Saturday, November 19, 2011

നിങ്ങളുടെ ഫോട്ടോയില്‍ മാജിക്ക് കാണിക്കാന്‍ പറ്റിയ ചില വെബ് സൈറ്റുകള്‍.

നിങ്ങളുടേ ഫോട്ടോകളില്‍ പല ഇഫക്ടുകളും ചെയ്യാന്‍ കഴിയുന്ന ചില വെബ് സൈറ്റുകളെ ഇന്ന് പരിചയപ്പെടാം.നിങ്ങളുടെ ഫോട്ടോകള്‍ അപ് ലോഡ് ചെയ്ത ശേഷം നിരവധി മാജിക്കുകള്‍ നിങ്ങളുടെ ഫോട്ടോയ്ക്ക് നല്‍കാന്‍ കഴിയും.
നിങ്ങള്‍ക്ക് പലര്‍ക്കും പരിചിതമായ ഒരു വെബ് സൈറ്റ് ആയിരിക്കും ഇത്.ഫോട്ടോകള്‍ അപ് ലോഡ് ചെയ്ത് മികച്ച രീതിയില്‍ ഉള്ള നിരവധി ഇഫക്ടുകള്‍ ഉള്‍ക്കോള്ളുന്നതാണ് ഈ വെബ് സൈറ്റ്
ഫോട്ടോ ഫണ്‍ ബോക്സില്‍ നിങ്ങളുടെ ഫോട്ടോ അപ്ലോഡ് ചെയ്ത ശേഷം അവയ്ക്ക് മികച്ച പശ്ചാത്തലചിത്രങ്ങളും.നിങ്ങളുടെ ചിത്രം ടീ ഷര്‍ട്ടുകള്‍.ചലചിത്രങ്ങളുടെ പശ്ചാത്തലചിത്രങ്ങള്‍ അങ്ങനെ മികച്ച നിരവധി ഇഫക്ടുകള്‍ ഈ വെബ് സൈറ്റ് ഉള്‍ക്കൊള്ളുന്നു
ഇതിലെ ചില പശ്ചാത്തല ചിത്രങ്ങള്‍ കോപ്പി റൈറ്റ് ഉള്ളവയാണ്.അതു കോണ്ട് വെബ് സൈറ്റുകളില്‍ പബ്ലിഷ് ചെയ്യാതിരിക്കാന്‍ ശ്രദ്ദിക്കണം
3.Photo 505
നിങ്ങളുടെ മുഖത്തില്‍ നിരവധി ഇഫക്ടുകള്‍ നല്‍കാന്‍ കഴിയുന്ന വെബ് സൈറ്റ്
മാഗസിനുകളുടെ മുഖചിത്രമായി നിങ്ങളുടെ ചിത്രങ്ങള്‍ നല്‍കാന്‍ കഴിയുന്ന വെബ് സൈറ്റ്
നിങ്ങളുടെ ഫോട്ടോകള്‍ക്ക് ഒരു ചെറിയ ക്ലിക്കിലൂടെ നിരവധി ഇഫക്ടുകള്‍ നല്‍കാന്‍ കഴിയുന്ന മികച്ച ഒരു വെബ് സൈറ്റ്
നിങ്ങള്‍ക്ക് നിരവധി അതിശയകരമായ സാഹചര്യങ്ങളില്‍ നിങ്ങളുടെ ഫോട്ടോകള്‍ നിര്‍മ്മിക്കാന്‍ സഹായിക്കുന്ന വെബ് സൈറ്റ് ഉദാഹരണത്തിന് നിങ്ങള്‍ സ്കൈ ഡൈവിങ്ങിനിടയില്‍ ഉള്ള ഒരു ഫോട്ടോ വേണമെങ്കില്‍ അത് നിര്‍മ്മിക്കാന്‍ ഈ വെബ് സൈറ്റ് സഹായിക്കും

Friday, November 4, 2011

Top 15 Security/Hacking Tools & Utilities

1. Nmap

I think everyone has heard of this one, recently evolved into the 4.x series.

Nmap (“Network Mapper”) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. Nmap runs on most types of computers and both console and graphical versions are available. Nmap is free and open source.

Can be used by beginners (-sT) or by pros alike (–packet_trace). A very versatile tool, once you fully understand the results.

Get Nmap Here

2. Nessus Remote Security Scanner

Recently went closed source, but is still essentially free. Works with a client-server framework.

Nessus is the world’s most popular vulnerability scanner used in over 75,000 organizations world-wide. Many of the world’s largest organizations are realizing significant cost savings by using Nessus to audit business-critical enterprise devices and applications.

Get Nessus Here

3. John the Ripper

Yes, JTR 1.7 was recently released!

