Since Mozilla Labs launched the Concept Series with an open call for participation we’ve had thousands of people join in, share ideas and develop concepts around Firefox, the Mozilla projects and the Open Web as a whole.
In response to our open call Billy May, in early 2009, produced a throw-away concept for an “Open Web Concept Phone”. Working directly off of that community feedback, Billy has since finished the exploration with his concept “Seabird”.
The following write-up is by Billy May and explores what an Open Web phone might look like:
TO FIND THE REQUIRED SERIALS PRESS CTRL + F AND TYPE YOUR REQD SOFTWARE NAME
Please suscribe to support this free site
LIST OF SERIAL KEYS
Microsoft windows 7 keys
J7PYM-6X6FJ-QRKYT-TW4KF-BY7H9
D67PP-QBKVV-6FWDJ-4K2XB-D4684
HQDKC-F3P6D-C9YYM-HRB89-QDBB7
76DX2-7YMCQ-K2WCP-672K2-BK44W
2RG93-6XVFJ-RKHQ7-D2RTT-3FMQT
TT63R-8JGWP-WWT97-R6WQC-4CVWY
YQJX6-D6TRM-VWBM7-PHDJK-YPXJH
Q7J7F-GQHBT-Q42RQ-2F8XV-2WKKM
KH4X7-JY8G7-RCD7G-BYDJW-YTPXH
WYBJ8-8QVP3-24R82-VV2VP-72Q9W
9DP2R-W78GJ-GJBKW-CKR46-H3WYT
CXB7F-WWCM4-BP9V3-2YH43-RK8Y6
W9BYV-K2TB8-4YDJT-QBQWP-KFDHB
WGDJW-B8DYC-WVKX4-6MKF4-B8PK8
2PHXF-9PBDW-D3WWY-CPDKD-XG87V
Just under one year ago, Apple shocked the computing world with a 9.7-inch touchscreen tablet that few truly expected.
Some called the original Apple iPad a large-format iPhone. Others berated the name and made jokes that were not remotely funny.
The early reviews were marginal at best – we handed the device a solid four stars. Technical folks decried the lack of Adobe Flash and the missing cameras.
Now, 60,000 apps later (according to Apple, who counts every conceivable option) and just a few weeks after the first real Android 3.0 tablet contender hit the streets (Motorola Xoom), the iPad 2 has sauntered onto the playing field.
Some expected pure gold: a tablet that runs as fast as a laptop and weighs less than a newspaper.
Yet, the reality with the iPad 2 is that Apple has taken an iterative approach. In many ways, the iPad 2 is a crowd pleaser because it does not rock the boat.
At 241mm tall, 186mm wide, and 8.6mm thick, the iPad 2 is just a hair smaller than the original iPad and it's thinner than the iPhone 4. It has a curved edge that makes it look a bit more 'space age' and, surprisingly, easier to grasp because you can curve your fingers more easily around the bezel.
The most dramatic change is the weight. At 680 grams, the iPad 2 is 80g lighter than the first iPad. That is about the same weight as a juicy red apple (curious, eh?). Yet, in using the device, it feels strangely lighter than it really is.
The BlackBerry Empathy concept phone is a sponsored project held by RIM Blackberry at the Art Center College of Design. But the concept behind the phone is really odd. The idea is that it is supposed to “detect emotional data” through some magic ring and show both your emotions and your contacts and social graph.
According to Engadget – “It’s not exactly clear how it’d do that, but one crucial element is the biometric feedback ring that communicates your frustration at the phone’s inability to properly sync IMAP accounts in real-time. All of this anger and joy is displayed on a social map — colored rings indicate your contacts’ previous and current emotional states — which is presented on a full touchscreen that can become transparent when the phone’s not in use.”
Here is how the designers Kiki Tang and Daniel Yoon describe the interface:
It is of course touch based and all the user’s connections are shown graphically so you can see who is connected to whom. Each contact has an avatar that is encompassed by two colored rings. The inner colored ring shows the contact’s previous emotional state, and the outer ring represents the contact’s current emotional state. It is important to show the shift in emotions in order to see how an event has affected that contact.
