click one of the pics to expand, you can press > while viewing one to view the other
If you would like to RunAs System in Vista or open a command prompt in any directory as system in Vista, check this out...
Download Here
I recently had a need to install a program and I thought hmm.. maybe if I run as system it will install since my permissions on my system were wack. So I downloaded psexec from sysinternals because I knew they had a -s run as system switch and a -i interactive switch so I made this little app for everyone to share, btw... you can run a system prompt and kill explorer.exe and run explorer.exe as system as well hehe. Be very carefull with this, you can do allot of damage running things as system, you have more access than administrator.
I did not include a readme, if you dont know what it is, dont get it, you will be able to rightclick any Folder and open a system cmd prompt.
Enjoy
defcon
Sunday, May 6, 2007
Run As SYSTEM in Vista
Friday, May 4, 2007
Vista Network Security Tools
click above to view 9 images press < or > to scroll through them
Net Tools is cutting-edge security and network monitoring software for the Internet and Local Area Networks, providing clients with the ability and confidence to meet the challenges of tomorrow's technology.
Download Here
Keeping pace with the industry trends, we offer professional tools that support the latest standards, protocols, software, and hardware for both wired and wireless networks. The main goal is the creation of high quality software. Net Tools is a very strong combination of network scanning, security, file, system, and administrator tools useful in diagnosing networks and monitoring your PC and computer's network connections for system administrators. Next to the essential core tools it includes a lot of extra valuable features. It’s a Swiss Army knife for everyone interested in a set of powerful network tools for everyday use. This all-in-one toolkit includes also a lot of handy file and system utilities next to the huge amount of network tools. The menus are fully configurable, so in this way you won’t get lost in the extremely large amount of essential tools. All the additional features will make this application a must have for all system administrators. There are numerous constructive and valuable applications included in Net Tools that can be used for a great amount of purposes. The latest version of Net Tools is hybrid; it means that it’s capable of working together with applications that are made and designed for Net Tools, so in this way more flexibility and user-friendliness is obtained. This software is designed for the Microsoft Windows OS (Windows 98, NT, 2000, 2003, XP, Vista). It’s entirely compatible and has thoroughly been tested on Windows XP. With the 150+ tools it is a great collection of useful tools for network users. The size of Net Tools 4.5.74 is approximately 25 Mb.
Contents
Net Tools 4.5 (build 74) contains a whole variety of network tools. Here is a list of the most important tools:
1) IP Address Scanner
2) IP Calculator
3) IP Converter
4) Port Listener
5) Port Scanner
6) Ping
7) NetStat (2 ways)
8) Trace Route (2 ways)
9) TCP/IP Configuration
10) Online - Offline Checker
11) Resolve Host & IP
12) Time Sync
13) Whois & MX Lookup
14) Connect0r
15) Connection Analysator and protector
16) Net Sender
17) E-mail seeker
18) Net Pager
19) Active and Passive port scanner
20) Spoofer
21) Hack Trapper
22) HTTP flooder (DoS)
23) Mass Website Visiter
24) Advanced Port Scanner
25) Trojan Hunter (Multi IP)
26) Port Connecter Tool
27) Advanced Spoofer
28) Advanced Anonymous E-mailer
29) Simple Anonymous E-mailer
30) Anonymous E-mailer with Attachment Support
31) Mass E-mailer
32) E-mail Bomber
33) E-mail Spoofer
