rnel and sm0ky.

A new facebook worm is spreading ZeuS trojan

2011-11-30T08:25:00.001+05:30

According to the report published by a Danish security company, a new facebook worm is spreading ZeuS trojan. This worm relies on stolen Facebook account credentials to spam all the friends of the victim by advertising a link that allegedly points to a jpeg image file. When a user clicks on the link, it servers a malicious screensaver which installs ZeuS Trojan on the users computer.

The worm is also found to have anti-VM capabilities, making it useless to execute and test in a virtual environment, such as Oracle VM VirtualBox and VMWare.

I personally suggest users not to click on any this kind of post or link on po

sted by friends. Always verify the link before clicking on it.

“Password”, Worst Password Of The Year 2011

2011-11-27T21:53:00.001+05:30

Password, the secret word which we use to protect our accounts. There are lots of website online so it is hard to think each time a hard to guess and easy to remember password. people either use the same password over and over again or create easy to remember passwords (or both).

This report is generated by the data,“containing millions of stolen passwords” posted by hackers. Company has analyzed these data and create a list of weak password.

“If you’re one of those people who thought it was clever to use “password” as your password, it’s time to wisen up and make a change. Switching the “o” to a zero to make it ‘passw0rd’? Not much better,” advised SplashID.

If we take a look on the lists of previous years’, most of these re-appears in the common passwords. This is the reason why company restrict passwords to have capital letters, special characters and numbers all in a passwords to force users to keep a secure password. But users often forget this type of passwords. There are may websites and tools which suggest users some strong passwords.

The top 25 most commonly used passwords for 2011 according to SplashID:

password
123456
12345678
qwerty
abc123
monkey
1234567
letmein
trustno1
dragon
baseball
111111
iloveyou
master
sunshine
ashley
bailey
passw0rd
shadow
123123
654321
superman
qazwsx
michael
football

You could soon read emails on your contact lenses

2011-11-23T20:15:00.001+05:30

The scientists are trying to convert this imagination into reality. An international team which claims to have developed a prototype lens that could potentially provide the wearer with hands-free information updates. This imagination is possible by futuristic technology.

The scientists from Washington University in the US and Aalto University in Finland have constructed a computerized contact lens and demonstrated its safety by testing it on live eyes, and there were no signs of any bad side effects.

At the moment, the contact lens device contains only a single pixel, but the team sees this as a "proof-of-concept" for producing lenses with multiple pixels which, could be used to display short emails and text messages right before one's eyes.

The contact lens created by the scientists consist of an antenna to harvest power sent out by an external source, as well as an integrated circuit to store this energy and then transfer it to a transparent sapphire chip containing a single blue LED, 'The Daily Telegraph' reported.

One major problem the researchers had to overcome was the fact that the human eye, with its minimum focal distance of several centimetres, cannot resolve objects on a contact lens. Any information projected on to the lens would probably appear blurry.

2011-11-18T16:09:00.001+05:30

Today i am going to write about a nice firefox addon. It's name is Proxy Tool. It is a powerful, User-friendly proxy tool to manage your proxies and anonymity needs. It includes 43M+ user agents (world's largest), 10 different spoofed HTTP referrers, auto-proxy rotation, plus many more.

Proxy Tool is an user-friendly proxy tool that completely replaces Firefox's limited proxy features.
It has many features that will make it your best friend when surfing the sites anonymity.

Features:

Can import up to 100 tested/working HTTP/HTTPS/SOCKS proxies from various proxy list providers such as http://proxylist.co
Easy to understand the pop-up menu with basic, yet powerful features.
Delete Flash cookies/site cookies manually or automatically.
43 millions different user agents (world's largest) for browsers, including iPhone and iPad browsers.
Spoof HTTP referrers, which can be editable (up to 10). Disable automatically on 2nd page.
Mouse-over Tooltip to display the proxy/actual site details
When entering IP:Port proxy (HTTP or SOCKS) in text box, the proxy settings are updated automaticall
Download Here:
https://addons.mozilla.org/firefox/downloads/latest/239381/addon-239381-latest.xpi

Facebook hack has reported, users please Beware

2011-11-16T22:29:00.001+05:30

The pornographic pictures sent as feeds to friends and family after hacking of number of accounts on facebook.

