NETWORK SECURITY N DIFFERENT THREATS

A Must To Read Article On Trojans :
Trojans , types of Trojan , know Trojans , Everything you want to know about Trojans

Trojan horses present more difficulties in definition than at first appears. Whereas viruses are defined primarily by their ability to replicate, Trojans are primarily defined by their payload, or, to use a less emotive term, their function. Replication is an absolute value. Either a program replicates, or it doesn't. Damage and intent, however, are not absolutes, at least in terms of program function.

In computing terms, the term Trojan horse is most often applied to an apparently attractive program concealing in some way an unpleasant surprise. Trojans work similar to the client-server model.
Trojans come in two parts, a Client part and a Server part. The attacker deploys the Client to connect to the Server, which runs on the remote machine when the remote user (unknowingly) executes the Trojan on the machine. The typical protocol used by most Trojans is the TCP/IP protocol, but some functions of the Trojans may make use of the UDP protocol as well. When the Server is activated on the remote computer, it will usually try to remain in a stealth mode, or hidden on the computer. This is configurable.
It is usual for Trojans to also modify the registry and/or use some other auto starting method. Many Trojans have configurable features like mailing the victim's IP, for example Pro Rat trojan, as well as messaging the attacker via ICQ or IRC. Also there are websites with ActiveX servers imbedded in them were any one using Internet explorer goes on the site and the attachment installs its self with out any warning.
This is relevant when the remote machine is on a network with dynamically assigned IP address or when the remote machine uses a dial-up connection to connect to the Internet. DSL users on the other hand, have static IPs so the infected IP is always known to the attacker.
Most of the Trojans use auto-starting methods so that the servers are restarted every time the remote machine reboots / starts. This is also notified to the attacker. As these features are being countered, new auto-starting methods are evolving. The start up method ranges from associating the Trojan with some common executable files such as explorer.exe to the known methods like modifying the system files or the Windows Registry.
Some of the popular system files targeted by Trojans are Auto start Folder, Win.ini, System.ini, Wininit.ini, Winstart.bat, Autoexec.bat Config.sys. Could also be used as an auto-starting method for Trojans Explorer Startup.

Registry is often used in various auto-starting methods.

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
" Info"="c:directoryTrojan.exe"
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce]
" Info"="c:directoryTrojan.exe"
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServices]
" Info"="c:directoryTrojan.exe"
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServicesOnce]
" Info="c: directoryTrojan.exe"
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
" Info"="c:directoryTrojan.exe"
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce]
" Info"="c:directoryTrojan.exe"

Registry Shell Open methods

[HKEY_CLASSES_ROOTexefileshellopencommand]
[HKEY_LOCAL_MACHINESOFTWAREClassesexefileshellopencommand]


A key with the value "%1 %*" should be placed there and if there is some executable file placed there, it will be executed each time a binary file is opened. It is used like this: trojan.exe "%1 %*"; this would restart the Trojan.
ICQ Net Detect Method
" [HKEY_CURRENT_USERSoftwareMirabilisICQAgentApps]
This key includes all the files that will be executed if ICQ detects Internet connection. This feature of ICQ is frequently abused by attackers as well.
ActiveX Component method
" [HKEY_LOCAL_MACHINESoftwareMicrosoftActiveSetupInstalledComponentsKeyName] StubPath=C: directoryTrojan.exe

These are the most common Auto-Starting methods using Windows system files, and the Windows registry.
The main Transmission of trojans are known to be by ICQ, IRC Attachments, Physical Access Browser And E-mail, Software Bugs with binded trojans, NetBIOS, Fake Programs, Un-trusted Sites, Freeware Software and most common of all is P2P File sharing! Yes that's Kaaza, Bear Share, Limewire and list goes on. Visit stop [bad] ware to learn about many free ware wich are bad and may carry spyware or even trojans!

So how do you go about finding and removing Trojans? Download and lean how to use TCPView. TCPView is a Windows program that will show detailed listings of all TCP and UDP endpoints on the system, including the local and remote addresses and state of TCP connections. On Windows NT, 2000 and XP TCPView also reports the name of the process that owns the endpoint. Best way to check for Trojans is close any open browsers let pc go in state of rest and open TCP view, once you see a connection established when youÒre not using anything and there is no signatures of the process than it might be a trojan. Another method is to view your Process. Simply hit [ALT] [CTRL] [DELETE] and it will list all of your running Process. Look for anything that you know might be suspicious or a trojan.
If you don't have a copy of Ad-Aware that you should go to there website and get one which helps remove many trojans and spyware. www.lavasoft.de/software/adaware/ . Sometimes you may run into trojan (trojans server.exe) that wont allow you to delet it and gives you errors like write protected or its in-use. You will need to run "Unlocker" and remove it that way. What are some other stealth ways Trojans can get on your pc and be remote controlled? The method is called ICMP Tunneling. ICMP tunneling is a method of using ICMP echo-request and echo-reply as a carrier of any payload an attacker may wish to use, in an attempt to stealthily access, or control a compromised system. This method makes it harder to find running server like TCP or UDP. The Internet Control Message Protocol is an adjunct to the IP layer. It is a connectionless protocol used to convey error messages and other information to unicast addresses . ICMP packets are encapsulated inside of IP datagram. The first 4-bytes of the header are same for every ICMP message, with the remainder of the header differing for different ICMP message types. There are 15 different types of ICMP messages.
Covert Channels are methods in which an attacker can hide the data in a protocol that is undetectable. Covert Channels rely on techniques called tunneling, which allows one protocol to be carried over another protocol.
A covert channel is a vessel in which information can pass, but this vessel is not ordinarily used for information exchange. Therefore, as a matter of consequence, covert channels are impossible to detect and deter using a system's normal (read: unmodified) security policy. In theory, almost any process or bit of data can be a covert channel. In practice, it is usually quite difficult to elicit meaningful data from most covert channels in a timely fashion. This makes it an attractive mode of transmission for a Trojan.
The attacker can use the covert channel and install the backdoor on the target machine. The concept of ICMP Tunneling is simple: arbitrary information tunneling in the data portion of ICMP_ECHO and ICMP_ECHOREPLY packets.
This exploits the covert channel that exists inside of ICMP_ECHO traffic. This channel exists because network devices do not filter the contents of ICMP_ECHO traffic. They simply pass them, drop them, or return them. The Trojan packets themselves are masqueraded as common ICMP_ECHO traffic. We can encapsulate (tunnel) any information we want. So what are come counter measure to protect your self from this attack? Configure your firewall to block ICMP incoming and outgoing echo packets. Blocking ICMP will disable ping request and may cause inconvenience to users. Most new firewall have this option. Last thing I want to stress is make sure your not with out a firewall or Anti-Virus and allways updating them.

[Types of Trojans]

Privacy-Invasive Trojans

Privacy-invasive Trojans generally perform some function that reveals to the programmer vital and privileged information about a system or otherwise compromises that system. Passwords are, for obvious reasons, a very common target.

They can also (or instead) conceal some function that either reveals to the programmer vital and privileged information about a system or compromises that system.

Some anti-virus companies have differentiated between PC-specific privacy-invasive Trojans and destructive Trojans by restricting the use of the term Trojan to destructive programs. They use the term password stealers for the most common privacy-invasive programs. In the latter half of the 1990s, password-stealing programs aimed specifically at AOL users seemed to become very common (some estimates at the number of such programs rose to many hundreds). Some anti-virus software uses an APS identifier for such programs, probably standing for AOL Password Stealer. However, AOL is not and never was the only vulnerable service. In their paper Where There's Smoke, There's Mirrors, Sarah Gordon and David Chess describe running user simulations on AOL over a seven-month period. While attempts were made to gain their dummy users'screen passwords, these attempts generally used direct social engineering techniques by correspondents masquerading as AOL staff, rather than indirectly with password stealing programs.

[Back Door Trojans]

Trojans have, from time to time, been planted in legitimate applications. Ken Thompson describes in Reflections on Trusting Trust a number of interesting (not entirely hypothetical) scenarios, the most famous being the Trojanized compiler scenario. In this case, production software offers the means of privileged access to anyone knowing of the back door or trapdoor described.

Back doors and trapdoors offering unauthorized access (and maybe modification) are not the only instances of unauthorized code introduced into legitimate programs, however. Many Mac owners who bought a certain brand of third-party keyboard with a Trojan hardcoded into ROM chip found that the text "Welcome Datacomp" was inserted into their documents at apparently random intervals. PC motherboards with a Trojanized BIOS were characterized by "Happy Birthday" played through the system loudspeaker at boot-up, apparently on the programmer's birthday.


[Remote Access Tools (RATs)]

Though few anti-virus vendors would claim to detect all known Trojans, most do detect at least some on the platforms for which they have products, especially those Trojans that do direct damage. Remote Access Tools (RATs) such as Netbus and Back Orifice, however, straddle a line between legitimate systems administration (similar to that carried out by programs such as PC Anywhere) and covert unauthorized access. When the system owner is persuaded to run the installation program, a server program is installed that can be accessed from a client program on a remote machine without the knowledge of the user. The server is used to manipulate the victim machine.

Functionally, there might be no difference between a RAT and a "legitimate" tool. The difference lies not in the functionality, but in the facilitation of the covert availability of that functionality to unauthorized individuals. As with sniffers and network scanners, it's not what the program does so much as the reason it's being used. Yet if RAT software is willingly installed, opening the system to an attack the user does not expect, does that make it a Trojan? Using Microsoft Word also makes the user vulnerable to attacks he might not have anticipated. It was, for instance, literally years before some computer users realized that using versions of Word and other Microsoft Office applications supporting macro languages made them vulnerable to macro viruses and Trojans. Does that make Bill Gates a Trojan author? No, because the functionality in this case is too generalized to be described as a back door. However, a RAT broadcasting its presence to a hacker, who probes a characteristic range of port numbers, can certainly be described as a back door Trojan. It promotes the intentions of the author and subverts the expectations of the victim.

This is a serious issue—not least in that the "Bad Guys" frequently allude to the shortcomings of legitimate software (especially Microsoft's) as if unforeseen bugs in Office justified their own premeditated activities.

Nonetheless, some RAT authors have exploited this ambivalence by producing "Professional" versions of such software and charging for them. This allows the authors to complain of the anti-capitalist, anti-competitive behavior of security vendors who detect their program as a Trojan (or, all too often and inaccurately, a virus). It works, too. Several anti-virus vendors have dropped detection of the Professional version of Netbus, despite the murkiness of its antecedents and its continuing potential for misuse. Others have gone out of their way to distinguish between standard Netbus Pro installations and Trojanized installations.

[Droppers]

A dropper is a program that is not itself a virus, but is intended to install a virus. Curiously, given the popular association of Trojans and viruses, droppers are a comparatively rare entry point for viruses in the wild (see the preceding chapter on viruses). In the PC world, dropper programs are most commonly associated with transporting boot sector viruses across networks, and can be used for that purpose by both pro- and anti-virus researchers. They can be used as a covert means of introducing a virus onto a system, if the victim can be persuaded by social engineering techniques to run the dropper program.

Droppers have been used surprisingly frequently in the Mac world, though. The MacMag virus was introduced via a HyperCard stack called New Apple Products. The Tetracycle game was implicated in the original spread of MBDF. ExtensionConflict is supposed to identify conflicts between extensions (now there's a surprise), but installs the SevenDust virus. Both SevenDust and MBDF are still being reported in the field. Back in the PC world, the Red Team alert muddied the waters by attaching a virus dropper alleged to be a fix for a virus that didn't and couldn't possibly exist.


[Jokes]

Joke programs are almost as old as computing. One venerable example is the PDP Cookie program, which popped up and asked the victim for a cookie. PC and Mac users have both long been delighted or irritated by such programs. Confusion has arisen due to the habit of anti-virus software of alerting (using the word virus) not only on viruses and Trojans, but on joke programs such as CokeGift. This widely distributed program offers the victim their CD tray as a holder for their fizzy drink (or possibly white powder for nasal ingestion or carboniferous fossil fuel). Cute for some, irritating for others, but not exactly life-threatening. However, the practice of alerting on joke programs might have arisen in response to supposed joke programs that threaten to format disks, or claim to have done so, but make no such actual attempt. Indeed, there have been instances when, what one vendor has reported as a Trojan, another vendor reported as a joke.


[Bombs]

Logic bombs are malicious programs that execute their payload when a preprogrammed condition is met. When the trigger condition is a time or date, the term time bomb may be used. A time-out is a logic bomb sometimes used to enforce contract terms. Characteristically, the program stops running unless some action is taken to indicate (for instance) that the license fee has been paid, or the contractor who wrote the code has been paid. It's not unknown for a contractor to introduce some more drastic time bomb to be triggered if a dispute over payment arises.

The use of the word bomb does suggest a destructive payload, but this need not, in fact, be the case. Mail bombs and subscription bombs, which don't really belong in a chapter on Trojans, are DoS (Denial-of-Service) attacks intended to inconvenience the victim by battering his or her mailbox with a barrage of mail. Often this is done by subscribing the victim to large numbers of mailing lists. Email Trojans certainly exist, although email is more commonly an infection vector for viruses and worms.

The term ANSI bomb usually refers to a mail message or other text file that takes advantage of an enhancement to the MS-DOS ANSI.SYS driver. This allows keys to be redefined with an escape sequence, in this case, to echo some potentially destructive command to the console. Such programs were at one time quite frequently reported on Fidonet. However, nowadays few systems run programs that require ANSI terminal emulation, and ANSI.SYS is not normally installed in Windows 9x or later.

There are alternatives to ANSI.SYS that don't support keyboard redefinition, or allow it to be turned off.


[Rootkits]

A rootkit is an example of a set of trojanized system programs that an intruder who manages to root-compromise a system might be able to substitute for the commands'standard equivalents. Examples include modified versions of system utilities such as top and ps, allowing illegitimate processes to run unnoticed; daemons modified to compromise log entries or hide connections; utilities gimmicked to enable escalation to root privileges or to hide rootkit component files or other backdoor functionality (secret passwords to allow privileged access, for instance). Associated programs include packet sniffers and utmp/wtmp editors (used to doctor log files).

Rootkits exist for a number of flavors of UNIX, and are appearing in NT versions. However, one-off Trojanized versions of login (that is, versions not included in a suite of programs such as a rootkit) have been used, for instance, to harvest passwords since Pontius programmed in PILOT.

