Sunday, October 24, 2010

WEP wifi hack windows 7












I never found instructions for windows 7 so after 2 days of testing came up with solutions that worked for me, follow these 10 steps and let me know if it works in the comments here.

Please purchase these instructions for only $4.99 (USD) here:

Watch the youtube video

You will need:

Data Gathering
1. Install commview: go to the commview folder in the package and double click setup, follow the install nothing special but once done it will fail saying it's not compatible with vista, ignore that.

2. take the crack file and place it in C:\program files\commviewwifi\ (or program files86 if you have 64 bit windows), it will say something about overwriting accept it.

3. Next right click the file cv.exe and click properties, compatabilities and select windows xp sp3 and run as administrator.

4. run it, now if you can click the play button your drivers work your lucky and can skip to number 7

5. otherwise you can close the program and right click computer, manage. go to Device Manager and find your wireless card that you are using (under network adapters) now right click and Update driver software...

6. Browse, Let me pick, Have Disk, Browse
Locate the pack included and go to Driver or NewDrivers (one should work for new as there's different versions [thanks logan perkins]), ok it and see if it finds your drivers
If successful open the CV.exe again and you should see the play button highlighted it worked and you can continue

7. click it and select Scan find the network you are targeting and begin the capture
Note make sure to check the logs to autosave and increase the size to 1000Mb and 100mb per log
They will be located under the program files directory of commview, LOGS

Cracking
It can take 4-8 hours of gathering packets (might be less or more depending on how lucky/unlucky you are - took me around 20 hours because of weaker signal strength), once done you can continue to crack the data to gain the passphrase shared wep key:

8. Open the logs with commview, file, export, Tcpdump files (*.cap) save whatever name you like

9. Go to the pack, aircrack, Aircrack-ng GUI.exe, browse to the files, choose 64 (or leave at 128 if determined it) and launch

10. wait for the loading and press 1 and enter, the cracking begins and when done you should get the key.
Note to remove the colons and use just the numbers (maybe letter characters too?)
Report back and let us know in the comments below (note: the comments section was getting too big so I have moved the previous comments here: http://eduboris.blogspot.com/2012/07/wep-wifi-hack-windows-7-comments-user.html you can still comment here but I will move it there for organizational purposes.)

Done...

Thanks for visiting.

Wednesday, October 20, 2010

enter key submits without javascript

What was absolutely mind boggling to me is when my script had input tags that would work just fine when pressing enter, running the javascript and others that wouldn't. To explain further heres the code that was in the input text tags:
onKeyPress="if(event.keyCode == 13){ search() }"

Here you see the event which is equal to enter (when enter is pressed) should run the function of javascript (in this case search which does... you guessed it, search) anyway the problem was it would submit the form in the get method in the simplest way that my website couldn't interpret because it's a little more complex and sends stuff inside files... to the solution!

add this code to the body tag at the top of the pages with this issue:
OnKeyPress="return disableEnterKey(event)"

and add the function to your general javascript or somewhere at the header depending on how you do things:

function disableEnterKey(e){
var key;
if(window.event)
key = window.event.keyCode; //IE
else
key = e.which; //firefox

return (key != 13);
}


This solved my issue, source and credit for this solution (although with a small misspelling) goes to this link: http://www.bloggingdeveloper.com/post/Disable-Form-Submit-on-Enter-Key-Press.aspx

Wednesday, October 13, 2010

refresh div html with js

With a small mod for my particular project the code from this site was perfect: http://designgala.com/how-to-refresh-div-using-jquery/

In my case I wanted to refresh when something else happened and this was the simplest for me to implement. heres the code:

this on top of the page (script)src="http://ajax.googleapis.com/ajax/libs/jquery/1.3.0/jquery.min.js">
( script)

This in the ajax.js
function navrefresh(){
setTimeout($('#navigation').fadeOut('fast').load('containers/nav.php').fadeIn("fast"),1000);
}

of course i liked things fast (they had it slow on that site above) and the correct div ID as well as the php page to load the right things..... now just call this function where needed and your all done!


ps. i still didn't figure out how to use the html tags without blogger thinking it's html?
update: found it in the > post options, compose settings "show html literally"

Sunday, October 10, 2010

autoplay autostart mp3 music on startup

It was a quick project to setup an 'on hold' music server, but this can be used for countless other projects such as a jukebox or whatever you can think of, get creative :)

Very simple, first you will need VLC, used this for many years now, updates constantly but i'm sure older version can work too.

