MultiInjector - Automated Stealth SQL Injection Tool

MultiInjector claims to the first configurable automatic website defacement software, I’m not sure if that’s a good thing - or a bad thing.

But well here it is anyway.



Features

• Receives a list of URLs as input


• Recognizes the parameterized URLs from the list


• Fuzzes all URL parameters to concatenate the desired payload once an injection is successful


• Automatic defacement - you decide on the defacement content, be it a hidden script, or just pure old “cyber graffiti” fun


• OS command execution - remote enabling of XP_CMDSHELL on SQL server, subsequently running any arbitrary operating system command lines entered by the user


• Configurable parallel connections exponentially speed up the attack process - one payload, multiple targets, simultaneous attacks


• Optional use of an HTTP proxy to mask the origin of the attacks

The author highly recommend running a HTTP sniffer such as IEInspector HTTP Analyzer in order to see all attack requests going out to the targets.

Requirements

• Python >= 2.4


• Pycurl (compatible with the above version of Python)


• Psyco (compatible with the above version of Python)

You can download MultiInjector v0.2 here:

MultiInjector.py

Or read more here.

Read More

Free ISO Creator Makes Disk Images Fast and Painless

Windows only: Create ISO-format disk images quickly and easily with Free ISO Creator. After downloading and installing the software, all you have to do is click Add File(s) or Add Folder to choose the data you want included in the image, select a name and location for the ISO file with "Save ISO As..." and click Convert. You can even create a bootable disk image by clicking Options and selecting the appropriate IMG file. Now you can burn the image to disk with ISO Recorder or mount the image as a virtual drive in Windows with the Virtual CD-ROM Control Panel, Clonedrive or Daemon Tools. Free ISO Creator is a free download for Windows.

Free ISO Creator [via Download Squad]

Read More

How to enable color profiles & color management in Firefox 3

Photographers and photo enthusiasts will be happy to hear this. Firefox 3 now supports color management. No more viewing flickr using Safari. You have to explicitly enable it though. Read on to know how.



Here is the link to the official test site for ICC v4. Go ahead and open it in a new window.



If your browser does not support color profiles or has it disabled, here is what you'll get:





If your browser does support color profiles, this is what you'll get:





Here is how to enable Color Management on Firefox 3:

1) Open Firefox 3 browser.

2) On the address bar type the following:



about:config



3) On the search bar type the following:



gfx.color_management.enabled



4) Confirm it is now set to true, then restart firefox.



That's it! Go back to the test site and confirm that you get the proper image.



Now, if only they had turned this on by default...

Read More

Securing Ubuntu

ProShield is a system administration/security program for Ubuntu/Debian GNU/Linux. It helps insure that your system is secure and up-to-date by checking many different aspects of your system. Whether you are a Linux novice or a system administrator with a dozen servers, ProShield is designed to be usable by all. Its main goal is to help secure a newly installed computer, as well as maintain the security of an existing machine. It's part security and part security administration.



The main features of ProShield are:

    * Helps you backup your system weekly.

    * Checks for new software releases, in order to see if installed software is reasonably up to date.  Smart-suggestion to upgrade if an important package is released.

    * Disk-space check to find any partitions that are 70% full or more.

    * Checks for extra root accounts.

    * Checks account & password files for correct access control permissions.

    * Makes sure a few security-hazardous packages are not installed.

    * Checks to make sure a packet sniffer is not running.

    * Removes unneeded packages from the local package archive.

    * Checks to see if 'apt' is fetching unnecessary information when checking for software updates.

    * Makes sure system time is accurate.

    * Checks to make sure the user isn't logged into the system (GUI) as root.

    * Checks the configuration of the ssh server ([sshd] if installed) for insecure settings.

    * At runtime, ProShield will also check to see if there has been a new version released, and can download and install it at the user's preference.



When the program is done analyzing your system, it displays an "advisory report", and then (if necessary), guides you through a series of interactive questions to help you solve any problems it found.

ProShield is released as a Debian package, ready for easy installation.  After installation, type "proshield" to start the program (you need to do this in a shell/terminal).



Download the latest version: ProShield v3.8.19



Easy Install:

If you don't know what a Debian package is, or you'd just like to install ProShield painlessly right now, you can paste this command into a shell/terminal: (you should also use this if you intend to install the ProShield package from the command line, as this method will resolve dependencies)



wget http://proshield.sf.net/ps-install 

sudo sh ps-install

rm ps-install

Read More

Hacking arrests doubled in Japan in 2007

Arrests associated with unauthorized access to computers more than doubled in Japan in 2007 compared to the previous year, according to figures released by Japan's Ministry of Justice.

During 2007 a total of 1,442 arrests were made, up 703 arrests a year earlier, reported the ministry in its annual White Paper on Crime. The figure is 10 times the number of arrests made in 2003 for violations of the same law.





The country also saw a rise, although a much more modest one, in the number of crimes involving computers. There were a total of 3,918 arrests for such crimes, up 9% on the year.

Within this category arrests relating to violations of the copyright law jumped 11 percent to 165, while arrests for distribution of obscene literature climbed 6 percent to 203. There was a drop in child pornography-related arrests from 251 to 192, but arrest for child prostitutes soliciting or solicited online rose from 463 to 551.



The figures come against a backdrop of increasing broadband and cell phone penetration in Japan but generally lower crime.

At the end of 2007 there were 28.3 million broadband connections and 100.5 million cell phone subscriptions. Those figures are up respectively 10 percent and 6 percent on the beginning of the year.

Overall reported cases dropped 7% compared to last year. It was the fifth year in a row that the number of cases dropped. They stood at 2.7 million in 2007 against the record high of 3.7 million hit in 2002.

Read More

Firefox hits 20% share as testers tickle 'pr0n mode'

Popular browser Firefox has snatched more than 20 per cent market share during two separate weeks in October, according to new statistics.

