Archive for October, 2009

Windows 7 Guide

windows 7
Free download windows 7 guide book is now available from Microsoft. This book provides information that can help you understand how windows 7 simplifies everyday tasks, works the way you want, and makes new things possible. This book overview many of the exciting features in windows 7. The windows 7 product guide is available in both XPS and PDF formats. If you want to know more about windows 7 it’s recommended to download this book.

The windows 7 product guide is has three major sections

• Introduction – This section describes how Microsoft designed windows 7, what editions of windows 7 are available and what is new.
• Windows 7 for You – This section of the windows 7 product guide goes over features in windows 7 that simplify everyday tasks, works the way you want, and makes new things possible.
• Windows 7 for IT Professionals – This section is intended for IT professionals who use windows 7.It explains how windows 7 can make people productive anywhere, manage risk though enhanced security and control, and reduce costs by streamlining PC management. This section also provides an overview of the Microsoft Desktop Optimization Pack.

System Requirements
• License: Free
• Supported Operating Systems: Windows 7; Windows Vista; Windows XP
Supported Operating Systems: Windows 7; Windows Vista; Windows XP You will need either an XPS Reader (included in Windows 7 and Windows Vista) or Adobe Acrobat reader to view the documents.
• Publisher: Microsoft
• Size : 30.5 MB – 92.5 MB
Download Windows 7 Guide (ebook) *

*Download size depends on selected download components.

Google N.C.R.

Most of you would be knowing about this trick in navigating to Google generic website. But I just came to know only a few days before and hence thought I would share the information with others too.

Whenever you type http://www.google.com/, Google automatically tries to redirect you to your country-specific website. For me, it always redirects to http://www.google.com.fj/ (Google Fiji ;) ). But when we specifically want to navigate to Google Generic website for some reason, there are two ways to accomplish the same.

  1. Click the ‘Go to Google.com’ link at the bottom of the webpage that is displayed from http://www.google.com/fj/
  2. To prevent this redundant click, you can opt to type http://www.google.com/ncr/ which would prevent the redirect from happening. The NCR stands for No Country Redirect.

You may also like to check out Google help documentation regarding the country redirections from here.

HOW TO: John the Ripper

Important! Using this software for purposes other than recovering your own lost passwords violates License Agreement and may violate the Law!

John the Ripper may be simple for many geeks to use, but newbies and geeks in training may find it difficult to do exactly what they want. This tutorial is aimed at them.

This tutorial was written as best to try to explain to the newbie how to operate JTR. Remember, this is a newbie tutorial, so I wont go into detail with all of the features. JTR is a program that decyrpts Unix passwords using DES (Data Encryption Standard).

The Process
Code:

Step 1: Download JTR.

Step 2: Extract JTR. In windows use winzip. In unix type

tar -xzf john-1.6.tar.gz

Step 3: In windows open the command prompt. Go to the Start menu, click Run, type ‘command’ (no quotes) and press enter.

You with me ;) ? Good. Go to whatever directory to have JTR in. Type ‘john’ and press enter. A whole list of options will come up:

John the Ripper Version 1.6 Copyright (c) 1996-98 by Solar Designer

Usage: /WINDOWS/DESKTOP/JTR/JOHN-16/RUN/john [OPTIONS] [PASSWORD-FILES]
-single “single crack” mode
-wordfile:FILE -stdin wordlist mode, read words from FILE or stdin
-rules enable rules for wordlist mode
-incremental[:MODE] incremental mode [using section MODE]
-external:MODE external mode or word filter
-stdout[:LENGTH] no cracking, just write words to stdout
-restore[:FILE] restore an interrupted session [from FILE]
-session:FILE set session file name to FILE
-status[:FILE] print status of a session [from FILE]
-makechars:FILE make a charset, FILE will be overwritten
-show show cracked passwords
-test perform a benchmark
-users:[-]LOGIN|UID[,..] load this (these) user(s) only
-groups:[-]GID[,..] load users of this (these) group(s) only
-shells:[-]SHELL[,..] load users with this (these) shell(s) only
-salts:[-]COUNT load salts with at least COUNT passwords only
-format:NAME force ciphertext format NAME
(DES/BSDI/MD5/BF/AFS/LM)
-savemem:LEVEL enable memory saving, at LEVEL 1..3

You won’t need most of these options. In fact, you don’t really need any of these options. You can simply type ‘john [filename]‘. The filename must include the *.txt extension. This is the regular crack. It will use bruteforce to decrypt all of the passwords in the file. If you’re an impatient you can use a word list :p. This is not as effective but it’s quicker (more on that later).

