Windows Hack To Redirect any Website

April 30th, 2009

With this simple hack you can automatically redirect any website to your desired location. This can be a nice little trick when used as a parental control to redirect porn sites to your desired ones.

Here is how you can do it:

1. Goto Start–>Run… and type    %windir%\system32\drivers\etc

2. From the windows that pops up, find a file named hosts and open it with notepad

3. For example, if you want to redirect blogger.com to bloggersbase.com
(yah I mean it coz bloggersbase is gonna be the next blogger) type below syntax to the last line of the file and save it.

64.225.152.244     blogger.com     #redirect blogger to bloggersbase

In the above syntax 64.225.152.244 is the IP of bloggersbase.
So this is the place to give the IP of the website to which the url entered next has to be redirected. Maintain atleast one space between them.
Also you can add your comments to the line with a “#” symbol before the comment.
Better use this comment section to denote where you have redirected any site for future reference.

Now, when you type blogger.com in your browser address bar you will be taken to bloggersbase. Hope you will be amazed with the happenings.

This can also be used as a dirty little trick on your friends PC, to redirect him to your site when he tries to visit famous sites like Facebook or twitter.

And if you want to remove the redirection just delete the line you have added and save.

Here is how you can find the IP address of any web site:

Go to Start–>Run.. and type cmd or command and click OK which open the Command Prompt Window(DOS).

Now, to know IP address of bloggersbase.com enter the following command

ping bloggersbase.com

This will return a result similar to the following that contains the IP address:
Pinging bloggersbase.com [64.225.152.244] with 32 bytes of data:
. . . . . . .

Try this trick on your PC and post in your valuable comments giving more ideas of where this trick can be used.

plz don’t use this trick for any harassment

How-To Hack Web Cameras Using Google Search Tricks

April 30th, 2009

This trick works on all those web cameras without password.
Google Search any of these to hack and view the live web cameras.

inurl:/view/index.shtml

inurl:view/shtml

inurl:”viewerframe?mode=refresh”

SNC-RZ30 HOME

inurl:live view/-AXIS

inurl:”viewerframe?mode=motion”

intitle:Snc-rz30

intitle:liveapplet

inurl:home/

inurl:lvappl

For hacking the web camera on a particular ip address, type in that ip in place of inurl

Try it yourself and post in your valuable comments.

9/11 Q33N notepad trick

April 30th, 2009

Do you have a car of your own?? Is it having a remote control car lock system??
Assume that you have locked your car parking it somewhere far from home. On the next day when you wanted your car you have gone there leaving the remote lock at your home. Then How-to open the car door?? The solution is quite simple if you have cellphones, one with you and one at your home.

** Just call some one at home at his/her cell phone and ask for the duplicate keys

** Now, as usual the key chain of duplicate key would also be having the remote control, so ask the person at home to press the unlock key on the remote.

** While the person press the unlock key hold your mobile phone about a 10-12 inches from the car door.

** The unlock signal will travel on the cell phone network and your car will be unlocked

This amazing trick have been tested on many cars and is found working in almost 90% of the cases.

Try it yourself and post in your valuable comments.

25GB Free Online Storage @ Windows Live SkyDrive

April 30th, 2009

Software Icon ‘Micorsoft’ is providing netizens a new Password-protected online file storage drive named Windows Live SkyDrive with 25GB of free online storage. It is mainly designed to make data always available to the users where ever they need it.

Anyone having Hotmail or Windows Live account can access this drive. Infact, One Windows Live ID gets you into Hotmail, Messenger, and Xbox LIVE. So its always better to sign up for Windows Live account.
You can use this SkyDrive to upload and share documents, photos, videos etc., but the upload size is 50MB per file. You can upload upto 5 files at a time and the upload/download speed is quite good.


