Tuesday, 9 June 2015

Windows XP Tips-part I



Registry hacks and other tips for better performance
1) You can disable autorun features under Windows XP with the option to easily re-enable them again later on, using the "Turn Off Autoplay" function in the Group Policy Editor, gpedit.msc. You'll find it under Administrative Templates > System. An even easier (and more basic) way of controlling Autoplay is found simply by right-clicking the CD icon, choosing Properties and then selecting various options in the Autoplay tab. You can disable or enable autoplay for individual file types, or restore default settings easily.


2) To Edit startup settings:
START
CONTROL PANEL
SYSTEM
ADVANCED
Startup and Recovery "SETTINGS"
System Startup "EDIT"

3) Symantec has released a Norton Antivirus 2001 patch for Windows XP. Read the instructions carefully -- it has strict installation requirements. Norton Antivirus version 7 (NAV 2002) does not require this patch.

4) Although it was possible to create a set of boot floppies under Windows NT and Windows 2000 capable of booting those operating systems and installing the system on computers without a bootable CD drive, such as capability is no longer provided in Windows XP. If you have a system without a bootable CD drive, your choices include:
a) copying the contents of the CD to the hard drive and installing from there;
b) installing over a network, or
c) upgrading your motherboard (or possibly your BIOS) to add CD booting capability.
If you really want to boot XP from floppies, you can find the necessary disk images (5 disks!) at Bink.nu, in the XP community section.

5) NTFS Rights, tabs and properties Solution [Attribution: killa-b]
  1. Start->run->mmc
  2. Add the security console snap in.
  3. Right click on the security console in the left plane. click open db, type a name and press enter.
  4. Then, right click again and click import template.
  5. Browse to c:\windowssecuritytemplates
  6. Select one. to see what they do open them up in notepad the last line is a description
  7. The securws template provides a right-click sharing command, all tabs in the properties of all folders and other proerties that will be familiar to those who have seen the way these items appear under Windows 2000 or NT.
  8. Open the template and it does its job. You're all set.
  9. After that, you can adjust the properties of the template and then export it for future use.
  10. Have fun!

6) To add support for NetBEUI network protocol:
1) Copy NBF.SYS and NETNBF.INF from a Win2k installation to a floppy
2) Remove all "CopyFile" and "DestinationDir" related comments from the INF
3) Open network connections/properties/install/protocol/have disk/...
4) Add NetBEUI
[Attribution: WinOSCentral]

7) To add support for higher quality MP3 encoding:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ MediaPlayer \ Settings \ MP3Encoding
"LowRate" = DWORD value of 0000dac0
"MediumRate" = DWORD value of 0000fa00
"MediumHighRate" = DWORD value of 0001f400
"HighRate" = DWORD value of 0002ee00

See the Windows XP Tips 'n' Tricks section at winsupersite.com for details.

8) Disabling Windows File Protection
From Jeremy Collake, as noted at iexbeta.cjb.net
collake@charter.net http://www.collakesoftware.com
Summary: Undocumented registry setting allows for
Windows File Protection (aka System File Checker)
to be fully disabled.

HowTo: Set the SFCDisable value (see Q222473) to 0xffffff9d. Ok, after spending 6 hours in the guts of sfc.dll, sfcfiles.dll, and winlogon.exe I have *finally* discovered how to permanently disable windows file protection. The more I dug into the internals of SFC, the more I began to think that it would not be as easy as I first thought it would be - and indeed Microsoft does not want it to be easy. Windows File Protection, while annoying, does provide a good degree of system stability and even some level of virus/trojan protection by preventing system files from being modified without at least notifying the user. Therefore, I was *very* shocked when I was looking through a disassembly of sfc.dll and came to the code that checks the value of the SfcDisable in the WinLogon key. I see in the code of ordinal 1 (which is the initialization function that winlogon calls), sticking out like a sore thumb, this:
76986A89 push 1
76986A8B cmp eax, ebx
76986A8D pop esi
76986A8E jz loc_76986B97
76986A94 cmp eax, esi
76986A96 jz loc_76986B7A
76986A9C cmp eax, 2
76986A9F jz loc_76986B69
76986AA5 cmp eax, 3
76986AA8 jz short loc_76986AE0
76986AAA cmp eax, 4
76986AAD jz short loc_76986ACF
76986AAF cmp eax, 0FFFFFF9Dh
76986AB2 push ebx
76986AB3 jz loc_76986B86
76986AB9 push offset byte_76981898
76986ABE push edi
76986ABF call sub_7698877D
76986AC4 mov dword_769901D4, ebx
76986ACA jmp loc_76986B97