How to make a crackable file: Let’s say that for some reason you have a DES encrypted password but no file. If you want to crack it (why else would you be here?) you need to make your own file. Just create a text file and paste in the password. Now put a username (just any old name will do) in front of it with a colon separating the two. It should look something like this:

Code:

stoufis:gyuJo098KkLy9

Save the file as crackme.txt (just an example) and go to the prompt and type ‘john crackme.txt’ (no quotes obviously). Now you just have to wait.

Options: Here are a list of the options and what they do:

single: Single crack mode. This is only recommended for weak passwords as it includes only a few rules and a small wordlist.

Code:

Usage: john -single crackme.txt

wordfile: Uses a wordlist (basically a dictionary attack). What this does is tries every word in the list until it finds a match or you reach the end of the list. This is quicker than the default (bruteforce) attack, but I don’t recommend this because it doesn’t always find a match. More notes on wordlists below.

Code:

Usage: john -wordfile: password.lst crackme.txt

rules: Lets you define the rules for using wordlists. I don’t use wordlists, so if you want to use this option I won’t help you. Ok, ok, I’m just lazy :P . Shoot me.

incremental: I like this method. It allows you to do a bruteforce attack under certain modes.

Code:

Usage: john -incremental:alpha crackme.txt (only letters)
john -incremental:digits crackme.txt (only numbers)
john -incremental:lanman crackme.txt (letters, numbers, and some special characters)
john -incremental:all crackme.txt (all characters)

external: This is a little complicated. Basically this calls the options that are defined in the configuration settings. You can change these yourself, but I wouldn’t recommend it unless you know what you’re doing.

Code:

Usage: john -external:[MODE] crackme.txt (replace MODE with whatever the name of your mode is).

restore: Ok, let’s say that you need to stop the crack in the middle. Press crtl+break. A file will be created in the JTR directory named ‘restore’ (no quotes!!!… and yes, no file extention). You can start the crack back up from that restore point. If you used the-session option you probably have a different filename.

Code:

Usage: john -restore:restore

session: Use this if you know that you will have to stop JTR in the middle of a crack. It allows you to create a new file that holds the data of your session. You can then restore your session later.

Code:

Usage: john -session:[save to filename] crackme.txt

status: Shows how far you got before stoping a crack (provided you used the -session option).

Code:

Usage: john -status:[filename]

show: Shows how many passwords have been cracked in a file and how many are left.

Code:

Usage: john -show crackme.txt

test: Shows how fast JTR will work on your computer.

Code:

Usage: john -test

users: Cracks the password only for the user or users you tell it to.

Code:

Usage: john -users:User crackme.txt

groups: Cracks the passwords only for the group or groups you tell it to.

Code:

Usage: john -group:lamers crackme.txt

shells: Cracks the passwords only for the shell or shells you tell it to.

Code:

Usage: john -shells:shelly crackme.txt

salts: Cracks the salts that have at least the number of passwords you specify.

Code:

Usage: john -salts:2 crackme.txt

format: JTR can decrypt many from many different formats, not just DES (but this is the most widely used one). Use this to force JTR to try a certain format.

Code:

Usage: john -format:DES crackme.txt (force DES)
john -format:BSDI crackme.txt (force BSDI)
john -format:MD5 crackme.txt (force MD5)
john -format:BF crackme.txt (force BF)
john -format:AFS crackme.txt (force AFS)
john -format:LM crackme.txt (force LM)

savemem: this tells JTR to automatically save your process at whatever level you specify from one to three.

Code:

Usage: john -savemem:1 crackme.txt (save at level 1)
john -savemem:2 crackme.txt (save at level 2)
john -savemem:3 crackme.txt (save at level 3)

How to use a wordlist with JTR: I’ll assume you already have a wordlist in the JTR directory (it comes with password.lst, if you want to make your own I’ll tell you how later). Go to the prompt and type ‘john -wordfile: password.lst crackme.txt’ (no quotes, :P ). If the password is in the wordlist, it will work.

How to create a wordlist to use with JTR: First I will include a few lines of the wordlist supplied with JTR:

Code:

#!comment: Common passwords, compiled by Solar Designer.
12345
abc123
password
passwd
123456

Good luck all!!!

IP Location

How to use this tool

1. Enter the IP addresses in the search box.

2. Press the ‘Check!’ button.

The results will displayed in the box below.

Enter Domain/IP Address:
(eg. www.google.com or 74.125.45.105)