Browse Any Forums Without Registering

Visit any forum or website to find something useful and they will ask you to register.

All websites and forums will block unregistered users, but they won’t block Google Bot. What we will do is to switch our User Agent to that of Google Bot and freely browse any website or forum without registering.  

First grab the User Agent Switcher add-on for Firefox called ‘user agent’ and install it.
Now go to Tools > User Agent Switcher > Options and then again to Options.




Select User Agent from the left sidebar and click Add. Now in the description field type:

crawl-66-249-66-1.googlebot.com

and in user agent field type:

Googlebot/2.1 (+http://www.googlebot.com/bot.html)

as shown in the screenshot below.



Select Google Bot as your User Script by going to Tools > User Agent Switcher.


Now browse any website or forum without registering.

Want to know who's watching you on internet ??

The word “net” means the great “INTERNET” which I consider as a different world, which is very much similar to our world in which we live. I like to say the internet world as Cyber-World.

Now coming back to the topic , I want to directly focus on what is the main intention of this blog.

I want to start the problem with a small introduction to a real world problem.

In a real world , if someone(stranger) is following you or keeping a watch on you, then “HOW” would you able to know??

Answer is straight forward and that is you can identify them easily as they can be around you always.

Now let’s take this problem into the Cyber-World(The world of internet) and ask yourself the same question. “If someone is following you or keeping a watch on you, then “HOW” would you able to know?”

I guess your faces would be like these…..hahaha... I don't know about you but my reaction at first was the same like these kids...... ;-)

Well  , there are different ways to solve this issue and I will show you one of them.

You will need following.

    1)      A computer or laptop…….:-D

    2)      An internet connection. 

    3)      Mozilla Firefox.

Open “FIREFOX” browser ,open "google.com" and type “collusion add on” in the search bar.

Click on the first link as shown above and you will get somewhat as shown below..

Just click on “Add to Firefox”  and it will get installed.  (YOU SHOULD BE IN FIREFOX and NOT IN ANY OTHER BROWSER like CHROME or INTERNET EXPLORER)

Now after installing it in your  firefox browser , you will get a small icon at the bottom right of your browser as shown below..

This add-on's name is “Collusion” .
It helps you to know that who is keeping eye on you and your data when you are online(surfing on net) .

There are many websites , some legal and some illegal , which keeps track of your data and keeps tracking your activities.

“Collusion add-on” will show you that who is tracking your activities and who is keeping watch on your data…

I will try to explain you this addon on basis of my usage of “Collusion”

For clarity , here’s activity screenshot from my laptop.

The highlighted circles shows the websites that you actually visited.

The grey type circles represent the sites that you have not visited.

The lines between circles show our cookies and all stuff that is passed between them.

When you click on these circles , this add-on will show you the information related to that site.

Look at the image above………

I have just visited 7 to 8 websites and the number of websites that started tracking my data are more than 20……What the Heck !!!! Aren’t you shocked ….?
Why would you shock as these websites are actually tracking my data….  :-D :-D

But my dear buddies….Right now you are reading this blog , which means you are on the internet , so someone must have already started watching you…..Be-Aware....!!

That's all for this time.... Will be back soon with something which needs to be shared.

......Bye....

Surf Safe.....Be Safe.

What is SQL Injection?

Basically SQL Injections or simply called Structured Query Language Injection is a technique that exploits the loop hole in the database layer of the application. This happens when user mistakenly or purposely(hackers) enters the special escape characters into the username password authentication form or in URL of the website. Its basically the coding standard loop hole. Most website owners doesn't have proper knowledge of secure coding standards and that results into the vulnerable websites. For better understanding, suppose you opened a website and went to his Sign in or log in page. Now in username field you have entered something say Adnan and in the password box you pass some escape characters like ',",1=1, etc... Now if the website owner hasn't handled null character strings or escape characters then user will surely get something else that owner never want their users to view.. This is basically called Blind SQL.

Requirements for SQL Injection:
1. You need a web browser to open URL and viewing source codes.
2. Need a good editor like Notepad ++ to view the source codes in colored format so that you can easily distinguish between the things.
3. And very basic knowledge of some SQL queries like SELECT, INSERT, UPDATE, DELETE etc..

What you should look into website to detect is it vulnerable to SQL injection attack or not?
First of all you can hack those websites using SQL injection hacks that allows some input fields from which can provide input to website like log in page, search page, feedback page etc. Nowadays, HTML pages use POST command to send parameters to another ASP/ASPX page. Therefore, you may not see the parameters in the URL. However, you can check the source code of the HTML, and look for "FORM" tag in the HTML code. You may find something like this in some HTML codes:

< F O R M action=login. aspx method=post>
< i n p u t type=hidden name=user v a l u e=xyz>
< / F O R M>
Everything between the < f o r m > and < / f o r m > parameters (remove spaces in words) contains the crucial information and can help us to determine things in more detailed way.