You can even embed files in your site. Here is the song (Jai Ho) from Slumdog Millionaire that has won Academy award for the best original song 2008

Newest method of spamming that cannot be stopped:ASCII Spam

April 30th, 2009

An old computer art form is making a comeback as a newer way to evade spam filters.

For decades, computing fans have enjoyed a form of expression called ASCII art that shows pictures or messages as a low-resolution graphic, a grid made of numerous computer characters encoded with the venerable ASCII standard. With a photo digitized with ASCII art, for example, the “#” character can represent a dark pixel and “.” a light pixel. And there are large fonts constructed from an assemblage of individual characters.

Now the technique has surfaced as a way to transmit information that’s hard for spam filters to detect–but that so far, at least, has proved relatively harmless beyond that stage.

An example of ASCII art spam.


An example of ASCII art spam.

“There’s been an upsurge in ASCII spam in the last week…It’s quite effective in getting through filters,” said Chris Boyd, director of malware research at messaging management firm FaceTime Communications.

But earlier efforts to use ASCII art for spam have proven to be duds, he added. “The downside is that 9 times out of 10, it’s completely useless because it’s almost impossible to read, or it’s a really bizarre picture of a naked lady that’s not clickable,” Boyd said.

Evasive maneuvers
Spam filters can detect the word “Viagra” and suspect Web addresses of sites trying to get rich quick by catering to the demand for the drug. But it’s another thing altogether to detect an ASCII art version of the same word. Indeed, an ASCII art spam e-mail reading “Viagra-$1.15? and “Cialis-$1.99? made it past the spam filters of my Yahoo Mail and Gmail accounts.

Google declined to comment specifically on ASCII art spam. “We expect spammers to use every means possible to try to send spam. That’s why we have a very robust spam-fighting effort at Google,” the company said in a statement. Yahoo didn’t respond to a request for comment.

Here’s why it’s clever. One line of the e-mail is “78 46 60 11 04 75 300 38 0348 18 61 55171?–gibberish that hardly resembles part of the word “Viagra” or a suspect URL. But reading it on my screen as part of the overall text, its meaning was clear to me in a flash. And a spam generation program could evade spam filter fingerprinting by randomly substituting other numbers into the text art.

Clever–but largely ineffective
The only trouble for spammers: the very reason the art spam is hard to screen out also makes it, well, somewhat impotent as a spam method.

The example spam I got, for example, didn’t include any handy URLs I could click. There was a Web address in the ASCII art, but I’d have to type it in myself. But adding an active URL to a spam-affiliated site is likely to catch the attention of the spam filter.

“They’ve got this great idea for getting past the servers, but they don’t seem to know how to employ it as effectively as they could,” Boyd said. “Combining this with effective spam techniques might be more effective” for the spammers, he said.

Another problem: With the variety of fonts, computers, and e-mail-reading applications in use today, there are good odds ASCII art spam will look like gibberish to the human reader as well as to the spam-checking filter.

ASCII art in action
Here’s an example of ASCII art from one of many Joerg Seyfferth’s ASCII text generator, one of many on the Internet.



If you're interested in learning more on how spammers work, how they send
billions of emails, you can contact me -LikeMesLolka ( Matthew Jain) on the chatbox,
I'll tell you my PGP public key.


since its notplaintext

Right now the way Bayesian Filter work, they will not be able to counter such SPAM

Hosting files on free servers

April 30th, 2009

Most File Sharing sites like RapidShare, Megaupload etc. survive due to peoples’ wish to pirate the “commercial” software. Although uploading stuff on such servers can be unrelaiable – and this guide caters to it.

As the God says,

“Thy Files : multiply and fill the web in the realm of depths, and let knowledge and data flow freely and let all work that has been digitised multiply on the earth once for all, despite the preposterous claims of the beastly commercial patent holders.

Introduction

We are well aware of the problems. We spend time uploading a file somewhere, post it on the web and within minutes/ hours it disappeared due to ” breach of the Hosts terms of service ” .

