Coding errors that helped Hackers and Intruders

There has been some 25 software coding errors that helped the Cyber criminals helped them to have access the site and accounts to nearly 1.5 million security breaches.
The SANS Institute in Maryland said that in 2008 , just two of the errors led to more than 1.5 m web site security breaches. The organisations, which helped making the list, include the US National Security Agency, the Department of Homeland Security, Microsoft, and Symantec published the document."The top 25 list gives developers a minimum set of coding errors that must be eradicated before software is used by customers," the BBC quoted Chris Wysopal, chief technology officer with Veracode.
SANS director, Mason Brown said: "There appears to be broad agreement on the programming errors. Now it is time to fix them. We need to make sure every programmer knows how to write code that is free of the top 25 errors."While, most of the earlier advice focused on vulnerabilities that could have originated from programming errors, the 25 list examines the actual programming errors themselves.The 25 Most Dangerous Programming Errors are:
CWE-116 :Improper Encoding or Escaping of OutputCWE-89 :Failure to Preserve SQL Query StructureCWE-20 :Improper Input ValidationCWE-79 :Failure to Preserve Web Page StructureCWE-78 :Failure to Preserve OS Command StructureCWE-319 :Cleartext Transmission of Sensitive InformationCWE-352:Cross-Site Request ForgeryCWE-362 :Race ConditionCWE-209 :Error Message Information LeakCWE-119 :Failure to Constrain Operations within the Bounds of a Memory BufferCWE-642 :External Control of Critical State DataCWE- 73:External Control of File Name or Path
CWE-665 :Improper InitializationCWE-426 :Untrusted Search PathCWE-94 :Failure to Control Generation of CodeCWE- 494 :Download of Code Without Integrity CheckCWE-404 :Improper Resource Shutdown or ReleaseCWE-682 :Incorrect CalculationCWE-285 :Improper Access ControlCWE-327:Use of a Broken or Risky Cryptographic AlgorithmCWE-259 :Hard-Coded PasswordCWE-732 :Insecure Permission Assignment for Critical ResourceCWE-330 :Use of Insufficiently Random ValuesCWE- 250 :Execution with Unnecessary PrivilegesCWE-602:Client-Side Enforcement of Server-Side Security (ANI)This List is produced by National Security Agency (NSA) and 30 other organisations to put forward the flaws.

SAMSUNG NEW CODES

LAtest
*#1111# S/W Version
*#1234# Firmware Version
*#2222# H/W Version
*#8999 * 8376263 # All Versions Together
*#8999 *8378# Test Menu
*#4777 *8665# GPSR Tool
*#8999 *523# LCD Brightness
*#8999 *377# Error Menu
*#8999 *327# EEP Menu
*#8999 * 3825523 # Don't Know.
*#8999 *667# Debug Mode
*# 92782 # PhoneModel (Wap)
#* 5737425 # JAVA Mode
*#2255# Call List
*# 232337 # Bluetooth MAC Adress
*# 5282837 # Java Version
#*4773# Incremental Redundancy
#*7752 # 8 PSK uplink capability bit
#*7785# Reset wakeup & RTK timer cariables/variables
#*1200# ????
#*7200# Tone Generator Mute

