Subscribe:
    Subscribe Twitter Facebook

    Tuesday, September 22, 2009

    Breaking In Windows XP Password


    Method 1:
    If you have an administrator account (Not Guest)
    then the XP users’ passwords can be reset using command prompt.
    Go to the task-bar and click on the Start button, then click on run and in the place given on dialog box type “command”, press enter.

    Now In the Command prompt type “net user” 
    the screen will display the list of users available on machine

    suppose there are three administrator users with the name of admin1, admin2 and admin3

    then the password of any user can be changed by logging into the account of any one administrator

    for example if we want to change the password of admin1
    then we can change it from the following command

    net user admin1 password

    similarly for other desired users

    The general syntax is for changing password is
    net user

    Limitations: The above method will only work if you are logged in as the administrator user.

    Method 2:

    Windows Recovery option,
    Boot from the Windows XP CD and press enter when you are prompted to Install Windows copy, on the next screen there is a repair existing Windows version. This method is also known as windows recovery method,
    The repair option will take as much time as the installation would have taken because the Windows file-system is replaced including the SAM file where the password is stored.
    C:WindowsSystem32configsam
    whereas the users’ setting remain untouched.
    Thus the users’ password is reset to NULL value.
    #In repair mode you have another hole to modify the password.It is easier.The steps are as following.
    Boot from xp bootable.After license agreement is done(pressing f8) select the target window for repair.
    After file copy completed machine will restart.And repair process will start.You will see ‘installing devices’ 39 minutes left etc. at bottom left of your screen.
    Now press Shift+f10.A console(command window) will open.
    type nusrmgr.cpl and hit enter.This will let you to enter in the user account setting.Now change the password.You will not be asked for old password. Just type the new password there.
    Continue the repair process.It is strongly recommended that you continue the repair until it is completed.
    You are done, the password is replaced.The password strength does not matter in this case.

    Method 3:

    Boot your computer from a live Linux CD or DVD which has an NTFS/HPFS file-system support.
    Then Mount the drive which has Windows copy installed on it. Copy the sam file on the location
    C:WindowsSystem32configsam
    Which will be mentioned as /media/disk-1/Windows/System32/config/sam

    It is a common misconception that sam file can be viewed through normal text editor, sam file isnt a normal text file.
    Gnome, KDE or vim text Editors won’t display the content of this file

    Open the file using Emacs Editor (available in nearly all the distributions of Live Linux). It will be hard to find the the password hashes, so go for the user-names which are not encrypted, just after the user-names passwords’ hashes can be found out, copy the code between “%” sign and on the theGoogle search for the rainbow tables, They will provide the decrypted value which have already been brute-forced earlier. This is isn’t a sure shot method, as the rainbow project is still under development. The password can be set to NULL by deleting the content, but this might result in the corruption of the sam file, and recovery is the only option left after it.
    Limitations: This Method can corrupt your SAM file, which may lead to a repair of Windows XP, and you can risk your personal data with that.

    Method 4:

    OPHcrack method.
    This is a sure shot password recovery method based upon bruteforcing.
    This Live CD is based upon the slax LiveCD v.5.1.7. It has been customized to include ophcrack 2.3.3 and the SSTIC04-10k tables set. It is able to crack 99.9%% of alphanumeric passwords. Since the tables have to be loaded into memory, cracking time varies with the amount of available RAM. The minimum amount of RAM required is 256MB (because the LiveCD uses a lot of it). The recommended amount is 512MB. Ophcrack will auto-detect the amout of free memory and adapts its behaviour to be able to preload all the tables it can.
    A shell script launched at the beginning of the X session(Session for managing your desktop) does the job of finding the Windows partition and starting appropriate programs to extract and crack password hashes. It will look for all partitions that contains hashes. If more than one are found, you will have to choose between them.
    If your partition is not detected, make sure your the partition containing the hashes you want to crack is mounted and the use ophcrack ‘Load from encrypted SAM’ function to recover your Windows hashes. Then click ‘Launch’ and the cracking process will start.
    Download the ISO image of OPH crack Live Linux CD from sourceforge mirrors.
    Another small application which resets the users’ password is available at
    Method 5:
    Cracking the admin password using windows live bootable cd (It come along with the pre built hacking tools like sam editor , rar password recovery , pdf password recovery ,etc.,.,
    Download all the files and extract the iso and burn it to a disk , Njoy Hacking Admin password




    Need Password? Check the source of the link:
    http://www.damasgate.com/vb/t92701.html



    Windows 7 Bootable CD?