This is small guide to keeping your files online longer and keeping your downloaders happy.


The issue

Free hosting providers for files pretend that they totally agree with the anti-piracy laws. Which in turn is not true ! Their business model is entirely based around money making from people uploading copyrighted content to their servers (and hence promoting software theft). They mint money from their flashy advertisement banners and “premium” subscription charges that they levy on users wishing to mass download. The issue arises when somebody complains about a file on their servers, usually either who is the owner of the content uploaded or someone who just gets his kicks from having the files taken down. Unfortunately there is not a foolproof way to stop either, but you can prevent this from happening to a good extent using the tacts below.

1- Before Uploading

Firstly, Before uploading your files, make sure you compress them with WinRAR or Winzip. Also use a random password , this shall stop anyone finding your files anywhere but the site you posted them on, which thus prevents them from seeing what’s inside ( until YOU supply the password).

Secondly, give your files a name that is not related to the files actually being posted; just in case if you are uploadi a file named MicrosoftOffice2007.rar, anyone who comes across that file anywhere on the web is going to have a good idea of what’s inside the file and hence can complain and get it taken down from the FileSharing server. Had you renamed it eventphotos.rar anyone coming across the file other than from where you posted it will shall find it uninteresting and ignore it.

2- Distributing files

Use Sharebee, it first uploads the files once to its server, then uploads its copies to several other services giving much more varied choice to people who download your files. This stops downloaders complaining about you using <insert website here> and makes it much more difficult for people to let the file taken down as they then have to send emails to multiple sites. The only site I know of that has survived the kill over time is ShareBee.

3- Link or URL Obfuscation

After uploading the file and getting the download link. Before posting it to a forum/website make sure you use a url obfuscation serive. This stops file indexers putting your file on their services for anyone to easily find and also stops people searching the web for strings like this. Its easy takes seconds a little time only, you’ve to just copy the original download link to one of these services, paste it in, and you get a new link that you can post.

TinyURL

Mobile Cheat Stuff

April 29th, 2009

NOKIA

1 Imagine ur cell battery is very low, u r expecting an important call and u don’t have a charger.

Nokia instrument comes with a reserve battery. To activate, key is “*3370#”

Ur cell will restart with this reserve and ur instrument will show a 50% incerase in battery.

This reserve will get charged when u charge ur cell next time.

*3370# Activate Enhanced Full Rate Codec (EFR)-Your phone uses the best sound quality but talk time is reduced by approx. 5%
#3370# Deactivate Enhanced Full Rate Codec( EFR)

*#4720# Activate Half Rate Codec – Your phone uses a lower quality sound
but you should gain approx 30% more Talk Time
*#4720# Deactivate Half Rate Codec

2 *#0000# Displays your phones software version,

1st Line :S oftware Version,
2nd Line : Software Release Date,
3rd Line : Compression Type
3 *#9999# Phones software v ersion if *#0000# does not work

4 *#06# For checking the International Mobile Equipment Identity (IMEI Number)

5 #pw+1234567890+1# Provider Lock Status. (use the “*” button to obtain the “p,w” and “+” symbols)

6 #pw+1234567890+2# Network Lock Status. (use the “*” button to obtain the “p,w” and “+” symbols)

7 #pw+1234567890+3# Country Lock Status. (use the “*” button to obtain the “p,w” and “+” symbols)

8 #pw+1234567890+4# SIM Card Lock Status.(use the “*” button to obtain the “p,w” and “+” symbols)

9 *#147# (vodafone) this lets you know who called you last *#1471# Last call (Only vodofone)

10 *#21# Allows you to check the number that “All Calls” are diverted To

11 *#2640# Displays security code in use

12 *#30# Lets you see the private number

13 *#43# Allows you to check the “Call Waiting” status of your phone.

