The Life of a Penetration Tester: How To Hack A Website - Simple Demo | Kali Linux /...

The Life of a Penetration Tester: How To Hack A Website - Simple Demo | Kali Linux /...: Written by: Pranshu Bajpai | Find Pranshu on Google+ And LinkedIn I was testing for SQL vulnerabilities at random over the Internet and ...

अपने इन्टरनेट की गति बढ़ाएं DNS cache को हटाकर

By- Asif

flushdns

DNS cache को ऑपरेटिंग सिस्टम स्वतः ही स्टोर करता रहता है वो इसलिए की पहले जो साइट्स आपने अपने कंप्यूटर पर खोली है, दुबारा खोलने पर वो जल्दी खुल जाएँ। हांलाकि ये बहुत उपयोगी है पर इसके कुछ नुकसान भी हैं जैसे कि इसकी वजह से किसी वेबसाइट का पुराना वर्जन खुलना, ब्राउजिंग की गति कम होना आदि। इसलिए समय-समय पर इसे हटाना बहुत जरुरी है। इसे आप तब भी प्रयोग कर सकते हैं जब आपके इन्टरनेट कि स्पीड कम होने लगे।

DNS cache को कैसे हटाये?

इसको हटाने का साधारण सा तरीका है -->
अपने कीबोर्ड से विंडो Key+R दबाएँ,
अब रन बॉक्स खुलेगा इसमें टाइप करें CMD और ओके करें,
अब कमांड प्रोम्प्ट खुलेगा, इसमें टाइप करें ipconfig /flushdns  और इंटर Key प्रेस कर दें,
कुछ हि समय में DNS cache हट जायेगा ..

तत्काल टिकट

FASTER IRCTC WEBSITE DURING TATKAL HOURS

Do you ever noticed the IRCTC website different look during the Tatkal hours. Now during the Tatkal booking peak time till 11: 59 AM the IRCTC website avoided the advertisements and non necessary links for faster loading the web page. The advertisements avoided both IRCTC Login Page as well as Travel Planner page.

During Tatkal Ticket booking peak hours IRCTC booking login page displayed following message "Experience the new lightweight version of website during tatkal hours"

IRCTC Login Page During the Tatkal Booking 

Almost all the IRCTC customers appreciated this move while booking their tickets during the peak booking hours.