Ok, values 0, 1, 2, 3, and 4 are documented at http://support.microsoft.com/support/kb/articles/Q222/4/73.ASP , but what the heck is this 0ffffff9dh value that it accepts?! As you can see, any value other than 0,1,2,3,4 and 0ffffff9dh are assumed to be zero, which is the default of SFC enabled with popups enabled. So, without further delay, I went and plugged 0ffffff9dh into the SfcDisable value to see what was up. Rebooted. I'll be darned, Microsoft provided a very,very simple way to fully disable WFP!

When booting with this value in the SFCDisable value in the WinLogon key (HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon), an event is written to the system log, ID 64032 from Windows File Protection, with the description: “Windows File Protection is not active on this system."

All attempts to replace/delete protected system files succeeded, just as if I were in safe mode. I rebooted a few more times and verified that it is the one value (other than 4=popus disabled) that is not reset to 0 after the first boot. Needless to say, this is not what Microsoft intended.

Addendum 7:37pm 6/24/00:
SFCDisable value 3 was not documented like I thought it was. This
value performs some check for setup.exe or sfctest.exe. WFP does
appear to end up enabled. Have not had a chance to look into it further.
9) Tweak Tools:

The best advanced configuration utility we've seen for Windows XP is Tweak-XP from www.totalidea.de. The company allows 50 uses of the tool (probably more than enough for all but the most maniacal tweakers!) before registration is required. Highly recommended.

See also: http://tweakxp.com/
Xteq X-Setup: http://www.xteq.com/

10) Uninstall Windows Messenger by "Lojack" at iexbeta.cjb.net
Microsoft has tried really hard to prevent you from uninstalling windows messenger.  They failed to make it difficult enough because with the directions below you can get rid of messenger very easily.

1. Navigate to C:\windows\inf\
2. Open sysoc.inf
3. find msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,hide,7 in the file and take out the word hide so the line would look like msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,,7
4. Close the file and save it
5. Now go to the Add and remove programs applet in the control panel and you will be able to uninstall windows messenger.
6. Make sure to click on the add remove windows components button.
Note:  You will be able to uninstall other unneeded programs by removing hide from the sysoc.inf file as well.