Another important feature that we felt was important was the “Emotional Health Chart”. This chart would monitor the user’s emotional health through an indefinite period of time. One would be able to see how a certain event, or phone call/ message has affected the user. Obviously, if the chart shows someone is always upset, there would be a problem… If permitted, a user would be able to view other user’s charts as well.
Office 2010 is yet to be released, but Microsoft has already begun planning for Office 2013 or Office 15. InfoWorld and Microsoft Kitchen has managed to unearth some preliminary information about Office 15.
The first bit of information is that Microsoft has chosen to continue with their recent no-nonsense naming policy and has codenamed Office v15 as simply Office 15.
As far as features are concerned, other than offering a “new visual & interaction experience”, Office 15 will sport drastically improved collaboration tools. Word Program Manager, Jonathan Bailor revealed in an interview, “In Office 15, we’d love to take collaboration and communication to the next level. We’ve unlocked all of these new ways to work and a new set of expectations from users, and we’re like, ‘Put us back in the ring; we’re ready for round two.’ Until coauthoring a document is as easy and ubiquitous as e-mail attachments, our job isn’t done”.
Microsoft employee, Ben Gable, mentioned in his LinkedIn profile that Excel will be getting a major new feature, while an online ad for a test engineer hinted that Outlook will continue working on improved social networking integration.
Microsoft has also been talking about Office Mobile 15 in their job advertisements. Here is a particularly interesting snippet uncovered by Microsoft Kitchen:
Now is your chance to get in on the ground floor of the Office organization’s newest team. The Office Mobile suite includes Communicator Mobile, Word, PowerPoint, Excel, OneNote, SharePoint, with more applications and capabilities being planned as part of the Office 15 product suite. This unique position involves technical challenges of working across multiple operating systems and devices as well as the chance to work with teams across the company and around the world. Our key focus going forward is designing and developing new end to end Mobile Office scenarios that greatly improve mobile meetings, productivity, and document management. All while taking advantage of the greater computing power, networking, memory, screen & touch, and GPS capabilities on next generation mobile computing platforms
Although there has been rumors that Microsoft will be ditching the Ribbon UI in favor of a completely new interface, given the short timeframe, such a drastic change appears rather unlikely.
What new features would you like to see in Office 2013? Don’t forget to let us know.
Microsoft has made big sales with Windows 7 and hopes to do even better with a new 64bit ground up built OS – Windows 8.
Windows 8 would get architectural changes, lots of new Features, improvements.
WinRumors claims that Microsoft’s Windows 8 Milestone 2 build has been finalized, and Milestone 3 is on the horizon. After Milestone 3 is done, its just matter of days that we would start seeing Windows 8 beta being seeded to BETA testers and floating on torrents, just like windows 7. The windows 8 beta could arrive as early as summer 2011.
Microsoft compiled 6.2.7947.0.winmain_win8m2_escrow.110218-1608 on Friday, 18th feb 2011. Things are progressing secretly, even inside the company. So far, the leaked information states some recent Windows 8 builds:
6.2.7925.0.winmain_win8m2.110207-1736
6.2.7926.0.winmain_win8m2.110209-1755
6.2.7927.0.winmain_win8m2.110210-1740
6.2.7928.0.winmain_win8m2.110214-1825
6.2.7929.0.winmain_win8m2.110215-1802
6.2.7930.0.winmain_win8m2.110217-1825
You might not have received Windows 7, but Microsoft already has big plans for the upcoming OS for 2012 – Windows 8.
Let’s discuss each of the possible improvements, based on proofs from confirmed sources.
Windows 7 would be the last 32-bit OS from Microsoft. Microsoft has already accelerated development of Windows 8 with support for 128 bit platform, and exclusive support by Windows 9.
As per Microsoft:
Working in high security department for research and development involving strategic planning for medium and longterm projects. Research & Development projects including 128bit architecture compatibility with the Windows 8 kernel and Windows 9 project plan. Forming relationships with major partners: Intel, AMD, HP, and IBM.
Robert Morgan is working to get IA-128 working backwards with full binary compatibility on the existing IA-64 instructions in the hardware simulation to work for Windows 8 and definitely Windows 9.
If you store sensitive data in your email (I bet you do), here is a latest tip from our side that will help you make Gmail unHackable, well almost.
