Hi All,
I know there are a lot of people who love using the Run Prompt or the
Command Prompt rather than using the Mmc control...
So here are some quick tips that you can use ...
Enjoy...
List is big, but still i hope it is useful!!!
* Accessibility Controls : access.cpl
* Add Hardware Wizard : hdwwiz.cpl
* Add/Remove Programs : appwiz.cpl
* Administrative Tools : control admintools
* Automatic Updates : wuaucpl.cpl
* Bluetooth Transfer Wizard : fsquirt
* Calculator : calc
* Certificate Manager : certmgr.msc
* Character Map : charmap
* Check Disk Utility : chkdsk
* Clipboard Viewer : clipbrd
* Command Prompt : cmd
* Component Services : dcomcnfg
* Computer Management : compmgmt.msc
* Date and Time Properties : timedate.cpl
* DDE Shares : ddeshare
* Device Manager : devmgmt.msc
* Direct X Control Panel (If Installed)* : directx.cpl
* Direct X Troubleshooter : dxdiag
* Disk Cleanup Utility : cleanmgr
* Disk Defragment : dfrg.msc
* Disk Management : diskmgmt.msc
* Disk Partition Manager : diskpart
* Display Properties : control desktop
* Display Properties : desk.cpl
* Display Properties (w/Appearance Tab Preselected) : control color
* Dr. Watson System Troubleshooting Utility : drwtsn32
* Driver Verifier Utility : verifier
* Event Viewer : eventvwr.msc
* File Signature Verification Tool : sigverif
* Findfast : findfast.cpl
* Folders Properties : control folders
* Fonts : control fonts
* Fonts Folder : fonts
* Free Cell Card Game : freecell
* Game Controllers : joy.cpl
* Group Policy Editor (XP Prof) : gpedit.msc
* Hearts Card Game : mshearts
* Iexpress Wizard : iexpress
* Indexing Service : ciadv.msc
* Internet Properties : inetcpl.cpl
* IP Configuration (Display Connection Configuration) : ipconfig
/all
* IP Configuration (Display DNS Cache Contents) : ipconfig
/displaydns
* IP Configuration (Delete DNS Cache Contents) : ipconfig /flushdns
* IP Configuration (Release All Connections) : ipconfig /release
* IP Configuration (Renew All Connections) : ipconfig /renew
* IP Configuration (Refreshes DHCP & Re-Registers DNS) : ipconfig
/registerdns
* IP Configuration (Display DHCP Class ID) : ipconfig /showclassid
* IP Configuration (Modifies DHCP Class ID) : ipconfig /setclassid
* Java Control Panel (If Installed) : jpicpl32.cpl
* Java Control Panel (If Installed) : javaws
* Keyboard Properties : control keyboard
* Local Security Settings : secpol.msc
* Local Users and Groups : lusrmgr.msc
* Logs You Out Of Windows : logoff
* Microsoft Chat : winchat
* Minesweeper Game : winmine
* Mouse Properties : control mouse
* Mouse Properties : main.cpl
* Network Connections : control netconnections
* Network Connections : ncpa.cpl
* Network Setup Wizard : netsetup.cpl
* Notepad : notepad
* Nview Desktop Manager (If Installed) : nvtuicpl.cpl
* Object Packager : packager
* ODBC Data Source Administrator : odbccp32.cpl
* On Screen Keyboard : osk
* Opens AC3 Filter (If Installed) : ac3filter.cpl
* Password Properties : password.cpl
* Performance Monitor : perfmon.msc
* Performance Monitor : perfmon
* Phone and Modem Options : telephon.cpl
* Power Configuration : powercfg.cpl
* Printers and Faxes : control printers
* Printers Folder : printers
* Private Character Editor : eudcedit
* Quicktime (If Installed) : QuickTime.cpl
* Regional Settings : intl.cpl
* Registry Editor : regedit
* Registry Editor : regedit32
* Remote Desktop : mstsc
* Removable Storage : ntmsmgr.msc
* Removable Storage Operator Requests : ntmsoprq.msc
* Resultant Set of Policy (XP Prof) : rsop.msc
* Scanners and Cameras : sticpl.cpl
* Scheduled Tasks : control schedtasks
* Security Center : wscui.cpl
* Services : services.msc
* Shared Folders : fsmgmt.msc
* Shuts Down Windows : shutdown
* Sounds and Audio : mmsys.cpl
* Spider Solitare Card Game : spider
* SQL Client Configuration :cliconfg
* System Configuration Editor : sysedit
* System Configuration Utility : msconfig
* System File Checker Utility (Scan Immediately) : sfc /scannow
* System File Checker Utility (Scan Once At Next Boot) : sfc
/scanonce
* System File Checker Utility (Scan On Every Boot) : sfc /scanboot
* System File Checker Utility (Return to Default Setting) : sfc
/revert
* System File Checker Utility (Purge File Cache) : sfc /purgecache
* System File Checker Utility (Set Cache Size to size x) : sfc
/cachesize=x
* System Properties : sysdm.cpl
* Task Manager : taskmgr
* Telnet Client : telnet
* User Account Management : nusrmgr.cpl
* Utility Manager : utilman
* Windows Firewall : firewall.cpl
* Windows Magnifier : magnify
* Windows Management Infrastructure : wmimgmt.msc
* Windows System Security Tool : syskey
* Windows Update Launches : wupdmgr
* Windows XP Tour Wizard : tourstart
* Wordpad : write
Saturday, December 27, 2008
Complete List of Win XP/XP Cmd
ADDUSERS - Add or list users to/from a CSV file.
