Archive for the ‘General’ Category

How to Reset your Windows Vista Password easily?

Friday, August 1st, 2008

Many a times you would have been caught up in an awkward situation where you have forgotten your Windows Vista Password. So here’s how you can easily reset your Windows Vista Password, I have upon two methods on how you can achieve it.

Easy method
Download a piece of software from Petter Nordhal-Hagen’s website. But, before that be warned that this method involves the manipulating of Vista’s SAM database which is always a bit risky. You will need to create a boot disk (CD) from the downloaded software and this will then help you to manipulate the Vista’s SAM database.

I would like to re-assure you at this point that I have used this cool tool a couple of times on a Windows 2000 Server Box before and i never had any problem . Since, the new version of this cool software supports Windows Vista – so I can recomend the same.

Harder method:
In this method you will need to have a Windows Vista Password Reset Disk handy which will enable you to reset your password easily. But the point to note is that you should have created a Vista Password Reset Disk earlier in the first place.

Steps to create a Vista Password Reset Disk:
1. In Vista’s Start Menu search box type the word “user accounts” and open the user accounts
2.Click on Create a password reset disk found on the left navigation bar (The first one on the left – below Tasks).
3.Run the Forgotten Password Wizard which will open. Insert a floppy disk or a USB memory disk.
4.After you have inserted the storage device click on the Next button. Select your drive and then Next.
5.Now you’ll need to type your current Vista user account password and click Next.
6.And that’s it you have done a Vista password reset disk.
7.Now keep the Vista Password Reset Disk in a safe location

When you have forgotten your Vista Password or type the wrong password and press Enter.You wil get a error message.Just below the Error Message you will have a link saying Reset password. Click that link and follow the instructions.

How to Create Users and Databases easily in PostgreSQL

Friday, August 1st, 2008

You will need to first connect to the user postgres from your localhost to create the database owner. The command prompt postgres=# indicates that you are connected to the postgres database. The # in the command prompt actually means that the user connected to is a database superuser[Sort Off like in Linux].

Creating a New User:

To create a New User(mynewuser) in PostgreSQL we will use the CREATE ROLE command as follows:

postgres=#CREATE ROLE mynewuser
postgres-#login
postgres-#password ‘mypassword’;

This will create a new user called ‘mynewuser’ with the password ‘mypassword’.

Creating TableSpace :

Now we will move ahead to create the default tablespace for the new database. This is where the database’s files will be stored. Create a new folder structure as C:/myDB/mynewuser/system

The steps below will help you to create a new tablespace as mynewuser_system

postgres=# CREATE TABLESPACE mynewuser_system
postgres-# OWNER jason
postgres-# LOCATION ‘C:/myDB/mynewuser/system’;

Hers’s how you can check if the tablespace was created. Just key in the following command.

postgres=#db+ mynewuser_system

Create a Database and the related Database objects:

Finally we will now create a new database and the associated database objects. It’s very simple… so here are the SQL Statements.
postgres=# CREATE DATABASE myFirstPSQLdb
postgres-# OWNER jason
postgres-# TEMPLATE template0
postgres-# TABLESPACE mynewuser_system;

You can verify if the Database is installed properly by the following command.
postgres=#l+

Now we will finally create the related Database Objects.

First login into the Database:
postgres=# c myFirstPSQLdb

Then run your SQL script as follows:
myFirstPSQLdb=# i C:/myDB/myObjects.sql

Top 10 reasons website get hacked

Saturday, July 19th, 2008

1. Cross site scripting (XSS)
The “most prevalent and pernicious” Web application security vulnerability, XSS flaws happen when an application sends user data to a Web browser without first validating or encoding the content. This lets hackers execute malicious scripts in a browser, letting them hijack user sessions, deface Web sites, insert hostile content and conduct phishing and malware attacks.

2. Injection flaws
When user-supplied data is sent to interpreters as part of a command or query, hackers trick the interpreter — which interprets text-based commands — into executing unintended commands. “Injection flaws allow attackers to create, read, update, or delete any arbitrary data available to the application,” OWASP writes. “In the worst-case scenario, these flaws allow an attacker to completely compromise the application and the underlying systems, even bypassing deeply nested firewalled environments.”

