Milind's Alley

AT Commands: Mobile Messaging

2011-02-26T14:34:00.008+05:30

I was just wondering on how to send SMS from your computer via a mobile device (or GPRS modem). I dug it up and created a small application using c++ (Netbeans IDE) which you can extend and use as per your free will.

The How??

There is a great guide here which you can use to telnet your mobile device and test sending a SMS manually. To do it via a program: read on.

Quick Start

To incorporate this library into your project all you have to do is to include the "ATCommands.h" file. This exports the following functions:

void initPort(int n);

void pokeDevice();

int getMsgIndex();

void sendSMS(char *TargetNo,char *Msg);

void closePort();

Lets dicuss their roles one at a time:

initPort(int n): It initializes and sets up the port for communication. The device string should be of the form /dev/ttS<n> where n is the port number (like mostly if you have only one device attached then it will be /dev/ttyS1).
pokeDevice(): To be used only under debug mode(explained later). It is analogous to a ping.
getMsgIndex(): It is a helper function for sendSMS and returns the index for the new message to be written.
sendSMS(char *TargetNo,char *Msg): It is the function you want to call most often and is responsible for actual sending of SMS.
closePort(): performs cleanup and closes open port.

Putting it all together, we have a sample test program as:

initPort(n); // Open Port and set params;

#ifdef DEBUG

pokeDevice(); // To test if connection can be made

#endif

sendSMS(argv[2],argv[3]); // actual procedure that sends message

// argv[2] is no. and argv[3] is MSG

closePort(); // Cleanup

Try running it and .... guess what... you've got SMS (You've got mail sounds more catchy or is it just me :P).

Under The Hood

The code I have written supports a DEBUG flag. All you've got to do is to include "Debug.h" which defines a macro Debug and enables logging of debug messages to stdout. If you are extending the library then you might want to use the DbgPrint( char *format, ... ) function to maintain uniformity of the debug flag.

click download link below to download the complete netbeans project and have a go at it yourself.

Download

The above code was compiled using g++4.3.2/cygwin and tested with mobile handsets of Nokia, Sony Ericsson and Sigmatel. It should also work with most GPRS modems.

Further Improvements

Support for handling multiple mobile devices at once.
Error handling can be better.
Support for Queueing/Scheduling of messages.

Rootkit.com info leak poses threat to other sites

2011-02-20T02:00:00.002+05:30

Big news appeared on the 15th feb 2011 the famous www.rootkit.com (HBGary) was attacked and all the data in its mysql db and emails were stolen and posted online. Being a huge fan of the book Rootkits: subverting the windows kernel by Hoguland and Butler, I was an active member of the community there.

It is believed that the site http://dazzlepod.com/rootkit/ had published the username and password of all accounts in clear text (And yes mine toooo!!). As many users are in a habit of keeping the same password for all accounts like their mail or facebook etc, this posed a great risk.

The good thing is that the site has now removed the cleartext passwords stating that it has the potential to compromise people's social networking or mailing accounts. But the download to the backup of the mysql db still is available at : http://stfu.cc/rootkit_com_mysqlbackup_02_06_11.gz. Moreover, the password field in the database is hashed.

So, can you see your password (clear text) in here... Yes, it is now a DIY thing.

You will have to use the JTR (John the ripper password cracker) tool. The hash used is a vulnerable MD5 hash which can be broken given JTR has the right dictionary (http://dazzlepod.com/site_media/txt/passwords.txt).

JTR is available at : http://www.openwall.com/john/

Step 1: Download backup, JTR, dictionary (john is in synaptic for ubuntu users).
Step 2: Extract the .gz file and open the extracted file as text, search for your login name and get your password's hash (I used nano to open the file and searched for my login name. Hash is the field next to your login name). Note only the first occurence of your username as rest may be entries for comments and other stuff.
Step 3: Create a text file test.txt with content "mypassword:<hash>" without the "" and replace <hash> with the hash you found in step 2.
Step 4: Open terminal and ask jtr to do its magic using the following command :

john -wordlist=passwords.txt -format=raw-MD5 test.txt

That was easy.. funny part is that it took 0.00 secs to crack my password. Am thinking of increasing my password strength....