Second you need a playlist of the music, mp3s or wma etc (most will be played by VLC, that's what it does :)
I had created mine by opening VLC, click on the 'show playlist button' drag and drop all the music into the middle, wait for the processing and click "Media" > "Save playlist to file", named it and I choose the m3u extension.

Third part is the command line, as follows:
"c:\Program Files\VideoLAN\VLC\vlc.exe" -Z "c:\mp3\onhold.m3u"

In my case I used -Z to shuffle because I want it to keep going and in a random order, there are many more options found HERE

Create the scheduled tasks to load this playlist on start up:

Control Panel, Scheduled Tasks, right click, new scheduled task, in the properties place the absolute path to this script file or simply the line above in "Run" and under schedule choose "At login" or "At startup", save and now when you reboot this will start!

Note: 1.keep all the files in place, if directories or names change that may affect the music from playing.
2. Once the command is executed you will see VLC start with preloaded settings and playlist songs.
3. You may see the black command prompt window, this can be closed in most cases without lose of music.

Let me know how it goes!

Sunday, October 3, 2010

Mulve no more

All good things come to an end... this one is no longer available for download but also the program unrelated to the site (so i thought) doesn't function anymore either...

too many legal issues? http://torrentfreak.com/police-repeat-oink-mistake-mulve-accusation-conspiracy-to-defraud-101012/

Thursday, September 23, 2010

Mulve.com music discovery

Once again the music industry should be rethinking selling mp3s.
Heres an amazing new application that allows fast download of music.

It's small (~2Mb)
It's fast (~400KB/s)
and best of all it's safe (no uploading, no sharing, just untraceable download)

Well that's it for this post and let me know what you think of mulve
and what you think the music industry

[update] this one has been closed so to keep archive of the exe file it's found HERE or here
It doesn't seem to work for me but let me know if it does for you!

Saturday, September 18, 2010

How to download mp3

There are many ways to download mp3's these days, simplest and most legal seems to be youtube to mp3 converting, via websites or other tools (record or download).
Record labels have finally realized the great potential of allowing copyrighted songs to be used on youtube, therefore anything that is on youtube can and will be converted to mp3 via the many methods out there.

The simple how-to is as follows:
1. grab the url of the video with song/sounds your interested in downloading mp3 format
2. past it into site such as video2mp3.net and wait for conversion, download will auto start 20 seconds after completion.

As simple as that!

On this note I will conclude that if it's so easy to get the mp3 from youtube, knowing record labels have allowed singles to be put on youtube, they should just drop the act or even attempt at getting money for something that we can get free. But this free can be used to make profit in other ways; for instance the videos that get played also often display adverts which are capital generating in them self. And I think the conventional method of obtaining music in cds, records or otherwise will die out and eventually artists will have to make performances that draw a crowed, such events are the real capital generating for musicians these days.
So the spread of free music can just help to draw such capital from concert events and advertising power for other products.

All I know is that the entertainment industry is digitizing and with this change so will the profit generating methods will change and they should just accept and embrace the change to find new ways of making money instead of trying to reinforce the old conventional methods that will no longer work today.

Monday, September 13, 2010

How to open files with applications

Also how to perminantly set those extensions to open with the applications (unless of course you install other applications which change which extensions are associated with them...)

To make things simple you must get familiar with the properties of files, a file is simply anything that is not a folder (folders are yellow folder icons in microsoft windows operating systems), anyway i'll assume you know this part and move to the fun part:
Right click the file with extension which you want to permanently set to open with particular application

Phishing attacks

I have been recently witnessing a lot of phishing attacks, in particular email messages from what appears to be legitimate sites such as banks and classified types of sites etc. showing links with correct text but href pointing to phishing sites which often hosted on free or even paid hosts.

how to spot phishing attacks you ask?
sometimes it's simpler then others but exercise common sense and caution when receiving emails that you are not expecting to arrive, and even those you expect, inspect them carefully.

I have several examples but it may be safer not to post them for now.

Thursday, August 26, 2010

Neuro-Programmer 3

Neuro Programmer (Formally known as neural noise synthesizer) is a cool program that was has audio clips to help do various tasks. For example there are audio clips ranging from 10 to 50 minutes to help fall a sleep faster, get motivated, get energized, concentrate to be creative, learn or prepare for tests, etc.

Once installed you have a trial for 15 days at which point your required to buy a license.

I'm experimenting with various clips to see if they work, so far the sleep thing didn't work for me but it has in the past.

Download the program here: http://www.transparentcorp.com/products/np/download.php

To get fuller version you may or may not be able to use a peer to peer program but you didn't hear it from me!

P.s. you can also record the audio straight from the program while playing it using Audacity.

