February 2011 ~ Hacking

Friday, 25 February 2011

1.) Windows Hotkeys
Shift + F10 right-clicks.
Win + L (XP Only): Locks keyboard. Similar to Lock Workstation.
Win + F or F3: Open Find dialog. (All Files) F3 may not work in some applications which use F3 for their own find dialogs.
Win + Control + F: Open Find dialog. (Computers)
Win + U: Open Utility Manager.
Win + F1: Open Windows help.
Win + Pause: Open System Properties dialog.
Win + Tab: Cycle through taskbar buttons. Enter clicks, AppsKey or Shift + F10 right-clicks.
Win + Shift + Tab: Cycle through taskbar buttons in reverse.
Alt + Tab: Display CoolSwitch. More commonly known as the AltTab dialog.
Alt + Shift + Tab: Display CoolSwitch; go in reverse.
Alt + Escape: Send active window to the bottom of the z-order.
Alt + Shift + Escape: Activate the window at the bottom of the z-order.
Alt + F4: Close active window; or, if all windows are closed, open shutdown dialog.
Shift while a CD is loading: Bypass AutoPlay.
Shift while login: Bypass startup folder. Only those applications will be ignored which are in the startup folder, not those started from the registry (Microsoft\Windows\CurrentVersion\Run\)
Ctrl + Alt + Delete or Ctrl + Alt + NumpadDel (Both NumLock states): Invoke the Task Manager or NT Security dialog.
Ctrl + Shift + Escape (2000/XP ) or (Ctrl + Alt + NumpadDot) : Invoke the task manager. On earlier OSes, acts like Ctrl + Escape.
Printscreen: Copy screenshot of current screen to clipboard.
Alt + Printscreen: Copy screenshot of current active window to clipboard.
Ctrl + Alt + Down Arrow: Invert screen. Untested on OSes other than XP.
Ctrl + Alt + Up Arrow: Undo inversion.
Win + B : Move focus to systray icons.

2.) Generic
Ctrl + C or Ctrl + Insert: Copy.
Ctrl + X or Shift + Delete: Cut.
Ctrl + V or Shift + Insert: Paste/Move.
Ctrl + N: New... File, Tab, Entry, etc.
Ctrl + S: Save.
Ctrl + O: Open...
Ctrl + P: Print.
Ctrl + Z: Undo.
Ctrl + A: Select all.
Ctrl + F: Find...
Ctrl+W : to close the current window
Ctrl + F4: Close tab or child window.
F1: Open help.
F11: Toggle full screen mode.
Alt or F10: Activate menu bar.
Alt + Space: Display system menu. Same as clicking the icon on the titlebar.
Escape: Remove focus from current control/menu, or close dialog box.

3.) Generic Navigation
Tab: Forward one item.
Shift + Tab: Backward one item.
Ctrl + Tab: Cycle through tabs/child windows.
Ctrl + Shift + Tab: Cycle backwards through tabs/child windows.
Enter: If a button's selected, click it, otherwise, click default button.
Space: Toggle items such as radio buttons or checkboxes.
Alt + (Letter): Activate item corresponding to (Letter). (Letter) is the underlined letter on the item's name.
Ctrl + Left: Move cursor to the beginning of previous word.
Ctrl + Right: Move cursor to the beginning of next word.
Ctrl + Up: Move cursor to beginning of previous paragraph. This and all subsequent Up/Down hotkeys in this section have only been known to work in RichEdit controls.
Ctrl + Down: Move cursor to beginning of next paragraph.
Shift + Left: Highlight one character to the left.
Shift + Right: Highlight one character to the right.
Shift + Up: Highlight from current cursor position, to one line up.
Shift + Down: Highlight from current cursor position, to one line down.
Ctrl + Shift + Left: Highlight to beginning of previous word.
Ctrl + Shift + Right: Highlight to beginning of next word.
Ctrl + Shift + Up: Highlight to beginning of previous paragraph.
Ctrl + Shift + Down: Highlight to beginning of next paragraph.
Home: Move cursor to top of a scrollable control.
End: Move cursor to bottom of a scrollable control.