Reverse Engineering

Cracking using OllyDbg

What is cracking? I would like to introduce you now to a more advanced and professional cracking technique, cracking using a debugger. What is a debugger? In few words, a debugger is a software that will let us look in the asm code before and after the code is executed by the cpu. The debugger will pause the the execution of the code and will allow us to trace it step by step as the cpu executes it. All crackers uses a debugger, even W32Dasm has a debugger built in but is not very confortable. The most advanced debugger for cracking used by all crackers is OllyDBG, this tool will become your friend, your partner, it will be for you the tool number one! Configurations of your OllyDbg: Let's do some configurations, press alt+o to access options and go to the CPU menu. Make you settings look like in this picture: After this go to EXCEPTIONS menu and make your settings look like in this other picture: Ok, we are done for now. We will use olly for everything, like patching, finding serial keys, unpacking, studing, etc.  We will start our first lesson with olly by finding the serial key of a crackme, during tracing the code it will be very easy to understand where we should patch if needed. Our mission in this lesson is to find a serial key for our entered name. Step 1:  Run the crackme and you will see that it needs a name and a serial number, enter some fake info... click on check serial... :? nothing happens Lets find a real serial for our name now! Disassemble our target with w32dasm then click on the imports button. See the picture below: On the dialog box that shows up find this: USER32.GetDlgItemTextA like in the picture below: Select it like in picture above and double click on it, you will land at the address: 004011DF (write down this address), just a bit below this we have an other reference to USER32.GetDlgItemTextA at the address 004011F0 (write this address down too). Close W32Dasm, we don't need it anymore.  Step 2:  Run OllyDBG and click on file, open, browse to our crackme and open it. Cool, you should see the asm code now. Press F9 button from your keyboard then the crackme should show up. Enter your name and any serial number but don't click on "check serial" button yet. I will enter MiStEr_X as name and 12345 as serial. Return to OllyDBG then click on "Go to Address" button. This button is indicated in the picture below: picture5: On the blank box enter the first address we did found on w32dasm, 4011DF then click ok! You will be here: PUSH 019h PUSH 0403096h PUSH 066h PUSH DWORD PTR SS:[EBP+8] 004011DF CALL GetDlgItemTextA ;read the entered name PUSH 01Eh PUSH 0403078h PUSH 065h PUSH DWORD PTR SS:[EBP+8] 004011F0 CALL GetDlgItemTextA ;read the entered serial CMP EAX,4 ; compare entered name with 4 JB @crackme__00401245 ; jump if below (if our entered name is smaller than 4 digits then jump) GetDlgItemTextA is used in asm to retrive the information entered by users in blank boxes! Now, put the selector line on "004011DF Call GetDlgItemTextA" then press the F2 button from your keyboard to set a breakpoint. Go to the second address to and set a breakpoint there too by pressing F2. See the picture below to see my breakpoints. The addresses highlighted with white means that there is set a breakpoint. picture6: Bring up the crackme from the taskbar and click on "check serial" Olly will break on the first breakpoint, now press F9 (run) and Olly will break on the other breakpoint we did set. The first breakpoint was for the name we have entered and the second is for the serial number. Now trace line by line slowly with F8 button until you are on the address "0040121F" picture7: Refering to the picture too, you must be on this line: 0040121F CMP EAX, EBX Let's explain what does this mean, CMP means compare, eax register is storing the fake serial we did enter and ebx register is storing the real serial number for the entered name. Check this on the top-right of your screen, in the above picture are number 2 and 3. EAX has the value 12345 that is the fake serial I did enter and EBX is has the value 2EB. Can 2EB be the real serial number for the name MiStEr_X?? Yes it is, we did found a real serial number and we can find a serial for any name we enter by following the procedure of this tutorial. Enjoy! As you see, on the address .40121F the protection of the crackme is comparing our fake serial with a real serial for our name. For Free download of the Crackme used in this TUT: .com/?d=8LR2DG1R]http://www.[removed].com/?d=8LR2DG1R For Free download of Olly please go to: http://www.hackforums.net/showthread.php?tid=2024814 w32dasm: http://www.softpedia.com/get/Programming/Debuggers-Decompilers-Dissasemblers/WDASM.shtml  Tools you may need: Debuggers: DebugView v4.77: DOWNLOAD OllyDbg v1.10: DOWNLOAD Zeta Deb v1.3ugger:DOWNLOAD .NET Decompilers: Dotnet IL Editor v0.2.6:DOWNLOAD ILIDE# v3.0.1799.34705:DOWNLOAD Red Gate's .NET Reflector v7.4:DOWNLOAD Delphi Decompiler: IDR (Interactive Delphi Reconstructor) v2.5.3: DOWNLOAD Visual Basic Decompilers: P32Dasm v2.8:DOWNLOAD VB Decompiler Lite v5.0:DOWNLOAD Disassemblers: Dotnet IL Editor (DILE) v0.2.4:DOWNLOAD IDA Pro v5.0:DOWNLOAD Hex Calculators: HexTool v1.7.0.1:DOWNLOAD Reversers' Calculator v1.2:DOWNLOAD Hex Editors: BIEW v6.1.0:DOWNLOAD Frhed v1.6.0:DOWNLOAD Hiew v6.50:DOWNLOAD HxD v1.7.7.0:DOWNLOAD MiTeC Hexadecimal Editor v6.0.0:DOWNLOAD Memory Hacking Memory Hacking Software v6.1:DOWNLOAD

एयरटेल नाईट पैक

Airtel Night Store Offers Unlimited Plan and Data Pack

2:05 PM  Mobile Zone  No comments

Airtel has launched Night Store for its prepaid customers. The Night Store includes various unlimited voice and data night packs between the price ranges of Rs. 7 to Rs. 49. All the packs in the Airtel Night Store are valid between 12 midnight and 6AM.