14 *#61# Allows you to check the number that “On No Reply” calls are diverted to

15 *#62# Allows you to check the number that “Divert If Unrea chable(no service)” calls are diverted to

16 *#67# Allows you to check the number that “On Busy Calls” are diverted to

17 *#67705646#R emoves operator logo on 3310 & 3330

18 *#73# Reset phone timers and game scores

19 *#746025625# Displays the SIM Clock status, if your phone supports this power saving feature “SIM Clock Stop Allowed”, it
means you will get the best standby time possible

20 *#7760# Manufactures code

21 *#7780# Restore factory settings

22 *#8110# Software version for the nokia 8110

23 *#92702689# (to rember *#WAR0ANTY#)

Displays -
1.Serial Number,
2.Date Made
3.Purchase Date,
4.Date of last repair (0000 for no repairs),
5.Transfer User Data.
To exit this mode -you need to switch your phone off then on again

24 *#94870345123456789# Deactivate the PWM-Mem

25 **21*number# Turn on “All Calls” diverting to the phone number entered

26 **61*number# Turn on “No Reply” diverting to the phone number entered

27 **67*number# Turn on “On Busy” diverting to the phone number entered

Each command is prefixed with either one or two * or # characters as follows:
** Register and Activate
* Activate
## De-Register (and Deactivate)
# Deactivate
*# Check Status
© Call button

Once each command has been entered, if it is a network command (as opposed to a local handset command) it must be transmitted to the network by pressing the YES (receiver) key which acts as an enter key – this is represented here with the © character. Always enter numbers in full international format +CountryAreaNumber ( e.g. +447712345678).

Command Description Command String
Security
Change call barring code **03*OldCode*NewCode*NewCode#©
Change call barring code **03*330*OldCode*NewCode*NewCode#©
Change PIN code **04*OldPIN*NewPIN*NewPIN#©
Change PIN2 code **042*OldPIN2*NewPIN2*NewPIN2#©
Unlock PIN code (when PIN is entered wrong 3 times) **05*PUK*NewPIN*NewPIN#©
Unlock PIN2 code (when PIN2 is entered wrong 3 times) **052*PUK2*NewPIN2*NewPIN2#©
Display IMEI *#06#
Call Forwarding (Diversions)
De-register all call diversions ##002#©
Set all configured call diversions to number and activate **004*number#©
De-register all configured call diversions (no answer, not reachable, busy) ##004#©
Unconditionally divert all calls to number and activate **21*number#©
Activate unconditionally divert all calls *21#©
De-register unconditionally divert all calls ##21#©
Deactivate unconditionally divert all calls #21#©
Check status of unconditionally divert all calls *#21#©
Divert on no answer to number and activate **61*number#©
Activate divert on no answer *61#©
De-register divert on no answer ##61#©
Deactivate divert on no answer #61#©
Check status of divert on no answer *#61#©
Divert on not reachable to number and activate **62*number#©
Activate divert on not reachable *62#©
De-register divert on not reachable ##62#©
Deactivate divert on not reachable #62#©
Check status of divert on not reachable *#62#©
Divert on busy to number and activate /td> **67*number#©<
Activate divert on busy *67#©
De-register divert on busy ##67#©
Deactivate divert on busy #67#©
Check status of divert on busy *#67#©
Change number of seconds of ringing for the given service before diverting a call (such as on no answer). Seconds must be a value from 5 to 30. De-registering the same divert will also delete this change! **service*number**seconds#© (Service numbers, see below)
Call barring
Activate barr all outgoing calls (see Security to set code) **33*code#©
Deactivate barr all outgoing calls #33*code#©
Check status of barr all outgoing calls *#33#©
Activate barr all calls **330*code#©
Deactivate barr all calls #330*code#©
Check status of barr all calls /td> *#330*code#©<
Activate barr all outgoing international calls **331*code#©
Deactivate barr all outgoing international calls #331*code#©
Check status of barr all outgoing international calls *#331#©
Activate barr all outgoing international calls except to home country **332*code#©
Deactivate barr all outgoing international calls except to home country #332*code#©
Check status of barr all outgoing international calls except to home country *#332#©
Activate barr all outgoing calls **333*code#©
Deactivate barr all outgoing calls #333*code#©
Check status of barr all outgoing calls *#333#©
Activate barr all incoming calls **35*code#©
Deactivate barr all incoming calls #35*code#©
Check status of barr all incoming calls *#35#©
Activate barr all incoming calls when roaming **351*code#©
Deactivate barr all incoming calls when roaming #351*code#©
Check status of barr all incoming calls when roaming *#351#©
Activate barr all incoming calls **353*code#©
Deactivate barr all incoming calls #353*code#©
Check status of barr all incoming calls *#353#©
Call waiting
Activate call waiting *43*#©
Deactivate call waiting #43##©
Check status of call waiting *#43#©
Calling Line Identification
The following only works if CLIP and CLIR are enabled (ask your service provider)
CLIP: Presentation of the number of the incoming call
Activate CLIP **30#©
Deactivate CLIP ##30#©
Check status of CLIP *#30#©
CLIR: Presentation of one’s own number to the to the called party
Activate CLIR **31#©
Activate CLIR for the actual call *31#number©
Deactivate CLIR ##31#©
Deactivate CLIR for the actual call #31#number©
Check status of CLIR *#31#©
COLP: Presentation of the actual number reached (if number called was diverted to another number
Activate COLP *76#©
Deactivate COLP #76#©
Check status of COLP *#76#©
COLR: Presentation of the original number called by the calling party (if the call was diverted to this cellphone)
Activate COLR *77#©
Deactivate COLR #77#©
Check status of COLR *#77#©