Net Applications, which compiled the data, claimed that Mozilla’s web browser crossed the significant threshold for the week starting 5 October, and, since then, has continued to float around the 20 per cent mark.

At the same time, Microsoft’s Internet Explorer has lost ground. It now holds around 71 per cent market share in the hotly contested browser wars. Whether that will change when the firm brings out IE8 remains to be seen, however.

Mozilla released Firefox 3 into an enthusiastic market in June this year. Meanwhile, IE8 is expected to land sometime in January 2009.

Opera also recently brought an updated version of its browser into play, and internet kingpin Google even got in on the act in September with the launch of Chrome.

In related news, Mozilla released its new private browsing porn mode feature to testers fiddling with beta versions of Firefox 3.1 earlier this week.

Microsoft spurted out a second beta of IE8 in late August that included the controversial “InPrivate Browsing” tool. The feature, when enabled, will switch off cookies, browsing and search history, and it won't save form data and passwords. In addition, it will automatically clear the cache at the end of the browser session.

Now, the latest Firefox 3.1 beta comes loaded with a similar wipe clean tool.

Firefox programmer Ehsan Akhgar explained in a blog post yesterday why Mozilla has done a sudden U-turn by adding the porn mode to Firefox 3.1.

"Private browsing aims to help you make sure that your web browsing activities don't leave any trace on your own computer," he said.

Mozilla previously shied away from adopting a “porn mode” feature in its browser. But in September it responded to challenges from browser rivals Apple, Microsoft and Google by reviving private browsing features in Firefox.



source: Register

Read More

How to Change Google Chrome Theme Easily

Google Chrome has received a good response despite of the criticizes it got.It is quite fast and uses less memory.But still it has not much support for customization and other things in its beta stage.So here’s a Google Chrome Theme manager which will allow you to change Google Chrome Themes easily.

You can download xChrome theme manager from http://elitehudson.com/XChromeP5.zip .XChrome is a theme manager for Googles Chrome browser, it allows users to install a skin in seconds without having to move default.dll around and it allows you to view the author and various other details before installing.



                                                                     XChrome also allows users who do not have XChrome install to install themes by double clicking the themes .exe file, they are prompted to install the theme, they agree the theme is copied to Chromes Default.dll .You can install a theme by selecting the theme and clicking install button.



You can get xChrome Theme Manager from here

Read More

Google Friend Connect - Ready to Launch

Google Friend Connect is a much-awaited service from Google that lets you add social features to any website or blog. For instance, your blog readers can join your site (remember MyBlogLog) via their Google Account and then add comments, rate pictures or even interact with other members who are part of your blog.

Google earlier opened Friend Connect for a limited number of users only but I suspect that the public launch of Friend Connect may happen very soon. That’s because Google today released a new video that gives a short introduction to Friend Connect and unlike previous videos, this one is more inclined towards marketing the service to the non-developer crowd.



Google generally introduces new products or new features in existing products through short YouTube videos and this Friend Connect video may therefore be a hint about the public launch.

If you like to see Friend Connect in action, go to Orli Yakuel’s blog and check the Friends widget in the right sidebar – that’s an OpenSocial Apps powered by Google Friend Connect. The Google blog has more details about how Friend Connect works while this press release touches upon some more possible uses of Friend Connect

Read More

Scan and Remove Virus Without Starting Windows

Dr.Web LiveCD is an anti-virus emergency aid disk that would restore a system that became non-operational due to activities of malware. If a workstation or a server running Windows or Unix won’t boot from a hard drive, Dr.Web LiveCD will clean a system of suspicious and malicious files and will also try to cure infected objects.

All you need to do is to download the 66MB ISO image from the link at the end of this article and burn it to a CD. Then boot up the computer with the CD by setting your computer as the first boot device. As loading starts a dialogue window will prompt you to choose between the standard and the safe mode. Make sure that the first option DrWeb-LiveCD is selected and hit the ENTER key. Once finished loading, you will be presented with a really cool nice looking screen that has Start Menu.



 it is  the only antivirus that receive the Platinum Malware Treatment Award



 Download Dr.Web LiveCD

Read More

Free Rapidshare Premium Link Converting Websites Updated daily

List Of the site offering premium Link maker service



1. khongbiet.com

2. rapidhack (.com / .de)

3. free-premium-links (.com 5attempt /day)

4. Rapidshare.co.in ( .com 5 attempt / day)

5. http://www.downloadmyupload.com

6. http://computeraxes.com/rapid

7. http://www.premiumrapid.com

8. http://www.rapidshack.us/

9. http://megaez.com/

10. http://khongbiet.com/

11. http://mymegalink.net/

12. http://rapid-hook.com/

13. http://www.rapidl.com/

14. http://www.rapidrip.com/

15. http://www.rapidsharepremiumlinkgenerator.com/

16. http://rapidlysharing.com/

17. http://www.rapidshareplus.com/

18. http://www.fastlister.net/rs/

19. http://www.lcheat.com/rs7/

20. http://rapid-ripping.com/

20. http://x92.org/

21. http://www.rapidleechers.com/

22. http://www.rapidshare-premium-downloader.com/

23 http://www.premium4me.com/rapid.html

24. http://www.premiumrapid.com/rapid.html

25. http://www.download-crazy.com/rapid

26. http://www.grab-w.net/

27. http://www.t5f.net/

28. http://www.rapid-premium.wb.st/

Read More

Rapidshare Tools to download like premium

No matter if you don't have a rapidshare premium account for free.An amazing tool is brought to you by essentialwarez.This Tool Enables you to download from Rapidshare.com without any problem.What you have to do is to just paste the rapidshare.com link,then your download will start automatically.You can queue rapidshare.com links here.Download will start one after another automatically.