ARP - Address Resolution Protocol
ASSOC - Change file extension associations
ASSOCIAT - One step file association
AT - Schedule a command to run at a later time
ATTRIB – Change file attributes
BOOTCFG - Edit Windows boot settings
BROWSTAT - Get domain, browser and PDC info
CALL - Call one batch program from another
CD - Change Directory - Move to a specific Folder
CHANGE - Change Terminal Server Session properties
CHKDSK - Check Disk - check and repair disk problems
CHKNTFS - Check the NTFS file system
CHOICE - Accept keyboard input to a batch file
CIPHER - Encrypt or Decrypt files/folders
CLEANMGR - Automated cleanup of Temp files, recycle bin
CLEARMEM - Clear memory leaks
CLIP - Copy STDIN to the Windows clipboard.
CLS - Clear the screen
CLUSTER - Windows Clustering
CMD - Start a new CMD shell
COLOR - Change colors of the CMD window
COMP - Compare the contents of two files or sets of files
COMPACT - Compress files or folders on an NTFS partition
COMPRESS - Compress individual files on an NTFS partition
CON2PRT - Connect or disconnect a Printer
CONVERT - Convert a FAT drive to NTFS.
COPY - Copy one or more files to another location
CSVDE - Import or Export Active Directory
ARP - Address Resolution Protocol
ASSOC - Change file extension associations
ASSOCIAT - One step file association
AT - Schedule a command to run at a later time
ATTRIB – Change file attributes
BOOTCFG - Edit Windows boot settings
BROWSTAT - Get domain, browser and PDC info
CALL - Call one batch program from another
CD - Change Directory - Move to a specific Folder
CHANGE - Change Terminal Server Session properties
CHKDSK - Check Disk - check and repair disk problems
CHKNTFS - Check the NTFS file system
CHOICE - Accept keyboard input to a batch file
CIPHER - Encrypt or Decrypt files/folders
CLEANMGR - Automated cleanup of Temp files, recycle bin
CLEARMEM - Clear memory leaks
CLIP - Copy STDIN to the Windows clipboard.
CLS - Clear the screen
CLUSTER - Windows Clustering
CMD - Start a new CMD shell
COLOR - Change colors of the CMD window
COMP - Compare the contents of two files or sets of files
COMPACT - Compress files or folders on an NTFS partition
COMPRESS - Compress individual files on an NTFS partition
CON2PRT - Connect or disconnect a Printer
CONVERT - Convert a FAT drive to NTFS.
COPY - Copy one or more files to another location
CSVDE - Import or Export Active Directory
Entering Debug
Debug has been included in every version of MS-DOS as well as Windows. When running any of the debug routines it is recommended that if you have Windows that you exit or shut down to get into a real DOS prompt (unless you're running Windows ME, Windows 2000, Windows XP, or later versions).
Once at the MS- DOS prompt, run through the below example, this example is perfectly fine to run on any PC Computer running MS-DOS / Windows and will not harm anything.
Type debug and press enter.
This should get you to a - (small dash). This is the debug prompt.
At the - type d40:00 and press enter.
This will return several lines of information, After the feedback you will be back to the debug prompt.
To exit out of debug type q and press enter. This will return you back to the MS-DOS prompt.
In some of the below debug routines you will notice that a "g" is typed, then "q". G tells the computer that the code type is not self executing and must be run at this point. If completed, the program will return Program Terminated Normally which indicates you can now quit from the debug program.
Once at the MS- DOS prompt, run through the below example, this example is perfectly fine to run on any PC Computer running MS-DOS / Windows and will not harm anything.
Type debug and press enter.
This should get you to a - (small dash). This is the debug prompt.
At the - type d40:00 and press enter.
This will return several lines of information, After the feedback you will be back to the debug prompt.
To exit out of debug type q and press enter. This will return you back to the MS-DOS prompt.
In some of the below debug routines you will notice that a "g" is typed, then "q". G tells the computer that the code type is not self executing and must be run at this point. If completed, the program will return Program Terminated Normally which indicates you can now quit from the debug program.
Testing Ports
The below debug routine will check the ports of the computer to allow you to know if ports are being detected or not. Type debug to get to the "-" Type D40:0, You should get several lines; however, the first line is the only important line, which should read the following:
0040:0000 F8 03 F8 02 E8 03 E8 02 - 78 03 78 02 BC 03
F8 03
F8 02
E8 03
E8 02
78 03
78 02
BC 03
COM1
COM2
COM3
COM4
LPT1
LPT2
LPT3
The above graph shows you what the feed back means as far as port, so if you see F8 03, this would be an indication that COM1 is being detected; if you see 00 00, this is an indication that it is not being detected, which could mean that hardware is bad or that it is disabled in CMOS
Once you have finished looking at the information, type Q and press enter to get out of Debug.
0040:0000 F8 03 F8 02 E8 03 E8 02 - 78 03 78 02 BC 03
F8 03
F8 02
E8 03
E8 02
78 03
78 02
BC 03
COM1
COM2
COM3
COM4
LPT1
LPT2
LPT3
The above graph shows you what the feed back means as far as port, so if you see F8 03, this would be an indication that COM1 is being detected; if you see 00 00, this is an indication that it is not being detected, which could mean that hardware is bad or that it is disabled in CMOS
Once you have finished looking at the information, type Q and press enter to get out of Debug.
Clear CMOS
The below debug routine will clear CMOS, BIOS, Passwords, Settings, Viruses, and other items residing in the CMOS.
During this process you may get returned characters which are an indication that the string has gone in, if you by chance get ERROR ensure that you have typed the line in correctly, if not retype.
Ensure that you do not skip any lines, that it is ALL typed in correctly to help prevent problems. Before running this Debug routine also ensure that you have read the above disclaimer. After typing debug you will get "-" which is were you can begin by typing A and pressing enter.