There is alternate method for finding vulnerable website, the websites which have extension ASP, ASPX, JSP, CGI or PHP try to look for the URL's in which parameters are passed. Example is shown below:

http://example.com/login.asp?id=10

Now how to detect that this URL is vulnerable or not:
Start with single quote trick, take sample parameter as hi'or1=1--. Now in the above URL id is the parameter and 10 is its value. So when we pass hi'or1=1-- as parameter the URL will look like this:

http://example.com/login.asp?id=hi' or 1=1--

You can also do this with hidden field, for that you need to save the webpage and had to made changes to URL and parameters field and modify it accordingly. For example:

< F O R M action=http://example.com/login. asp method=p o s t >
< i n p u t type=hidden name=abc value="hi' or 1=1--">
< / F O R M >


If your luck is favoring you, you will get the login into the website without any username or password.

But why ' or 1=1-- ?
Take an asp page that will link you to another page with the following URL:

http://example.com/search.asp?category=sports

In this URL 'category' is the variable name and 'sports' is it's value.

Here this request fires following query on the database in background.

SELECT * FROM TABLE-NAME WHERE category='sports'

Where 'TABLE-NAME' is the name of table which is already present in some database.
So, this query returns all the possible entries from table 'search' which comes under the category 'sports'.

Now, assume that we change the URL into something like this:

http://example.com/search.asp?category=sports' or 1=1--

Now, our variable 'category' equals to "sports' or 1=1-- ", which fires SQL query on database something like:
SELECT * FROM search WHERE category='sports' or 1=1--'

The query should now select everything from the 'search' table regardless if category is equal to 'sports' or not.
A double dash "--" tell MS SQL server to ignore the rest of the query, which will get rid of the last hanging single quote (').
Sometimes, it may be possible to replace double dash with single hash "#".

However, if it is not an SQL server, or you simply cannot ignore the rest of the query, you also may try

' or 'a'='a

It should return the same result.
Depending on the actual SQL query, you may have to try some of these possibilities:

' or 1=1--
" or 1=1--
or 1=1--
' or 'a'='a
" or "a"="a
') or ('a'='a
'or''='

How to protect you own websites from SQL injection?

Filter out character like ' " - / \ ; NULL, etc. in all strings from:
* Input from users
* Parameters from URL
* Values from cookie
That's all for today

Learn to Spoof IP Address With RafaleX and Engage Packet Builder

The RafaleX application allows for the creation of custom IP packets. The packet is very customizable and allows for the spoofing of the IP, setting the flags, number of packets, and so forth. RafaleX is becoming hard to locate on the Internet as it appears it is now called Engage Packet Builder.

The RafaleX application is an excellent way to “spoof” custom packets. Attackers can place a valid IP address as the source of the packet and the target will have to attempt to respond to the spoofed address. By sending hundreds of thousands of packets in this manner, an attacker can create a Denial of Service attack against a target.

In this example, the Source IP of the packets to be sent is set to 10.10.10.10 with the source address of port 123. According to Internet etiquette, this should never be able to route on the Internet as the 10.x.x.x range is reserved for Private addressing. Set the destination IP to the target address. In this example it is 172.16.1.40. Set the Destination
port to port 21. The SYN and ACK flags were set for each packet.

*Note: The Ethernet communications process requires a three-way handshake:

SYN: Synchronize
SYN-ACK: Synchronize-Acknowledge
ACK: Acknowledge

When a computer receives an uninitiated SYN-ACK packet its response is to send a RST (Reset) packet.

The number of packets was set to 100. Click the Send button to send the packets to the target. The Status area at the bottom left of the application will tell you that the packets were sent.



The proof is below screen shot captured from packet capturing tool:

NOTE TO THE READERS :

This Tutorial  is for educational purposes only and any actions taken By you after reading this post is all upon you. IHA takes no Charge of the Effects hereafter.

THANK YOU FOR READING

Crack BIOS password

There are a lot ways to Crack the BIOS password. This is one of them but I would say that this one ismore effective than the rest because the rest of the ways does not Guarantee you that it will Crack the BIOS password while in this case the Cracking is Guaranteed since in this we will remove the functionality of password protection of the BIOS.