    Windows 7 Bootable CD?





    What is it?
    It’s the Windows 7 Automated Installation Kit, or WAIK.  WAIK is useful for IT Professionals to have a boot disk that will boot up from a CD instead of the computer’s hard drive.  With the boot CD, you can boot with a CD and open up, you have the same basic functionality as you would have if you had booted up with a DOS floppy disk.  This boot disk also gives you a little extra functionality that I talk about a little later.
    Why do I need it?
    • Have you ever had a computer blue screen on you and you needed to get a file off the hard drive now?
    • Have you noticed that the use of floppy disks as a boot media is all but completely dead?
    • Have you ever had a boot sector virus that you needed to clean but couldn’t get to?
    • Have you ever wanted to install an OS from the ground up but needed a way to boot the computer first?
    • Have you ever just wanted to poke around on the drive without booting up through Windows?
    This allows you to do this.
    What do I need to install it?
    To install the Windows 7 AIK, you need to have one of the following OSes (Operating Systems) installed on a computer:
    • Windows Server 2003 R2 SP3
    • Windows Vista SP1
    • Windows Server 2008 family
    • Windows 7 family
    • Windows Server 2008 R2 family
    Where do I get the download?
    The Windows 7 AIK ISO image can be downloaded here.  The Windows 7 AIK Documentation can be downloaded here.
    Just for completeness, if you want to experiment with the Windows Vista WAIK, it can be downloaded here.  The Vista SP1/Windows Server 2008 WAIK can be downloaded here.
    After you’ve burned the DVD from the ISO image, insert it into a DVD drive.  The installation menu will appear:
    W7AIK_Install1
    Select the Windows AIK Setup option highlighted in Red in this image (below):
    W7AIK_Install2
    How do I build a bootable CD?
    This batch file assumes the following:
    1. that you have installed the WAIK on the computer’s C: drive in the default directory.  If you install in the WAIK in another directory, you’ll need to update the paths in the batch file (noted in blue).
    2. that you are installing the 32bit version (denoted as the “x86” parameter in purple);
    3. That you don’t currently have a directory (folder) on the C: drive called “winpe_x86”.  If you need to change the target folder, change the folders in orange.
    Open Notepad and copy the following batch file commands into Notepad:
    CD "C:\Program Files\Windows AIK\Tools\PETools" 
    CALL copype.cmd x86 c:\winpe_x86
    copy c:\winpe_x86\winpe.wim c:\winpe_x86\ISO\sources\boot.wim 
    copy "C:\program files\Windows AIK\Tools\x86\imagex.exe" C:\winpe_x86\iso\ 
    oscdimg -n -bC:\winpe_x86\etfsboot.com C:\winpe_x86\ISO C:\winpe_x86\winpe_x86.iso
    rem To remove the "Press any key to boot from CD" prompt during boot, 
    rem remove the bootfix.bin file from the \boot folder within your mounted image. 
    pause