Download:

http://rapidshare.com/files/55669610/Rhack_www_1_.sourceparadise.org.rar

No matter if you don't have a rapidshare premium account for free .Dont wait anymore just go on downloading from rapidshare!!

Read More

How to search for files in Rapidshare

Rapidshare does not allow its users to search the server for content; all files have to be downloaded by following a given URL.It is also one of the messiest and hard to work out sites.Goolge searching for rapidshare is also not effective because many links found by Google are already dead at Rapidshare and the overall process takes to much time.

Here are some alternatives to search and download files from rapidshare.Download free full version softwares,videos,porn movies,and latest full movie releases

Rapidsharing.net

The site lists available downloads from Rapidshare in eight categories including Software, Music and Games. A click on one item leads to a list of all available files in that category.

www.katz.ws . This search engine lists other webhost downloads as well.

www.rapidfox.net

www.rapidsharing.net

shareminer.com------------------Searches 12 file upload sites.

www.quicksearch.info------quick --------find rapidshare files

sharingengines.com

www.filestube.com - -----New rapidshare search engine

www.filecrop.com-------- You can view the size and others informations in the results page.

Read More

How to make your computer speak what you type

Here’s a cool little feature of Windows that can be abused so that you can make your computer talk or speak whatever you tell it! This method takes advantage of a built-in API installed on most Windows XP machines called SAPI (Speech Application Programming Interface).



The Microsoft Speech API is what is used for the Narrative accessibility feature built into Windows. You can also write programs that call the API, which would allow you to let your applications speak.



But making your computer say what you want is pretty easy actually! Here’s how you do it:



Step 1: Open Notepad and paste the following text into a new document:



Dim message, sapi

message=InputBox(”Enter the text you want spoken”,”Speak This”)

Set sapi=CreateObject(”sapi.spvoice”)

sapi.Speak message



Now when you go to save the file, give it any name, but make sure you also type .VBS after the name. Also, for the Save as type box, choose All files instead of the default Text Documents.





Now double-click on the VBS file and you should see a input box where you can type in the text you want spoken! Go ahead and type something and click OK.



That’s it! Your computer will speak to you in the default voice, which for me was some scary seductive male type of voice! What about yours? Enjoy

Read More

China Mobile Secret Codes

The china mobile codes are very difficult to get.

As per the user demand i m posting the secret codes for china mobiles which work on all the chinese phones

Here are the codes for china mobiles try it

1)Default user code : 1122, 3344, 1234, 5678

2)Engineer mode : *#110*01#

3)Factory mode : *#987#

4)Enable COM port : *#110*01# -> Device -> Set UART -> PS Config -> UART1/115200

5)Restore factory settings : *#987*99#

6)LCD contrast : *#369#

7)Software version : *#800#

8)Software version : *#900#

9)Set default language : *#0000# Send

10)Set English language : *#0044# Send

11)Set English language (new firmware) : *#001# Send

12)Default user code : 1122, 3344, 1234, 5678

Read More

How to Make your own Linux

a)Develop a boot loader to run on the PowerON

b) configured linux kernel

c)A sweet file-system all with the necessary software.



Hardware Used:



I) A P2 machine

II) 16MB RAM

III) 2GB HDD

Iv) A AMD Athlon 64 2800+(1.8GHz)machine as a host for our development







Maintaining the development Environment:

In this case,the development process has done on the host system,taking the targeting system as the consideration,because of the high memory,advantage of the lower compile time of the host machine.Here,the concept of the "Cross-compilation "is needed.Because the CROSS_COMPILER is a system that runs on one type of processor,but compiles instructions for the another.

Setting up the HOST::

Though the presence of the different several processes I have used here "REMOVABLE STORAGE SETUP", where there are no direct physical link between the host and the target.Actually, a storage device is written by the host and is transferred into the target,which is used to boot the target system.

Preparation for the Host Environment::



1) Install a latest Linux edition of REDHAT,or other similar.

2) Format the target HDD with a suitable file system.(I prefer ext2).

3) The host system should have "Cross-Compiler toolchain" to build up the software for the target system.I have used GNU's cross Platform developent toolchain.I also used

i) Binary Utilities (Assembler,linker and Various Object file Utilities).

ii) The GCC compiler for GNU C,C++

iii) The C Library(like glibc,newlib etc.)







Binding up our personal Toolchaon::

Here , an alternative C library like "uClibc" is choosen for my personal system development.The "uClibc" is a C library optimized for embedded systems.

To build up our custom toolchain I have performed some steps as --------

With the open source Automation tools like "buildroot" I have configured the toolchain and installed it in "uClibc" version, "binutils" version, GCC version and so on. After the succesful toolchain compilation,it has installed in a specific PATH environment variable to the "bin" directory of the installed path.



Having the cross development platform ready,we need three components to build up a complete Linux environment for an embedded system.

A) The Kernel

B) The Root file System

C) The Boot Loader





Setting up the KERNEL:

First download the Linux kernel from "www.kernel.org" (say as inux2.4.20.tar.bz2) and extract it and cd to the directory.Now ,feel the thrillings that U'r ready now to compile the chossen kernel with your new toolchain.So, edit the "makefile" to set up the "CROSSCOMPILE" prefix using

Code:

CROSSCOMPILE =i386-linux-uclibc

Then configure the kernel according to the embedded target device requirements using

Quote:

make menuconfig or make xconfig.

Then issue the "make dep" and "make bzImage" commands. The kernel image is now built in the "arch/i386/boot" directory. If the modules r enabled,implement "make modules",and " make modules-install" . The compiled modules will be installed in " /lib/modules/linux-".