You can find information on rootkits in the FAQ at http://staff.washington.edu/dittrich/misc/faqs/lrk4.faq.

Sarah Gordon's paper Publication of Vulnerabilities and Tool (Proceedings of the Twelfth World Conference on Computer Security, Audit and Control, 1995) includes a technical analysis of some rootkit components.


[DDoS Agents]

DDoS (Distributed Denial-of-Service) tools like Stacheldraht, TFN2K, and Trinoo are Trojans designed with a very specific purpose. They are intended to bring down Internet servers by remotely coordinating packet-flooding attacks from multiple machines. Typically, the intruder controls a number of master machines. These, in turn, control daemons on remote machines. Covertly installed, their presence is often concealed by the installation of rootkits. Daemons can be installed on many hundreds of remote machines, all directing flooding attacks at the victim system.

Detailed analysis of DDoS attacks and counter-attacks is beyond the scope of this chapter. However, the installation and presence of a DDoS attack tool can be detected by the same means as other malware. That is, recognition of a specific search string (Known Something Detection), heuristic scanning, and change detection. Virus scanners usually detect known DDoS tools. Network traffic can be monitored for characteristics such as IP packets with spoofed source addresses. Intrusion detection systems can be configured to scan for patterns characteristic of communications between master software and daemon software.

[Worms]

In principle, this should probably be the longest subsection in this chapter. Many system administrators now apply the term Trojan to what the author of Chapter 17, "Viruses and Worms," described as worms. While I regard this usage as misleading, it is defensible, common, and can't be ignored.

It's defensible because, as discussed in Chapter 17, most present-day worms are reliant on social engineering to persuade the recipient to execute the malicious code. In other words, they conform to one of the definitions we've previously examined suggesting that Trojans are programs that purport to do one (desirable) thing while actually doing some other (less desirable) thing.

The usage is misleading because it defies the definition of Trojans as non-replicative malware. In the virus business, most people hold the view that viruses and worms replicate. Some believe that the class worm is a subset of the class virus, and many regard Trojans as non-replicative. These distinctions are not just academic. To fight malicious code effectively, we need to understand how it works, and distinctions are particularly important when we come to examine a multipartite threats such as MTX or LoveLetter. Modern mail-borne malware might include components which can be described as parasitic (a file virus), a worm (a network virus that doesn't infect other files by direct attachment), and/or a classic Trojan.


[Trojan Security]

Trojans frequently masquerade as games, joke programs, screensavers, and other programs frequently exchanged by email, especially when strict system policies or security policies are not enforced. If software contains a privacy-invasive Trojan or a destructive Trojan with a delayed payload (a time bomb or other form of logic bomb, for example), the Trojan might be distributed by a victim who is not yet aware that the program is malicious.
Compiled binaries are not the only places you'll find Trojans. Batch files and other shell scripts, Perl programs, and perhaps even code written in JavaScript, VBScript, or Tcl can carry a Trojan. Scripting languages have been described as unsuitable for the creation of Trojans if the code remains humanly readable.
This increases the victim's chances of discovering the offending code. In real life, though, victims often seem quite happy to run unchecked code, even when it's humanly readable.

The LoveLetter virus was executed by countless recipients, even though the cleartext code clearly included a subroutine whose very name indicated that it was intended to infect files. Nesting a Trojan within such code is, however, more feasible if the file is part of a much larger package—for example, if the entire package extracts to many subdirectories.

In such cases, the complexity of the package can reduce the likelihood that a human being, using normal methods of investigation, would uncover the Trojan, especially if it's an easily overlooked short sequence like DELTREE C:\ or rm -rf. Trojans don't usually announce their intent. Worse still, many Trojans masquerade as legitimate, known utilities that you'd expect to find running on the system.
Thus, you cannot rely on detecting a Trojan by listing current processes. In detecting a Trojan by eye, much depends on the user's experience. Users who know little about their operating systems are less likely to venture deep into directory structures, looking for suspicious files. More proficient users are unlikely to have time to examine the complex system structures of modern operating systems, especially on server-class machines. Even experienced programmers can have difficulty identifying a Trojan, even when the code is available for their examination. Identification of malicious code by reverse-engineering can be more difficult and time-consuming by orders of magnitude.

New Trojans are difficult to detect using heuristic detection. (Unless you use the somewhat sweeping heuristic that a change in a file detected automatically is likely to indicate a Trojan substituted for a legitimate file.) There is no absolute test for code to determine whether it is (or is not) a Trojan because author intent and user expectations are not generally susceptible to automated analysis.
In most cases, Trojans are found in binaries, which remain largely in non-human-readable form. However, the fact that the code is largely static does make Trojans at least as susceptible to "known-something" detection as viruses. In other words, when a known malicious program is identified, it can be detected by software updated with an appropriate search string. Remember that, by most definitions, replication is not a characteristic of the Trojan breed. Trojans spread through the action of being copied by an attacker or a victim socially engineered into carrying out the attacker's wishes, not by self-copying.
Thus it is not usually feasible for an attacker to utilize techniques such as polymorphism to reduce the chance of detection. Since the copying of the program is not a function of the program itself, the program has no means of evolving into a nonidentical copy (a morph) of itself.
Nevertheless, undetected Trojans can lead to total system compromise. A Trojan can be in place for weeks or even months before it's discovered. In that time, a cracker with root privileges could alter the entire system to suit his or her needs. Even when the Trojan is discovered, many hidden loopholes might be left behind when it is removed.

More commonly, the process described as object reconciliation is known as change detection, integrity checking, or integrity management. However, these terms are not strictly synonymous.

Change detection simply describes any technique that alerts the user to the fact that an object has been changed in some respect.

Integrity checking has the same core meaning, but is often taken to imply a more sophisticated approach, not only to detecting change in spite of attempts to conceal it, but to ensuring that the reporting software itself is not subverted.

Integrity management is a more general term. It can include not only the detection of unauthorized changes, but other methods of maintaining system integrity. Such methods can include some or all of the following, in no particular order:

- Maintaining trusted backups

- Blocking unknown intrusions at entry

- Maintenance of strict access control

- Careful application of manufacturer patches to block newly discovered loopholes

- A finely engineered change-management system, using only signed (trusted) code.


A simple method of testing file integrity, is based on reports of changes in file state information. Different file integrity tests vary in sophistication. For example, you can crudely test a file's integrity using any of the following indexes:

- Date last modified

- File creation date

- File size

ETHICAL HACKING PART-4

ALL The Trojan Ports :
THIS IS TO TELL ABOUT THE VARIOUS THREATS FROM TROJAN PORTS N ALL THAT ! FOR SECURITY PURPOSES ONLY !