John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix flavors, supported out of the box are Kerberos AFS and Windows NT/2000/XP/2003 LM hashes, plus several more with contributed patches.

You can get JTR Here

4. Nikto

Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 3200 potentially dangerous files/CGIs, versions on over 625 servers, and version specific problems on over 230 servers. Scan items and plugins are frequently updated and can be automatically updated (if desired).

Nikto is a good CGI scanner, there are some other tools that go well with Nikto (focus on http fingerprinting or Google hacking/info gathering etc, another article for just those).

Get Nikto Here

5. SuperScan

Powerful TCP port scanner, pinger, resolver. SuperScan 4 is an update of the highly popular Windows port scanning tool, SuperScan.

If you need an alternative for nmap on Windows with a decent interface, I suggest you check this out, it’s pretty nice.

Get SuperScan Here

6. p0f

P0f v2 is a versatile passive OS fingerprinting tool. P0f can identify the operating system on:

– machines that connect to your box (SYN mode),
– machines you connect to (SYN+ACK mode),
– machine you cannot connect to (RST+ mode),
– machines whose communications you can observe.

Basically it can fingerprint anything, just by listening, it doesn’t make ANY active connections to the target machine.

Get p0f Here

7. Wireshark (Formely Ethereal)

Wireshark is a GTK+-based network protocol analyzer, or sniffer, that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and to give Wireshark features that are missing from closed-source sniffers.

Works great on both Linux and Windows (with a GUI), easy to use and can reconstruct TCP/IP Streams! Will do a tutorial on Wireshark later.

Get Wireshark Here

8. Yersinia

Yersinia is a network tool designed to take advantage of some weakeness in different Layer 2 protocols. It pretends to be a solid framework for analyzing and testing the deployed networks and systems. Currently, the following network protocols are implemented: Spanning Tree Protocol (STP), Cisco Discovery Protocol (CDP), Dynamic Trunking Protocol (DTP), Dynamic Host Configuration Protocol (DHCP), Hot Standby Router Protocol (HSRP), IEEE 802.1q, Inter-Switch Link Protocol (ISL), VLAN Trunking Protocol (VTP).

The best Layer 2 kit there is.

Get Yersinia Here

9. Eraser

Eraser is an advanced security tool (for Windows), which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns. Works with Windows 95, 98, ME, NT, 2000, XP and DOS. Eraser is Free software and its source code is released under GNU General Public License.

An excellent tool for keeping your data really safe, if you’ve deleted it..make sure it’s really gone, you don’t want it hanging around to bite you in the ass.

Get Eraser Here.

10. PuTTY

PuTTY is a free implementation of Telnet and SSH for Win32 and Unix platforms, along with an xterm terminal emulator. A must have for any h4x0r wanting to telnet or SSH from Windows without having to use the crappy default MS command line clients.

Get PuTTY Here.

11. LCP

Main purpose of LCP program is user account passwords auditing and recovery in Windows NT/2000/XP/2003. Accounts information import, Passwords recovery, Brute force session distribution, Hashes computing.

A good free alternative to L0phtcrack.

LCP was briefly mentioned in our well read Rainbow Tables and RainbowCrack article.

Get LCP Here

12. Cain and Abel

My personal favourite for password cracking of any kind.

Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols. The program does not exploit any software vulnerabilities or bugs that could not be fixed with little effort.

Get Cain and Abel Here

13. Kismet

Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic.

A good wireless tool as long as your card supports rfmon (look for an orinocco gold).

Get Kismet Here

14. NetStumbler

Yes a decent wireless tool for Windows! Sadly not as powerful as it’s Linux counterparts, but it’s easy to use and has a nice interface, good for the basics of war-driving.

NetStumbler is a tool for Windows that allows you to detect Wireless Local Area Networks (WLANs) using 802.11b, 802.11a and 802.11g. It has many uses:

  • Verify that your network is set up the way you intended.
  • Find locations with poor coverage in your WLAN.
  • Detect other networks that may be causing interference on your network.
  • Detect unauthorized “rogue” access points in your workplace.
  • Help aim directional antennas for long-haul WLAN links.
  • Use it recreationally for WarDriving.

Get NetStumbler Here

15. hping

To finish off, something a little more advanced if you want to test your TCP/IP packet monkey skills.

hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping unix command, but hping isn’t only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features

മൊബൈലില്‍ മലയാളം ! (അറിയാത്തവരോടു്)


ഗള്‍ഫ് എഡിഷന്‍ സിമ്പ്യന്‍ നോക്കിയ ഫോണുകളുപയോഗിക്കുന്ന മലയാളം എസ്സെമ്മെസ് അയയ്ക്കാന്‍ താത്പര്യമുള്ളവര്‍ക്കു് മാത്രമുള്ള കുറിപ്പു്. ഇന്‍ഡി എസ്സെമ്മെസ് 2 (IndiSMS)സൌജന്യമായി ലഭ്യമാണു്. S60V3ലും S60V2ലും J2ME ലും ഇതിപ്പോള്‍ ലഭ്യമാണു്. ആക്റ്റിവേഷന്‍ സൌജന്യമാണു്.