BSNL hack for Internet

April 29th, 2009

Free gprs in bsnl


here are the steps to perform:-

Logic: the server has a major bug in it, by which it fails to block two simultaneous connections from the phone and establishes a connection with full internet working,

Supported devices: all phones with multichannel gprs support

For connection on your mobile phone:-

1) Make two connections like bsnlportal and BSNLPORTAL1

(names of profile don’t matter, u can keep one as billgates and shahrukhkhan lol..the basic purpose of names is to enable the user to differentiate between the two accounts,)

2) Select the application you got to have the full connection working on.
Surpassingly “web” now just select “bsnlportal” profile and select a link like wap.cellone.in the page will get open, just press the red button such that the “web” application goes in the background.
Make sure that the gprs connection is still established with the web app. Two parallel lines on the top left of the screen will confirm this

3) Now open any other app that requires web connection like opera. Select BSNLPORTAL and open any other link like wap.google.com, u will get error –

the aim of using the other app is to perform multi-channel gprs,
this is verified by seeing some dots on the pre-existing connection established by “web”

(step 2)

“Access denied.

Technical description:
403 Forbidden – You are not allowed to communicate with the requested resource.”

4) close opera and open web and open a site like esato.com

5) if everything is done as said here then esato will load and voila! We have the whole internet!

For connection on pc.

1)create a connection and enter the number to be dialed as *99***1#

2) enter the following string as extra initialization command

3)now dial from pc, the connection will be established

4)pick the phone and open “web” open “wap.cellone.in” the phone shows error .

5) close “web” and then from the browser open www.google.com
and voila! The whole intenet is here

settings for profiles

apn: celloneportal
ip: 192.168.51.163
port : 8080

leave other fields blank as they are of the least concern!

the browser settings on pc too go the same as mentioned above!

Airtel Hack for free internet

April 29th, 2009

These are all the tricks available !!

Working too!

It cannot go beyond this!!

This write up will explain to you how to speed up your Airtel Broadband connection / solve other problems regarding connection failures due to closed ports.