4.) Generic File Browser
Arrow Keys: Navigate.
Shift + Arrow Keys: Select multiple items.
Ctrl + Arrow Keys: Change focus without changing selection. "Focus" is the object that will run on Enter. Space toggles selection of the focused item.
(Letter): Select first found item that begins with (Letter).
BackSpace: Go up one level to the parent directory.
Alt + Left: Go back one folder.
Alt + Right: Go forward one folder.
Enter: Activate (Double-click) selected item(s).
Alt + Enter: View properties for selected item.
F2: Rename selected item(s).
Ctrl + NumpadPlus: In a Details view, resizes all columns to fit the longest item in each one.
Delete: Delete selected item(s).
Shift + Delete: Delete selected item(s); bypass Recycle Bin.
Ctrl while dragging item(s): Copy.
Ctrl + Shift while dragging item(s): Create shortcut(s).
In tree pane, if any:
Left: Collapse the current selection if expanded, or select the parent folder.
Right: Expand the current selection if collapsed, or select the first subfolder.
NumpadAsterisk: Expand currently selected directory and all subdirectories. No undo.
NumpadPlus: Expand currently selected directory.
NumpadMinus: Collapse currently selected directory.

5.) Accessibility
Right Shift for eight seconds: Toggle FilterKeys on and off. FilterKeys must be enabled.
Left Alt + Left Shift + PrintScreen: Toggle High Contrast on and off. High Contrast must be enabled.
Left Alt + Left Shift + NumLock: Toggle MouseKeys on and off. MouseKeys must be enabled.
NumLock for five seconds: Toggle ToggleKeys on and off. ToggleKeys must be enabled.
Shift five times: Toggle StickyKeys on and off. StickyKeys must be enabled.
6.) Microsoft Natural Keyboard with IntelliType Software Installed
Win + L: Log off Windows.
Win + P: Open Print Manager.
Win + C: Open control panel.
Win + V: Open clipboard.
Win + K: Open keyboard properties.
Win + I: Open mouse properties.
Win + A: Open Accessibility properties.
Win + Space: Displays the list of Microsoft IntelliType shortcut keys.
Win + S: Toggle CapsLock on and off.

7.) Remote Desktop Connection Navigation

Ctrl + Alt + End: Open the NT Security dialog.
Alt + PageUp: Switch between programs.
Alt + PageDown: Switch between programs in reverse.
Alt + Insert: Cycle through the programs in most recently used order.
Alt + Home: Display start menu.
Ctrl + Alt + Break: Switch the client computer between a window and a full screen.
Alt + Delete: Display the Windows menu.
Ctrl + Alt + NumpadMinus: Place a snapshot of the entire client window area on the Terminal server clipboard and provide the same functionality as pressing Alt + PrintScreen on a local computer.
Ctrl + Alt + NumpadPlus: Place a snapshot of the active window in the client on the Terminal server clipboard and provide the same functionality as pressing PrintScreen on a local computer.

8.) Mozilla Firefox Shortcuts
Ctrl + Tab or Ctrl + PageDown: Cycle through tabs.
Ctrl + Shift + Tab or Ctrl + PageUp: Cycle through tabs in reverse.
Ctrl + (1-9): Switch to tab corresponding to number.
Ctrl + N: New window.
Ctrl + T: New tab.
Ctrl + L or Alt + D or F6: Switch focus to location bar.
Ctrl + Enter: Open location in new tab.
Shift + Enter: Open location in new window.
Ctrl + K or Ctrl + E: Switch focus to search bar.
Ctrl + O: Open a local file.
Ctrl + W: Close tab, or window if there's only one tab open.
Ctrl + Shift + W: Close window.
Ctrl + S: Save page as a local file.
Ctrl + P: Print page.
Ctrl + F or F3: Open find toolbar.
Ctrl + G or F3: Find next...
Ctrl + Shift + G or Shift + F3: Find previous...
Ctrl + B or Ctrl + I: Open Bookmarks sidebar.
Ctrl + H: Open History sidebar.
Escape: Stop loading page.
Ctrl + R or F5: Reload current page.
Ctrl + Shift + R or Ctrl + F5: Reload current page; bypass cache.
Ctrl + U: View page source.
Ctrl + D: Bookmark current page.
Ctrl + NumpadPlus or Ctrl + Equals (+/=): Increase text size.
Ctrl + NumpadMinus or Ctrl + Minus: Decrease text size.
Ctrl + Numpad0 or Ctrl + 0: Set text size to default.
Alt + Left or Backspace: Back.
Alt + Right or Shift + Backspace: Forward.
Alt + Home: Open home page.
Ctrl + M: Open new message in integrated mail client.
Ctrl + J: Open Downloads dialog.
F6: Switch to next frame. You must have selected something on the page already, e.g. by use of Tab.
Shift + F6: Switch to previous frame.
Apostrophe ('): Find link as you type.
Slash (/): Find text as you type.