Creating the Root File System::

I have created the root file system on the previous "ext2" formatted HDD.FIrst, we mount the partition as SUPER USER,by

Quote:

#mount -t ext2 /dev/hdc1 /mnt/target

Now enter to the /mnt/target dir and create a standard Linux root directory structure

Quote:

#mkdir bin boot dev etc etc/init.d proc sbin usr

Create "modules" directory in "lib" if modules were enabled.

Quote:

#mkdir /lib/modules

Now set appropriate permissions for these directories.To set up various core linux utilities like sh,ls,cp,clear,mkdir.......Fortunately u can get a tool that combines all the utilities called " BUSYBOX".Busybox is highly configureable,and u can select only those utilities u want to for your platform.U can select also static or dynamic compilation.

Compile it with your new toolchain.

Quote:

$ make $ make PREFIX= /mnt/target install

This will populate bin,sbin,usr,usr directories with all symlinks to "busybox" binary in /mnt/target/bin directory.



Then,the boot directory needs to be generated with your previous compiled kernel image. U need to create the necessary device nodes appropriately in the "dev" directory using "mknod" utility; for example, the terminal devices like "tty", console , virtual terminal devices for VGA display,serial terminal devices,the ps mouse,null device etc.



Next set up the various startup scripts .Create a "rcS" script in " etc/init.d/"

Quote:

#! /bin/sh mount -a #Mount the default file system mentioned in /etc /fstab /bin/sh #Invoke Busybox shell Create "fstab " file in /etc directory Create "inittab" file in /etc directory #This is run as first script :: sysinit : /etc/init.d/rcS ::askfirst :-/bin/sh ::restart : /sbin/init ::ctrlaltdel:/sbin/reboot ::shutdown:/bin/unmount -a -r >/dev/null 2>&1

Thse script may be customizesd according to the target requirements.







Installing the Boot Loader::

To make first bootable Personal linux system u need to install the Boot Loader.Copy the Stage1 ,Stage2 dir.s of GRUB from the host machine into target's boot/GRUB directory.Install the GRUB on the target hard disk.

Quote:

#/sbin/GRUB #GRUB> root(hd1,0) #GRUB> setup(hd1)

Now ,u need to edit 'etc/GRUB.conf as shown below:

Quote:

#Assuming the Storage device will be installed as first #harddisk. title MYPERSONAL LINUX root(hd0,0) kernel /boot/bzImage ro root=/dev/hda1

Atlast,the GRUB should be compiled with our cross toolchain.





Ready to Enjoy::

Shut down the host system.Remove the target HDD and install it on the target system.Power on this machine.See the GRUB menu.Select your choice.If choice the MYPERSONAL LINUX,your linux system get booted,and a Busybox shell promt should appear..

Now Start to enjoy........with Your Personal Linux System.

Read More

Anti Boot Software for Yahoo Messenger

Official Yahoo Messenger is weak to prevent bots or spammer. To avoid bots you can use Anti Boots software to help you increase the security of your yahoo messenger. The booter or lamer usually targeted your id when you are login to the chat room of yahoo messenger. PM B0mb is the most annoying bots sent by a booter or lamer. In this article I want to share some of anti boot software that will protect you from booter or lamer. I not guarantee, you will undisconnected but, I guarantee when you use this anti Boot software you will not see a kind of PM or another boot like, Invite bots, Game bots, etc,



Anti boot software work to paralyze or shut down your Private Message and other activities such add buddies, webcam, and voice talk. This makes your user name protected from booter who want you disconnect via PM b0mb and other. You can activate or deactivate anti boot as anytime you want. When you seem or feel you got in danger, you can activate this anti boot software and you become free of bots.



Anti boot software in this article is affiliated to the yahoo messenger. Its mean that this anti boot software is design for official yahoo messenger chat client. You cannot use this anti boot software to other chat client except official yahoo messenger. I suggest you to used this anti boot software only when you are got in danger, especially when you go to the dangerous chat room or when you face or met you enemy in chat room



KaoticProtocol Anit Boot



This is an Anti boot with one click menu to activate or deactivate. KaoticProtocol Anti Boot is one of anti boot that used to yahoo messenger chat client. When you used this free ware software you just get an anti boot in two modes: Anti Invites and Anti PM . If you want get more options or modes you can buy a Pro Version through this site www.proport-programs.tk



Click here to Download



Spark Anti Boot



If you want a more protected bots you can use this Spark Anti Boot software (Anti booter free download). Spark Anti Boot has many anti bots options: anti cam, anti invite, anti boots, anti voice, anti file sender, anti pm or buzzer, anti view share. It’s a good anti boot software for you. Its also have a full mode on or off.]



Click here to Download



Y! Filter Anti Boot



This is another anti boot to prevent boots or bots with full options. Just like Spark Anti Boot Y! Filter also have a number of anti boot options. Y! Filter working to protect web cam , voice , shared files , pmb, lagg, invite/ conference , file , and error. Y! Filter used a notification area to activate or deactivate anti boot. You can choice by check the option of bots protected or just click start all or stop all. It’s a free software.



Click here to Download





Update: Add Protect Me and Anti Booter



Protect Me



In many yahoo anti boot web, Protect Me anti boot software is the most downloaded Anti Boot. Claimed to be 100% unbootable if you are using Protect Me, may be the reason why Protect Me became most wanted Anti Boot affiliating with Official Yahoo Messenger or even work with YahElite



How to Use Protect Me?



When you run Protect Me Anti Boot software, you will see login windows with username and password. Enter your username and password then push or click activation button. After that, open you chat client (YahElite, Yam, Ymlite or others) and select chat2 protocol and then press the “Load Account Information” button. Once your Account is loaded enter the chat room.



Click here to download



Anti Booter V3



Anti Booter Version 3 is a name of Anti boot software just like spark anti boot. You can activate disable PM, PM Shield, Close PM, Disable Chat, Chat Shield, Close Chat, Anti Invite, Anti Voice and Anti Pm .