34) Simple Port Scanner (fast)
35) Advanced Netstat Monitoring
36) X Pinger
37) Web Page Scanner
38) Fast Port Scanner
39) Deep Port Scanner
40) Fastest Host Scanner (UDP)
41) Get Header
42) Open Port Scanner
43) Multi Port Scanner
44) HTTP scanner (Open port 80 subnet scanner)
45) Multi Ping for Cisco Routers
46) TCP Packet Sniffer
47) UDP flooder
48) Resolve and Ping
49) Multi IP ping
50) File Dependency Sniffer
51) EXE-joiner (bind 2 files)
52) Encrypter
53) Advanced Encryption
54) File Difference Engine
55) File Comparasion
56) Mass File Renamer
57) Add Bytes to EXE
58) Variable Encryption
59) Simple File Encryption
60) ASCII to Binary (and Binary to ASCII)
61) Enigma
62) Password Unmasker
63) Credit Card Number Validate and Generate
64) Create Local HTTP Server
65) eXtreme UDP Flooder
66) Web Server Scanner
67) Force Reboot
68) Webpage Info Seeker
69) Bouncer
70) Advanced Packet Sniffer
71) IRC server creater
72) Connection Tester
73) Fake Mail Sender
74) Bandwidth Monitor
75) Remote Desktop Protocol Scanner
76) MX Query
77) Messenger Packet Sniffer
78) API Spy
79) DHCP Restart
80) File Merger
81) E-mail Extractor (crawler / harvester bot)
82) Open FTP Scanner
83) Advanced System Locker
84) Advanced System Information
85) CPU Monitor
86) Windows Startup Manager
87) Process Checker
88) IP String Collecter
89) Mass Auto-Emailer (Database mailer; Spammer)
90) Central Server (Base Server; Echo Server; Time Server; Telnet Server; HTTP Server; FTP Server)
91) Fishing Port Scanner (with named ports)
92) Mouse Record / Play Automation (Macro Tool)
93) Internet / LAN Messenger Chat (Server + Client)
94) Timer Shutdown/Restart/Log Off/Hibernate/Suspend/ Control
95) Hash MD5 Checker
96) Port Connect - Listen tool
97) Internet MAC Address Scanner (Multiple IP)
98) Connection Manager / Monitor
99) Direct Peer Connecter (Send/Receive files + chat)
100) Force Application Termination (against Viruses and Spyware)
101) Easy and Fast Screenshot Maker (also Web Hex Color Picker)
102) COM Detect and Test
103) Create Virtual Drives
104) URL Encoder
105) WEP/WPA Key Generator
106) Sniffer.NET
107) File Shredder
108) Local Access Enumerater
109) Steganographer (Art of hiding secret data in pictures)
110) Subnet Calculater
111) Domain to IP (DNS)
112) Get SNMP Variables
113) Internet Explorer Password Revealer
114) Advanced Multi Port Scanner
115) Port Identification List (+port scanner)
116) Get Quick Net Info
117) Get Remote MAC Address
118) Share Add
119) Net Wanderer
120) WhoIs Console
121) Cookies Analyser
122) Hide Secret Data In Files
123) Packet Generator
124) Secure File Splitting
125) My File Protection (Password Protect Files, File Injections)
126) Dynamic Switch Port Mapper
127) Internet Logger (Log URL)
128) Get Whois Servers
129) File Split&Merge
130) Hide Drive
131) Extract E-mails from Documents
132) Net Tools Mini (Client/Server, Scan, ICMP, Net Statistics, Interactive, Raw Packets, DNS, Whois, ARP, Computer's IP, Wake On LAN)
133) Hook Spy
134) Software Uninstaller
135) Tweak & Clean XP
136) Steganographic Random Byte Encryption
137) NetTools Notepad (encrypt your sensitive data)
138) File Encrypter/Decrypter
139) Quick Proxy Server
140) Connection Redirector (HTTP, IRC, ... All protocols supported)
141) Local E-mail Extractor
142) Recursive E-mail Extractor
143) Outlook Express E-mail Extractor
144) Telnet Client
145) Fast Ip Catcher
146) Monitor Host IP
147) FreeMAC (MAC Address Editor)
148) QuickFTP Server (+user accounts support)
149) NetTools Macro Recorder/Player (Keybord and Mouse Hook)
150) Network Protocol Analyzer
151) Steganographic Tools (Picture, Sounds, ZIP Compression and Misc Methods)
152) WebMirror (Website Ripper)
153) Extra Tools (nmap console & win32 version)
154) ...
