Wednesday, May 21, 2008

Hacking ADMINISTRATOR Password from User or Guest Mode in XP

Open up a command prompt (Start > Run > cmd > [ENTER]).
At the prompt, enter the following command, then press [ENTER]:

Code:
at


If it responds with an “access denied” error, then we are out of luck, and you’ll have to try another method of privilege escalation; if it responds with “There are no entries in the list” (or sometimes with multiple entries already in the list) then we are good. Access to the at command varies, on some installations of Windows, even the Guest account can access it, on others it’s limited to Administrator accounts. If you can use the at command, enter the following commands, then press [ENTER]:


Code:
at 15:25 /interactive “cmd.exe”

Lets break down the preceding code. The “at” told the machine to run the at command, everything after that are the operators for the command, the important thing here, is to change the time (24 hour format) to one minute after the time currently set on your computers clock, for example: If your computer’s clock says it’s 4:30pm, convert this to 24 hour format (16:30) then use 16:31 as the time in the command. If you issue the at command again with no operators, then you should see something similar to this:

When the system clock reaches the time you set, then a new command prompt will magically run. The difference is that this one is running with system privileges (because it was started by the task scheduler service, which runs under the Local System account).

You’ll notice that the title bar has changed from cmd.exe to svchost.exe (which is short for Service Host).

Now that we have our system command prompt, you may close the old one. Run Task Manager by either pressing CTRL+ALT+DELETE or typing taskmgr at the command prompt. In task manager, go to the processes tab, and kill explorer.exe; your desktop and all open folders should disappear, but the system command prompt should still be there.
At the system command prompt, enter in the following:



Code:
explorer.exe


A desktop will come back up, but what this? It isn’t your desktop. Go to the start menu and look at the user name, it should say “SYSTEM”. Also open up task manager again, and you’ll notice that explorer.exe is now running as SYSTEM. The easiest way to get back into your own desktop, is to log out and then log back in.

What to do now?

Now that we have SYSTEM access, everything that we run from our explorer process will have it too, browsers, games, etc. You also have the ability to reset the administrators password, and kill other processes owned by SYSTEM. You can do anything on the machine, the equivalent of root; You are now God of the Windows machine. I’ll leave the rest up to your imagination.

Source

Wednesday, May 14, 2008

Ten Most AMAZING Google Search Tricks!!!

Searching on Google can be a magical experience once you find out how to make your search queries efficient. By making efficient I mean using some tricks to quickly find what you actually require. Here are the amazing search tricks which can change the way you look at Google today.


1. Different Types of Files at your will

How many times would you have asked for materials (PDF, PPT, DOC) for a particular topic from a friend? Its almost everyday that we might have the necessity to ask them either for knowledge, preparing a presentation, white-paper or for case studies. Such times it mostly difficult to look out what to exactly search for because most of the times you don’t know about the topic at hand. But this petty keyword unleashes its lethal power at such occasions.

Let’s say I want to implement a case study on SOA which means I have to read a lot of information for SOA. So I just have to find materials which might have already been uploaded on the web in the form of PDF’s, DOC’s or PPT’s. These materials can be easily obtained by doing a search for:

* PDF - service oriented architecture filetype:pdf
* PPT - service oriented architecture filetype:ppt
* DOC - service oriented architecture filetype:doc

2. Scholarly Search

If you want some authenticity of the materials then it would be better to find the materials from educational institutes or universities. For this use the Google scholar search. But suppose you don’t like to switch to Google scholar search you can add the same query with an additional parameter to the normal Google search box,

* service oriented architecture filetype:pdf site:edu

3. Meanings of any word in an instant

Now you do not have to carry a dictionary or install a dictionary software just for the purpose of finding out a meaning of a word. With the wealth of information in Google’s hands, its a piece of cake to find out the meaning of the word. Just use the "define:" keyword. The meaning would of course be displayed but also a set of other links which might have an alternative definition are also given out with the link to read more about it.

* define:beureaucracy

You would argue here that, a dictionary gives out more information than this. But what about words that don’t actually fall within the vocabulary. Suppose you want to know what SOA (Service Oriented Architecture) is then you would have no choice. Google Search comes to your rescue in this case,

* Abbreviations - define: SOA
* Jargons - define: Web 2.0
* SMS language - define: LOL

4. Find the time of any location

Many of us might be probably working for client which are based at different locations. And communication has to be carried out frequently carried out in such cases. But before a communication you have to know which time zone the location is falling into otherwise you would be causing a disturbance.

I have seen people installing time zone software for showing the time of the location they would be calling to. But with Google at your hands you don’t have to install any software. It would be just simple to use a query for finding the current time such as,

* time new york

Look closely the time on the little clock graphic. It also shows the perfect time!

5. Weather at your fingertips

If you are thinking to visit a place it is useful to know what the temperature of the place is before hand, it can make efficient packing. Google helps you here too. Just use this query without asking anybody or waiting for the news to make a weather report.

* goa weather

6. Google does live commentary too!

If you want to find the latest info about all the cricket matches then just type,

* cricket

But if you want to find out only about a particular match then use only the names of the two playing nations,

* India Australia

Remember that the scorecard will come only when the play is going on.

7. Calculate with your browser

Every OS has a calculator inbuilt but when the browser is the thing which is constantly open why bother to open up a calculator. Open Google and straight away type your mathematical expression. You can go all the way from basic arithmetic to trigonometrical expressions. This is simply amazing stuff accomplished by Google.

* 26 * 9000
* sin(90) / cos (90)

8. Compare your currency with others

Now that the dollar is declining, the rest of the world must be busy trying to check the impact of the dollar on their currencies. But first of all one must know how much a particular currency amounts to when cashed in another currency. Google’s inbuilt currency converter just does this.

* 1 USD in INR
* 1 EUR in INR


9. Keep track of the stocks

With the booming stock market it is very important to track the stocks on a day to day basis. Putting a stock ticker in the search box is the most obvious thing you would think of. But it is not always you would remember the stock ticker, you should add the keyword “stocks:” to the company name.

The best part of the obtained result is that it provides a chart which shows the trend in the company’s stock along with important statistics.

* stocks: INFY

Note: Currently the results are restricted to the companies listed in the US stock markets.

10. Wanna find some faces?

This is most interesting trick. You might be needing images for various occasions and searching for images is the most difficult thing because what we expect might not be possibly mapped to a query. But Google has a parameter in place for images in situations we need an image which describes a face.

Suppose I search for the term “happy” then the Google results page displays smileys. But I would like to use images of happy people. Even if I choose the term as “happy face” the results don’t show images which contain people. For this there is a parameter “imgtype” which you can use with the URL. For this put in the URL as follows:

* http://images.google.co.in/images?q=happy&imgtype=face

There are many more variations which can be bought about with the above tricks thus making your search experience not only enriching but also exciting. If I have missed any tricks of common usage, feel free to mention it.