SocketsDeTroie.230, SocketsDeTroie.250
TCP 28 Amanda.200
TCP 31 MastersParadise.920
TCP 68 Subseven.100
TCP 142 NetTaxi.180
TCP 146 Infector.141, Intruder.100, Intruder.100
TCP 171 ATrojan.200
TCP 285 WCTrojan.100
TCP 286 WCTrojan.100
TCP 334 Backage.310
TCP 370 NeuroticKat.120, NeuroticKat.130
TCP 413 Coma.109
TCP 420 Breach.450
TCP 555 Id2001.100, PhaseZero.100, StealthSpy.100
TCP 623 Rtb666.160
TCP 660 Zaratustra.100
TCP 661 Noknok.800, Noknok.820
TCP 666 BackConstruction.210, BackConstruction.250, Bla.100, Bla.200, Bla.400, Bla.503, Cain.150, Dimbus.100, Noknok.820, Ripper.100, SatansBackdoor.100, SatansBackdoor.101, SatansBackdoor.102, Unicorn.100, Unicorn.101, Unicorn.110
TCP 667 SniperNet.210, Snipernet.220
TCP 668 Unicorn.101, Unicorn.110
TCP 680 Rtb666.160
TCP 777 Tiny.100, Undetected.230, Undetected.300, Undetected.310, Undetected.320, Undetected.330, Undetected.331, Undetected.332
TCP 785 NetworkTerrorist.100
TCP 800 NeuroticKitten.010
TCP 831 NeuroticKat.100, NeuroticKat.120, NeuroticKat.130
TCP 901 NetDevil.130, NetDevil.140
TCP 1000 DerSpaeher.200
TCP 1001 Silencer.100
TCP 1008 AutoSpy.100
TCP 1010 DerSpaeher.200
TCP 1015 Doly.150
TCP 1111 TPort.100
TCP 1130 Noknok.800, Noknok.820
TCP 1207 SoftWAR.100
TCP 1243 Subseven.100, SubSeven.110, SubSeven.180, SubSeven.190, Subseven.200
TCP 1245 VoodooDoll.006
TCP 1269 Matrix.130
TCP 1480 RemoteHack.130
TCP 1568 RemoteHack.100, RemoteHack.110
TCP 1600 DirectConnection.100
TCP 1601 DirectConnection.100
TCP 1602 DirectConnection.100
TCP 1634 NetCrack.100
TCP 1784 Snid.120, Snid.212
TCP 1999 TransmissionScout.100, TransmissionScout.110
TCP 2000 ATrojan.200, InsaneNetwork.400
TCP 2001 DIRT.220, TrojanCow.100
TCP 2003 TransmissionScout.100, TransmissionScout.110
TCP 2023 RipperPro.100
TCP 2040 InfernoUploader.100
TCP 2115 Bugs.100
TCP 2140 DeepThroat.100, DeepThroat.200, DeepThroat.310
TCP 2332 SilentSpy.202
TCP 2589 Dagger.140
TCP 2600 DigitalRootbeer.100
TCP 2989 Rat.200
TCP 3128 MastersParadise.970
TCP 3129 MastersParadise.920, MastersParadise.970
TCP 3150 DeepThroat.100, DeepThroat.200, DeepThroat.310, MiniBacklash.110
TCP 3215 BlackStar.100, Ghost.230
TCP 3333 Daodan.123
TCP 3410 OptixPro.100, OptixPro.110
TCP 3456 Force.155, TerrorTrojan.100
TCP 3505 AutoSpy.130, AutoSpy.140
TCP 3586 Snid.120, Snid.212
TCP 3700 PortalOfDoom.100
TCP 3723 Mantis.100
TCP 3800 Eclypse.100
TCP 3996 RemoteAnything.364
TCP 4000 SkyDance.220, SkyDance.229
TCP 4201 Wartrojan.160, Wartrojan.200
TCP 4225 SilentSpy.202
TCP 4321 Bobo.100
TCP 4444 AlexTrojan.200, Crackdown.100
TCP 4488 EventHorizon.100
TCP 4523 Celine.100
TCP 4545 InternalRevise.100, RemoteRevise.150
TCP 4567 FileNail.100
TCP 4666 Mneah.100
TCP 4950 ICQTrojan.100
TCP 5005 Aladino.060
TCP 5025 Keylogger.WMRemote.100
TCP 5031 NetMetro.104
TCP 5032 NetMetro.104
TCP 5033 NetMetro.104
TCP 5050 RoxRat.100
TCP 5151 OptixLite.020, OptixLite.030, OptixLite.040
TCP 5190 MBomber.100
TCP 5277 WinShell.400
TCP 5343 WCRat.100
TCP 5400 BackConstruction.120, BackConstruction.150, BladeRunner.080, DeepThroat.300
TCP 5401 BackConstruction.120, BackConstruction.150, BackConstruction.210, BackConstruction.250, BladeRunner.080, DeepThroat.300, Mneah.100
TCP 5402 BackConstruction.210, BackConstruction.250, BladeRunner.080, DeepThroat.300, Mneah.100
TCP 5534 TheFlu.100
TCP 5550 XTCP.200, XTCP.201
TCP 5555 Noxcape.100, Noxcape.200
TCP 5695 Assassin.100
TCP 5714 WinCrash.100
TCP 5741 WinCrash.100
TCP 5742 WinCrash.103
TCP 5802 Y3KRat.160
TCP 5810 Y3KRat.160
TCP 5838 Y3KRat.170
TCP 5858 Y3KRat.110, Y3KRat.120, Y3KRat.140
TCP 5880 Y3KRat.140
TCP 5881 Y3KRat.110, Y3KRat.120, Y3KRat.140
TCP 5882 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150
TCP 5883 Y3KRat.110, Y3KRat.140
TCP 5884 Y3KRat.140, Y3KRat.150
TCP 5885 Y3KRat.110, Y3KRat.120, Y3KRat.140
TCP 5886 Y3KRat.120, Y3KRat.140
TCP 5887 Y3KRat.110, Y3KRat.120, Y3KRat.140
TCP 5888 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150
TCP 5889 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150
TCP 5890 Y3KRat.140
TCP 6400 Thething.100, Thething.150
TCP 6556 AutoSpy.120, AutoSpy.122
TCP 6655 Aqua.020
TCP 6660 LameSpy.095
TCP 6666 LameRemote.100, ProjectMayhem.100
TCP 6669 Vampire.100
TCP 6670 DeepThroat.200, DeepThroat.210
TCP 6671 DeepThroat.310
TCP 6699 HostControl.101
TCP 6711 DeepThroat.300, Noknok.820, SubSeven.180, SubSeven.190
TCP 6712 Subseven.100
TCP 6713 Subseven.100
TCP 6767 NTRC.120
TCP 6776 SubSeven.180, SubSeven.190, Subseven.200
TCP 6789 Doly.200
TCP 6796 SubSeven.214
TCP 6912 ShitHeep.100
TCP 6939 Indoctrination.100
TCP 6953 Lithium.100
TCP 6969 2000Cracks.100, Bigorna.100, Danton.110, Danton.210, Danton.220, Danton.310, Danton.320, Danton.330, GateCrasher.110, NetController.108, Sparta.110, VagrNocker.120
TCP 6970 Danton.330
TCP 7001 Freak88.100
TCP 7119 Massaker.100
TCP 7200 Massaker.110
TCP 7300 Coced.221
TCP 7301 Coced.221
TCP 7306 NetSpy.200, NetSpy.200
TCP 7410 Phoenix.190, Phoenix.200
TCP 7511 Genue.100
TCP 7609 Snid.120, Snid.212
TCP 7614 Wollf.130
TCP 7648 BlackStar.100, Ghost.230
TCP 7788 Last.2000, Matrix.200
TCP 7826 MiniOblivion.010, Oblivion.010
TCP 7887 SmallFun.110
TCP 7891 Revenger.100
TCP 7979 VagrNocker.200
TCP 7997 VagrNocker.200
TCP 8000 XConsole.100
TCP 8011 Way.240
TCP 8012 Ptakks.215, Ptakks.217
TCP 8110 LoseLove.100
TCP 8111 LoseLove.100
TCP 8301 LoseLove.100
TCP 8302 LoseLove.100
TCP 8372 NetBoy.100
TCP 8720 Connection.130
TCP 8734 AutoSpy.110
TCP 8811 Force.155
TCP 8899 Last.2000
TCP 9000 Aristotles.100
TCP 9301 LoseLove.100
TCP 9400 InCommand.100, InCommand.110, InCommand.120, InCommand.130, InCommand.140, InCommand.150, InCommand.153, InCommand.160, InCommand.167, InCommand.170
TCP 9401 InCommand.100, InCommand.110, InCommand.170
TCP 9402 InCommand.100, InCommand.110
TCP 9561 CRatPro.110
TCP 9563 CRatPro.110
TCP 9580 TheefLE.100
TCP 9696 Danton.210, Ghost.230
TCP 9697 Danton.320, Danton.330, Ghost.230
TCP 9870 R3C.100
TCP 9872 PortalOfDoom.100
TCP 9873 PortalOfDoom.100
TCP 9874 PortalOfDoom.100
TCP 9875 PortalOfDoom.100
TCP 9876 Rux.100, SheepGoat.100
TCP 9877 SmallBigBrother.020
TCP 9878 SmallBigBrother.020, TransmissionScout.100, TransmissionScout.110, TransmissionScout.120
TCP 9879 SmallBigBrother.020
TCP 9999 ForcedEntry.100, Infra.100, Prayer.120, Prayer.130, TakeOver.200, TakeOver.300
TCP 10001 DTr.130, DTr.140
TCP 10013 Amanda.200
TCP 10067 PortalOfDoom.100
TCP 10100 Gift.240
TCP 10101 NewSilencer.100
TCP 10167 PortalOfDoom.100
TCP 10528 HostControl.100, HostControl.260
TCP 10607 Coma.109
TCP 10666 Ambush.100
TCP 11011 Amanda.200
TCP 11050 HostControl.101
TCP 11051 HostControl.100, HostControl.260
TCP 11223 AntiNuke.100, Progenic.100, Progenic.110
TCP 11225 Cyn.100, Cyn.103, Cyn.120
TCP 11306 Noknok.800, Noknok.820
TCP 11831 Katux.200, Latinus.140, Latinus.150, Pest.100, Pest.400
TCP 11991 PitfallSurprise.100
TCP 12043 Frenzy.2000
TCP 12345 Fade.100, Netbus.160, Netbus.170, VagrNocker.400
TCP 12346 Netbus.160, Netbus.170
TCP 12348 Bionet.210, Bionet.261, Bionet.280, Bionet.302, Bionet.305, Bionet.311, Bionet.313, Bionet.316, Bionet.317
TCP 12349 Bionet.084, Bionet.261, Bionet.280, Bionet.302, Bionet.305, Bionet.311, Bionet.313, Bionet.314, Bionet.316, Bionet.317, Bionet.401, Bionet.402
TCP 12389 KheSanh.210
TCP 12478 Bionet.210
TCP 12623 Buttman.090, Buttman.100
TCP 12624 Buttman.090, Buttman.100
TCP 12625 Buttman.100
TCP 12904 Akropolis.100, Rocks.100
TCP 13473 Chupacabra.100
TCP 13753 AFTP.010
TCP 14100 Eurosol.100
TCP 14194 CyberSpy.840
TCP 14286 HellDriver.100
TCP 14500 PCInvader.050, PCInvader.060, PCInvader.070
TCP 14501 PCInvader.060, PCInvader.070
TCP 14502 PCInvader.050, PCInvader.060, PCInvader.070
TCP 14503 PCInvader.050, PCInvader.060, PCInvader.070
TCP 14504 PCInvader.050, PCInvader.060
TCP 15092 HostControl.100, HostControl.260
TCP 15382 SubZero.100
TCP 15432 Cyn.210
TCP 15555 ICMIBC.100
TCP 16322 LastDoor.100
TCP 16484 MoSucker.110
TCP 16661 Dfch.010
TCP 16969 Progenic.100
TCP 16982 AcidShiver.100
TCP 17300 Kuang.200
TCP 17499 CrazzyNet.370, CrazzyNet.375, CrazzyNet.521
TCP 17500 CrazzyNet.370, CrazzyNet.375, CrazzyNet.521
TCP 17569 Infector.141, Infector.160, Infector.170, Infector.180, Infector.190, Infector.200, Intruder.100, Intruder.100
TCP 17593 AudioDoor.120
TCP 19191 BlueFire.035, BlueFire.041
TCP 19604 Metal.270
TCP 19605 Metal.270
TCP 19991 Dfch.010
TCP 20000 Millenium.100
TCP 20001 Millenium.100, PshychoFiles.180
TCP 20002 AcidKor.100, PshychoFiles.180
TCP 20005 MoSucker.200, MoSucker.210, MoSucker.220
TCP 21212 Schwindler.182
TCP 21554 Exploiter.100, Exploiter.110, Girlfriend.130, GirlFriend.135
TCP 21579 Breach.2001
TCP 21584 Breach.2001
TCP 21684 Intruse.134
TCP 22068 AcidShiver.110
TCP 22115 Cyn.120
TCP 22222 Prosiak.047, Ruler.141, Rux.300, Rux.400, Rux.500, Rux.600
TCP 22223 Rux.400, Rux.500, Rux.600
TCP 22456 Bla.200, Bla.503
TCP 22457 AcidShiver.120, Bla.200, Bla.503
TCP 22784 Intruzzo.110
TCP 22845 Breach.450
TCP 22847 Breach.450
TCP 23005 Infinaeon.110, NetTrash.100, Oxon.110, WinRat.100
TCP 23006 Infinaeon.110, NetTrash.100, Oxon.110, WinRat.100
TCP 23032 Amanda.200
TCP 23432 Asylum.010, Asylum.012, Asylum.013, Asylum.014, MiniAsylum.110
TCP 23456 EvilFTP.100, VagrNocker.400
TCP 23476 DonaldDick.153, DonaldDick.154, DonaldDick.155
TCP 23477 DonaldDick.153
TCP 24000 Infector.170
TCP 24307 Wildek.020
TCP 25386 MoonPie.220
TCP 25486 MoonPie.220
TCP 25555 FreddyK.100, FreddyK.200
TCP 25556 FreddyK.100
TCP 25685 MoonPie.010, MoonPie.012, MoonPie.130, MoonPie.220, MoonPie.240, MoonPie.400
TCP 25686 MoonPie.135, MoonPie.200, MoonPie.400
TCP 25982 MoonPie.135, MoonPie.200
TCP 26274 Delta.050
TCP 27160 MoonPie.135, MoonPie.200
TCP 27184 Alvgus.100, Alvgus.800
TCP 27374 Muerte.110, Subseven.210, SubSeven.213
TCP 28429 Hack'a'Tack.2000
TCP 28430 Hack'a'Tack.2000
TCP 28431 Hack'a'Tack.2000
TCP 28432 Hack'a'Tack.2000
TCP 28433 Hack'a'Tack.2000
TCP 28434 Hack'a'Tack.2000
TCP 28435 Hack'a'Tack.2000
TCP 28436 Hack'a'Tack.2000
TCP 29559 DuckToy.100, DuckToy.101, Katux.200, Latinus.140, Latinus.150, Pest.100, Pest.400
TCP 29891 Unexplained.100
TCP 30000 Infector.170
TCP 30001 Error32.100
TCP 30003 LamersDeath.100
TCP 30029 AOLTrojan.110
TCP 30100 NetSphere.127, NetSphere.130, NetSphere.131
TCP 30101 NetSphere.127, NetSphere.130, NetSphere.131
TCP 30102 NetSphere.127, NetSphere.130, NetSphere.131
TCP 30103 NetSphere.131
TCP 30947 Intruse.134
TCP 31320 LittleWitch.400, LittleWitch.420
TCP 31337 BackOrifice.120, Khaled.100, OPC.200
TCP 31415 Lithium.101
TCP 31416 Lithium.100, Lithium.101
TCP 31557 Xanadu.110
TCP 31631 CleptoManicos.100
TCP 31745 Buschtrommel.100, Buschtrommel.122
TCP 31785 Hack'a'Tack.100, Hack'a'Tack.112
TCP 31787 Hack'a'Tack.100, Hack'a'Tack.112
TCP 31789 Hack'a'Tack.100, Hack'a'Tack.112
TCP 31791 Hack'a'Tack.100, Hack'a'Tack.112
TCP 31887 BDDT.100
TCP 31889 BDDT.100
TCP 32100 ProjectNext.053
TCP 32418 AcidBattery.100
TCP 32791 Akropolis.100, Rocks.100
TCP 33291 RemoteHak.001
TCP 33333 Blackharaz.100, Prosiak.047, SubSeven.214
TCP 33577 SonOfPsychward.020
TCP 34324 TelnetServer.100
TCP 34763 Infector.180, Infector.190, Infector.200
TCP 35000 Infector.190, Infector.200
TCP 35600 Subsari.140
TCP 36794 BugBear.100
TCP 37237 Mantis.020
TCP 37651 YAT.210
TCP 37653 YAT.310
TCP 40308 Subsari.140
TCP 40412 TheSpy.100
TCP 40421 MastersParadise.970
TCP 40422 MastersParadise.970
TCP 40999 DiemsMutter.110, DiemsMutter.140
TCP 41626 Shah.100
TCP 44444 Prosiak.070
TCP 45673 Akropolis.100, Rocks.100
TCP 47262 Delta.050
TCP 48006 Fragglerock.200
TCP 49683 HolzPferd.210
TCP 50000 Infector.180
TCP 50130 Enterprise.100
TCP 50766 Fore.100
TCP 51234 Cyn.210
TCP 51966 Cafeini.080, Cafeini.110
TCP 54321 PCInvader.010
TCP 57341 NetRaider.100
TCP 57922 Bionet.084
TCP 58008 Tron.100
TCP 58009 Tron.100
TCP 59090 AcidReign.200
TCP 59211 DuckToy.100, DuckToy.101
TCP 59345 NewFuture.100
TCP 60000 DeepThroat.300, MiniBacklash.100, MiniBacklash.101, MiniBacklash.101
TCP 60411 Connection.100, Connection.130
TCP 60412 Connection.130
TCP 60552 RoxRat.100
TCP 63536 InsaneNetwork.500
TCP 63878 AphexFTP.100
TCP 63879 AphexFTP.100
TCP 64969 Lithium.100
TCP 65000 Socket.100
UDP 1 SocketsDeTroie.250
UDP 666 Bla.200, Bla.400, Bla.503, Noknok.820
UDP 1130 Noknok.800, Noknok.820
UDP 2140 DeepThroat.100, DeepThroat.200, DeepThroat.310
UDP 2989 Rat.200
UDP 3128 MastersParadise.970
UDP 3129 MastersParadise.920, MastersParadise.970
UDP 3150 DeepThroat.100, DeepThroat.200, DeepThroat.310, MiniBacklash.110
UDP 3333 Daodan.123
UDP 3800 Eclypse.100
UDP 3996 RemoteAnything.364
UDP 4000 RemoteAnything.364
UDP 5555 Daodan.123
UDP 5881 Y3KRat.110, Y3KRat.140
UDP 5882 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.140, Y3KRat.150
UDP 5883 Y3KRat.110, Y3KRat.140
UDP 5884 Y3KRat.140, Y3KRat.150
UDP 5885 Y3KRat.110, Y3KRat.120, Y3KRat.140
UDP 5886 Y3KRat.120, Y3KRat.140
UDP 5887 Y3KRat.110, Y3KRat.120, Y3KRat.140
UDP 5888 Y3KRat.100, Y3KRat.110, Y3KRat.120, Y3KRat.150
UDP 6953 Lithium.100
UDP 8012 Ptakks.217
UDP 10067 PortalOfDoom.100
UDP 10167 PortalOfDoom.100
UDP 10666 Ambush.100
UDP 11225 Cyn.100, Cyn.103, Cyn.120
UDP 11306 Noknok.800, Noknok.820
UDP 12389 KheSanh.210
UDP 12623 Buttman.090, Buttman.100
UDP 12625 Buttman.100
UDP 14100 Eurosol.100
UDP 23476 DonaldDick.155
UDP 26274 Delta.050
UDP 27184 Alvgus.100
UDP 28431 Hack'a'Tack.2000
UDP 28432 Hack'a'Tack.2000
UDP 28433 Hack'a'Tack.2000
UDP 28434 Hack'a'Tack.2000
UDP 28435 Hack'a'Tack.2000
UDP 28436 Hack'a'Tack.2000
UDP 29891 Unexplained.100
UDP 30103 NetSphere.131
UDP 31320 LittleWitch.400, LittleWitch.420
UDP 31337 BackOrifice.120, OPC.200
UDP 31416 Lithium.100, Lithium.101
UDP 31789 Hack'a'Tack.100, Hack'a'Tack.112
UDP 31791 Hack'a'Tack.100, Hack'a'Tack.112
UDP 33333 Blackharaz.100
UDP 47262 Delta.050
UDP 49683 HolzPferd.210
UDP 60000 MiniBacklash.100


USE YOUR KNOWLEDGE FOR BETTERMENT OF THE SOCIETY AND PEOPLE AROUND YOU AND NOT FOR ANY MALICIOUS PURPOSES AND ALL THAT !

