How to crack windows 7 password and set password reset disk.

Hello guys,

This is Nirmal back with few techniques and tips.Today we'll talk about cracking passwords for windows 7 and it precaution.
Forgetting is my speciality.It would also happen with anyone.You may have forgotten your password.So,guys today I'm going to show you how to Crack Windows 7 Passwords and at end I'll show you way to set Password Reset Disk/Tool.

"Prevention is better than cure."

Prevention:

If you have not experienced this problem of forgetting or losing your Windows password, you are probably one of those people that likes to write their password down in case of emergencies like these.Its not healthy to write down it on paper.
To add another safety measure, you can use a built in feature that is found in Windows 7 that allows you to reset your password any time you like.

To enable this feature you need to follow the steps below:

1. Go to your computer. Click Start and go to the Control Panel.

2. Select the option User Accounts and Family Safety.

3. Select the option User Accounts.

4. Select the option Create a Password Reset Disk. You need to enter your existing password.

5. You will need to save this password reset tool on a USB drive.

Making Password reset Tool to unlock PC.

Not everyone thinks of creating the password reset tool from Windows 7.
When you download the file onto a PC and create the utility on a USB.
The tool will scan your computer and reset your password in just a few minutes.You also get lifetime upgrades.

Other Uber options are also there but we'll talk about it later on...
Till then Sayonara...


Have fun hacking

How To Start Penetration Testing by Web Application Hacking.

Hello Guys,

Being a hacker is exciting but it is more of Responsible task.
To start learning new things, you must be aware of what's going on in background while hacking foreground.
So,To enrich your Tech-hunger and learn hacking,This is a step toward being Hacker.

Anyways Let's go to Core Part,

Today , we 're going to learn about Web Application Hacking.


As per Wikipedia.org ,

Web Application:

A web application is an application that is accessed over a network such as the Internet or an intranet. The term may also mean a computer software application that is coded in a browser-supported language (such as JavaScript, combined with a browser-rendered markup language like HTML) and reliant on a common web browser to render the application executable."

There are several projects which helps to learn and provide sample hacking application for Techno-geek and Penetration Testers,Among them;These are several projects which can be found helpful.

• Gruyere (live) -- http://google-gruyere.appspot.com/
  
• FreeBank Online(live) -- http://zero.webappsecurity.com/
  
• Crack Me Bank (live) -- http://crackme.cenzic.com/
  
• Acunetix Acublog -- http://testaspnet.vulnweb.com (registration required)
  
• Hacme Tools -- http://www.foundstone.com/us/resources/proddesc/
  

• WebGoat -- http://www.owasp.org/index.php/OWASP_WebGoat_Project

These tools provide in-built Web-Server and Framework to test hacking application.

For a newbie,I would recommend "WebGoat" or "Acuentix".

WebGoat is built upon Java framework,So to install it requires JRE (Java Runtime Environment)has built-in Apache Tomcat Web-Server installed.

It provides several attack systems like SQL Injection,XSS (cross site scripting) attack practice,Firewall Bypassing,Man in The Middle Attack etc.
It provides deep information regarding Web Application and Its Security features.These feature makes it unique,

1. It has buit in Web Server
2. It provides Solution along with Problem
3. It is Open source Software.
4. It provides source of framework along with application.
5. It gives hints whenever some difficulty occur with one click

To install WebGoat,I would recommend using Virtual OS by VMware Or Virtual box as it makes our OS tremendously vulnerable to attack.
 
Download:

For Virtual Sessions :

1) Virtual Box : www.virtualbox.org

or

2) VMware : www.vmware.com

  
So,Its end of post.Meet you guys next time.Till then Have safe hacking and Bring endeavor to satisfy your Techno-lust.

For Query,Post a Comment.

Nirmal Kantharia

 (Nirmal.kantharia@gmail.com)

 

Spyware:

     



There are a lot of PC users that know little about "Spyware", "Mal-ware", "hijackers", "Dialers" & many more. This will help you avoid pop-ups, spammers.

