How To Shutdown Other Computer at your Network

How To ShutDown Other Computers, At School, Library,College Or Anywere Else where you and Them Share The Same Internet Connection.

How it works, because you and the other computers are on the same Server connection, you get as much access to their pc as them with their username and password, but for this you do not need to exploit them, all we have to do is scan for their Domain/PC Name, this did work on other computers around the world but not no more.

What You Need: Just a Computer Running Windows, & CMD, if your admin has blocked CMD from being ran, then please do the Following:

Then save the file as, CMD.bat on your desktop, and run it, and it should run like normal. You also need, a connection to the internet, and make sure that others around 

Tutorial:Okay So Once you have got CMD open, please do the following: Type @Echo Off And press Enter:

Then CLS and press enter:

Then Type Color b and press enter:

This is not vital but makes the Windows Interface allot more easy whilst typing etc.

Then if your not sure if there are others on your server type netstat and enter:

so as you can see, where myne says idex, that is the name of my pc, so if your in a school or library, you and everyone else should have a similar name, again this is not vital,

then what you want to do is clear the screen again by TYPE CLS.then type shutdown -i and press enter again, a new dialog should appear.

you can then edit the setting of what you want to comp to do.to add the comps you want to shut down, click add and manually enter the computer names, most comps will have the name printed on them, or if you know the ip this will also work.

If you dont know either, just click browse and search the directory and find the computer names, and then shutdown, etc or whatever you want to do with them..

How To Unlock Your BlackBerry Smartphone Free

This is a tutorial on how to unlock your BlackBerry. To my knowledge it works on all BlackBerry phones but i may be wrong.

1. Download and install Microsoft NET Framework 2.0

2. Download and install Blackberry desktop manager v4.7.0.32

3. Download and install Blackberry Operating System

4. Delete the vendor.xml file located in c:program filescommon filesresearch in motionapploader

5. Download and install MFI Multiloader.

6. Open MFI Multiloader shortcut on your PC and wait until shows up as:

7. Then your phone should be like this on screen:Unlocking a BlackBerry Pearl

8. Open Blackberry Desktop Manager on your PC and read how to update/reinstall BlackBerry Operating System explained below. How To update/ReInstall BlackBerry Operating System ? Connect your device to your computer. Open the BlackBerry® Desktop Manager. Click Application Loader. Click Start in Add/Remove Applications or Update Applications. If necessary, perform the following actions: If the Device Security Password dialog box appears, type your device password. Click Next. If the Communication Port Selection dialog box appears, specify a communications port. Click Next. Click Next. Perform any of the following actions: To add an application that appears in the list, select the check box beside the application. To add an application that does not appear in the list, click Browse. Double-click an application loader (.alx or .ali) file. Click Next.

9. Click Finish.

10. Congratulations, your BlackBerry unlock is done for free! You can now replace your SIM and memory card and set up your phone the way you like it.
..........................................................

Hacking Categories

 Introduction

Hackers can be divided into three groups: white hats, black hats, and gray hats. Ethical hackers usually fall into the white-hat category, but sometimes they are former gray hats who have become security professionals and who use their skills in an ethical manner.

 White Hat Hackers

White Hats are the good guys, the ethical hackers who use their hacking skills for defensive purposes. White-hat hackers are usually security professionals with knowledge of hacking and the hacker tool set and who use this knowledge to locate weaknesses and implement countermeasures. 

Black Hat Hackers

Black hats are the bad guys: the malicious hackers or crackers who use their skills for illegal or malicious purposes. They break into or otherwise violate the system integrity of remote machines, with malicious intent. Having gained unauthorized access, black-hat hackers destroy vital data, deny legitimate users service, and basically cause problems for their targets.

Black-hat hackers and crackers can easily be differentiated from white-hat hackers because their actions are malicious.

Gray Hat Hackers

Grey hats are hackers who may work offensively or defensively, depending on the situation. This is the dividing line between hacker and cracker. Both are powerful forces on the Internet,and both will remain permanently. And some individuals qualify for both categories. The existence of such individuals further clouds the division between these two groups of people.