ETHICAL HACKING PART-3

Lesson 01 - Being a Hacker
Lesson 02 - Windows and Linux
Lesson 03 - Ports and Protocols
Lesson 04 - Services and Connections
Lesson 05 - System Identification
Lesson 06 - Malware (Viruses, Trojans, etc.)
Lesson 07 - Attack Analysis
Lesson 08 - Digital Forensics
Lesson 09 - E-mail Security and Privacy
Lesson 10 - Web Security and Privacy
Lesson 11 - Passwords
Lesson 12 - Internet Legalities and Ethics

http://rapidshare.com/files/8816954/hacker_highschool.rar

Hacking - Computers - Networking - TCPIP Network Administration
http://rapidshare.com/files/8832004/Hacking_-_Computers_-_Networking_-_TCPIP_Network_Administration_-_Oreilly.pdf

How to Make Key Generators
Hacking for Dummies 2
Hackers Survival Guide
A Beginners Guide To Hacking Computer Systems

http://rapidshare.com/files/8832738/Hacking_ebooks.rar

Win2K and Linux :

http://rapidshare.com/files/8877126/McGraw-Hill_-_Hacking_Exposed__3rd_Ed_-_Hacking_Exposed_Win2K_-_Hacking_Linux_Exposed__Book_Excerpts

Protecting Your Inter :

http://rapidshare.com/files/8883477/Maximum_Security_-_A_Hacker_s_Guide_to_Protecting_Your_Inter.pdf

Hacking Cable Modem :

http://rapidshare.com/files/8890704/Cable_Modem_Hacking_How-to.pdf

Hacking Directiv :

http://rapidshare.com/files/8892114/Hacking_Directv_-_Dss_-_Satellite_Access_Card_Programming.pdf

Network Security Secrets...

http://rapidshare.com/files/8894669/Hacking_Exposed-_Network_Security_Secrets_and_Solutions__MCGraw-Hill-2001_.pdf

Into Computer Systems Beginners

http://rapidshare.com/files/8899259/Hacking_Into_Computer_Systems_-_Beginners.pdf

Web Hacking :

http://rapidshare.com/files/8902336/Hacking_Exposed-_Web_Applications.pdf

Hacker's black book :

http://rapidshare.com/files/8907651/Hacker_s_black_book.rar

THESE ARE FOR ETHICAL HACKING AND FOR GOOD OF YOUR KNOWLEDGE ABOUT INTERNET AND NETWORKING , AND ABSOLUTELY NOT FOR USE AGAINST ANYTHING PERSON OR PC !

ETHICAL HACKING PART -2

Hacking School Network :

We all start somewhere. Some of us start collecting outdated programs in hopes of being able to 'hack' anything with the click of a mouse. Others start in the 'hacker' rooms, asking questions about every little thing, without even bothering to try a search engine. In writing this article I am assuming that you are capable of teaching yourself. That you can look up things for yourself. I am also assuming that you have already started your search for knowledge, and at this point ready. I am also assuming that you have a better reason for cracking into your school's network than to change your grades. Maybe I am just assuming too much Smile. School networks are very ideal for beginners.

Section 1: Accessing the Shared Network :

Computer class (if you have one) is of course a good place to start. Your computer class will undoubtedly use a windows operating system (not saying this is always the case, but usually...) so let's start from there. Usually these computers have two rights, user and administrator rights. So our first goal here is to jump from user(the privileges you currently have) to administrator privileges. If the operating system is Windows 9.x then we will look for the *.pwl file for the administrator account. This will be labeled according to the admin username. You'll find this in the windows directory. Just sneak in a floppy disk during class and copy the file to the floppy. Then take the file home and use a pwl cracker to crack the file (if you use brute force, make the settings lower case letters with 1-10 characters, but I'd suggest first trying a dictionary crack. Just collect yourself a few word lists). It'll take a while to crack the password so you will have to be patient. If the operating system is Windows XP then that just makes it even easier. Just grab a Windows 2k CD (download one off kazaa or overnet, if you don't have a copy) and sneak it into class. Place the CD in and boot up the computer.Then start the Win2k Recovery Console, which is a troubleshooting program. This will allow you to operate as administrator without even having to bother with the password. So now that you have administrator privileges go to "Network Neighborhood" and take a look through the network. Copy a few addresses (anything that seems interesting), and if the computers used are Win9.x, when you go home you can load up your internet browser and type "file://[target address]" to gain access. This is network access, but not the kind that will allow you to change your grades (unless the software the teachers use for accessing/modifying/deleting student records happens to be installed on the computer, and the password just conveniently happens to be the same password that the teacher uses on the windows administration account....which is not entirely far fetched). If the computer you are using is Win2k (Windows 2000) then you can try going to the site below to get a tool to crack the account....

http://www.lostpassword.com/windows-xp-2000-nt.htm (which also works for nt and xp)

p.s: If you don't have a computer class, then you can try the computers at the library.


Section 2: Network Exploitation :

Now let's talk network operating systems (NOSs). If your school uses Windows workgroups as a NOS, then the method described above would be your method in. Most likely, if the NOS is not windows workgroups, then it is Novell Netware. So now lets get into novell. Novell Netware is a server-based operating system for networks. Novell runs off a version of DOS called dr-dos (also known as Caldera DOS, since it was created by Caldera Systems Inc). It also runs off a protocol called IPX/SPX (Internetwork Packet eXchange/Sequenced Packet eXchange), which is very TCP/IP compatible (the later versions of novell run off a protocol based off ipx/spx known as NCP, Netware Core Protocol). Now in novell netware there are four different kind of rights given. There is user which gives access to //public and some other basic files. There is superuser, which is the access given to teachers. With this access they can view and delete student accounts whenever neccessary, but they can not delete, create, or change accounts. There is supervisor, which is the access administrators give themselves to work off of. And finally there is console, which is the highest rights one could gain on a novell network. Now since there have already been many articles written on novell network infiltration (and I'm in a lazy mood) I am now going to point you in the direction of articles that I had posted up from a previous article on a very similar subject (exactly the same subject actually, but targetted at a specific school network)...

Novell Netware v1.x-4.x: http://www.geocities.com/anti_dcss/novell_faq.zip

Novell Netware v3.12-4.x: http://www.geocities.com/anti_dcss/novzero.zip

Novell Netware v5.x: http://www.geocities.com/anti_dcss/hack_novell.zip

There is also AppleTalk, which may be implemented in order to integrate the Macintosh computers with the rest of the network, but it isn't really neccessary to exploit AppleTalk so I won't get into it.

Now let's get into exploiting the network from the outside. If your school has a website, resolve the ip of the site and scan the network for other servers (i.e. open up a scanner and scan xxx.xxx.xxx.1-xxx.xxx.xxx.254). Use LANguard if you are running windows. The router will usually be *.1. Now if you scan this you will find either/both telnet (23) or snmp (161). If telnet is open then you can exploit the fact that all telnet sessions are unencrypted by using a tool like either Juggernaut or Hunt to hijack a session to sniff out sensitive information (like passwords of course). SNMP is protected by community strings, but in many cases these are set as default, which is "private". If not you can use a community string brute force program (for example SolarWinds) to break into the router. Once inside the router, you can easily use the access to bridge into the rest of the network. There will also be other servers you can try gaining access to bridge into the network. Web servers (port 80) are not important(unless you want to deface them), but ftp and pop3 servers can be cracked and used to bridge into the network. For ftp servers you can run network scanners to find vulnerabilities, and for pop3 servers you can look up scripts and see what might work (depends on the operating system the server is installed on). You need to organize the way you proceed with this crack however. Don't find and exploit vulnerabilities in the same night. Spread it out. Follow these three steps...Research, Plan, and Execute. This is no one day job. You need to be very patient or you will be caught. You also need to do this as late as possible (two or three o' clock in the morning is usually a safe time). Also you will want to bounce off proxies as much as possible. Better yet, for the tools you don't either have to compile or install, run them from the current location instead of off your computer. Most of the other tools needed should allow you to bounce off proxies/wingates. Remember, whether you are breaking in from the outside or the inside, to be cautious. Being paranoid is not a bad thing. After all, what you are doing IS against the law. Good luck Wink.

Another Thing: If the teachers at your school use a program called TSIS to manage student records, then usually there will also be a TSIS remote login server on the network. Using a scanner you should be able to pick up on this. The address is usually...

http://tsis.(county name).k12.(state initials).us


<< sauv << Also you can take a look at everyones files just by having firefox

At our school we have our surname and the initial of our first name but we also have a number depending on what year we are in.
for example

year 9 =
smithj07

year 10 =
smithj06

year 11
smithj05

something like that you could have the number in a different position or no number at all.

Anyway, its quite simple
just go to start, my computer, your personal area,
then right click anything could be a folder or a word doc.
properties
now look for location
something like this
C:\Documents and Settings\User\My Documents
copy this exact into firefox search bar and go.
Now you can see all your files but how do you get everyone elses.
well like i was talking about before with the numbers 07 06, 05
At our school if you delete everything after the number it will show every ones name in your hole year and you can change the number depending onthe year just click and your in now change the files do what you want.

I'm sorry if this doesn't work on your school computers
or i'm just being very stupid because everyone knows about this anyway

Fundamentals Of Ethical Hacking :

Fundamentals Of Ethical Hacking :

Some Fundamentals Of Ethical Hacking.........
1. You Should Have The Basic Knowledge Of The Computer That U Wish To Hack To....

2.You Should Never Share Your details Wth Any Second Person.... Twisted Evil

3.Gather His IP address By Netstat -a function
4. Computers Speed Boosts Up.... by lotta sw on sites !

4.Lastly Launch a keylogger into the vicims Pc.......

!=========================================================================

Tell us how to install keylogger on remote pc...nmap?telnet?..what da hell's that...

Nmap is a port scanner.... that scans the remote PC for open port..Telnet is used to recide a connection to d open port...... n thats the simplest way

SECURITY

Web Hacking Tools :
DONNO USE YOUR KNOWLEDGE FOR ANY MALICIOUS INTENT AND ACTIVITIES :
######################

Apache Hacking TooLz Directory:

Apache Chunked Scanner
Apache Hacker Tool v 2.0
Apache H4x0r Script

Remote File Inclusion And Remote Command Execution Directory :

IIS 5 Dav Scanner & Exploiter
PHP Attacker
PHP Injection Scanner & Exploiter
XML-RPC Scanner & Exploiter


Databases & SQL Injection & XSS TooLz Directory

Casi 4.0
ForceSQL
Mssql BruteForce TooL
SQL Ping 2
SQL Recon
SQL Vuln Scanner
SQL & XSS TooL

PHP Shells

rootshell v2.0
c99shell #16
Backdoor php v0.1
r57shell
ajan
casus15
cmd (asp)
CyberEye (asp)
CyberSpy5 (asp)
Indexer (asp)
Ntdaddy (asp)
News Remote PHP Shell Injection
PHP Shell
phpRemoteView
nstview php shell

Note: Use it at your own risk!
DON'T USE IT FOR ANY MALICIOUS ACTIVITY !'TIS JUST FOR ACADEMIC PURPOSES ONLY !

Download:

Code:
http://www.mediafire.com/?8e19kd1sgwq

Password: Code: starski

Note: Hide your IP when you want to attack a site so your real IP won't get banned if you failed. Some site has protections like Nuke Sentinel who filter out scripts. So better to scan the website before making an attack. Know what kind of server the website is running, what OS it is using, what language it was written (ei. php, perl, html, css), what kind of security it has (ei. nuke sentinels, ssl). And remember, think outside the box, use at your own risk.

Use also this scanning the website for possible exploits:

Code:
http://www.acunetix.com/vulnerability-scanner/

SOURCE : hackerz forum

HACKER'S TOOL KIT

TOOLKIT FOR DIFFERENT TYPES OF EDUCATIONAL PURPOSES AND FOR NETWORK SECURITY :
DONNO USE YOUR KNOWLEDGE OF ABOUT ANYTHING FOR ANY MALICIOUS ACTIVITIES , KNOWLEDGE IS TO BUILD - TO SECURE - >> NOT TO DESTROY OR DEVASTATE !

========================================================================================

Ultra Hacker toolkit AIO :

95-ME Keygen.rar
AddrView.rar
AnonFTP.zip
AOL new.rar
AppToService.rar
arpinject.zip
aspack21.zip
Astaroth Joiner v2.rar
atk-2.1.zip
BankOfAmerica.rar
bios_pass_remover.zip
BlasterW32.zip
blue.zip
bmpripper.zip
brutus.zip
Cable Modem Sniffer.rar
CapKeys_DIGITAL.rar
CASXM138.zip
CAYZODQF.zip
CGI Founder v1.043.zip
cgis4.zip
CGISscan.zip
cia10.zip
cports.rar
craagle.zip
Crackftp.zip
CreditCardGjenerator.rar
Davs_TR_REtail.zip
DDL Sites.rar
DeepUnFreez.zip
DrVBS.zip
eBay.rar
EESBinder.zip
egold.rar
E-mail Cracker.rar
ezDataBase_Defacer.rar
F.B.I - Binder.rar
FTP Brute Forcer.rar
ftpbr.zip
f*ck Mail Bomber 2.3.rar
G00B3RS_phpBB_exploit_pack.rar
genxe-beta-0.9.0.zip
Google_Hacker_1.2.rar
grinder1.1.zip
Hack FLASH Template.zip
Hack MY Space.zip
Hack Photoshop CS2.zip
HackersAssistant.zip
HackTheGame.zip
hck.zip
hlboom.zip.zip
Hook Tool Box.rar
Hotmail Email Hacker.rar
Hotmail HAcker Gold.rar
Hotmail ScamPage.zip
HotmailHack.rar
HSBC-US.rar
hydra-4.6-win.zip
iecv.rar
IP2.rar
ipnetinfo.rar
john-17w.zip
Key Changer.rar
Key_Logger.zip
Legion NetBios Scanner v2.1.zip
Mail Boomb_2.0 YAHOO.zip
MIDNITEmassacre.zip
MooreR Port Scanner.rar
MSN Flooder 2.0.rar
MSN Messenger Account Cracker v2.0.rar
MSNLoader.rar
NET BIOS Scaner.rar
NetBIOS Name Scanner.rar
NetResView.rar
NFO Maker 1.0.zip
Nimda.zip
nkedb.zip
nolimitcracker.rar
NTPacker.zip
nts.zip
NullAddFrontend.zip
On-Off MSN.rar
OS Update Hack.rar
P0kes WormGen 2.0.zip
panther.zip
PayPal.rar
PCAnyPass.rar
Php Nuke Hacker v11.0.rar
phpBB Annihilator.rar
phpbb attack.rar
phpbb bruteforcer.rar
PhpBB pass extractor.zip
phpBB_DoS.rar
phpbb_spammer.rar
phpBBAttacker.rar
phpBBAttacker.zip
phpBBcracker.rar
PhpBuGScan.rar
~censored~.rar
PhpNuke_bypass.rar
Ping & Nukes.rar
Port Listener XP.rar
pqwak2.zip
procexp.rar
ProMo.rar
ProxyPro.zip
Pure phpBB Email harvester.rar
rainbowcrack-1.2-src win-lin.zip
Remote Shut Down.rar
ResHacker.zip
Rocket.zip
rpc.zip
RpcScan101.zip
Sasser.zip
SendMailer.zip
Server 2003 Keygen.rar
Server Killer.rar
showpassv10.zip
sitedigger2.zip
smbat-win32bin-1.0.4.zip
SMBdie.zip
smbproxy-win32bin-1.0.0.zip
Source Checker.rar
source codes.rar
sprut.zip
SQLScan v1.0.rar
Stealth - HTTP Scanner v1.0 build 23.zip
super.zip
SuperScan4.rar
tftpd32.273.zip
thunter.zip
TinaSoft KILL.zip
traceroute.rar
UC.Forum Spam.rar
udpflood.zip
Ultra Dos.zip
USBank.rar
Visa Spam.zip
Warez Sites.rar
Web Cracker 2.0.rar
WebCracker 4.0.rar
whoistd.rar
Win XP Activator.rar
WindowHide.rar
Windows XP Corperate Keygen.rar
Windows XP KeyGen.rar
Windows XP Product Key Changer.rar
Windows XP Product Key Checker.rar
Windows XP Product Key Viewer.rar
WindowsAdminpasswordHack.rar
wwwhack.rar
xpass.zip
xplizer.rar
Yahoo Password.zip
yahooUltraCracker.rar
zehir.zip

Download Link :- http://rapidshare.com/files/35731205/Ultra_Hack_AIO__By_St0l3n_.rar


ETHICAL HACKING TO PROTECT YOUR ORGANISATION , YOUR PC AND YOUR NATION !