    This will build a bootable CD ISO image that can be burned using any CD burner program that can burn a CD using an ISO image.  If you want to test the ISO image before you actually burn a CD, you can use Virtual PC 2007 SP1, which can be downloaded here.
    What does it look like when it boots?
    One of the things that I like about the Virtual PC application is that I can take screen shots of the boot process that booting to an actual computer doesn’t facilitate without a camera.  When I booted up in the Virtual PC program to the W7AIK CD, this is what the first screenshot actually looked like.  Notice that I’m running this in Virtual PC 2007 SP1.
    W7AIK_Boot1
    I just cut out the screenshot so that it would be less distracting.
    As the computer begins to boot up from the CD, this is what you’ll see…
    W7AIK_Screenshot1
    W7AIK_Screenshot2
    W7AIK_Screenshot3
    W7AIK_Screenshot4
    W7AIK_Screenshot5
    W7AIK_Screenshot6
    This is what the Windows 7 AIK leaves you at: a DOS prompt.  This disk is meant to be a bootable media to replace the floppy disk.  The great thing about this disk is that you can add programs that will be available when the disk boots up.  The boot disk drive letter for the bootable CD is the X: drive.  This allows you to use the C: drive, D: drive, etc letters for installing the OS and other programs.
    You must remember that the bootable CD is a pure 32bit (or 64bit, if you’ve built a 64bit bootable CD) environment and it will NOT be able to run 16bit programs.  If you try to run a 16bit program, you will get an error that the program cannot be found.  You’ll be able to do a directory listing of the program and see it, which is why it won’t make sense.  That’s the only way that W7AIK has to tell you that it can’t run a 16bit program.
    What else can I do with this disk?
    Okay, I’ve booted to a command prompt.  What now?  Well, now you have access to NTFS file system drives, older FAT/FAT32 drives via command prompt.  You also have access to USB devices thanks to plug-and-play being enabled.  You have access to the CD/DVD drives.  You have complete access over the local computer hard drives.  If you plug in a USB thumbdrive, it will automatically be assigned a drive letter and you will have access to it.  Nice, huh?
    Can you customize the batch file above? Sure!  This batch file is just meant to get you started.  There are a lot of ways that you can customize it.  There are add-ons that can be installed to extend the boot disk’s functionality.  This is just meant as a beginning point for those that want to experiment.

    Monday, September 14, 2009

    How to crack WEP with Intel PRO/Wireless 3945ABG

    How to crack WEP with Intel PRO/Wireless 3945ABG  is a task that can employ you for a long time. The Intel PRO/Wireless 3945ABG network adapter driver that comes from the manufacturer does not provide packet injection and network monitoring capabilities which are needed to crack WEP, and therefore before you attempt WEP cracking efforts, you have to update your driver first which can be a daunting task.

    What is WEP crack?

    First, let's explain some background to WEP cracking. WEP is short for Wired Equivalent Privacy or Wireless Encryption Protocol, and it is one of the measures in wireless security that were at the inception of wireless networking. WEP has been flawed since its inception, but because nothing better was available in the beginning of the Wi-Fi era, it was publicly implemented as "better to have flawed WEP than nothing at all." Because WEP includes many shortcomings, many enthusiasts out there enjoy simply going through the effort of attempting to "break it" or to "crack it". Cracking the WEP in this context means simply obtaining the WEP key to gain access to a wireless network access point and to the network. You can read more about WEP in general in our Wireless Wi-Fi network security tutorial 101 (part 1).

    Is WEP crack OK?

    Second, we have to talk about the legality of WEP cracking. Some people do it for fun, some do it to learn, some do it as a proof of concept, some do it to test their network vulnerability, some do it "just because", some do it for other reasons.
    Breaking someone's WEP key for the purpose of gaining access to someone else's Internet access or data is not ethical, and we can't assume any implied or expressed responsibility for your actions. This web page is provided for educational purposes only, and only to those visitors who wish to learn WEP cracking for legitimate reasons (such as testing their network).
    We provide this tutorial which talks about How to crack WEP with Intel PRO/Wireless 3945ABG. To be fair, we also would like to draw your attention to our five-part wireless security tutorial which helps you to make your network more secure. Our tutorial talks about WPA, WPA2, MAC addressing, IPSec, VPN, PSK, and many other wireless security measures.

    Is WEP crack easy?

    It depends on your initial knowledge and equipment. Cracking WEP itself is relatively easy and can take as little as 5 minutes. The problem is often with setting up your computer, so that it does what it needs to do for WEP cracking. In most cases, you need to upgrade your wireless driver which you first need to find somewhere. Finding out how to set up your computer to crack WEP can take weeks!