ഇന്റര്‍നാഷണല്‍ ഉപഭോക്താക്കള്‍ തങ്ങളുടെ ഫോണിന്റെ IMEI കോഡ് എറ്റേണോ സപ്പോട്ടിനു് ഈമെയിലയച്ചാണു് ആക്റ്റിവേറ്റ് ചെയ്യേണ്ടതു്.

ഫൊണറ്റിക് കീബോഡും നേറ്റിവ് കീബോഡും ഉപയോഗിക്കാവുന്നതാണു്.

ഇനി സൌദിയിലെ stc വരിക്കാരോടു് മാത്രമായി സ്വകാര്യം. നിങ്ങള്‍ക്കു് സൌജന്യമായി മലയാളം എസ്സെമ്മെസ് അയയ്ക്കണമെങ്കില്‍ stconline ലെ അറബിക് ഭാഷ തെരഞ്ഞെടുത്തു് മലയാളത്തില്‍ എഴുതിയാല്‍ മതി. അറബിയും മലയാളവും യുണിക്കോഡാണു് ഉപയോഗിക്കുന്നതു് എന്നതാണു് ഇതിനു് കാരണം.

Read Malayalam in Galaxy Tab using Opera Mini


image

Without rooting, it is easy to read Malayalam and other complex scripts in Android phones too, thanks to the server rendering at Opera proxy servers.

How to Make a Trojan Horse

Most of you may be curious to know about how to make a Trojan or Virus on your own. Here is an answer for your curiosity. In this post I’ll show you how to make a simple Trojan on your own using C programming language. This Trojan when executed will eat up the hard disk space on the root drive (The drive on which Windows is installed, usually C: Drive) of the computer on which it is run. Also this Trojan works pretty quickly and is capable of eating up approximately 1 GB of hard disk space for every minute it is run. So, I’ll call this as Space Eater Trojan. Since this Trojan is written using a high level programming language it is often undetected by antivirus. The source code for this Trojan is available for download at the end of this post. Let’s see how this Trojan works…

Before I move to explain the features of this Trojan you need to know what exactly is a Trojan horse and how it works. As most of us think a Trojan or a Trojan horse is not a virus. In simple words a Trojan horse is a program that appears to perform a desirable function but in fact performs undisclosed malicious functions that allow unauthorized access to the host machine or create a damage to the computer.

Now lets move to the working of our Trojan

The Trojan horse which I have made appears itself as an antivirus program that scans the computer and removes the threats. But in reality it does nothing but occupy the hard disk space on the root drive by just filling it up with a huge junk file. The rate at which it fills up the hard disk space it too high. As a result the the disk gets filled up to 100% with in minutes of running this Trojan. Once the disk space is full, the Trojan reports that the scan is complete. The victim will not be able to clean up the hard disk space using any cleanup program. This is because the Trojan intelligently creates a huge file in the WindowsSystem32 folder with the .dll extension. Since the junk file has the .dll extention it is often ignored by disk cleanup softwares. So for the victim, there is now way to recover the hard disk space unless reformatting his drive.

The algorithm of the Trojan is as follows

1. Search for the root drive

2. Navigate to WindowsSystem32 on the root drive

3. Create the file named “spceshot.dll”

4. Start dumping the junk data onto the above file and keep increasing it’s size until the drive is full

5. Once the drive is full, stop the process.

You can download the Trojan source code HERE. Please note that I have not included the executabe for security reasons. You need to compile it to obtain the executable.

How to compile, test and remove the damage?
Compilation:

For step-by-step compilation guide, refer my post How to compile C Programs.

Testing:

To test the Trojan, just run the SpaceEater.exe file on your computer. It’ll generate a warning message at the beginning. Once you accept it, the Trojan runs and eats up hard disk space.

NOTE: To remove the warning message you’ve to edit the source code and then re-compile it.

How to remove the Damage and free up the space?

To remove the damage and free up the space, just type the following in the “run” dialog box.

%systemroot%system32

Now search for the file “spceshot.dll“. Just delete it and you’re done. No need to re-format the hard disk.

NOTE: You can also change the ICON of the virus to make it look like a legitimate program. This method is described in the post: How to Change the ICON of an EXE file ?