9.) GMail
Note: Must have "keyboard shortcuts" on in settings.
C: Compose new message.
Shift + C: Open new window to compose new message.
Slash (/): Switch focus to search box.
K: Switch focus to the next most recent email. Enter or "O" opens focused email.
J: Switch focus to the next oldest email.
N: Switch focus to the next message in the "conversation." Enter or "O" expands/collapses messages.
P: Switch focus to the previous message.
U: Takes you back to the inbox and checks for new mail.
Y: Various actions depending on current view:
Has no effect in "Sent" and "All Mail" views.
Inbox: Archive email or message.
Starred: Unstar email or message.
Spam: Unmark as spam and move back to "Inbox."
Trash: Move back to "Inbox."
Any label: Remove the label.
X: "Check" an email. Various actions can be performed against all checked emails.
S: "Star" an email. Identical to the more familiar term, "flagging."
R: Reply to the email.
A: Reply to all recipients of the email.
F: Forward an email.
Shift + R: Reply to the email in a new window.
Shift + A: Reply to all recipients of the email in a new window.
Shift + F: Forward an email in a new window.
Shift + 1 (!): Mark an email as spam and remove it from the inbox.
G then I: Switch to "Inbox" view.
G then S: Switch to "Starred" view.
G then A: Switch to "All Mail" view.
G then C: Switch to "Contacts" view.
G then S: Switch to "Drafts" view.

10.) List of F1-F9 Key Commands for the Command Prompt

F1 / right arrow: Repeats the letters of the last command line, one by one.
F2: Displays a dialog asking user to "enter the char to copy up to" of the last command line
F3: Repeats the last command line
F4: Displays a dialog asking user to "enter the char to delete up to" of the last command line
F5: Goes back one command line
F6: Enters the traditional CTRL+Z (^z)
F7: Displays a menu with the command line history
F8: Cycles back through previous command lines (beginning with most recent)
F9: Displays a dialog asking user to enter a command number, where 0 is for first command line entered.
Alt+Enter: toggle fullScreen mode.
up/down: scroll thru/repeat previous entries
Esc: delete line
Note: The buffer allows a maximum of 50 command lines. After this number is reached, the first line will be replaced in sequence.

1.Help
2. F2 Rename an item
3. F3 Open files
4. ALT+F4 Close window or quit program
5. F10 Activate the menu bar in a program
6. CTRL+ ESC open start menu, use the arrow keys to select an item, or TAB to select the taskbar
7. ALT+ TAB Return to previous program, or hold down the ALT key while repeatedly pressing tab to cycle through open programs
8. SHIFT+ DEL delete items permanently without sending to recycle bin
9. CTRL+ A Highlight all the items in window
10. CTRL+ C Copy
11. CTRL+ X Cut
12. CTRL+ V Paste
13. CTRL+ Z Undo
14. CTRL+ Y Redo
FOR INTERNET EXPLORER AND NETSCAPE
15. Home Jumps to the beginning of the page
16. END Jumps to the end of the page
17. ESC Stops the current page from loading
18. F11 Toggles full screen view
19. ALT+ LEFT ARROW Goes back to the previous page
20. ALT+ RIGHT ARROW Goes forward to the next page
21. ALT+ Home Goes to your Home page
22. CTRL+ N Opens a new browser window
23. CTRL+ W Closes the active window
24. CTRL+ O Opens the address book
25. CTRL+ R Reloads the current page
26. CTRL+ B Opens the Organized Favorites or Bookmarks windows
27. CTRL+ D Add the current page to your Favorites or Bookmarks
28. CTRL+ H Opens the history folder
29. CTRL+ F Finds text on the current page

