tag:blogger.com,1999:blog-56156185881401332692024-09-08T06:21:38.199-07:00Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comBlogger192125tag:blogger.com,1999:blog-5615618588140133269.post-51293864448288062582010-03-11T05:49:00.000-08:002010-06-07T08:40:16.555-07:00<h2><br /> <div align="center"><a href="http://i100.photobucket.com/albums/m32/ganelon9/ehcover.jpg" target="_blank"><img alt="Open in new window" border="0" class="insertimage" onload="if(this.width&gt;500) {this.resized=true; this.width=500;}" src="http://i100.photobucket.com/albums/m32/ganelon9/ehcover.jpg" title="Open in new window" /></a></div><br /> <br /> Author(s): International Council of Electronic Commerce Consultants<br /> Publisher: OSB<br /> Year: 2004<br /> ISBN: 0972936211<br /> Language: English<br /> File type: CHM<br /> Pages: 990<br /> Size (for download): 14 MB<br /> <br /> <br /> By explaining computer security and outlining methods to test computer systems for possible weaknesses, this guide to system security provides the tools necessary for approaching computers with the skill and understanding of an outside hacker. A useful tool for those involved in securing networks from outside tampering, this guide to CEH 312-50 certification provides a vendor-neutral perspective for security officers, auditors, security professionals, site admistrators, and others concerned with the integrity of network infrastructures. Complete coverage of footprinting, trojans and backdoors, sniffers, viruses and worms, and hacking Novell and Linux exposes common vulnerabilities and reveals the tools and methods used by security professionals when implementing countermeasures.<br /> <a href="http://www.blogger.com/post-edit.g?blogID=5615618588140133269&amp;postID=5129386444828806258" name="entrymore"></a><br /> <br /> If you are reading this courseware, it is quite possible that you realize the importance of information systems security. However, we would like to put forth our motive behind compiling a resource such as this one, and what you can gain from this course.<br /> <br /> You might find yourself asking, why choose this course, when there are several out there. The truth is that there cannot be any single courseware that can address all the issues in a detailed manner. Moreover, the rate at which exploits/tools/methods are being discovered by the security community makes it difficult for anybody to cover it at one go.<br /> <br /> This doesn't mean that this course is inadequate in any way.<br /> <br /> We have tried to cover all major domains in such a manner that the reader will be able to appreciate the way security has evolved over time; as well as gain insight into the fundamental workings relevant to each domain. It is a blend of academic and practical wisdom, supplemented with tools that the reader can readily access and obtain a hands-on experience. The emphasis is on gaining the know-how, and this explains the leaning towards free and accessible tools. You will read about some of the most widespread attacks seen; the popular tools used by attackers and how attacks have been carried out from ordinary resources.<br /> <br /> You may also want to know "After this course, what?" This courseware is a resource material. Any penetration tester can tell you that there is no one straight methodology or sequence of steps that you can follow while auditing a client site. There is no ONE template that will meet all your needs. Your testing strategy will vary with client, basic information enumeration, firewall penetration or other domains, you will find something in this courseware that you can definitely use.<br /> <br /> Finally, this is not the end! This courseware is to be considered as a 'work-in-progress', because we will be adding value to this courseware over time. You may find some aspects detailed, while others may find it brief. The yardstick that we have used in this respect is simple - "does the content help explain the point at hand?" This doesn't mean that we would not love to hear from you regarding your viewpoints and suggestions. Do send us your feedback so that we can make this course a more useful one.<br /> <br /> <br /> TABLE OF CONTENT:<br /> Module 01 - Introduction to Ethical Hacking<br /> Module 02 - Footprinting<br /> Module 03 - Scanning<br /> Module 04 - Enumeration<br /> Module 05 - System Hacking<br /> Module 06 - Trojans and Backdoors<br /> Module 07 - Sniffers<br /> Module 08 - Denial of Service<br /> Module 09 - Social Engineering<br /> Module 10 - Session Hijacking<br /> Module 11 - Hacking Web Servers<br /> Module 12 - Web Application Vulnerabilities<br /> Module 13 - Web Based Password Cracking Techniques<br /> Module 14 - SQL Injection<br /> Module 15 - Hacking Wireless Networks<br /> Module 16 - Viruses<br /> Module 17 - Novell Hacking<br /> Module 18 - Linux Hacking<br /> Module 19 - Evading IDS, Firewalls and Honeypots<br /> Module 20 - Buffer Overflows<br /> Module 21 - Cryptography</h2><h2><br /> </h2><h2><a href="http://rapidshare.com/files/34091716/ethicalhack.rar" target="_blank"><b>Download</b></a><br /> password:ganelon</h2><h2></h2>Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-64112529526099385902010-02-28T23:58:00.001-08:002010-06-07T08:40:34.576-07:00&nbsp;Steps:<br /> <br /> 1] Browse C:\WINDOWS\system32\drivers\etc<br /> 2] Find the file named "HOSTS"<br /> 3] Open it in notepad<br /> 4] Under "127.0.0.1 localhost" Add 127.0.0.2 www.sitenameyouwantblocked.com , and that site will no longer be accessable.<br /> 5] Done!<br /> <br /> -So-<br /> <br /> 127.0.0.1 localhost<br /> 127.0.0.2 www.blockedsite.com<br /> <br /> --&gt;www.blockedsite.com is now unaccessable&lt;--<br /> <br /> <br /> For every site after that you want to add, just add "1" to the last number in the internal ip (127.0.0.2) and then the addy like before.<br /> <br /> IE: 127.0.0.3 www.blablabla.com<br /> 127.0.0.4 www.blablabla.com<br /> 127.0.0.5 www.blablabla.com <br /> <br /> etcY.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-79758757499918056652010-02-28T23:57:00.001-08:002010-06-07T08:39:41.753-07:00copy and paste the below code into ur notepad and save it as eicar.com or any batch file with extension .bat. if ur antivirus detects and deletes it ur anti-virus is working,if not detects ur anti-virus is not working.<br /> <br /> <br /> X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-80348528465470165232010-02-28T23:53:00.000-08:002010-06-07T08:40:50.524-07:00. Open notepad.exe, type "del c:windowsprefetch tosboot-*.* /q" (without the quotes) &amp; save as "ntosboot.bat" in c:<br /> 2. From the Start menu, select "Run..." &amp; type "gpedit.msc".<br /> 3. Double click "Windows Settings" under "Computer Configuration" and double click again on "Shutdown" in the right window.<br /> 4. In the new window, click "add", "Browse", locate your "ntosboot.bat" file &amp; click "Open".<br /> 5. Click "OK", "Apply" &amp; "OK" once again to exit.<br /> 6. From the Start menu, select "Run..." &amp; type "devmgmt.msc".<br /> 7. Double click on "IDE ATA/ATAPI controllers"<br /> 8. Right click on "Primary IDE Channel" and select "Properties".<br /> 9. Select the "Advanced Settings" tab then on the device 0 or 1 that doesn't have 'device type' greyed out select 'none' instead of 'autodetect' &amp; click "OK".<br /> 10. Right click on "Secondary IDE channel", select "Properties" and repeat step 9.<br /> 11. Reboot your computer.<br /> <br /> WindowsXP should now boot REALLY faster.Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-53640716782231750852010-02-16T09:07:00.000-08:002010-02-25T22:43:24.121-08:00<b>LEGITIMATE ONLINE JOBS:</b><br /> <u>Call Center / Customer Service Jobs</u><br /> <ul><li><a href="http://alpineaccess.com/external/index.html" target="_blank">Alpine Access</a> Premier provider of customer service solutions using home-based employees. NO FEES. </li> <li><a href="http://www.brightenemployment.com/employment.aspx" target="_blank">Brighten Communications</a> A business-to-business telemarketing company specializing in the outsourcing of lead generation. The clients you will be making calls on behalf of represent professional organizations in industries such as finance, brokerage, and high-tech. </li> <li><a href="http://www.customloyal.com/Employment.aspx" target="_blank">Customer Loyalty Concepts</a> You will be contacting existing newspaper subscribers selling a variety of services. </li> <li><a href="http://www.liveops.com/" target="_blank">LiveOps</a> Outsourcing call center solutions using work at home agents. $30.00 fee for credit and background check. </li> <li><a href="http://www.westathome.com/" target="_blank">West At Home</a> West agents handle client's interaction with their customers, from customer care and live chat to email and incoming sales calls. </li> <li><a href="http://www.workingsol.com/agents_page/#" target="_blank">Working Solutions</a> A long-standing company, workingsolutions.com offers many legitimate - NO FEE - home based opportunities.</li> </ul><u>Data Entry</u><br /> <ul><li><a href="http://www.axiondata.com/employment.htm" target="_blank">Axion Data</a> Sign up as a home-working independent contractor with this long-standing company. NO FEES TO JOIN. </li> <li><a href="http://www.diondatasolutions.net/opportunities.htm" target="_blank">Dion Data Solutions</a>&nbsp;Complete an appilcation, and - if approved - you will be contacted to provide work at home data management&nbsp;services for them.&nbsp; NO FEES TO JOIN. </li> <li><a href="http://www.palmcoastdata.com/careers/" target="_blank">Palm Coast Data</a> Data entry keyers input customer information, such as names and addresses, or revise information already in the database. Work at home on your own personal computer, linked to Palm Coast Data. Currently hiring work at home keyers in Florida and Colorado.&nbsp; NO COST</li> </ul><br /> <br /> <!-- Begin: AdBrite, Generated: 2010-02-26 1:35:17&nbsp; --><br /> <script src="http://ads.adbrite.com/mb/text_group.php?sid=1544551&amp;br=1" type="text/javascript"> </script><br /> <!-- End: AdBrite --><br /> <span class="fullpost"> <br /> <br /> </span>Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-68086763861081707042010-02-09T02:06:00.001-08:002010-06-28T19:08:33.443-07:00<h2>Steps to Hack Email account password by phishing :</h2><br /> 1. First of all, to start with you need a phisher of email account. For example, if you want to hack <a class="kLink" href="http://techotips.blogspot.com/2009/06/how-to-hack-email-account-password-by.html#" id="KonaLink2" style="position: static; text-decoration: underline ! important;" target="undefined"><span style="color: blue; font-family: Georgia,&quot;Times New Roman&quot;,Times,serif; font-size: 15px; font-weight: 400; position: static;"><span class="kLink" style="color: blue; font-family: Georgia,&quot;Times New Roman&quot;,Times,serif; font-size: 15px; font-weight: 400; position: relative;">myspace</span></span></a>, you should have myspace phisher. I have explained in my article <a href="http://techotips.blogspot.com/2009/06/how-to-make-myspace-phishing-site-by.html" style="color: #3333ff;">How to make a myspace phishing site by Myspace Hacking software</a> how to obtain phisher using "phisher creator" - a software to create phishers.<br /> <br /> Download <a href="http://www.ziddu.com/download/5010234/PhishcreateV2_by_techotips.blogspot.com.rar.html"><span style="color: #3333ff;">Phisher Creator</span></a> software to hack email password.<br /> <br /> <span class="fullpost">The downloaded file is zipped and password protected. <a href="http://techotips-password.blogspot.com/2009/10/wer.html"><span style="color: #3333ff;">Click here to get the password.</span></a></span><br /> <br /> <br /> <br /> 2. Using guidelines in that article, construct a phisher. Say you want to make orkut.com phisher. Just enter <a class="linkification-ext" href="http://www.orkut.com/" title="Linkification: http://www.orkut.com">www.orkut.com</a> in text field of Phisher Creator and you will get required orkut phisher. This phisher will have :<br /> a. Index.htm and<br /> b. write.php<br /> <br /> 3. Go to <a class="linkification-ext" href="http://www.t35.com/" title="Linkification: http://www.t35.com">www.t35.com</a> - a webhosting service offering free webspace. Now, sign up to this webhost using "Orkut" or "OrkutVerification" as Username. This is very important to make phisher url match with that of orkut.<br /> <br /> <span style="color: #cc0000; font-weight: bold;">Update:</span> Many readers have reported (via comments) problems with t35.com. So, if you're having same problem, just try out 110mb.com. Thanks "tryingtolearn" for your update.<br /> Also, you can use <a href="http://yourfreehosting.net/"><span style="color: #3333ff;">http://yourfreehosting.net</span></a> for uploading your phisher (Recommended).<br /> <br /> 4. Now, after signing up, login to your account and upload the two files created in step 2 using Phisher Creator.<br /> <br /> 5. Now, sign up at Yahoo.com or gmail.com and use "Orkutsupport@gmail.com" or likewise email address while signing up. This will be email address visible to victim in his inbox. So, be careful while selecting this email address.<br /> <br /> 6. After signing up, compose mail such that it informs victim about the fact that you are a part of orkut support team and wanted to inform victim that his orkut account is accessed by illegal third party. Hence, you , as part of orkut support have mailed him to verify ownership of his orkut account by logging in his orkut account using the link provided and provide him the link of your orkut phisher ready to hack his orkut account password. You can use different logic to make him login his orkut account using our phisher.<br /> <br /> Once, the victim tries to log into his account using our provided phisher link, his orkut account password is recorded at our free webhost. Now, just go to your t35.com account control panel and see your files <span style="color: blue; font-family: Georgia,&quot;Times New Roman&quot;,Times,serif; font-size: 15px; font-weight: 400; position: static;"><span class="kLink" style="background-color: transparent; border-bottom: 1px solid blue; color: blue; font-family: Georgia,&quot;Times New Roman&quot;,Times,serif; font-size: 15px; font-weight: 400; position: relative;">database</span></span> or list. You will get their one new file created named "passes.txt". If such file is not present, try refreshing the page and you will get that file. Now, simply click on "Open" and you will get victim userid and password recorded in that file.<br /> <div style="text-align: center;"><img alt="Hack email password using orkut phishing" src="http://i969.photobucket.com/albums/ae178/rajvid99/orkutphishing1.jpg" /></div><br /> Cheers.... his orkut account password hacked... You are, thus, able to hack orkut account password.<br /> <br /> Thats it. I hope this security phishing tutorial is fullproof and you can now hack email account password using Email Phishing. I have tried to keep this email phishing tutorial simple for you to hack email account password. <br /> <div id="TixyyLink" style="background-color: transparent; border: medium none; color: black; overflow: hidden; text-align: left; text-decoration: none;"><br /> <br /> <br /> <script src="http://ads.adbrite.com/mb/text_group.php?sid=1562196&amp;br=1&amp;dk=706572736f6e616c735f305f325f776562" type="text/javascript"> </script><br /> <br /> <script src="http://ads.adbrite.com/mb/text_group.php?sid=1544551&amp;br=1" type="text/javascript"> </script></div>Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-16650187700536274042010-01-25T20:30:00.000-08:002010-06-07T08:42:44.944-07:00remove "*" and type "t" it should look like ftp: //195.135.232.80/Books/design/8.books.Maya.[by.KiN_www.netz.ru].rar<br /> <br /> 36 Graphics &amp; Design Ebooks<br /> <br /> Maya, Photoshop, Macromedia, Bryce, Digital Photography, &amp; more....<br /> <br /> Download with FlashGet<br /> <br /> f*p://195.135.232.80/Books/design/8.books.Maya.[by.KiN_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/A.Short.Course.in.Digital.Photography.[by.KiN_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Adobe.Creative.Suite.Keyboard.Shortcuts.[by.KiN_www.netz.ru]_3,1.MB.rar<br /> f*p://195.135.232.80/Books/design/Adobe.Photoshop.CS.in.10.Simple.Steps.or.Less.(2004).[by.KiN_www.netz.ru]_7,84 MB.rar<br /> f*p://195.135.232.80/Books/design/Adobe.Photoshop.Tutorial.7.Day.Course.html.a.