Although I use Airtel and a Beetel 220 BX modem as my basis for this write up, the same rules can be applied to others as well. So lets get started. First thing make sure your DSL modem is on. Fire up your browser. Type http://192.168.1.1 as the address with the following Username/Password – Username : admin Password : password Note : These are case sensitive. Make sure all are typed in lowercase. Click on Advanced Setup -> NAT in the page that loads. If you do not see these options try entering http://192.168.1.1/main.html as the address. Some routers/modems deliberately try to prevent users from accessing these options. On the NAT virtual servers page click the add button. Now add the port number that you wish to open up. You can even open up a range of ports using the add button. You should see something similar to the screenshot below. Click it to view full image

Beeter 220 BX Screen Shot

This technique can be used for any operating system / modem / service provider. It may vary slightly but the essential principle remains the same.

You need a PC or a Laptop and the required connectivity tools ,ie.,
Serial/USB cable OR Infrared Device OR Bluetooth dongle

1) Activate Airtel Live! ( It’s FREE so no probs)

2) Create TWO Airtel gprs data accounts (yep TWO) and select the
FIRST as the active profile.

3) Connect your mobile to the PC (or Laptop) and install the driver for
your mobile’s modem.

4) Create a new dial-up connection using the NEW CONNECTION
WIZARD as follows

Connecting Device : Your mobile’s modem
ISP Name : Airtel (or anything you like)
Phone Number : *99***2# / Try 99***1
Username and Password : blank

5) Configure your browser and download manager to use the proxy
100.1.200.99 and port 8080.( My advice is to use Opera since you
can browse both wap and regular websites)

6) Connect to the dial-up account. You will be connected at 115.2
kbps (but remember, that is a bad joke).

7) Pick up your mobile and try to access any site. You will get “Access
Denied…”(except for Airtel Live!). IT DOES NOT MATTER.
Keep the mobile down.

8 ) On the PC ( or Laptop) open your browser, enter any address ,
press ENTER and…….WAIT

9) After a few seconds the page will start to load and you have the
WHOLE internet at your disposal

TWO

Under DATA COMM
~~~~~~~~~~~~

APN : airtelfun.com

USERNAME : blank

PASSWORD : blank

PASS REQ : OFF

ALLOW CALLS : AUTOMATIC

IPADDRESS :

DNSADDRESS :

DATA COMP : OFF

HEADER COMP : OFF

Under INTERNET PROFILES
~~~~~~~~~~~~~~~~

INTERNET MODE : HTTP or WAP (both worked for me)

USE PROXY : YES

IP ADDRESS : 100.1.200.99

PORT : 8080

USERNAME :

PASSWORD :

No Risk Here, Try it and Enjoy

Three


1st go to settings menu then to connectivity tab now choose the option Data comm. then “DATA ACCOUNTS” go to new account now the settings r as follows
ACCOUNT TYPE:GPRS
NEW ACCOUNT NAME:A1
APN:airtelfun.com
usr name: (blank)
password: (blank)

now save it
NOW!
go to Internet Setting in connectivity here choose intrnet profile–go to new profile setting are as below
NAME:A1
CONNECT USING:A1(which was created in data comm.)
save it
now u would be able to see it now selest it and take “more” option then select setting here in use proxy option it will be selected no if it is no then change it into yes
now go to proxy adress and give the adress as
100.1.200.99 and then the port number as 8080
Usr name:
password:
now save all the settings u made . come back 2 connectivity
choose streaming settings now in connect using option choose a1 that we created leave the use proxy option as no itself
THESE R THE SETTINGS
now access airtellive! from ur activated SE phone goto VIDEO GALLERY OR VIDEO UNLIMITED(varies according to states) choose live streaming then choose CNBC OR AAJTAK WHILE CONNECTING TO MEDIA SERVER cancel AFTER 9 or 10 sec then type any web adress if it shows access denied then once again select CNBC and wait for a few more sec than before if its fully connected also no prob its free then cancel it or if ur connected then stop it and the internet is ready to take of .GOOD LUCK SE AIRTEL USERS

alternate



For All Airtel Users

Requirements:
1. Airtel live (available 4 free)
2. Nokia series60 handset eg 6600,6630,n series,7610,6670 etc
3. Opera wap browser 4 mobile
Procedure:-

1. Go to ur connection settings and make a new internet profile using the default settings of airtel live. name that new profile as nething(for eg masala); change the home page of that profile to nething u like for eg www.google.com.