CONTROL OVER A TO Z
One of the keys whose importance may have gone unnoticed by most of us is the Control key (Ctrl). The Control key in combination with the 26 alphabet keys can make a lot of our work easier than we think. The following pair of keys can come in handy when we want tasks faster than while using the mouse.
Operations that can be performed on the text selected:-
30. CTRL+ A Select all
31. CTRL+ B Bold
32. CTRL+ C Copy
33. CTRL+ E Justify center
34. CTRL+ I Italics
35. CTRL+ J Justify full
36. CTRL+ L Justify Left
37. CTRL+ M Indent
38. CTRL+ Q Remove paragraph Formatting
39. CTRL+ R Justify right
40. CTRL+ T Margin release
41. CTRL+ U Underline
These keys combos can be used to do other operations:-
42. CTRL+ D Opens Font Dialog Box
43. CTRL+ F Find
44. CTRL+ G Go to page, section, line, heading etc
45. CTRL+ H Find and replace
46. CTRL+ K Insert Hyperlink
47. CTRL+ N Open a new document
48. CTRL+ O Open an existing document
49. CTRL+ S Save
50 CTRL+ W Close an existing document
51. CTRL+ Y Redo
52. CTRL+ Z Undo
Besides the alphabet keys, a combination of other keys also helps:-
53. CTRL+ LEFT ARROW Jumps one word left
54. CTRL+ RIGHT ARROW Jumps one word right
55. CTRL+ DOWN ARROW Jumps one para down
56. CTRL+ UP ARROW Jumps one para up
57. CTRL+ BACKSPACE Delete one word left
58. CTRL+ DELETE Delete one word right
59. CTRL+ PAGE UP To the beginning of the previous page
60. CTRL+ PAGE DOWN to the beginning of the next page
61. CTRL+ P Print Dialog box

Read more »

All Dos Commands

06:54

Hacking Skills

No comments

ADDUSERS         Add or list users to/from a CSV file
ARP              Address Resolution Protocol
ASSOC            Change file extension associations
ASSOCIAT         One step file association
AT               Schedule a command to run at a later time
ATTRIB           Change file attributes

BOOTCFG          Edit Windows boot settings
BROWSTAT         Get domain, browser and PDC info

CACLS            Change file permissions
CALL             Call one batch program from another
CD               Change Directory - move to a specific Folder
CHANGE           Change Terminal Server Session properties
CHKDSK           Check Disk - check and repair disk problems
CHKNTFS          Check the NTFS file system
CHOICE           Accept keyboard input to a batch file
CIPHER           Encrypt or Decrypt files/folders
CleanMgr         Automated cleanup of Temp files, recycle bin
CLEARMEM         Clear memory leaks
CLIP             Copy STDIN to the Windows clipboard.
CLS              Clear the screen
CLUSTER          Windows Clustering
CMD              Start a new CMD shell
COLOR            Change colors of the CMD window
COMP             Compare the contents of two files or sets of files
COMPACT          Compress files or folders on an NTFS partition
COMPRESS         Compress individual files on an NTFS partition
CON2PRT          Connect or disconnect a Printer
CONVERT          Convert a FAT drive to NTFS.
COPY             Copy one or more files to another location
CSVDE            Import or Export Active Directory data