    Crack WEP with Intel PRO/Wireless 3945ABG

    The Intel PRO/Wireless 3945ABG network adapter is a relatively new network interface that is being put into currently manufactured laptops, especially ThinkPads. The driver that comes with the adapter from Intel does not support adapter promiscuous (monitor) mode and packet injecting and needs to be updated.
    Crack WEP with Windows XP, Windows Vista, or Linux?
    There are many tools and approaches available on the web for WEP cracking, and one can get easily lost and confused when reading all the information provided on discussion forums (OmniPeek, WinAirCrack, airmon, aircrack, Kismet, mac driver, ipwraw driver, ilw3945, etc.). The first question that needs to be answered is which platform to use. Some have had success with Windows XP. We have not seen anyone having success WEP cracking with Windows Vista. It is advised to attempt WEP cracking with Linux (we used UBUNTU). This is for one major reason. Since Linux is open source, it is much easier to find or develop Wi-Fi drivers for your Intel PRO/Wireless 3945ABG network adapter to get access the needed functionalities.
    Are you new to Linux? Do not worry. Downloading UBUNTU image, burning it to DVD and installing it as a dual boot to your computer is very simple and takes no more than a few hours. Just follow prompts in the Ubuntu installation process. After installing Ubuntu, get all system updates in the system application manager.
    Which Intel PRO/Wireless 3945ABG interface driver to use to crack WEP?
    Once you have your operating system ready, you have to upgrade and/or patch your wireless card driver, and this is where the biggest problems start. Your wireless card driver needs to support two important functionalities:
    Packet injection is a computer networking term which refers to sending a packet on a network into an already established connection.
    Monitor mode, or RFMON mode, allows a computer with a wireless network interface card (NIC) to monitor all traffic received from the wireless network. Monitor mode allows packets to be captured without having to associate with an access point or ad-hoc network first.
    When searching web, you can find information about endless number of drivers for the Intel PRO/Wireless 3945ABG adapter, such as mac80211, IEEE80211, ipwraw, iwl3945, ipw3945, iwlwifi, madwifi, serialmonkey driver, driver from tinyshell.be, wildpacket driver, and many others. Installing and/or patching them may not be very easy.
    We have had good luck with the ipwraw driver from aircrack. The lines of code below install the driver (together with other two packages) to your Ubuntu installation.
    sudo apt-get install build-essential (get core files)
    sudo apt-get install libssl-dev (get supporting library)
    wget http://dl.aircrack-ng.org/drivers/ipwraw-ng-2.3.4-04022008.tar.bz2 (downloads driver)
    tar -xjf ipwraw-ng* (extract the archive file)
    cd ipwraw-ng (go to the extracted folder)
    make (compile the source files into a binary)
    sudo make install (install the driver)
    sudo make install_ucode
    echo "blacklist ipwraw" | sudo tee /etc/modprobe.d/ipwraw (blacklist the default ipwraw)
    sudo depmod -ae (create a dependency file for the modules)
    sudo modprobe -r iwl3945 (unload driver that you do not need)
    sudo modprobe ipwraw (load the driver that you installed)
    sudo ifconfig wlan0 up (enable the network adapter)
    airmon-ng start wlan0 (put your interface into monitor mode)
    Now you should have an upgraded driver available. If you get the following error message when setting your network interface into monitor mode
    wlan0 iwl3945 - [phy0]/usr/sbin/airmon-ng: line 316: /sys/class/ieee80211/phy0/add_iface: No such file or directory
    mon0: ERROR while getting interface flags: No such device
    then it means you are not using ipwraw. Check your loaded modules with the lsmod command. If you see something like iwl3945 or mac802 on the list, then you are not using the patched driver.
    ipwraw module for WEP crack with Intel PRO Wireless 3945
    You should see something like ipwraw, and the iwl3945 and iwlwifi should not be on the list. This is what you do want to see in your iwconfig screen:
    How to crack WEP with Intel PRO/Wireless 3945ABG
    Important: Once your driver is set to Monitor mode, you will not be able to browse the web in your internet browser until the adapter is set back to the Managed mode.
    The next step is to pick the program that does the job of WEP crack.
    Which program to use to crack WEP?
    Assuming we have our operating system ready and our driver updated to allow packet capturing and packet injection, we have to choose the right application that does the math when finally cracking WEP. We have chosen the aircrack-ng suite. Although Ubuntu comes with the aircrack preinstalled, it is advised to get the latest version:
    sudo apt-get install aircrack
    This command executed in the terminal window will get aircrack and install it.

    How to crack WEP?

    Once we have our computer ready for WEP cracking, we can proceed to the fun part which is described on the next page: How to crack WEP encryption (wifi security).