#*3888# BLUETOOTH Test mode
#*#8999 *324# ??
#*7828# Task screen
#*5111# ??
#*# 8377466 # S/W Version & H/W Version
#*2562# Restarts Phone
#*2565# No Blocking? General Defense.
#*3353# General Defense, Code Erased.
#*3837# Phone Hangs on White screen
#*3849# Restarts Phone
#*3851# Restarts Phone
#*3876# Restarts Phone
#*7222# Operation Typ: (Class C GSM)
#*7224# !!! ERROR !!!
#*7252# Operation Typ: (Class B GPRS)
#*7271# CMD: (Not Available)
#*7274# CMD: (Not Available)
#*7337# Restarts Phone (Resets Wap Settings)
#*2787# CRTP ON/OFF
#*2886# AutoAnswer ON/OFF
#*3737 # L1 AFC
#*5133 # L1 HO Data
#*7288# GPRS Detached/Attached
#*7287# GPRS Attached
#*7666# White Screen
#*7693# Sleep Deactivate/Activate
#*7284 # L1 HO Data
#*2256# Calibration info? (For CMD set DEBUGAUTONOMY in cihard.opt)
#*2286# Databattery
#*2527 # GPRS switching set to (Class 4 , 8 , 9 , 10)
#*2679# Copycat feature Activa/Deactivate
#*3940 # External looptest 9600 bps
#*4263# Handsfree mode Activate/Deactivate
#*4700 # Please use function 2637
#*7352# BVMC Reg value (LOW_SWTOFF, NOMINAL_SWTOFF)
#*2558# Time ON
#*3370 # Same as 4700
#*3941 # External looptest 115200 bps
#*5176 # L1 Sleep
#*7462# SIM Phase
#*7983# Voltage/Freq
#*7986# Voltage
#*8466# Old Time
#*2255# Call Failed
#*5187 # L1 C2G trace Activate/Deactivate
#*5376# DELETE ALL SMS!!!!
#*6837 # Official Software Version: ( 0003000016000702)
#*7524 # KCGPRS: (FF FF FF FF FF FF FF FF 07)
#*7562 # LOCI GPRS: (FF FF FF FF FF FF FF FF FF FF FF FE FF 01)
#*2337# Permanent Registration Beep
#*2474# Charging Duration
#*2834# Audio Path (Handsfree)
#*3270# DCS Support Activate/Deactivate
#*3282# Data Activate/Deactivate
#*3476# EGSM Activate/Deactivate
#*3676# FORMAT FLASH VOLUME!!!
#*4760# GSM Activate/Deactivate
#*4864# White Screen
#*5171 # L1 P1
#*5172 # L1 P2
#*5173 # L1 P3
#*7326# Accessory
#*7683# Sleep variable
#*8465 # Time in L1
#*2252# Current CAL
#*2836# AVDDSS Management Activate/Deactivate
#*3877# Dump of SPY trace
#*7728# RSAV
#*2677 # Same as 4700
#*3797 # Blinks 3 D 030300 in RED
#*3728 # Time 2 Decod
#*3725 # B4 last off
#*7372# Resetting the time to DPB variables
#*7732# Packet flow context bit Activate/Deactivate
#*6833# New uplink establishment Activate/Deactivate
#*3273 # EGPRS multislot (Class 4 , 8 , 9 , 10)
#*7722# RLC bitmap compression Activate/Deactivate
#*2351 # Blinks 1347 E201 in RED
#*4472 # Hysteresis of serving cell: 3 dB
#*2775 # Switch to 2 inner speaker
#*9270# Force WBS
#*7878 # FirstStartup (0 =NO, 1=YES)
#*3757# DSL UART speed set to (LOW, HIGH)
#*8726# Switches USBACM to Normal
#*8724# Switches USBACM to Generator mode
#*8727# Switches USBACM to Slink mode
#*8725# Switches USBACM to Loop-back mode
#*3838 # Blinks 3 D 030300 in RED
#*2077# GPRS Switch
#*2027# GPRS Switch
#*0227# GPRS Switch
#*0277# GPRS Switch
#* 22671 # AMR REC START
#* 22672 # Stop AMR REC (File name: /a/multimedia/sounds/voice list/ENGMODE.amr)
#* 22673 # Pause REC
#* 22674 # Resume REC
#* 22675 # AMR Playback
#* 22676 # AMR Stop Play
#* 22677 # Pause Play
#* 22678 # Resume Play
#* 77261 # PCM Rec Req
#* 77262 # Stop PCM Rec
#* 77263 # PCM Playback
#* 77264 # PCM Stop Play
#*2872# CNT
*#8999 *283# ???
#* 22679 # AMR Get Time
* 288666 # ???
* 2886633 # ???
*#8999 *364# Watchdog ON/OFF
#*8370 # Tfs4.0 Test 0
#*8371 # Tfs4.0 Test 1
#*8372 # Tfs4.0 Test 2
#*8373 # Tfs4.0 Test 3
#*8374 # Tfs4.0 Test 4
#*8375 # Tfs4.0 Test 5
#*8376 # Tfs4.0 Test 6
#*8377 # Tfs4.0 Test 7
#*8378 # Tfs4.0 Test 8
#*8379 # Tfs4.0 Test 9
# 837837 # error=...
#* 36245 # Turns Email TestMenu on.
*2767 * 22236245 # Email EPP set (....)!
*2767 * 837836245 # Email Test Account!
*2767 * 29536245 # Email Test2 Account!
*2767 * 036245 # Email EPP reset!
*2767 * 136245 # Email EPP set (1)!
*2767 * 736245 # Email EPP set (7)!
*2767 * 3036245 # Email...
*2767 * 85236245 # Email...
*2767 *3855 # = E2P Full Reset
*2767 *2878 # = E2P Custom Reset