For more information just download this anti boot software through link below



Click here to download



Update January 29, 2008



Protection



Protection is anti boot software like Y Filter that will allow you to set anti boot protection through system try icon. Anti Boot options available in Protection are Anti Voice, Anti Conference Invite, Anti File, Anti PM, Grey Shield, Anti Decline, Anti Error, Anti Cam Invite, Ant Shared Files, and Anti All.



To download this Protection Anti Boot just follow rapidshare link below:



Click here to download



Update September 21st 2008



Anti Boot with Alias ID or Secondary ID



You can also make a boot protection by using Alias ID or Secondary ID. This no need to install any kind of anti boot software, and it can be done just only using official Yahoo Messenger. Want to learn how to achieve this boot protection? Visit:



Anti Boot with Alias ID



Need Yahoo Boot? Visit Free Yahoo Boot Download





Chat Client Anti Boot Software



Beside of all anti boot software I share you above, there were few better way to make you unbootable or make an antiboot. The easiest way is installing and running in yahoo messenger with chat client that design to handle boot problem or we can calls as anti boot chat client. One of the best anti boot chat client in my experience is Yahaven. With Yahaven Ghost and Shield, you are almost unbootable. Yazak chat client also good enough to use as anti boot chat client. Using Yazak Ghost ID, you are almost unbootable. Remember Yazak Ghost ID differ wiht Yahaven Ghost ID.

Read More

Instantly Get a FREE 6 Months Kaspersky Anti-Virus 2009 License Key

Now u can  Instantly Get a FREE 6 Months Kaspersky Anti-Virus 2009 License Key   

Go to YuvaYantra registration page: http://www.yuvayantra.com/RegistrationForm.aspx Enter your first name, last name, email, password that contains 8-15 characters with a combination of at least one word and letter, landline phone number, secret question, secret answer, word verification, check I accept and click Submit button.

You can find India proxies at AliveProxy, XROXY, and Rosinstrument(India proxies are marked with the country code IN). Copy all the India proxy ip address with port and paste them to an online proxy checker. The proxy checker will tell you which India proxy is currently good and working. There are a few types of proxy, HTTP/HTTPS/SOCKS 4/SOCKS 5. To use the proxy on your web browser, you’ll need to use HTTP or HTTPS proxy. As for SOCKS proxy, you can use them with Proxifier.

Read More

Morris Worm To Turn 20

Robert Tappan Morris is a character of Internet lore, anyone who has studied Computer Science, Software Engineering or Computer Security will have heard of this guy.

He’s pretty much the fellow that made the Internet famous (for all the wrong reasons) and the first creator of a bit of self-replicating network based malware (now known as a worm) that did some serious damage. The worm is called the Morris Worm after it’s creator and this Sunday will be it’s 20 year anniversary.



It’s an interesting story to read if you are familiar with it and probably even more interesting if you’re not, so do check out the Wiki pages on the history of the situation.

There have been very few worms that have caused such widespread infection and failures. Blaster was quite memory and on the virus front I remember CIH was terrible.

Source: Network World

Read More

Nigeria needs more workers for Internet security

Nigeria needs about 6,000 qualified Licensed Penetration Testers (LPTs) to manage its Internet security issues optimally, according to Sanjay Bavisi, president of the EC-Council University.

Speaking at the IT Job Fair 2008 organized by Lagos IT training institute New Horizons, Bavisi lamented the fact that Nigeria has only one LPT as of now, despite the country's large population and its attendant Internet security matters.

Read the latest WhitePaper - Protecting Data on Laptops: Why Encryption Isn't Enough

Moved by this situation and the estimated 20,000 job fair participants, Bavisi offered scholarships worth US$44,000 to outstanding students. The offer attracted a rush among youth attendees, who would be required to pass a pre-registration test and meet basic requirements as conditions of the scholarship.

LPTs are licensed to use "LPT Audited" logos in their projects and, in some cases, are referred to as "ethical hackers."



As corporate organizations search for individuals who can analyze vulnerabilities of the network and be trusted not to disclose those vulnerabilities to competitors, penetration testers are in high demand, Bavisi said.

"Licensed Penetration Testers are preferred over non-licensed ones by companies for recruitments and assignments," he added.

EC-Council University is an information security training institute with branches in more than 60 countries.

Read More

Google’s Orkut Hit by Data Stealing Worm

So just a few days about there was a new MSN Worm - BlackAngel.B, before that the Yahoo! e-mail worm, long before that of course the MySpace worm and a few others not notable enough to mention.

And of course plenty of nasty Trojans.

A new Internet worm capable of stealing bank details and other personal data from users is circulating via Orkut, Google Inc.’s social networking service, a computer security company warned on Monday.

Instant-messaging service provider FaceTime Communications said its software security lab had detected the spread of the electronic virus, the third such threat to disseminate itself via messages posted on Orkut users personal Web pages.

Google’s service, while available globally, is wildly popular among Brazilians which make up the bulk of its users.

The malicious program, dubbed by FaceTime as “MW.Orc,” works its way onto users’ personal computers when they click on infected links on Orkut scrapbook pages. The link is followed by a message in Portuguese that entices the user to click.

It seems this is not the first time Orkut has been hit, this one however goes after personal details of a more valuable nature.

Once the link is activated, a file is uploaded to the PC, according to a description of how the worm works contained in a statement by the Foster City, California-based company.

When infected Orkut users using Microsoft Corp.’s widely used Windows XP operating system to find personal files on their PCs through their “My Computer” icon, that triggers an e-mail back to the creator of MW.Orc creator filled with personal information stored on the PC, FaceTime said.

The earlier attempt seemed to be more of a phishing affair.

The new threat to Orkut follows an earlier worm, Banker-BWD, which was uncovered by Sophos, an anti-virus company.