Your Gmail account, your photos, your private documents—if you reuse the same password on multiple sites and one of those sites gets hacked, or your password is conned out of you directly through a phishing scam, it can be used to access some of your most closely-held information. Gmail had gone https a year ago, and then OAuth, but that may not be enough if you are careless.
How to Prevent Gmail from Being Hacked
First things first, you should have a long and good password that cannot be memorized by any other person. A combination of a phrase and numbers, special characters is a perfect thing to do. Beyond that, chose a password recovery that you believe no one else can answer.
Beyond those basic preventions, Google has introduced a 2 step authentication, that makes your gmail account almost impossible to hack, almost. You can safely spread out your password and still have no risks of getting hacked, such is the beauty of 2 step authentication.
Nokia, as expected, has announced partnership with Microsoft that would replace Nokia’s “burning platform” Symbian with Windows Phone 7. The response was mostly negative from Symbian, Meego developers including most employees who protested the move.
Despite what people, Nokia had to take a move, either could be MeeGo, Android or WP7. Nokia chose x-Microsoft Employee’s decision.
Nokia has dropped the plans from upcoming N series phones, but has revealed new WP7 concept phone which is expected hit market within 2011. We have it on good authority that the technicolor phones on show are conceptual devices produced by the two companies. The shape of these handsets is somewhere between its recent N8 and C7 Symbian devices and there is, as usual for Nokia, a choice of sprightly colors
Even when the partnership has just been announced, the Microkia has actually spent lots of time working together and the phones are coming soon.
How many times did you saw a person you think you have seen before and not able to recall ? How many times did you wish you knew that blonde girl heading your way? Seems like all of the wishes are about to become true with Google’s new patent for social faces. We are very nearly there with automatic face-recognition technology and social media aggregation.
Google Goggles is a Visual search engine for mobile phones which allows users to take a picture of anything, such as a landmark, or a celebrity and then run a search for what/who they are.
Google wishes to expands its plans further when they acquired like.com, a visual search engine. Prior to Google’s acquisition, Like.com helped online shoppers search site called Riya which used facial recognition technology to search images that users had uploaded and tagged. The latest patent filed by Google: User Interface for Presenting Search Results for Multiple Regions of a Visual Query suggests that Google’s visual search for smartphones might be evolving into something that’s totally new and powerful.
Another Google patent, Facial Recognition With Social Network Aiding, describes facial recognition searches for “one or more likely names” of the people in the image based upon “communications applications, social networking applications, calendar applications, and collaborative applications” to create a list of possible identities for each person. The patent description also mentions that if the photo is tagged with a person’s name, “that picture might be used in future facial recognition queries to recognize the person.”
After receiving the visual query with one or more facial images, the system identifies images that potentially match the respective facial image in accordance with visual similarity criteria. Then one or more persons associated with the potential images are identified. For each identified person, person-specific data comprising metrics of social connectivity to the requester are retrieved from a plurality of applications such as communications applications, social networking applications, calendar applications, and collaborative applications. An ordered list of persons is then generated by ranking the identified persons in accordance with at least metrics of visual similarity between the respective facial image and the potential image matches and with the social connection metrics. Finally, at least one person identifier from the list is sent to the requester.
Benefits aside, Google could face serious privacy allegations. In regards to privacy, Google has several possible scenarios: to send only one of the “identifiers” to the person searching; to possibly allow only the person identified to make the photo public, or to send a request after a person is positively identified, asking if the image can be a face search result for other people’s visual queries from within their social network, which is kind of tricky as Google would need partnership with Twitter & Facebook for this to work. Its not hard to get the former but latter is what we doubt.
Okay, now that we know Google is serious about social facial recognition, how can we confirm is targetting mobile platforms like Android & iPhone? Coincidently, “David Petrou, Andrew Rabinovich, and Adam Hartwig” who worked on Google Goggles, are the patent filers.
What would make it better is that we would see some competition as well. Viewdle is also working on mobile facial recognition that works on the fly, and might help “government stalkers.” by allowing users to tag and save “faceprints” of people, and “then share the faceprint of them with other Viewdle users so they can recognize that person too!” The photosharing privacy settings are integrated with Facebook privacy settings.