Rs. 7 - Unlimited Local Airtel to Airtel Calls
Rs. 8 - Unlimited 2G internet
Rs. 15 - Unlimited Local A2A Calls + Unlimited 2G
Rs. 29 - 500 MB 3G Data
Rs. 49 - 1GB 3G Data
Rs. 1  - Unlimited Facebook Access (3G Speed upto 250 MB and throttling post that)

How to Activate Plan -
1. Open Airtel Official Website Click Here then Choose Your Circle and Click on Select your Night Pack.

2. Choose your plan from the Plan List and Click on Active.

3. Write Your Mobile Number and Email ID then Click on Proceed

4. Click on Confirm

5. Wait a second you will get a One Time Password (OTP) on your mobile number. Write your OTP and check Term & Condition box then Click on Submit

*Amount of the pack will be deduct from main balance. It means you have to maintain sufficient balance in your mobile number for recharging Airtel Night Store.

You can also activate these packs through USSD or IVR 
USSD for activating Airtel Night Store Plans  -  *129#
IVR for activating Airtel Night Store Plans     -     129 

*****************Terms and Conditions****************

All Packs

• Pack applicable between 12 AM to 6 AM valid for 1 night only. If pack is bought between 12 AM to 6 AM, benefits applicable for same night till 6 AM
• Pack applicable for Airtel Prepaid customers only
• Packs can be bought anytime during the day (24 hours) but can be consumed only between 12AM to 6AM

Rs 7 Local A2A Unlimited

• Free local A2A calls applicable for Home circle only. Benefits do not apply while roaming.
• Multiple recharges of this pack on same day are not allowed.

Rs 8 2G Unlimited

• Mobile internet at 2G speeds between 12AM to 6 AM even if customer has any other 3G normal pack
• 3G night store pack, 29/49, will take priority over 2G unlimited circles- (Only in 3G circles)
• Multiple recharges of this pack on same day are not allowed.

Rs 9 Local A2A Unlimited + 2G Unlimited

• Free local A2A calls applicable for Home circle only. Benefits do not apply while roaming.
• Multiple recharges of this pack on same day are not allowed.

Rs 15 Local A2A Unlimited + 2G Unlimited

• Free local A2A calls applicable for Home circle only. Benefits do not apply while roaming.
• 3G night store pack, 29/49, will take priority over 2G unlimited circles- (Only in 3G circles)
• Multiple recharges of this pack on same day are not allowed.

Rs 29/49 3G packs

• None

Facebook Unlimited  Rs 1 – 2G Circles

• Free benefit only for Facebook browsing. Any additional 3rd party content/videos etc. which redirect a customer to another 3rd party site will be chargeable
• After 250MB Facebook data browsing speed 40kbps for all mobile internet usage till 6 AM.
• Pack not applicable if customer has any other active Unlimited data pack
• Pack will be available only post activating the Facebook pack on Night store and will not be given to all by default
• Multiple recharges of this pack on same day are not allowed.
• Facebook pack not applicable if customer already has an active unlimited 2G or 3G pack

Facebook Unlimited  Re 1 – 3G Circles

• Free benefit only for Facebook browsing. Any additional 3rd party content/videos etc. which redirect a customer to another 3rd party site will be chargeable
• After 250MB Facebook data browsing speed 40kbps for all mobile internet usage till 6 AM.
• Till 250MB facebook data usage, 3G speed applicable for all other mobile internet usage
• Pack not applicable if customer has any other active Unlimited data pack
• Pack will be available only post activating the Facebook pack on Night store and will not be given to all by default
• Multiple recharges of this pack on same day are not allowed.
• Facebook pack not applicable if customer already has an active unlimited 2G or 3G pack

How to Book Confirmed Tatkal Train Tickets [IRCTC]

Tatkal ticket is the only way when you have to travel by train in emergency. It can be booked 24 hours or 1 day before departure date of the train. Problem is that you don’t get Confirmed Tatkal Tickets as quota is less and IRCTC Website doesn’t load easily during peak hours.

Not just the less quota is responsible for it but also there are many issues like Server Failure (due to load or done deliberately), Mass booking by IRCTC Agents and moreover Luck.

Here, I will share some tricks by which you can get a confirmed tatkal ticket on the go. Most of the Time is consumed filling up form details so, we’ll try to minimize that first.