winxp important Commands 



To Access.                                        
Run Command

Accessibility Controls  
access.cpl  
Add Hardware Wizard
hdwwiz.cpl 
Add/Remove Programs 
appwiz.cpl 
Administrative Tools
control admintools 
Automatic Updates
wuaucpl.cpl
Bluetooth Transfer Wizard
fsquirt
Calculator
calc
Certificate Manager
certmgr.msc
Character Map
charmap
Check Disk Utility
chkdsk
Clipboard Viewer
clipbrd
Command Prompt
cmd
Component Services
dcomcnfg
Computer Management
compmgmt.msc
Date and Time Properties 
timedate.cpl 
DDE Shares
ddeshare
Device Manager
devmgmt.msc
Direct X Control Panel
control color 
Dr. Watson System
Troubleshooting Utility
drwtsn32
Driver Verifier Utility
verifier
Event Viewer
eventvwr.msc
File Signature Verification Tool
sigverif
Findfast
findfast.cpl
Folders Properties
control folders
Fonts
control fonts 
Fonts Folder
fonts
Free Cell Card Game
freecell
Game Controllers 
joy.cpl 
Group Policy Editor 
gpedit.msc
Hearts Card Game
mshearts
Iexpress Wizard
iexpress
Indexing Service
ciadv.msc
Internet Properties 
inetcpl.cpl 
IP Configuration (Display Connection Configuration)
ipconfig /all
IP Configuration (Display DNS Cache Contents)
ipconfig /displaydns
IP Configuration (Delete DNS Cache Contents)
ipconfig /flushdns
IP Configuration (Release All Connections)
ipconfig /release
IP Configuration (Renew All Connections)
ipconfig /renew
IP Configuration (Refreshes DHCP & Re-Registers DNS)
ipconfig /registerdns
IP Configuration (Display DHCP Class ID)
ipconfig /showclassid
IP Configuration (Modifies DHCP Class ID)
ipconfig /setclassid
Java Control Panel (If Installed)
jpicpl32.cpl
Java Control Panel (If Installed)
javaws
Keyboard Properties
control keyboard 
Local Security Settings
secpol.msc
Local Users and Groups
lusrmgr.msc
Logs You Out Of Windows
logoff
Microsoft Chat
winchat
Minesweeper Game
winmine
Mouse Properties
control mouse 
Mouse Properties
main.cpl
Network Connections
control netconnections 
Network Connections
ncpa.cpl 
Network Setup Wizard
netsetup.cpl
Notepad
notepad
Nview Desktop Manager face=Verdana>
nvtuicpl.cpl
Object Packager
packager
ODBC Data Source Administrator
odbccp32.cpl
On Screen Keyboard
osk
Opens AC3 Filter (If Installed)
ac3filter.cpl
Password Properties
password.cpl
Performance Monitor
perfmon.msc
Performance Monitor
perfmon
Phone and Modem Options 
telephon.cpl 
Power Configuration 
powercfg.cpl 
Printers and Faxes
control printers 
Printers Folder
printers
Private Character Editor
eudcedit
Quicktime style=”font-size:10.0pt;(If Installed)
QuickTime.cpl
Regional Settings 
intl.cpl 
Registry Editor
regedit
Registry Editor
regedit32
Remote Desktop
mstsc
Removable Storage
ntmsmgr.msc
Removable Storage Operator Requests
ntmsoprq.msc
Resultant Set of Policy (XP Prof)
rsop.msc
Scanners and Cameras
sticpl.cpl
Scheduled Tasks
control schedtasks 
Security Center
wscui.cpl
Services
services.msc
Shared Folders
fsmgmt.msc
Shuts Down Windows
shutdown
Sounds and Audio 
mmsys.cpl 
Spider Solitare Card Game
spider
SQL Client Configuration
cliconfg
System Configuration Editor
sysedit
System Configuration Utility
msconfig
System File Checker Utility (Scan Immediately)
sfc /scannow
System File Checker Utility (Scan Once At Next Boot)
sfc /scanonce
System File Checker Utility (Scan On Every Boot)
sfc /scanboot
System File Checker Utility (Return to Default Setting)
sfc /revert
System File Checker Utility (Purge File Cache)
sfc /purgecache
System File Checker Utility (Set Cache Size to size x)
sfc /cachesize=x
System Properties 
sysdm.cpl 
Task Manager
taskmgr
Telnet Client
telnet
User Account Management
nusrmgr.cpl
Utility Manager
utilman
Windows Firewall
firewall.cpl
Windows Magnifier
magnify
Windows Management Infrastructure
wmimgmt.msc
Windows System Security Tool
syskey
Windows Update Launches
wupdmgr
Windows XP Tour Wizard
tourstart
Wordpad
write


 Microsoft's Windows XP Home Install step by step.

This will give you an idea on how to do this when and if the time arises for US to either reinstall the operating system, install for the first time or upgrade OUR present operating system. This install guide is fully graphical and will take us through each step of the installation. 
What we will require to do this walkthrough is 
A Windows XP Home CD
A Computer with CD-ROM access
To start this Windows install. First check that the first boot device in your system BIOS is set to the  CD-ROM Drive.
( To find out how to access the BIOS please refer to your motherboard manual or the manufacturer of your Computer. (The system bios can usually be entered on boot, usually by pressing the F1, F2, F8, F10 or DEL key. Make sure you save the settings before exiting))
If you are unsure or don't want to enter the BIOS then just test the computer by putting the CD-ROM in the drive and reboot your computer. This is the recommended way to install windows.
PART 1
To begin insert your Windows XP Home CD and reboot you computer. Setup will boot automatically and then inspect your computer hardware and configuration.
Setup now prepares your computer for install.
From this menu press "ENTER" to begin the install.
Windows XP License agreement, read, and if you agree press "F8" to continue, press "ESC" if you disagree. If you disagree setup will finish.