A
MOV AX,0
MOV AX,CX
OUT 70,AL
MOV AX,0
OUT 71,AL
INC CX
CMP CX,100
JB 103
INT 20
Note: Nothing is typed on this line
G By pressing G this will execute the above script, ensure you have read and agree to the above disclaimer.
Q Then reboot and you will get a Setup Checksum Error. Go into setup, correct all the incorrect values, time, date...
During this process you may get returned characters which are an indication that the string has gone in, if you by chance get ERROR ensure that you have typed the line in correctly, if not retype.
Ensure that you do not skip any lines, that it is ALL typed in correctly to help prevent problems. Before running this Debug routine also ensure that you have read the above disclaimer. After typing debug you will get "-" which is were you can begin by typing A and pressing enter.
A
MOV AX,0
MOV AX,CX
OUT 70,AL
MOV AX,0
OUT 71,AL
INC CX
CMP CX,100
JB 103
INT 20
Note: Nothing is typed on this line
G By pressing G this will execute the above script, ensure you have read and agree to the above disclaimer.
Q Then reboot and you will get a Setup Checksum Error. Go into setup, correct all the incorrect values, time, date...
Joystick Test
This test will test to see if your Joystick is present or not.
Type Debug from the DOS prompt once at the "-".
Type i201 If you get a FF response attempt hold one of the main buttons on your joystick, and while holding the button down type i201 and see if a different response is given, each button on the joystick should return a different response.
However, some special joysticks, such as the Microsoft Sidewinder, which has more than 4-5 buttons, may not return a response for all extra buttons because these buttons are generally controlled through software. If a FF is still given on each of the buttons on the game paddle or joystick, it is a good possibility that either the Joystick and or the Joystick port is bad. If possible, attempt these steps with another known working joystick.
However, if you are receiving different responses when pressing and holding the keys on the joystick, the computer hardware is working properly. Type q and press enter to quit out of debug.
Type Debug from the DOS prompt once at the "-".
Type i201 If you get a FF response attempt hold one of the main buttons on your joystick, and while holding the button down type i201 and see if a different response is given, each button on the joystick should return a different response.
However, some special joysticks, such as the Microsoft Sidewinder, which has more than 4-5 buttons, may not return a response for all extra buttons because these buttons are generally controlled through software. If a FF is still given on each of the buttons on the game paddle or joystick, it is a good possibility that either the Joystick and or the Joystick port is bad. If possible, attempt these steps with another known working joystick.
However, if you are receiving different responses when pressing and holding the keys on the joystick, the computer hardware is working properly. Type q and press enter to quit out of debug.
Rooting
An article on gaining root to a remote system:
Too often have I seen articles that claim to teach how to hack into a server, but all they do is just show you how to scan open ports, and many many people have no idea what to do with an open port. So I am going to show you pretty much all the basics, to get you well on your way to your first ever successful hack of a server, giving you root privileges.
First tool that you will need is a good port scanner. Nmap and SuperScan are my favourites by far, and Nmap is by far the most popular port scanner in the world because of its many features. You can download both at: http://www.hackinglibrary.ws/dl/downloads/superscan4.zip and http://insecure.org/nmap/
SuperScan:
If you have a website that you mainly want to target, then just copy and paste the URL into the box and click lookup. It will automatically determine the IP address, and with this you can simply scan away.
Nmap:
Nmap is all used through CLI (Command Line Interface). Now to determine the IP address of a website, just run a WHOIS on it, http://whois.domaintools.com is the best one I know of and has many features, also check out http://www.dnsstuff.com/ which is also very useful and has many features. So now if you just simply typed "nmap 192.168.1.1" (changing the IP you see here to the target's IP address) it will scan the target for open ports and using -O will fingerprint the OS the remote system is using.
Once you have your port list at hand, now you will need to find out what programs each port are running, and the best manual way to do this is to connect to each port through telnet. When you are connected, you will be welcomed by a screen with some information, if you now copy and paste all this information into a .txt file, and do this for each port, it will become clear which programs run on which ports, and also the you will be able to see if it has the latest versions of the software (remember that new versions come out, securing the program more, so if the program has an extremely old version of the software, it will more likely be exploitable).
Once you have done this and got a list of all the programs running on the open ports, now is the time to search for an exploit. There are many ways to do this Milw0rm is an old favourite of mine http://www.milw0rm.com if you go to http://www.milw0rm.com/port.php it will give you a drop down menu of ports, just look through each one, and check if the exploits for the programs there match any of the programs you have in your .txt file, and finally check the versions. If you see an exploit there, then click on it, if it's a Perl exploit (will start with #!/usr/bin/perl) this is even better because it means that you don't have to mess about compiling the exploit. If not, then you will have to compile the exploit yourself, look up on another article for this, but you will need cygwin if you are running Windows. All you have to do is run this command "pl exploit.pl [target]" and if you're lucky it will be successful and all you need do now is either connect through netcat (the hacker's best friend, an alternative to telnet) and you will have root priviladges. Or if the payload is a reverse bind, then your computer may open another terminal automatically with root rights. Now you may go to the directory that the site is stored in (usually /home/site here) and you can do whatever you feel to the site in question.
Metasploit is another great method. You can download metasploit from: http://framework.metasploit.com/msf/download Now once you have this, run it (msfconsole) and type "show exploits" this will give you a list of all the exploits in metasploit's library. Look for one that exploits one of the port's programs you found, and when you find it, type "use [exploit here]" Now, "show targets" this will give you a list of targets, just set it to the OS you found while fingerprinting it with Nmap, type "set target x" now, "show payloads" will show you the payloads available, using a reverse bind will give you the prompt, others you will have to connect yourself through netcat. Also, note that it has FreeBSD, win32, and Linux payloads, depending on the system. Right, now type "show options" and it will give you a list of options, which will show you the various parameters for the specific exploit you're working with. Set RHOST to the IP of your target by "set RHOST 192.168.1.1" and set LPORT as the listening port you want, port 4444 is the default. If you want to reset it all, just type "back" into your console.