INTERNATIONAL CERTIFICATIONS

THE ULTIMATE CERTIFICATION PRACTISE EXAM COLLECTION :

Preparing for a certification exam?? This is the COMPLETE SelfTest software practice exam catalog featuring 147 CBTs from vendors.This has been IMHO one of the more difficult series of exams to find with a working patch/crack due to the online activation.Full credit goes to some dude who goes by the alias REBEL for the patch which bypasses the online activation and fully
unlocks the each exam on the CD for your enjoyment!

CONTENTS:

70-086 Implementing and Supporting Mcft Systems

Management Server 2.0

70-210 Installing, Configuring and Administering

Mcft Windows 2000 Professional

70-214 Implemening and Administering Security in a

Mcft Windows 2000 Network
70-215 Installing, Configuring and Administering

Mcft Windows 2000 Server

70-216 Implementing and Supporting Mcft Windows 2000

Network Infrastructure

70-217 Implementing and Supporting Mcft Mcft

Windows 2000 Directory Services Infrastructure

70-218 Managing a Mcft Windows 2000 Network Environment

70-219 Designing a Windows 2000 Directory Services

Infrastructure + 4 Case Studies
70-220 Designing Security for a Windows 2000 Network + 4 Case

Studies

70-221 Designing a Windows 2000 Network Infrastructure + 4 Case Studies

70-222 Migrating from Mcft Windows NT 4.0 to Mcft

Windows 2000

70-223 Installing, Configuring, and Administering Mcft Clustering Services by Using Mcft Windows 2000 Advanced Server

70-224 Installing, Configuring, and Administering Mcft

Exchange 2000 Server
70-225 Designing and Deploying a Messaging Infrastructure

with Mcft Exchange 2000 Server

70-226 Designing Highly Available Web Solutions with Mcft

Windows 2000 Server Technologies

70-227 Installing, Configuring, and Administering Mcft Internet Security and Acceleration (ISA) Server 2000, Enterprise Edition

70-228 Installing, Configuring, and Administering Mcft SQL Server 2000 Enterprise Edition

70-229 Designing and Implementing Databases with Mcft SQL

Server 2000 Enterprise Edition

70-230 Designing and Implementing Solutions with Mcft BizTalk Server 2000, Enterprise Edition
70-232 Implemting and Maintaining Highly Available Web Solutions

with Mcft Windows 2000 Server Technologies and Mcft Application Center 2000

70-234 Designing and Implementing Solutions with Mcft

Commerce Server 2000

70-244 Supporting and Maintaining a Mcft Windows

NT Server 4.0 Network

70-270 Installing, Configuring, and Administering Mcft

Windows XP Professional
70-271 Supporting Users and Troubleshooting a Mcft

Windows XP Operating System

70-272 Supporting Users and Troubleshooting Desktop Applications on a Mcft Windows XP Operating System

70-282 Designing, Deploying, and Managing a Network Solution for a Small- and Medium-Sized Business

70-284 Implementing and Managing Mcft Exchange Server 2003

70-285 Designing a Mcft Exchange Server 2003 Organization

70-290 Mangaing and Maintaining a Mcft Exchange Server 2003 Environment

70-291 Implementing, Managing, and Maintaining a Mcft Windows Server 2003 Network Infrastructure

70-292 Managing and Maintaining a Mcft Windows Server 2003 Environment for an MCSA Certified on Windows 2000
70-293 Planning and Maintaining a Mcft Windows Server 2003 Network Infractructure

70-294 Planning, Implementing, and Maintaining a Mcft Windows Server 2003 Active Directory Infractructure

70-296 Planning, Implementing, and Maintaining a Mcft Windows Server 2003 Environment for an MCSA Certified on Windows 2000

70-297 Designing a Mcft Windows Server 2003 Active Directory and Network Infractructure

70-298 Designing Security for a Mcft Windows Server 2003 Network

70-299 Implementing and Administering Security in a Mcft Windows Server 2003 Network

70-300 Analyzing Requirements and Defining Mcft .NET Solutions Architectures

70-301 Managing, Organizing, and Delivering IT Projects by Using Mcft Solutions Framework 3.0
70-305 Developing and Implementing Web Applications with Mcft Visual Basic .NET and Mcft Visual Studio .NET

70-306 Developing and Implementing Windows-based Applications with Mcft Visual Basic .NET and Mcft Visual Studio .NET

70-310 Developing XML Web Services and Server Components with Mcft Visual Basic .NET and the Mcft .NET Framework

70-315 Developing and Implementing Web Applications with Mcft Visual C# .NET and Mcft Visual Studio .NET

70-316 Developing and Implementing Windows-based Applications with Mcft Visual C# .NET and Mcft Visual Studio .NET

70-320 Developing XML Web Services and Server Components with Mcft Visual C# .NET and the Mcft .NET Framework

70-330 Implementing Security for Applications with Mcft Visual Basic .NET

70-340 Implementing Security for Applications with Mcft Visual C# .NET

Mcft Office Certifications

Access 2003 Core

Excel 2003 Core

Excel 2003 Expert

Outlook 2003 Core

PowerPoint 2003 Core

Word 2003 Core
Word 2003 Expert

Access 2000 Core

Excel 2000 Core

Excel 2000 Expert

PowerPoint 2000 Core

Word 2000 Core

Word 2000 Expert

Access 2002 Core

Excel 2002 Core
Excel 2002 Expert

PowerPoint 2002 Core

Word 2002 Core

Word 2002 Expert

Cisco Certifications

640-801 Cisco Certified Network Associate
640-811 Interconnecting Cisco Networking Devices

640-821 Introduction to Cisco Networking Technologies

640-861 Designing for Cisco Internetwork Solutions (DESIGN)

642-432 Cisco Voice Over IP

642-501 Securing Cisco IOS Networks

642-511 Cisco Secure Virtual Private Networks (CSVPN)

642-521 Cisco Cisco Secure PIX Firewall Advanced

642-531 Cisco Secure Intrusion Detection System (CSIDS)

642-541 Cisco SAFE Implementationi (CSI)
642-577 Cisco Wireless LAN Design Specialist

642-582 Cisco Wireless LAN Support Specialist

642-611 Implementing Cisco MPLS (MPLS)

642-642 Implementing Cisco Quality of Service (QoS)

642-661 Configuring BGP on Cisco Routers

642-801 Building Scalable Cisco Internetworks

642-811 Building Cisco Multilayer Switched Networks v2.0 (BCMSN)

642-821 Building Cisco Remote Access Networksv2.0 (BCRAN)
642-831 Cisco Internetwork Troubleshooting Support

642-871 Designing Cisco Network Service Architectures

642-891 Cisco Composite Exam

(ISC)2 Certifications

CISSP CISSP

PMI Certifications

CAPM Certified Associate in Project Management
PMP Project Management Professional 2000

CheckPoint Certifications

156-110 Check Point Certified Security Principles Associate

156-210 Check Point Certified Security Administrator 156-210.4

CIW Certifications

1D0-420 CIW Site Designer
1D0-425 CIW E-Commerce

1D0-435 JavaScript Fundamentals

ORACLE Certifications

1Z0-001 Introduction to Oracle: SQL and PL/SQL

1Z0-007 Introduction to Oracle9i

1Z0-010 Oracle8: New Features for Administrators (Certication Upgrade from Oracle7 to Oracle

1Z0-020 Oracle8i: New Features for Administrators

1Z0-030 Oracle9i: New Features for Administrators
1Z0-031 Oracle9i: DBA Fundamentals I

1Z0-032 Oracle9i Database: Fundamentals II

1Z0-033 Oracle9i Performance Tuning

1Z0-035 Oracle9i New Features for Oracle7.3 and Oracle8 OCPs

1Z0-040 Oracle Database 10g: New Features for Administrators

1Z0-042 Oracle Database 10g: Administration I

1Z0-101 Develop PL/SQL Program Units

1Z0-130 Oracle Forms Rel. 1 to Rel. 6/6i New Features
1Z0-131 Build Internet Applications I

1Z0-132 Build Internet Applications II

1Z0-147 Oracle9i: Program with PL/SQL

NOVEL Certifications

50-632 Networking Technologies

50-649 TCP/IP fro Networking Professionals

50-650 Internet Security Management with BorderManager Enterprise Edition 3.5

50-653 NetWare 5.1 Administration
50-654 NetWare 5.1 Advanced Administration

50-658 Service and Support

50-664 Novel eDirectory Design & Implementation

50-676 Upgrading to NetWare 6

and many more
-------------------------------------------------------------------------------------

Installation notes:

1. unRAR, mount/burn

2. Install whatever exams you want

3. Copy the patch_self_test.exe file to the installation directory (typically this is C:\Program Files\SelfTest)

4. Run the patch and you're good to go! If you decide later to install more exams, you need not re-apply the patch.

Download:

CODE Code:
http://my-sl.net?YOLHK
http://my-sl.net?YOAVE
http://my-sl.net?NBTUQ
http://my-sl.net?CRYZX

Size - 100 MB each & 38 MB for part 4

Password: Code:
CairaC


MORE TO COME !

E-MAIL HACKING FOR GOOD PURPOSES : DONNO MISUSE IT FOR MALICIOUS PURPOSES !

How to find senders IP address from received mail :
How to find senders IP address from received mail

Emails are very important part of our communication system
We think that we know everything about emails

we know how to compose email , how to attach a file , how to send it to others ,How to receive emails from others and many other things.This is all we know about emails.But this is not end of it .When you receive or send emails many other things are sent with it.

At this time when Email is progressively used for business and for many purposes, not to mention it is being used for phishing and other malicious intentions. It is of utmost priority to understand the other "messages" besides what has been sent or received by you.

Every email comes with a “Header” which is one part of an e-mail structure; call it DNA of the mail. It carries the basic fundamental information such as from whom the email comes, to whom it is addressed, date/time it was sent and the subject of the email. It is similar to an electronic postSeptemberk. Moreover, it also carries other detailed information which we usually don’t see.

This basic information comes in all brief/basic headers that most email programs automatically shows. This detail technical information can be viewed in a full header. All email programs can be set to show only brief header or full header and it is up to the users to set the program whether to view only “brief header” or “full header”.

Full header carries the information of the mail server’s name that the email passed through on its way to the recipient, and sender's IP address and even the name of the email program and its version used.

Knowledge of this information is essential for analysis and investigation purposes on cases involving email abuse, spamming, harassment, forgeries and mail-bombing. It is worth mentioning, understanding of this tool would definitely help people to counter these attacks, and save themselves from unwarranted consequences. Well, this information could not be found in a brief header.

Here we will take the case of Google mail and Yahoo mail to find out the full header.

Google Mail.

Using your id/password, login to Gmail. Open the mail for which you wish to find the full header of the sender. Click on the inverted triangle placed just next to Reply.

You will get something like this…

Delivered-To: Mr.x@gmail.com
Received: by 10.36.81.3 with SMTP id e3cs239nzb; Tue, 12 September 2007 15:11:47 -0800 (PST)
Return-Path:
Received: from mail.emailprovider.com (mail.emailprovider.com [111.111.11.111]) by mx.gmail.com with SMTP id h19si826631rnb.2007.03.12.15.11.46; Tue, 12 September 2007 15:11:47 -0800 (PST)
Message-ID: <20070312231145.62086.mail@mail.emailprovider.com>
Received: from [11.11.111.111] by mail.emailprovider.com via HTTP; Tue, 12 September 2007 15:11:45 PST
Date: Tue, 12 September 2007 15:11:45 -0800 (PST)
From: Mr.y
Subject: Hello
To: Mr.x

In the example, headers are added to the message three times:

1. When Mr.y composes the email

Date: Tue, 12 September 2007 15:11:45 -0800 (PST)
From: Mr .y
Subject: Hello
To: Mr.x
2. When the email is sent through the servers of Mr.y's email provider, mail.emailprovider.com

Message-ID: <20070312231145.62086.mail@mail.emailprovider.com>
Received: from [11.11.111.111] by mail.emailprovider.com via HTTP; Tue, 12 September 2007 15:11:45 PST

3.When the message transfers from Mr.y 's email provider to Mr. x's Gmail account

Delivered-To: Mr.x@gmail.com
Received: by 10.36.81.3 with SMTP id e3cs239nzb;Tue, 12 September 2007 15:11:47 -0800 (PST)

Return-Path: Mr.y@emailprovider.com
Received: from mail.emailprovider.com (mail.emailprovider.com [111.111.11.111]) by mx.gmail.com with SMTP id h19si826631rnb; Tue, 12 September 2007 15:11:47 -0800 (PST)

Below is a description of each section of the email header:

Delivered-To: Mr.x@gmail.com

The email address the message will be delivered to.