SONY ERICSON CODES

Sony Ericsson Secret Menu: -> * <- <- * <- *
(-> means press joystick, arrow keys or jogdial to the right and <- means left.)
You'll see phone model, software info, IMEI, configuration info, sim lock status, REAL time clock, total call time and text labels.
You can also test your phones services and hardware from this menu (main display, camera, LED/illumination, Flash LED, keyboard, earphone, speaker, microphone, radio and vibrator tests)
IMEI Number: *#06#
Lockstatus: <- * * <-
Shortcut to last dialed numbers: 0#
Shortcut to sim numbers: On main menu type a number and press #
If you change the language from default to any other language, then it may be difficult to switch to default language. The shortcut is very simple. Just press < 0000 >. < stands for left arrow button or joystick and > stands for right arrow button or joystick

NOKIA ALL seCrEt CODES

WARNING: Using secret codes may be harmful to your phone and result in disabling or worse. Use these codes at your own discretion, i accept no responsiblility for blocked pones while using these codes!!!
IMEI Number
*#06# Cells Identity Code (IMEI = International Mobile Equipment Identity)
XXXXXX XX XXXXXX X
TAC FAC SNR SP
TAC = Type Approval Code (first 2 digits = country code of the approval- country )
FAC = Final Assembly Code: (01 ,02 = AEG)
(10 ,20 Nokia)
(40 ,41 ,44 Siemens)
(30 Ericsson)
(50 Bosch)
(51 Sony,Siemens,Ericsson)
(60 Alcatel)
(65 AEG)
(70 Sagem)
(75 Dancall)
(80 Philips)
(85 Panasonic)
SNR = Seria Nr.
SP = Spare (always "0")
Software Version
*#0000# shows the software version
Signal Processing
*3370# - Enchanced full Rate Codec (EFR) activation. It will automatically restart.
#3370# - Enchanced full Rate Codec (EFR) deactivation
*4720# - Half Rate Codec activation. It will automatically restart.
#4720# - Half Rate Codec deactivation
Enchanced Full Rate will give you much better sound quality when you enable it. The new Enhanced Full Rate CODEC adopted by GSM uses the ASELP (AlgebraicCode Excitation Linear Prediction) compression technology. This technology allows for much great voice quality in the same number of bits as the older Full Rate CODEC. The older technology was called LPC- RPE (Linear Prediction Coding with Regular Pulse Excitation). Both operate at 13 kilobits.(but you take up more space on the network, so they can charge you more) - Talk- time is reduced with about 5%
Sim Clock Stopping
*# 746025625 #
[*#sim0clock#]
Checks if the sim clock can be stopped. Sim clock stop is a kind of stand-by mode which will save battery time. This code doesn't work with software version 4.59.
It will tell you if it can be stopped or not.
Warrenty Menu
*# 92702689 # takes you to a secret menu with 6 choices:
[*#war0anty#]
1. Displays Serial Number.
2 . Displays the Month and Year of Manufacture (0997).
3. Displays (if there) the date where the phone was purchased (MMYY).
4 . Displays the date of the last repairment - if found (0000).
5. Makes you capable of transferring user data if you have the gear for it.
6. Shows how long the phone has been used to talk. This counter is not reset by when you "clear timers" like the counters in the call register.
Bypass the SP lock With a Nokia 16 xx/21 xx/31 xx/51 xx/81xx
1. Insert SIM card of different provider.
2 . Turn on the phone and press the UP VOLUME key for 3 sec.
Then release it and the phone says PIN CODE?
3. Press the "C" key.
4 . Then Press * and wait until it disappears and appears again, then press * one more time and 04*PIN*PIN*PIN#