Let me know about your experiences :)

Sunday, August 22, 2010

PHP never expire vs timeout cookies vs sessions

As mentioned earlier I have a newly found hobby with PHP MySQL programming, and after lots of trial and error in the development of this project I found a working method for a 'remember me' button and the expiring cookies and sessions.

The first part is login script, here you will determine if they want to be remembered in our terms this means to never time out the user. This is done with simple cookie to set the expiration a week from now, here is my code:

$long=time()+60*60*24*7; //Setting up the expiration time
$short=time()+60*25; //short time (25 minutes) for those without 'rememberme'
$username = $params['username'];
//Check whether the remember me box is checked
if (isset($params['rememberme']) && $params['rememberme'] == "on"){
setcookie('username',$username,$long); //username cookie and long expiration
setcookie('expire','no',$long); //expire is set to no
}else{
setcookie('expire','yes',$short); //expire is set to no
setcookie('username',$username,$long); //username cookie with short expiration
}

Easy right?
Next setting the users that will be timed out after inactivity I decided 25 minutes are enough because it is also the time default sessions get timed out.
Notice that the username cookie is still with a long expiration, the expire cookie is in control of expiration and the username just saves the username data which is required in various places to determine access and such.

After the login page you will need a function that is called every time something is requested, (in order not to annoy the users and only time out after inactivity) this can look something like this:

function check_login(){
if ($_COOKIE['expire'] == "no"){
$_SESSION['user'] = userInfo($_COOKIE['username']); //reset the session
}elseif ($_COOKIE['expire'] == "yes"){
setcookie('expire','yes',time()+60*25); //reset the cookie time
$_SESSION['user'] = userInfo($_COOKIE['username']); //and session
}else{
echo " Session timed out. To login  input type=\"button\" value=\"Reload Page\" onClick=\"window.location.reload()\"";     //use the tag opening before input, blogger messes here lol
exit;
}


More coming soon...

Monday, August 16, 2010

Ultimate FTP/SFTP text editor winSCP

Today's cloud computing put to the max by my newly found hobby of coding in PHP/MySQL and JavaScript (plus a little CSS) but it was only made more enjoyable when I found the great way to edit the code visually.

So I thought to share it with the loyal eduboris blog followers!

First component is the FTP/SFTP, the free and open source windows application I found is WinSCP
Second is the editing, while the default editor is OK for quick fixes it definitely is not something you can use to code, so for many years now I used Notepad++.

To combine the two and have a truly cloud computing coding environment go to WinSCP (while logged in) Options>Preferences>Editor>select the first one and click Edit> choose external editor and browser to your Program files and find notepad++ directory, and executable (if you installed it, otherwise go to the extracted folder)

From here on in consider your ultimate sftp text editor setup and ready to use!
The features I really like about Notepad++ are:

  • Default language detection with color coding
  • Default line count and word wrap
  • Great stability under huge files (6k+ lines)
Anyway feel free to comment about this and let me know what you think below.

Sunday, July 25, 2010

IE8 block sites how-to

After some review of IE security and noticed a flaw (read more) I needed to block users from all sites except those allowed. I used the IE content advisor and GPO to do this.

The first step is to create a septate group policy object or use a common one with other IE changes to help in the organization.

Once you have your group policy object editor open navigate to "User Configuration" > "Windows Settings" > "Internet Explorer Management" > "Security" and open "Security Zones and Content Ratings".

Click the radio button "Import the current content rating settings".

In the Content Advisor window click the Approved Sites tab there you will add the domains, sub-domains or IPs you approve or disapprove of and this will affect users that this policy applies to (it seems to also affect the server).

If you need more info, screen shots or other details let me know in the comments below.
Enjoy!

IE8 lockdown report

This is not a flaw with Internet Explorer at all, the flaw was in the security theory. Even though I had sites blocked before locking IE, I decided to lift the block after removing the address bar which I thought was the only way to get to other sites... this was not the case and I was so intrigued by this one that had to write a little report about it.

After locking IE and the entire user profile down I was convinced that users cannot go to any other sites than those we intended, i.e. the home page and links on desktop and without an address bar they couldn't get anywhere else. What never even crossed my mind and I had not thought of, is that one of our links' webpages was leading to google maps to show an address, seems harmless enough but from there the user can simply click on the web search and google anything and get to where they want! (assuming it does shows up on google of course - at least there will be no malicious sites)

The solution is another group policy object to only allow IE to get to sites we decided (read post), can include google too but if they try getting to another site it will be blocked.