Thursday, May 3, 2007
UAC History
History of UAC
UAC is not what Microsoft initially called this technology that helps protect computers. Initially, the technology was called LUA, which stands for Least Privilege User Access. LUA is defined as:
"(The Principle of Least Privilege) requires that each subject in a system be granted the most restrictive set of privileges (or lowest clearance) needed for the performance of authorized tasks. The application of this principle limits the damage that can result from accident, error, or unauthorized use."
Read More from the source
Monday, April 30, 2007
Best Vista Encryption Software *Freeware*
Keep your friends/family or the NSA/CIA out of your important files, even if someone hacks your administrator password or gets access to your computer they will not be able to crack this encryption, unless someone has a key logger or someone watches you type in your password, check this out, it is a "must have app"
Download here
Encryption Offered :)
AES
Serpent
Twofish
AES-Twofish
AES-Twofish-Serpent
Serpent-AES
Serpent-Twofish-AES
Twofish-Serpent
TrueCrypt is a software system for Windows Vista for establishing and maintaining an on-the-fly-encrypted volume (data storage device). On-the-fly encryption means that data are automatically encrypted or decrypted right before they are loaded or saved, without any user intervention. No data stored on an encrypted volume can be read (decrypted) without using the correct password/keyfile(s) or correct encryption keys. Entire file system is encrypted (e.g.., file names, folder names, contents of every file, free space, meta data, etc).
Files can be copied to and from a mounted TrueCrypt volume just like they are copied to/from any normal disk (for example, by simple drag-and-drop operations). Files are automatically being decrypted on-the-fly (in memory/RAM) while they are being read or copied from an encrypted TrueCrypt volume. Similarly, files that are being written or copied to the TrueCrypt volume are automatically being encrypted on-the-fly (right before they are written to the disk) in RAM. Note that this does not mean that the whole file that is to be encrypted/decrypted must be stored in RAM before it can be encrypted/decrypted. The are no extra memory (RAM) requirements for TrueCrypt. For an illustration of how this is accomplished, see the following paragraph.
Let's suppose that there is an .avi video file stored on a TrueCrypt volume (therefore, the video file is entirely encrypted). The user provides the correct password (and/or keyfile) and mounts (opens) the TrueCrypt volume. When the user double clicks the icon of the video file, the operating system launches the application associated with the file type – typically a media player. The media player then begins loading a small initial portion of the video file from the TrueCrypt-encrypted volume to RAM (memory) in order to play it. While the portion is being loaded, TrueCrypt is automatically decrypting it (in RAM). The decrypted portion of the video (stored in RAM) is then played by the media player. While this portion is being played, the media player begins loading next small portion of the video file from the TrueCrypt-encrypted volume to RAM (memory) and the process repeats. This process is called on-the-fly encryption/decryption and it works for all file types, not only for video files.
Note that TrueCrypt never saves any decrypted data to a disk – it only stores them temporarily in RAM (memory). Even when the volume is mounted, data stored in the volume is still encrypted. When you restart Windows or turn off your computer, the volume will be dismounted and files stored in it will be inaccessible (and encrypted). Even when power supply is suddenly interrupted (without proper system shut down), files stored in the volume are inaccessible (and encrypted). To make them accessible again, you have to mount the volume (and provide the correct password and/or keyfile).
Hack Vista Administrator Password
Locked out of Windows Vista? XP? NT? Overwrite the administrator password or any user password with a boot disk called Trinity Rescue Kit. All you gotta do is download this .iso with your computer, and copy it to a cd or dvd with ImgBurn.
Once done put cd back in, and restart the computer or put this disk in any computer and boot up with it, wait for the linux os to finish booting from cd, you will get a prompt, type "winpass" press enter
it is mounting the drives for windows, you can choose which os if you multiboot..
In most cases all you do is press enter if you only have one os.
Enter "*" for blank administrator password or enter whatever you need, confirm with y then enter.
Password changed :)
This shouldnt take anyone more than 5 minutes to do...
You can also change any username with winpass -u "username"
easy as that.
