Saturday 28 May 2011

Omegle Spy Bot !

NOT ILLEGAL BECAUSE OMEGLE DOESN'T HAVE A TERMS OF SERVICE - From the Creator of the Tool

Few days back came across an awesome Java executable name "Omegle Spy Bot". Credit goes to the creator of this app and can be found here under the download section.

You need Java installed on your system to run this app, works fine in Windows too.
For Linux users issue following on terminal

Code:
dex@desktop :~$ sudo java -jar OmegeleSpy.jar

The GUI of this app is pretty explanatory.
Start by clicking on "Start new conversation"
 Here's a snapshot.


Then they start their normal conversation you can watch the conversation.
Send message to either one from another one. Disconnect a user and impersonate him...Check it out ! Fun !

Wednesday 25 May 2011

Using Google's Open DNS servers !

It's better to use Google's Open DNS server rather than one provided with your ISP.

There's a minor thing to take notice of in this method to work, as most of Linux users know for setting up DNS Server to use one needs to edit /etc/resolv.conf file.

so do this

code:
dex@desktop :~$ sudo gedit /etc/resolv.conf
nameserver 8.8.8.8
nameserver 8.8.4.4
dex@desktop :~$ chattr +i /etc/resolv.conf

Note :: Used  chattr command here to give file resolv.conf  immutable file attribute so that next time you reboot or restart your networking interface(s) your DNS servers will not be reset by the system to use the settings given by the DHCP server.

When you want to change again the file resolv.conf, first issue the following command to remove the immutable file attribute first before editing resolv.conf .

code:
dex@desktop :~$ sudo chattr -i /etc/resolv.conf

Someone suggested to me that Open DNS is better in terms of latency. So can also use as per need these DNS too :

 208.67.222.222
 208.67.220.220

Tuesday 17 May 2011

Google Dork for Security Cameras !!

Use this Google Search Terms or Google Dorks to find several unattended Security Cams.

Note :: Use for fun only , do not stalk others !!


inurl:ViewerFrame?Mode=
intitle:Axis 2400 video server
inurl:/view.shtml
intitle:Live View / - AXIS
inurl:view/view.shtml^
inurl:ViewerFrame?Mode=
inurl:ViewerFrame?Mode=Refresh
inurl:axis-cgi/jpg
inurl:axis-cgi/mjpg (motion-JPEG)
inurl:view/indexFrame.shtml
inurl:view/index.shtml
inurl:view/view.shtml
liveapplet
intitle:live view intitle:axis
intitle:liveapplet
allintitle:Network Camera NetworkCamera
intitle:axis intitle:video server
intitle:liveapplet inurl:LvAppl
intitle:EvoCam inurl:webcam.html
intitle:Live NetSnap Cam-Server feed
intitle:Live View / - AXIS
intitle:Live View / - AXIS 206M
intitle:Live View / - AXIS 206W
intitle:Live View / - AXIS 210?
inurl:indexFrame.shtml Axis
inurl:MultiCameraFrame?Mode=Motion
intitle:start inurl:cgistart
intitle:WJ-NT104 Main Page
intext:MOBOTIX M1? intext:Open Menu
intext:MOBOTIX M10? intext:Open Menu
intext:MOBOTIX D10? intext:Open Menu
intitle:snc-z20 inurl:home/
intitle:snc-cs3 inurl:home/
intitle:snc-rz30 inurl:home/
intitle:sony network camera snc-p1?
intitle:sony network camera snc-m1?
site:.viewnetcam.com -www.viewnetcam.com
intitle:Toshiba Network Camera user login
intitle:netcam live image
intitle:i-Catcher Console - Web Monitor
inurl:”ViewerFrame?Mode=
intitle:Axis 2400 video server
inurl:/view.shtml
intitle:”Live View / - AXIS” | inurl:view/view.shtml^
inurl:ViewerFrame?Mode=
inurl:ViewerFrame?Mode=Refresh
inurl:axis-cgi/jpg
inurl:axis-cgi/mjpg (motion-JPEG)
inurl:view/indexFrame.shtml
inurl:view/index.shtml
inurl:view/view.shtml
liveapplet
intitle:”live view” intitle:axis
intitle:liveapplet
allintitle:”Network Camera NetworkCamera”
intitle:axis intitle:”video server”
intitle:liveapplet inurl:LvAppl
intitle:”EvoCam” inurl:”webcam.html”
intitle:”Live NetSnap Cam-Server feed”
intitle:”Live View / - AXIS”
intitle:”Live View / - AXIS 206M”
intitle:”Live View / - AXIS 206W”
intitle:”Live View / - AXIS 210″
inurl:indexFrame.shtml Axis
inurl:”MultiCameraFrame?Mode=Motion”
intitle:start inurl:cgistart
intitle:”WJ-NT104 Main Page”
intext:”MOBOTIX M1″ intext:”Open Menu”
intext:”MOBOTIX M10″ intext:”Open Menu”
intext:”MOBOTIX D10″ intext:”Open Menu”
intitle:snc-z20 inurl:home/
intitle:snc-cs3 inurl:home/
intitle:snc-rz30 inurl:home/
intitle:”sony network camera snc-p1″
intitle:”sony network camera snc-m1″
site:.viewnetcam.com -www.viewnetcam.com
intitle:”Toshiba Network Camera” user login
intitle:”netcam live image”
intitle:”i-Catcher Console - Web Monitor”

Monday 16 May 2011

Online VNC , SSH and Remote Desktop Scanner !