DATE             Display or set the date
Dcomcnfg         DCOM Configuration Utility
DEFRAG           Defragment hard drive
DEL              Delete one or more files
DELPROF          Delete NT user profiles
DELTREE          Delete a folder and all subfolders
DevCon           Device Manager Command Line Utility
DIR              Display a list of files and folders
DIRUSE           Display disk usage
DISKCOMP         Compare the contents of two floppy disks
DISKCOPY         Copy the contents of one floppy disk to another
DNSSTAT          DNS Statistics
DOSKEY           Edit command line, recall commands, and create macros
DSADD            Add user (computer, group..) to active directory
DSQUERY          List items in active directory
DSMOD            Modify user (computer, group..) in active directory

ECHO             Display message on screen
ENDLOCAL         End localisation of environment changes in a batch file
ERASE            Delete one or more files
EXIT             Quit the CMD shell
EXPAND           Uncompress files
EXTRACT          Uncompress CAB files

FC               Compare two files
FDISK            Disk Format and partition
FIND             Search for a text string in a file
FINDSTR          Search for strings in files
FOR              Conditionally perform a command several times
FORFILES         Batch process multiple files
FORMAT           Format a disk
FREEDISK         Check free disk space (in bytes)
FSUTIL           File and Volume utilities
FTP File         Transfer Protocol
FTYPE            Display or modify file types used in file extension associations

GLOBAL           Display membership of global groups
GOTO             Direct a batch program to jump to a labelled line

HELP             Online Help
HFNETCHK         Network Security Hotfix Checker

IF               Conditionally perform a command
IFMEMBER         Is the current user in an NT Workgroup
IPCONFIG         Configure IP

KILL             Remove a program from memory

LABEL            Edit a disk label
LOCAL            Display membership of local groups
LOGEVENT         Write text to the NT event viewer.
LOGOFF           Log a user off
LOGTIME          Log the date and time in a file

MAPISEND         Send email from the command line
MEM              Display memory usage
MD               Create new folders
MODE             Configure a system device
MORE             Display output, one screen at a time
MOUNTVOL         Manage a volume mount point
MOVE             Move files from one folder to another
MOVEUSER         Move a user from one domain to another
MSG              Send a message
MSIEXEC          Microsoft Windows Installer
MSINFO           Windows NT diagnostics
MSTSC            Terminal Server Connection (Remote Desktop Protocol)
MUNGE            Find and Replace text within file(s)
MV               Copy in-use files

NET              Manage network resources
NETDOM           Domain Manager
NETSH            Configure network protocols
NETSVC           Command-line Service Controller
NBTSTAT          Display networking statistics (NetBIOS over TCP/IP)
NETSTAT          Display networking statistics (TCP/IP)
NOW              Display the current Date and Time
NSLOOKUP         Name server lookup
NTBACKUP         Backup folders to tape
NTRIGHTS         Edit user account rights

PATH             Display or set a search path for executable files
PATHPING         Trace route plus network latency and packet loss
PAUSE            Suspend processing of a batch file and display a message
PERMS            Show permissions for a user
PERFMON          Performance Monitor
PING             Test a network connection
POPD             Restore the previous value of the current directory saved by PUSHD
PORTQRY          Display the status of ports and services
PRINT            Print a text file
PRNCNFG          Display, configure or rename a printer
PRNMNGR          Add, delete, list printers set the default printer
PROMPT           Change the command prompt
PsExec           Execute process remotely
PsFile           Show files opened remotely
PsGetSid         Display the SID of a computer or a user
PsInfo           List information about a system
PsKill           Kill processes by name or process ID
PsList           List detailed information about processes
PsLoggedOn       Who's logged on (locally or via resource sharing)
PsLogList        Event log records
PsPasswd         Change account password
PsService        View and control services
PsShutdown       Shutdown or reboot a computer
PsSuspend        Suspend processes
PUSHD            Save and then change the current directory

QGREP            Search file(s) for lines that match a given pattern.