    Simple Socket File Transfer : Dead simple file transfer utility

    Simple Socket File transfer is a file transfer program which allows you to transfer files between computers by simply listening to a configurable port number. Though there are hundreds of ways to transfer files between computer over a network but this software is for those people who just dont want distraction of too many features and GUI jargon.

    Socket file transfer
    Socket file transfer


    There are two ways to use this software.

    One being an Active listener where you connect to another computer running the same software, you need the IP and port number for that,

    Another by becoming a passive user where you just wait for the connection and when that is done you can very well send the file back to the connected host.

    Features :

    ■It works with NAT or network address translators but you need to port forward.
    ■Allows you to pause and resume file transfer.
    ■MD5 Has check to make sure that transferred are without errors.

    Where you can use this ?

    If you have 4-5 computer at home, make one of them as storage area and let others just dumb the file to it by connecting to that computer using IP address.

    This software doesnt support command line interface else you could have thought of using it in small project where the process of transferring file can be automated. Check out SSFT

    Wednesday, September 9, 2009

    Download anything from google

    Songs

    javascript:Qr='';if(!Qr){void(Qr=prompt('ENTERARTISTOR SONGNAME:',''))};if(Qr)location.href='http://www2.google.com/ie?query=%22parent+directory%22+%22'+escape(Qr)+'%22+mp3+OR+
    wma+OR+ogg+-html+-htm&num=100&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=active&sa=N'

    E-book


    javascript:Qr='';if(!Qr){void(Qr=prompt('Enter Author name OR Book 
    name:',''))};if(Qr)location.href='http://www2.google.com/ie?query=%22parent+directory%22+%22'+escape(Qr)+'%22+pdf+OR+ra
    r+OR+zip+OR+lit+OR+djvu+OR+pdb+-html+-htm&num=100&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=active&sa=N'

    Image

    javascript:Qr='';if(!Qr){void(Qr=prompt('ENTER IMAGE 
    NAME:',''))};if(Qr)location.href='http://www2.google.com/ie?query=%22parent+directory%22+%22'+escape(Qr)+'%22+jpg+OR+pn
    g+OR+bmp+-html+-htm&num=100&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=active&sa=N'

    Movie

    javascript:Qr='';if(!Qr){void(Qr=prompt('ENTER MOVIE 
    NAME:',''))};if(Qr)location.href='http://www2.google.com/ie?query=%22parent+directory%22+%22'+escape(Qr)+'%22+avi+OR+m
    ov+OR+mpg+-html+-htm&num=100&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=active&sa=N'

    Application

    javascript:Qr='';if(!Qr){void(Qr=prompt('ENTER app NAME(CREATED BY 
    5ury4;if(Qr)location.href='http://www2.google.com/ie?query=%22parent+directory%22+%22'+escape(Qr)+'%22+zip+OR+rar+OR+
    exe+-html+-htm&num=100&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=active&sa=N''

    Tuesday, September 8, 2009

    Few More wifi hacking icks


    Essential Wireless Hacking Tools,& the most important wireless hacing tools ,here are the most essential tools for wireless hacking ,guys interested in gaining a deeper knowledge of wireless security and exploiting vulnerabilities will need a good set of base tools with which to work. Fortunately, there are an abundance of free tools available on the Internet. This list is not meant to be comprehensive in nature but rather to provide some general guidance on recommended tools to build your toolkit. Finding Wireless Networks:
    Locating a wireless network is the first step in trying to exploit it. There are two tools that are commonly used in this regard:
    Network Stumbler a.k.a NetStumbler – This Windows based tool easily finds wireless signals being broadcast within range – A must have. It also has ability to determine Signal/Noise info that can be used for site surveys. I actually know of one highly known public wireless hotspot provider that uses this utility for their site surveys.

    Essential Wireless Hacking Tools.. - PANKS-HACK


    (NetStumbler Screenshot)
    Kismet – One of the key functional elements missing from NetStumbler is the ability to display Wireless Networks that are not broadcasting their SSID. As a potential wireless security expert, you should realize that Access Points are routinely broadcasting this info; it just isn’t being read/deciphered. Kismet will detect and display SSIDs that are not being broadcast which is very critical in finding wireless networks.