Over 2 lakh victims of this hacking are in Bangalore. According to a news report, some two lakh Facebook users in Bangalore had their accounts hacked and weblinks to their morphed pornographic pictures sent as feeds to friends and family.Users were tricked into pasting malware into their browsers, which in turn resulted in the sharing of offensive content, Facebook said.

The cybercrime department too is reported to have received calls and complaints regarding the mass hacking.

According to the report, there are around 50 posts on Facebook stating that the users are quitting the social networking site forever after being embarrassed before friends and family.

"Protecting the people who use Facebook from spam and malicious content is a top priority for us," Palo Alto, California-based Facebook said in a statement.

create your own online free sms bomber with firefox

2011-11-13T20:37:00.001+05:30

Today i will teach you about how to create your personal sms bomber and flood victim's mobile with lots of sms's.you can create your personal sms bomber in just 8 easy steps-
1.first of all you need moziilla firefox browser download and install it.
https://addons.mozilla.org/en-US/firefox/addon/imacros-for-firefox/
2.after installing mozilla go on add-on market of firefox and search for add-on named as imacros.
3.install imacros on mozilla.

4.search for any free sms sending website which not gives captcha challenge.
5.open website in firefox and press F8 imacros will open.
6.after opening imacros click on record and then type your message and and victim's mobile number and after typing message and mobile
7.after that click on play and give maximum value to 500 and click on play loop.
8.you have done now go and take rest(ha ha).

for step 4 do some googling you will find a lot of sites.

Zuckerberg: Facebook Is Not Going To Build Any Games

2011-11-11T16:42:00.001+05:30

To many a casual Facebooker, Facebook is allabout the games. From riveting titles like “Feed your fish so they don’t die” to the action-packed adventure “Growing fake plants in virtual dirt”, Facebook games have captured the hearts and minds of the massive casual audience that so many others have failed to grasp.

You might think, then, that Facebook might consider building a game or two of their very own? Heck no, says Zuck.

Mark Zuckerberg dives into the logic of avoiding game development in his interview with Charlie Rose (which, while it may be a daunting wall of text, is definitely worth a read through if only to catch Sheryl Sandberg making fun of Zuckerberg for being too young to remember CallerID):

Zuckerberg: Games is probably the biggest industry today that has gone really social, right. I mean, the incumbent game companies are really being disrupted and are quickly trying to become social. And you have companies like Zynga (which are going public soon and will be valued most likely at multibillion dollar valuations, and basically all of their games are built on top of Facebook for the most part) And a huge number of other companies as well.

So I mean, does Facebook build any games? No. We build no games.

Rose: You say that today –

Zuckerberg: No, we —

Rose: You say that today –

Zuckerberg: No, I’m pretty sure we’re not going to build any games.

Rose: I’m only saying this because people thought that Steve Jobs would never go into retail, and he did.

Zuckerberg: I’ll tell you why. Because building games is really hard. And what we’re doing is really hard. And we think that we’re better off focusing on this piece. I think that building a great game service is really hard. Building a great music service is really hard. Building a great movie service is really hard. And we just believe that an independent entrepreneur will always beat a division of a big company which is why we think that the strategy of these other companies trying to do everything themselves will inevitably be less successful than an ecosystem where you have someone like Facebook trying to build the core product to help people connect and then independent great companies that are only focused on one or two things doing those things really well.

In other words: Facebook is good at building platforms for other people to build on, and they know it. Why step on toes? Why do the work that others are better at, and willing to do for you? They’ll build the foundation, work in a way to shave some money off the top, and let the cash roll in.

They’ll let Zynga do the games, Netflix do the movies, myriad streaming services do the music, and Facebook will just connect the dots — or as Sheryl Sandberg repeats throughout the interview, “connect the world”.