Now what???

If you or someone you know is a rootkit.com user then you must immediately change your password for all site accounts that have the same password. Go Go Go!!!

With all that being said and done, I feel that it is really unethical of someone to post such stuff online and posing a threat to other sites.However, It is our duty to stay vigilant enough and act on it as soon as possible. I am also the kind of person who likes to keep one password for all accounts (I know its not recommended but its just easier this way) and hence had to go through a lot of settings and change password pages. Thankfully, none of my accounts were compromised before I changed my password. Hope it is the same for you.:)

Online Shopping Cart: JSP

2010-07-16T12:10:00.050+05:30

Hey Ppl!! I am glad to finally get the time to post on my blog again..... As a part of my curriculum I had to create an online shopping cart. Since I thought of doing it in JSP where in I could some AJAX to make it fancier :). Well the choice of IDE for me was to go for RAD (Rational Application Developer) 7.5 with WAS (Websphere Application Server) CE and DB2 as the back end.This is a basic project but is a good learner for those who are new to JSP, servlets or AJAX. This is also be useful if you are looking to get familiarized with the IDE.

Overview :

Lets draw an outline of the project. We have 2 use cases to the project viz Administrator and Customer. We take them one by one. ADMIN end:

Ability to add products
Managing the categories that these products belong to
Search Transaction
Search Customer
Search for product and ability to edit product inf

Next, On the Customer End:

View product and its details
Register
Login
Add product to cart and checkout
Viewing transaction records

Lets take up the database for such a system. I have taken the snapshot right out of DB2 listing the tables there in (click to expand).

Snapshots :

Lets look at the snapshots of the project first and then we will discuss the problems faced and their solutions.

Hurdles :

Creating & calling stored procedures on DB2.

With RAD thats very easy!! Follow the steps:

Switch to Data Perspective.
If haven't already create a new project data development proj say 'ShopDev'. While doing so you will be asked to connect to the DB2 database please make sure you enter the DB2 credentials correctly and dont forget to test the connection.
Right click on the ShopDev in the project navigator and select new stored procedure.
Make sure you choose java as the language (unless you want to use sqlj) and create the query, set up I/O parameters and you will have a stored procedure created for you. This might not be exactly you want so you can edit it now. (for eg look in folder /workspace/ShoppingDev/JavaSource/com/db2admin/db2admin/*.java)
Once done, you can right click on the procedure and select the option generate JavaBean class to get the .java file in your dynamic web project. (these can be found in /workspace/ShoppingCart/src/genbeans/ )
Now you can use this class to instantiate it in JSP or as Beans..

Image/File Uploads for products

I have seen a lot of posts over the internet for this. But it was difficult to find one good solution. Our objective was to upload the file to database so the approach that we follow is to first upload the file to a temporary folder on the server then onto the database. Uploading To FileSystem On Server: To do so the Apache Commons FileUpload package will do the work for us. Just include the library in your path or add it as a reference. First lets see the jsp page with form that is going to submit both variables and upload data. (important to note enctype)


<form id="addProduct" enctype="multipart/form-data"
action="AddProduct" method="post">

The code snippet shows the use we make of it in a servlet. Here the form sends some variables and 3 image files:


import org.apache.commons.fileupload.FileItem;


import org.apache.commons.fileupload.FileUploadException;


import org.apache.commons.fileupload.disk.DiskFileItemFactory;


import org.apache.commons.fileupload.servlet.ServletFileUpload;




/**


 * Servlet implementation class AddProduct


 */


public class AddProduct extends HttpServlet {


    private static final long serialVersionUID = 1L;


       


    /**


     * @see HttpServlet#HttpServlet()


     */


    public AddProduct() {


        super();


        // TODO Auto-generated constructor stub


    }




    /**


     * @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)


     */


    protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {


        // Create a factory for disk-based file items


        


        DiskFileItemFactory factory = new DiskFileItemFactory();