That malicious software also disseminated itself through Orkut’s scrapbook pages, but automatically transferred the victims to fake Web pages of banks in order to entice the users to enter personal data that can then be stolen by the hackers.

Source:Darknet

Read More

Google Announces limited API support for OpenID 2.0

Google announced it’s support for OpenID 2.0 protocol. So now with your existing Google account you can login and use other sites. I think this move was made after Microsoft announcing that they will give an OpenID for all its Windows Live users. This new log-in offering is not available to all site owners. But you can apply for it using the sign-up form. Zoho, Plaxo and Buxfer are the launch partners for this new API.

Google’s OpenID implementation doesn’t directly give your OpenID identifier to other sites, instead it acts as a middleman, authorizing you through it before it hands it over. Now a wide range of largest web service providers like Google, Yahoo, Microsoft, MySpace etc are using OpenID.

Google had announced that it is planning to combine the OAuth and OpenID protocol so that a service can not only request a user’s identity through OpenID, but also “request access to information available via OAuth-enabled APIs such as Google Data APIs as well as standard data formats such as Portable Contacts and OpenSocial REST APIs.”

Read More

Google Funded Satellites to provide High Speed Internet by 2010

Now Google is on a new mission to provide high speed internet access to all even those who are not connected till now in the world. In venture with HSBC and Liberty Global it has come up with a startup named O3b networks which clearly means for Other 3 billion people who still can’t have proper access to the Internet. This will be accomplished with an equipment of 16 satellites which are of low cost in order to provide access that can be afforded mainly for the growing markets and upcoming parts of the world like Africa, Middle East, Asia and Latin America. It will be made available to use by 2010 with service being provided and is a good substitute for global networks which used fiber networks even in case of developed nations.

There will direct connectivity to WiMax 3G supportive devices and towers for areas with no option now. There will be access to Telecom carriers and service providers of respective regions directly and even to the Internet service providers, enabling them to provide broadband based services to all of them.Speed will definitely be relatively close to that of the America and with much better cost effective way for the growing markets. The motive for this mission was idea from a similar kind of Mission accomplished in some part of Africa. The system will support all future expansions and is by one of those who were responsible for introduction of 3G fiber networks in Africa and a member of O3b. All backward areas were kept in mind by Google for this project and will be globally beneficial in all the ways.



This development is interesting and will make many political conversations and collaborations easier where no proper person to person communication exists mainly in case of borders. There are some critical issues needs to be addressed and even its impact. One such is government interventions, regulations, classes and accessibility. 03b is anyhow positive about this mission since it eliminates the distance between people which used to be in the past and often read in the books.

Read More

Send Pictures Easily Using Your Gmail account With iPhoto2Gmail

iPhoto2Gmail is an iPhoto plug-in that will help you to easily send Images using your Gmail account. This plugin works with iPhoto 5, 6, 7 and 08. You dont even need to Install or configure an email application. You can send your original Images or you can also resize the pictures and send them as JPEG’s. This will help you to save your time. iPhoto2Gmail integrates Gmail Contacts. So you can easily select your desired contacts and send them your Images.

The latest version retrieves the contacts using Google’s GData framework. Now you can also cancel in-progress email sending. It works with Mac OS X 10.4 or later.

Download iPhoto2Gmail

Read More

Measure the Number of Page Views on any Site

Statbrain is a online web stats tools that helps you guess the number of page views on any site using a combination of Alexa rank, backlink counts from Google, Yahoo and some other unknown factors.





Don’t expect it to be too accurate, but if you want a very rough estimate for any site, this could be useful.

This could be very handy for advertisers or people who are interested in measuring rough traffic on a competitor’s website.

You may also want to checkout Google Trends as they are pretty accurate.

StatBrain gives an estimate about number of visits and not unique visitors or page views. If that sounds confusing, let me explain:

Read More

Recover GMail, AOL, Yahoo or Windows Live Passwords

MessenPass is a free password cracking tool that will easily reveal passwords of your AOL, Yahoo! Messenger, Google Talk, MSN or any other instant messenger clients.



Since most messengers (like Google Talk or Yahoo! Messenger) require the same username / password combination to login as the mail account, MessenPass can effectively be used to recover your (or someone else's) Google Account, AOL or Yahoo! Mail password.



And it works like a charm. [I was absolutely shocked to see my GMail password on the screen the moment I ran this 47 kb utility]



MessenPass works only if you have selected the "Remember Password" setting while logging into your messenger program. It detects the Instant Messenger applications installed on your computer, decrypts the passwords they store, and displays all user name/password pairs in a text or Excel file.



This may be a useful but quite dangerous tool as well - it's so small that it can run off your USB drive and requires no installation - imagine while you are on a trip to the pantry for a cup of coffee and anyone can access your login credentials by plugging in the USB drive.



The only workaround is to deselect the "Remember password" while starting your IM client. MessenPass doesn't crack Skype or Hotmail passwords yet.



Download MessenPass [IM Password Recovery Software]

Read More

New Gmail SMS feature delayed for two weeks

An exciting feature for Gmail was announced today, but it turned out to be a false alarm for now. Google announced they will be adding SMS capability to Gmail so you can text people from right from there. Additionally, getting a response from the person is just as simple.

When a someone receives a text message from you (that you sent from Gmail), replies are simply delivered to your Gmail account — this makes it very easy to communicate with people that are offline, but through a familiar interface.

How does this work? Well, when you send a message to someone, it will be sent from one of 1000 phone numbers Google has reserved for this purpose. Gmail will then reserve that phone number for you to communicate with that single person. Each person you contact will be assigned a different phone number from the pool. This works because any one person will probably never need to contact 1000 different people like this.

Once it’s officially launched, the SMS feature will be available in Gmail labs — just like most of the new features they have added recently — including adding your Google calendar to your Gmail account. Just click on the labs icon beside the “settings” link, and go from there.