In addition to these groups, there are self-proclaimed ethical hackers, who are interested in hacker tools mostly from a curiosity standpoint. They may want to highlight security problems in a system or educate victims so they secure their systems properly. These hackers are doing their “victims” a favor. For instance, if a weakness is discovered in a service offered by an investment bank, the hacker is doing the bank a favor by giving the bank a chance to rectify the vulnerability.

ARIN

WHAT IS ARIN?

The American Registry for Internet Numbers (ARIN) is a nonprofit corporation that serves users of Internet number resources, such as Internet Service Providers, governments, and end-users in its region. ARIN'sservice region includes Canada, the United States, and several islands in the Caribbean Sea and North Atlantic Ocean.

ARIN is one of five Regional Internet Registries (RIRs) worldwide that provide Internet number resource services to all regions of the globe.

WHY IS ARIN TRYING TO HACK MY SYSTEM?

While it may appear in some Internet tools that ARIN is a source of network abuse directed at you or your networks, this is not the case. Many current software programs designed to detect network abuse are configured to query only one of the five RIR Whois databases for identification purposes. If the software is unable to find an exact match, it may return results indicating ARIN is the source of the abuse. However, this usually means that the software has failed to query the other Whois databases.

If this happens, you may wish to query the ARIN Whois database directly for further information. The web version of Whois is available through the box at the top of every page of ARIN's website.

The ARIN Whois database contains detailed information for IP address ranges registered within ARIN's region. The ARIN Whois database also contains records for IP address ranges associated with other RIRs, including AfriNIC (Africa), APNIC (Asia Pacific Region), LACNIC (Latin America), and RIPE NCC (Europe, Middle East, and parts of Asia), but does not include information on delegations below the RIR level for these ranges.

Another possibility is that the source of the network abuse may be spoofing an IP address. The links on the right have some excellent advice on identifying legitimate IP information.

WHAT CAN ARIN DO TO HELP ME LOCATE HACKERS/SPAMMERS?

Generally, the first step is to report fraudulent activity to the abuser's ISP, which will be listed as the organization that was delegated the IP address space. Most ISPs are responsive to concerns about hackers and spammers on their networks. If you are unsuccessful in resolving this situation with the ISP, you may wish to contact local law enforcement in your area.

ARIN maintains the Whois database as a service to the global Internet community. This database may be used by any individual in an attempt to identify the organization that has been delegated use of a specific IP address range. The database does not contain information regarding specific individual users of single addresses. ARIN does not have the authority to investigate or prosecute claims of hacking or mail abuse.

CAN ARIN PURSUE HACKERS/SPAMMERS THAT INVADE MY SYSTEM?

ARIN does not have the authority to pursue spammers or hackers.

WHAT IS HACKING?

Hacking is generally defined as someone attempting to gain improper access to your system or network. Hackers may be looking for passwords, credit card information, or may be trying to do harm to your system.

WHERE CAN I FIND MORE INFORMATION ABOUT PREVENTING HACKERS?

You may wish to review the links on the right for more information on how to prevent and detect hackers.

WHAT IF I'M UNABLE TO FIND THE IP ADDRESS I'M LOOKING FOR IN THE ARIN WHOIS DATABASE?

It is possible that this address range has not been assigned by a Regional Internet Registry yet. Before ruling out this possibility, you may wish to review the Whois databases for the other four regional registries:

• AfriNIC Whois
• APNIC Whois
• LACNIC Whois
• RIPE Whois

Denial-of-service (DoS) attack

What is a denial-of-service (DoS) attack?

In a denial-of-service (DoS) attack, an attacker attempts to prevent legitimate users from accessing information or services. By targeting your computer and its network connection, or the computers and network of the sites you are trying to use, an attacker may be able to prevent you from accessing email, websites, online accounts (banking, etc.), or other services that rely on the affected computer.

The most common and obvious type of DoS attack occurs when an attacker "floods" a network with information. When you type a URL for a particular website into your browser, you are sending a request to that site's computer server to view the page. The server can only process a certain number of requests at once, so if an attacker overloads the server with requests, it can't process your request. This is a "denial of service" because you can't access that site.