So there you have it folks, even with security in mind you cannot always think, see or find the flaws in your system until it is used in production with real users daily tasks and them trying to exploit the system. In this case: with no address bar it is still possible to get to any site you want via search engine if it's linked ANYWHERE.

Let me know what you think in the comments below.

Friday, July 23, 2010

Hacker Documentaries

I was always fascinated with the concept of hacking, discovery of new ways to do things unimaginable. Applied to computers and networking it's very intriguing. So I started collecting documentaries about hacking (stream from megaupload):

Let me know what you think in the comments!

Thursday, July 22, 2010

How to Download and Stream from MegaUpload

It's really quite simple, note you will need VLC installed and either Firefox or Chrome as your browser.

Watch the video and read instructions below:


1. [Update: this part is now skipped by megaupload: start from step two, I will keep it for archive purposes] First you are going to get to a download page, enter the code and hit download file
(Example: http://www.megaupload.com/?d=EBRH99AC)

2. Next you wait for the counter which will take 45 seconds without an account or 25 with an account (sign up is free).
a. This   
b. Will turn into this

3. Now you simply click Regular Download image button and the download starts! (you may close the window but don't close the browser so the download can finish)

4. If the file is avi/divx type (extension doesn't always matter), streaming will work with VLC and firefox/chrome, go to the download location (normally at My Documents>Downloads) Right click the file (which will be named appropriately, in firefox the extension is .part and as of 10/22/2010 chrome changes the extension to .crdownload) > and click Play with VLC media player (if the option you may need to restart or reinstall VLC player)



5. VLC will give the message "AVI is broken..." (it's because the file is incomplete, because it's in the process of download!) just click Don't Repair and the streaming video will start!


Note: depending on your connection (and other factors), VLC might stop playing - check if something interrupted the download (remember not to close the browser!) or just slow download speed, just wait a few minutes and repeat step 5. again. If it's too slow you may just prefer to wait until the download is complete.

Enjoy!

Tuesday, July 6, 2010

NinjaVideo is no more

After giving it some time and waiting to see if the site comes back up I am pronouncing it dead today, here is a last gimps at the wonderful site before it disappears from the cache (no longer there)

It made us cry, it made us smile but now we look forward to the next pirate streaming site that will provide us with mindless entertainment for countless hours and chew more bandwidth then our ISPs can swallow .

We loved it for so many reasons.

Pop culture and underground mashed up into one, a place like this is truly unique and let's hope the other sites can handle it, but the real question is when will the feds stop taking down those sites?

Maybe one day we will figure it out... until then, ROCK ON pirates!

A hate site to that has suggestions for alternatives could come in handy now.

Thursday, June 24, 2010

Useful linux commands

Found an old post didn't publish here yet, so here it is.

Useful linux commands:
  • nmap
  • uname -a
  • modinfo
  • edit /etc/fstab to add a mount when booting
  • edit /etc/inittab to change runlevel when booting (id:3:initdefault:)
  • scp somefile user@IP:/home/user/directory
  • [root@localhost ~]# PS1=$
    $   (to change prompt)
  • change hostname (localhost):
    [root@localhost ~]# hostname localhost.localdomain
  • add services to runlevels:
    chkconfig --level <number> <service>
    chkconfig --level 3 httpd
  • tail -f    to keep outputting as the file grows
  • any ideas on how to solve this mail.txt -email theborisedu@gmail.com

Tuesday, June 22, 2010

redirect http to https multiple domains

After the torture of trial and error I have devised a working .htaccess way to redirect http to https while having multiple domains, follow the steps below.

First task is to have the /secure directory secure with https, in this directory create the .htaccess and place this text:
RewriteEngine on
RewriteCond %{http_host} secure.domain.ca [or]
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://domain.ca/secure [L,R=301]

You can place this anywhere else that you want redirected (i.e other domains), basically users will try hitting the http and redirect to that domain with https!

Second is having the / domain not secure (if your certificate isn't *. users will get a warning, we don't want that), and it will have different subdomain in this example (www1). In the root directory place this in .htaccess:
RewriteEngine on
RewriteCond %{http_host} ^domain.ca [or]
RewriteCond %{http_host} ^www.domain.ca [NC]
RewriteRule (.*)  http://www1.domain.ca/

And now waiting to see if the mx records work...

Sunday, June 20, 2010

Mercury KPC-6225V Driver download

Noticed that the webcam drivers could be hard to find, so here is a distribution of the Mercury KPC-6225V Driver for download.
Filename: Mercury-PC-CAM-WEBCAM-Driver-KPC-6225V.zip
Size: 607.48 MB
Link: http://www.megaupload.com/?d=BCVB5FR4