    Essential Wireless Hacking Tools.. - PANKS-HACK

    (Kismet Screenshot)

    Attaching to the Found Wireless Network:Once you’ve found a wireless network, the next step is to try to connect to it. If the network isn’t using any type of authentication or encryption security, you can simply connect to the SSID. If the SSID isn’t being broadcast, you can create a profile with the name of the SSID that is not being broadcast. Of course you found the non-broadcast SSID with Kismet, right? If the wireless network is using authentication and/or encryption, you may need one of the following tools.

    Airsnort – This is a very easy to use tool that can be used to sniff and crack WEP keys. While many people bash the use of WEP, it is certainly better than using nothing at all. Something you’ll find in using this tool is that it takes a lot of sniffed packets to crack the WEP key. There are additional tools and strategies that can be used to force the generation of traffic on the wireless network to shorten the amount of time needed to crack the key, but this feature is not included in Airsnort.
    Essential Wireless Hacking Tools.. - PANKS-HACK(Screenshot of Airsnort in Action) CowPatty – This tool is used as a brute force tool for cracking WPA-PSK, considered the “New WEP” for home Wireless Security. This program simply tries a bunch of different options from a dictionary file to see if one ends up matching what is defined as the Pre-Shared Key. Essential Wireless Hacking Tools.. - PANKS-HACK
    (Cowpatty Options Screenshot) ASLeap – If a network is using LEAP, this tool can be used to gather the authentication data that is being passed across the network, and these sniffed credentials can be cracked. LEAP doesn’t protect the authentication like other “real” EAP types, which is the main reason why LEAP can be broken. Essential Wireless Hacking Tools.. - PANKS-HACK
    (Asleap Options Screenshot)

    Sniffing Wireless Data:

    Whether you are directly connected to a wireless network or not, if there is wireless network in range, there is data flying through the air at any given moment. You will need a tool to be able to see this data. Wireshark (formerly Ethereal) – While there has been much debate on the proper way to pronounce this utility, there is no question that it is an extremely valuable tool. Ethereal can scan wireless and Ethernet data and comes with some robust filtering capabilities. It can also be used to sniff-out 802.11 management beacons and probes and subsequently could be used as a tool to sniff-out non-broadcast SSIDs. Essential Wireless Hacking Tools.. - PANKS-HACK
    (Screenshot of Ethereal in Action) Essential Wireless Hacking Tools.. - PANKS-HACK
    (Yahoo IM Session being sniffed in Ethereal) The aforementioned utilities, or similar ones, will be necessities in your own wireless security toolkit. The easiest way to become familiar with these tools is to simply use them in a controlled lab environment. And cost is no excuse as all of these tools are available freely on the Internet.

    Protecting Against These Tools:

    Just as it’s important to know how to utilize the aforementioned tools, it is important to know best practices on how to secure your Wireless Network Against these tools. NetStumbler – Do not broadcast your SSID. Ensure your WLAN is protected by using advanced Authentication and Encryption. Kismet – There’s really nothing you can do to stop Kismet from finding your WLAN, so ensure your WLAN is protected by using advanced Authentication and Encryption Airsnort – Use a 128-bit, not a 40-bit WEP encryption key. This would take longer to crack. If your equipment supports it, use WPA or WPA2 instead of WEP (may require firmware or software update). Cowpatty – Use a long and complex WPA Pre-Shared Key. This type of key would have less of a chance of residing in a dictionary file that would be used to try and guess your key and/or would take longer. If in a corporate scenario, don’t use WPA with Pre-Shared Key, use a good EAP type to protect the authentication and limit the amount of incorrect guesses that would take place before the account is locked-out. If using certificate-like functionality, it could also validate the remote system trying to gain access to the WLAN and not allow a rogue system access. ASLeap – Use long and complex credentials, or better yet, switch to EAP-FAST or a different EAP type. Ethereal – Use encryption, so that anything sniffed would be difficult or nearly impossible to break. WPA2, which uses AES, is essentially unrealistic to break by a normal hacker. Even WEP will encrypt the data. When in a Public Wireless Hotspot (which generally do not offer encryption), use application layer encryption, like Simplite to encrypt your IM sessions, or use SSL. For corporate users, use IPSec VPN with split-tunneling disabled. This will force all traffic leaving the machine through an encrypted tunnel that would be encrypted with DES, 3DES or AES.

    Bidvertiser