        String SUBCAT = null,Name = null,BRAND = null,Description = null;


        int Price = 0,Qty = 0;


        byte[][] Image=new byte[3][5*1024*1024];


        // Set factory constraints


        factory.setSizeThreshold(5*1024*1024);


        factory.setRepository(new File("/tmp"));


        


        // Create a new file upload handler


        ServletFileUpload upload = new ServletFileUpload(factory);


        int cnt=0;


        // Parse the request


        List items;


        try {


            items = upload.parseRequest(request);


        


        Iterator iter = items.iterator();


        


        while (iter.hasNext()) 


        {


            FileItem item = (FileItem) iter.next();


            // Process a file upload


            if (item.isFormField()) {


                String name = item.getFieldName();


                if(name.equals("SubCat"))


                    SUBCAT = item.getString();


                else if(name.equals("PName"))


                    Name= item.getString();


                else if(name.equals("Brand"))


                    BRAND = item.getString();


                else if(name.equals("Quantity"))


                    Qty = Integer.parseInt(item.getString());      


                else if(name.equals("Price"))


                    Price= Integer.parseInt(item.getString());        


                else if(name.equals("Description"))


                    Description = item.getString();


            }


            if (!item.isFormField()) 


            {


                String fieldName = item.getFieldName();


                String fileName = item.getName();


                String contentType = item.getContentType();


                boolean isInMemory = item.isInMemory();


                long sizeInBytes = item.getSize();


                if (sizeInBytes<=10)


                    continue;


                File uploadedFile = new File("/tmp/up" + ++cnt +".jpg");


                try {


                    


                    item.write(uploadedFile);


                } catch (Exception e) {


                    // TODO Auto-generated catch block


                    e.printStackTrace();


                    return;


                }                


            }


        }


        } catch (FileUploadException e1) {


            // TODO Auto-generated catch block


            e1.printStackTrace();


            return;


        }


        AddProductBean apb=new AddProductBean();


        System.out.println("CNT= " + cnt);




        FileInputStream[] fis=new FileInputStream[3];


        for(int i=1;i<=cnt;i++)


        {


            File f=new File("/tmp/up" + i +".jpg");


            fis[i-1]=new FileInputStream("/tmp/up" + i +".jpg");


            Image[i-1]=new byte[(int) f.length()];


            System.out.println(fis[i-1].read(Image[i-1], 0, (int)f.length()));


        }


        String str="khali";


        byte[] n=str.getBytes();


        System.out.println("Len= " + Image[0].length + " "+ Image[1].length + " "+ Image[2].length + " ");


        try {


            if(cnt==3)


                apb.execute(SUBCAT, Name, BRAND, Price, Qty, Description, Image[0], Image[1], Image[2]);


            else if(cnt==2)


                apb.execute(SUBCAT, Name, BRAND, Price, Qty, Description, Image[0], Image[1], n);


            else if(cnt==1)


                apb.execute(SUBCAT, Name, BRAND, Price, Qty, Description, Image[0], n, n);


            else


                apb.execute(SUBCAT, Name, BRAND, Price, Qty, Description, n, n, n);


            for(int i=0;i<3;i++)


            {


                if(fis[i]!=null)


                    fis[i].close();            


            }


            if(apb.getRes()>=0)


            {


                response.sendRedirect("AddedProduct.jsp");


            }


        } catch (SQLException e) {


            // TODO Auto-generated catch block


            e.printStackTrace();


        }


    }

A very common question was getting servlets to work. The error is that httpservlet is not found.

To correct that you need to add reference to j2ee.jar that can be found here

Extensions :

Add provision for product offers or discount offers.
Support for preview of multimedia products and downloadable products like games/softwares.
Recommended products can be evaluated via Apriori algorithm.

Download :

Finally, here you can download the complete workspace for the project.