[28.84.MB_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Advanced.3D.Photorealism.Techniques[9,76.MB_RUS_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Bill.Flemming.Advanced.3D.Photorealism.Techniques.[RUS].[by.KiN_www.netz.ru]_9,75 MB.rar<br /> f*p://195.135.232.80/Books/design/Bryce.5.Manual.[by.KiN_www.netz.ru_4.01MB].rar<br /> f*p://195.135.232.80/Books/design/Corel.103.tutorials.RUS.[by.KiN_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Designing Secure Web-Based Applications for Windows 2000.zip<br /> f*p://195.135.232.80/Books/design/DHTML.Weekend.Crash.Course[by.KiN_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Digital.Photography.Hacks.[by.KiN_www.netz.ru]_11,76.MB.rar<br /> f*p://195.135.232.80/Books/design/How.To.Do.Everything.With.Illustrator.[by.KiN_www.netz.ru]_30,58.MB.rar<br /> f*p://195.135.232.80/Books/design/How.To.Do.Everything.With.Photoshop.7.[by.KiN_www.netz.ru]_9,8 MB.rar<br /> f*p://195.135.232.80/Books/design/How.To.Draw.Anime.Photoshop.Coloring.Tips.[by.KiN_www.netz.ru]_773 kB.rar<br /> f*p://195.135.232.80/Books/design/How.To.Draw.Manga.Photoshop.Techniques.[by.KiN_www.netz.ru]_343 kB.rar<br /> f*p://195.135.232.80/Books/design/How.To.Use.Adobe.Photoshop.7.[by.KiN_www.netz.ru]_14,66 MB.rar<br /> f*p://195.135.232.80/Books/design/HTML.4.01.Weekend.Crash.Course[by.KiN_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/HTML.Complete.Course.[by.KiN_www.netz.ru]_26,79.MB.rar<br /> f*p://195.135.232.80/Books/design/Learn.How.To.Draw.[by.KiN_www.netz.ru]_1,61.MB.rar<br /> f*p://195.135.232.80/Books/design/Learn.HTML4.In.a.Weekend.[by.KiN_www.netz.ru]_11,02.MB.rar<br /> f*p://195.135.232.80/Books/design/Learning.Macromedia.FlashMX.2004[658.kB_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Macromedia.Dreamweaver.4.Bible[8,86.MB_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Macromedia.Dreamweaver.MX.2004.Web.Application.Recipes[6,5.MB_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Macromedia.Flash.MX.2004.ActionScript.Reference.Guide.rar<br /> f*p://195.135.232.80/Books/design/Macromedia.Flash.MX.2004.Using.Components.rar<br /> f*p://195.135.232.80/Books/design/Macromedia.Flashmx.Actionscript.Reference.Guide.2004[2,66.MB_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Macromedia.Flashmx.Using.Components.2004[979.kB_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Macromedia.Press.Macromedia.Dreamweaver.MX.Dynamic.Applications.[10.46.MB_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/New.Riders.Photoshop.7.Power.Shortcuts.[by.KiN_www.netz.ru]_3,5 MB.rar<br /> f*p://195.135.232.80/Books/design/NewRiders.MacromediaDreamweaverMx2004WebApplicationRecipes(6,5MB_www.netz.ru).rar f*p://195.135.232.80/Books/design/PhotoShop.&amp;.Illustrator.Tutorial.[14.37.MB_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Photoshop.6.Bible.[13.95.MB_www.netz.ru].rar f*p://195.135.232.80/Books/design/Photoshop.75.tutorial.RUS.[by.KiN_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Photoshop.CS.Tips.and.Tricks.[by.KiN_www.netz.ru].rar<br /> f*p://195.135.232.80/Books/design/Photoshop.Rus.4-18[6.5Mb,_www.netz.ru].rarY.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-57808551773986707142010-01-25T20:27:00.001-08:002010-06-07T08:43:11.172-07:001 short beep System is OK<br /> 2 short beeps POST Error - error code shown on screen No beep Power supply or system board problem Continuous beep Power supply, system board, or keyboard problem Repeating short beeps Power supply or system board problem<br /> 1 long, 1 short beep System board problem<br /> 1 long, 2 short beeps Display adapter problem (MDA, CGA)<br /> 1 long, 3 short beeps Display adapter problem (EGA)<br /> 3 long beeps 3270 keyboard card<br /> IBM POST Diagnostic Code Descriptions<br /> Code Description<br /> 100 - 199 System Board<br /> 200 - 299 Memory<br /> 300 - 399 Keyboard<br /> 400 - 499 Monochrome Display<br /> 500 - 599 Colour/Graphics Display<br /> 600 - 699 Floppy-disk drive and/or Adapter<br /> 700 - 799 Math Coprocessor<br /> 900 - 999 Parallel Printer Port<br /> 1000 - 1099 Alternate Printer Adapter<br /> 1100 - 1299 Asynchronous Communication Device, Adapter, or Port<br /> 1300 - 1399 Game Port<br /> 1400 - 1499 Colour/Graphics Printer<br /> 1500 - 1599 Synchronous Communication Device, Adapter, or Port<br /> 1700 - 1799 Hard Drive and/or Adapter<br /> 1800 - 1899 Expansion Unit (XT)<br /> 2000 - 2199 Bisynchronous Communication Adapter<br /> 2400 - 2599 EGA system-board Video (MCA)<br /> 3000 - 3199 LAN Adapter<br /> 4800 - 4999 Internal Modem<br /> 7000 - 7099 Phoenix BIOS Chips<br /> 7300 - 7399 3.5" Disk Drive<br /> 8900 - 8999 MIDI Adapter<br /> 11200 - 11299 SCSI Adapter<br /> 21000 - 21099 SCSI Fixed Disk and Controller<br /> 21500 - 21599 SCSI CD-ROM System<br /> <br /> AMI BIOS Beep Codes<br /> Code Description<br /> <br /> 1 Short Beep System OK<br /> 2 Short Beeps Parity error in the first 64 KB of memory<br /> 3 Short Beeps Memory failure in the first 64 KB<br /> 4 Short Beeps Memory failure in the first 64 KB Operational of memory<br /> or Timer 1 on the motherboard is not functioning<br /> 5 Short Beeps The CPU on the motherboard generated an error<br /> 6 Short Beeps The keyboard controller may be bad. The BIOS cannot switch to protected mode<br /> 7 Short Beeps The CPU generated an exception interrupt<br /> 8 Short Beeps The system video adapter is either missing, or its memory is faulty<br /> 9 Short Beeps The ROM checksum value does not match the value encoded in the BIOS<br /> 10 Short Beeps The shutdown register for CMOS RAM failed<br /> 11 Short Beeps The external cache is faulty<br /> 1 Long, 3 Short Beeps Memory Problems<br /> 1 Long, 8 Short Beeps Video Card Problems<br /> Phoenix BIOS Beep Codes<br /> Note - Phoenix BIOS emits three sets of beeps, separated by a brief pause.<br /> <br /> Code Description<br /> 1-1-3 CMOS read/write failure<br /> 1-1-4 ROM BIOS checksum error<br /> 1-2-1 Programmable interval timer failure<br /> 1-2-2 DMA initialisation failure<br /> 1-2-3 DMA page register read/write failure<br /> 1-3-1 RAM refresh verification failure<br /> 1-3-3 First 64k RAM chip or data line failure<br /> 1-3-4 First 64k RAM odd/even logic failure<br /> 1-4-1 Address line failure first 64k RAM<br /> 1-4-2 Parity failure first 64k RAM<br /> 2-_-_ Faulty Memory<br /> 3-1-_ Faulty Motherboard<br /> 3-2-4 Keyboard controller Test failure<br /> 3-3-4 Screen initialisation failure<br /> 3-4-1 Screen retrace test failure<br /> 3-4-2 Search for video ROM in progress<br /> 4-2-1 Timer tick interrupt in progress or failure<br /> 4-2-2 Shutdown test in progress or failure<br /> 4-2-3 Gate A20 failure<br /> 4-2-4 Unexpected interrupt in protected mode<br /> 4-3-1 RAM test in progress or failure&gt;ffffh<br /> 4-3-2 Faulty Motherboard<br /> 4-3-3 Interval timer channel 2 test or failure<br /> 4-3-4 Time of Day clock test failure<br /> 4-4-1 Serial port test or failure<br /> 4-4-2 Parallel port test or failure<br /> 4-4-3 Math coprocessor test or failure<br /> Low 1-1-2 System Board select failure<br /> Low 1-1-3 Extended CMOS RAM failureY.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-5621933594254472352010-01-25T20:26:00.001-08:002010-06-07T08:43:33.148-07:00BIOS Beep Codes<br /> <br /> When a computer is first turned on, or rebooted, its BIOS performs a power-on self test (POST) to test the system's hardware, checking to make sure that all of the system's hardware components are working properly. Under normal circumstances, the POST will display an error message; however, if the BIOS detects an error before it can access the video card, or if there is a problem with the video card, it will produce a series of beeps, and the pattern of the beeps indicates what kind of problem the BIOS has detected.<br /> Because there are many brands of BIOS, there are no standard beep codes for every BIOS.<br /> <br /> The two most-used brands are AMI (American Megatrends International) and Phoenix.<br /> <br /> Below are listed the beep codes for AMI systems, and here are the beep codes for Phoenix systems.<br /> <br /> <br /> AMI Beep Codes<br /> <br /> Beep Code Meaning<br /> 1 beep DRAM refresh failure. There is a problem in the system memory or the motherboard.<br /> 2 beeps Memory parity error. The parity circuit is not working properly.<br /> 3 beeps Base 64K RAM failure. There is a problem with the first 64K of system memory.<br /> 4 beeps System timer not operational. There is problem with the timer(s) that control functions on the motherboard.<br /> 5 beeps Processor failure. The system CPU has failed.<br /> 6 beeps Gate A20/keyboard controller failure. The keyboard IC controller has failed, preventing gate A20 from switching the processor to protect mode.<br /> 7 beeps Virtual mode exception error.<br /> 8 beeps Video memory error. The BIOS cannot write to the frame buffer memory on the video card.<br /> 9 beeps ROM checksum error. The BIOS ROM chip on the motherboard is likely faulty.<br /> 10 beeps CMOS checksum error. Something on the motherboard is causing an error when trying to interact with the CMOS.<br /> 11 beeps Bad cache memory. An error in the level 2 cache memory.<br /> 1 long beep, 2 short Failure in the video system.<br /> 1 long beep, 3 short A failure has been detected in memory above 64K.<br /> 1 long beep, 8 short Display test failure.<br /> Continuous beeping A problem with the memory or video.<br /> BIOS Beep Codes<br /> <script type="text/javascript" src="http://adhitzads.com/58696"></script><br /> <br /> Phoenix Beep Codes<br /> <br /> Phoenix uses sequences of beeps to indicate problems. The "-" between each number below indicates a pause between each beep sequence. For example, 1-2-3 indicates one beep, followed by a pause and two beeps, followed by a pause and three beeps. Phoenix version before 4.x use 3-beep codes, while Phoenix versions starting with 4.x use 4-beep codes. Click here for AMI BIOS beep codes.<br /> 4-Beep Codes<br /> Beep Code Meaning<br /> 1-1-1-3 Faulty CPU/motherboard. Verify real mode.<br /> 1-1-2-1 Faulty CPU/motherboard.<br /> 1-1-2-3 Faulty motherboard or one of its components.<br /> 1-1-3-1 Faulty motherboard or one of its components. Initialize chipset registers with initial POST values.<br /> 1-1-3-2 Faulty motherboard or one of its components.<br /> 1-1-3-3 Faulty motherboard or one of its components. Initialize CPU registers.<br /> 1-1-3-2<br /> 1-1-3-3<br /> 1-1-3-4 Failure in the first 64K of memory.<br /> 1-1-4-1 Level 2 cache error.<br /> 1-1-4-3 I/O port error.<br /> 1-2-1-1 Power management error.<br /> 1-2-1-2<br /> 1-2-1-3 Faulty motherboard or one of its components.<br /> 1-2-2-1 Keyboard controller failure.<br /> 1-2-2-3 BIOS ROM error.<br /> 1-2-3-1 System timer error.<br /> 1-2-3-3 DMA error.<br /> 1-2-4-1 IRQ controller error.<br /> 1-3-1-1 DRAM refresh error.<br /> 1-3-1-3 A20 gate failure.<br /> 1-3-2-1 Faulty motherboard or one of its components.<br /> 1-3-3-1 Extended memory error.<br /> 1-3-3-3<br /> 1-3-4-1<br /> 1-3-4-3 Error in first 1MB of system memory.<br /> 1-4-1-3<br /> 1-4-2-4 CPU error.<br /> 1-4-3-1<br /> 2-1-4-1 BIOS ROM shadow error.<br /> 1-4-3-2<br /> 1-4-3-3 Level 2 cache error.<br /> 1-4-4-1<br /> 1-4-4-2<br /> 2-1-1-1 Faulty motherboard or one of its components.<br /> 2-1-1-3<br /> 2-1-2-1 IRQ failure.<br /> 2-1-2-3 BIOS ROM error.<br /> 2-1-2-4<br /> 2-1-3-2 I/O port failure.<br /> 2-1-3-1<br /> 2-1-3-3 Video system failure.<br /> 2-1-1-3<br /> 2-1-2-1 IRQ failure.<br /> 2-1-2-3 BIOS ROM error.<br /> 2-1-2-4 I/O port failure.<br /> 2-1-4-3<br /> 2-2-1-1 Video card failure.<br /> 2-2-1-3<br /> 2-2-2-1<br /> 2-2-2-3 Keyboard controller failure.<br /> 2-2-3-1 IRQ error.<br /> 2-2-4-1 Error in first 1MB of system memory.<br /> 2-3-1-1<br /> 2-3-3-3 Extended memory failure.<br /> 2-3-2-1 Faulty motherboard or one of its components.<br /> 2-3-2-3<br /> 2-3-3-1 Level 2 cache error.<br /> 2-3-4-1<br /> 2-3-4-3 Motherboard or video card failure.<br /> 2-3-4-1<br /> 2-3-4-3<br /> 2-4-1-1 Motherboard or video card failure.<br /> 2-4-1-3 Faulty motherboard or one of its components.<br /> 2-4-2-1 RTC error.<br /> 2-4-2-3 Keyboard controller error.<br /> 2-4-4-1 IRQ error.<br /> 3-1-1-1<br /> 3-1-1-3<br /> 3-1-2-1<br /> 3-1-2-3 I/O port error.<br /> 3-1-3-1<br /> 3-1-3-3 Faulty motherboard or one of its components.<br /> 3-1-4-1<br /> 3-2-1-1<br /> 3-2-1-2 Floppy drive or hard drive failure.<br /> 3-2-1-3 Faulty motherboard or one of its components.<br /> 3-2-2-1 Keyboard controller error.<br /> 3-2-2-3<br /> 3-2-3-1<br /> 3-2-4-1 Faulty motherboard or one of its components.<br /> 3-2-4-3 IRQ error.<br /> 3-3-1-1 RTC error.<br /> 3-3-1-3 Key lock error.<br /> 3-3-3-3 Faulty motherboard or one of its components.<br /> 3-3-3-3<br /> 3-3-4-1<br /> 3-3-4-3<br /> 3-4-1-1<br /> 3-4-1-3<br /> 3-4-2-1<br /> 3-4-2-3<br /> 3-4-3-1<br /> 3-4-4-1<br /> 3-4-4-4 Faulty motherboard or one of its components.<br /> 4-1-1-1 Floppy drive or hard drive failure.<br /> 4-2-1-1<br /> 4-2-1-3<br /> 4-2-2-1 IRQ failure.<br /> 4-2-2-3<br /> 4-2-3-1<br /> 4-2-3-3<br /> 4-2-4-1 Faulty motherboard or one of its components.<br /> 4-2-4-3 Keyboard controller error.<br /> 4-3-1-3<br /> 4-3-1-4<br /> 4-3-2-1<br /> 4-3-2-2<br /> 4-3-3-1<br /> 4-3-4-1<br /> 4-3-4-3 Faulty motherboard or one of its components.<br /> 4-3-3-2<br /> 4-3-3-4 IRQ failure.<br /> 4-3-3-3<br /> 4-3-4-2 Floppy drive or hard drive failure.<br /> 3-Beep Codes<br /> Beep Code Meaning<br /> 1-1-2 Faulty CPU/motherboard.<br /> 1-1-3 Faulty motherboard/CMOS read-write failure.<br /> 1-1-4 Faulty BIOS/BIOS ROM checksum error.<br /> 1-2-1 System timer not operational. There is a problem with the timer(s) that control functions on the motherboard.<br /> 1-2-2<br /> 1-2-3 Faulty motherboard/DMA failure.<br /> 1-3-1 Memory refresh failure.<br /> 1-3-2<br /> 1-3-3<br /> 1-3-4 Failure in the first 64K of memory.<br /> 1-4-1 Address line failure.<br /> 1-4-2 Parity RAM failure.<br /> 1-4-3 Timer failure.<br /> 1-4-4 NMI port failure.<br /> 2-_-_ Any combination of beeps after 2 indicates a failure in the first 64K of memory.<br /> 3-1-1 Master DMA failure.<br /> 3-1-2 Slave DMA failure.<br /> 3-1-3<br /> 3-1-4 Interrupt controller failure.<br /> 3-2-4 Keyboard controller failure.<br /> 3-3-1<br /> 3-3-2 CMOS error.<br /> 3-3-4 Video card failure.<br /> 3-4-1 Video card failure.<br /> 4-2-1 Timer failure.<br /> 4-2-2 CMOS shutdown failure.<br /> 4-2-3 Gate A20 failure.<br /> 4-2-4 Unexpected interrupt in protected mode.<br /> 4-3-1 RAM test failure.<br /> 4-3-3 Timer failure.<br /> 4-3-4 Time of day clock failure.<br /> 4-4-1 Serial port failure.<br /> 4-4-2 Parallel port failure.<br /> 4-4-3 Math coprocessor.Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-55616257292957591392010-01-25T20:24:00.001-08:002010-06-07T08:43:49.980-07:00These settings allow you to boost the speed of your broadband Internet connection when using a Cable Modem or DSL Router with Windows 2000 and Windows XP.<br /> <br /> Open your registry and find the key below.<br /> <br /> Create the following DWORD values, as most of these values will not already exist you will need to create them by clicking on 'Edit -&gt; New -&gt; DWORD Value' and then set the value as shown below.<br /> DefaultTTL = "80" hex (or 128 decimal)<br /> Specifies the default time to live (TTL) for TCP/IP packets. The default is 32.<br /> <br /> EnablePMTUBHDetect = "0"<br /> Specifies whether the stack will attempt to detect Maximum Transmission Unit (MTU) routers that do not send back ICMP fragmentation-needed messages. The default is 0.<br /> <br /> EnablePMTUDiscovery = "1"<br /> Specifies whether the TCP/IP stack will attempt to perform path MTU discovery as specified in RFC 1191. The default is 1.<br /> <br /> GlobalMaxTcpWindowSize = "7FFF" hex (or 32767 decimal)<br /> Specifies the system maximum receive window size advertised by the TCP/IP stack.<br /> <br /> TcpMaxDupAcks = "2"<br /> Determines the number of duplicate ACKs that must be received for the same sequence number of sent data before "fast retransmit" is triggered.<br /> <br /> SackOpts = "1"<br /> Enables support for selective acknowledgements as documented by Request for Comment (RFC) 2018. Default is 0.<br /> <br /> Tcp1323Opts = "1"<br /> Controls RFC 1323 time stamps and window scaling options. Possible values are: "0" = disable RFC 1323 options, "1" = window scale enabled only, "2" = time stamps enabled only and "3" = both options enabled.