If all is well, then all you need to type is "exploit" and metasploit will do it all for you, and once again you have just owned another system.
The final method is writing the exploit yourself. This is a more advanced level, and there are many places that teach you the basics, phrack.org has some good tutorials. But there is no tutorial that will teach you how to write your own exploits all the time, because after all, programming is about learning yourself through experience and practice.
If you have any further questions, then Please Please use Google, Google really is a hacker's best friend, and it has all the answers to life's problems ;-) If all else fails, then please feel free to mail me at Dudelovingly@gmail.com
Too often have I seen articles that claim to teach how to hack into a server, but all they do is just show you how to scan open ports, and many many people have no idea what to do with an open port. So I am going to show you pretty much all the basics, to get you well on your way to your first ever successful hack of a server, giving you root privileges.
First tool that you will need is a good port scanner. Nmap and SuperScan are my favourites by far, and Nmap is by far the most popular port scanner in the world because of its many features. You can download both at: http://www.hackinglibrary.ws/dl/downloads/superscan4.zip and http://insecure.org/nmap/
SuperScan:
If you have a website that you mainly want to target, then just copy and paste the URL into the box and click lookup. It will automatically determine the IP address, and with this you can simply scan away.
Nmap:
Nmap is all used through CLI (Command Line Interface). Now to determine the IP address of a website, just run a WHOIS on it, http://whois.domaintools.com is the best one I know of and has many features, also check out http://www.dnsstuff.com/ which is also very useful and has many features. So now if you just simply typed "nmap 192.168.1.1" (changing the IP you see here to the target's IP address) it will scan the target for open ports and using -O will fingerprint the OS the remote system is using.
Once you have your port list at hand, now you will need to find out what programs each port are running, and the best manual way to do this is to connect to each port through telnet. When you are connected, you will be welcomed by a screen with some information, if you now copy and paste all this information into a .txt file, and do this for each port, it will become clear which programs run on which ports, and also the you will be able to see if it has the latest versions of the software (remember that new versions come out, securing the program more, so if the program has an extremely old version of the software, it will more likely be exploitable).
Once you have done this and got a list of all the programs running on the open ports, now is the time to search for an exploit. There are many ways to do this Milw0rm is an old favourite of mine http://www.milw0rm.com if you go to http://www.milw0rm.com/port.php it will give you a drop down menu of ports, just look through each one, and check if the exploits for the programs there match any of the programs you have in your .txt file, and finally check the versions. If you see an exploit there, then click on it, if it's a Perl exploit (will start with #!/usr/bin/perl) this is even better because it means that you don't have to mess about compiling the exploit. If not, then you will have to compile the exploit yourself, look up on another article for this, but you will need cygwin if you are running Windows. All you have to do is run this command "pl exploit.pl [target]" and if you're lucky it will be successful and all you need do now is either connect through netcat (the hacker's best friend, an alternative to telnet) and you will have root priviladges. Or if the payload is a reverse bind, then your computer may open another terminal automatically with root rights. Now you may go to the directory that the site is stored in (usually /home/site here) and you can do whatever you feel to the site in question.
Metasploit is another great method. You can download metasploit from: http://framework.metasploit.com/msf/download Now once you have this, run it (msfconsole) and type "show exploits" this will give you a list of all the exploits in metasploit's library. Look for one that exploits one of the port's programs you found, and when you find it, type "use [exploit here]" Now, "show targets" this will give you a list of targets, just set it to the OS you found while fingerprinting it with Nmap, type "set target x" now, "show payloads" will show you the payloads available, using a reverse bind will give you the prompt, others you will have to connect yourself through netcat. Also, note that it has FreeBSD, win32, and Linux payloads, depending on the system. Right, now type "show options" and it will give you a list of options, which will show you the various parameters for the specific exploit you're working with. Set RHOST to the IP of your target by "set RHOST 192.168.1.1" and set LPORT as the listening port you want, port 4444 is the default. If you want to reset it all, just type "back" into your console.
If all is well, then all you need to type is "exploit" and metasploit will do it all for you, and once again you have just owned another system.
The final method is writing the exploit yourself. This is a more advanced level, and there are many places that teach you the basics, phrack.org has some good tutorials. But there is no tutorial that will teach you how to write your own exploits all the time, because after all, programming is about learning yourself through experience and practice.
If you have any further questions, then Please Please use Google, Google really is a hacker's best friend, and it has all the answers to life's problems ;-) If all else fails, then please feel free to mail me at Dudelovingly@gmail.com
Language of Hackers.
Language helps re-enforce the barrier between computer hackers and non-hackers, as well as that between hackers and crackers. Computer hackers have developed their own language. Firstly there is vocabulary that non-hackers will not know (TCP, IP, winsock, Linux, root access, vi, etc) due to a lack of computer-related knowledge. Secondly, some computer hackers have modified English with a set of conventions.
Hacker Language
Hackers replace ‘f’ with ‘ph’ (likely coming from phreaks who were interested in ‘ph’ones), and ‘s’ with ‘z’. Also hackers use numbers in place of letters such as
‘1’ for ‘i’ or ‘l’ (though replacing ‘i’ is not the proper usage)
‘3’ for ‘E’
‘4’ for ‘a’
‘7’ for ‘t’
Also it is important to use random caPitAlizaTioN, abbreviation, slang, emphasize words by putting ‘k-‘ before them ("k-rad"), and finish a statement with a series of characters for emphasis.
Take this example from an Internet Relay Chat message in a hacking group (#hack):
c4n sUm1 h31p m3 w1tH h4x0RiNg mY sk00lz c0mPz?!?!?!!?!?