Received: by 10.36.81.3 with SMTP id e3cs239nzb;
Tue, 29 Mar 2005 15:11:47 -0800 (PST)

The time the message reached Gmail's servers.

Return-Path:

The address from which the message was sent.

Received: from mail.emailprovider.com
(mail.emailprovider.com [111.111.11.111])
by mx.gmail.com with SMTP id h19si826631rnb.2005.03.29.15.11.46;
Tue, 29 Mar 2005 15:11:47 -0800 (PST)

The message was received from mail.emailprovider.com, by a Gmail server on March 29, 2005 at approximately 3 pm.

Message-ID: 20050329231145.62086.mail@mail.emailprovider.com

A unique number assigned by mail.emailprovider.com to identify the message.

Received: from [11.11.111.111] by mail.emailprovider.com via HTTP; Tue, 29 Mar 2005 15:11:45 PST

Mr.y used an email composition program to write the message, and it was then received by the email servers of mail.emailprovider.com.

Date: Tue, 29 Mar 2005 15:11:45 -0800 (PST)
From: Mr y
Subject: Hello
To: Mr.x

The date, sender, subject, and destination -- Mr. Jones entered this information (except for the date) when he composed the email.

And for IP, look for Received:from followed by the IP within square brackets [ ] e.g.

Received: from [11.11.111.111] by mail.emailprovider.com via HTTP; Tue, 12

Also importantly, there are times when you might find multiple Received: from entries, in that case, please select the last one as the valid choice.

SOURCE : hackerz forum !

THINGS YOU MUST KNOW

//* THE ARTICLE IS MEANT FOR ACADEMIC PURPOSES AND NOT FOR TEACHING BY ANY MEANS THE WAYS TO HACK A SYSTEM,OR ANYTHING OR DOING ANY ACTIVITIE(S)WITH A MALICIOUS INTENT !
THAT SHOULD BE VERY CLEAR WHEN YOU GO THROUGH THIS ARTICLE ! *//

//* KNOWLEDGE SHOULD AND MUST BE USED FOR BETTER PURPOSES (ONLY)! *//


========================================================================================
Complete Tutorial On Hacking Into Email : Introduction

I have written this tutorial to address a question that is all too commonly asked in any channel/chat room with "hack" in the title (asked in frequency to the point of harrassment really). So since this is a question that so many people ask, then I believe that there should at least be an answer available (regardless of the morality or "lameness" of such a question). So you as the reader are most likely reading this because you want to break into somebody's email account.

Well, you must understand that there is no 1-2-3 process to anything. I will give you options to consider when persuing such a task, but it will ultimately be up to you to do this. This is what you want to do, and no matter what sort of offers you throw up at anybody, nobody is going to do this for you. There is no program that is going to do all this for you. Also don't forget that nobody is going to hold your hand and lead you through this. I'm offering you as the reader suggestions for ways you can address this task, and that is about all the help you are going to get from anybody. So now that I've made all that clear, let's begin...

Things You Should Know

As I mentioned in the previous section, there is no program that will do all this for you. Almost all the crackers you see out there will not work, because services like Hotmail, Yahoo!, etc. have it set so that it will lock you from that account after a certain number of login attempts. There are some rare exceptions, like some crackers for Yahoo! that are made for cracking "illegal" accounts, but the thing you must understand about those types of crackers is that they are built to crack SPECIFICALLY "illegal" names. They can not be used to target a specific account on Yahoo!, so don't try to use them for this purpose. Another thing you must know if you ask this question in any "hacker" chat room/channel (which I highly discourage), or if you read something on this topic, and you hear that you have to email some address and in any way have to give up your password in the process, do NOT believe this. This is a con used to trick gullible people into handing over their passwords. So don't fall for this. Well that concludes this section, now lets get to what you want to know.

If You Have Physical Access

I will start off with options you have if you have physical access to the computer of the user that you are targeting, because it is a lot easier if you do. One option you have, that you will hear a lot if you ask this question, and anybody bothers to answer is to use a keylogger. A keylogger is an excellent option, and probably the easiest. There are a lot of keyloggers out there, ranging from hardware keyloggers, to software keyloggers. For this task, you won't need to buy a hardware keylogger, since the only advantage to a hardware one is that you can grab passwords that are given to access a certain local user on the operating system used. There are a lot of software keyloggers out there, and you can feel free to check out www.google.com to look at your options. I will go ahead and toss a couple of keyloggers out to try for those of you who seem allergic to search engines.

One option you have that is good for a free keylogger is Perfect Keylogger (which you can find at www.blazingtools.com/bpk.html). It works just fine, and has some nice options to keep it hidden from your average end user (computer user).

Another option you have, which is probably the best one you can get is Ghost Keylogger. It has a lot of options that will allow you to get the results of this program remotely (it will email you the results). However, this is not a free keylogger, so if you are wanting to get a copy you can look on the file sharing networks for a copy of the program, and the serial number for it (look on www.zeropaid.com for different file sharing clients you can try).

Once you have whatever keylogger you are going to use downloaded, just install it onto the computer you are wanting to monitor, and wait till next time they login to their email account. You will then have the password for the account. Another option you have if they use Outlook to access their email account, is to copy the *.dbx files for their Outlook account onto a floppy, and extract the emails at home (the dbx file stores the files stored in each Outlook folder on a given account, meaning the received and sent emails). When you are on the computer of the user you are targeting, look in C:\Windows\ApplicationData\Identities\{ACblahblahblah}\Microsoft\ OutlookExpress\ and copy all the .dbx files onto a floppy. Then when you take the .dbx files back to your house, use DBXtract to extract the messages from these files. Check out the link below to download this program....

www.download-freeware-shareware.com/Freeware-Internet.php?Type=4171

Another option you have if you have physical access is to execute a RAT (Remote Administration Tool, you may know these programs as trojans) server on the computer. Of course, you do not have to have physical access to go this route, but it helps. What you must understand is that these tools are known threats, and the popular ones are quickly detected by antivirus software, and thusly taken care of. Even ISPs block incoming/outgoing traffic from the most popular ports used by these programs.

One newcomer in the RAT market that you should know about is Project Leviathan. This program uses already existing services to host it's service, instead of opening up an entirely new port. This allows it to hide itself from any port detection tool/software firewall that may be in place. This of course will not guarantee that it's server program will not be detected by any antivirus software used (actually, if the user has kept up with his/her signature tables, then it WILL be detected), but it will give you more of a chance of holding access. Go to the below link to download Project Leviathan...

www.iamaphex.net/modules.php?op=modload&name=Downloads&file=index&req=getit&lid=53

Once you have downloaded this tool, follow the instructions listed to install and use this program. However, since this RAT is a command line tool, you will still need another program set up on the user's computer in order to catch the desired password. For this, you can use Password Logger, provided below...

www.iamaphex.net/modules.php?op=modload&name=Downloads&file=index&req=getit&lid=50

Once you have this downloaded, set it up on the targeted computer. The program will remain hidden, while logging any types of passwords into a .lst file in the same directory that you executed it on. Therefore, you can access this *.lst file through Project Leviathan remotely in order to retrieve the user's email password remotely. Well that pretty much concludes it for this section. At this very moment I can practically hear a lot of you thinking to yourselves "But, but I don't HAVE physical access!". No reason to worry, that's what the next section is for...

If You Don't Have Physical Access

Well of course most of you out there will say that you don't have physical access to your target's computer. That's fine, there still are ways you can gain access into the desired email account without having to have any sort of physical access. For this we are going to go back onto the RAT topic, to explain methods that can be used to fool the user into running the server portion of the RAT (again, a RAT is a trojan) of your choice. Well first we will discuss the basic "send file" technique. This is simply convincing the user of the account you want to access to execute the server portion of your RAT.

To make this convincing, what you will want to do is bind the server.exe to another *.exe file in order to not raise any doubt when the program appears to do nothing when it is executed. For this you can use the tool below to bind it into another program (make it something like a small game)...

www.iamaphex.net/modules.php?op=modload&name=Downloads&file=index&req=getit&lid=1

On a side note, make sure the RAT of your choice is a good choice. The program mentioned in the previous section would not be good in this case, since you do need physical access in order to set it up. You will have to find the program of your choice yourself (meaning please don't ask around for any, people consider that annoying behavior). I will nonetheless give you a link to a page to look at that has a couple you can try out...

www.astalavista.com/index.php?section=dir&id=79

If you don't like any of those, I'm afraid you are going to have to go to www.google.com, and look for some yourself. Search for something like "optix pro download", or any specific trojan. If you look long enough, among all the virus notification/help pages, you should come across a site with a list of RATs for you to use (you are going to eventually have to learn how to navigate a search engine, you can't depend on handouts forever). Now back to the topic at hand, you will want to send this file to the specified user through an instant messaging service.

The reason why is that you need the ip address of the user in order to connect with the newly established server. Yahoo! Messenger, AOL Instant Messenger, it really doesn't matter. What you will do is send the file to the user. Now while this transfer is going on you will go to Start, then Run, type in "command", and press Enter. Once the msdos prompt is open, type in "netstat -n", and again, press enter. You will see a list of ip addresses from left to right. The address you will be looking for will be on the right, and the port it's established on will depend on the instant messaging service you are using. With MSN Messenger it will be remote port 6891, with AOL Instant Messenger it will be remote port 2153, with ICQ it will be remote port 1102, 2431, 2439, 2440, or 2476, and with Yahoo! Messenger it will be remote port 1614.

So once you spot the established connection with the file transfer remote port, then you will take note of the ip address associated with that port. So once the transfer is complete, and the user has executed the server portion of the RAT, then you can use the client portion to sniff out his/her password the next time he/she logs on to his/her account.

Don't think you can get him/her to accept a file from you? Can you at least get him/her to access a certain web page? Then maybe this next technique is something you should look into.

Currently Internet Explorer is quite vulnerable to an exploit that allows you to drop and execute .exe files via malicious scripting within an html document. For this what you will want to do is set up a web page, make sure to actually put something within this page so that the visitor doesn't get too entirely suspicious, and then imbed the below script into your web page so that the server portion of the RAT of your choice is dropped and executed onto the victim's computer...

http://www.illmob.org/0day/internet%20explorer%20exploits/ie6-exedrop-asp-POC.zip

While you are at it, you will also want to set up an ip logger on the web page so that you can grab the ip address of the user so that you can connect to the newly established server. Here is the source for a php ip logger you can use on your page...

http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=539&lngWId=8

Just insert this source into your page along with the exedrop script, and you are set. Just convince the user to go to this page, and wait till the next time they type in their email password. However, what do you do if you can not contact this user in any way to do any of the above tricks. Well, then you definately have your work cut out for you. It doesn't make the task impossible, but it makes it pretty damn close to it. For this we will want to try info cracking. Info cracking is the process of trying to gather enough information on the user to go through the "Forgot my Password" page, to gain access into the email account.

If you happen to know the user personally, then it helps out a lot. You would then be able to get through the birthday/ zipcode questions with ease, and with a little mental backtracking, or social engineering (talking) out the information from the user be able to get past the secret question. However, what do you do if you do not have this luxury? Well in this case you will have to do a little detective work to fish out the information you need.

First off, if a profile is available for the user, look at the profile to see if you can get any information from the profile. Many times users will put information into their profile, that may help you with cracking the account through the "Forgot my Password" page (where they live, their age, their birthday if you are lucky). If no information is provided then what you will want to do is get on an account that the user does not know about, and try to strike conversation with the user. Just talk to him/her for a little while, and inconspicuously get this information out of the user (inconspicuously as in don't act like you are trying to put together a census, just make casual talk with the user and every once in a while ask questions like "When is your birthday?" and "Where do you live?", and then respond with simple, casual answers).

Once you have enough information to get past the first page, fill those parts out, and go to the next page to find out what the secret question is. Once you have the secret question, you will want to keep making casual conversation with the user and SLOWLY build up to asking a question that would help you answer the secret question. Don't try to get all the information you need in one night or you will look suspicious. Patience is a virtue when info cracking. Just slowly build up to this question. For example, if the secret question is something like "What is my dog's name?", then you would keep talking with the user, and eventually ask him/her "So how many dogs do you have? ...Oh, that's nice. What are their names?". The user will most likely not even remember anything about his/her secret question, so will most likely not find such a question suspicious at all (as long as you keep it inconspicuous). So there you go, with a few choice words and a little given time, you have just gotten the user to tell you everything you need to know to break into his/her email account. The problem with this method is that once you go through the "Forgot my Password" page, the password will be changed, and the new password will be given to you. This will of course deny the original user access to his/her own account. But the point of this task is to get YOU access, so it really shouldn't matter. Anyways, that concludes it for this tutorial. Good luck...

HOW TO OPEN ORKUT N OTHER WEBSITES, IF IS BLOCKED !

Open ORKUT IN BLOCKED PC :

u can open any types of websites from following links if it banned..

*www.mathtunnel.com
*www.gravitywars.com
*www.kproxy.com
*www.calculatepie.com
*http://www.anonymizer.com/

Open the above sites and just type in http://www.orkut.com in companies or colleges where its blocked n enjoy

ALSO :>>

How to open orkut.com when ur server has blocked it :

proxies for orkut
goto
www.proxie4u.info
www.orkutlive.info
images.orkut.com (orkuts own proxie)
so just open these.......n ve ur orkut running

HOW TO INCREASE YOUR HDD SPACE ! WITH SOME WARNINGS !

Unused space on hard drives recovered?
Updated Hidden partitions revealed

IT MAY BE POSSIBLE THAT SOME OF THE SERIOUS TYPES OF ERROR COULD POSSIBLY MAY OCCUR YOU DO IT ON YOUR RISK !


READER WILEY SILER has sent us a method which he said was discovered by Scott Komblue and documented by himself which they claim can recover unused areas of the hard drive in the form of hidden partitions.
We haven't tried this here at the INQUIRER, and would caution readers that messing with your hard drive is done at your own peril and very likely breaches your warranty. Here is what Wiley and Scott did. µ

* UPDATE Does this work? We're not going to try it on our own machine thank you very much. Instead, we're waiting for a call from a hard drive company so we can get its take on these claims.