RASDIAL          Manage RAS connections
RASPHONE         Manage RAS connections
RECOVER          Recover a damaged file from a defective disk.
REG              Read, Set or Delete registry keys and values
REGEDIT          Import or export registry settings
REGSVR32         Register or unregister a DLL
REGINI           Change Registry Permissions
REM              Record comments (remarks) in a batch file
REN              Rename a file or files.
REPLACE          Replace or update one file with another
RD               Delete folder(s)
RDISK            Create a Recovery Disk
RMTSHARE         Share a folder or a printer
ROBOCOPY         Robust File and Folder Copy
ROUTE            Manipulate network routing tables
RUNAS            Execute a program under a different user account
RUNDLL32         Run a DLL command (add/remove print connections)

SC               Service Control
SCHTASKS         Create or Edit Scheduled Tasks
SCLIST           Display NT Services
ScriptIt         Control GUI applications
SET              Display, set, or remove environment variables
SETLOCAL         Begin localisation of environment changes in a batch file
SETX             Set environment variables permanently
SHARE            List or edit a file share or print share
SHIFT            Shift the position of replaceable parameters in a batch file
SHORTCUT         Create a windows shortcut (.LNK file)
SHOWGRPS         List the NT Workgroups a user has joined
SHOWMBRS         List the Users who are members of a Workgroup
SHUTDOWN         Shutdown the computer
SLEEP            Wait for x seconds
SOON             Schedule a command to run in the near future
SORT             Sort input
START            Start a separate window to run a specified program or command
SU               Switch User
SUBINACL         Edit file and folder Permissions, Ownership and Domain
SUBST            Associate a path with a drive letter
SYSTEMINFO       List system configuration

TASKLIST         List running applications and services
TIME             Display or set the system time
TIMEOUT          Delay processing of a batch file
TITLE            Set the window title for a CMD.EXE session
TOUCH            Change file timestamps
TRACERT          Trace route to a remote host
TREE             Graphical display of folder structure
TYPE             Display the contents of a text file

USRSTAT          List domain usernames and last login

VER              Display version information
VERIFY           Verify that files have been saved
VOL              Display a disk label

WHERE            Locate and display files in a directory tree
WHOAMI           Output the current UserName and domain
WINDIFF          Compare the contents of two files or sets of files
WINMSD           Windows system diagnostics
WINMSDP          Windows system diagnostics II
WMIC             WMI Commands

XCACLS           Change file permissions
XCOPY            Copy files and folders

Read more »

Wednesday, 23 February 2011

Intro : Cain And Abel Tool

11:39

Hacking Skills

No comments

This is the tool I used sometimes to recover passwords that I have forgotten. I do not encourage hacking. This tool is actually considered a backdoor sometimes by some of the security software in the market. Personally I think it is useful, but people tend to abuse it.

Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering cached passwords and analyzing routing protocols.

Cain & Abel has been developed in the hope that it will be useful for network administrators, teachers, security consultants/professionals, forensic staff, security software vendors, professional penetration tester and everyone else that plans to use it for ethical reasons.

The tool is divided into 2, namely Cain, and Abel.