Which translates to:
" Can Someone Help Me With Hacking My School’s Computers?"
Hacker Language
Hackers replace ‘f’ with ‘ph’ (likely coming from phreaks who were interested in ‘ph’ones), and ‘s’ with ‘z’. Also hackers use numbers in place of letters such as
‘1’ for ‘i’ or ‘l’ (though replacing ‘i’ is not the proper usage)
‘3’ for ‘E’
‘4’ for ‘a’
‘7’ for ‘t’
Also it is important to use random caPitAlizaTioN, abbreviation, slang, emphasize words by putting ‘k-‘ before them ("k-rad"), and finish a statement with a series of characters for emphasis.
Take this example from an Internet Relay Chat message in a hacking group (#hack):
c4n sUm1 h31p m3 w1tH h4x0RiNg mY sk00lz c0mPz?!?!?!!?!?
Which translates to:
" Can Someone Help Me With Hacking My School’s Computers?"
Sunday, December 21, 2008
Speed up Internet Explorer 6 Favorites
For some reason, the Favorites menu in IE 6 seems to slow down dramatically sometimes--I've noticed this happens when you install Tweak UI 1.33, for example, and when you use the preview tip to speed up the Start menu. But here's a fix for the problem that does work, though it's unclear why:
Just open a command line window
Start > Run > Cmd > Sfc, then hit ENTER.
This command line runs the System File Checker, which performs a number of services, all of which are completely unrelated to IE 6.
Just open a command line window
Start > Run > Cmd > Sfc, then hit ENTER.
This command line runs the System File Checker, which performs a number of services, all of which are completely unrelated to IE 6.
Create a Shortcut to Lock Your Computer
Leaving your computer in a hurry but you don’t want to log off? You can double-click a shortcut on your desktop to quickly lock the keyboard and display without using CTRL+ALT+DEL or a screen saver.
To create a shortcut on your desktop to lock your computer:
Right-click the desktop.
Point to New
and then click Shortcut.
The Create Shortcut Wizard opens. In the text box, type the following: rundll32.exe user32.dll, LockWork Station Click Next. Enter a name for the shortcut. You can call it "Lock Workstation" or choose any name you like. Click Finish.
You can also change the shortcut's icon (my personal favorite is the padlock icon in shell32.dll).
To change the Icon:
Right click the shortcut and then select Properties.
Click the Shortcut tab, and then click the Change Icon button.
In the Look for icons in this file text box, type: Shell32.dll Click OK.
Select one of the icons from the list and then click OK.
You could also give it a shortcut keystroke such CTRL+ALT+L.
This would save you only one keystroke from the normal command, but it could be more convenient.
To create a shortcut on your desktop to lock your computer:
Right-click the desktop.
Point to New
and then click Shortcut.
The Create Shortcut Wizard opens. In the text box, type the following: rundll32.exe user32.dll, LockWork Station Click Next. Enter a name for the shortcut. You can call it "Lock Workstation" or choose any name you like. Click Finish.
You can also change the shortcut's icon (my personal favorite is the padlock icon in shell32.dll).
To change the Icon:
Right click the shortcut and then select Properties.
Click the Shortcut tab, and then click the Change Icon button.
In the Look for icons in this file text box, type: Shell32.dll Click OK.
Select one of the icons from the list and then click OK.
You could also give it a shortcut keystroke such CTRL+ALT+L.
This would save you only one keystroke from the normal command, but it could be more convenient.
Speeding Up Share Viewing
This is a great tweak. Before I found it, I was always smashing my head against the table waiting to view shares on other computers. Basically, when you connect to another computer with Windows XP, it checks for any Scheduled tasks on that computer - a fairly useless task, but one that can add up to 30 seconds of waiting on the other end - not good! Fortunately, it's fairly easy to disable this process. First, navigate to
HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/Explorer/RemoteComputer/NameSpace in the Registry
Below that, there should be a key called
{D6277990-4C6A-11CF-8D87-00AA0060F5BF}.
Just delete this, and after a restart, Windows will no longer check for scheduled tasks - much performance improvement!
HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/Explorer/RemoteComputer/NameSpace in the Registry
Below that, there should be a key called
{D6277990-4C6A-11CF-8D87-00AA0060F5BF}.
Just delete this, and after a restart, Windows will no longer check for scheduled tasks - much performance improvement!
Automatically Kill Programs At Shutdown
Don't you hate it when, while trying to shut down, you get message boxes telling you that a program is still running?
Making it so that Windows automatically kills applications running is a snap. Simply navigate to the
HKEY_CURRENT_USERControl PanelDesktop directory in the Registry, then alter the key AutoEndTasks to the value 1.
Making it so that Windows automatically kills applications running is a snap. Simply navigate to the
HKEY_CURRENT_USERControl PanelDesktop directory in the Registry, then alter the key AutoEndTasks to the value 1.
Increasing Options in Add/Remove Programs
Not a fan of MSN Messenger?
Don't want Windows Media Player on your system?
Fair enough, but if you go to Add/Remove Programs in the Control Panel, by default none of Windows XP's 'built in' programs are visible. it's fairly easy to change, though... just open the file X:\Windows\inf\sysoc.inf (where X: is the drive letter where Windows XP is installed) in Notepad.