Updated on 05th May 2012

Trick mentioned earlier used “Quick Book” feature of IRCTC Website but it is no more available during 10:00 to 11:00 AM IST so, only the regular booking option left for you.

Don’t worry because it is not just you but Quick Book won’t be available for anyoneso just concentrate on minimizing time spent on each step while booking.

1. Things You Will Need

Go to erail.in and enter the station name and Date. Search Result will get first two things. If you are on windows 8, you may also try out Free Indian Railways Enquiry Apps for Windows 8.

• Station Code – Though, Auto-suggestions are provided while typing out Station name but many a times it won’t or may time time. So, Entering Station Code yourself is recommended.
• Train Priority – By knowing the train names, you can decide upon which Train to try first.
• Identity Proof of any one Passenger- It is recommended to write down Driving License No or Voter ID or PAN Card number on Notepad and Copy it.
• 3 Web Browsers - Install Mozilla Firefox, Google Chrome and Opera on your System.
• Multiple IRCTC Accounts – Don’t make it with Fake Details but one yours and other can be your Wife’s/Father’s or Friend’s account. At least two are recommended.

2. Trial Run

This Step has to be carried out 1 Day Earlier or before 9:30 AM on the day of booking. What I mean by trial run is carrying out booking steps as we are going to do as in Tatkal. Only difference is using “General Quota” option and closing the session on Payments page.

Why Trial Run?To Keep Travelers’ Name in Browser Memory and don’t have to fill out all names while booking Tatkal. Just Mouse Click on Form Field will suggest names and can be entered without typing. This will save significant amount of time if there are more than two travelers.

Also, if using Credit Card, it can be used to save that 16 digit number separated in 4 form fields.

3. Keep Session Active

Tatkal Train ticket booking starts at 10 AM. So, you need to gear up early (say 9:40 AM) and try logging in Website before clock strikes 10 AM.

Open all 3 Web Browsers and login into IRCTC Website using different IDs and keep it active.

To do that, Find Trains in General Quota on same date, it will take few minutes and that’s what we want- just pass time till 10:00 according to IRCTC timing.

4. Start Booking

If the clock at IRCTC page says it is already 10:00:00 Hrs then start with the procedure one by one on all Browsers. Fill out the form just by double clicking mouse and entering the suggested names.

Keep in Mind – Never trust on the progress of booking on any procedure until you see the CONFIRM Ticket booked page. Keep going through the steps on all browsers simultaneously and stop not until at least 1 says “Booked”. I have personal experience of getting error message at the final steps so beware.

My Question is:

1. Why Log in from Multiple Browsers?
   A – Just in case, you get “Service Unavailable” message or sometimes some browser gets lucky to get your requests done quicker.
2. Why Multiple Accounts when I can do it from One on all browsers?
   A – If we are keeping process on going from different browsers on same account, chances are that, at the last time moment, IRCTC will reject your transaction saying one or more session open.
3. Why Not AutoFilling Addons instead of Trial Run?
   A – You can use them too if you know but as here we are dealing with multiple browsers, Trial Run will be same for all and work in similar fashion.
4. How to Deal with “Service Unavailable” or “Unable to Connect”
   A – Generally happens after train selection or filling out any form. Press Reload button and click on “Resend Data” when pop-up appears.

What does CKWL Tatkal Ticket means?

In a rare case, it may happen that while moving on to bank webpage, you are shown Availability but till you come back, the ticket provided has status CKWL.

CKWL means the Waiting List in Tatkal Quota which differs from GNWL (General Waiting List). In my case, CKWL 5 was cleared up within 2 hours of booking but it may vary train to train.

The above procedure tries to minimize the time spent in filling up forms and speed up tatkal booking so, you can grab confirm tatkal ticket before the quota is over. Good Luck and let us know of your success rate in getting a confirm tatkal ticket.