Digital Image Processing

2010-02-04T03:00:00.023+05:30

I undertook a project on digital image processing (DIP) during May-June 2009 at Indian Space And Research Organization (ISRO). We learned a lot about the working of the great organization and also understood the concepts behind remote sensing and Geographical Information Systems (GIS). We also learnt the implementation of image processing algorithms and were planning to tweak them a little to align them with our project.

The Project:

I was to lead a team of 6 responsible for creating a project on the various techniques of image processing viz Classification, Enhancement & Filtering. We used Visual Studio 2008 as the IDE and created a MFC based project that provided a wide variety of DIP functions. We used the IGIS SDK to achieve our goal.

The next question that arises is :
Q) What is the IGIS SDK ?
A) Well it is a under construction project that is a join venture of ISRO and a company named Scanpoint Geomatics. So we were provided a dll that was exporting functions to do the processing in the background. Our task was massively reduced due to the high level of abstraction provided by the dll. But then again, since all this was under development (hence poorly documented) we had to write our own interface and handle events and a GUI (Graphical User Interface) which could make the image processing tasks easy.

Q) Is this IGIS SDK available as a free download and can anyone use it?
A) Well it is a proprietary software and has to be bought (obviously we were provided with keys for the development of project).

There are a lot of dimensions to the project.... its better that we read the complete documentation of the project. Well I was asked to present my project at both ISRO and my college. So here is the ppt I used.

As always, here are the sources to the project. But then again, you would require IGIS to be preinstalled for this to run.

On the whole, I can say that it was a great learning experience at ISRO. I am grateful to our project guide Mr. Vinod Bothale and would like to thank him for being there whenever needed.

Here for a quick preview of the project

Dragon Naturally Speaking : Step Up Your Work

2010-01-13T21:01:00.005+05:30

I was just browsing the Internet yesterday and I happened to stumble upon this beautiful peice of software named Dragon NaturallySpeaking 10.0. It is a text-to-speech and speech to text conversion software. The best part of it is the speech to text conversion. It is different from the others and takes much less in training. In fact it has different options for different kind of people. It is specialized for Indians who speak in Indian accent and for Americans who speak in American English and so on and so forth. Well most of us think that these are just games to play with. But Dragon NaturallySpeaking is truly different.

It can control windows command buttons, mouse clicks and type in keyboard shortcuts as and when you say. This makes up for a great feature as you can use this to speed up your work. You could be writing an e-mail to a friend or you could be typing in your text editor, you might be needing to align your text, capitalize or even italicize it while you might be busy with something else.

I have composed the video of me using the software and I totally feel it is worth the money. It is common thinking that you can type too fast and typing is the best way to do it. But to those who think so I say you've seen nothing until you've seen this software.

And guess what this post has been created using the same. Enjoy.

Improve Performance Of Your Windows XP

2009-07-13T22:54:00.028+05:30

Have you always wanted to get more out of your machine. Wanna see how to boost system speed and in turn speed up your activity over your computer?? Look No further. This is no publicity for a spyware mounted software that i will ask you to install and pay me for it. Instead i will tell you some tweaks that you can try yourself and feel the difference.

Disable Extra Startup Programs
There are certain programs that Windows will start every time you boot up your system, and during the startup phase, they're all competing for a slice of your CPU speed. Extra or unwanted items in the startup list will definitely increase your startup time, perhaps by several minutes. Some common examples are things related to AOL, RealPlayer, Napster, instant messengers, and video managers If you're not sure about an item, no big deal. You can turn it off, restart your PC, and see if everything seems to work. If not, you can always go back and re-enable an item in the Startup list. Here are is what you have to do:
1. Go to Start button  Run
2. Type "msconfig", without quotations
3. Hit enter key or click the OK button
4. A System Configuration Utility window will show up
5. Click the Startup tab
6. In the Startup tab you will see several boxes and some of them will selected (checked). All you have to do is to uncheck extra items that are of no use. If you run an antivirus program it is not recommended to uncheck it.
7. After making you choices press the OK button, you will be prompted to restart computer to apply changes.
8. After restarting your computer a dialogue will be displayed. You can check the option for not showing this dialogue every time your PC reboots.