An attacker can use spam email messages to launch a similar attack on your email account. Whether you have an email account supplied by your employer or one available through a free service such as Yahoo or Hotmail, you are assigned a specific quota, which limits the amount of data you can have in your account at any given time. By sending many, or large, email messages to the account, an attacker can consume your quota, preventing you from receiving legitimate messages.

What is a distributed denial-of-service (DDoS) attack?

In a distributed denial-of-service (DDoS) attack, an attacker may use your computer to attack another computer. By taking advantage of security vulnerabilities or weaknesses, an attacker could take control of your computer. He or she could then force your computer to send huge amounts of data to a website or send spam to particular email addresses. The attack is "distributed" because the attacker is using multiple computers, including yours, to launch the denial-of-service attack.

How do you avoid being part of the problem?

Unfortunately, there are no effective ways to prevent being the victim of a DoS or DDoS attack, but there are steps you can take to reduce the likelihood that an attacker will use your computer to attack other computers:

Install and maintain anti-virus software (see Understanding Anti-Virus Software for more information).

Install a firewall, and configure it to restrict traffic coming into and leaving your computer (see Understanding Firewalls for more information).

Follow good security practices for distributing your email address (see Reducing Spam for more information). Applying email filters may help you manage unwanted traffic.

How do you know if an attack is happening?

Not all disruptions to service are the result of a denial-of-service attack. There may be technical problems with a particular network, or system administrators may be performing maintenance. However, the following symptoms could indicate a DoS or DDoS attack:

• unusually slow network performance (opening files or accessing websites)
• unavailability of a particular website
• inability to access any website
• dramatic increase in the amount of spam you receive in your account

What do you do if you think you are experiencing an attack?

Even if you do correctly identify a DoS or DDoS attack, it is unlikely that you will be able to determine the actual target or source of the attack. Contact the appropriate technical professionals for assistance.

• If you notice that you cannot access your own files or reach any external websites from your work computer, contact your network administrators. This may indicate that your computer or your organization's network is being attacked.
• If you are having a similar experience on your home computer, consider contacting your internet service provider (ISP). If there is a problem, the ISP might be able to advise you of an appropriate course of action.

MODES OF ATTACKDenial-of-service attacks come in a variety of forms and aim at a variety of services. There are three basic types of attack:

• consumption of scarce, limited, or non-renewable resources
• destruction or alteration of configuration information
• physical destruction or alteration of network components

1. Consumption of Scarce ResourcesComputers and networks need certain things to operate: network bandwidth, memory and disk space, CPU time, data structures, access to other computers and networks, and certain environmental resources such as power, cool air, or even water.
   
   1. Network ConnectivityDenial-of-service attacks are most frequently executed against network connectivity. The goal is to prevent hosts or networks from communicating on the network. An example of this type of attack is the "SYN flood" attack described in
      

      http://www.cert.org/advisories/CA-1996-21.html

      In this type of attack, the attacker begins the process of establishing a connection to the victim machine, but does it in such a way as to prevent the ultimate completion of the connection. In the meantime, the victim machine has reserved one of a limited number of data structures required to complete the impending connection. The result is that legitimate connections are denied while the victim machine is waiting to complete bogus "half-open" connections.
      You should note that this type of attack does not depend on the attacker being able to consume your network bandwidth. In this case, the intruder is consuming kernel data structures involved in establishing a network connection. The implication is that an intruder can execute this attack from a dial-up connection against a machine on a very fast network. (This is a good example of an asymmetric attack.)
   2. Using Your Own Resources Against YouAn intruder can also use your own resources against you in unexpected ways. One example is described in
      

      http://www.cert.org/advisories/CA-1996-01.html

      In this attack, the intruder uses forged UDP packets to connect the echo service on one machine to the chargen service on another machine. The result is that the two services consume all available network bandwidth between them. Thus, the network connectivity for all machines on the same networks as either of the targeted machines may be affected.
   3. Bandwidth ConsumptionAn intruder may also be able to consume all the available bandwidth on your network by generating a large number of packets directed to your network. Typically, these packets are ICMP ECHO packets, but in principle they may be anything. Further, the intruder need not be operating from a single machine; he may be able to coordinate or co-opt several machines on different networks to achieve the same effect.
   4. Consumption of Other ResourcesIn addition to network bandwidth, intruders may be able to consume other resources that your systems need in order to operate. For example, in many systems, a limited number of data structures are available to hold process information (process identifiers, process table entries, process slots, etc.). An intruder may be able to consume these data structures by writing a simple program or script that does nothing but repeatedly create copies of itself. Many modern operating systems have quota facilities to protect against this problem, but not all do. Further, even if the process table is not filled, the CPU may be consumed by a large number of processes and the associated time spent switching between processes. Consult your operating system vendor or operating system manuals for details on available quota facilities for your system.
      An intruder may also attempt to consume disk space in other ways, including
      