You may feel that the procedure is too lengthy to follow but read it once completely, it will take time in first shot especially for non tech-savvy people but it is easy to follow and a matter of getting Confirmed Tatkal Tickets

तत्काल टिकट बुकिंग

                                                 

IRCTC Tatkal Booking Tips,

First Go to the link     http://www.irctcpnr.in/irctc-autofill

Press Ctrl+B. Create a folder named irctc in the Bookmarks

Now Click on Login tab. Enter your irctc Login Credentials and click on Create Autofill
You will see a button name Login(Drag me to Toolbar)
Now right click on Login(Drag me to Toolbar) click Bookmark this link, or drag it to  the irctc  folder you created in Bookmarks.

Repeat the procedure for Plan my travel and Passenger details as well after filling the data.

Credit Card  Details. 
Please do not use this technique for entering credit card details. As it is highly dangerous,
The data could be saved in the website and could be used illegally.
I don't recommend using this technique for entering credit card details.
If you use it, it's purely under your own risk.

Please remember whatever data you enter here will be filled in the irctc website,
So enter the data carefully. If you enter any wrong or dummy data that will be reflected in your irctc main website while booking tatkal ticket.

You need to do the above steps before 9:50AM. You should finish the above steps atleast before 9:55AM and keep the links ready by then.

If you have very high internet speed login at 9:57AM. Don't refresh or press back after loggin in.

Synchronizing your system time with the irctc server time accurately is highly important. To synchronize the time. Login to irctc website, After logging in you will see the server time on top right inside the yellow ribbon enter this time in your system even the seconds immediately ASAP. This is an essential step.

Last but important step, Register for irctc eWallet. This has several advantages First let us see how it works. When you select payment option, the IRCTC server transfers you to the bank server. The bank server after confirming your payment transfers you back to IRCTC server confirming payment. If something happens in between like loss of internet connection or slow connectivity then you are lost. You miss the chance of booking the ticket. So if you have IRCTC eWallet, the money will already be transferred to your eWallet and need not wait for bank servers and you save lot of time by bypassing transfer from IRCTC server to Bank server and again from Bank sever to IRCTC server for payment confirmation.

Details about IRCTC eWallet can be seen here.
https://www.irctc.co.in/betaDoc/IRCTC%20E%20Wallet%20User%20Guide.pdf

Now goto irctc.co.in at 9:55AM.
Now click on the login link in the bookmark that you created. Login data will be entered and you will be logged in to the website.

After logging in, Click on plan my travel link in bookmark. It will enter journey details.

And you will see the train details. Select the train you wish to travel.
Now if you have selected the train before 9:57AM. Click on the same train again at 9:58:30AM. So that you will not expire you session when you click on "Book".

If you finished above steps before 10AM. Wait for the system clock to cross 10AM. After few seconds over 10AM. Click on "Book" depending on the availability.

After clicking the "Book", You will be taken to the passenger details page. Here click on the Passenger details link you created. It will automatically enter
the details of the passenger including the mobile number for sending sms.

Immediately enter the verification text correctly and click on Go. You will be taken to payment page, select the payment method and clear the payment page as soon as possible. Now wait with the fingers crossed hoping for a confirmed ticket.

Remember timing is highly crucial for every single minute you are losing 1000s of tatkal tickets. And also delay causes you session to expire.
You need to finish all these steps within 10:05AM(I know it is highly impossible, but do the steps from you side ASAP). Success rate goes on decreasing drastically after 10:10AM.

Steps for increasing you probability:  

1)  Login with alteast two different userid in atleast three simultaneous tabs initially instead of waiting in single tab. But after logging in any one tab close the remaining tabs quickly. You should now have two tabs with two different users logged in (not same user). Proceed with two tabs simultaneously so that if you get error in one tab you can use the other one.
(But remember two logins should not be of same user and also while proceeding for payments proceed with any one of the login. If you give payment in both
user id amount will be deducted and also there are chances that ticket can be booked in both ids, If so you will not get refund on cancellation)

2) Higher the internet speed you have, better are the chances of booking confirmed ticket. As per my observations please avoid BSNL and MTNL connections for booking as they are loaded with heavy traffic that it makes practically impossible to book a ticket successfully.

  

3) Do not use any software or any hacking tools that are available in the internet for booking tatkal ticket, as hacking government website is an offense according to "Information Technology Act 2000" and you could be caught and punished with upto 7-10 years of imprisonment.