PART 2

Now you have to select where to install XP. Press "ENTER" to confirm the partition you want to install into.
Now you need to format the hard drive, NTFS is recommended, but you can also use FAT32. Make your decision using the arrow keys and press enter. 
The hard drive will now format.
PART 3

and then setup will begin to copy files.

Setup now initialises the Windows XP configuration.
It is now time to restart Windows XP, press "ENTER" to speed up process, otherwise Windows will do it itself in 15 seconds.
Boot will recognize that the XP CD is in the drive, DO NOT press any keys, let setup bypass the CD boot.
Windows is now booting.
PART 4

The install process continues.
Now your regional and language options. Your mouse should now be active, so click on "CUSTOMIZE". 
Now select your Standards and Formats, plus your location, then click "OK".
Now click on "DETAILS".
Next select your default language, click "OK" when done       
Now that you have made all necessary changes click on "NEXT".
PART 5

Now it is time to personalize Windows. File in your name and if you wish you can also file in the Organization section. Click "NEXT" when ready.
Now it is time for your product key. The product key will be on the packaging that XP was supplied with. It is 25 digits long. Some OEM computers will have a sticker on the side or back with your product key. Input the key and press next    .
Now select your computer name and your admin password. Confirm the Admin password and press "NEXT".
Date and Time settings are next, change as need be, then press "NEXT".
Windows will then continue installing.
PART 6

If a network card has been detected then you will get the following menu. Select "TYPICAL SETTINGS" and press next. This configured later in Windows.
More network configuration, change workgroup name if need be and click  "NEXT".
Windows will continue installing.
Windows install will now finalize.

It is now time to restart Windows XP again, press "ENTER" to speed up process, otherwise Windows will do it itself in 15 seconds.
Boot will recognize that the XP CD is in the drive, DO NOT press any keys, let setup bypass the CD boot.
Windows will continue loading.
PART 7

Windows will now adjust your resolution, click "OK" to continue.
If you are happy with the changes, click "OK" otherwise press "Cancel" to return to the old settings
"Welcome to Microsoft Windows" screen now appears, press "Next" to continue.
Internet connection option is next. If your computer connects to a home network or directly using the network card, or is on a network then select "Yes", otherwise select “No”

PART 8
Activate Windows option appears next, we recommend that you select "No, remind me every few days", that will allow you to make sure everything is correct and running OK before you use up one of your activate attempts. It also allows you to setup your security options and internet connection correctly. Click "Next to continue"
Windows now thanks you, click "Finish" to continue.
Finally setup the users for the computer, you must fill in option beside "Your name" the other four users are optional. Click "Next" once you have finished to continue.
Windows will now apply your settings...
Now Windows "WELCOME" screen.
and finally the Windows XP Desktop. Windows is now installed.


If you have commonly used P-III you will have no drivers to install, but chances are the next step will be to install them. Check out device manager for unknown devices, likely items are Network Cards, Sound Cards, Printers, Scanners, Graphics Cards, Digital Cameras, plus  any other item you have. Also consider installing anti-virus software, spyware software and possibly a 3rd party Firewall. 

Cracking Windows (xp,vista,7,8) Passwords With Backtrack.

Using OphCrack.



Using Ophcrack,You can crack account password of almost all the Windows till date,And since OphCrack is the fastest password cracking tool,it wont take more than 4-5 minutes to crack a password.So let's begin -



What Do You Need ?

BackTrack 5 Live DVD.
Rainbow Files (i'll tell you what it is.)
Physical Access to victim PC.

So What-The-Hell is Rainbow Files ?

First thing that pops in mind when reading rainbow files is the collection of rainbows and unicorns flying,but no,Rainbow Files/Tables are basically huge sets of precomputed tables filled with hash values that are pre-matched to possible plaintext passwords. The Rainbow Tables essentially allow hackers to reverse the hashing function to determine what the plaintext password might be. It's possible for two different passwords to result in the same hash so it's not important to find out what the original password was, just as long as it has the same hash. The plaintext password may not even be the same password that was created by the user, but as long as the hash is matched, then it doesn't matter what the original password was.