What is spy-ware?
Spy-ware is Internet jargon for Advertising Supported software (Ad-ware). It is a way for shareware authors to make money from a product, other than by selling it to the users. There are several large media companies that offer them to place banner ads in their products in exchange for a portion of the revenue from banner sales. This way, you don't have to pay for the software and the developers are still getting paid. If you find the banners annoying, there is usually an option to remove them, by paying the regular licensing fee.

Known spywares:
There are thousands out there, new ones are added to the list everyday.

But here are a few:
Alexa, Aureate/Radiate, BargainBuddy, ClickTillUWin, Conducent Timesink,Flashpoint/Flashtrack, Flyswat, Gator, GoHip, Hotbar, ISTbar, Lions Pride Enterprises/Blazing Logic/Trek Blue, Lop (C2Media), NewDotNet, Realplayer, Songspy, Xupiter,WebHancer, Windows Messenger Service.

How to check if a program has spyware?
The is this Little site that keeps a database of programs that are known to install spyware.

Check Here:
http://www.spywareguide.com/product_search.php

If you would like to block pop-ups (IE Pop-ups).
There tons of different types out there, but these are the 2 best, i think.

Try: Google Toolbar (http://toolbar.google.com/)
(Freeware)

Try: AdMuncher (http://www.admuncher.com) This program is Shareware.
Try:Adblock Plus(Firefox addon...You might get it in Google Chrome also)

If you want to remove the "spyware" try these.

Try: Lavasoft Ad-Aware (http://www.lavasoftusa.com/)
(Freeware)
Info: Ad-aware is a multi spyware removal utility, that scans your memory, registry and hard drives for known spyware components and lets you remove them.

Try: Spybot-S&D (http://www.safer-networking.org/)
(Freeware)
Info: Detects and removes spyware of different kinds (dialers, loggers, trojans, user tracks) from your computer. Blocks ActiveX downloads, tracking cookies and other threats. Over 10,000 detection files and entries.

Try: BPS Spyware and Adware Remover
(http://www.bulletproofsoft.com/spyware-remover.html)
(Shareware)
Info: Adware, spyware, trackware and big brotherware removal utility with multi-language support. It scans your memory, registry and drives for known spyware and lets you remove them. Displays a list and lets you select the items you'd like to remove.

Try: Spy Sweeper v2.2 (http://www.webroot.com/wb/products/spysweeper/index.php)
(Shareware)
Info: Detects and removes spyware of different kinds (dialers, loggers, trojans, user tracks) from your computer.
The best scanner out there, and updated all the time.

Try: HijackThis 1.97.7
(http://www.spywareinfo.com/~merijn/downloads.html)
(Freeware)
Info: HijackThis is a tool, that lists all installed browser add-on, buttons, startup items and allows you to inspect them, and optionally remove selected items.


If you would like to prevent "spyware" being install.

Try: SpywareBlaster 2.6.1 (http://www.wilderssecurity.net/spywareblaster.html)
Info: SpywareBlaster doesn't scan and clean for so-called spyware, but prevents it from being installed in the first place.It achieves this by disabling the CLSIDs of popular spyware ActiveX controls, and also prevents the installation of any of them via a webpage.

Try: SpywareGuard 2.2 (http://www.wilderssecurity.net/spywareguard.html) (Freeware)
Info: SpywareGuard provides a real-time protection solution against so-called spyware. It works similar to an anti-virus program, by scanning EXE and CAB files on access and alerting you if known spyware is detected.

Try: XP-AntiSpy (http://www.xp-antispy.org/)
(Freeware)
Info: XP-AntiSpy is a small utility to quickly disable some built-in update and authentication features in WindowsXP that may rise security or privacy concerns in some people.

Try: SpySites (http://camtech2000.net/Pages/SpySites_Prog...ml#SpySitesFree)
(Freeware)
Info: SpySites allows you to manage the Internet Explorer Restricted Zone settings and easily add entries from a database of 1500+ sites that are known to use advertising tracking methods or attempt to install third party software.