<br /> <br /> TcpWindowSize = "7FFF" hex (or 32767 decimal)<br /> Specifies the receive window size advertised by the TCP/IP stack. If you have a latent network you can try increasing the value to 93440, 186880, or 372300.<br /> <br /> Exit your registry and restart Windows for the changes to take effect.<br /> <br /> If you don’t want to edit the registry, here's a little TCP utility that is ideal...<br /> <br /> <br /> http://www.broadbandreports.com/front/doctorping.zipY.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-37418079891404496342010-01-25T20:22:00.001-08:002010-06-07T08:44:24.983-07:00---Hexadecimal----------<br /> <br /> To begin, I'm going to teach you about hexadecimal, so if you already<br /> know it, then move on. Even if you do already know it, I suggest<br /> sticking around for a refreshment of your memory.=)<br /> <br /> Hexadecimal, or hex as it's more commonly known, is a base 16<br /> numbering system. Base 16 meaning that it consists of 16 numbers:<br /> 0-9 and A-F. Each of these numbers (A-F=10-16) have a value of 4 bits<br /> and are also called nibbles. In representing a hexadecimal number, one<br /> would write an "0x" before the actual bit set. 0x is simply a tag put<br /> before a hex number to let programmers know that it is in fact, hex.<br /> When writing hex, you will not need to use this prefix.<br /> <br /> If you haven't already noticed, the 0x prefix looks similar to that of exponential<br /> notation. Actually this is where 0x has been derived, seeing as how<br /> hex is simply a number that has been raised to a power of 16.<br /> This means 10 in hexadecimal represents the value 16+0, or 16. So check<br /> out this example:<br /> <br /> 0xB3 (hex)= 2*16(squared)+11*16(to the 1st power)+3*16(to the power of 0 )<br /> =2*256+11*16+3=691 (decimal)<br /> <br /> Yeah, you could do all of that, or you could be lazy and use an automated<br /> program that does it all for you. Why do you need to know hex? Because<br /> it's used by every piece of software and hardware. How? Memory based address<br /> allocation. Here's an example:<br /> <br /> When you clicked on your browsers icon to launch it, the click triggered a "call"<br /> (an asm function that will be discussed more in depth in later chapters.) which<br /> went back to the programs memory with the "click in it's hand." It finds the<br /> address where the code is that makes the program launch and executes it. The<br /> address is written in, you guessed it, hex. An example of an address would be<br /> something like this:<br /> <br /> 101c5018<br /> <br /> 5108 would be the actual specific address and 101c would be the sector<br /> of RAM were the address is located. Those are the basics of Hexadecimal<br /> You should probley read this chapter againbecause getting a firm grasp on hex<br /> is essential to cracking and moding programs.<br /> <br /> <script src="http://adhitzads.com/58696" type="text/javascript"> </script> <br /> <br /> ----------------------------------------------------------------------------------------------------------<br /> ---RAM and ROM--------<br /> <br /> In this section we are gonna learn about RAM and ROM. Many people kno about<br /> the hardware part of RAM and ROM and that's gonna be very useful to you......<br /> just not in this tutorial. =) We are about to learn about the "software" side. I use the<br /> term software loosly in that software tends to have a GUI (Graphical User Interface)<br /> and this does not. BUT, there are ways to access and modify the behavior of it that<br /> I will talk about in this chapter, as well as in the next. To start off, I'll answer some<br /> common questions:<br /> <br /> What is RAM?<br /> <br /> RAM (Random Access Memory) is basically memory and the process of accessing it.<br /> The term "Random Access Memory" was approprietly given to this memory unit because<br /> when executing a command, the CPU doesn't have to scroll through all the memory on<br /> your PC until it finds the right address. It "randomly" whips out the addy from it's back<br /> pocket and serves it up.This process is both quick and efficient. Learning this process<br /> will help you understand the ASM functions in the next chapter.<br /> <br /> How does RAM work?<br /> <br /> When a command is issued and the memory is pulled from file, it must first go through<br /> what is called a "vector". A vector is a "gateway" or a "sector" of RAM where the address<br /> of the function is stored with others of it's own kind. An example of a vector would be<br /> something like this:<br /> <br /> 8c0000b4-8c00ffff<br /> <br /> This means that all "addressii" (hehe) that are between those values are stored in that<br /> sector of RAM. A vector acts as a gateway in that, first, pass through a vector to get to<br /> address. Your average program probley has about 30 to 40 main vectors, sectioning<br /> off from boot until exit. Knowing the vector of an addy or a function will greatly reduce<br /> your headache when you start searching for it.<br /> <br /> ROM. ROM is a part of memory that doesn't change. (Although we can change it.=) )<br /> Boot ROM for instance, follows the same plan of action it is called upon. ROM also has<br /> vectors, just like RAM. ROM is not that important when it comes to cracking to we will<br /> leave it alone for now.<br /> <br /> Back to RAM. Believe it or not, but addressii (there I go again, I'm such a g33k.)<br /> actually follow certain formats or syntax's for certain functions. Take hot keys for<br /> example: In the under ground, we call them "Joker commands". By pressing a certain<br /> combonation of keys, a program will run, close, be stupid, whatever. The syntax for a<br /> Joker command is as follows:<br /> <br /> 0d-aaaaaf<br /> 000zvvvv<br /> <br /> Let's examine this format a little closer.<br /> <br /> 0d= The proclemation of a specifyed format<br /> <br /> aaaaa= The address of the function<br /> <br /> f= The float or remainder; "Floating point number" ; decimal<br /> <br /> 000= "NOP" No operation<br /> <br /> z= The "Booleon" as we the C++ programmers call it. A booleon is an "IF, THEN" statement.<br /> "IF this is true, THEN do this." Value 0= equal; 1= different; 2=less than; 3=greater than.<br /> <br /> vvvv= The combonation of hex values (The values of the keys pressed) used to execute the "CALL"<br /> <br /> Say the "A" key had a vlaue of fffb and the "B" key has a vlaue of fffd. You would then add both<br /> values using a hex calculator and get fff9 as the sum. The output on you calculator would<br /> show 1fff8. Add the first value and the last value to find the fourth byte segment. So say<br /> we've found the address of the Joker function (usually in the boot ROM sector) commonly<br /> called the "Maple address" and we are ready to program in some hex code. Our code may<br /> look like this:<br /> <br /> 0d7ae671<br /> 0000fff9<br /> <br /> This means that IF the value of fff9 (A and B) is equal (0) to the address (aaaaf) of the function,<br /> THEN execute it. See? Easy isn't it? You'll need to know things like this when modding programs<br /> as a use of executing of your arbitrary code in certain parts of your program at a certain time.<br /> Joker commands are also reversable in that if you enter the same code except with a 1,2, or 3,<br /> in the z slot and by changing the button combonations. Reversable meaning terminating the<br /> function or other functions that were started. A good use for this is for firewalls and babysitting<br /> programs. Are you on a college machine and can't download stuff because of that pesky firewall?<br /> Crack it open and program in some Joker commands so you can turn it on and off at will<br /> WITHOUT the administrator's password!<br /> --------------------------------------------------------------------------------------------------------------<br /> ---ASM-----------------------<br /> <br /> To start off with our small and to the point ASM section, I'll warn you in advance, after reading this,<br /> you'll need to go take a shower cause this is disgusting! Here we go!<br /> <br /> To begin, I'm gonna define for you some functions that you'll be seeing alot of, and be using. Here they are:<br /> <br /> .:Hex:. .:ASM:. .:MEANING:.<br /> <br /> 75,0f85 jne jump if not equal<br /> 74,0f84 je jump is equal<br /> eb jmp jump directly to<br /> 90 nop no operation<br /> 77,0f87 ja jump if above<br /> 0f86 jna jump if not above<br /> 0f83 jae jump if above or equal to<br /> 0f82 jnae jump if not above or equal<br /> 0f82 jb jump if below<br /> 0f83 jnb jump is not below<br /> of86 jbe jump if below or equal<br /> 0f87 jnbe jump if not below or equal<br /> 0f8f jg jump if greater<br /> 0f8e jng jump if not greater<br /> 0f8d jge jump if greater or equal<br /> 0f8c jnge jump if not greater or equal<br /> 0f8c jl jump if less<br /> 0f8d jnl jump if not less<br /> 0f8e jle jump if less or equal<br /> 0f8f jnle jump if not less or equal<br /> <br /> The easy thing about most of the functions in ASM are that they sound like what they mean.<br /> Jump, means of coarse, to Jump from one thing to another. Example:<br /> <br /> "jmp 00401744" would mean to jump directly to the address 00401744 once the code<br /> hits the function.<br /> <br /> Let's look at "CALL". Call is a function that is used to "call" a certain task, string, address, whatever.<br /> Take a look at this example:<br /> <br /> "Call 0040ccc2" this would of coarse call the address 0040ccc2 and use it. Those are the functions<br /> you'll be using.<br /> <br /> The reason why I'm not going into loads of detail in this chapter is because when<br /> cracking software, not an extensive amount of knowledge of ASM is needed. If you want<br /> to know more or need help with something, e-mail me at the address provided at the end of<br /> this tutorial. This chapter wasn't so nasty was it? Nah, it was easy =)<br /> ------------------------------------------------------------------------------------------------------------------------<br /> ---Needed Programs----------------<br /> <br /> The programs you will need are as follows:<br /> <br /> WDasm 8.9 or Higher<br /> Hiew 6.1<br /> Softice for win9x v3.24<br /> SubmitWolf(demo)v4.01 (http://www.trellian.com/swolf)<br /> Programming Language (C,C++,Pascal,ASM whatever you would like) Prefably C for this tutorial!<br /> And a brain (no seriously)<br /> --------------------------------------------------------------------------------------------------------------------------<br /> ---Cracking-----------------------------<br /> <br /> <br /> Ok, here we go! The first thing you need to do is to open up SoftIce and then swolf32.exe which is the name given to our<br /> target program. Go to the help menu and select register. Here's where your brain will come in, start to look<br /> for how the protection is running by entering some random crap into the blank space. Don't press the OK button yet though.<br /> Instead, press CTRL-D to bring up SoftIce. What we are gonna try to do is define a breakpoint, using BPX hmemcpy.<br /> Hit CTRL-D again and it will bring you back to the program. Click OK on the box and SoftIce will again pop up. Now press F12<br /> and it will bring you to the target program code. Scroll down a few lines and find:<br /> <br /> :004167D9 8D4C2410 lea ecx, dword ptr {esp+10}--;ecx=the random crap you typed in.<br /> :004167DD 8D94290000000 lea edx, dword ptr {esp+00000090}-;edx=name<br /> :004167E4 51 push ecx<br /> :004167E5 52 push edx<br /> :004167E6 E8B5450100 call 0042ADA0----;this is the call which calculates the serial<br /> :004167EB 83C410 add esp, 00000010--;<br /> :004167EE 85C0 test eax, eax----;and return eax=1 if true (booleon =) )<br /> :004167F0 0F8596000000 jne 0041688C----;jump to registered<br /> :004167F6 8D442408 lea eax, dword ptr {esp+08}<br /> :004167FA 8D8C2488000000 lea ecx, dword ptr {esp+00000088}<br /> :00416801 50 push eax<br /> :00416802 51 push ecx<br /> :00416803 E868470100 call 0042AF70----;this call tests our serial<br /> :00416808 83C408 add esp, 00000008---;<br /> :0041680B 85C0 test eax, eax----;for v3.XX one.<br /> :0041680D 7433 je 00416842;jump is equal<br /> <br /> The call that we want to focas on is at 004167E6. This call tests wether our serial is for the correct version or not.<br /> Let's trace the call 004ADA0:<br /> <br /> *Referenced by a CALL at address:<br /> :0042ABFC<br /> :0042ADA 83EC30 sub esp, 00000030<br /> :0042ADA3 55 push ebp<br /> :0042ASA4 56 push esi<br /> :004ADA5 57 push edi<br /> :0042ADA6 8B7C24444 mov edi, dword ptr {esp+44}--;edi=our fake serial<br /> :004ADAA 85FF test edi, edi<br /> :004ADAC 0F4A7010000 je 0042AF59----;die if empty<br /> :004ADB2 8B6C2440 mov ebp, dword ptr {esp+40}--ebp=our name<br /> :0042ADB6 85ED test ebp, ebp<br /> :004ADB8 0F849B010000 je 0042AF59---;die if empty<br /> :004ADBE 8A07 mov al, byte ptr {edi}--;compare 1st byte of serial with 'p', die<br /> :0042ADC0 3C50 cmp al, 50----;<br /> :0042ADC2 0F8587010000 jne 0042AF4F----;if not equal<br /> :0042ADC8 807F0134 cmp byte ptr {edi+01}, 34--:compare byte of serial with '4'<br /> :004ADCC 750C jne 0042ADDA----;<br /> :0042ADCE C70500C8430000000000 mov dword ptr {0043C800}, 00000000<br /> :0042ADD8 EB1C jmp 0042ADF6<br /> <br /> As we can see by the above, the code tells us that the first value of our serial will<br /> be 'p' and a cycle of a four byte algorythm. I could go on and on about all of the internals<br /> of all this stuff but that would be going beyond the scope of this tutorial. The idea was to show<br /> how to crack this pro, and thats what I'm going to do. Based on the information I've given you, and the<br /> information that you can deduce from reading the code, I've written a small key generator in C.<br /> If you know C, then you'll be able to tell where i got the algorythms to write it. So here it is:<br /> <br /> #include<stdio.h><br /> #include<conio.h><br /> <br /> int main(void)<br /> {<br /> long code=555583,count1,count2;<br /> char name[25],cod[5],type='0';<br /> clrscr();<br /> textcolor(14);<br /> printf("This is a simple key-generator written by k33t of CYBNET Security Group");<br /> printf("=================================================");<br /> text color(10);<br /> printf("SubmitWolf(demo)ver4.1 cracked by k33t");<br /> textcolor(14);<br /> printf("%c%c%c",0x10,0x10,0x10");<br /> textcolor(12);<br /> printf("Yup")<br /> prinf("-November 2002");<br /> prinf("'\n\nSelect Edition PRO(0) or Enterprise(1) (0/1)=");<br /> scanf("%c",&amp;type);<br /> if(type=='1')code=557283;<br /> getchar();<br /> prinf("Enter Registration Name=");<br /> scanf("%[^\n]",name);<br /> for(count1=0;count1&lt;=3;count1++<br /> cod[count1]=name[count1];<br /> for(count=1;count1=3;count1++){<br /> for(count2=0;count2&lt;=3;count2++)<br /> cod[count2]=cod[count2]*(code%100);<br /> code=code/100;<br /> }<br /> for(count1=0;name[count1]&gt;0;count1++);<br /> for(count2=0;count2&lt;=3;count2++)<br /> cod[count2]=cod[count2]^(name[count1]+3);<br /> for=(count1-3;count1&gt;=0;count1--){<br /> code=code+(cod[count1]&amp;0xFF);<br /> if(count1&gt;0)<br /> code=code*0x100;<br /> }<br /> if(code&lt;0)code=-code;<br /> for(;code&lt;10000;) code=code*10;<br /> for(;code&gt;999999;) code=code/10;<br /> printf(Your Serial Number=P%c4-%ld",(type=='1')? 'E':'4'code);<br /> return ;<br /> }<br /> <br /> Ok! So! An overall conclusion of this code is:<br /> <br /> 1.First two characters of the serial must be either 'PE' or 'P4'.<br /> 2.Multiply every first four characters or our name with every byte of our serial before '-'<br /> 3.XOR every four byte with every byte of our name.<br /> 4.Convert to positive number if&lt;0.<br /> 5.Convert to number between 10000 and 1000000.<br /> <br /> <br /> </conio.h></stdio.h>Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-25055310386111501372010-01-25T20:21:00.001-08:002010-05-02T07:31:33.647-07:00Ever experienced this? You ask Google to look something up; the engine returns with a number of finds, but if you try to open the ones with the most promising content, you are confronted with a registration page instead, and the stuff you were looking for will not be revealed to you unless you agree to a credit card transaction first....<br /> The lesson you should have learned here is: Obviously Google can go where you can't.<br /> <br /> Can we solve this problem? Yes, we can. We merely have to convince the site we want to enter, that WE ARE GOOGLE.