Resource-techcrunch

Google chrome 16 beta with mulitple profile in same browser

2011-11-05T21:25:00.001+05:30

Google Chrome 16 beta is now available with some interesting features. But the notable feature is the support of multiple chrome profile on the same browser window. So you can run more chrome users on same browser.

Each profile will be associated to a different Google account and ach profile will be completely separate, all the settings, bookmarks, apps, open tabs and so on, will be saved independently.
"What if you share a computer with family or friends? You may not want your bookmarks and settings mixing with your brother’s or your roommate’s bookmarks and settings, and you wouldn’t want their Chrome stuff syncing to your other devices," Miranda Callahan, Software Engineer at Google,wrote.
"In today’s Beta release, we’ve added a new feature that lets people who use a shared computer each have their own personalized Chrome, and lets them each sign in to Chrome to sync their stuff," she added.
To create a new profile on the browser, go to the Options preference page. Then go to personal stuff and youo will see the multiple user section. Add a new user to create.

TRAI raises SMS limit to 200 SMS per day

2011-11-01T16:26:00.000+05:30

Telecom consumers will now be able to send up to 200 SMSes per day from a SIM, as against the earlier limit of just 100 SMSes per day imposed by the Telecom Regulatory Authority of India (TRAI).

“The authority has received representations from some of the service providers and consumers to increase the limit of 100 SMSes per day per SIM. The authority has considered these representations and decided to increase the limit of 100 SMSes per day per SIM to 200 SMSes per day per SIM,” TRAI said in a statement on Tuesday.

To deter unsolicited SMSes by telemarketing companies, TRAI had earlier restricted the number of non-commercial SMSes that can be send from a SIM to 100. There was no restriction on commercial messages sent through telemarketing companies registered with TRAI.

The new cap of 200 SMSes per sim per day will be effective from Tuesday.

BSNL Website Hacked??

2011-10-27T15:46:00.000+05:30

In BSNL home page http://www.bsnl.co.in/ nothing changes you are going to see, but one page i.e., at http://bsnl.co.in/tender1/ you will see the web page which is saying it is has been hacked by Pakistani hacker.

I think hacker managed to access the bsnl server and he kept one html file in root folder. Also when you open that hacked page you will listen some beautiful music!! yes.

When I first visit (I think at 11.00PM) that hacked bsnl page, no music was added. But after some time (at 11.30PM) when I Reopen that hacked page I started listening music. It means that hacker still updating the html page.

The person image which is showing on hacked page is linked from facebook account that is at

https://fbcdn-sphotos-a.akamaihd.net/hphotos-ak-ash4/299579_234574613265959_100001402653501_691191_837614642_n.jpg

These type of urls are provided by facebook when you uploaded any photo’s to your profile.

The music is linked from

http://pakleets.com/muzik/khan.mp3

The hacker gave the reason why he has hacked BSNL website by saying “Indian G**** hacked our Paki sites” (you can view full message given by the hacker by clicking on the above image).

Anyway, this is not the first attack on our government websites. What you think about this type of cyber attacks? share your opinion on comments.

Update (27/10/2011):

Seems he managed to hack few other pages, you can find those hacked page here

http://www.upe.bsnl.co.in/

http://www.upe.bsnl.co.in/index.php?option=com_wrapper&view=wrapper&Itemid=7

When we researching we noticed that, he completely hacked BSNL U.P. ( Uttar Pradesh (East)) telecom circle. You can visit any bsnl upe page it will show it has been hacked.

We tried to trace hacker KhantastiC haX0r Profile here some of them (We guess)

http://www.pakhack.com/member.php?56-5IL3NT.H4CK3R

http://vimeo.com/khantastic

http://www.xtremeroot.net/Offensive/index.php?showuser=1417 (not sure)

https://www.facebook.com/KhantastiC.h4XOR (already deleted)

https://plus.google.com/117748650392334552365

source techie buzz