** UPDATE II A representative for large hard drive distributor Bell Micro said: "This is NOT undocumented and we have done this in the past to load an image of the original installation of the software. When the client corrupted the o/s we had a boot floppy thatopened the unseen partition and copied it to the active or seen partition. It is a not a new feature or discovery. We use it ourselves without any qualms".

*** UPDATE III See the letters column today, here.

Required items
Ghost 2003 Build 2003.775 (Be sure not to allow patching of this software) 2 X Hard Drives (OS must be installed on both.) For sake of clarity we will call the drive we are trying to expand (T) in this document (means Target for partition recover). The drive you use every day, I assume you have one that you want to keep as mater with your current OS and data, will be the last dive we install in this process and will be called (X) as it is your original drive.

1. Install the HDD you wish to recover the hidden partitions (hard drive T) on as the master drive in your system with a second drive as a slave (you can use Hard Drive X if you want to). Any drive will do as a slave since we will not be writing data to it. However, Ghost must see a second drive in order to complete the following steps. Also, be sure hard drive T has an OS installed on it You must ensure that the file system type is the same on both drive (NTFS to NTFS or FAT32 to FAT32, etc)

2. Install Ghost 2003 build 2003.775 to hard drive T with standard settings. Reboot if required.

3. Open Ghost and select Ghost Basic. Select Backup from the shown list of options. Select C:\ (this is the drive we want to free partition on on hard drive T) as our source for the backup. Select our second drive as the target. (no data will be written so worry not). Use any name when requested as it will not matter. Press OK, Continue, or Next until you are asked to reboot.

Critical step
4. Once reboot begins, you must shutdown the PC prior to the loading of DOS or any drivers. The best method is to power down the PC manually the moment you see the BIOS load and your HDDs show as detected.

5. Now that you have shutdown prior to allowing Ghost to do its backup, you must remove the HDD we are attempting to expand (hard drive T which we had installed as master) and replace it with a drive that has an OS installed on it. (This is where having hard drive X is useful. You can use your old hard drive to complete the process.) Place hard drive T as a secondary drive in the system. Hard drive X should now be the master and you should be able to boot into the OS on it. The best method for this assuming you need to keep data from and old drive is:

Once you boot into the OS, you will see that the second drive in the system is the one we are attempting to expand (hard drive T). Go to Computer Management -> Disk Management

You should see an 8 meg partition labeled VPSGHBOOT or similar on the slave HDD (hard drive T) along with a large section of unallocated space that did not show before. DO NOT DELETE VPSGHBOOT yet.

6. Select the unallocated space on our drive T and create a new primary or extended partition. Select the file system type you prefer and format with quick format (if available). Once formatting completes, you can delete the VPSGHBOOT partition from the drive.

7. Here is what you should now see on your T drive.

a. Original partition from when the drive still had hidden partitions
b. New partition of space we just recovered.
c. 8 meg unallocated partitions.

8. Do you want to place drive T back in a PC and run it as the primary HDD? Go to Disk Management and set the original partition on T (not the new one we just formatted) to and Active Partition. It should be bootable again if no data corruption has occurred.

Caution :
Do not try to delete both partitions on the drive so you can create one large partition. This will not work. You have to leave the two partitions separate in order to use them. Windows disk management will have erroneous data in that it will say drive size = manus stated drive size and then available size will equal ALL the available space with recovered partitions included.

This process can cause a loss of data on the drive that is having its partitions recovered so it is best to make sure the HDD you use is not your current working HDD that has important data. If you do this on your everyday drive and not a new drive with just junk on it, you do so at your own risk. It has worked completely fine with no loss before and it has also lost the data on the drive before. Since the idea is to yield a huge storage drive, it should not matter.

Interesting results to date:
Western Digital 200GB SATA
Yield after recovery: 510GB of space

IBM Deskstar 80GB EIDE
Yield after recovery: 150GB of space

Maxtor 40GB EIDE
Yield after recovery: 80GB

Seagate 20GB EIDE
Yield after recovery: 30GB

Unknown laptop 80GB HDD
Yield: 120GB

HOW TO MAKE AN AUTORUN

HOW TO MAKE AN AUTORUN :

URL TO MAKE AUTORUN :

http://www.longtion.com/autorun/autorun.htm
http://www.pptfaq.com/FAQ00037.htm
http://www.autorunarchitect.com/?gclid=CNLmo7Sl9JQCFQMLewodKjkYrw
http://www.hal-pc.org/~slcweb2/DigitalPhoto/Documents/AutoRunCD/AutoRun.html
http://search.techrepublic.com.com/search/CD-ROM.html
http://www.cdmenupro.com/index.htm
http://www.rjlsoftware.com/software/utility/autorun/autorun.shtml
http://search.techrepublic.com.com/search/bios+and+cd-rom.html
http://www.sharewareconnection.com/1st-autorun-express.htm
http://club.cdfreaks.com/f3/how-make-autorun-ini-open-txt-file-113511/
http://search.techrepublic.com.com/search/cd-rom+and+virus.html
http://www.autorunarchitect.com/AutoRunArchitect.exe


How to make an Autorun CD

Autorun is a feature of the Microsoft Windows operating system. The Autorun feature detects when a CD is inserted into the CD-ROM drive and runs an application based on the contents of the Autorun.inf file located on the CD.

Autorun is enabled by the new 32-bit, protected-mode driver architecture in Microsoft Windows. Because the operating system can now detect the insertion of media in a CD-ROM drive, it has the opportunity to do some intelligent processing whenever this occurs.

When a CD is inserted into the CD-ROM drive, the operating system checks for a file named Autorun.inf in the root directory of the CD. This file contains a pointer to an executable file.

To create an Autorun-enabled CD-ROM, proceed as follows:

* Create an Autorun.inf File
Autorun.inf is a text file that is located in the root folder of your application CD-ROM. It provides to the computer the name and the location of the startup program for your application that is installed when the CD-ROM is inserted. The Autorun.inf file can also contain optional information including the following:
* The name of a file that contains an icon that represents your application's CD-ROM drive. This icon appears in Windows Explorer instead of the standard drive icon.
* Additional commands for the shortcut menu that appears when the user right-clicks the CD-ROM icon. You can also specify the default command that runs when the user double-clicks the icon. Autorun.inf files are similar to .ini files.
* The [autorun] section contains the default Autorun commands. All Autorun.inf files must have an [autorun] section.
* icon: Specifies the path and the file name of an application-specific icon for the CD-ROM drive.
* open: Specifies the path and the file name of the startup application.


Autorun.inf

The following is an example of a simple Autorun.inf file. It specifies Filename.exe as the startup application. The second icon represents the CD-ROM drive instead of the standard drive icon.
[autorun]
open=Filename.exe
icon=Filename.ico


Tips for Writing Autorun Startup Applications

Essentially, there are no constraints on how to write an Autorun startup application. You can implement it to do whatever you require to install, remove, configure, or run your application. However, the following tips provide some guidelines for implementing an effective Autorun startup application:

* Users should receive feedback as soon as possible after they insert an Autorun CD-ROM in the CD-ROM drive. Therefore, startup applications should be small programs that load quickly. They should clearly identify the application and provide an easy way to cancel the operation.
* Typically, the initial part of the startup application presents users with a user interface (such as a dialog box) that prompts them for how they would like to proceed.

User-friendly CD
Take advantage of this autorun feature to create a professional start for your CD. Offer your users a clear and concise menu interface that provides information about what the CD is about, what's on the CD and copyright details, as well as presenting a wide range of clear actions.



The solution for your autorun CD - CDMenuPro

CDMenuPro
CDMenuPro is an easy-to-use Menu Designer for creating graphic CD Autorun Menu applications. The program comes complete with a large number of ready-to-use templates and project assistants, which make getting fast professional results child's play.

Visual Editor
Using the Visual Editor, you can create your own individual menu interface in no time at all. Making documents or programs start automatically is child's play. CDMenuPro creates all the files needed to make autostart possible. You can create your own buttons using your graphics software or with CDMenuPro's very own Buttoncreator (included).

CDMenuPro is easy to use
CDMenuPro uses drag-&-drop to enable you to drag menu objects such as buttons, List boxes, texts, text fields and pop-up menus from the object bar into the Menu Window. Then all you do is link these objects to your documents or programs. Absolutely no programming knowledge is necessary.

Creative menu design
Let your imagination run wild. With the help of background images and bitmap action buttons, the menu designer has complete control over how the graphically illustrated user interface will look. Frameless windows without Windows title bars are also incredibly easy to create.

Starting documents
Any registered document type (Html, PPT, PPS, XLS, DOC, TXT,...) can be linked to the buttons. Indeed, CDMenuPro is even able to find the right viewer or reader to enable the user to see the file. The Business Edition also comes complete with a starter program for PowerPoint and Pdf files, which searches the target system for these programs and offers to install the PowerPoint viewer or Acrobat Reader should these not be available.

IMPORTANT URLS PART 4

http://www.4shared.com/file/21464592/171cb6d3/VMware_ESX_Server_Book.html
http://www.4shared.com/file/9476522/68597a6b/Oracle_Application_Server_10g-Administration_-_Iv1.html
http://www.4shared.com/file/20274029/28bfb562/Window_Server_2008___Intro_.html
http://www.4shared.com/file/15661079/1850f2f7/Java_Script_i_Java_Server_Pages.html
http://www.4shared.com/file/48805703/a194f788/Video_Tutorials_-_CBT_Nuggets_70-284part1.html
87mb
http://www.4shared.com/file/39848442/1be1c0f3/70-284.html
17mb
http://www.4shared.com/file/56583383/5b54a95c/Soure_MCSE.html
37mb
http://www.4shared.com/file/39377149/fffc41d5/70-284.html
13mb

IMPORTANT URLS TO USE PART 2

http://www.4shared.com/file/51460799/6ed257b/VBScriptProgrammersReference3rdEditionOct2007.html
12mb

http://www.4shared.com/file/15775352/c6ac9ae6/win_xp_bible.html
15mb

http://www.4shared.com/file/16683512/fbc22265/Windows_Vista_Secrets.html
19mb

5mb
http://www.4shared.com/file/17945026/66f37ce8/XP_Power_Toolkit.html
12mb

http://www.4shared.com/file/17945137/92d1708/XP_Repair_guide.html
========================================================================

FAST TRACK SERIES :almost 2 -5mb files all

http://www.4shared.com/file/17114028/1d443b97/Fast_Track_to_Digital_Audio.html
http://www.4shared.com/file/17945612/4e3e9780/Fast_Track_to_Digital_Video.html

http://www.4shared.com/file/16798096/1380d38b/Fast_Track_to_Essential_Windows_Tools.html
http://www.4shared.com/file/16798100/2ae3a7c0/Fast_Track_to_Digital_Photography.html
http://www.4shared.com/file/16561421/db894e6f/Fast_Track_to_Photoshop.html
http://www.4shared.com/file/16560149/3d7fc455/Fast_Track_to_the_Internet.html
http://www.4shared.com/file/18469237/71ab26be/Fast_Track_to_Troubleshooting_Your_PC.html
http://www.4shared.com/file/18469396/fd819495/Fast_Track_to_Web_Designing.html
http://www.4shared.com/file/16560417/a17bdffc/Fast_Track_to_Virus_Proof_Your_PC.html
http://www.4shared.com/file/18469396/fd819495/Fast_Track_to_Web_Designing.html
http://www.4shared.com/file/16560826/f44b45cd/Fast_Track_to_Wireless_Networking.html
http://www.4shared.com/file/17946079/998e3ad2/Fast_Track_to_Gaming.html
http://www.4shared.com/file/17946263/63c436e3/Fast_Track_to_Linux.html
http://www.4shared.com/file/16361929/bd3b613/Fast_Track_to_Security.html

=============================================================================

http://www.4shared.com/file/51890231/180d082/Boson_NetSim_CCNA_600.html
24MB
http://www.4shared.com/file/51765643/e31e5a83/Boson_Router_Simulator.html
45MB
http://www.4shared.com/file/51739717/1af03020/Boson_NetSim_for_CCNP_v60_Final_Beta.html
30MB
http://www.4shared.com/file/51490914/384b6915/boson_simulator-niranch.html
25MB

http://www.4shared.com/file/26273175/a3bb6ab8/zapSetup_70_362_000_en.html
15 mb

http://www.4shared.com/file/50526501/67b0e363/Megadeth_-_Cryptic_Writings.html
20 mb


http://zenisa.com/category/ccna-posts/



http://rapidshare.com/files/85949808/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part02.rar
http://rapidshare.com/files/85949809/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part03.rar
http://rapidshare.com/files/85949810/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part04.rar
http://rapidshare.com/files/85949811/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part05.rar
http://rapidshare.com/files/85958443/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part06.rar
http://rapidshare.com/files/85958445/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part07.rar
http://rapidshare.com/files/85958446/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part08.rar
http://rapidshare.com/files/85958447/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part09.rar
http://rapidshare.com/files/85958448/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part10.rar
http://rapidshare.com/files/86115220/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part11.rar
http://rapidshare.com/files/86115222/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part12.rar
http://rapidshare.com/files/86117721/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part13.rar
http://rapidshare.com/files/86117722/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part14.rar