If you would like more Information about "spyware".
Check these sites.
http://www.spychecker.com/
http://www.spywareguide.com/
http://www.cexx.org/adware.htm
http://www.thiefware.com/links/
http://simplythebest.net/info/spyware.html

Usefull tools...
Try: Stop Windows Messenger Spam 1.10 (http://www.jester2k.pwp.blueyonder.co.uk/j...r2ksoftware.htm)
(Freeware)
Info: "Stop Windows Messenger Spam" stops this Service from running and halts the spammers ability to send you these messages.

----------------------------------------------------------------------------

     

Have Fun Hacking,
Nirmal kantharia.

Increase Your Modem Speed

     

==========================================
Hack Your Modem And Increase Your Download Speed:



Hack Your Modem and Increase Your Download Speed from 64Kbps to any Speed You Wish.

Most of us will be feeling that the surfing speed which is allocated by our ISP is not enough. People with 64Kbps will think 128Kbps will be cool speed. People with 128Kbps will think 256Kbps will be cool and so on

This tutorial will teach you how to increase your 64Kbps link to 512Kbps or what ever speed you like.

It is very much possible to do this. With a bit of luck if your Cable Internet Service Provider are very uneducated on how this very new technology works and leave some key loopholes open for you to grab vital information on how to accomplish this task. But this tutorial will no guarantee you 100% success.

Okay here we go. I'm going to try to explain you as best as I can to accomplish re-configuring your SB5100, SB4100 or SB3100 cable modem

Theory of cable modem working:

All the cable modems when it boots up it will search for an "Image file" where in all configuration like your upload speed limit and download speed limit is defined. This "Image file" is stored in ISP`s TFTP server. Modem will be pre-configured with the ISP`s TFTP server IP address and the Image file name to be downloaded. When the modem boots up it query TFTP server and download Image file from TFTP server according to this this our speed limits will be set.

Our Mission:

Get this Image file from ISP`s TFTP server, reconfigure it according to our need and force our modem to download this file from our Computer rather than downloading it from our ISP`s TFTP server.

Steps to accomplish:

1). Get cable modems MAC address

2). Get your ISPs TFTP server IP address

3). Get name and path of the "configuration file" or Image file stored in the ISP`s TFTP server.

4). Download Image file from ISP`s TFTP server.

5). Decrypt the Image file which you downloaded from ISP`s TFTP server

6). Modify the Image file

7). Encrypt the modified Image file

8). Change your computer's TCP configuration same as ISP`s TFTP server (i.e. IP address same as ISP`s TFTP server)

9). Host TFTP server in your computer

10). Put Image file in the base directory of your TFTP

11). Restart your modem

12). Changer your PC's IP back as given by ISP

13). OOPS Done. Start surfing with your new speed

1). Get cable modems MAC address

You can either look at the back of the modem to get this MAC Address or you can logon to your Cable modem with your Web Browser hxxp://192.168.100.1/ . This is internal HTML pages stored within your DOCsis cable modem (SB5100, SB4100 and SB3100) that gives you even more vital information on configuration. Unless it is turned off by your ISP. This feature might be totally turned off by your ISP.

2). Get your ISPs TFTP server IP address

3). Get name and path of the "configuration file" or Image file stored in the ISP`s TFTP server.