Enjoy :)
Download ISO to reset administrator password Here
Winpass
By default it will reset the builtin administrator account of a locally installed Windows, but you can specify other accounts as well at the commandline. In fact, you can add any parameter from chntpw which will be parsed to the commandline. So winpass –l will list you all usernames found in the SAM. Should you have troubles that metacharacters are present in the username (like the Ø or something), you can still use the HEX reference to the username listed next to it. Be sure to prepend that with a '0x'. More info on that can be found in the manual of chntpw. Watch out with disabling syskey! Most of the time you don 't need to disable syskey. It removes strong password encryption, so all local passwords become invalid, since the hashes don 't correspond to the encryption algorythm anymore.
Sunday, April 29, 2007
Disable UAC on Windows Vista Home and Windows Vista Home Premium Registry Patch
Due to the missing of Domain Join and Group Policy support in Windows Home and Windows Home Vista you can't disable User Account Control through the security policy editor (secpol.msc) You can disable UAC in Windows Vista Home and Home Premium easily by downloading my patch
here
To disable the User Account Control Elevation in Windows Vista Home and Windows Vista Home Premium for Administrators run uac_admin_off.reg
To enable the User Account Control Elevation in Windows Vista Home and Windows Vista Home Premium for Administrators run uac_admin_on.reg
To disable the User Account Control Elevation in Windows Vista Home and Windows Vista Home Premium for Standard Users run uac_user_off.reg
To enable the User Account Control Elevation in Windows Vista Home and Windows Vista Home Premium for Standard Users run uac_user_on.reg
btw I have a few more UAC hacks/tweaks here
Enjoy :)
Enable 2-way Vista Firewall With Advanced Security
Windows Vista includes a two-way firewall that has outbound filtering disabled by default. Why? Because it is complicated for end-users to use so they had that feature turned off as well as hidden. In fact, it is hidden so well that many users may think that the two-way firewall was yet another feature that was pulled from the final product. While that is true for other features the two-way firewall made it into the final product, you just need to know how to find it.
To get started, just click on the Start Button and key in wf.msc and hit Enter. This will bring up the comprehensive Windows Firewall with Advanced Security management interface. Here you will be able to configure rules for incoming as well as outgoing connections.
Make sure that you set the default action for outbound connections from allow to block. Otherwise the outbound firewall will be useless because it will allow all connections. This can be done from the Windows Firewall Properties link found on the main screen of the management interface.
If you do not like the interface, try kaspersky :)
Tweak User Account Control (UAC)
UAC is a good feature but sometimes it is necessary to tweak it a little so that it is less annoying for more experienced users. For example, an advanced user may be overwhelmed by the number of pop up authorization they receive. By tweaking the settings they can reduce the number of those they see as well as completely disable UAC. Although I do not recommend you completely disable UAC, you can fine tune it to be easier to get along with.
1. To get started, open up the Local Security Settings MMC to show the local security policies by running secpol.msc.
2. Navigate through Local Policies and Security Options.
3. Scroll through the list on the right of the various security settings until your reach the User Account Protection settings. Refer to the list below of the various settings, to change them, just right click and select Modify. Items in bold are the default values.
- User Account Control: Admin Approval Mode for the Built-in Administrator account
- Enabled
- Disabled
- User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode
- Elevate without prompting
- Prompt for credentials
- Prompt for consent
- User Account Control: Behavior of the elevation prompt for standard users
- Automatically deny elevation requests
- Prompt for credentials
- User Account Control: Detect application installations and prompt for elevation
- Enabled
- Disabled
- User Account Control: Only elevate executables that are signed and validated
- Enabled
- Disabled
- User Account Control: Only elevate UIAccess applications that are installed in secure locations
- Enabled
- Disabled
- User Account Control: Run all administrators in Admin Approval Mode
- Enabled
- Disabled
- User Account Control: Switch to the secure desktop when prompting for elevation
- Enabled
- Disabled
- User Account Control: Virtualize file and registry write failures to per-user locations
- Enabled
- Disabled
Disable (UAC) User Access Control via Command Prompt
If you are tired of those pop up confirmations to continue a task which requires elevated administrator rights all you gotta do is hold in the windows key, press "R"
type in cmd.exe then copy and paste :)
To Disable UAC
%systemroot%\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f
To Enable UAC
%systemroot%\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 1 /f
Create an Account lockout policy in vista (prevent cracking of vista passwords)
Creating an Account Lockout Policy will protect your account by limiting the number of time a remote application or attacker can try to guess/crack your password. This works by automatically locking out your account after a designated number of incorrect passwords were entered. Your account will remain locked out for a designated period of time before it is automatically unlocked and it can be logged into again. This provides a valuable addition to your account security because it can render brute force password attacks useless. If you have your lockout threshold set to 4 bad attempts and the lockout duration to 15 minutes, an attacker can try to guess your password a maximum of 16 times per hour.