Optimize Display Settings
Windows XP can look sexy but displaying all the visual items can waste system resources. To optimize:
1. Click the Start button
2. Select Control Panel
3. Double-click the System icon
4. Click the Advanced tab
5. In the Performance box click Settings
6. Leave only the following ticked:
  Show shadows under menus
  
  Show shadows under mouse pointer
  
  Show translucent selection rectangle
  
  Use drop shadows for icons labels on the desktop
  
  Use visual styles on windows and buttons
7. Finally, click Apply and OK

Optimize Folder Switching And File Browsing
You may have noticed that every time you open “My Computer” to browse folders that there is a slight delay. This is because Windows XP automatically searches for network files and printers every time you open Windows Explorer. To fix this and to increase browsing speed significantly:
1. Double-click on My Computer
2. Click the Tools menu
3. Select Folder Options
4. Click on the View tab.
5. Uncheck the Automatically search for network folders and printers check box
6. Click Apply
7. Click OK
8. Reboot your computer

Disable File Indexing
Indexing Services is a small little program that uses large amounts of memory and can often make a computer endlessly loud and noisy. This system process indexes and updates lists of all the files that are on your computer. It does this so that when you do a searc for something on your computer, it will search faster by scanning th index lists. If you don’t search your computer often, this system service is completely unnecessary. To disable do the following:
1. Click Start button
2. Select the Control Panel
3. Double-click Add/Remove Programs
4. Click the Add/Remove Window Components icon on the left side of the window
5. This may take a few seconds to load. Be patient.
6. Look for the “Indexing Services” component in the list
7. Uncheck the Indexing Services
8. Click Next
9. Click Finish
Remove Un-Used Programs & Files

You may have a bunch of software packages on your hard drive that are no longer needed, or they were gratuitously installed when you downloaded some other package. Toolbars, file-sharing programs, free email enhancers, online shopping "companions" and download managers are notorious for this practice. These uninvited guests can put a big drag on your startup time, cause web pages to load slowly, and generally bog down your computer. Well we all know how do that... so i'll pass on that..

I hope that with these tweaks done you'll certainly feel your computer to be lighter and more responsive as ever. You will soon realize that its better to have more speed than the eye candy of the OS. HAPPY WORKING

Cant Wait To Get My Hands On This Book

2009-06-28T17:50:00.008+05:30

: The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System

Pages: 908 pages
Publisher: Jones & Bartlett Publishers (May 4, 2009)
Language: English
Fanatics Like Me : Click Here

Are you Smarter Than 5th grader

2009-06-03T15:41:00.008+05:30

Wanna play the all famous game...... Here is the setup for the game that i built. Want a Preview.... Scroll here are the source files to it.

Java & Mysql Based Conference Client

2009-06-03T13:41:00.005+05:30

I developed this conference client just for me in my free time.... v Hybrid architecture (Client Server and P2P) based Instant Messenger. v It has features like text messaging with text formatting inclusive of smiley, audio and video chat. v It has a Desktop Sharing feature wherein users can view/share their desktop among themselves. v It is cross platform as it is based on Java and it uses MySql as backend. It is dependent upon JMF (Java Media Framework) here is a video in which i demonstrate how to go about using my project. I have also included a log file. Please send me the log file in case you encounter any errors. Here are the executables.

Java MS Access Primary and Foriegn Key

2009-05-24T21:52:00.014+05:30

Here is my problem statement : To Implement these 4 functions 1.// return a list of all the table names in the database // as an ArrayList<string> which looks like: // [tableName1, tableName2, tableName3, ..., tableNameN]

ArrayList<string> getAllTableNames()

2. // return the primary key of a given table

// as an ArrayList<string> with the primary key columns in proper // order

ArrayList<string> getPrimaryKey(String tableName) OR PREFERABLY:

write a method to return all the primary keys of all the tables at once.