Password:

pass = sad_gull



http://rapidshare.com/files/85949807/Cbt_Nuggets_-_Cisco_Ccvp_Exam_Pack_642.432.part01.rar
http://www.4shared.com/file/19177288/29e52660/Hacked_Attacked_and_Abused.html

http://www.4shared.com/file/21948549/b9e8ee10/Henry_Ford_-_My_Life_and_Work.html

http://www.4shared.com/file/18469655/cef648c8/Fast_Track_to_Windows_XP.html
7mb
http://www.4shared.com/file/45871586/463677e6/How_to_Make_a_USB_Fan.html
7MB

http://www.4shared.com/file/51975299/b6062dcc/how_the_dinosaurs_really_died.html

http://www.4shared.com/file/18471711/54e122bd/Dangerous_Google_-_Searching_For_Secrets.html
http://www.4shared.com/file/16548618/8d346d8c/My_Experiments_with_Truth.html
http://www.4shared.com/file/21749609/5d749358/BitTorrent_for_Dummies.html
http://www.4shared.com/file/15770539/34776868/vbscript.html
http://www.4shared.com/file/51918299/cb2c00b1/VBScript_Reference.html
3mb


http://www.4shared.com/file/15776890/9af7f4c9/XP_registry_guide.html

IMPORTANT URLS FOR NETWORKING N ALL

Server 2008 Cluster Administration:

http://rapidshare.com/files/.../Server_Clustering.part01.rar
http://rapidshare.com/files/.../Server_Clustering.part08.rar
http://rapidshare.com/files/.../Server_Clustering.part20.rar
http://rapidshare.com/files/.../Server_Clustering.part23.rar
http://rapidshare.com/files/.../Server_Clustering.part13.rar
http://rapidshare.com/files/.../Server_Clustering.part06.rar
http://rapidshare.com/files/.../Server_Clustering.part15.rar
http://rapidshare.com/files/.../Server_Clustering.part02.rar
http://rapidshare.com/files/.../Server_Clustering.part16.rar
http://rapidshare.com/files/.../Server_Clustering.part19.rar
http://rapidshare.com/files/.../Server_Clustering.part07.rar
http://rapidshare.com/files/.../Server_Clustering.part04.rar
http://rapidshare.com/files/.../Server_Clustering.part14.rar
http://rapidshare.com/files/.../Server_Clustering.part11.rar
http://rapidshare.com/files/.../Server_Clustering.part03.rar
http://rapidshare.com/files/.../Server_Clustering.part10.rar
http://rapidshare.com/files/.../Server_Clustering.part09.rar
http://rapidshare.com/files/.../Server_Clustering.part05.rar
http://rapidshare.com/files/.../Server_Clustering.part17.rar
http://rapidshare.com/files/.../Server_Clustering.part18.rar
http://rapidshare.com/files/.../Server_Clustering.part21.rar
http://rapidshare.com/files/.../Server_Clustering.part24.rar
http://rapidshare.com/files/.../Server_Clustering.part22.rar
http://rapidshare.com/files/.../Server_Clustering.part25.rar
http://rapidshare.com/files/.../Server_Clustering.part12.rar

Server 2008 Administration:

http://rapidshare.com/files/60868338/MWS2008.www.warecz.com.By.WebsteR.part01.rar
http://rapidshare.com/files/60881127/MWS2008.www.warecz.com.By.WebsteR.part02.rar
http://rapidshare.com/files/60890619/MWS2008.www.warecz.com.By.WebsteR.part03.rar
http://rapidshare.com/files/60900445/MWS2008.www.warecz.com.By.WebsteR.part04.rar
http://rapidshare.com/files/60912495/MWS2008.www.warecz.com.By.WebsteR.part05.rar
http://rapidshare.com/files/60923963/MWS2008.www.warecz.com.By.WebsteR.part06.rar
http://rapidshare.com/files/60936490/MWS2008.www.warecz.com.By.WebsteR.part07.rar
http://rapidshare.com/files/60947956/MWS2008.www.warecz.com.By.WebsteR.part08.rar
http://rapidshare.com/files/60968661/MWS2008.www.warecz.com.By.WebsteR.part09.rar
http://rapidshare.com/files/60980615/MWS2008.www.warecz.com.By.WebsteR.part10.rar
http://rapidshare.com/files/61288580/MWS2008.www.warecz.com.By.WebsteR.part11.rar
http://rapidshare.com/files/61305836/MWS2008.www.warecz.com.By.WebsteR.part12.rar
http://rapidshare.com/files/61314680/MWS2008.www.warecz.com.By.WebsteR.part13.rar
http://rapidshare.com/files/61384897/MWS2008.www.warecz.com.By.WebsteR.part14.rar
http://rapidshare.com/files/61395649/MWS2008.www.warecz.com.By.WebsteR.part15.rar
http://rapidshare.com/files/61407654/MWS2008.www.warecz.com.By.WebsteR.part16.rar
http://rapidshare.com/files/61424861/MWS2008.www.warecz.com.By.WebsteR.part17.rar
http://rapidshare.com/files/61436489/MWS2008.www.warecz.com.By.WebsteR.part18.rar
http://rapidshare.com/files/61437377/MWS2008.www.warecz.com.By.WebsteR.part19.rar
Password:
www.warecz.com

Trainsignal Introduction to Win2008:

http://rapidshare.com/files/132292564/Party1.rar.001
http://rapidshare.com/files/132292903/Party1.rar.002
http://rapidshare.com/files/132293331/Party1.rar.003
http://rapidshare.com/files/132292265/Party1.rar.004
http://rapidshare.com/files/132293632/Party1.rar.005
http://rapidshare.com/files/132293703/Party1.rar.006
http://rapidshare.com/files/132294056/Party1.rar.007
http://rapidshare.com/files/132294410/Party1.rar.008
http://rapidshare.com/files/132294711/Party1.rar.009
http://rapidshare.com/files/132295018/Party1.rar.010
http://rapidshare.com/files/132294691/Party1.rar.011
http://rapidshare.com/files/132294594/Party1.rar.012
http://rapidshare.com/files/132295650/Party1.rar.013
http://rapidshare.com/files/132295293/Party1.rar.014
http://rapidshare.com/files/132295145/Party1.rar.015
http://rapidshare.com/files/132161120/Party1.rar.016
http://rapidshare.com/files/132149708/Party1.rar.017


http://rapidshare.com/files/126468532/FSJSetup.exe

TS Lab 01 - Active Directory

http://rapidshare.com/files/132914610/netbks.com_zCBT_-_01_-_Active_Directory.part01.rar
http://rapidshare.com/files/132913975/netbks.com_zCBT_-_01_-_Active_Directory.part02.rar
http://rapidshare.com/files/132916754/netbks.com_zCBT_-_01_-_Active_Directory.part03.rar
http://rapidshare.com/files/132912723/netbks.com_zCBT_-_01_-_Active_Directory.part04.rar
http://rapidshare.com/files/132914456/netbks.com_zCBT_-_01_-_Active_Directory.part05.rar
http://rapidshare.com/files/132914220/netbks.com_zCBT_-_01_-_Active_Directory.part06.rar
http://rapidshare.com/files/132913026/netbks.com_zCBT_-_01_-_Active_Directory.part07.rar
http://rapidshare.com/files/132912970/netbks.com_zCBT_-_01_-_Active_Directory.part08.rar
http://rapidshare.com/files/132912870/netbks.com_zCBT_-_01_-_Active_Directory.part09.rar
http://rapidshare.com/files/132913409/netbks.com_zCBT_-_01_-_Active_Directory.part10.rar
http://rapidshare.com/files/132914148/netbks.com_zCBT_-_01_-_Active_Directory.part11.rar
http://rapidshare.com/files/132912308/netbks.com_zCBT_-_01_-_Active_Directory.part12.rar

TS Lab 02 - File Server

http://rapidshare.com/files/132913292/netbks.com_zCBT_-_02_-_File_Servers.part01.rar
http://rapidshare.com/files/132914634/netbks.com_zCBT_-_02_-_File_Servers.part02.rar
http://rapidshare.com/files/132914622/netbks.com_zCBT_-_02_-_File_Servers.part03.rar
http://rapidshare.com/files/132914788/netbks.com_zCBT_-_02_-_File_Servers.part04.rar
http://rapidshare.com/files/132914448/netbks.com_zCBT_-_02_-_File_Servers.part05.rar
http://rapidshare.com/files/132913227/netbks.com_zCBT_-_02_-_File_Servers.part06.rar
http://rapidshare.com/files/132913407/netbks.com_zCBT_-_02_-_File_Servers.part07.rar
http://rapidshare.com/files/132913418/netbks.com_zCBT_-_02_-_File_Servers.part08.rar
http://rapidshare.com/files/132913402/netbks.com_zCBT_-_02_-_File_Servers.part09.rar
http://rapidshare.com/files/132914977/netbks.com_zCBT_-_02_-_File_Servers.part10.rar
http://rapidshare.com/files/132913143/netbks.com_zCBT_-_02_-_File_Servers.part11.rar

Password default: netbks.com

Lab 03A - Web Servers

http://rapidshare.com/files/132914435/netbks.com_zCBT_-_03_-_Web_Servers.part01.rar
http://rapidshare.com/files/132913380/netbks.com_zCBT_-_03_-_Web_Servers.part02.rar
http://rapidshare.com/files/132914839/netbks.com_zCBT_-_03_-_Web_Servers.part03.rar
http://rapidshare.com/files/132914852/netbks.com_zCBT_-_03_-_Web_Servers.part04.rar
http://rapidshare.com/files/132913293/netbks.com_zCBT_-_03_-_Web_Servers.part05.rar
http://rapidshare.com/files/132914367/netbks.com_zCBT_-_03_-_Web_Servers.part06.rar
http://rapidshare.com/files/132914504/netbks.com_zCBT_-_03_-_Web_Servers.part07.rar
http://rapidshare.com/files/132913515/netbks.com_zCBT_-_03_-_Web_Servers.part08.rar
http://rapidshare.com/files/132914607/netbks.com_zCBT_-_03_-_Web_Servers.part09.rar
http://rapidshare.com/files/132913094/netbks.com_zCBT_-_03_-_Web_Servers.part10.rar

Lab 04A - DNS Infrastructures

http://rapidshare.com/files/132987741/netbks.com_zCBT_-_04_-_DNS_Servers.part01.rar
http://rapidshare.com/files/132987797/netbks.com_zCBT_-_04_-_DNS_Servers.part02.rar
http://rapidshare.com/files/132987190/netbks.com_zCBT_-_04_-_DNS_Servers.part03.rar
http://rapidshare.com/files/132987168/netbks.com_zCBT_-_04_-_DNS_Servers.part04.rar
http://rapidshare.com/files/132987730/netbks.com_zCBT_-_04_-_DNS_Servers.part05.rar
http://rapidshare.com/files/132987208/netbks.com_zCBT_-_04_-_DNS_Servers.part06.rar
http://rapidshare.com/files/132987727/netbks.com_zCBT_-_04_-_DNS_Servers.part07.rar
http://rapidshare.com/files/132987956/netbks.com_zCBT_-_04_-_DNS_Servers.part08.rar
http://rapidshare.com/files/132987320/netbks.com_zCBT_-_04_-_DNS_Servers.part09.rar
http://rapidshare.com/files/132987312/netbks.com_zCBT_-_04_-_DNS_Servers.part10.rar
http://rapidshare.com/files/132987928/netbks.com_zCBT_-_04_-_DNS_Servers.part11.rar

Lab 05 - DHCP Servers

http://rapidshare.com/files/132988019/netbks.com_zCBT_-_05_-_DHCP_Servers.part01.rar
http://rapidshare.com/files/132987804/netbks.com_zCBT_-_05_-_DHCP_Servers.part02.rar
http://rapidshare.com/files/132987292/netbks.com_zCBT_-_05_-_DHCP_Servers.part03.rar
http://rapidshare.com/files/132987937/netbks.com_zCBT_-_05_-_DHCP_Servers.part04.rar
http://rapidshare.com/files/132988412/netbks.com_zCBT_-_05_-_DHCP_Servers.part05.rar
http://rapidshare.com/files/132987631/netbks.com_zCBT_-_05_-_DHCP_Servers.part06.rar
http://rapidshare.com/files/132987672/netbks.com_zCBT_-_05_-_DHCP_Servers.part07.rar
http://rapidshare.com/files/132988462/netbks.com_zCBT_-_05_-_DHCP_Servers.part08.rar
http://rapidshare.com/files/132988380/netbks.com_zCBT_-_05_-_DHCP_Servers.part09.rar


CBT Linux Videos:

http://rapidshare.com/files/113404451/CBT_-_Linux_RedHat_10CD.part29.rar
http://rapidshare.com/files/113402895/CBT_-_Linux_RedHat_10CD.part28.rar
http://rapidshare.com/files/113400953/CBT_-_Linux_RedHat_10CD.part27.rar
http://rapidshare.com/files/113398992/CBT_-_Linux_RedHat_10CD.part26.rar
http://rapidshare.com/files/113397000/CBT_-_Linux_RedHat_10CD.part25.rar
http://rapidshare.com/files/113395074/CBT_-_Linux_RedHat_10CD.part24.rar
http://rapidshare.com/files/113393179/CBT_-_Linux_RedHat_10CD.part23.rar
http://rapidshare.com/files/113391242/CBT_-_Linux_RedHat_10CD.part22.rar
http://rapidshare.com/files/113389497/CBT_-_Linux_RedHat_10CD.part21.rar
http://rapidshare.com/files/113387748/CBT_-_Linux_RedHat_10CD.part20.rar
http://rapidshare.com/files/113386024/CBT_-_Linux_RedHat_10CD.part19.rar
http://rapidshare.com/files/113384257/CBT_-_Linux_RedHat_10CD.part18.rar
http://rapidshare.com/files/112510128/CBT_-_Linux_RedHat_10CD.part17.rar
http://rapidshare.com/files/112502964/CBT_-_Linux_RedHat_10CD.part16.rar
http://rapidshare.com/files/112487343/CBT_-_Linux_RedHat_10CD.part15.rar
http://rapidshare.com/files/112480105/CBT_-_Linux_RedHat_10CD.part14.rar
http://rapidshare.com/files/112473228/CBT_-_Linux_RedHat_10CD.part13.rar
http://rapidshare.com/files/112466780/CBT_-_Linux_RedHat_10CD.part12.rar
http://rapidshare.com/files/112460691/CBT_-_Linux_RedHat_10CD.part11.rar
http://rapidshare.com/files/112454515/CBT_-_Linux_RedHat_10CD.part10.rar
http://rapidshare.com/files/112448124/CBT_-_Linux_RedHat_10CD.part09.rar
http://rapidshare.com/files/112443216/CBT_-_Linux_RedHat_10CD.part08.rar
http://rapidshare.com/files/112439297/CBT_-_Linux_RedHat_10CD.part07.rar
http://rapidshare.com/files/112436906/CBT_-_Linux_RedHat_10CD.part06.rar
http://rapidshare.com/files/112434825/CBT_-_Linux_RedHat_10CD.part05.rar
http://rapidshare.com/files/112432679/CBT_-_Linux_RedHat_10CD.part04.rar
http://rapidshare.com/files/112430328/CBT_-_Linux_RedHat_10CD.part03.rar
http://rapidshare.com/files/112427204/CBT_-_Linux_RedHat_10CD.part02.rar
http://rapidshare.com/files/112425214/CBT_-_Linux_RedHat_10CD.part01.rar

Password default: netbks.com (or) war

You Can Find More Books ON www.netbks.com