Viewdle - Photo and Video Face Tagging from Viewdle on Vimeo.
Many have talked about the PSP Go-like smartphone with Android 3.0 platform is currently in development from Engadget – Tech Blog. 
Many have talked about the PSP Go-like smartphone with Android 3.0 platform is currently in development from Engadget – Tech Blog.
Sony Ericsson CEO Claims A Big Surprise In Few Months
During a opening of the mobile phone maker’s North American and Latin American headquarters in Atlanta. Sony Ericsson CEO, Bert Nordberg discussed a big announcement planed in the next few months.
The trend of porting a mobile OS to a tablet isn’t a new one at all. After all, mobile OS are much finger-friendly than the full featured OS that we mainly use on our laptops and desktops.
Here, designer Umang Dokey has taken inspiration from the same approach and made a concept tablet that runs on Windows Phone 7 OS. The Tablet has a 8-inch capacitive touch screen, 2 web cams for 3D video calling, an in-built stand and a keyboard.
Tablet Concept - running Windows Phone 7 OS from umang on Vimeo.
Interestingly! other companies like Apple and Google have already begun to make tablet-devices out of their mobile OS, so something like the Windows Phone 7 OS Tablet shouldn’t be far from reality.
And if that’s really the case, I wonder what Microsoft will do about the HP Slate that is supposed to launch later this year? Not to mention the Microsoft Courier too?
It looks like Apple got sneaky and hid the release date for the White iPhone 4 in small print. 9to5Mac found the small print on a sign as seen above which was found in an Apple Store so it is believable. The information found on that sign is not on the Apple website as of yet. No word yet on when Apple will start Pre-orders for the new white iPhone 4, I have reached out to them for comment.
Microsoft is bound to produce a few Milestone releases of Windows 8, before actually taking it to the next level, and producing the first Beta build. As per the news, Windows 8 could hit Beta as early as mid-2011, a year from now. Of course, all reports related to Windows 8 need to be taken with a grain of salt, since no actual details were confirmed by Microsoft.
“With 150 million sold copies of Windows 7 later, we are now at a little after eight months since the latest major version of Windows was released, and almost a year since it RTM’d. Just the right time for Microsoft to start the actual coding for Windows 8″ says Microsoft.
Well nothing is confirmed yet. For enthusiasts who want to taste the feel of Windows 8 you can see some of the most probable Windows 8 Wallpaper and Windows 8 Transformation packs to get a feel of it, Though all are unofficial.
NOTE: RATs usually are detected as a trojans and viruses, but I guarantee you that they are NOT infected, as long as you don't run the bot servers on your computer.
1. Cerberus 1.03.4 BETA
Screenshot: http://i45.tinypic.com/fx9uz9.jpg
Download link:
2. Turkojan 4 GOLD
Screenshot: http://i47.tinypic.com/2vls87s.jpg
Download link:
3. Apocalypse 1.4.4
Screenshot: http://i48.tinypic.com/2ljmgkn.jpg
Download link:
4. Spy-Net 2.6
Screenshot: http://i45.tinypic.com/sc43t1.jpg
Download link:
Rar password: Spy-Net
5. Pro Rat v1.9
Screenshot: http://i46.tinypic.com/14o20px.jpg
Download link:
Rar password: oksa52wq
Username: mohdjase1 Serial: 66618e869accfc4f96
6. Poison Ivy 2.3.2
Screenshot: http://i35.tinypic.com/2lvfthg.gif
Download link:
7. Bandook Rat v1.35
Screenshot: http://i45.tinypic.com/116lx13.jpg
Download link:
Rar password: NWC
8. Bifrost v1.2
Screenshot: http://i47.tinypic.com/24n2vcn.jpg
Download link:
9. CyberGate v.1.01.0
Screenshot: http://i45.tinypic.com/sena09.jpg
Download link:
10. Lost Door v4.2 LIGHT
Screenshot: http://i36.tinypic.com/6gbnk8.jpg
Download link:
11. Beast 2.07
Screenshot: http://i45.tinypic.com/rrlesh.jpg
Download link:
12. Shark v3.0.0