3. Malicious file execution
Hackers can perform remote code execution, remote installation of rootkits, or completely compromise a system. Any type of Web application is vulnerable if it accepts filenames or files from users. The vulnerability may be most common with PHP, a widely used scripting language for Web development.

4. Insecure direct object reference
Attackers manipulate direct object references to gain unauthorized access to other objects. It happens when URLs or form parameters contain references to objects such as files, directories, database records or keys.

5. Cross site request forgery
“Simple and devastating,” this attack takes control of victim’s browser when it is logged onto a Web site, and sends malicious requests to the Web application. Web sites are extremely vulnerable, partly because they tend to authorize requests based on session cookies or “remember me” functionality. Banks are potential targets.

6. Information leakage and improper error handling
Error messages that applications generate and display to users are useful to hackers when they violate privacy or unintentionally leak information about the program’s configuration and internal workings.

7. Broken authentication and session management
The problem: User and administrative accounts can be hijacked when applications fail to protect credentials and session tokens from beginning to end. Watch out for privacy violations and the undermining of authorization and accountability controls.

8. Insecure cryptographic storage
The problem: Many Web developers fail to encrypt sensitive data in storage, even though cryptography is a key part of most Web applications. Even when encryption is present, it’s often poorly designed, using inappropriate ciphers.

9. Insecure communications
Similar to No. 8, this is a failure to encrypt network traffic when it’s necessary to protect sensitive communications. Attackers can access unprotected conversations, including transmissions of credentials and sensitive information. For this reason, PCI standards require encryption of credit card information transmitted over the Internet.

10. Failure to restrict URL access
Some Web pages are supposed to be restricted to a small subset of privileged users, such as administrators. Yet often there’s no real protection of these pages, and hackers can find the URLs by making educated guesses. Say a URL refers to an ID number such as “123456.” A hacker might say ‘I wonder what’s in 123457?’ Williams says.

Bill Gates Daughter – Jennifer Katharine

Thursday, July 17th, 2008

She is the World’s 3rd richest person Bill Gate’s DaughterJennifer Katharine
billgates,billgates daughter
billgates,billgates daughter

billgates,billgates daughter
billgates,billgates daughter

Software guys will start preparing code to attract her.. is it?

But then I cannot stop your dream.. go ahead.. put your comments here

Now Check Your Website Worth

Thursday, May 8th, 2008

Here is the tool to meassure your website’s worth ;)
Put the banner on your pages & cheat if someone is willing to buy yours.. LOL

Calculate it at : http://www.websiteoutlook.com/www.secureslash.com


My site is worth $4321.6.
How much is yours worth?

IE6 & 7 Flicker or Flashing Problem

Tuesday, March 18th, 2008

You may have a site that has background other than White.

<!– ckey=”72D5D611″ –>

And sometimes when using css/javascript menus,etc when the people navigate to other pages , you will see a Big Flash entering the eyes

Not to mention, average users will get Annoyed by this and leave the site unless you provide something that makes them cope that behavior of the browser

You may not notice this in famous Firefox browser but IE is prone to this kind of behavior
Foxkeh banners for Firefox 2

To fix the problem easily we can ask all users to switch to firefox but this is not always the case so

Here is the fix for Internet Explorer

we have tried some advice from fellow webmasters that you can setup cache on IIS webserver,etc.. most people dont have previlage to do that or their hosting admins may not be interested in doing that.

So without any ones help you can fix this yourself by using an Iframe

Make a new file like iframe.html or index.html whatsoever

Make the background to the color of your site background <body bgcolor = “xxxx”>

then make a iframe with this code

  • <iframe src=”http://secureslash.com/” allowtransparency=”true” align=”left” frameborder=”0″ height=”1024″ scrolling=”no” width=”100%”></iframe>

change the secureslash.com with your site url.

And dont forgot that, You need to use some javascript to change the browser address bar url according to the current source of iframe. Google or Live it for doing this.

Thats it , Enjoy Cheers

Paimpozhil

Javascript Trojan Virus Everywhere and How to fix it

Saturday, March 1st, 2008

Its getting hit by Trojan virus:

Read the News about Thousands of infected websites.