      • generating excessive numbers of mail messages. For more information, please see

        http://www.cert.org/tech_tips/email_bombing_spamming.html

      • intentionally generating errors that must be logged
      • placing files in anonymous ftp areas or network shares, For information on proper configuration for anonymous ftp, please see

        http://www.cert.org/tech_tips/anonymous_ftp_config.html

      In general, anything that allows data to be written to disk can be used to execute a denial-of-service attack if there are no bounds on the amount of data that can be written.
      Also, many sites have schemes in place to "lockout" an account after a certain number of failed login attempts. A typical set up locks out an account after 3 or 5 failed login attempts. An intruder may be able to use this scheme to prevent legitimate users from logging in. In some cases, even the privileged accounts, such as root or administrator, may be subject to this type of attack. Be sure you have a method to gain access to the systems under emergency circumstances. Consult your operating system vendor or your operating systems manual for details on lockout facilities and emergency entry procedures.
      An intruder may be able to cause your systems to crash or become unstable by sending unexpected data over the network. An example of such an attack is described in
      

      http://www.cert.org/advisories/CA-1996-26.html

      If your systems are experiencing frequent crashes with no apparent cause, it could be the result of this type of attack.
      There are other things that may be vulnerable to denial of service that you may wish to monitor. These include
      
      
      • printers
      • tape devices
      • network connections
      • other limited resources important to the operation of your organization
      
      
2. Destruction or Alteration of Configuration InformationAn improperly configured computer may not perform well or may not operate at all. An intruder may be able to alter or destroy configuration information that prevents you from using your computer or network.
   For example, if an intruder can change the routing information in your routers, your network may be disabled. If an intruder is able to modify the registry on a Windows NT machine, certain functions may be unavailable.
   
   
   

How to trace any mobile number of the WORLD !!

With the rapid growth of mobile phone usage in recent years, I have often observed that the mobile phone has become a part of many illegal and criminal activities. So in most cases, tracing the mobile number becomes a vital part of the investigation process. Also sometimes we just want to trace a mobile number for reasons like annoying prank calls, blackmails, unknown number in a missed call list or similar.

Even though it is not possible to trace the number back to the caller, it is possible to trace it to the location of the caller and also find the network operator. Just have a look at this page on tracing Indian mobile numbers from Wikipedia.

 Using the information provided on this page, it is possible to certainly trace any mobile number from India and find out the location (state/city) and network operator (mobile operator) of the caller. All you need for this is only the first 4-digit of the mobile number. In this Wiki page you will find all the mobile number series listed in a nice tabular column where they are categorized based on mobile operator and the zone (state/city). This Wiki page is updated regularly so as to provide up-to-date information on newly added mobile number series and operators. I have used this page many a time and have never been disappointed.

If you would like to use a simpler interface where in you can just enter the target mobile number and trace the desired details, you can try this link from Numbering Plans. Using this link, you can trace any number in the world.

By using the information in this article, you can only know “where” the call is from and not “who” the caller is. Only the mobile operator is able to tell you ”who” the caller is. So if you’re in an emergency and need to find out the actual person behind the call, I would recommend that you file a complaint and take the help of police. I hope this information has helped you!