Now that you know how valuable an Account Lockout Policy is, let’s get it setup on your computer:
1. Click on the Start Button and key in Secpol.msc and hit Enter.
2. Navigate through Account Policies and Account Lockout Policy.
3. Right click on Account lockout threshold and select Properties.
4. Enter in the value you want to use and hit OK to save. I like to use 4 here.
5. Windows will set the default values for the lockout duration and Reset account lockout counter values. If you want to change these values from the defaults (30 minutes), right click on them and select Properties. After making your changes hit OK to save and exit. 
Enable Bitlocker Encryption
Windows Vista includes a new hard drive encryption feature called BitLocker Drive Encryption. BitLocker can be a very useful security feature for businesses and home users that have sensitive and confidential information stored on their computer. Unfortunately, BitLocker Drive Encryption by default requires a Trusted Platform Module (TPM Chip) version 1.2 or later installed in your computer. A lot of the computers and laptops on the market do not come with TPM chips installed since they are typically only found in premium model business computers. If you have Windows Vista Business, Ultimate or Enterprise but do not have a TPM chip, you can still use BitLocker Drive Encryption.
Hidden away in local group policy is a setting that will allow you to turn on the ability to use a USB storage device instead of a TPM key to store the encryption key. This is a great feature for users that don't have the latest high-end hardware because you can still use hard drive encryption. However, every time you turn on your computer, the USB storage device that has the encryption key located on it must be plugged in. Without it, your computer will not boot up. One BitLocker Drive Encryption is setup with a USB storage device, that USB storage device basically becomes the key to your computer.
Follow these steps to turn on the ability to use a USB storage device with BitLocker Drive Encryption on hardware that does not have a TPM device:
1. Click on the Start Button and key in gpedit.msc and hit Enter.
2. Navigate through: Computer Policy, Administrative Templates, Windows Components and BitLocker Drive Encryption.
3. Right click on Control Panel Setup: Enable advanced startup options and select Properties.
Check Enabled and hit OK.
Friday, April 27, 2007
Secure your network with Vista Nmap/WinPcap
If you want to be able to use your favorite unix/linux scanning application nmap on vista you now can! Once you download the tcp/ip autopatcher, you can run wild and scan your network, or scan the internet for insecure ports and anything you put your mind to, just got your site hosted somewhere? Check there security and scan them with nmap for your Windows Vista :)
Download nmap and winpcap package here
Things you will need to get started...
1. Windows Vista/XP/2k with WinPcap is the industry-standard tool for link-layer network access in Windows environments: it allows applications to capture and transmit network packets bypassing the protocol stack, and has additional useful features, including kernel-level packet filtering, a network statistics engine and support for remote packet capture.
2. Nmap which is a open source security/port scanner for windows vista, Hackers use it, so should we :)
3. A command prompt :)
If your new to nmap here is what it gives you as a result...
nmap -A -T4 scanme.nmap.org playground
Starting nmap ( http://insecure.org/nmap/ )
Interesting ports on scanme.nmap.org (205.217.153.62):
(The 1663 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 3.9p1 (protocol 1.99)
53/tcp open domain
70/tcp closed gopher
80/tcp open http Apache httpd 2.0.52 ((Fedora))
113/tcp closed auth
Device type: general purpose
Running: Linux 2.4.X|2.5.X|2.6.X
OS details: Linux 2.4.7 - 2.6.11, Linux 2.6.0 - 2.6.11
Uptime 33.908 days (since Thu Jul 21 03:38:03 2005)
Interesting ports on playground.nmap.org (192.168.0.40):
(The 1659 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE VERSION
135/tcp open msrpc Microsoft Windows RPC
139/tcp open netbios-ssn
389/tcp open ldap?