So What Do I Need To Do ?

You need to download the rainbow tables matching to the OS Version of your victim PC,Get Them Here.You can download the smaller files because they will work,unless your victim is the Head of FBI who uses 28 letter long password.NOTE : the vista files will work for Windows 7 and Windows 8 too.

Everything is Downloaded and ready,Now -

Put the downloaded rainbow tables in a flash drive,and pick that BackTack 5 Live DVD too.

Let The Hack Begin -

Step 1 -
Boot the Victim PC with BackTrack Live DVD.

Step 2 -
Now Navigate To The Directory where windows password files are Stored.
WINDOWS/system32/config/

Step 3 -
Locate the Files "SAM" and "System",and copy them to a new folder on BackTrack desktop.

Step 4 -
Run The OphCrack tool in backtrack by : start->Backtrack->Privilege Escalation->Password Attack->offline Attacks-ophCrack GUI.

Step 5 -
Go to "Load" and select "Encrypted SAM" in ophcrack tool.Now it will ask you to select directory that contains SAM folder. Select the directory where you saved the SAM file (new folder on desktop).

Step 6 -
Target The Administrator Account,remove other account off the list (if any).

Step 7 -
Plug in the pen-drive/flash drive,Extract The Rainbow Tables to Desktop.

Step 8 -
Click on the Table button in ophcrack tool. Now it will ask you to selec the table. Select the files as required.Click OK after that.

Step 9 -
Now Hit the Crack Button,and wait for 3-4 minutes,You will have the key in your hands .

Saturday, 30 May 2015

F o o t p r i n t i n g T e r m i n o l o g y

A c t i v e I n f o r m a t i o n G a t h e r i n g
In active information gathering, process attackers mainly focus on the employees of the target organization. Attackers try to extract information from the employees by conducting social engineering: on-site visits, interviews, questionnaires, etc. This refers to the process of collecting information from sources anonymously so that your efforts cannot be traced back to you.

P s e u d o n y m o u s F o o t p r i n t i n g
Pseudonymous footprinting refers to the process of collecting information from the
sources that have been published on the Internet but is not directly linked to the author's
name. The information may be published under a different name or the author may have a
well-established pen name, or the author may be a corporate or government official and be
prohibited from posting under his or her original name. Irrespective of the reason for hiding the
Private fo o tp r in t" " in g involves collecting information from an organization's webbased
calendar and email services.

I n t e r n e t F o o t p r i n t i n g
Internet footprinting refers to the process of collecting information of the target
organization's connections to the Internet.

A n o n y m o u s F o o t p r i n t i n g
author's name, collecting information from such sources is called pseudonymous.

O r g a n i z a t i o n a l o r P r i v a t e F o o t p r i n t i n g
Private foot printooing involves collecting information from an organization's webbased
calendar and email services.


Thursday, 28 May 2015



Ethical hacking 

is legal hacking conducted by a penetration tester in order to evaluate
the security of an IT infrastructure with the permission of an organization. The concept of
ethical hacking cannot be explained or cannot be performed in a single step; therefore, it has
been divided into several steps. Footprinting is the first step in ethical hacking, where an
attacker tries to gather information about a target. To help you better understand foo tp rin ting ,
it has been distributed into various sections:

Footprinting Concepts

Footprinting Tools

Footprinting Threats

FootPrintng Countermeasures

Footprinting Methodology

Footprinting Penetration Testing


O p e n S o u r c e o r P a s s i v e I n f o r m a t i o n G a t h e r i n g

Open source or passive information gathering is the easiest way to collect information
about the target organization. It refers to the process of gathering information from the open sources, i.e., publicly available sources. This requires no direct contact with the target organization. Open sources may include newspapers, television, social networking sites, blogs, etc.
Using these, you can gather information such as network boundaries, IP address reachable via the Internet, operating systems, web server software used by the target network, TCP and UDP services
n each system, access control mechanisms, system architecture, intrusion detection systems, and so on.