A lot of sites are now being attacked with JavaScript Trojans

the server is not attacked by virus , this happens to both Linux and windows server sites.

so it is doesnt look like a server based attack

How this happens?

when the computer from where you upload data thru FTP/fp is infected , it injects some JavaScript to all html files.

so how you can prevent this happening is keep your pc up2date by having recent antivirus,antispyware and then change your ftp logins.

If there is a Repeating same pattern of JavaScript on 100s of your files you have a shell script for Linux server users that can remove these injected javascript .

so you can request your host or you yourself can run this on your shell


find ./ -type f -exec sed -i ‘/unescape/d’ {} \;

this command will remove all the lines with pattern ‘unescape’

some virus has lines of function okban, in that case you can try pattern ‘okban’

it depends on your need.

you can do the same with a software called GrepWin for replacing/searching PERL Regular Expression patterns on your files

http://tools.tortoisesvn.net/grepWin

use it to search for patterns and replace with null or use the options to delete those lines

this can be either used on a windows server or client side (but then you have to upload all modified files again )


				

Why to change IPV4

Saturday, March 1st, 2008

Why to change IPV4

The basic TCP\IP technology has worked well for 2 decodes, even though thinking in a broad sense, the motivation revising the protocol arises from changes in underlying technologies and uses.

In early 90’s only universities and tech industry and Us-Government had internet, it has intented to a vast change as experienced as doubling in size every nine months or faster

This IP make suited to some of real time applications

 

FEATURES OF IPV6

Large address:-

This new address size is the most noticeablechange.IPV6 quadruples the size of an IPV4 address from 32 bits to 128 bits.The IPV6 address space is so large that it cannot be exhausted.

Extended Address Hierarchy:-

IPV6 uses the larger address space to create additional levels of addressing a hierarchy of ISP’s as well as hierarchical structure.

Flexible Header Format:-

IPV6 uses an entirely new and incompatible datagram format.Unlike the IPV6 fixed format header.IPV6 defines a set of optional headers.

Improved options:-

Like IPV4,IPV6 allows a datagram to include optional control information. IPV6 includes new options that provide additional facilities not available in IPV4.

Provision for protocol extension:-

Perhaps the most significant change in IPV6

Is a move away from a protocol that fully specifies all details to a protocol that fully specifies all details to a protocol that can permit additional features.

The extension capabilities has the potential to allow the IETF(Internet Engineering Task Force).To adopt the protocol changes in underlying network hardware or to new application.

Support for Auto configuration & Renumbering:-

IPV6 provides facilities that allow computers on an isolated network to assign themselves address and begin communicating without depending on a router or manual configuration & permits a manager configuration & permits a manager to renumber network dynamically.

Support for recourses allocation:-

IPV6 has two facilities that permits pre allocation

of network resources, a flow abstraction and a differentiated service specification. The latter will use the same approach as IPV4’s differentiated service.

Controversies of IPV6:-

The response that arguments could be made to increase every field leading to a bloated header. The function of the HOP limit fields to keep packets from wondering long time.

The Super Computer community wanted packets in excess of 64kb.When a super computer gets started transferring ,it really means business & does not want to be interrupted every 64kb.The argument against large packets if a 1mb packet hits a 1,5mbps T1 line.

IPV6 has no checksum as that of IPV4.It generously allows all packets passing through the IP address.

Searching files on linux

Sunday, December 30th, 2007

To find files quickly on the redhat based distributions (fedora,centos,rhel,etc)

search files

You need to first index the file names before you can search them quickly for this command is

updatedb &
man updatedb

& (lets you to run the command in background so you can do something now
in shell in mean time)

then after it is done.

you can find files using command locate

locate [filename or part of filename]

Example

[xxx@server1 plugins]$ locate wysiwyg
/scripts/wysiwygpro_cleanup
[xxx@server1 plugins]$
man locate
You have to update the index periodically else it will be outdated and not pretty useful as it should be

so add this to your cron job to make it run once daily
$crontab -e
1 1 * * * /usr/bin/updatedb

This will update it daily to the db

If you dont want to index it daily & If your files rarely change you
can change it weekly or monthly by just changing it accordingly on crontab

making , editing crontab is out of subject of this article but the
simple way is

crontab -e & paste that cron command and then save it.