Screenshot: http://i50.tinypic.com/2zpkwpk.jpg
Download link:
13. Sub7 v2.2
Screenshot: http://i49.tinypic.com/25oyt6o.jpg
Download link:
Password : http://www.sub7legends.com
14. Pain RAT v0.1
Screenshot: http://i50.tinypic.com/14ag3zo.jpg
Download link:
15. xHacker Pro v3.0
Screenshot: http://i38.tinypic.com/2qnunb4.png
Download link:
16. Seed v1.1
Screenshot: http://i46.tinypic.com/34dqzw0.jpg
Download link:
17. Optix Pro v1.33
Screenshot: http://i48.tinypic.com/x5w9rr.jpg
Download link:
18. Darkmoon v4.11
Screenshot: http://i47.tinypic.com/m58j4.jpg
Download link:
19. CIA v1.3
Screenshot: http://i48.tinypic.com/x2juo3.jpg
Download link:
20. Y3k RAT v1.0
Screenshot: http://i50.tinypic.com/f19idt.jpg
Download link:
21. MiniMo RAT v0.7
Screenshot: http://i46.tinypic.com/8x77l5.jpg
Download link:
22. NetDevil v1.2
Screenshot: http://i50.tinypic.com/28jyydl.jpg
Download link:
23. Deeper RAT v1.0
Screenshot: http://i45.tinypic.com/33dh9py.jpg
Download link:
Please try At Your Own risk and These Tools are only for ETHICAL Purposes.
Thanks
I m trying to introduce new Sql Injetion hack kit (Not full but partial)
DOWNLOADS :
SQLI SCANNER PACK : http://adf.ly/6tth
MD5 tools pack : http://adf.ly/6tuV
ADMIN FINDR : http://adf.ly/6tuk
SQLI TUTORIAL PACK : http://adf.ly/6tuw
DORKS PACK : http://adf.ly/6tv7
SHELLS PACK : http://adf.ly/6tvD
DONT DOWNLOAD IF YOU DONT KNOW WHAT ARE FALSE POSITIVE VIRUS ALERT
1) sqli scanner/automating injection pack :
contains 5 softwares for scanning ,and automating the hacking process
(a) Exploit scanner - for finding websites with dorks , and testing them for vulnerabilities.very famous
(b) Turkish ARTA - same as exploit scanner but not as famous bcos its turkish . i find it better then exploit scanner. but that my personal opinion
© Havij 1.12 free version : i guess everyone knows about it. it automates the process of performing sqli attack on any site.
it is extremely famous and efficient. but still it a tool :) nothing compared to manual process
(d) SQLI helper 2.7 : same like havij , but little fast .
(e)sqlinj Version 2 - another nice sql injection tool . i will write a tut later how to use this tool
2) ADMIN Finder pack :
After getting the logins from the database . one needs to get the admin finder page. for some sites its very easy while for smoe site its hellova tough
here are some nice admin finder tools and lists tht u may use. but these tools are never enough .i will keep uploaing the amin finder lists as i get more
(a)reiiuke admin finder ( u can upadt the original admin finder lists with the list i am providing)
(b)5 perl and python admin finder tools/scripts. update them as per ur need
© misc softwre : admin pass locater , to brute force admi pass if u cant find it
YOU MIGHT ALSO LIKE THIS SITE
http://th3-0utl4ws.com/tools/admin-finder/
3) DORKS Pack : Contains many files contiaing more then 7000 dorks.
4) Shells : this pack contins many shells and source codes , like c99 ,c100 , jackel and hellova more
( many shells like c99 are identified as trojans by many antivirus. so u might find ur antivirus shouting about this pack. )
U might also wanna see this site :
http://www.kinginfet.net/shells/
5) MD5 cracking tools : although havij have md5 tool but for some reason it never worked for me . so this pack contains some tools .
ASLO THESE SITES WILL PROVE YOU GREAT HELP
http://www.md5decrypter.com/
http://www.md5decrypter.co.uk/
http://md5.rednoize.com/
http://md5decryption.com/
http://passcracking.com/
http://www.xmd5.org/
http://www.md5cracker.com/index.php
http://md5.noisette.ch/index.php
http://md5cracker.org
6) SQLI tutorials pack : This pack contain complete html pages of sqli tutorails that i found useful from various forums and websites like hackforum , elitesoft ,warex , outlaws etc etc. i bet every newbe will love this pack .
u just need a firefox browser to open these html files.