You should see a section of the file something like this:
[Components]
NtComponents=ntoc.dll,NtOcSetupProc,,4
WBEM=ocgen.dll,OcEntry,wbemoc.inf,hide,7
Display=desk.cpl,DisplayOcSetupProc,,7
Fax=fxsocm.dll,FaxOcmSetupProc,fxsocm.inf,,7
NetOC=netoc.dll,NetOcSetupProc,netoc.inf,,7
iis=iis.dll,OcEntry,iis.inf,,7
com=comsetup.dll,OcEntry,comnt5.inf,hide,7
dtc=msdtcstp.dll,OcEntry,dtcnt5.inf,hide,7
IndexSrv_System = setupqry.dll,IndexSrv,setupqry.inf,,7
TerminalServer=TsOc.dll, HydraOc, TsOc.inf,hide,2
msmq=msmqocm.dll,MsmqOcm,msmqocm.inf,,6
ims=imsinsnt.dll,OcEntry,ims.inf,,7
fp_extensions=fp40ext.dll,FrontPage4Extensions,fp40ext.inf,,7
AutoUpdate=ocgen.dll,OcEntry,au.inf,hide,7
msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,hide,7
RootAutoUpdate=ocgen.dll,OcEntry,rootau.inf,,7
IEAccess=ocgen.dll,OcEntry,ieaccess.inf,,7
This is a list of all components installed at the moment. I've taken the example of MSN Messenger - the program entry called 'msmsgs', third-last line. You can see the word 'hide' highlighted - this is the string which tells Windows not to display the component in the Add/Remove Programs list. Fix this up by simply deleting the word 'hide' like so:
msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,hide,7
To this:
msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,,7
Now, after restarting, you should be able to see MSN Messenger in the Add/Remove Programs list. If you want to be able to quickly view and remove all components, simply open the sysoc.inf file and do a global find and replace for the word ",hide" and replace it with a single comma ",".
Don't want Windows Media Player on your system?
Fair enough, but if you go to Add/Remove Programs in the Control Panel, by default none of Windows XP's 'built in' programs are visible. it's fairly easy to change, though... just open the file X:\Windows\inf\sysoc.inf (where X: is the drive letter where Windows XP is installed) in Notepad.
You should see a section of the file something like this:
[Components]
NtComponents=ntoc.dll,NtOcSetupProc,,4
WBEM=ocgen.dll,OcEntry,wbemoc.inf,hide,7
Display=desk.cpl,DisplayOcSetupProc,,7
Fax=fxsocm.dll,FaxOcmSetupProc,fxsocm.inf,,7
NetOC=netoc.dll,NetOcSetupProc,netoc.inf,,7
iis=iis.dll,OcEntry,iis.inf,,7
com=comsetup.dll,OcEntry,comnt5.inf,hide,7
dtc=msdtcstp.dll,OcEntry,dtcnt5.inf,hide,7
IndexSrv_System = setupqry.dll,IndexSrv,setupqry.inf,,7
TerminalServer=TsOc.dll, HydraOc, TsOc.inf,hide,2
msmq=msmqocm.dll,MsmqOcm,msmqocm.inf,,6
ims=imsinsnt.dll,OcEntry,ims.inf,,7
fp_extensions=fp40ext.dll,FrontPage4Extensions,fp40ext.inf,,7
AutoUpdate=ocgen.dll,OcEntry,au.inf,hide,7
msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,hide,7
RootAutoUpdate=ocgen.dll,OcEntry,rootau.inf,,7
IEAccess=ocgen.dll,OcEntry,ieaccess.inf,,7
This is a list of all components installed at the moment. I've taken the example of MSN Messenger - the program entry called 'msmsgs', third-last line. You can see the word 'hide' highlighted - this is the string which tells Windows not to display the component in the Add/Remove Programs list. Fix this up by simply deleting the word 'hide' like so:
msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,hide,7
To this:
msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,,7
Now, after restarting, you should be able to see MSN Messenger in the Add/Remove Programs list. If you want to be able to quickly view and remove all components, simply open the sysoc.inf file and do a global find and replace for the word ",hide" and replace it with a single comma ",".
GPEDIT.MSC And Autoplay
A great tweaking file that comes with XP is gpedit.msc. Go to Start -> Run... and then type in 'gpedit.msc' and press enter. This is effectively the Policies Editor, and it comes in handy often. For example, if you hate CD autoplay like I do and want to permanently disable it, you can use this tool to do so.
Just Run gpedit.msc
Then go to Computer Configuration > Administrative Templates > System.
Here you can see the value 'Turn Off Autoplay'. Right-click on it and then click 'Properties'.
Just Run gpedit.msc
Then go to Computer Configuration > Administrative Templates > System.
Here you can see the value 'Turn Off Autoplay'. Right-click on it and then click 'Properties'.
Menu Delays:
Another minor and easy tweak to remove any delay from menus sliding out. For this you will need to use Regedit
Open Regedit by going to
Start > Run 'Regedit' and press Enter.
The key you need to change is located in
HKEY_CURRENT_USERControl PanelDesktop.
The actual key is called Menu Show Delay - all you have to do is change the value to 0. Remember, you will have to re-boot your computer for this tweak to take effect.
Open Regedit by going to
Start > Run 'Regedit' and press Enter.
The key you need to change is located in
HKEY_CURRENT_USERControl PanelDesktop.
The actual key is called Menu Show Delay - all you have to do is change the value to 0. Remember, you will have to re-boot your computer for this tweak to take effect.
No Shutdown:
Wanna play with your friends by removing the shutdown option from start menu in their computer.
Just hack it down !!!
Type Regedit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
"NoClose"="DWORD:1"
Just hack it down !!!
Type Regedit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
"NoClose"="DWORD:1"
Automatic Administrator Login:
Well here's the trick which you can use to prove that Windows XP is not at all secure as multi-user operating system. Hacking the system registry from any account having access to system registry puts you in to the administrator account.
Type REGEDIT 4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"AutoAdminLogon"="1"
Type REGEDIT 4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"AutoAdminLogon"="1"
Registry Hacking
Display legal notice on startup:
Wanna tell your friends about the Do's and Dont's in your computer when they login in your absence. Well you can do it pretty easily by displaying a legal notice at system start up.