Mobiles Secret Codes for BenQ,LG,MOTOROLA

BenQ:-
Language Menu for BenQ- Siemens mobile
English menu:
*#0001#
Deutsch menu:
*#0049#
Secret Code for BenQ
*#0606# remove sim card before
Unlock Sim:
*#0003*(secret code)#
Bonus Screen:
* 12022243121
Factory settings:
Type *#9999# to reset factory settings.
LG:-
On the main screen type *#06#
Information you get from the IMEI (International Mobile Equipment Identity)
XXXXXX XX XXXXXX X
TAC FAC SNR SP
TAC = Type approval code of your LG Mobile
FAC = Final assembly code of your cellphone
SNR = Serial number of your LG Phone
SP = Spare
Other secret tricks for LG mobile or cellphone
LG all models test mode:
Type 2945#*# on the main screen.
2945 *#01*# Secret menu for LG
IMEI and SW (LG 510 ): *#07#

Software version (LG B1200 ): *8375#
Recount cheksum (LG B1200 ): *6861#
Factory test (B1200 ): #PWR 668
Simlock menu (LG B1200 ): 1945 #*5101#
Simlock menu (LG 510 W, 5200 ): 2945 #*5101#
Simlock menu (LG 7020 , 7010 ): 2945 #* 70001 #
Simlock menu (LG 500 , 600 ): 2947#*
LG-U81XX SPECIAL CODES
Code to read phone version :
- Phone without SIM
- Enter 277634 #*# or 47328545454 #
- Select 'SW Ver.info'
Code to reset phone :
- Phone without SIM
- Enter 277634 #*# or 47328545454 #
- Select 'Factory Reset'
Code to enter UNLOCK MENU :
- Phone wit SIM inside
- Enter 2945 #* 88110 #
Test Menu 8330 : 637664 #*#
Test Menu 8180 V10 a: 49857465454 #
Test Menu 8180 V11 a: 492662464663 #
Test Menu 8130-8138 : 47328545454 #
Test Menu 8110-8120 : 277634 #*
MOTOROLA:-
Code to lock keys. Press together *7
Note: [] (pause) means the * key held in until box appears.
Select phone line - (use this to write things below the provider name):
[] [] [] 0 0 8 [] 1 []
Add phonebook to main menu:
[] [] [] 1 0 5 [] 1 []
Add messages to main menu:
[] [] [] 1 0 7 [] 1 []
Copy SIM memory (phonebook menu):
[] [] [] 1 0 8 [] 1 []
Eng Field options (main menu):
[] [] [] 1 1 3 [] 1 []
Slow (Frequency of search menu):
[] [] [] 1 0 1 [] 1 []
Medium (Frequency of search menu):
[] [] [] 1 0 2 [] 1 []
Fast (Frequency of search menu):
[] [] [] 1 0 3 [] 1 []
Enable EFR:
[] [] [] 1 1 9 [] 1 []
Function :
[] [] [] # # # [] 1 []
Change pin:
[] [] [] 0 0 4 [] 1 []
Unblocking using the "puk" number:
[] [] [] 0 0 5 [] 1 []
There are lots of similar codes exist. If you change the last number to 0 you can deactive that code. The 3 digit number at the middle are from 0 to 999. I put the most interesting codes. (EFR):Enhanced Full Rate Codec.
> You can change GSM frequencies to 900 /1800 by entering the enginnering model. Following the below steps:
enter menu and press 048263 * quickly, then you will enter the secret engineering menu
under "Opcode"
input 10 *0 *3 for GSM 900
10 *0 *4 for GSM 1800
10 *0 *5 for GSM 1900
10 *0 *6 for dual band GSM 900 /1800
10 *0 *7 for dual band GSM 850 /1900
To add extra message space 4 your Motorola C350 C450 C550 or C650 , press menu button, press 048263 * quickly, then on the popup menu enter 47 press ok.press 50 and ok.press 1 ok.press 64 ok.press 1 ok.press 186 and ok.You will receive an extra 50 msgs memory space.Switch phone off and back on.