Read More

23 hidden windows apps

To run any of these apps go to Start > Run and type the executable name:



1) Character Map = charmap.exe (very useful for finding unusual characters)



2) Disk Cleanup = cleanmgr.exe



3) Clipboard Viewer = clipbrd.exe (views contents of Windows clipboard)



4) Dr Watson = drwtsn32.exe (Troubleshooting tool)



5) DirectX diagnosis = dxdiag.exe (Diagnose & test DirectX, video & sound cards)



6) Private character editor = eudcedit.exe (allows creation or modification of characters)



7) IExpress Wizard = iexpress.exe (Create self-extracting / self-installing package)



8 Mcft Synchronization Manager = mobsync.exe (appears to allow synchronization of files on the network for when working offline. Apparently undocumented).



9) Windows Media Player 5.1 = mplay32.exe (Retro version of Media Player, very basic).



10) ODBC Data Source Administrator = odbcad32.exe (something to do with databases)



11) Object Packager = packager.exe (to do with packaging objects for insertion in files, appears to have comprehensive help files).



12) System Monitor = perfmon.exe (very useful, highly configurable tool, tells you everything you ever wanted to know about any aspect of PC performance, for uber-geeks only )



13) Program Manager = progman.exe (Legacy Windows 3.x desktop shell).



14) Remote Access phone book = rasphone.exe (documentation is virtually non-existant).



15) Registry Editor = regedt32.exe [also regedit.exe] (for hacking the Windows Registry).



16) Network shared folder wizard = shrpubw.exe (creates shared folders on network).



17) File siganture verification tool = sigverif.exe



18 Volume Contro = sndvol32.exe (I've included this for those people that lose it from the System Notification area).



19) System Configuration Editor = sysedit.exe (modify System.ini & Win.ini just like in Win98! ).



20) Syskey = syskey.exe (Secures XP Account database - use with care, it's virtually undocumented but it appears to encrypt all passwords, I'm not sure of the full implications).



21) Mcft Telnet Client = telnet.exe



22) Driver Verifier Manager = verifier.exe (seems to be a utility for monitoring the actions of drivers, might be useful for people having driver problems. Undocumented).



23) Windows for Workgroups Chat = winchat.exe (appears to be an old NT utility to allow chat sessions over a LAN, help files available).



Note:- Some of them might not run in Windows XP Home edition

Read More

Send SMS Text Messages from your GMail Account

now send SMS text messages to anyone in your Gmail address book right from the Gmail website.

Go to your Gmail Labs settings and enable the "Text Messaging (SMS) in Chat" feature. The facility is currently available only for US phone numbers.



You can send (and receive) text messages via the embedded chat in Gmail website but not from the standalone Google Talk client. Yahoo! Mail, Windows Live Messenger and AOL AIM service have had the SMS messaging feature for quite some time now

Read More

Best Offline Apps For Your iPhone/iPod Touch

Evernote

The newest version of the popular Evernote note-taking app introduced one of the most requested features: offline notes. Through a new button called "favorites," you can mark notes for offline access. If you have Evernote on your iPhone already (who doesn't?), then check the app store for updates because this one is a must-have. Evernote newbies can just download the app now.

Stanza

The Stanza ebook reader lets you port reading material from your computer to your iPhone wirelessly so you can take your books with you when you're out and about. Once loading up with books, you can read them anytime, whether or not you have an internet connection. Download Stanza here. (Another option is Readdle, or check out our previous article for even more ebook readers.)

Instapaper

The Instapaper bookmarking tool for iPhone lets you bookmark web pages for offline reading. As any iPod Touch user knows, mobile Safari's tendency to auto-refresh pages means you can't open up web pages and save them for later reading offline. You could also choose to buy the Pro version for $9.99 which uncaps that limit while also adding other features like tilt scrolling and an adjustable text size. Download here.

Encyclopedia

The Encyclopedia app from Steam Heavy Industries delivers a complete copy of Wikipedia to your iPhone/iPod Touch for offline access. By complete they mean the complete article text, but not references, image descriptions, user profiles, etc. Being warned, though, this app needs quite a bit of storage space: 2 GB. Download here.

NYTimes

The NYTimes iPhone app lets you read the news from the New York Times right on your iPhone. You can navigate through the stories quickly, select up to four favorite sections for one-touch access, choose to browse by photos which link to the stories upon touch, and, of course, read the news offline.

MiGhtyDocs

The MiGhtyDocs iPhone application takes your Google documents offline for access anywhere. You can't edit them and save your changes, but at least you can get to them. Currently, only text documents and spreadsheets are supported. No word on slideshows yet.

An RSS Reader

There are actually quite a few RSS readers available from the iTunes App store, many which sync with your Google Reader for offline access. However, this author's personal favorite is Byline, a $2.99 app which offers a 2-way sync with Google Reader. You can even star, share, add notes, and email your RSS feeds, just like in Google Reader itself. To really juice it up with tons of feeds for an extended period of offline time, go into your Settings app and configure it to archive 200 items instead of its default limit.

Read More

Check Out Remember The Milk Gmail Gadget

When Google Labs launched its Gmail gadgets for Google Calendar and Docs last week, there was actually a third gadget that they included in the release. But we didn't cover that gadget because it was a little too cryptic to explain without an example of how it might work.

Luckily for us, Remember The Milk was hard at work creating a gadget that would help us do exactly that. Now we can finally explain the third Labs Gmail gadget and check that task off our list - from within Gmail. All thanks to RTM.

What RTM offers - in gadget form - is the to-do list that Gmail users have been asking Google to build, and RTM does an admirable job of satisfying those requests.

Using the new gadget, Remember The Milk users get task and to-do functionality in the Gmail sidebar, allowing them to review, add, edit, and manage tasks, without ever leaving the comfort of the Gmail interface.