<br /> In fact, many sites that force users to register or even pay in order to search and use their content, leave a backdoor open for the Googlebot, because a prominent presence in Google searches is known to generate sales leads, site hits and exposure.<br /> Examples of such sites are Windows Magazine, .Net Magazine, Nature, and many, many newspapers around the globe.<br /> How then, can you disguise yourself as a Googlebot? Quite simple: by changing your browser's User Agent. Copy the following code segment and paste it into a fresh notepad file. Save it as Useragent.reg and merge it into your registry.<br /> <br /> Windows Registry Editor Version 5.00<br /> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent]<br /> @="Googlebot/2.1"<br /> "Compatible"="+http://www.googlebot.com/bot.html"<br /> <br /> Voila! You're done!<br /> <br /> <script src="http://adhitzads.com/58696" type="text/javascript"> </script><br /> <br /> You may always change it back again.... I know only one site that uses you User Agent to establish your eligability to use its services, and that's the Windows Update site...<br /> To restore the IE6 User Agent, save the following code to NormalAgent.reg and merge with your registry:<br /> <br /> Windows Registry Editor Version 5.00<br /> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent]<br /> @="Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"<br /> <br /> Ps:<br /> Opera allows for on-the-fly switching of User Agents through its "Browser Identification" function, while for Mozilla/FireFox browsers a switching utility is available as an installable extension from this url:<br /> help://chrispederick.myacen.com/work/firefox/useragentswitcher/download/Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-88270985768239376572010-01-25T20:19:00.001-08:002010-01-25T20:19:11.331-08:00Hand type the following prefixes and note their utility:<br /> <br /> link:url Shows other pages with links to that url.<br /> <br /> related:url same as "what's related" on serps.<br /> <br /> site:domain restricts search results to the given domain.<br /> <br /> allinurl: shows only pages with all terms in the url.<br /> <br /> inurl: like allinurl, but only for the next query word.<br /> <br /> allintitle: shows only results with terms in title.<br /> <br /> intitle: similar to allintitle, but only for the next word. "intitle:webmasterworld google" finds only pages with webmasterworld in the title, and google anywhere on the page.<br /> <br /> cache:url will show the Google version of the passed url.<br /> <br /> info:url will show a page containing links to related searches, backlinks, and pages containing the url. This is the same as typing the url into the search box.<br /> <br /> spell: will spell check your query and search for it.<br /> <br /> stocks: will lookup the search query in a stock index.<br /> <br /> filetype: will restrict searches to that filetype. "-filetype:doc" to remove Microsoft word files.<br /> <br /> daterange: is supported in Julian date format only. 2452384 is an example of a Julian date.<br /> <br /> maps: If you enter a street address, a link to Yahoo Maps and to MapBlast will be presented.<br /> <br /> phone: enter anything that looks like a phone number to have a name and address displayed. Same is true for something that looks like an address (include a name and zip code)<br /> <br /> site:www.somesite.net "+www.somesite.+net"<br /> (tells you how many pages of your site are indexed by google)<br /> <br /> allintext: searches only within text of pages, but not in the links or page title<br /> <br /> allinlinks: searches only within links, not text or titleY.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-37913088631606844092010-01-25T20:18:00.001-08:002010-05-02T07:31:46.646-07:00Windows 2k/XP<br /> <br /> <script src="http://adhitzads.com/58696" type="text/javascript"> </script><br /> <br /> 1. First, open the Windows Registry using Regedit, and (after backing up) navigate to:<br /> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\ServiceProvider<br /> 2. Note the following lines (all hex dwords):<br /> Class = 008 ( biggrin.gif - indicates that TCP/IP is a name service provider, don't change<br /> LocalPriority = 1f3 (499) - local names cache<br /> HostsPriority = 1f4 (500) - the HOSTS file<br /> DnsPriority = 7d0 (2000) - DNS<br /> NetbtPriority = 7d1 (2001) - NetBT name-resolution, including WINS<br /> 3. What we're aiming to do is increase the priority of the last 4 settings, while keeping their order. The valid range is from -32768 to +32767 and lower numbers mean higher priority compared to other services. What we're aiming at is lower numbers without going to extremes, something like what's shown below should work well:<br /> 4. Change the "Priority" lines to:<br /> LocalPriority = 005 (5) - local names cache<br /> HostsPriority = 006 (6) - the HOSTS file<br /> DnsPriority = 007 (7) - DNS<br /> NetbtPriority = 008 ( biggrin.gif - NetBT name-resolution, including WINS<br /> 5. Reboot for changes to take effect<br /> <br /> 2. Windows 9x/ME<br /> <br /> 1. The tweak is essentialy the same as in Windows 2000/XP, just the location in the Registry is slightly different. For a more detailed description see the Windows 2000/XP section above<br /> 2. Open the Windows Registry using Regedit, and (after backing up) navigate to:<br /> HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\MSTCP\ServiceProvider<br /> 3. You should see the following settings:<br /> Class=hex:08,00,00,00<br /> <br /> LocalPriority=hex:f3,01,00,00<br /> HostsPriority=hex:f4,01,00,00<br /> DnsPriority=hex:d0,07,00,00<br /> NetbtPriority=hex:d1,07,00,00<br /> 4. The "priority" lines should be changed to:<br /> LocalPriority=hex:05,00,00,00<br /> HostsPriority=hex:06,00,00,00<br /> DnsPriority=hex:07,00,00,00<br /> NetbtPriority=hex:08,00,00,00<br /> 5. Reboot for changes to take effect<br /> <br /> 3. System.ini IRQ Tweak - Windows 9x/ME ONLY<br /> <br /> 1. Find your Network Card's IRQ<br /> <br /> 1. In order to add the entry to your System.ini file, you'd first have to find your NIC's IRQ<br /> 2. Right-click on My Computer icon on your Desktop, then left-click on Properties (a shortcut for that would be to press the 'Windows' + 'Pause' keys). Navigate to Device Manager and double-click on Computer. Under "View Resources" you will find a list of IRQs, each with description of the device that's using it. Note the IRQ number used by your Network Adapter<br /> <br /> 2. Adding the entry to System.ini<br /> <br /> 1. Once you've found the IRQ of your Network Card, you need to reserve some RAM for its use, by adding an entry to the System.ini file. You can edit the file in any text editor, however the easiest way is to use Windows' built in "System Configuration Editor"<br /> 2. Navigate to Start &gt; Run and type sysedit . Find the [386enh] Section in the System.ini file and add Irq[n]=4096 under it, where [n] is the IRQ number of your NIC and 4096 is the amount of RAM you want to reserve in Kbytes. We recommend using 4096, however you can experiment with different values if you want. Save changes in the file, exit and reboot for changes to take effect.<br /> Note: If you choose to try different values, keep in mind that reserving too much RAM for your NIC will decrease the amount of RAM available for applications, while reserving too little might not give the desired effect<br /> <br /> 3. Additional Thoughts<br /> 1. The only negative effect of the System.ini IRQ tweak is that it will reduce the amount of RAM available for running applications a bit, by reserving some specifically for your Network Card's use. The gain in performance usually outweighs the negative effect by far, considering any Computer with 32Mb of RAM or more<br /> 2. This tweak may or may not work for you. It is not a documented tweak by Windows<br /> 3. Keep in mind that if you add hardware to your system the IRQ of the Network Adapter might change, in which case you will need to modify the setting in System.ini<br /> 4. In systems with multiple NICs, you might want to add the setting for both IRQs. Also, you could reserve RAM for other IRQs if you wish, just use common sense and don't forget it reduces the amount of RAM available for running applications<br /> 5. If you are using an USB device, it does not have a specific IRQ, however you can try adding the entry using the IRQ of the USB Controller<br /> 6. For internal Cable Modems, you'd have to add the entry using the IRQ of your modem, rather than the IRQ of a Network Card<br /> <br /> <br /> <br /> RESULTS WILL VARY<br /> No matter how good your systems may be, they're only as effective as what you put into themY.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-11681236845824688712010-01-25T20:17:00.001-08:002010-05-02T07:32:01.728-07:00Stop A Restart Process In 3steps<br /> <br /> Some times we need to stop some restart process quickly. In windows XP some times it gives auto restart warning and here is good solution for it.<br /> <br /> <script src="http://adhitzads.com/58696" type="text/javascript"> </script><br /> <br /> 1. Go to Start menu<br /> 2. Click on RUN<br /> 3. Enter the following command excluding hashcodes "shutdown -a"<br /> <br /> its Done.Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-63294770127077693692010-01-25T20:16:00.001-08:002010-01-25T20:16:12.732-08:00Standard ASCII Character Set= For Bytes<br /> The first 32 values (0 through 31) are codes for things like carriage return and line feed. The space character is the 33rd value, followed by punctuation, digits, uppercase characters and lowercase characters.<br /> <br /> &nbsp; 0&nbsp;&nbsp; NUL<br /> &nbsp; 1&nbsp;&nbsp; SOH<br /> &nbsp; 2&nbsp;&nbsp; STX<br /> &nbsp; 3&nbsp;&nbsp; ETX<br /> &nbsp; 4&nbsp;&nbsp; EOT<br /> &nbsp; 5&nbsp;&nbsp; ENQ<br /> &nbsp; 6&nbsp;&nbsp; ACK<br /> &nbsp; 7&nbsp;&nbsp; BEL<br /> &nbsp; 8&nbsp;&nbsp; BS<br /> &nbsp; 9&nbsp;&nbsp; TAB<br /> &nbsp;10&nbsp;&nbsp; LF<br /> &nbsp;11&nbsp;&nbsp; VT<br /> &nbsp;12&nbsp;&nbsp; FF<br /> &nbsp;13&nbsp;&nbsp; CR<br /> &nbsp;14&nbsp;&nbsp; SO<br /> &nbsp;15&nbsp;&nbsp; SI<br /> &nbsp;16&nbsp;&nbsp; DLE<br /> &nbsp;17&nbsp;&nbsp; DC1<br /> &nbsp;18&nbsp;&nbsp; DC2<br /> &nbsp;19&nbsp;&nbsp; DC3<br /> &nbsp;20&nbsp;&nbsp; DC4<br /> &nbsp;21&nbsp;&nbsp; NAK<br /> &nbsp;22&nbsp;&nbsp; SYN<br /> &nbsp;23&nbsp;&nbsp; ETB<br /> &nbsp;24&nbsp;&nbsp; CAN<br /> &nbsp;25&nbsp;&nbsp; EM<br /> &nbsp;26&nbsp;&nbsp; SUB<br /> &nbsp;27&nbsp;&nbsp; ESC<br /> &nbsp;28&nbsp;&nbsp; FS<br /> &nbsp;29&nbsp;&nbsp; GS<br /> &nbsp;30&nbsp;&nbsp; RS<br /> &nbsp;31&nbsp;&nbsp; US<br /> &nbsp;32<br /> &nbsp;33&nbsp;&nbsp; !<br /> &nbsp;34&nbsp;&nbsp; "<br /> &nbsp;35&nbsp;&nbsp; #<br /> &nbsp;36&nbsp;&nbsp; $<br /> &nbsp;37&nbsp;&nbsp; %<br /> &nbsp;38&nbsp;&nbsp; &amp;<br /> &nbsp;39&nbsp;&nbsp; '<br /> &nbsp;40&nbsp;&nbsp; (<br /> &nbsp;41&nbsp;&nbsp; )<br /> &nbsp;42&nbsp;&nbsp; *<br /> &nbsp;43&nbsp;&nbsp; +<br /> &nbsp;44&nbsp;&nbsp; ,<br /> &nbsp;45&nbsp;&nbsp; -<br /> &nbsp;46&nbsp;&nbsp; .<br /> &nbsp;47&nbsp;&nbsp; /<br /> &nbsp;48&nbsp;&nbsp; 0<br /> &nbsp;49&nbsp;&nbsp; 1<br /> &nbsp;50&nbsp;&nbsp; 2<br /> &nbsp;51&nbsp;&nbsp; 3<br /> &nbsp;52&nbsp;&nbsp; 4<br /> &nbsp;53&nbsp;&nbsp; 5<br /> &nbsp;54&nbsp;&nbsp; 6<br /> &nbsp;55&nbsp;&nbsp; 7<br /> &nbsp;56&nbsp;&nbsp; 8<br /> &nbsp;57&nbsp;&nbsp; 9<br /> &nbsp;58&nbsp;&nbsp; :<br /> &nbsp;59&nbsp;&nbsp; ;<br /> &nbsp;60&nbsp;&nbsp; &lt;<br /> &nbsp;61&nbsp;&nbsp; =<br /> &nbsp;62&nbsp;&nbsp; &gt;<br /> &nbsp;63&nbsp;&nbsp; ?<br /> &nbsp;64&nbsp;&nbsp; @<br /> &nbsp;65&nbsp;&nbsp; A<br /> &nbsp;66&nbsp;&nbsp; B<br /> &nbsp;67&nbsp;&nbsp; C<br /> &nbsp;68&nbsp;&nbsp; D<br /> &nbsp;69&nbsp;&nbsp; E<br /> &nbsp;70&nbsp;&nbsp; F<br /> &nbsp;71&nbsp;&nbsp; G<br /> &nbsp;72&nbsp;&nbsp; H<br /> &nbsp;73&nbsp;&nbsp; I<br /> &nbsp;74&nbsp;&nbsp; J<br /> &nbsp;75&nbsp;&nbsp; K<br /> &nbsp;76&nbsp;&nbsp; L<br /> &nbsp;77&nbsp;&nbsp; M<br /> &nbsp;78&nbsp;&nbsp; N<br /> &nbsp;79&nbsp;&nbsp; O<br /> &nbsp;80&nbsp;&nbsp; P<br /> &nbsp;81&nbsp;&nbsp; Q<br /> &nbsp;82&nbsp;&nbsp; R<br /> &nbsp;83&nbsp;&nbsp; S<br /> &nbsp;84&nbsp;&nbsp; T<br /> &nbsp;85&nbsp;&nbsp; U<br /> &nbsp;86&nbsp;&nbsp; V<br /> &nbsp;87&nbsp;&nbsp; W<br /> &nbsp;88&nbsp;&nbsp; X<br /> &nbsp;89&nbsp;&nbsp; Y<br /> &nbsp;90&nbsp;&nbsp; Z<br /> &nbsp;91&nbsp;&nbsp; [<br /> &nbsp;92&nbsp;&nbsp; \<br /> &nbsp;93&nbsp;&nbsp; ]<br /> &nbsp;94&nbsp;&nbsp; ^<br /> &nbsp;95&nbsp;&nbsp; _<br /> &nbsp;96&nbsp;&nbsp; `<br /> &nbsp;97&nbsp;&nbsp; a<br /> &nbsp;98&nbsp;&nbsp; b<br /> &nbsp;99&nbsp;&nbsp; c<br /> 100&nbsp;&nbsp; d<br /> 101&nbsp;&nbsp; e<br /> 102&nbsp;&nbsp; f<br /> 103&nbsp;&nbsp; g<br /> 104&nbsp;&nbsp; h<br /> 105&nbsp;&nbsp; i<br /> 106&nbsp;&nbsp; j<br /> 107&nbsp;&nbsp; k<br /> 108&nbsp;&nbsp; l<br /> 109&nbsp;&nbsp; m<br /> 110&nbsp;&nbsp; n<br /> 111&nbsp;&nbsp; o<br /> 112&nbsp;&nbsp; p<br /> 113&nbsp;&nbsp; q<br /> 114&nbsp;&nbsp; r<br /> 115&nbsp;&nbsp; s<br /> 116&nbsp;&nbsp; t<br /> 117&nbsp;&nbsp; u<br /> 118&nbsp;&nbsp; v<br /> 119&nbsp;&nbsp; w<br /> 120&nbsp;&nbsp; x<br /> 121&nbsp;&nbsp; y<br /> 122&nbsp;&nbsp; z<br /> 123&nbsp;&nbsp; {<br /> 124&nbsp;&nbsp; |<br /> 125&nbsp;&nbsp; }<br /> 126&nbsp;&nbsp; ~<br /> 127&nbsp;&nbsp; DEL<br /> <br /> Name<br /> &nbsp;&nbsp; <br /> Abbr.<br /> &nbsp;&nbsp; <br /> Size<br /> Kilo<br /> &nbsp;&nbsp; <br /> K<br /> &nbsp;&nbsp; <br /> 2^10 = 1,024<br /> Mega<br /> &nbsp;&nbsp; <br /> M<br /> &nbsp;&nbsp; <br /> 2^20 = 1,048,576<br /> Giga<br /> &nbsp;&nbsp; <br /> G<br /> &nbsp;&nbsp; <br /> 2^30 = 1,073,741,824<br /> Tera<br /> &nbsp;&nbsp; <br /> T<br /> &nbsp;&nbsp; <br /> 2^40 = 1,099,511,627,776<br /> Peta<br /> &nbsp;&nbsp; <br /> P<br /> &nbsp;&nbsp; <br /> 2^50 = 1,125,899,906,842,624<br /> Exa<br /> &nbsp;&nbsp; <br /> E<br /> &nbsp;&nbsp; <br /> 2^60 = 1,152,921,504,606,846,976<br /> Zetta<br /> &nbsp;&nbsp; <br /> Z<br /> &nbsp;&nbsp; <br /> 2^70 = 1,180,591,620,717,411,303,424<br /> Yotta<br /> &nbsp;&nbsp; <br /> Y<br /> &nbsp;&nbsp; <br /> 2^80 = 1,208,925,819,614,629,174,706,176Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-14661984016037637402010-01-18T06:07:00.001-08:002010-01-18T06:07:24.861-08:00Yes, firefox is already pretty damn fast but did you know that you can tweak it and improve the speed even more?<br /> <br /> That's the beauty of this program being open source.<br /> Here's what you do:<br /> In the URL bar, type “about:config” and press enter. This will bring up the configuration “menu” where you can change the parameters of Firefox.<br /> <br /> Note that these are what I’ve found to REALLY speed up my Firefox significantly - and these settings seem to be common among everybody else as well. But these settings are optimized for broadband connections - I mean with as much concurrent requests we’re going to open up with pipelining… lol… you’d better have a big connection.<br /> <br /> Double Click on the following settins and put in the numbers below - for the true / false booleans - they’ll change when you double click.<br /> <br /> Code:<br /> browser.tabs.showSingleWindowModePrefs – true<br /> network.http.max-connections – 48<br /> network.http.max-connections-per-server – 16<br /> network.http.max-persistent-connections-per-proxy – 8<br /> network.http.max-persistent-connections-per-server – 4<br /> network.http.pipelining – true<br /> network.http.pipelining.maxrequests – 100<br /> network.http.proxy.pipelining – true<br /> network.http.request.timeout – 300<br /> <br /> <br /> One more thing… Right-click somewhere on that screen and add a NEW -&gt; Integer. Name it “nglayout.initialpaint.delay” and set its value to “0”. This value is the amount of time the browser waits before it acts on information it receives. Since you’re broadband - it shouldn’t have to wait.<br /> <br /> Now you should notice you’re loading pages MUCH faster now!Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-16504344500606697702010-01-18T06:05:00.001-08:002010-01-18T06:05:34.498-08:00method 1<br /> ?ww.google.com<br /> <br /> put this string in google search:<br /> <br /> "parent directory " /appz/ -xxx -html -htm -php -shtml -opendivx -md5 -md5sums<br /> <br /> "parent directory " DVDRip -xxx -html -htm -php -shtml -opendivx -md5 -md5sums<br /> <br /> "parent directory "Xvid -xxx -html -htm -php -shtml -opendivx -md5 -md5sums<br /> <br /> "parent directory " Gamez -xxx -html -htm -php -shtml -opendivx -md5 -md5sums<br /> <br /> "parent directory " MP3 -xxx -html -htm -php -shtml -opendivx -md5 -md5sums<br /> <br /> "parent directory " Name of Singer or album -xxx -html -htm -php -shtml -opendivx -md5 -md5sums<br /> <br /> Notice that i am only changing the word after the parent directory, change it to what you want and you will get a lot of stuff.