Cain’s features

Protected Storage Password Manager
Reveals locally stored passwords of Outlook, Outlook Express, Outlook Express Identities, Outlook 2002, Internet Explorer and MSN Explorer.
Credential Manager Password Decoder
Reveals passwords stored in Enterprise and Local Credential Sets on Windows XP/2003.
LSA Secrets Dumper
Dumps the contents of the Local Security Authority Secrets.
Dialup Password Decoder
Reveals passwords stored by Windows “Dial-Up Networking” component.
APR (ARP Poison Routing)
Enables sniffing on switched networks and Man-in-the-Middle attacks.
Route Table Manager
Provides the same functionality of the Windows tool “route.exe” with a GUI front-end.
SID Scanner
Extracts user names associated to Security Identifiers (SIDs) on a remote system.
Network Enumerator
Retrieves, where possible, the user names, groups, shares, and services running on a machine.
Service Manager
Allows you to stop, start, pause/continue or remove a service.
Sniffer
Captures passwords, hashes and authentication information while they are transmitted on the network. Includes several filters for application specific authentications and routing protocols. The VoIP filter enables the capture of voice conversations transmitted with the SIP/RTP protocol saved later as WAV files.
Routing Protocol Monitors
Monitors messages from various routing protocols (HSRP, VRRP, RIPv1, RIPv2, EIGRP, OSPF) to capture authentications and shared route tables.
Full RDP sessions sniffer for APR (APR-RDP)
Allows you to capture all data sent in a Remote Desktop Protocol (RDP) session on the network. Provides interception of keystrokes activity client-side.
Full SSH-1 sessions sniffer for APR (APR-SSH-1)
Allows you to capture all data sent in a HTTPS session on the network.
Full HTTPS sessions sniffer for APR (APR-HTTPS)
Allows you to capture all data sent in a HTTPS session on the network.
Certificates Collector
Grab certificates from HTTPS web sites and prepares them to be used by APR-HTTPS.
MAC Address Scanner with OUI fingerprint
Using OUI fingerprint, this makes an informed guess about what type of device the MAC address from.
Promiscuous-mode Scanner based on ARP packets
Identifies sniffers and network Intrusion Detection systems present on the LAN.
Wireless Scanner
Can scan for wireless networks signal within range, giving details on its MAC address, when it was last seen, the guessed vendor, signal strength, the name of the network (SSID), whether it has WEP or not (note WPA encrypted networks will show up as WEPed), whether the network is an Ad-Hoc network or Infrastructure, what channel the network is operating at and at what speed the network is operating (e.g. 11Mbps). Passive scanning and WEP IVs sniffing are also supported using the AirpCap adapter from CACE Technologies.
802.11 Capture Files Decoder
Decode 802.11 capture files (wireshark, pcap) containing wireless frames encrypted with WEP or WPA-PSK.
Access (9x/2000/XP) Database Passwords Decoder
Decodes the stored encrypted passwords for Microsoft Access Database files.
Base64 Password Decoder
Decodes Base64 encoded strings.
Cisco Type-7 Password Decoder
Decodes Cisco Type-7 passwords used in router and switches configuration files.
Cisco VPN Client Password Decoder
Decodes Cisco VPN Client passwords stored in connection profiles (*.pcf).
VNC Password Decoder
Decodes encrypted VNC passwords from the registry.
Enterprise Manager Password Decoder
Decodes passwords used by Microsoft SQL Server Enterprise Manager (SQL 7.0 and 2000 supported).
Remote Desktop Password Decoder
Decodes passwords in Remote Desktop Profiles (.RPD files).
PWL Cached Password Decoder
Allows you to view all cached resources and relative passwords in clear text either from locked or unlocked password list files.
Password Crackers
Enables the recovery of clear text passwords scrambled using several hashing or encryption algorithms. All crackers support Dictionary and Brute-Force attacks.
Cryptanalysis attacks
Enables password cracking using the ‘Faster Cryptanalytic time – memory trade off’ method introduced by Philippe Oechslin. This cracking technique uses a set of large tables of pre calculated encrypted passwords, called Rainbow Tables, to improve the trade-off methods known today and to speed up the recovery of clear text passwords.
WEP Cracker
Performs Korek’s WEP Attack on capture 802.11 capture files containing WEP initialization vectors.
Rainbowcrack-online client
Enables password cracking by mean of the outstanding power of this on-line cracking service based on RainbowTable technology.
NT Hash Dumper + Password History Hases (works with Syskey enabled)
Will retrieve the NT password hash from the SAM file regardless of whether Syskey in enabled or not.
Syskey Decoder
Will retrieve the Boot Key used by the SYSKEY utility from the local registry or “off-line” SYSTEM files.
MSCACHE Hashes Dumper
Will retrieve the MSCACHE password hashes stored into the local registry.
Wireless Zero Configuration Password Dumper
Will retrieve the wireless keys stored by Windows Wireless Configuration Service.
Microsoft SQL Server 2000 Password Extractor via ODBC
Connects to an SQL server via ODBC and extracts all users and passwords from the master database.
Oracle Password Extractor via ODBC
Connects to an Oracle server via ODBC and extracts all users and passwords from the database.
MySQL Password Extractor via ODBC
Connects to an MySQL server via ODBC and extracts all users and passwords from the database.
Box Revealer
Shows passwords hidden behind asterisks in password dialog boxes.
RSA SecurID Token Calculator
Can calculate the RSA key given the tokens .ASC file.
Hash Calculator
Produces the hash values of a given text.
TCP/UDP Table Viewer
Shows the state of local ports (like netstat).
TCP/UDP/ICMP Traceroute with DNS resolver and WHOIS client
A improved traceroute that can use TCP, UDP and ICMP protocols and provides whois client capabilities.
Cisco Config Downloader/Uploader (SNMP/TFTP)
Downloads or uploads the configuration file from/to a specified Cisco device (IP or host name) given the SNMP read/write community string.