445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds
1002/tcp open windows-icfw?
1025/tcp open msrpc Microsoft Windows RPC
1720/tcp open H.323/Q.931 CompTek AquaGateKeeper
5800/tcp open vnc-http RealVNC 4.0 (Resolution 400x250; VNC TCP port: 5900)
5900/tcp open vnc VNC (protocol 3.8)
MAC Address: 00:A0:CC:63:85:4B (Lite-on Communications)
Device type: general purpose
Running: Microsoft Windows NT/2K/XP
OS details: Microsoft Windows XP Pro RC1+ through final release
Service Info: OSs: Windows, Windows XP
Nmap finished: 2 IP addresses (2 hosts up) scanned in 88.392 seconds
Wednesday, April 25, 2007
Keep UAC active, with no annoying popups
When UAC is enabled, software which is run "As Administrator" requires, by default, that a pop-up prompt be responded to, and the Administrator password required (or, if no password has been defined, just a click in the box).
Important thing: when you run Vista in normal user mode, shutting down UAC implies that applications which need administrator credentials are denied to run without an UAC warning, therefor you need to choose run as administrator and supply the credentials. If you run Vista in Normal User mode I would not recommend to use this setting for the simple fact that if an applications needs administrator credentials it will fail to start. Important thing: when you run Vista in normal user mode, shutting down UAC implies that applications which need administrator credentials are denied to run without an UAC warning, therefor you need to choose run as administrator and supply the credentials. If you run Vista in Normal User mode I would not recommend to use this setting for the simple fact that if an applications needs administrator credentials it will probably fail to start without you knowing it.
It is possible to get rid of this annoying User Account Control pop-up, as follows:
Start/Run and type secpol.msc
In the Security Policy editor select Security Settings/Local Policies/Security Options
Now scroll down to the two following Security Options
1) User Account Control: behaviour of the elevation prompt for admins
2) User Account Control: behaviour of the elevation prompt for standard users
For each of the above, select the desired option.
Selecting "Elevate without prompt" will get rid of the annoying pop-up boxes, and will also help software load faster.
Reboot Vista to make the policy work :)
Tuesday, April 24, 2007
Got virus? Got rootkit? Got hacked?
Let me explain something to the world, I know you may have tried many firewalls, many antivirus's and many security applications, but I have to give it up for The Russians, I do not trust our country anymore, ever since 911 we have lost more rights than gained, we lost a sense of security, pride, respect, and privacy.. I used to use Mcafee, and Symantec, ZoneAlarm Products Religiously. But I have some underground connections and heard many many stories of these three companies, I heard that their scanning engine's did not detect a few worms/trojans/keyloggers used from the FBI/NSA/FBI/Secret Service. Norton AntiVirus was criticized in the past because of Symantec's policy that allows spy software (keyloggers/backdoors) of US secret services, such as Magic Lantern (developed by the FBI) and Oasis (developed by the CIA), to bypass Norton's malware detection. The only Security Suite I firmly believe in is Kaspersky Labs Internet Security, Kaspersky Anti-Virus engine also powers products or solutions by other security vendors, such as Check Point, Bluecoat, Juniper Networks, Sybari (now acquired by Microsoft), Netintelligence, GFI Software, F-Secure, Borderware, Frontbridge, G-Data, Netasq and others. It has speed baby, and it has ease of use and great security, it does not slow down your computer like any other software does, its a must have download it and secure your Vista. This product has a the best antivirus technology and firewall compatible with vista :) enjoy
Wikipedia Info on Kaspersky Labs
Download & Compare Kaspersky to the Rest