<br /> <br /> voila!<br /> <br /> method 2<br /> ?ww.google.com<br /> <br /> put this string in google search:<br /> <br /> ?intitle:index.of? mp3<br /> <br /> You only need add the name of the song/artist/singer.<br /> Example: ?intitle:index.of? mp3 jacksonY.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-19904031941480260342010-01-18T06:03:00.001-08:002010-05-02T07:32:18.264-07:00Chapter 4: Hacking Webpages<br /> <br /> Getting the Password File Through FTP<br /> <br /> Ok well one of the easiest ways of getting superuser access is through<br /> anonymous ftp access into a webpage. First you need learn a little about<br /> the password file...<br /> <br /> root:User:d7Bdg:1n2HG2:1127:20:Superuser<br /> TomJones:p5Y(h0tiC:1229:20:Tom Jones,:/usr/people/tomjones:/bin/csh<br /> BBob:EUyd5XAAtv2dA:1129:20:Billy Bob:/usr/people/bbob:/bin/csh<br /> <br /> This is an example of a regular encrypted password file. The Superuser is<br /> the part that gives you root. That's the main part of the file.<br /> <br /> root:x:0:1:Superuser:/:<br /> ftp:x:202:102:Anonymous ftp:/u1/ftp:<br /> ftpadmin:x:203:102:ftp Administrator:/u1/ftp<br /> <br /> &nbsp;<script src="http://adhitzads.com/58696" type="text/javascript"> </script> <br /> <br /> This is another example of a password file, only this one has one little<br /> difference, it's shadowed. Shadowed password files don't let you view or<br /> copy the actual encrypted password.&nbsp; This causes problems for the password<br /> cracker and dictionary maker(both explained later in the text). Below is<br /> another example of a shadowed password file:<br /> <br /> root:x:0:1:0000-Admin(0000):/:/usr/bin/csh<br /> daemon:x:1:1:0000-Admin(0000):/:<br /> bin:x:2:2:0000-Admin(0000):/usr/bin:<br /> sys:x:3:3:0000-Admin(0000):/:<br /> adm:x:4:4:0000-Admin(0000):/var/adm:<br /> lp:x:71:8:0000-lp(0000):/usr/spool/lp:<br /> smtp:x:0:0:mail daemon user:/:<br /> uucp:x:5:5:0000-uucp(0000):/usr/lib/uucp:<br /> nuucp:x:9:9:0000-uucp(0000):/var/spool/uucppublic:/usr/lib/uucp/uucico<br /> listen:x:37:4:Network Admin:/usr/net/nls:<br /> nobody:x:60001:60001:uid no body:/:<br /> noaccess:x:60002:60002:uid no access:/:<br /> webmastr:x:53:53:WWW Admin:/export/home/webmastr:/usr/bin/csh<br /> pin4geo:x:55:55:PinPaper Admin:/export/home/webmastr/new/gregY/test/pin4geo:/bin/false<br /> ftp:x:54:54:Anonymous FTP:/export/home/anon_ftp:/bin/false<br /> <br /> Shadowed password files have an "x" in the place of a password or sometimes<br /> they are disguised as an * as well.<br /> <br /> Now that you know a little more about what the actual password file looks<br /> like you should be able to identify a normal encrypted pw from a shadowed<br /> pw file. We can now go on to talk about how to crack it.<br /> <br /> Cracking a password file isn't as complicated as it would seem, although the<br /> files vary from system to system. 1.The first step that you would take is<br /> to download or copy the file. 2. The second step is to find a password<br /> cracker and a dictionary maker. Although it's nearly impossible to find a<br /> good cracker there are a few ok ones out there. I recomend that you look<br /> for Cracker Jack, John the Ripper, Brute Force Cracker, or Jack the Ripper.<br /> Now for a dictionary maker or a dictionary file...&nbsp; When you start a<br /> cracking prog you will be asked to find the the password file. That's where<br /> a dictionary maker comes in. You can download one from nearly every hacker<br /> page on the net.&nbsp; A dictionary maker finds all the possible letter<br /> combinations with the alphabet that you choose(ASCII, caps, lowercase, and<br /> numeric letters may also be added) .&nbsp; We will be releasing our pasword file<br /> to the public soon, it will be called, Psychotic Candy, "The Perfect Drug."<br /> As far as we know it will be one of the largest in circulation. 3. You then start up the cracker and follow the directions that it gives<br /> you.<br /> <br /> <br /> The PHF Technique<br /> <br /> Well I wasn't sure if I should include this section due to the fact that<br /> everybody already knows it and most servers have already found out about<br /> the bug and fixed it. But since I have been asked questions about the phf<br /> I decided to include it.<br /> <br /> The phf technique is by far the easiest way of getting a password file<br /> (although it doesn't work 95% of the time). But to do the phf all you do<br /> is open a browser and type in the following link:<br /> <br /> http://webpage_goes_here/cgi-bin/phf?Qalias=x%0a/bin/cat%20/etc/passwd <br /> <br /> You replace the webpage_goes_here with the domain. So if you were trying to<br /> get the pw file for www.webpage.com you would type:<br /> <br /> http://www.webpage.com/cgi-bin/phf?Qalias=x%0a/bin/cat%20/etc/passwd<br /> <br /> and that's it! You just sit back and copy the file(if it works).<br /> <br /> The best way to get root is with an exploit. Exploits are explained in the<br /> next chapter.Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-76102054721370165832010-01-18T06:02:00.001-08:002010-01-18T06:02:28.165-08:00As it turns out, there isn't much to the boot process:<br /> <br /> &nbsp;&nbsp; 1. A boot loader finds the kernel image on the disk, loads it into memory, and starts it.<br /> &nbsp;&nbsp; 2. The kernel initializes the devices and its drivers.<br /> &nbsp;&nbsp; 3. The kernel mounts the root filesystem.<br /> &nbsp;&nbsp; 4. The kernel starts a program called init.<br /> &nbsp;&nbsp; 5. init sets the rest of the processes in motion.<br /> &nbsp;&nbsp; 6. The last processes that init starts as part of the boot sequence allow you to log in.<br /> <br /> Identifying each stage of the boot process is invaluable in fixing boot problems and understanding the system as a whole. To start, zero in on the boot loader, which is the initial screen or prompt you get after the computer does its power-on self-test, asking which operating system to run. After you make a choice, the boot loader runs the Linux kernel, handing control of the system to the kernel.<br /> <br /> There is a detailed discussion of the kernel elsewhere in this book from which this article is excerpted. This article covers the kernel initialization stage, the stage when the kernel prints a bunch of messages about the hardware present on the system. The kernel starts init just after it displays a message proclaiming that the kernel has mounted the root filesystem:<br /> <br /> VFS: Mounted root (ext2 filesystem) readonly.<br /> <br /> Soon after, you will see a message about init starting, followed by system service startup messages, and finally you get a login prompt of some sort.<br /> <br /> NOTE On Red Hat Linux, the init note is especially obvious, because it "welcomes" you to "Red Hat Linux." All messages thereafter show success or failure in brackets at the right-hand side of the screen.<br /> <br /> Most of this chapter deals with init, because it is the part of the boot sequence where you have the most control.<br /> init<br /> <br /> There is nothing special about init. It is a program just like any other on the Linux system, and you'll find it in /sbin along with other system binaries. The main purpose of init is to start and stop other programs in a particular sequence. All you have to know is how this sequence works.<br /> <br /> There are a few different variations, but most Linux distributions use the System V style discussed here. Some distributions use a simpler version that resembles the BSD init, but you are unlikely to encounter this.<br /> <br /> Runlevels<br /> <br /> At any given time on a Linux system, a certain base set of processes is running. This state of the machine is called its runlevel, and it is denoted with a number from 0 through 6. The system spends most of its time in a single runlevel. However, when you shut the machine down, init switches to a different runlevel in order to terminate the system services in an orderly fashion and to tell the kernel to stop. Yet another runlevel is for single-user mode, discussed later.<br /> <br /> The easiest way to get a handle on runlevels is to examine the init configuration file, /etc/inittab. Look for a line like the following:<br /> <br /> id:5:initdefault:<br /> <br /> This line means that the default runlevel on the system is 5. All lines in the inittab file take this form, with four fields separated by colons occurring in the following order:<br /> # A unique identifier (a short string, such as id in the preceding example)<br /> # The applicable runlevel number(s)<br /> # The action that init should take (in the preceding example, the action is to set the default runlevel to 5)<br /> # A command to execute (optional)<br /> <br /> There is no command to execute in the preceding initdefault example because a command doesn't make sense in the context of setting the default runlevel. Look a little further down in inittab, until you see a line like this:<br /> <br /> l5:5:wait:/etc/rc.d/rc 5<br /> <br /> This line triggers most of the system configuration and services through the rc*.d and init.d directories. You can see that init is set to execute a command called /etc/rc.d/rc 5 when in runlevel 5. The wait action tells when and how init runs the command: run rc 5 once when entering runlevel 5, and then wait for this command to finish before doing anything else.<br /> <br /> There are several different actions in addition to initdefault and wait, especially pertaining to power management, and the inittab(5) manual page tells you all about them. The ones that you're most likely to encounter are explained in the following sections.<br /> <br /> respawn<br /> <br /> The respawn action causes init to run the command that follows, and if the command finishes executing, to run it again. You're likely to see something similar to this line in your inittab file:<br /> <br /> 1:2345:respawn:/sbin/mingetty tty1<br /> <br /> The getty programs provide login prompts. The preceding line is for the first virtual console (/dev/tty1), the one you see when you press ALT-F1 or CONTROL-ALT-F1. The respawn action brings the login prompt back after you log out.<br /> <br /> ctrlaltdel<br /> <br /> The ctrlaltdel action controls what the system does when you press CONTROL-ALT-DELETE on a virtual console. On most systems, this is some sort of reboot command using the shutdown command.<br /> <br /> sysinit<br /> <br /> The sysinit action is the very first thing that init should run when it starts up, before entering any runlevels.<br /> <br /> How processes in runlevels start<br /> <br /> You are now ready to learn how init starts the system services, just before it lets you log in. Recall this inittab line from earlier:<br /> <br /> l5:5:wait:/etc/rc.d/rc 5<br /> <br /> This small line triggers many other programs. rc stands for run commands, and you will hear people refer to the commands as scripts, programs, or services. So, where are these commands, anyway?<br /> <br /> For runlevel 5, in this example, the commands are probably either in /etc/rc.d/rc5.d or /etc/rc5.d. Runlevel 1 uses rc1.d, runlevel 2 uses rc2.d, and so on. You might find the following items in the rc5.d directory:<br /> <br /> S10sysklogd&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; S20ppp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; S99gpm<br /> S12kerneld&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; S25netstd_nfs&nbsp;&nbsp; S99httpd<br /> S15netstd_init&nbsp;&nbsp;&nbsp; S30netstd_misc&nbsp; S99rmnologin<br /> S18netbase&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; S45pcmcia&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; S99sshd<br /> S20acct&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; S89atd<br /> S20logoutd&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; S89cron <br /> <br /> The rc 5 command starts programs in this runlevel directory by running the following commands:<br /> <br /> S10sysklogd start<br /> S12kerneld start<br /> S15netstd_init start<br /> S18netbase start<br /> ...<br /> S99sshd start <br /> <br /> Notice the start argument in each command. The S in a command name means that the command should run in start mode, and the number (00 through 99) determines where in the sequence rc starts the command.<br /> <br /> The rc*.d commands are usually shell scripts that start programs in /sbin or /usr/sbin. Normally, you can figure out what one of the commands actually does by looking at the script with less or another pager program.<br /> <br /> You can start one of these services by hand. For example, if you want to start the httpd Web server program manually, run S99httpd start. Similarly, if you ever need to kill one of the services when the machine is on, you can run the command in the rc*.d directory with the stop argument (S99httpd stop, for instance).<br /> <br /> Some rc*.d directories contain commands that start with K (for "kill," or stop mode). In this case, rc runs the command with the stop argument instead of start. You are most likely to encounter K commands in runlevels that shut the system down.<br /> <br /> Adding and removing services<br /> <br /> If you want to add, delete, or modify services in the rc*.d directories, you need to take a closer look at the files inside. A long listing reveals a structure like this:<br /> <br /> lrwxrwxrwx . . . S10sysklogd -&gt; ../init.d/sysklogd<br /> lrwxrwxrwx . . . S12kerneld -&gt; ../init.d/kerneld<br /> lrwxrwxrwx . . . S15netstd_init -&gt; ../init.d/netstd_init<br /> lrwxrwxrwx . . . S18netbase -&gt; ../init.d/netbase<br /> ... <br /> <br /> The commands in an rc*.d directory are actually symbolic links to files in an init.d directory, usually in /etc or /etc/rc.d. Linux distributions contain these links so that they can use the same startup scripts for all runlevels. This convention is by no means a requirement, but it often makes organization a little easier.<br /> <br /> To prevent one of the commands in the init.d directory from running in a particular runlevel, you might think of removing the symbolic link in the appropriate rc*.d directory. This does work, but if you make a mistake and ever need to put the link back in place, you might have trouble remembering the exact name of the link. Therefore, you shouldn't remove links in the rc*.d directories, but rather, add an underscore (_) to the beginning of the link name like this:<br /> <br /> mv S99httpd _S99httpd<br /> <br /> At boot time, rc ignores _S99httpd because it doesn't start with S or K. Furthermore, the original name is still obvious, and you have quick access to the command if you're in a pinch and need to start it by hand.<br /> <br /> To add a service, you must create a script like the others in the init.d directory and then make a symbolic link in the correct rc*.d directory. The easiest way to write a script is to examine the scripts already in init.d, make a copy of one that you understand, and modify the copy.<br /> <br /> When adding a service, make sure that you choose an appropriate place in the boot sequence to start the service. If the service starts too soon, it may not work, due to a dependency on some other service. For non-essential services, most systems administrators prefer numbers in the 90s, after most of the services that came with the system.<br /> <br /> Linux distributions usually come with a command to enable and disable services in the rc*.d directories. For example, in Debian, the command is update-rc.d, and in Red Hat Linux, the command is chkconfig. Graphical user interfaces are also available. Using these programs helps keep the startup directories consistent and helps with upgrades.<br /> <br /> HINT: One of the most common Linux installation problems is an improperly configured XFree86 server that flicks on and off, making the system unusable on console. To stop this behavior, boot into single-user mode and alter your runlevel or runlevel services. Look for something containing xdm, gdm, or kdm in your rc*.d directories, or your /etc/inittab.<br /> <br /> Controlling init<br /> <br /> Occasionally, you need to give init a little kick to tell it to switch runlevels, to re-read the inittab file, or just to shut down the system. Because init is always the first process on a system, its process ID is always 1.