Metasploit Framework : Hack the Planet

Metasploit took the security world by storm when it was released in 2004. No other new tool even broke into the top 15 of this list, yet Metasploit comes in at #5, ahead of many well-loved tools that have been developed for more than a decade. It is an advanced open-source platform for developing, testing, and using exploit code. The extensible model through which payloads, encoders, no-op generators, and exploits can be integrated has made it possible to use the Metasploit Framework as an outlet for cutting-edge exploitation research. It ships with hundreds of exploits, as you can see in their online exploit building demo. This makes writing your own exploits easier, and it certainly beats scouring the darkest corners of the Internet for illicit shellcode of dubious quality. Similar professional exploitation tools, such as Core Impact and Canvas already existed for wealthy users on all sides of the ethical spectrum. Metasploit simply brought this capability to the masses.

Metasploit provides useful information and tools for penetration testers, security researchers, and IDS signature developers. This project was created to provide information on exploit techniques and to create a functional knowledgebase for exploit developers and security professionals. The tools and information on this site are provided for legal security research and testing purposes only. Metasploit is an open source project managed by Rapid7.

The Metasploit Project is an open-source computer security project which provides information about security vulnerabilities and aids in penetration testing and IDS signature development. Its most well-known sub-project is the Metasploit Framework, a tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive, and security research.

The Metasploit Project is also well known for anti-forensic and evasion tools, some of which are built into the Metasploit Framework.

Metasploit was created in 2003 as a portable network game using the Perl scripting language. Later, the Metasploit Framework was then completely rewritten in the Ruby programming language. It is most notable for releasing some of the most technically sophisticated exploits to public security vulnerabilities. In addition, it is a powerful tool for third party security researchers to investigate potential vulnerabilities. On October 21st, 2009 the Metasploit Project announced that it had been acquired by Rapid7, a security company that provides unified vulnerability management solutions.

Like comparable commercial products such as Immunity's CANVAS or Core Security Technologies' Core Impact, Metasploit can be used to test the vulnerability of computer systems in order to protect them, and it can be used to break into remote systems. Like many information security tools, Metasploit can be used for both legitimate and unauthorized activities.

Metasploit's emerging position as the de facto vulnerability development framework has led in recent times to the release of software vulnerability advisories often accompanied by a third party Metasploit exploit module that highlights the exploitability, risk, and remediation of that particular bug. Metasploit 3.0 (Ruby language) is also beginning to include fuzzing tools, to discover software vulnerabilities in the first instance, rather than merely writing exploits for currently public bugs. This new avenue has been seen with the integration of the lorcon wireless (802.11) toolset into Metasploit 3.0 in November, 2006.

Metasploit Official Website: http://www.metasploit.com/ 
Metasploit download page:http://www.metasploit.com/framework/download/

Download Facebook videos by just viewing the source code

Although facebook has 500 million active users, I have stayed away from facebook for my own good privacy reasons. Believe it or not, being on facebook introduces spam into your life and I didn't want someone else peeping into my personal life. And not having FB as a part of my life does not impact me in any way. But lately I had to sign up and login to FB as I wanted to watch a video my distant friend had uploaded. But the video was buffering very slowly and was affecting other downloads. So I thought if there could be a way to download these videos. In not more than 2 minutes I had a 100% working formula to download videos from facebook. I never thought it could be so simple. Facebook has always been under the scanner of security professionals for privacy issues and the number of bugs introduced in its web application every time it is upgraded. Here I am gonna explain this simple way to do it. I'll explain this with only firefox in consideration. Internet Explorer is not a browser for me, it's just an application that comes free with Windows..(IE users, switch to firefox and come back.)

1. Open the video which you want to download. The page will look something like this:

You must be familiar with this format "Videos Posted by" written at the top and "In this video" at the bottom.

2. Now select the text startin from "Videos posted by" and drag the selection upto "In this video" at the bottom. Now Right click on the selected text and select from the context menu "View Selection Source"

You'll see the source window something like this:

3. Press Ctrl+F to search text and search for ".mp4" This is the format in which FB stores your videos. ".mp4" in the source window will be highlighted. You'll see a parameter like
video_src="http%2a%3F%3F..." Select the text from http to .mp4. This is  your download link But you are not done yet. It is in hexa form to be understood by javascript and other server side scripts. Your browser wont accept it as a URL.

Now, in the URL you have acquired replace "%3A" by ":" and "%2F" by "/". Replace all occurrences. Paste this URL in the browser address bar and start downloading that video.

Go ahead. Download that video you always wanted to...