Reply to thread

Message: <blockquote data-quote="||~DxxCxxxx~||" data-source="post: 7368706" data-attributes="member: 137393">Useful Hacking Tricks<img src="http://i43.tinypic.com/2a7agm1.gif" alt="" class="fr-fic fr-dii fr-draggable " style="" />To see the ip all computers you are connected to (web servers, people  attempting to hack into your computer).Go to dos (start>run>type command) and run the netstat command.  Type netstat /? for details.Type netstat -r at the command prompt to see the ip of all computers you  are connected toIn MSN (and other programs) when you are chatting to someone everything  you type goes through the MSN servers first (they act as a proxy) so you  see their ip rather than who you are chatting to. You can get round  this by sending them a file as MSN doesn't send file through its proxy.When you type the netstat -r (or -a for a different view) the ip's are  under the foreign address table. The ports are separated by a : .  Different programs use different ports, so you can work out which ip's  are from which program.Connecting to other computers and what ports are:--Servers send information. Clients retrieve. Simple.Windows comes with a built in program to connect to other computers called telnet.To start Windows telnet Start menu> Run> type Telnet. Click  connect> remote systemPorts are doors into computers. Hosts are computer names(ip number or a name that is translated into the ip automatically)Different programs open different ports, but they always open the same  ports so other computers know which port to connect to. You can get a  port list listing all the different ports, but a basic one is:11 :- Sends info on the computer21 :- FTP (File transfer program)23 :- Telnet (Login to the computers command line)25 :- Smtp (Sends mail)80 :- Http (Web pages)There are thousands of different programs using different ports. You can  get programs called port scanners which check a computer for all ports  up to a certain number, looking for ways in. You can port scan a  computer looking for ways-in.Anyway, back to telnet.Type http:// www. yahoo.com  as the host and port as 80 the click connect.If nothing happens, you're in. Wow. You are connected to Yahoo's server.You can now type http commands (you are connected to an http server, so  it supports http commands). Ie. on an ftp server you can type open and  it will do something. On an http server it will just wonder what the  hell you are on about.Type get / http/1.0 then press enter twice to get the file on the server  at / (try /index.html) etc.)Allowing dos and regedit in a restricted WindowsA very simple tactic I found after  accidentally locking myself out of dos and regedit is to open notepad  and type the following:REGEDIT4[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesWinOldApp]"Disabled"=dword:0[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]"DisableRegistryTools"=dword:0Save it as something.reg then run it. Simple.Making non deletable, unreadable foldersTested on Windows 95/98By holding down alt, then typing numbers on the number pad (right of the  keyboard) you can create special characters. If you hold down alt, then  press 1, then let go, you got the ascii character 1. You try some  random numbers. This goes all the way up to 255. Open a dos prompt, and  type md (alt+1+9+4)some word. md is the dos command to make a directory,  now try and open the directory in Windows, you can't. To open it, type  ren (alt+1+9+4)some word some word (ren is the dos command to rename)ProxiesProxies are computers that you connect through, hiding your computer.  Most aren't anonymous, they give away your ip. Some are. Good anonymous  proxies: mail.uraltelecom.ru:8080 and 194.247.87.4:8080.Different programs require different ways of using proxies. To do it in  internet explorer 5 go to tools, internet options, connections,  settings. In the above proxies they are in the format host<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite7" alt=":p" title="Stick out tongue    :p" loading="lazy" data-shortname=":p" />ortPassword filesIf you lock yourself out of Windows stuff, all passwords are stored in  files called *.pwl in C:windows. In Unix, passwords are normally stored  at etc/passwd. This can be viewed using the cat command (prints a file  to screen): cat etc/passwd. Make sure you're passwords are shadowed (not  actually in etc/passwd). Also make sure they aren't in a file called  shadow, especially not in a file called etc/shadow.Unix passwords are encrypted far better than Windows one's (to be fair,  Windows 95 isn't designed for users), but can still be cracked through a  program called jon.Securing your websiteFtp Ftp is how you upload your web site, if someone finds out the  password they can add/ delete anything. Brute forcing is the most common  ftp attack, where a program guesses every possible combination (or from  a list of words). An eight letter alpha-numeric word is almost  impossible to crack, as the process is slow.The real problem is with server side scripting. Pages other than plain  html (ie. pages that perform commands on the host) are a security risk.  The main problems are scripts that write to pages (guest books etc.). If  when the guest book is viewed it has a .shtml extension, then it can  execute commands. Eg. a malicious visitor could place</blockquote>

Verification: Haya warak paha keeyada? (haya wadi kireema paha)

Top Bottom