Follow the steps below :
1) Boot up windows.
2) Go to command prompt directly from the windows start up menu.
3) Type the command at the prompt :
debug
4) Type the following lines now exactly as given . . . .

o 70 10
o 71 20
quit
exit
4) Exit from the dos prompt and restart the machine.
Password Protection Gone ! ! !
PS: I tested this in Award Bios . . .
There seems to be some issue regarding display drivers on some machines if this is used. Just reinstall the drivers, Everything will be fine………..I have not found any other trouble if the codes are used. o be on safe side, just back up your data. The use of this code is entirely at ur risk. It worked fine for me.

How to trace pc from ip address and know location from chatting online

Hello this is a fantastic trick that explain knowing some one location while chatting online,
this can also be said as tracing a person by knowing his/her Ip address so lets begin the tutorial.


1st step:
First of all you need to make the person online or you you need to chat with him via any social networking site
like Facebook,G-mail,Orkut or via any messenger like yahoo messenger, Facebook messenger, Skype...etc.you type your message like hi or hello and wait till you get reply from another side.




2nd step :
after getting response from your friend
now you need open command prompt or cmd and then type this command netstat -a
if you are using any messenger then better go for this dos command netstat -nbt

Now carefully watch the ip address and get the victim's ip address...

After knowing the ip address you can easily trace the location of the victim's computer.
Go to this site.http://www.whatismyipaddress.com/ Or
http://www.ip-address.org/ to locate the correct location
You can compare the User details and the IP details and traceout user's IP adress.

How To Be Safe Facebook Account From Hackers

Hello Friends,

Do You know about 6,00,000 facebook accounts got hacked daily.Its very easy to hack a facebook account coz hackers are introducing new methods day by day to crack your system's security thats why i am Writing a article oncountermeasures to avoid hacking.so lets start.

·First of all log in to your facebook account then go to account settings then after go to security tab.

·In security tab.the first options says.Secure Browsing: Enable it.when You use secure browsing.Your Default Connection Sets To Https Insted of Http.

Http Stands For Hyper Text Transfer Protocal. When We use Http Our Browser And Server Create Communication In Normal Language. But On the Other Hand Https stands For Hyper Text Transer Protocal Secure, When We Use Https Browser and Server Talks In encrypted Language. So Possibility Of Man In Middle Attack Gets Reduced. In 'MIMA' a Third Person or Brodly Says Hacker Can Listen The Communication Between Browser And Server.

·Now Come To second Point,Again Go To account settings then after go to security tab.

·In security tab.the Second options says.

          LOGIN NOTIFICATIONS: Enable Login Notifications.

          Note: Enable Both Email And Phone Notifications.

          It is Necessary To enable Login Notifications Because facebook can notify you when your account is     accessed from a computer or mobile device that you haven't used before.

Now Settings Part is Completed.

So Lets Begin To Avoid The Possible Technique By Which Hacker Can Hack Your Account.

·First of All Keep Your Primary Email Address Password diferent from facebook password never Keeps  Both Password Same. Think if Someone Hacks Your facebook account and change Your facebook   Password Also Then You can Get Back Your Password By Clicking On forget Password link.But If Both  Password Are Same.Then Anybody can Change Both Passwords easily and You will Lose Your Accounts  For Forever. :( 

·Many Childrens Also Known as n00bs Hackers Hack Accounts Via Phishing.Phishing is an e-mail fraud  method in which the hacker sends out Exactly Same Looking Website Address in an attempt to gather  personal and financial information from recipients.

 So Never Give Your Creditials On false Websites. If Anyone give You link Like... Faecbook.com Or  Facbook.com Then Never Give Your Email address and Passwords there.

 Always Do Your Password To Only Facebook.Com Otherwise You Will Be hacked.

·Keylogging Is Also A method By Which Anyone Can Got Easily Haked.The Entire Process Is known As  Keylogging and The Software Used In it known as keylogger.Keylogger is most intelligent tool to  secretly capture all typed keystrokes activities of your kids, employees, family members,  relatives, friends on computer system.

 To Avoid keylogging. Always Use a Good License Version Antivirus Software and Regularly Update  and Scan With It.

·Always Give A unpredictible Security Question Answer.

·Never Add  Unknown Persons In Your Account.Facebook Have A Vulnerablity To bypass Security By  Using Of Your Three Friends.

·Lastly I will Talk About Countermeasures for Trojan. Trojan Are Dangerous Kinds Of virus They Can  Work As Keyloggers And Hacker Can Also acess To Your System.To Avoid Hacking With Trojan. Always  Use a Good License Version Antivirus Software and Regularly Update and Scan With It.One More  Important Thing Trojan Can Be Binded Or crypted With Any Software,Image,Video Or Any Kind of File  That Makes Them Undetectable.So Never Download Anythings From suspected Sites Like ziddu Or  Mediafire.

 So Guys...The Post Is Over...Be Safe..Be Happy :) !!!