NOTE: this pack also contain 2 of my own created sqli help files which i created myself, serves me as a very useful docment wheneever i m on to hack some site.
i will keep updating these packs as i learn and collect more and more .
so keep tune and make your valuable feedbacks
Complete detailed instruction on how to unlock your iphone 3g or 3gs on jailbreak can be downloaded at the following link
http://fileml.com/1g564J
Additionals tags:
Jailbreak 4.1
Jailbreak iphone 4.1
Jailbreak iphone 4G 4.1
JailbreakiPhone 4G 4.1
Jailbreak iphone 3GS 4.1
JailbreakiPhone 3GS 4.1
Jailbreak iphone 3G 4.1
JailbreakiPhone 3G 4.1
Jailbreak iPad 4.1
JailbreakiPad 4.1
Jailbreak iPod Touch 4.1
Unlock 4,1
Unlock iPhone 4.1
Downgrade 4.1
4.1 Firmware
4.1 beta Firmware
iPhone 4.1 firmware
iPod Touch 4.1 Firmware
ipad 4.1 Firmware
iPhone 3G 4.1
iPhone 3GS 4.1
Fast-forward to last summer, when the first of the latest generation of WEP cracking tools appeared. This current generation uses a combination of statistical techniques focused on unique IVs captured and brute-force dictionary attacks to break 128 bit WEP keys in minutes instead of hours. As Special Agent Bickers noted, \"It doesn\'t matter if you use 128 bit WEP keys, you are vulnerable!\"
WEP Hacking - The Next Generation
WEP is an encryption scheme, based on the RC-4 cipher, that is available on all 802.11a, b and g wireless products. WEP uses a set of bits called a key to scramble information in the data frames as it leaves the access point or client adapter and the scrambled message is then decrypted by the receiver.
Both sides must have the same WEP key, which is usually a total of 64 or 128 bits long. A semi-random 24 bit number called an Initialization Vector (IV), is part of the key, so a 64 bit WEP key actually contains only 40 bits of \"strong\"encryption while a 128 bit key has 104. The IV is placed in encrypted frame\'s header, and is transmitted in plain text.
Traditionally, cracking WEP keys has been a slow and boring process. An attacker would have to capture hundreds of thousands or millions of packets? a process that could take hours or even days, depending on the volume of traffic passing over the wireless network. After enough packets were captured, a WEP cracking program such as Aircrack would be used to find the WEP key.
Basic Directions:
1)Boot from cd
2)Get the wep key
3)Write it down
4)Reboot into windows
5)Connect using wep key.
http://ugotfile.com/file/906539/WiFi.Slax.Wireless.Hacking.BootCD.part1.rar?rid=54322
http://ugotfile.com/file/906540/WiFi.Slax.Wireless.Hacking.BootCD.part2.rar?rid=54322
http://ugotfile.com/file/906541/WiFi.Slax.Wireless.Hacking.BootCD.part3.rar?rid=54322
http://ugotfile.com/file/906543/WiFi.Slax.Wireless.Hacking.BootCD.part4.rar?rid=54322
http://ugotfile.com/file/906545/WiFi.Slax.Wireless.Hacking.BootCD.part5.rar?rid=54322
http://ugotfile.com/file/906546/WiFi.Slax.Wireless.Hacking.BootCD.part6.rar?rid=54322
http://ugotfile.com/file/906544/WiFi.Slax.Wireless.Hacking.BootCD.part7.rar?rid=54322
One of the most common techniques used by hackers to penetrate your network, is just plain-old password guessing. This goes for external hacking attempts as well as internal hacking attempts. In this article I will discuss how hackers can use tools to perform brute force password hacking in your Terminal Server environments and what you can to prevent these kinds of attacks.
Introduction
Guessing passwords is one of the oldest, yet one of the most effective techniques to gain access to a system. The reason that it is one of the most effective hacking techniques is because there’s aweak link in the whole process: humans. This is because humans like “samantha1” better for a password than “Tr15%^<
Hacking Slang
For clarity’s sake, I’ll briefly discuss some of the terms used in relation to password hacking. Basically, there are two kinds of password hacking attacks:
* Brute force hacking a.k.a. dictionary hacking attacks
* Password cracking a.k.a hash hacking attacks.