So how does the functionality of RTM get into the Gmail sidebar? Via a Labs gadget called "Add any gadget by URL." True to its name, the gadget allows users to add third-party gadgets to the Gmail interface by referencing a URL. But what exactly does that mean? Would RSS work? Would any URL turn that content into a gadget? Not exactly.

According to the Gmail blog that means:

There's a third Lab that allows you to add any gadget by pasting in the URL of its XML spec file (e.g. http://www.google.com/ig/modules/youtube_videos.xml). We realize this isn't very user friendly right now; it's a sandbox mainly aimed at developers who want to play around with gadgets in Gmail.

Now you see why we were waiting for an example.

Using the RTM gadget? Simple. Adding it? Not so much. But we'll walk you through it. To get the RTM gadget installed, head over to Labs, activate the "Add any gadget by URL" gadget, grab the RTM gadget XML spec file URL, go back to the Gmail gadgets tab to paste in the URL, and then return to your Gmail inbox to find Remember The Milk in the sidebar.

By Google's own admission, not intuitive. But let's step back a second. There's something much bigger happening here.

RTM Demonstrates the Openness of the Gmail Platform

With the advent of the add-by-URL gadget, the Gmail format has now become wide open to outside developers. No app store. No gating mechanism. No browser-based scripts. Simply direct access to the Gmail sidebar, allowing developers to add any gadget that they can concoct.

That's pretty big news.

Why? Because now when you wish you had something else in the Gmail sidebar - like a to-do list for instance - you don't have to wait for Google anymore. You can build it. Or you can get a developer to build it for you. And you can share it with others.

What's more, it doesn't have to be free. It could be a for-pay gadget. At least that's how the Remember The Milk model works. While RTM offers a free version, they will likely attract new users who will take the opportunity to upgrade to a Pro account for $25 a year.

A must-have gadget for an open platform that continues to grow in popularity - and a revenue stream? RTM may have to add the development of a few more thoughtful gadgets to their list of things to do.

What's the next third-party gadget to take advantage of this new functionality? That's anyone's guess. But it will be really interesting to see how creative developers leverage this new Labs gadget and the access it provides.

Read More

Top Firefox Add-ons

Are you a Firefox user? If so, this feature is especially for you. There are plenty who still use IE, but the popularity of Firefox is rising, with more and more users getting hooked to it. I like Firefox mainly for the add-on plugins, which are easily available on the official website. You will find scores of them, but I shall list the five I find most interesting. There are so many options that no two persons will have the same list. So if you have anything to add, or if you disagree with me, do leave a comment. It will provide readers with more options.



Stumble Upon

This is simply the best add-on any Web browser could use. It appeals mainly to those who love to go through anything interesting on the World Wide Web. The way it works is very simple: after installing it you will see an icon on the top left of your browser. Every time you have the time, just click it and it will take you to any of the sites that other stumble users have tagged as "I Like".

It could be anything; an interesting Flickr account, or an obscure site with 3D fractal generators. If you like what you are reading, you can even write a review. It's all available to you at a click of a button.

That's not all. Interestingly, the site maintains a tab of what you like and what you have shrugged off as boring, and will regularly display content that matches your tastes. In fact, if you discover a website that you like, you can add it to the list for others to see as well.

You can get the plugin here.



Me.dium

Me.dium comes in handy when you make travel/movie plans with friends. How? "Be social when you surf the Web" is what the guys who made Me.dium tell you. Simply put, this plugin allows you to chat and surf the same web page (with your friends) at the same time.

To do this, everybody in your social circle will need to install this plugin, and add each other as friends. You will see your friends on your Me.dium network  list (on the left of the browser). Below each name will be a link to what they are surfing presently. This especially comes in useful when everyone is researching the same topic.

Don't worry; it won't take your friends to your Gmail account if that's what's bothering you. One thing to remember is that by installing this plugin you are allowing Me.dium to gain access to your surfing history. It works across Facebook, YouTube, StumbleUpon, MySpace, Flickr, Digg, Yahoo, and Google.

Get the plugin here.

Better Gmail 2

Ever since it launched (and even before it actually did), Gmail's gained prominence. I don't know anyone who isn't on it. So it makes sense to talk about a plugin that improves the way you use Gmail.

Better Gmail 2 does exactly what the name suggests. Apart from being able to change the skin at the click of a button, you get many other options. Firstly, every mail with attachments will have the respective display icons in the inbox, so you'll know whether it's (say) a word file or a PDF.

One important tweak this plugin offers is that every mailto: link you click will in turn be diverted to your Gmail account, rather than the erstwhile .Outlook express You can also learn additional keyboard shortcuts. That's brilliant, I think.

You can get the plugin here.



DownThemAll

I use this so often that I don't know what I'd do without it. On the face of it, DownThemAll is promoted as a download accelerator that's capable of increasing speeds by 400 percent. It gives you 'pause' and 'resume' options, and the best part is it allows you to download all the links or images on a web page by clicking a single button.

After installing, if you right-click on any page (say, Flickr) and click on DownThemAll, it will show a window with all the available pictures and download links. You can select what you like and start downloading. With this plugin you won't need an external download manager.

Get the plugin here.



Fast Video Download

I'm sure many of you techies will have this already installed. For the clueless, it's a useful plugin for YouTube fans. It allows you to download vedios from sites such as hi5.com, metacafe.com, vids.myspace.com, YouTube, and more.

A small icon at the bottom right of the browser page will show up after the plugin is installed. All you need to do is surf to the page where the video is streaming, and click on the icon. It will ask you if you would like to download it. Click on 'yes' and you are done. For downloading from YouTube, you will need an FLV player. Download it from the official website, or just get the VLC media player

Get the plugin here.

Read More