Today, I came across these awesome Online tools to search for VNC, RDP & SSH ports open in an IP address range  !! Do check them out !!

Note :: These tools doesn't Brute force, simply checks if the service ports are open.



Online VNC Scanner
This scans the VNC and gives you the IP address in Green.

Online Remote Desktop Scanner
This scans the Remote Desktop / RDP and gives you the IP address in Green.

Online SSH Scanner
This scans the SSH and gives you the IP address in Green.

Friday 13 May 2011

BackTrack5 Released !!

This new revision has been built from scratch, and boasts several major improvements over all previous releases.Based on Ubuntu Lucid LTS. Kernel 2.6.38, patched with all relevant wireless injection patches. Fully open source and GPL compliant. BackTrack 5 comes in several flavors and architectures.

BackTrack5 Codename "Revolution" this time comes with GNOME Desktop Environment for the first time. There is a whole lot of architectures to chose from e.g arm, x86, x86_64 and also there is a choice between Virtual Image and ISO download. I am particularly excited about the GNOME Environment x86 architecture, going to try it soon.

Grab Yourself a Copy at --->> http://www.backtrack-linux.org/downloads/

Ping Sweeping in BackTrack !!!

While many of us use "Nmap" to ping sweep a network, there is also "fping" and "nbtscan" which when combined can give pretty fast result. There are many better ways to ping sweep this is just one way to do it.

Using fping is easy just refer the man page. Following is an example

CODE
# fping -a -g 10.18.1.0/24 2>/dev/null
10.18.1.66
10.18.1.77

This usage gives all the live host. For querying Netbios service to get the names of the Windows machine on your network use :

CODE
# nbtscan  10.18.1.1-254
Doing NBT name scan for addresses from 10.18.1.1-254

IP address       NetBIOS Name     Server    User             MAC address      
------------------------------------------------------------------------------
10.18.1.66       AAA-PC          <server>  <unknown>        00:1e:ce:90:ab:8c

Many other ways to do ping-sweep a network with minimum packet generation e.g using "Scapy" or just go with Nmap.

NOTE :: These are not expert views. on contrary these are something a newbie is  picking up.

Wednesday 4 May 2011

Reliance NETCONNECT 1x CDMA stick in Ubuntu 10.04 !

Recently after getting 3G stick from Micromax work under Ubuntu, One of my friend asked me to connect his Reliance NetConnect 1x (CDMA based dongle) on Ubuntu.

I basically followed the steps as earlier for Micromax stick and got hit by a bummer when sakis3g script  tells the device has no GSM capabilities, even after using -noprobe switch there was some issue of "PIN".

So after that i tried a simple method. Execute the sakis3g script & switch modem

dex@dex-desktop:~$sudo ./sakis3g --interactive "verbose"

Then go for " more options > Only switch modem(if applicable)>USB device> HT CDMA device"

After the modem is switched the Network Manager App in Ubuntu(on top right of panel) shows a "new broadband connection" available. Click on that select Reliance as the operator.

Before connecting using this new connection you'll have to enter your "user:password" combination by right-clicking the
Network App> Edit Connections>Mobile Broadband > Reliance Connection.

["user:password" for netconnect is just a 8 digit no. you got while you purchased your dongle. Enter the same no. for both ]

Now you are ready just left-click on Network App and then "Reliance Connection" connects you....

NOTE::  usb_modeswitch can also be used to switch the modem (can try that too).

Tuesday 3 May 2011

apt-fast--- faster apt-get installations !!!

When I  see new upgrades or updates available for my Ubuntu distribution i go for them instantly, unfortunately it takes a whole lot time to update using "apt-get" mainly because it doesn't create parallel download connections.
After a bit Googling i came across a cool script named apt-fast by Matt Parnell which can be found here (most recent one with name "apt-fast.sh"). Just download it.

Make it executable and owned by root and then move it to /usr/bin by issuing following commands on terminal::

dex@dex-desktop:~$ sudo -i
sudo password for dex:
root@dex-desktop:~#whoami
root
root@dex-desktop:~# chown root:root apt-fast.sh
root@dex-desktop:~#chmod u+x apt-fast.sh
root@dex-desktop:~#mv ./apt-fast.sh /usr/bin/apt-fast
root@dex-desktop:~# ls -l /usr/bin/apt-fast
-rwxr--r-- 1 root root 2072 2011-04-09 15:14 /usr/bin/apt-fast

Note that apt-fast uses same options and commands as apt-get but is faster. For example

root@dex-desktop:~#apt-fast upgrade


P.S. :: If your distro doesn't have axel package then the script apt-fast does it for you. Axel is a light download accelerator for Linux. You can play with axel too.