3. // for a given table, return a list of 4-tuples which are // the relational constraints from foreign tables into this // table's primary keys. Each 4-tuple looks like this: // [PKTABLE_NAME, PKCOLUMN_NAME, FKTABLE_NAME, FKCOLUMN_NAME]

public ArrayList<arraylist<string>> getTableConstraints(String tableName)

OR PREFERABLY:

write a method to return all the relational constraints of all the tables at once.

4.// return a list of all the columns in the database as // a list of triples. Each triple looks like this: // [TABLE_NAME, COLUMN_NAME, DATA_TYPE]

ArrayList<arraylist<string>> reallyGetColumns()

My PROPOSED SOLUTION: For getting the foreign key relationships you'll have to enable the read permission to system table via access (refer to screenshots). Next :

For getting the foreign key relationships you'll have to enable the read permission to system table vi access (refer to screenshots).

Here are the Function Prototypes that are called :

1. private ArrayList<string> gettablenames(Connection con) throws SQLException

2. private ArrayList<string> getprimarykey(Connection con,String tablename) throws SQLException

3. ArrayList<arraylist><string>> getforeignKeys(Connection con,String tablename) throws SQLException

4. ArrayList<arraylist><string>> reallyGetColumns(Connection con) throws SQLException

Test The application by double clicking the jar. I am also attaching the database that i used to test it.

Here is the Executable To Test. Get it Now (sample Db included). Here is the Source Code And Executable : NetBeans Project

: Eclipse Project

Websphere Application Server CE Support For RAD

2009-05-24T21:46:00.005+05:30

Installing the WASCE WTP Server Adapter using the deployable.zip file Installing in Eclipse Europa

1. Visit the welcome page from the Eclipse Update Site for IBM WebSphere Application Server Community Edition (http:// download.boulder.ibm.com/ibmdl/pub/software/websphere/wasce/updates/). 2. Find the deployable.zip package and click the linkage to download it. 3. Make sure Eclipse is not running. 4. Extract this package to your Eclipse directory. 5. Use the Eclipse -clean option after installing the WTP server adapter.

copy as root to the /opt/IBM/SDP directory using type : cd plugins type : cp -r * /opt/IBM/SDP/plugins/ type : cd .. type : cd features type : cp -r * /opt/IBM/SDP/features/

NOTE : There should be no ommission of file error.

then use ./eclipse -clean to rerun RAD

Control Internet Connection Opensuse

2009-05-24T21:46:00.004+05:30

Install the small package KINTERNET to control the connection (connect and disconnect from tray).

Install RAD

2009-05-24T21:45:00.002+05:30

First install sun-jdk downloaded from here : http://java.sun.com/javase/downloads/index.jsp

NOTE : choose jdk update 13. use ./ to run the jdk setup.

to install rad extract all zips files. now open konsole.

navigate to RAD_SETUP folder. Type : cd .. Type : chmod -R u+x RAD_SETUP Type : cd RAD_SETUP Type : ./launchpad.sh

Thats it you have launched the gui for RAD setup . install with default.

Note : Disconnect internet before starting launchpad.sh

Peice Of Cake!! right

Enabling NTFS On OpenSUSE

2009-05-24T21:44:00.001+05:30

http://en.opensuse.org/NTFS

OpenSUSE : For MP3 fans like me

2009-05-24T21:43:00.001+05:30

http://opensuse-community.org/Restricted_Formats/11.0

go here install the codecs. just click on link and you will be fine.

DB2 Install on OpenSUSE

2009-05-24T21:42:00.001+05:30

To install db2 : go to install software. (Start - > application - > system - > configuration -> install software.)

Put the opensuse dvd in drive and then search for libstdc++ . check libstdc++33 and click accept. it will install from cd in a sec.

then open Konsole (start -> applications) type in : su it will ask for password give it (123 if you created gennext as i told you) now keep the konsole running . Copy the db2 for linux tar file to your home directory (start -> computer -> home) now click on it to open with ark. extract its contents in home.

Now come back to the terminal .

Type : cd expc Type : ./db2setup and then the setup installer GUI will appear. and db2 will install fine.

Configuration Options for db2 :

DAS user : db2admin password : password do not change group or anything else. DB2 Instance Owner : User: work passowrd: 123 Default setting for fenced user. just type in password as 123.