Type REGEDIT
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"legalnoticecaption"="enter your notice caption"
"legalnoticetext"="enter your legal notice text"
Wanna tell your friends about the Do's and Dont's in your computer when they login in your absence. Well you can do it pretty easily by displaying a legal notice at system start up.
Type REGEDIT
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"legalnoticecaption"="enter your notice caption"
"legalnoticetext"="enter your legal notice text"
Rooting
An article on gaining root to a remote system:
Too often have I seen articles that claim to teach how to hack into a server, but all they do is just show you how to scan open ports, and many many people have no idea what to do with an open port. So I am going to show you pretty much all the basics, to get you well on your way to your first ever successful hack of a server, giving you root privileges.
First tool that you will need is a good port scanner. Nmap and SuperScan are my favourites by far, and Nmap is by far the most popular port scanner in the world because of its many features. You can download both at: http://www.hackinglibrary.ws/dl/downloads/superscan4.zip and http://insecure.org/nmap/
Super Scan:
If you have a website that you mainly want to target, then just copy and paste the URL into the box and click lookup. It will automatically determine the IP address, and with this you can simply scan away.
Nmap:
Nmap is all used through CLI (Command Line Interface). Now to determine the IP address of a website, just run a WHOIS on it, http://whois.domaintools.com is the best one I know of and has many features, also check out http://www.dnsstuff.com/ which is also very useful and has many features. So now if you just simply typed "nmap 192.168.1.1" (changing the IP you see here to the target's IP address) it will scan the target for open ports and using -O will fingerprint the OS the remote system is using.
Once you have your port list at hand, now you will need to find out what programs each port are running, and the best manual way to do this is to connect to each port through telnet. When you are connected, you will be welcomed by a screen with some information, if you now copy and paste all this information into a .txt file, and do this for each port, it will become clear which programs run on which ports, and also the you will be able to see if it has the latest versions of the software (remember that new versions come out, securing the program more, so if the program has an extremely old version of the software, it will more likely be exploitable).
Once you have done this and got a list of all the programs running on the open ports, now is the time to search for an exploit. There are many ways to do this Milw0rm is an old favourite of mine http://www.milw0rm.com if you go to http://www.milw0rm.com/port.php it will give you a drop down menu of ports, just look through each one, and check if the exploits for the programs there match any of the programs you have in your .txt file, and finally check the versions. If you see an exploit there, then click on it, if it's a Perl exploit (will start with #!/usr/bin/perl) this is even better because it means that you don't have to mess about compiling the exploit. If not, then you will have to compile the exploit yourself, look up on another article for this, but you will need cygwin if you are running Windows. All you have to do is run this command "pl exploit.pl [target]" and if you're lucky it will be successful and all you need do now is either connect through netcat (the hacker's best friend, an alternative to telnet) and you will have root priviladges. Or if the payload is a reverse bind, then your computer may open another terminal automatically with root rights. Now you may go to the directory that the site is stored in (usually /home/site here) and you can do whatever you feel to the site in question.
Metasploit is another great method. You can download metasploit from: http://framework.metasploit.com/msf/download Now once you have this, run it (msfconsole) and type "show exploits" this will give you a list of all the exploits in metasploit's library. Look for one that exploits one of the port's programs you found, and when you find it, type "use [exploit here]" Now, "show targets" this will give you a list of targets, just set it to the OS you found while fingerprinting it with Nmap, type "set target x" now, "show payloads" will show you the payloads available, using a reverse bind will give you the prompt, others you will have to connect yourself through netcat. Also, note that it has FreeBSD, win32, and Linux payloads, depending on the system. Right, now type "show options" and it will give you a list of options, which will show you the various parameters for the specific exploit you're working with. Set RHOST to the IP of your target by "set RHOST 192.168.1.1" and set LPORT as the listening port you want, port 4444 is the default. If you want to reset it all, just type "back" into your console.
If all is well, then all you need to type is "exploit" and metasploit will do it all for you, and once again you have just owned another system.
The final method is writing the exploit yourself. This is a more advanced level, and there are many places that teach you the basics, phrack.org has some good tutorials. But there is no tutorial that will teach you how to write your own exploits all the time, because after all, programming is about learning yourself through experience and practice.
If you have any further questions, then please please use google, google really is a hacker's best friend, and it has all the answers to life's problems ;-) If all else fails, then please feel free to mail me at Dudelovingly@gmail.com
Too often have I seen articles that claim to teach how to hack into a server, but all they do is just show you how to scan open ports, and many many people have no idea what to do with an open port. So I am going to show you pretty much all the basics, to get you well on your way to your first ever successful hack of a server, giving you root privileges.
First tool that you will need is a good port scanner. Nmap and SuperScan are my favourites by far, and Nmap is by far the most popular port scanner in the world because of its many features. You can download both at: http://www.hackinglibrary.ws/dl/downloads/superscan4.zip and http://insecure.org/nmap/
Super Scan:
If you have a website that you mainly want to target, then just copy and paste the URL into the box and click lookup. It will automatically determine the IP address, and with this you can simply scan away.
Nmap:
Nmap is all used through CLI (Command Line Interface). Now to determine the IP address of a website, just run a WHOIS on it, http://whois.domaintools.com is the best one I know of and has many features, also check out http://www.dnsstuff.com/ which is also very useful and has many features. So now if you just simply typed "nmap 192.168.1.1" (changing the IP you see here to the target's IP address) it will scan the target for open ports and using -O will fingerprint the OS the remote system is using.
Once you have your port list at hand, now you will need to find out what programs each port are running, and the best manual way to do this is to connect to each port through telnet. When you are connected, you will be welcomed by a screen with some information, if you now copy and paste all this information into a .txt file, and do this for each port, it will become clear which programs run on which ports, and also the you will be able to see if it has the latest versions of the software (remember that new versions come out, securing the program more, so if the program has an extremely old version of the software, it will more likely be exploitable).