<br /> <br /> You can control init with telinit. For example, if you want to switch to runlevel 3, use this command:<br /> <br /> telinit 3<br /> <br /> When switching runlevels, init tries to kill off any processes that aren't in the inittab file for the new runlevel. Therefore, you should be careful about changing runlevels.<br /> <br /> When you need to add or remove respawning jobs or make any other change to the inittab file, you must tell init about the change and cause it to re-read the file. Some people use kill -HUP 1 to tell init to do this. This traditional method works on most versions of Unix, as long as you type it correctly. However, you can also run this telinit command:<br /> <br /> telinit q<br /> <br /> You can also use telinit s to switch to single-user mode.<br /> <br /> Shutting down<br /> <br /> init also controls how the system shuts down and reboots. The proper way to shut down a Linux machine is to use the shutdown command.<br /> <br /> There are two basic ways to use shutdown. If you halt the system, it shuts the machine down and keeps it down. To make the machine halt immediately, use this command:<br /> <br /> shutdown -h now<br /> <br /> On most modern machines with reasonably recent versions of Linux, a halt cuts the power to the machine. You can also reboot the machine. For a reboot, use -r instead of -h.<br /> <br /> The shutdown process takes several seconds. You should never reset or power off a machine during this stage.<br /> <br /> In the preceding example, now is the time to shut down. This argument is mandatory, but there are many ways of specifying it. If you want the machine to go down sometime in the future, one way is to use +n, where n is the number of minutes shutdown should wait before doing its work. For other options, look at the shutdown(8) manual page.<br /> <br /> To make the system reboot in 10 minutes, run this command:<br /> <br /> shutdown -r +10<br /> <br /> On Linux, shutdown notifies anyone logged on that the machine is going down, but it does little real work. If you specify a time other than now, shutdown creates a file called /etc/nologin. When this file is present, the system prohibits logins by anyone except the superuser.<br /> <br /> When system shutdown time finally arrives, shutdown tells init to switch to runlevel 0 for a halt and runlevel 6 for a reboot. When init enters runlevel 0 or 6, all of the following takes place, which you can verify by looking at the scripts inside rc0.d and rc6.d:<br /> <br /> &nbsp;&nbsp; 1. init kills every process that it can (as it would when switching to any other runlevel). <br /> <br /> # The initial rc0.d/rc6.d commands run, locking system files into place and making other preparations for shutdown.<br /> # The next rc0.d/rc6.d commands unmount all filesystems other than the root.<br /> # Further rc0.d/rc6.d commands remount the root filesystem read-only.<br /> # Still more rc0.d/rc6.d commands write all buffered data out to the filesystem with the sync program.<br /> # The final rc0.d/rc6.d commands tell the kernel to reboot or stop with the reboot, halt, or poweroff program.<br /> <br /> The reboot and halt programs behave differently for each runlevel, potentially causing confusion. By default, these programs call shutdown with the -r or -h options, but if the system is already at the halt or reboot runlevel, the programs tell the kernel to shut itself off immediately. If you really want to shut your machine down in a hurry (disregarding any possible damage from a disorderly shutdown), use the -f option.Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-13378665961582393722010-01-18T06:00:00.002-08:002010-01-18T06:00:52.644-08:00How To Make An Animted Logo, the easy way<br /> <br /> <br /> Things you will need:<br /> QUOTE<br /> 1. Photoshop or Paintshop (any versions)<br /> 2. Xara3D 5.xx<br /> 3. Jasc animation shop 3.xx<br /> 4. DUH!! A pic you want as a logo LOL<br /> <br /> Things you MIGHT need:<br /> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1. a computer<br /> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2. Internet connection<br /> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3. consciousness<br /> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 4. corn on the cob<br /> <br /> Here they are for your convinience:<br /> Adobe Photoshop CS v8.0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; thanx to TheCollector<br /> http://www.shareordie.com/index.php?showto...85&amp;hl=Photoshop<br /> <br /> Jasc Paint Shop Pro 9.0 Retail&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; thanx to arclite<br /> http://www.shareordie.com/index.php?showto...&amp;hl=Jasc&amp;st=100<br /> <br /> Xara3D 5.02&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; thanx to Zabref<br /> http://www.shareordie.com/index.php?showtopic=6512&amp;hl=XARA<br /> <br /> Jasc Animation Shop 3.11&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; thanx to sev7en<br /> http://www.shareordie.com/index.php?showtopic=34928&amp;hl=<br /> <br /> <br /> Steps:<br /> 1. Using your photo editor fix/touch up you pic/logo to your liking….too easy(example bellow)<br /> user posted image<br /> <br /> 2. Save it some where easy to find, for example “C:\pictures” or “C:\Windows\thecenterofhell\system\system32\system64\system128\???” although I don’t recommend the second one.<br /> <br /> 3.Open Xara3D 5.xx, press “Alt+T” or click on the “T” button on the LEFT PANEL erase all of the text in the window that pops up then press ok.<br /> user posted image<br /> user posted image<br /> <br /> 4. Press “Alt+U” or click on the yellow “U” surrounded in gray on the LEFT PANEL, check the “button” box and select a desire button type and leave this option window open you will need it again.<br /> user posted image<br /> <br /> 5. Press the “At+X” or click the black “X” on the LEFT PANEL, click “load texture” in the pop up window, find the picture you made/adjusted and highlight it then click open or just double-click it. Use the “size, x, y, angle” sliders to adjust the picture or “texture” and in the “button options” windows use the “stretch, corners”(corners, only if using this option you can adjust) to adjust the button size.<br /> user posted image<br /> <br /> 6. Press “Alt+A” or click the black “A” on the LEFT PANEL with what looks like to me is a half-halo with an arrow tip!? Anyway, here is a quick rundown on what the options here do: (BY THE WAY TO ACTIVATE OR “PREVIEW ANIMATION” PRESS “Ctrl+spacebar”).<br /> user posted image<br /> <br /> <br /> &nbsp;&nbsp;&nbsp;&nbsp; A. Frames per cycle: This is the number of frames for each complete cycle through the animation sequence. The greater the number of frames the smoother the animation. The drawback is that the file is bigger - this is a big disadvantage for web graphics. You may need to try different values to get the best results.<br /> &nbsp;&nbsp;&nbsp;&nbsp; B. Frames per second: The animation speed. Slow speeds can give jerky movement. High speeds can also give jerky movement as the program displaying the animation may not be able to keep up. Again you may need to try different values.<br /> &nbsp;&nbsp;&nbsp;&nbsp; C. Pause: This pauses the first frame before continuing the rest of the animation. Type in a value in centiseconds (1/100ths of a second) - a 2 second pause is 200 cs. Note that this applies only to the first frame; use Frames per cycle and Frames per second to control the overall speed of the animation.<br /> &nbsp;&nbsp;&nbsp;&nbsp; D. Loop Value: Unchecked is Infinite, Any other value see for yourself. Lmao<br /> &nbsp;&nbsp;&nbsp;&nbsp; E. Loop: This lets you specify how many times the animation should repeat itself. Note that some browsers take any value other than 1 to mean 'loop forever'. Therefore, your animation either plays once or forever.<br /> &nbsp;&nbsp;&nbsp;&nbsp; F. Style: This controls the type of animation:<br /> Rotate 1 rotates all the text as one;&nbsp;&nbsp;&nbsp; Rotate 2 rotates each character. (Buttons have a single Rotate option.) Rotate text/Rotate lights - select whether you want the text to rotate or the lights or both. You cannot rotate the shadow as this would create very large files. Direction - selects the direction of rotation.<br /> <br /> Swing options: Swing 1 swings all the text as one; Swing 2 swings each character. (Buttons have a single Swing option.) Angle - how much you want the heading to swing.<br /> <br /> Pulsate options: Pulsate 1 pulsates all the text as one; Pulsate 2 pulsates each character. (Buttons have a single Pulsate option.) Minimum text size - how far back to pulsate the text. Shrink+Grow &amp; Grow+Shrink - only have an effect if you Pause the animation. These options select the starting point for the animation (maximum or minimum.)<br /> <br /> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fade options: Fade in - the heading emerges from the background color. Fade out - the heading merges into the&nbsp; background color.&nbsp;&nbsp; SO AFTER PICKING ONE………………..<br /> <br /> <br /> 7. On the top left go to FILE&gt;&gt;&gt;EXPORT ANIMATION or press “Ctrl+Shift+X” and save in desired location.<br /> user posted image<br /> <br /> 8. When the next window pops up (Export as animated gif save location then options): Experiment with each one to get it right, but remember the SoD rules about Siggys and Avatars.<br /> user posted image<br /> user posted image<br /> <br /> <br /> Because Animated GIFs can be quite large, you may find that a 16 or 32 color, optimized palette per frame, produces the best results for the smallest file size. However you might need to experiment.<br /> Dithering always makes GIFs look better, but also makes them larger. When outputting at 256 colors you may find that there is no need to turn dithering on.<br /> Current Window Size lets you export just the area surrounding the text (Crop on) or the entire window area (Crop off.)<br /> User Defined lets you specify the dimensions of the bitmap.Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-32263357521972802412010-01-18T06:00:00.000-08:002010-05-02T07:32:36.040-07:00How to make key generators?<br /> -===========================-<br /> Introduction<br /> ------------<br /> I take no responsibility of the usage of this information.<br /> This tutorial, is for educational knowledge ONLY.<br /> Hi there, in this tutorial, I intend to teach you how to make a pretty<br /> simple keygen, of a program called W3Filer 32 V1.1.3.<br /> W3Filer is a pretty good web downloader...<br /> I guess some of you might know the program.<br /> I`ll assume you know:<br /> A.How to use debugger (in this case, SoftIce).<br /> B.How to crack, generally (finding protection routines,patching them,etc...).<br /> C.How to use Disassembler (This knowledge can help).<br /> D.Assembly.<br /> E.How to code in Turbo Pascal ™.<br /> Tools you`ll need:<br /> A.SoftIce 3.00/01 or newer.<br /> B.WD32Asm. (Not a must).<br /> C.The program W3Filer V1.13 (if not provided in this package), can be found in<br /> www.windows95.com I believe.<br /> D.Turbo Pascal (ANY version).<br /> Well, enough blah blah, let's go cracking...<br /> Run W3Filer 32.<br /> A nag screen pops, and , demands registration (Hmm, this sux ;-)) Now,<br /> We notice this program has some kind of serial number (Mine is 873977046),<br /> Let's keep the serial in mind, I bet we`ll meet it again while we're on<br /> the debugger.<br /> Well, now, let's put your name and a dummy reg code...<br /> set a BP on GetDlgItemTextA, and, press OK.<br /> We pop inside GetDlgItemTextA, Lets find the registration routine...<br /> I`ll save you the work, the registration routine is this:<br /> :00404DB2 8D95A8FAFFFF lea edx, dword ptr [ebp+FFFFFAA8]<br /> :00404DB8 52 push edx ---&gt; Your user name here.<br /> :00404DB9 E80B550000 call 0040A2C9 ---&gt; Registration routine.<br /> :00404DBE 83C408 add esp, 00000008 ---&gt; Dunno exactly what is it.<br /> :00404DC1 85C0 test eax, eax ---&gt; Boolean identifier, 0 if<br /> :00404DC3 7D17 jge 00404DDC ---&gt; registration failed, 1 if<br /> OK.<br /> Well, Let's enter the CALL 40A2C9, and see what's inside it:<br /> (Please read my comments in the code).<br /> * Referenced by a CALL at Addresses:<br /> |:00404DB9 , :00407F76<br /> |<br /> :0040A2C9 55 push ebp<br /> :0040A2CA 8BEC mov ebp, esp<br /> :0040A2CC 81C4B0FEFFFF add esp, FFFFFEB0<br /> :0040A2D2 53 push ebx<br /> :0040A2D3 56 push esi<br /> :0040A2D4 57 push edi<br /> :0040A2D5 8B5508 mov edx, dword ptr [ebp+08]<br /> :0040A2D8 8DB500FFFFFF lea esi, dword ptr [ebp+FFFFFF00]<br /> :0040A2DE 33C0 xor eax, eax<br /> :0040A2E0 EB16 jmp 0040A2F8<br /> * Referenced by a (U)nconditional or ©onditional Jump at Address:<br /> |:0040A2FB©<br /> |<br /> :0040A2E2 0FBE0A movsx ecx, byte ptr [edx] ----&gt; Here Starts the<br /> interesting part.<br /> :0040A2E5 83F920 cmp ecx, 00000020 ----&gt; ECX is the the current<br /> char in the user name, Hmm, 20h=' '...<br /> :0040A2E8 740D je 0040A2F7 ----&gt; Let's see,<br /> :0040A2EA 8A0A mov cl, byte ptr [edx] ----&gt; Generally, all this loop<br /> does, is copying<br /> the user name from<br /> [EDX], to [ESI], WITHOUT the spaces!<br /> (Keep this in mind! ).<br /> :0040A2EC 880C06 mov byte ptr [esi+eax], cl<br /> :0040A2EF 42 inc edx<br /> :0040A2F0 40 inc eax<br /> :0040A2F1 C6040600 mov byte ptr [esi+eax], 00<br /> :0040A2F5 EB01 jmp 0040A2F8<br /> * Referenced by a (U)nconditional or ©onditional Jump at Address:<br /> |:0040A2E8©<br /> |<br /> :0040A2F7 42 inc edx<br /> * Referenced by a (U)nconditional or ©onditional Jump at Addresses:<br /> |:0040A2E0(U), :0040A2F5(U)<br /> |<br /> :0040A2F8 803A00 cmp byte ptr [edx], 00<br /> :0040A2FB 75E5 jne 0040A2E2 ----------------&gt; This is the loop , we got<br /> what it does,<br /> Let's continue tracing<br /> the code...<br /> :0040A2FD 56 push esi --------&gt; The user name is pushed, in order<br /> to<br /> Upcase it's chars.<br /> * Reference To: USER32.CharUpperA, Ord:0000h<br /> |<br /> :0040A2FE E80F330000 Call User!CharUpper ---&gt; After this, our name is in<br /> upper case.<br /> :0040A303 56 push esi -----&gt; Our name in upper case here.<br /> * Reference To: cw3220mt._strlen, Ord:0000h<br /> |<br /> :0040A304 E86F300000 Call 0040D378 ---&gt; This is the length of our name.<br /> :0040A309 59 pop ecx<br /> :0040A30A 8BC8 mov ecx, eax ---&gt; ECX=Length.<br /> :0040A30C 83F904 cmp ecx, 00000004 ---&gt; Length&gt;=4 (MUST).<br /> :0040A30F 7D05 jge 0040A316 ---&gt; Let's go to this address...<br /> :0040A311 83C8FF or eax, FFFFFFFF<br /> :0040A314 EB67 jmp 0040A37D<br /> * Referenced by a (U)nconditional or ©onditional Jump at Address:<br /> |:0040A30F©<br /> |<br /> :0040A316 33D2 xor edx, edx<br /> :0040A318 33C0 xor eax, eax<br /> :0040A31A 3BC8 cmp ecx, eax<br /> :0040A31C 7E17 jle 0040A335 ---&gt; (Not important, just another useless<br /> checking).<br /> <br /> <script src="http://adhitzads.com/58696" type="text/javascript"> </script> <br /> <br /> ===================================================================================<br /> ============ FROM HERE AND ON, THE IMPORTANT CODE, PAY ATTENTION ==================<br /> ===================================================================================<br /> One thing before we continue, EDX = 00000000h as we enter to the next instructions.<br /> * Referenced by a (U)nconditional or ©onditional Jump at Address:<br /> |:0040A333©<br /> |<br /> :0040A31E 0FBE1C06 movsx ebx, byte ptr [esi+eax] ---&gt; EBX &lt;--- char in user<br /> name, offset EAX.<br /> :0040A322 C1E303 shl ebx, 03 -----&gt; Hmm, it shl's the char by 03h...<br /> (Remember that).<br /> :0040A325 0FBE3C06 movsx edi, byte ptr [esi+eax] ---&gt; Now EDI &lt;--- Char in<br /> user name , offset EAX.<br /> :0040A329 0FAFF8 imul edi, eax -----&gt; It multiplies the char by the<br /> offset in user name! (Remember that).<br /> :0040A32C 03DF add ebx, edi -----&gt; Adds the result to EBX (That was<br /> Shelled (Ding Dong =)).<br /> :0040A32E 03D3 add edx, ebx -----&gt; EDX=EDX+EBX!!! - This is the CORE<br /> of this registration routine!!!<br /> :0040A330 40 inc eax -----&gt; Increase EAX by one (next char).<br /> :0040A331 3BC8 cmp ecx, eax<br /> :0040A333 7FE9 jg 0040A31E ----&gt; If ECX<eax leave="" the="" then,="" we=""><br /> loop.