2. Go to ur Opera browser and set the default connection as AIRTEL LIVE. this is the original settings u received thru airtel.

3. Go to the services(in n6600) and Web(N6630) and change the default profile for connection as masala (newer one).

**Note: always make sure that ur access point is airtelfun.com

Apply:-

1. Open Opera and u will see that homepage of Airtel Live is opened. Minimize the application.

2. Now open web using the duplicate Profile and u will see that two gprs connections will work simultaneously and at the web or the services page it will show “Unable to connect” or any error. well thats the signal of ur success.

3. Simply go on the Opera with web on and open any site u want for free. No Charges No nothing.

U can also use it through ur computer

U may also Try this


first open ur msg window and type LIVE and send it to 2567 so that after 5 min u get the setting of Airtel Live or if u have already no need for this procedure.
now then open that setting and copy all the settings from it and create one access point manually which has all the settings like Airtel Live has.
now only one change will be there and it would be in access point name which is “Airtelmms.com” instead of originally “Airtelgprs.com”.
ok u’ve done it just active that

Another Trick

You need a PC or a Laptop and the required connectivity tools ,ie.,
Serial/USB cable OR Infrared Device OR Bluetooth dongle

1) Activate Airtel Live! ( It’s FREE so no probs)

2) Create TWO Airtel gprs data accounts (yep TWO) and select the
FIRST as the active profile.

3) Connect your mobile to the PC (or Laptop) and install the driver for
your mobile’s modem.

4) Create a new dial-up connection using the NEW CONNECTION
WIZARD as follows

Connecting Device : Your mobile’s modem
ISP Name : Airtel (or anything you like)
Phone Number : *99***2#
Username and Password : blank

5) Configure your browser and download manager to use the proxy
100.1.200.99 and port 8080.( My advice is to use Opera since you
can browse both wap and regular websites)

6) Connect to the dial-up account. You will be connected at 115.2
kbps (but remember, that is a bad joke).

7) Pick up your mobile and try to access any site. You will get “Access
Denied…”(except for Airtel Live!). IT DOES NOT MATTER.
Keep the mobile down.

8 ) On the PC ( or Laptop) open your browser, enter any address ,
press ENTER and…….WAIT

9) After a few seconds the page will start to load

main thing is the advance initialization command.


Windows Password Loophole

April 29th, 2009

a. ok now, what you need to do is to run compmgmt.msc

b. and click on local users and groups.

c. once you’ve gotten here you need to open up the ‘users’ folder.

at this point i am walking along with you and notice that there are several
major security holes dealing specifically with the password:
1. double clicking on the any user name allows you a list that looks
something like this:
“user name”

full name: ———————–
|__________________|

description: ———————–
|__________________|

|_| user must change password at next logon


|_| user cannot change password


|/| password never expires


|_| account is disabled


|_| account is locked out

“ok” “cancel” “apply”

ok if you can get past my cheesy drawing, i must ask, did you notice that
the “password never expires” box is checked? if you did, then you may have
realized that this means that you can also uncheck it!

2. if ure paying attention, you’ll see that the ‘user must change password
at next logon’ box is unchecked. if you put a check in this box of course,
when you shut down the system will prompt for a new password!

3. going back to step c.,
right click on any account and notice the dialoge that appears:
set password…
all tasks
delete
rename
properties
help

i think you can handle it from here

ps. i wonder if you can access this data if this stuff is locked to the user
by the admin by going in through the command prompt. i doubt it but if neone
finds a way let me know.