Once you have done this and got a list of all the programs running on the open ports, now is the time to search for an exploit. There are many ways to do this Milw0rm is an old favourite of mine http://www.milw0rm.com if you go to http://www.milw0rm.com/port.php it will give you a drop down menu of ports, just look through each one, and check if the exploits for the programs there match any of the programs you have in your .txt file, and finally check the versions. If you see an exploit there, then click on it, if it's a Perl exploit (will start with #!/usr/bin/perl) this is even better because it means that you don't have to mess about compiling the exploit. If not, then you will have to compile the exploit yourself, look up on another article for this, but you will need cygwin if you are running Windows. All you have to do is run this command "pl exploit.pl [target]" and if you're lucky it will be successful and all you need do now is either connect through netcat (the hacker's best friend, an alternative to telnet) and you will have root priviladges. Or if the payload is a reverse bind, then your computer may open another terminal automatically with root rights. Now you may go to the directory that the site is stored in (usually /home/site here) and you can do whatever you feel to the site in question.
Metasploit is another great method. You can download metasploit from: http://framework.metasploit.com/msf/download Now once you have this, run it (msfconsole) and type "show exploits" this will give you a list of all the exploits in metasploit's library. Look for one that exploits one of the port's programs you found, and when you find it, type "use [exploit here]" Now, "show targets" this will give you a list of targets, just set it to the OS you found while fingerprinting it with Nmap, type "set target x" now, "show payloads" will show you the payloads available, using a reverse bind will give you the prompt, others you will have to connect yourself through netcat. Also, note that it has FreeBSD, win32, and Linux payloads, depending on the system. Right, now type "show options" and it will give you a list of options, which will show you the various parameters for the specific exploit you're working with. Set RHOST to the IP of your target by "set RHOST 192.168.1.1" and set LPORT as the listening port you want, port 4444 is the default. If you want to reset it all, just type "back" into your console.
If all is well, then all you need to type is "exploit" and metasploit will do it all for you, and once again you have just owned another system.
The final method is writing the exploit yourself. This is a more advanced level, and there are many places that teach you the basics, phrack.org has some good tutorials. But there is no tutorial that will teach you how to write your own exploits all the time, because after all, programming is about learning yourself through experience and practice.
If you have any further questions, then please please use google, google really is a hacker's best friend, and it has all the answers to life's problems ;-) If all else fails, then please feel free to mail me at Dudelovingly@gmail.com
Language of Hackers.
Language helps re-enforce the barrier between computer hackers and non-hackers, as well as that between hackers and crackers. Computer hackers have developed their own language. Firstly there is vocabulary that non-hackers will not know (TCP, IP, winsock, Linux, root access, vi, etc) due to a lack of computer-related knowledge. Secondly, some computer hackers have modified English with a set of conventions.
Hacker Language
Hackers replace ‘f’ with ‘ph’ (likely coming from phreaks who were interested in ‘ph’ones), and ‘s’ with ‘z’. Also hackers use numbers in place of letters such as
‘1’ for ‘i’ or ‘l’ (though replacing ‘i’ is not the proper usage),
‘3’ for ‘E,
‘4’ for ‘a’
‘7’ for ‘t'
Also it is important to use random caPitAlizaTioN, abbreviation, slang, emphasize words by putting ‘k-‘ before them ("k-rad"), and finish a statement with a series of characters for emphasis.
Take this example from an Internet Relay Chat message in a hacking group (#hack):
"c4n sUm1 h31p m3 w1tH h4x0RiNg mY sk00lz c0mPz?!?!?!!?!?"
Which translates to:
" Can Someone Help Me With Hacking My School’s Computers?"
Hacker Language
Hackers replace ‘f’ with ‘ph’ (likely coming from phreaks who were interested in ‘ph’ones), and ‘s’ with ‘z’. Also hackers use numbers in place of letters such as
‘1’ for ‘i’ or ‘l’ (though replacing ‘i’ is not the proper usage),
‘3’ for ‘E,
‘4’ for ‘a’
‘7’ for ‘t'
Also it is important to use random caPitAlizaTioN, abbreviation, slang, emphasize words by putting ‘k-‘ before them ("k-rad"), and finish a statement with a series of characters for emphasis.
Take this example from an Internet Relay Chat message in a hacking group (#hack):
"c4n sUm1 h31p m3 w1tH h4x0RiNg mY sk00lz c0mPz?!?!?!!?!?"
Which translates to:
" Can Someone Help Me With Hacking My School’s Computers?"
Saturday, December 20, 2008
Use Google To Get Serial Number of any Software
Most of the people downloading trial and using it, only after the expiration of trial they try for crack, Serial No, Keygen, Patch....
But many don't known where to get Serial No, Some websites may be infect your system
with Trojan horse, Viruses, Ad ware, Spy ware....
So for beginners this is a simply way to find hack with less effort and it saves time to, But make sure you have anti virus activated before trying to get some Serials, Patches to avoid data loss.
Just follow the steps as instructed below:
1)Go to http://www.google.com
2) Type this syntax in search bar " 94FBR"
3) Replace Product name with desired software and leave a space then type 94FBR
4) Press enter, Thats it
But many don't known where to get Serial No, Some websites may be infect your system
with Trojan horse, Viruses, Ad ware, Spy ware....
So for beginners this is a simply way to find hack with less effort and it saves time to, But make sure you have anti virus activated before trying to get some Serials, Patches to avoid data loss.
Just follow the steps as instructed below:
1)Go to http://www.google.com
2) Type this syntax in search bar " 94FBR"
3) Replace Product name with desired software and leave a space then type 94FBR
4) Press enter, Thats it
Subscribe to:
Posts (Atom)