Abel features

Remote Console
Provides a remote system shell on the remote machine.
Remote Route Table Manager
Enable to manage the route table of the remote system.
Remote TCP/UDP Table Viewer
Shows the state of local ports (like netstat) on the remote system.
Remote NT Hash Dumper + Password History Hases (works with Syskey enabled)
Will retrieve the NT password hash from the SAM file regardless of whether Syskey in enabled or not; works on the Abel-side.
Remote LSA Secrets Dumper
Dumps the contents of the Local Security Authority Secrets present on the remote system.

Popularity: 39% [?]

Read more »

Friday, 18 February 2011

How to Start with XSS Hacking ?

08:16

Hacking Skills

No comments

XSS vulnerabilities occur due to weak coding of the web applications. Once the hacker finds this vulnerability he/she injects malicious codes(Usually in web forms) to steal session cookies and later the hacker uses those cookies to gain access to sensitive page content.
Xss Cross Site Scripting may be classified in two types:
1.Persistent XSS
2.Non Persistent XSS
In order to demonstrate a XSS attack I will take an example of a website:
_____________________________________________________________________

http://www.redwrappings.co.in

_____________________________________________________________________

Checking the venerability
The simplest way to check the vulnerability is to enter the following code in the any web form present on the website
_____________________________________________________________________

<script>alert(“XSS”)</script>

_____________________________________________________________________

Once the attacker inserts the code A dialog box like the below one will appear:

Defacement

Now the attacker has found that the website is velnerable to an xss attack the attacker can do lots of damages to the website, The most common thing which the attacker will do is place his defacement image on that page showing that the website is hacked, For this purpose he will insert a code similar to the below one:

__________________________________________________________________

<html><body><IMG SRC=”http://site.com/yourDefaceIMAGE.png”></body></html>

___________________________________________________________________
Where http://site.com/yourDefaceIMAGE.png is the defacement image
Inserting Flash Videos
The attacker can also insert flash videos by entering the following code in any web form present on the website
Redirection

The attacker can also redirect the page to any particular page , In case if the hacker has managed to find XSS venerability in the a website like paypal.com or alertpay.com he can redirect that page to a Phisher Site(Fake login page) where the victim will loose his password, To redirect a an xssed page to another page the attacker will insert a code similar to the below one:

___________________________________________________________________

<script>window.open( “http://www.google.com/” )</script>

___________________________________________________________________

Stealing Cookies

Most of the attackers after finding a website venerable to xss will probably steal victims cookies to gain access to their account or private data this method is called Session hijacking, which is a detailed topic and I will be explaining in the later articles

Hope you have learned some XSS ,Feel free to ask if you have any problem regarding the above information

Read more »

Hacking | Skilz

This is featured post 1 title

This is featured post 2 title

This is featured post 3 title

This is featured post 4 title

This is featured post 5 title

Friday, 25 February 2011

Advance Dorks For LFI & RFI

All keyboard Shortcuts

All Dos Commands

Wednesday, 23 February 2011

Intro : Cain And Abel Tool

Friday, 18 February 2011

How to Start with XSS Hacking ?

About Me

GET IN

Blog Archive

Total Pageviews

Facebook Plugin

Popular Posts

Followers

Your Description

Networked Blogs

Language Translator