In this article we will be focusing on brute force hacking, using dictionary attacks. This simply means that the hacker will use a tool to automate the password guessing with an accompanying dictionary file: a file that contains every single password the hacker wants to try. Usually there aretens of thousands of passwords in a dictionary file and the hacking tool tries them all, pounding the server with logon attempts: hence the term brute force hacking.
Impact Of Password Guessing in Terminal Server environments
As in other fields of security, Terminal Server environments take up a special place. This is because Terminal Servers, by their very nature, allow interactive access. Interactive access in this context means that you’re logged on to the server itself. This is the same effect as if you were walking up to the console in the datacenter and logging on there. This basically allows you to execute any program you can get your hands on and run it in the memory space of that server. Another significant issue that arises from the fact that Terminal Servers are in the business of allowing interactive access, is an issue with the admin lockout. As you probably know, by default, the local administrator account cannot be locked out. Even if you use the passprop utility, you can only lock out the administrator account for remote logons, not interactive (Terminal Server logons). Only using passprop on Windows Server 2003 allows you to lock out the local administrator account. Because this could effectively completely lock you out of your own network, this isn’t a configuration that is used a lot. Hackers know this and use this knowledge to perform brute force hacking attempts on administrator accounts.
Terminal Server Brute Force Hacking tool: TSGrinder
There are a couple of tools out there which allow you to perform brute-force password guessing in your Terminal Server environment. The most well-known however is a free tool called TSGrinder. TSGrinder is a command line tool which very basically allows automating password guessing via RDP connections. TSGrinder is a "dictionary" based attack tool, supports multiple attack windows from a single dictionary file (you can specify this on the program command line). A very interesting option in the program is the “leet” function. This leet function enables the program to cope with a popular development in password-land. What I mean is that, from the knowledgeable user up, people tend to secure their passwords by replacing letterswith well-known symbols. For example, password becomes p@ssw0rd (replacing a’s with @’s and o’s with 0’s). This is a very well thought thorough option because as we will see trying these passwords does not require you to change your dictionary file. Another very interesting option is the “banner” option. What this option does, is acknowledge any messages prior to log on. These are the kind of messages that you have to acknowledge before you can log on to a server, usually a legal disclaimer of some sort. This logon message can be set in Group Policy in Computer Policies > Security Settings > Local Policies > Security Settings > Interactive Logon. This was an issue in earlier versions of TSGrinder but that has been fixed now. This option basically renders the banner message useless as a countermeasure to these kinds of attacks. TSGrinder also supports multiple password attempts in the same connection, and allows you to specify how many times to try a username/password combination within a particular connection (the default is 5) . This is used by hackers to help avoiding detection, because by default after 5 unsuccessful logon attempts, the Terminal Server ends the connection and an event is logged to the Terminal Server event log. The event looks like this:
So in the default config of TSGrinder you could have someone trying about 1,000,000 passwords and there would not be a single event in the event log (auditing excluded, we’ll get to that). Let’s take a look at TSGrinder. The program comes with a very limited dictionary and leet file. You can be sure that hackers have far more advanced dictionaries. Running TSGrinder from the command line yields the help:
Usage: tsgrinder.exe [options] server Options: -w dictionary file (default 'dict') -l 'leet' translation file -d domain name -u username (default 'administrator' -b banner flag -n number of simultaneous threads -D debug level (default 9, lower number is more output) Example: tsgrinder.exe -w words -l leet -d workgroup -u administrator -b -n 2 10.1.1.1
As you can see usage is pretty straight-forward. You can try it on your own test server, just like I did.
Disclaimer: Use extreme caution when using this tool. Using TSGrinder could result in legal actions taken against you because your actions could be considered a real hacking attempt.