<br /> * Referenced by a (U)nconditional or ©onditional Jump at Address:<br /> |:0040A31C©<br /> |<br /> :0040A335 A120674100 mov eax, dword ptr [00416720] ---&gt; HMMMMMM, What's in<br /> here?????<br /> :0040A33A C1F803 sar eax, 03 ---------&gt; WAIT! Please type in SIce '?<br /> EAX'<br /> Does this number in EAX look<br /> familiar to us? ;-)<br /> If you still don`t understand,<br /> than, It's<br /> our SERIAL NUMBER! (PLEASE, take<br /> your time, and check by<br /> yourself - don`t trust me!). OK,<br /> so now we know,<br /> That it SHR's EAX by 03 (SAR is<br /> almost identical to SHR).<br /> :0040A33D 03D0 add edx, eax ---------&gt; Hmm, it adds the result from the<br /> loop, the serial number shr'd by 03h<br /> :0040A33F 52 push edx -------&gt; Let's continue. (At this point, I<br /> can tell you , the reg number, is<br /> in EDX - only that the reg number<br /> is in HEX --&gt; That's how you enter it).<br /> * Possible StringData Ref from Data Obj -&gt;"%lx"<br /> |<br /> :0040A340 685EF54000 push 0040F55E<br /> :0040A345 8D95B0FEFFFF lea edx, dword ptr [ebp+FFFFFEB0]<br /> :0040A34B 52 push edx<br /> * Reference To: USER32.wsprintfA, Ord:0000h<br /> |<br /> :0040A34C E8E5320000 Call 0040D636 -------&gt; This one, does HEX2STR (Takes<br /> the value from EDX, and turns it to an hex string).<br /> :0040A351 83C40C add esp, 0000000C<br /> :0040A354 8D8DB0FEFFFF lea ecx, dword ptr [ebp+FFFFFEB0] -----&gt; type 'd ecx' -<br /> THIS is the reg number! That's enough for us, the rest of<br /> the code, is<br /> just for comparing the correct reg code with ours.<br /> :0040A35A 51 push ecx<br /> * Reference To: USER32.CharLowerA, Ord:0000h<br /> |<br /> :0040A35B E8B8320000 Call 0040D618<br /> :0040A360 8D85B0FEFFFF lea eax, dword ptr [ebp+FFFFFEB0]<br /> :0040A366 50 push eax<br /> :0040A367 FF750C push [ebp+0C]<br /> * Reference To: cw3220mt._strcmp, Ord:0000h<br /> |<br /> :0040A36A E875300000 Call 0040D3E4<br /> :0040A36F 83C408 add esp, 00000008<br /> :0040A372 85C0 test eax, eax<br /> :0040A374 7405 je 0040A37B<br /> :0040A376 83C8FF or eax, FFFFFFFF<br /> :0040A379 EB02 jmp 0040A37D<br /> * Referenced by a (U)nconditional or ©onditional Jump at Address:<br /> |:0040A374©<br /> |<br /> :0040A37B 33C0 xor eax, eax<br /> * Referenced by a (U)nconditional or ©onditional Jump at Addresses:<br /> |:0040A314(U), :0040A379(U)<br /> |<br /> :0040A37D 5F pop edi<br /> :0040A37E 5E pop esi<br /> :0040A37F 5B pop ebx<br /> :0040A380 8BE5 mov esp, ebp<br /> :0040A382 5D pop ebp<br /> :0040A383 C3 ret<br /> Making the actual Keygen<br /> ~~~~~~~~~~~~~~~~~~~~~~~~<br /> Now, after I've explained how does the program calculate the registration<br /> code, you can either write your own keymaker, without looking at my code, or<br /> look at my code (in Turbo Pascal - sorry for all you C lovers ;-) Next time).<br /> That's it, here's the source of my keygen:<br /> ------------------- Cut here ---------------------------------------------<br /> Program W3FilerKeygen;<br /> var<br /> Key,SerialNum,EB,ED,digit:Longint;<br /> I,x:Byte;<br /> Name,KeyHex:String;<br /> begin<br /> Writeln(' W3Filer32 V1.1.3 Keymaker');<br /> writeln('Cracked by ^pain^ ''97 / Rebels!');<br /> Write('Your Name:'); { Read the name }<br /> readln(Name);<br /> Write('Serial Number:');<br /> readln(SerialNum); {Yes, we need the serial number for the calculation!}<br /> Key:=0;<br /> x:=0;<br /> For I:=1 to length(Name) do<br /> begin<br /> Name[I]:=upcase(Name[i]);<br /> If Name[I]&lt;&gt;' ' then begin<br /> eb:=ord(Name[I]) shl 3; {EB = Name[I] Shl 03h}<br /> Ed:=ord(Name[I]); {ED = Name[I]}<br /> ed:=ed*(x); {ED=ED*Offset}<br /> inc(x);<br /> eb:=eb+ed; {Add ED to EB}<br /> Key:=Key+EB; {Add EB to KEY}<br /> end;<br /> end;<br /> Key:=Key+(SerialNum shr 3); { Add SerialNum shr 03h to Key}<br /> { From here, this is just HEX2STRING --&gt; I`m quite sure it's<br /> Self explaintory, else - go and learn number bases again! ;-)}<br /> KeyHex:='';<br /> repeat<br /> digit:=Key mod 16;<br /> key:=key div 16;<br /> If digit&lt;10 then KeyHex:=Chr(Digit+ord('0'))+KeyHex;<br /> If digit&gt;10 then KeyHex:=Chr(Digit-10+ord('a'))+KeyHex;<br /> until key=0;<br /> writeln('Your Key:',KeyHex);<br /> writeln(' Enjoy!');<br /> end.</eax>Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-43698943259040743592010-01-14T19:47:00.001-08:002010-01-14T19:47:42.428-08:00Run Commands:<br /> <br /> Quote:<br /> compmgmt.msc - Computer management<br /> devmgmt.msc - Device manager<br /> diskmgmt.msc - Disk management<br /> dfrg.msc - Disk defrag<br /> eventvwr.msc - Event viewer<br /> fsmgmt.msc - Shared folders<br /> gpedit.msc - Group policies<br /> lusrmgr.msc - Local users and groups<br /> perfmon.msc - Performance monitor<br /> rsop.msc - Resultant set of policies<br /> secpol.msc - Local security settings<br /> services.msc - Various Services<br /> msconfig - System Configuration Utility<br /> regedit - Registry Editor<br /> msinfo32 _ System Information<br /> sysedit _ System Edit<br /> win.ini _ windows loading information(also system.ini)<br /> winver _ Shows current version of windows<br /> mailto: _ Opens default email client<br /> command _ Opens command prompt<br /> <br /> <br /> Run Commands to access the control panel:<br /> <br /> Quote:<br /> Add/Remove Programs control appwiz.cpl<br /> Date/Time Properties control timedate.cpl<br /> Display Properties control desk.cpl<br /> FindFast control findfast.cpl<br /> Fonts Folder control fonts<br /> Internet Properties control inetcpl.cpl<br /> Keyboard Properties control main.cpl keyboard<br /> Mouse Properties control main.cpl<br /> Multimedia Properties control mmsys.cpl<br /> Network Properties control netcpl.cpl<br /> Password Properties control password.cpl<br /> Printers Folder control printers<br /> Sound Properties control mmsys.cpl sounds<br /> System Properties control sysdm.cpl<br /> <br /> <br /> <br /> Command Prompt:<br /> <br /> Quote:<br /> ANSI.SYS Defines functions that change display graphics, control cursor movement, and reassign keys.<br /> APPEND Causes MS-DOS to look in other directories when editing a file or running a command.<br /> ARP Displays, adds, and removes arp information from network devices.<br /> ASSIGN Assign a drive letter to an alternate letter.<br /> ASSOC View the file associations.<br /> AT Schedule a time to execute commands or programs.<br /> ATMADM Lists connections and addresses seen by Windows ATM call manager.<br /> ATTRIB Display and change file attributes.<br /> BATCH Recovery console command that executes a series of commands in a file.<br /> BOOTCFG Recovery console command that allows a user to view, modify, and rebuild the boot.ini<br /> BREAK Enable / disable CTRL + C feature.<br /> CACLS View and modify file ACL's.<br /> CALL Calls a batch file from another batch file.<br /> CD Changes directories.<br /> CHCP Supplement the International keyboard and character set information.<br /> CHDIR Changes directories.<br /> CHKDSK Check the hard disk drive running FAT for errors.<br /> CHKNTFS Check the hard disk drive running NTFS for errors.<br /> CHOICE Specify a listing of multiple options within a batch file.<br /> CLS Clears the screen.<br /> CMD Opens the command interpreter.<br /> COLOR Easily change the foreground and background color of the MS-DOS window.<br /> COMP Compares files.<br /> COMPACT Compresses and uncompress files.<br /> CONTROL Open control panel icons from the MS-DOS prompt.<br /> CONVERT Convert FAT to NTFS.<br /> COPY Copy one or more files to an alternate location.<br /> CTTY Change the computers input/output devices.<br /> DATE View or change the systems date.<br /> DEBUG Debug utility to create assembly programs to modify hardware settings.<br /> DEFRAG Re-arrange the hard disk drive to help with loading programs.<br /> DEL Deletes one or more files.<br /> DELETE Recovery console command that deletes a file.<br /> DELTREE Deletes one or more files and/or directories.<br /> DIR List the contents of one or more directory.<br /> DISABLE Recovery console command that disables Windows system services or drivers.<br /> DISKCOMP Compare a disk with another disk.<br /> DISKCOPY Copy the contents of one disk and place them on another disk.<br /> DOSKEY Command to view and execute commands that have been run in the past.<br /> DOSSHELL A GUI to help with early MS-DOS users.<br /> DRIVPARM Enables overwrite of original device drivers.<br /> ECHO Displays messages and enables and disables echo.<br /> EDIT View and edit files.<br /> EDLIN View and edit files.<br /> EMM386 Load extended Memory Manager.<br /> ENABLE Recovery console command to enable a disable service or driver.<br /> ENDLOCAL Stops the localization of the environment changes enabled by the setlocal command.<br /> ERASE Erase files from computer.<br /> EXIT Exit from the command interpreter.<br /> EXPAND Expand a M*cros*ft Windows file back to it's original format.<br /> EXTRACT Extract files from the M*cros*ft Windows cabinets.<br /> FASTHELP Displays a listing of MS-DOS commands and information about them.<br /> FC Compare files.<br /> FDISK Utility used to create partitions on the hard disk drive.<br /> FIND Search for text within a file.<br /> FINDSTR Searches for a string of text within a file.<br /> FIXBOOT Writes a new boot sector.<br /> FIXMBR Writes a new boot record to a disk drive.<br /> FOR Boolean used in batch files.<br /> FORMAT Command to erase and prepare a disk drive.<br /> FTP Command to connect and operate on a FTP server.<br /> FTYPE Displays or modifies file types used in file extension associations.<br /> GOTO Moves a batch file to a specific label or location.<br /> GRAFTABL Show extended characters in graphics mode.<br /> HELP Display a listing of commands and brief explanation.<br /> IF Allows for batch files to perform conditional processing.<br /> IFSHLP.SYS 32-bit file manager.<br /> IPCONFIG Network command to view network adapter settings and assigned values.<br /> KEYB Change layout of keyboard.<br /> LABEL Change the label of a disk drive.<br /> LH Load a device driver in to high memory.<br /> LISTSVC Recovery console command that displays the services and drivers.<br /> LOADFIX Load a program above the first 64k.<br /> LOADHIGH Load a device driver in to high memory.<br /> LOCK Lock the hard disk drive.<br /> LOGON Recovery console command to list installations and enable administrator login.<br /> MAP Displays the device name of a drive.<br /> MD Command to create a new directory.<br /> MEM Display memory on system.<br /> MKDIR Command to create a new directory.<br /> MODE Modify the port or display settings.<br /> MORE Display one page at a time.<br /> MOVE Move one or more files from one directory to another directory.<br /> MSAV Early M*cros*ft Virus scanner.<br /> MSD Diagnostics utility.<br /> MSCDEX Utility used to load and provide access to the CD-ROM.<br /> NBTSTAT Displays protocol statistics and current TCP/IP connections using NBT<br /> NET Update, fix, or view the network or network settings<br /> NETSH Configure dynamic and static network information from MS-DOS.<br /> NETSTAT Display the TCP/IP network protocol statistics and information.<br /> NLSFUNC Load country specific information.<br /> NSLOOKUP Look up an IP address of a domain or host on a network.<br /> PATH View and modify the computers path location.<br /> PATHPING View and locate locations of network latency.<br /> PAUSE Command used in batch files to stop the processing of a command.<br /> PING Test / send information to another network computer or network device.<br /> POPD Changes to the directory or network path stored by the pushd command.<br /> POWER Conserve power with computer portables.<br /> PRINT Prints data to a printer port.<br /> PROMPT View and change the MS-DOS prompt.<br /> PUSHD Stores a directory or network path in memory so it can be returned to at any time.<br /> QBASIC Open the QBasic.<br /> RD Removes an empty directory.<br /> REN Renames a file or directory.<br /> RENAME Renames a file or directory.<br /> RMDIR Removes an empty directory.<br /> ROUTE View and configure windows network route tables.<br /> RUNAS Enables a user to execute a program on another computer.<br /> SCANDISK Run the scandisk utility.<br /> SCANREG Scan registry and recover registry from errors.<br /> SET Change one variable or string to another.<br /> SETLOCAL Enables local environments to be changed without affecting anything else.<br /> SETVER Change MS-DOS version to trick older MS-DOS programs.<br /> SHARE Installs support for file sharing and locking capabilities.<br /> SHIFT Changes the position of replaceable parameters in a batch program.<br /> SHUTDOWN Shutdown the computer from the MS-DOS prompt.<br /> SMARTDRV Create a disk cache in conventional memory or extended memory.<br /> SORT Sorts the input and displays the output to the screen.<br /> START Start a separate window in Windows from the MS-DOS prompt.<br /> SUBST Substitute a folder on your computer for another drive letter.<br /> SWITCHES Remove add functions from MS-DOS.<br /> SYS Transfer system files to disk drive.<br /> TELNET Telnet to another computer / device from the prompt.<br /> TIME View or modify the system time.<br /> TITLE Change the title of their MS-DOS window.<br /> TRACERT Visually view a network packets route across a network.<br /> TREE View a visual tree of the hard disk drive.<br /> TYPE Display the contents of a file.<br /> UNDELETE Undelete a file that has been deleted.<br /> UNFORMAT Unformat a hard disk drive.<br /> UNLOCK Unlock a disk drive.<br /> VER Display the version information.<br /> VERIFY Enables or disables the feature to determine if files have been written properly.<br /> VOL Displays the volume information about the designated drive.<br /> XCOPY Copy multiple files, directories, and/or drives from one location to another.<br /> TRUENAME When placed before a file, will display the whole directory in which it exists<br /> TASKKILL It allows you to kill those unneeded or locked up applications<br /> <br /> <br /> <br /> <br /> Windows XP Shortcuts:<br /> <br /> Quote:<br /> ALT+- (ALT+hyphen) Displays the Multiple Document Interface (MDI) child window's System menu<br /> ALT+ENTER View properties for the selected item<br /> ALT+ESC Cycle through items in the order they were opened<br /> ALT+F4 Close the active item, or quit the active program<br /> ALT+SPACEBAR Display the System menu for the active window<br /> ALT+TAB Switch between open items<br /> ALT+Underlined letter Display the corresponding menu<br /> BACKSPACE View the folder one level up in My Computer or Windows Explorer<br /> CTRL+A Select all<br /> CTRL+B Bold<br /> CTRL+C Copy<br /> CTRL+I Italics<br /> CTRL+O Open an item<br /> CTRL+U Underline<br /> CTRL+V Paste<br /> CTRL+X Cut<br /> CTRL+Z Undo<br /> CTRL+F4 Close the active document<br /> CTRL while dragging Copy selected item<br /> CTRL+SHIFT while dragging Create shortcut to selected iteM<br /> CTRL+RIGHT ARROW Move the insertion point to the beginning of the next word<br /> CTRL+LEFT ARROW Move the insertion point to the beginning of the previous word<br /> CTRL+DOWN ARROW Move the insertion point to the beginning of the next paragraph<br /> CTRL+UP ARROW Move the insertion point to the beginning of the previous paragraph<br /> SHIFT+DELETE Delete selected item permanently without placing the item in the Recycle Bin<br /> ESC Cancel the current task<br /> F1 Displays Help<br /> F2 Rename selected item<br /> F3 Search for a file or folder<br /> F4 Display the Address bar list in My Computer or Windows Explorer<br /> F5 Refresh the active window<br /> F6 Cycle through screen elements in a window or on the desktop<br /> F10 Activate the menu bar in the active program<br /> SHIFT+F10 Display the shortcut menu for the selected item<br /> CTRL+ESC Display the Start menu<br /> SHIFT+CTRL+ESC Launches Task Manager<br /> SHIFT when you insert a CD Prevent the CD from automatically playing<br /> WIN Display or hide the Start menu<br /> WIN+BREAK Display the System Properties dialog box<br /> WIN+D Minimizes all Windows and shows the Desktop<br /> WIN+E Open Windows Explorer<br /> WIN+F Search for a file or folder<br /> WIN+F+CTRL Search for computers<br /> WIN+L Locks the desktop<br /> WIN+M Minimize or restore all windows<br /> WIN+R Open the Run dialog box<br /> WIN+TAB Switch between open items<br /> <br /> <br /> <br /> <br /> Windows Explorer Shortcuts:<br /> <br /> Quote:<br /> ALT+SPACEBAR - Display the current window’s system menu<br /> SHIFT+F10 - Display the item's context menu<br /> CTRL+ESC - Display the Start menu<br /> ALT+TAB - Switch to the window you last used<br /> ALT+F4 - Close the current window or quit<br /> CTRL+A - Select all items<br /> CTRL+X - Cut selected item(s)<br /> CTRL+C - Copy selected item(s)<br /> CTRL+V - Paste item(s)<br /> CTRL+Z - Undo last action<br /> CTRL+(+) - Automatically resize the columns in the right hand pane<br /> TAB - Move forward through options<br /> ALT+RIGHT ARROW - Move forward to a previous view<br /> ALT+LEFT ARROW - Move backward to a previous view<br /> SHIFT+DELETE - Delete an item immediately<br /> BACKSPACE - View the folder one level up<br /> ALT+ENTER - View an item’s properties<br /> F10 - Activate the menu bar in programs<br /> F6 - Switch between left and right panes<br /> F5 - Refresh window contents<br /> F3 - Display Find application<br /> F2 - Rename selected item<br /> <br /> <br /> <br /> <br /> Internet Explorer Shortcuts:<br /> <br /> Quote:<br /> CTRL+A - Select all items on the current page<br /> CTRL+D - Add the current page to your Favorites<br /> CTRL+E - Open the Search bar<br /> CTRL+F - Find on this page<br /> CTRL+H - Open the History bar<br /> CTRL+I - Open the Favorites bar<br /> CTRL+N - Open a new window<br /> CTRL+O - Go to a new location<br /> CTRL+P - Print the current page or active frame<br /> CTRL+S - Save the current page<br /> CTRL+W - Close current browser window<br /> CTRL+ENTER - Adds the http://www. (url) .com<br /> SHIFT+CLICK - Open link in new window<br /> BACKSPACE - Go to the previous page<br /> ALT+HOME - Go to your Home page<br /> HOME - Move to the beginning of a document<br /> TAB - Move forward through items on a page<br /> END - Move to the end of a document<br /> ESC - Stop downloading a page<br /> F11 - Toggle full-screen view<br /> F5 - Refresh the current page<br /> F4 - Display list of typed addresses<br /> F6 - Change Address bar and page focus<br /> ALT+RIGHT ARROW - Go to the next page<br /> SHIFT+CTRL+TAB - Move back between frames<br /> SHIFT+F10 - Display a shortcut menu for a link<br /> SHIFT+TAB - Move back through the items on a page<br /> CTRL+TAB - Move forward between frames<br /> CTRL+C - Copy selected items to the clipboard<br /> CTRL+V - Insert contents of the clipboard<br /> ENTER - Activate a selected link<br /> HOME - Move to the beginning of a document<br /> END - Move to the end of a document<br /> F1 - Display Internet Explorer HelpY.