FINISH log into work and then Now on konsole type db2start to start db2 and then db2cc to have the GUI front end like mysql query browser

MULTIBOOTING OPENSUSE 11.1 VISTA

2009-05-24T21:39:00.002+05:30

OPENSUSE install

Prerequisite Create a 15 - 20 GB unallocated partition through windows disk management or any partition manager of your choice,

Install:

Installation is pretty straight forward. I prefer to use KDE 4.1 desktop environment. HARDDISK CONFIG : I went for expert config and suggest that you should. You will not see the unallocated space you created there. but dont worry it is usable. click add and create a 600 MB ext 3 partition with mount point /boot. Next Create a 2 GB swap partition and the remaining an ext3 with mount point "/". If you want to access the windows files via opensuse select each of your windows partition and select edit. Next confirm that it says "DO NOT FORMAT" and set its mount point to / mnt/drive_C. the mount point will change as the number of drives are increased. BOOTLOADER CONFIG : when you finish giving all your inputs it displays an anallysis of taks. Select bootloader. switch to bootloader config there. select only 2 options. 1. install bootloader to boot partition 2. install bootloader to MBR

You are done......

2009-01-11T23:34:00.004+05:30

Eagle Eye (2008) Download Torrent

Shooter 2007 Movie

2009-01-11T23:22:00.005+05:30

Must watch Movie : Shooter (2007) Torrent : Shooter aXXo

System Process, Thread And Module Information Extractor

2009-01-11T22:40:00.016+05:30

There are often cases when some unwanted program (mostly spyware and worms) try to hide their activity by hiding themselves using kernel level techniques. So, to uncover these processes/modules/threads we have a driver which is compiled with Microsoft Windows DDK. The Driver is compatible with windows xp sp2 and sp3. Downloads Section The Driver(Zip File) So what we have to do is just run the InstDrv.exe (bundled along in the zip file). As With all the drivers we have to install my driver(TheOne.sys). To Do This Start Install Drv by double clicking on it. Type in the path to TheOne.sys and click Install. And when it says Operation Successfull click on Start to Start Our Driver Ok .. So we have Our Driver Up And Running.... To Interface With the driver we also have a Usermode Program (Enlist.exe Bundled In Zip) in Microsoft Visual C++. Run it to get the results from our driver. We get the following message on running it. Now the output on the console will not be desirable so enlist.exe outputs the results to a LISTING.txt File created in the working directory. Lets See What have we got in our LISTING.txt As You can see that this also gives you the base address of the module loaded so if you are viewing memory its easy for you to locate them... HOPE THIS HELPS....

Packer & Extractor

2008-10-03T20:20:00.006+05:30

These are tools written in c.Packer can be used to tail multiple files to a windows executable. The files are simply appended to the exe and new executable is created. Usage : pack (desired_exe) (file_1) (file_2)... (desired_exe)- It is the name of the requested file with .exe extension which is to be generated . (file_x) specifies the different files that are to be tailed along with the exe. Eg pack theone.exe load.exe theone.sys This would replicate the extractor.exe and rename it to theone.exe and tail it with load.exe and theone.sys. NOTE: 1) The load.exe and extract.exe should be in the same folder. 2) The exe thus created when executed will try to run a tailed exe if any. ie with above example the new generated theone.exe when executed will : a) extract the tailed files b) execute the load.exe and pass any command line arguments that were given to itself. so we would like to call: c:\>theone.exe theone.sys Now since my driver is only for windows xp uses a sysfile that gives output using DbgPrint, so use the link to download DbgView To view all processes(inclusive of hidden) in your WinDbg Console.

Screenshots :

download: Executables (contains Packer & Extracter with sample Theone.exe) Source Code (Source for Packer & Extractor)

Loader

2008-10-03T20:00:00.004+05:30

This is a tool I wrote in c. It can be used to load a driver(sys file) and start the driver. Eg load xyz.sys this loads the sysfile and starts the service with the name THEONE. after that it stops the service automatically. It can also be used with -r attribute to remove a named service. Eg load -r THEONE this will remove the named service viz THEONE. An Exe With The Source Code Can Be Found here.