Online Cron command generator

Digg: This is my world

Saturday, September 1st, 2007

After a long research, I findout digg has nearly 87000 users.

12K diggers dugg microsoft stories.
24K diggers having an interest about iPhone
14K diggers dont like iphone

10K diggers having an interest about “Hacking” stories
42K diggers dugg “Digg” stories.
12K diggers dugg “Pairs hilton” stories
13K diggers reads “Saddam Hussein” stories
14K diggers having an interest about “HD-DVD”
5K diggers love Ubuntu
16K diggers likes [pic] stories
12K diggers support PirateBay
34K Sites are linking to digg.com

48.6% of digg users come from USA.
30% of diggers dugg stories by reading the “Title” alone.

Digg.com is not in any country’s “Top 10 Websites” or “Top 20 Websites” list
Digg.com is not in world wide “Top 100 Websites” list. :(

97% of digg users are proud to say they use “Digg.com”

68% of digg comments are offensive

42% of digg users hate “Digg Comment system”

92% of diggers uses the word “fuck” & “suck” in their comment.

Digg lost 4% of traffic in [Aug'07]
Digg’s traffic rank reduced 11 in [Aug'07]
Digg becomes a good “Information Portal” next to Wikipedia.

Note:
98.4% of internet statistics are made up.

Alpha Software is 10 Times More Efficient than ASP or PHP! – Funny Quote

Thursday, August 9th, 2007

Recently we have got to a site called alpha software somewhere through google , found some very interesting funny pages there.

This Alphasoftware claims they are 10x-50x more efficient than the other scripting languages

and you can see more of this crap on their site http://www.alphasoftware.com/ :) )

But i dont get the exact reason why they use asp themselves for their homepage

http://www.alphasoftware.com/about/contact.asp

some people might argue that This is not asp , and they might have spoofed the extension with help of their web server mime configurations but Look at this

http://www.alphasoftware.com/resources/it_related_9.asp and take rest!

why do they use asp that is 10x less effiecient or slower than their AlphaSoftware.

Some more of their technology

“Application Hosting

Once you have built your web application, the next step is to host or deploy your application to the Internet or intranet so that remote users can access your application via a browser. “

So you need to buy all these

Alpha version 5, application server and a runtime

it will cost you Very minimum of 1097 $ (very cheaper than php which i got for free)

https://www.alphasoftware.com/shop/AlphaFive/index.asp?UserType=new&RTSEL=0&V8SEL=0&WASSEL=0

Making some software that eases the people’s hard tedious work is always good but yelling stuff like 100x faster than this,that ,everything makes us look bad of them.

look at this

“Microsoft Access, Visual Basic, FileMaker, PHP, ASP, JSP, Cold Fusion all have merit, but none can match the combination of power and simplicity that is the trademark of all Alpha Software solutions.”

Why ? i find ruby on rails / cakephp a lot easier than this stuff after seeing few of their demos,etc

and finaly their product doesnt look that impressive decide for yourself :) )

http://afas.alphasoftware.com/SamplePages/

we are not encouraging them so we didnt provide any link to there website

If you people would like to share some about this you can comment here, make it more fun!.

Security Flaw Finding Contest – Jan’08

Sunday, August 5th, 2007

Hello Members, Readers, Editors & Visitors,

SecureSlash Team planned to conduct a security flaw finding contest in a Windows XP Home SP2 .

This will be a Security Contest.

Main Objective is, Finding as many security bugs in the Operating System as you can.

——————————————————————–

Prize!

1. A page in secureslash.com with winner’s photo & profile with the title of “Geek/Nerd of the Month”

2. iTunes Gift card

3. xBox Gold Membership

4. RapidShare/MegaUpload premium account

5. Paypal/E-Gold transfer

As, We wont say prize will be $100,000 cash & run away. Feel free to suggest a prize.

—————————————————-

Before conducting/promoting, We like to hear your comments. So, Feel free to say anything about contest.

Btw, We are building a perfect judgement team with Geeks & Nerds for selecting a BEST & Worth finding.

Thanks for being with us!

Regards,
SecureSlash Team