For getting this vital information you have to do an SNMP walk over your modem. For doing this you can use any one of the tools below

a) There's a program called QUERY.EXE from Weird Solutions which is a BOOTP packet request program that will tell you everything you need to know, without all these extra steps. It will display the Image Filename, TFTP server address, which is really all you need to get started. To use this BOOTP QUERY tool, you need the MAC address of your cable modem

Or

Experts can use Solarwinds SNMP program

Or

c) Beginners can use DOCSIS Diagnosis utility

Or

d) Beginners can use SNMPWALK Tool

use command "snmpwalk 192.168.100.1 public"

NOTE: Use modem's IP address as "192.168.100.1" (SB5100, SB4100 and SB3100) when it asked to provide by any of the above tools. SNMP community is "Public"

Using the above tools you will get the information of your ISP`s TFTP server IP and the name of your "Image file" stored in that TFTP server
All your vital information is stored in this file, One of which is the MaxRateDown 2621440; MaxRateUp 393216;. (This was my ISP settings. Which you can see is similar to what speed I was getting. 40KB/s up and 250 KB/s down)

Among these, the one we need are:
Configuration TFTP Server = 194.*.*..90 (replace this with yours throughout in the doc)
Configuration filename = isrr.bin (replace this with yours throughout in the doc)
And
IP fragments created = 0
IP address.10.xxx.xxx.xxx = 10.xxx.xxx.xxx
IP address.192.168.100.1 = 192.168.100.1 (the IP address of the cable modem, (replace this with yours throughout in the doc)
IP-to-If-index.10.xxx.xxx.xxx = 2

Suggestion: You can do this step by sniffing the modem i.e. "192.168.100.1" when modem boots up. I never tried this method. Try your luck.


4). Download Image file from ISP`s TFTP server.

For doing this got to your command prompt and use below commands with out quotes and bracket.


"C:\tftp -i GET "

Okay now you got Image file from your ISP`s TFTP server.


5). Decrypt the Image file which you downloaded from ISP`s TFTP server.

6). Modify the Image file

7). Encrypt the modified Image file

Use docsis tool which you can download from

http://sourceforge.net/projects/docsis

using this program you can decrypt image file change the upload speed and download speed ,save it and encrypt back. Rename this newly created file same as your original image file.


8). Change your computer's TCP configuration same as ISP`s TFTP server (i.e. IP address same as ISP`s TFTP server)

Go to my network place and right click ->properties
Select your LAN Card right click ->property->Internet Protocol (TCP-IP) double click on it and change it to as following values
Configure your TPC's TCP settings as below
IP: 194.*.*.90 (replace with the ISP's TFTP server)
Netmask: 255.255.255.0
Gateway: 192.168.100.1 (replace with your cable modem's IP address)

Note: Gateway should be 192.168.100.1 then only your modem can communicate with computer.


9). Host TFTP server in your computer

10). Put Image file in the base directory of your TFTP

11). Restart your modem

Download TFTP Server software and host TFTP server in your computer
You can download TFTP server from:

ftp://ftp.ida.net/pub/wireless/tftpd32.exe

Start TFTPD32 server. Go to Settings and set the Security to None. Increase the timeout to 20secs and the Max Retransmit to 6. Choose to translate UNIX filenames. Make sure it's base directory point to where the isrr.bin is (i.e. the image file which you modified). If you need to replicate a directory pathname along with the image file, then make a directory from root that corresponds to the image file pathname.

Restart your modem, and AS SOON as the SEND light goes solid, you should see a receive on your TFTP server i.e. your PC


12). Changer your PC's IP back as given by ISP
13). OOPS Done. Start surfing with your new speed

Now you change your TCP settings of your PC back to normal as given by ISP. (I.e. Put your original IP address and gateway)

Oops you hacked your modem. Test out by downloading some files using DAP (Download accelerator plus)

Note: This speed will remain same until you restart your cable modem. So each time you reboot your modem you have to follow the steps 8,9,10,11 and 12.
==========================================================

P.S: This is not my work...Got from a chat as tutorial.So,I am spreading it.:)

Have Fun Hacking,
Nirmal kantharia.



 

     
     

     
============================================================

How To Bypass Internet Censorship:

Friends,administrator at our college or any public; might have closed internet or have blocked some sites...


Proxy is not so cool but one way to bypass.Excluding it,there are many ways to do so...
Check Out this Site...

http://www.zensur.freerk.com

Enjoy,

Nirmal kantharia.

Comment and critic accepted..:)


============================================================

     
     
      Login with Facebook