NEWS: VISTA GIVING FALSE SENSE OF SECURITY

2008-09-23T22:18:00.002+05:30

check this report on the all famous windows vista http://arstechnica.com/news.ars/post/20070530-windows-vista-no-more-secure-than-xp-report.html .

NEWS: All About Blue Pill Malware

2008-09-23T22:17:00.002+05:30

This has caused headaches for microsoft and here it is : http://en.wikipedia.org/wiki/Blue_Pill_(malware) ...u might wanna what is a rootkit - overview.... http://en.wikipedia.org/wiki/Rootkit

Windows OS

2008-09-23T22:04:00.005+05:30

My personal Favourite : The Windows XP x64 ..... it is very secure and old look and feel of xp makes it best of the best...... I would rate vista x64 ultimate edition 2nd to it.... The looks of vista are fancy perhaps more of waste of resources i'd say.... but ya if u really want the vista look go for 64 bit ultimate edition only..... The major advantage of 64 bit windows OS is not only its high speed but of the fact you are safe from malicious device drivers.... The drivers need to be signed then only they are installed.... I'd like to add that i m not going into details of vista's false security claim coz it is a universal fact now....

Unetbootin Is Awesome

2008-09-23T16:48:00.003+05:30

Unetbootin is the tool that can install near about any distro of linux through usb. I installed Ubuntu it took me 4 mins to complete it. Ultimate Edition in 7 mins. It can really be handy.. it saves a hell lota time. freely available at http://unetbootin.sourceforge.net/ .

Currently Downloading Another Distro of Linux

2008-09-23T16:47:00.002+05:30

am currently downloading slax and will use it with my usb. will write about it soon..

How does cross platform software work

2008-09-23T16:44:00.003+05:30

Just wondering how does all the cross platform softwares work.... I dont think all them use java... how do they do it??? do they have the same thing built for different platforms.... Will have to digg into it..

Linux Distro : Ultimate Edition

2008-09-23T16:24:00.005+05:30

The best Distro that i have seen till date is Ultimate Edition (UE). UE looks sharp. it has emerald window manager that can make it look like vista and even better...

easy to install.. detects ntfs partitions automatically... very stable as it is based on ubuntu......

it is also bundled with a whole load of s/w . it has support for mp3 playback nd no codec required, it is good for all kinds of users:

i) Multimedia : it has a variety of audio and video players.... like amarok and vlc

ii) Developers : it comes with IDEs for all sorts of languages.

iii) Graphics : uncountable graphic / image editors..

iv) Home Users: its great and user friendly look makes it appealing for all users to be able to operate it without much hassle.

v) Gamers : It comes with a gamers edition that contains linux based games for all hardcore gamers.

It comes with Gnome, XFCE , Enlightment Desktop environments. It also has great archiving and iso makers / burners all bundled along it....

So for all with limited download/upload, here's the distro u'd want.

Linux Distro : Mandriva

2008-09-23T16:13:00.005+05:30

Often people look for a distro that is a replacement for windows.... you've got one... Mandriva has a smooth look (not as fancy as vista). It also easily manages ur partitions and plug n play devices.

wine didnt work as well here.... Got the 3d engine working though through compiz.

Linux Distro Ubuntu

2008-09-23T16:05:00.006+05:30

Near about the most stable distro of linux that I have used is Ubuntu. It is the best for beginners coz it has a huge community where u find any and everything. It has wide ranged hardware support worked well on my quad core Q6600 . But u know its not the fastest of all. It easily mounted all my windows ntfs partitions in it. the 3d graphics worked well under compiz. Used wine to run win exe. worked like magic. But only some exe's work under it. Then there was an urge to shift to KDE. I liked it.... Though KDE4.0 is released .. i would not recommend to use it coz its very buggy at the moment... But the one with with KDE3.6 is stable nd a good distro but not the best as yet.