In this very simple example we will assume that:
* we have a dictionary file called “testdict”
* we have a leetfile called “testleet”
* the username we are attacking is the default, administrator
* we want to acknowledge any logon banner messages
* we want to have 1 simultaneous thread
* the server we are attacking has the following IP address: 192.168.62.53
That would leave us with the following command line:
tsgrinder.exe -w testdict -l testleet -b -n 1 -D 8 192.168.62.53
As you can see in the screenshot below, after a while, tsgrinder neatly finds that I’ve been using P@55w0rd! as my administrator password. It’s that easy.
Countermeasures
OK, now that you’ve seen how easy it is to attack your Terminal Server environment, it’s time to take countermeasures. Here are some concrete suggestions that can help prevent these kinds of attacks. Rename administrator account You should know that renaming the administrator account is considered a best practice. If you were not aware of that earlier, I sure hope you are now. When you rename the (local) administrator account, the hacker cannot use the administrator account to attack and must know the exact name of the renamed administrator account. This also has the added advantage that you can create a dummy administrator account that can be locked out (you do have account lock outs configured, right?) Connection Security Ideally you would want to make sure that users are already somehow checked before they attempt to logon to a Terminal Server. This used to be a huge hassle but now there’s a free tool available that does just that and more! The tool is called 2X SecureRDP. 2X SecureRDP works by accepting or denying incoming RDP connections by IP, Mac address, computer name, client version or based on time of day, before the logon screen is even displayed. This significantly enhances the control you have over your Terminal Servers. As an added bonus you can limit users to one concurrent session. This doesn’t really prevent brute force attacks from happening but it’s a very nice feature that I know many administrators are looking for. Another great feature of this program is that you can log information for every allowed or denied connection and save it to a log file. Below is a screenshot of 2X SecureRDP.
Of course, this tool is not just for Terminal Servers,. It greatly suits every server you access via RDP. In fact, I recommend using this tool on every RDP enabled server. Auditing Enable extensive auditing. OK, so this doesn’t prevent brute force attacks from happening but at the very least it allows you too log these kinds of attacks. You should audit successful and failed logons events. Because these audit logs tend to get cluttered very soon on a busy server, you should consider an automated audit tool. These kinds of tools monitor and filter the security event logs for you so that you can see what you need to see and be alerted when anything goes bad. An example and my personal favorite of such a program is SELM (Security Event Log Monitor) from GFI. See a list of well-known similar programs here. Logon Message You should configure all of your servers to display a message at logon that must beacknowledged before you can proceed to log on to a server. This really isn’t a technical countermeasure but more of a legal one. Once you’ve acknowledged the logon message, there’s no way the perp can say: “I had no idea I wasn’t supposed to log on to that server”……..
Conclusion
Terminal Server environments are juicy targets for hackers. In this article I showedsome techniques hackers can use to perform brute force attacks against local administrator accounts. I also showed you what you can do to prevent these attacks. Please keep in mind that these are just pointers and only make up a small part of thesteps you should take to secure your Terminal Server environment.
How to access the protected and so called phished out sites in a college subnetwork or office subnetwork....ALso access the GTALK and Yahoo and any messenger and chatting softwares....?
lets say that ur behind a firewall in a lan subnet in which ur college school or office provides u internet but with restricted sites...that is u cant open any other site except those allowed....in my college we use a software to access sites out of restriction by a software named ultrasurf...its completely automatic and actually works....our college tried to stop us very vehemently but failed to restrict this software as its coding is just like vry hard to decrypt...anyways lets go!!!
Download a software from this site
....
http://www.wujie.net/downloads/ultrasurf/u.zip
(tested TROJAN FREE)
its called ultrasurf !!!
see how it works... u just have to extract the exe file outta zip file....then run the exe file...it will automatically detect ur network and router or proxy server...theere are 3 bars which will be flooded with connectivity indicators....now ur free to access anything.....just change ur browsers ip to 127.0.0.1 and port to 9666 and u can access anything....works for chat softwares too..like gtalk and yahoo////
our college had restricted our download limit to 1 mb...but using this we had been downloading one whole movie everyday.....with full speed of 136kbp/s ...since am in lan but can access internet as my college provides me so basicallyall i do gets recorded in college server logs...but using ultra doesn't even leaves a piece of log behind u.....
so start enjoying...this is my first post...if permitted i will be posting more soon guys!!!!!!
Subscribe to:
Posts (Atom)
Counter