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-52619200208267758032010-01-14T19:46:00.001-08:002010-01-14T19:46:38.094-08:00--ACRONYMS--<br /> DOS = Disk Operating System, or MS-DOS<br /> MSIE = Microsoft Internet Explorer<br /> TIF = Temporary Internet Files (folder)<br /> HD = Hard Drive<br /> OS = Operating System<br /> FYI = For Your Information<br /> <br /> 1)SEEING IS BELIEVING<br /> No. Enabling Windows Explorer to "show all files" does not show the files in mention. No. DOS does not<br /> list the files after receiving a proper directory listing from root. And yes. Microsoft intentionally<br /> disabled the "Find" utility from searching through one of the folders.<br /> <br /> Oh, but that's not all.<br /> <br /> To see for yourself simply do as you would normally do to clear your browsing history. Go to Internet<br /> Options under your Control Panel. Click on the [Clear History] and [Delete Files] buttons. (Make sure<br /> to include all offline content.)<br /> <br /> So, has your browsing history been cleared? One would think so.<br /> <br /> These are the names and locations of the "really hidden files":<br /> <br /> c:\windows\history\history.ie5\index.dat<br /> c:\windows\tempor~1\content.ie5\index.dat<br /> If you have upgraded MSIE several times, they might have alternative names of mm256.dat and<br /> mm2048.dat, and may also be located here:<br /> <br /> c:\windows\tempor~1\<br /> c:\windows\history\<br /> Not to mention the other alternative locations under:<br /> <br /> c:\windows\profiles\%user%\...<br /> c:\windows\application data\...<br /> c:\windows\local settings\...<br /> c:\windows\temp\...<br /> c:\temp\...<br /> (or as defined in your autoexec.bat.)<br /> <br /> FYI, there are a couple other index.dat files that get hidden as well, but they are seemingly not very<br /> important. See if you can find them.<br /> <br /> 2)IF YOU HAVE EVER USED MICROSOFT INTERNET EXPLORER<br /> 1) Shut your computer down, and turn it back on.<br /> 2) While your computer is booting keep pressing the [F8] key until you are given an option screen.<br /> 3) Choose "Command Prompt Only" (This will take you to true DOS mode.) Windows ME users must use a boot<br /> disk to get into real DOS mode.<br /> 4) When your computer is done booting, you will have a C:\&gt; followed by a blinking cursor.<br /> Type this in, hitting enter after each line. (Obviously, don't type the comments in parentheses.)<br /> <br /> C:\WINDOWS\SMARTDRV (Loads smartdrive to speed things up.)<br /> CD\<br /> DELTREE/Y TEMP (This line removes temporary files.)<br /> CD WINDOWS<br /> DELTREE/Y COOKIES (This line removes cookies.)<br /> DELTREE/Y TEMP (This removes temporary files.)<br /> DELTREE/Y HISTORY (This line removes your browsing history.)<br /> DELTREE/Y TEMPOR~1 (This line removes your internet cache.)<br /> <br /> (If that last line doesn't work, then type this<br /> <br /> CD\WINDOWS\APPLIC~1<br /> DELTREE/Y TEMPOR~1<br /> <br /> (If that didn't work, then type this<br /> <br /> CD\WINDOWS\LOCALS~1<br /> DELTREE/Y TEMPOR~1<br /> If you have profiles turned on, then it is likely located under \windows\profiles\%user%\, while older<br /> versions of MSIE keep them under \windows\content\.)<br /> <br /> FYI, Windows re-creates the index.dat files automatically when you reboot your machine, so don't be<br /> surprised when you see them again. They should at least be cleared of your browsing history.<br /> <br /> 3)CLEARING YOUR REGISTRY<br /> It was once believed that the registry is the central database of Windows that stores and maintains the<br /> OS configuration information. Well, this is wrong. Apparently, it also maintains a bunch of other<br /> information that has absolutely nothing to do with the configuration. I won't get into the other<br /> stuff, but for one, your typed URLs are stored in the registry.<br /> <br /> HKEY_USERS/Default/Software/Microsoft/Internet Explorer/TypedURLs/<br /> HKEY_CURRENT_USER/Software/Microsoft/Internet Explorer/TypedURLs/<br /> These "Typed URLs" come from MSIE's autocomplete feature. It records all URLs that you've typed in manually<br /> in order to save you some time filling out the address field.<br /> <br /> 4)SLACK FILES<br /> As you may already know, deleting files only deletes the references to them. They are in fact still sitting<br /> there on your HD and can still be recovered by a very motivated person.<br /> Use window washer to delete slack files. /http://www.webroot.com/download/0506/reg3ww.exe<br /> <br /> 5)STEP-BY-STEP GUIDE THROUGH YOUR HIDDEN FILES<br /> The most important files to be paying attention to are your "index.dat" files. These are database files<br /> that reference your history, cache and cookies. The first thing you should know is that the index.dat files<br /> is that they don't exist in less you know they do. They second thing you should know about them is that<br /> some will *not* get cleared after deleting your history and cache.<br /> <br /> To view these files, follow these steps:<br /> <br /> In MSIE 5.x, you can skip this first step by opening MSIE and going to Tools &gt; Internet Options &gt; [Settings] &gt; [View Files].<br /> Now write down the names of your alphanumeric folders on a piece of paper. If you can't see any alphanumeric<br /> folders then start with step 1 here:<br /> <br /> 1) First, drop to a DOS box and type this at prompt (in all lower-case). It will bring up Windows Explorer<br /> under the correct directory.<br /> <br /> c:\windows\explorer /e,c:\windows\tempor~1\content.ie5\<br /> You see all those alphanumeric names listed under "content.ie5?" (left-hand side.) That's Microsoft's<br /> idea of making this project as hard as possible. Actually, these are your alphanumeric folders that was<br /> created to keep your cache. Write these names down on a piece of paper. (They should look something like<br /> this: 6YQ2GSWF, QRM7KL3F, U7YHQKI4, 7YMZ516U, etc.) If you click on any of the alphanumeric folders then<br /> nothing will be displayed. Not because there aren't any files here, but because Windows Explorer has lied<br /> to you. If you want to view the contents of these alphanumeric folders you will have to do so in DOS.<br /> <br /> 2) Then you must restart in MS-DOS mode. (Start &gt; Shutdown &gt; Restart in MS-DOS mode. ME users use a<br /> bootdisk.)<br /> <br /> Note that you must restart to DOS because windows has locked down some of the files and they can only be<br /> accessed in real DOS mode.<br /> <br /> 3) Type this in at prompt:<br /> <br /> CD\WINDOWS\TEMPOR~1\CONTENT.IE5<br /> CD %alphanumeric%<br /> (replace the "%alphanumeric%" with the first name that you just wrote down.)<br /> <br /> DIR/P<br /> The cache files you are now looking at are directly responsible for the mysterious erosion of HD space<br /> you may have been noticing.<br /> <br /> 5) Type this in:<br /> <br /> CD\WINDOWS\TEMPOR~1\CONTENT.IE5<br /> EDIT /75 INDEX.DAT<br /> You will be brought to a blue screen with a bunch of binary.<br /> <br /> 6) Press and hold the [Page Down] button until you start seeing lists of URLs. These are all the sites<br /> that you've ever visited as well as a brief description of each. You'll notice it records everything<br /> ou've searched for in a search engine in plain text, in addition to the URL.<br /> <br /> 7) When you get done searching around you can go to File &gt; Exit. If you don't have mouse support in DOS<br /> then use the [ALT] and arrow keys.<br /> <br /> Next you'll probably want to erase these files by typing this:<br /> <br /> C:\WINDOWS\SMARTDRV<br /> CD\WINDOWS<br /> DELTREE/Y TEMPOR~1<br /> (replace "cd\windows" with the location of your TIF folder if different.)<br /> <br /> 9) Then check out the contents of your History folder by typing this:<br /> <br /> CD\WINDOWS\HISTORY\HISTORY.IE5<br /> EDIT /75 INDEX.DAT<br /> You will be brought to a blue screen with more binary.<br /> <br /> 10) Press and hold the [Page Down] button until you start seeing lists of URLS again.<br /> <br /> This is another database of the sites you've visited.<br /> <br /> 11) And if you're still with me, type this:<br /> <br /> CD\WINDOWS\HISTORY<br /> 12) If you see any mmXXXX.dat files here then check them out (and delete them.) Then:<br /> <br /> CD\WINDOWS\HISTORY\HISTORY.IE5<br /> CD MSHIST~1<br /> EDIT /75 INDEX.DAT<br /> More URLs from your internet history. Note, there are probably other mshist~x folders here so you can<br /> repeat these steps for every occurence if you please.<br /> <br /> 13) By now, you'll probably want to type in this:<br /> <br /> CD\WINDOWS<br /> DELTREE/Y HISTORY<br /> <br /> 6)HOW MICROSOFT DOES IT<br /> How does Microsoft make these folders/files invisible to DOS?<br /> <br /> The only thing Microsoft had to do to make the folders/files invisible to a directory listing is to<br /> set them +s[ystem]. That's it.<br /> <br /> So how does Microsoft make these folders/files invisible to Windows Explorer?<br /> <br /> The "desktop.ini" is a standard text file that can be added to any folder to customize certain aspects of<br /> the folder's behavior. In these cases, Microsoft utilized the desktop.ini file to make these files<br /> invisible. Invisible to Windows Explorer and even to the "Find: Files or Folders" utility. All that<br /> Microsoft had to do was create a desktop.ini file with certain CLSID tags and the folders would disappear<br /> like magic.<br /> <br /> To show you exactly what's going on:<br /> <br /> Found in the c:\windows\temporary internet files\desktop.ini and<br /> the c:\windows\temporary internet files\content.ie5\desktop.ini is this text:<br /> <br /> [.ShellClassInfo]<br /> UICLSID={7BD29E00-76C1-11CF-9DD0-00A0C9034933}<br /> Found in the c:\windows\history\desktop.ini and the c:\windows\history\history.ie5\desktop.ini is this text:<br /> <br /> [.ShellClassInfo]<br /> UICLSID={7BD29E00-76C1-11CF-9DD0-00A0C9034933}<br /> CLSID={FF393560-C2A7-11CF-BFF4-444553540000}<br /> The UICLSID line cloaks the folder in Windows Explorer. The CLSID line disables the "Find" utility<br /> from searching through the folder.<br /> <br /> To see for yourself, you can simply erase the desktop.ini files. You'll see that it will instantly give<br /> Windows Explorer proper viewing functionality again, and the "Find" utility proper searching capabilities<br /> again. Problem solved right? Actually, no. As it turns out, the desktop.ini files get reconstructed every<br /> single time you restart your computer. Nice one, Slick.<br /> <br /> Luckily there is a loophole which will keep Windows from hiding these folders. You can manually edit the<br /> desktop.ini's and remove everything except for the "[.ShellClassInfo]" line. This will trick windows into<br /> thinking they have still covered their tracks, and wininet won't think to reconstruct them.Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.comtag:blogger.com,1999:blog-5615618588140133269.post-53381325235932014282010-01-14T19:44:00.000-08:002010-01-14T19:44:04.951-08:00Windows Xp: Speed Up Your, Speed Up Your Network and Internet Access<br /> <br /> I have a dial up connection and it improve my speeds about 25% in surfing the internet. give it a try. Im IT , only do it if you feel comfortable with changing registry. <br /> <br /> Increasing network browsing speed<br /> <br /> Does your computer slow down when you browse your local area network and connect to other computers that are sharing data? One of the most common causes of this slowdown is a feature of Windows Explorer that looks for scheduled tasks on remote computers. This effort can take some time on some computers and can really slow down your browsing. The window with which you are browsing the network may appear to freeze momentarily, as the system is waiting for a response from the remote computer.<br /> <br /> Windows XP: Speeding Disk Access<br /> <br /> Although this problem is a complex one, the solution is very simple. Instead of having to wait for the remote scheduled tasks, which is useless information to anyone who is not a system administrator remotely configuring scheduled tasks, you can disable this feature.<br /> <br /> In order to do this, you will have to change the System Registry and delete a reference to a key so that this feature will not be loaded. To do this, follow these steps:<br /> <br /> 1. Open up the Registry Editor by clicking the Start Menu and selecting Run. Then type regedit in the text box and click the OK button.<br /> <br /> 2. Once the Registry Editor has loaded, expand the HKEY_LOCAL_MACHINE key.<br /> <br /> 3. Next, expand Software and then Microsoft.<br /> <br /> 4. Locate Windows and expand that as well.<br /> <br /> 5. You will want to be editing the main system files, so expand CurrentVersion.<br /> <br /> 6. Because this feature is a feature of the Windows component known as Explorer, expand the Explorer key.<br /> <br /> 7. Next, you will want to modify the remote computer settings, so expand the RemoteComputer key and then expand the NameSpace key to show all of the features that are enabled when you browse to a remote computer.<br /> <br /> 8. In the NameSpace folder you will find two entries. One is "{2227A280-3AEA-1069-A2DE-08002B30309D}" which tells Explorer to show printers shared on the remote machine. The other, "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}," tells Explorer to show remote scheduled tasks. This is the one that you should delete. This can be done by right-clicking the name of the key and selecting Delete.<br /> <br /> Tip:<br /> If you have no use for viewing remote shared printers and are really only interested in shared files, consider deleting the printers key, "{2227A280-3AEA-1069-A2DE-08002B30309D}", as well. This will also boost your browsing speed.<br /> <br /> Once you have deleted the key, you just need to restart and the changes will be in effect. Now your network computer browsing will be without needless delays.Y.SREE HARSHAhttp://www.blogger.com/profile/02989609821302696761noreply@blogger.com