Top 10 Important command prompt's commands

1. ipconfig :
                  This is the top most command for seeing the ip address,subnet mask and default gateway also includes display and flush DNS cache, re-register the system name in DNS..  This will most useful tool for viewing and troubleshooting TCP/IP problem.

• To view ip ,subnet mask address : ipconfig
• To view all TCP/IP information, use: ipconfig /all
• To view the local DNS cache, use: ipconfig /displaydns
• To delete the contents in the local DNS cache, use: ipconfig /flushdns 

2.systeminfo

Have a need to display operating system configuration information for a local or remote machine, including service pack levels? Then systeminfo is the tool to use. When I need to connect to a system that I am not familiar with, this is the first tool I run. The output of this command gives me all the info I need including: host name, OS type, version, product ID, install date, boot time and hardware info (processor and memory). Also knowing what hot fixes are installed can be a big help when troubleshooting problems. This tool can be used to connect to a machine remotely using the following syntax: SYSTEMINFO /S system /U user

3. tasklist and taskkill 

If you work with Task Manager (ctrl+alt+del) ,you can easily understand this.  Task list is list of task which are running on windows currently.  If you open any application,it will be added to task.

To List the Tasks type in cmd as :

          tasklist

 This will show the list of task which are running as shown in the picture

To stop the Process or task ,there is two methods :
Using Image Name:
   We can kill the task using its Image Name as follows:

                       tasklist /im notepad.exe

Using Process Id:
  we can stop the process using its process id as follows :

                tasklist /pid 1852

4. type
 type is used to read the text document in command prompt .  You can read multiple text in continuously

type filename.txt

5.netstat
Need to know who (or what) is making a connection to your computer? Then netstat is the tool you want to run. The output provides valuable information of all connections and listening ports, including the executable used in the connections. In additon to the above info, you can view Ethernet statistics, and resolve connecting host IP Addresses to a fully qualified domain name. I usually run the netstat command using the -a (displays all connection info), -n (sorts in numerical form) and -b (displays executable name) switches.

6.net command
Although this tool is more known as a command, the net command is really like a power drill with different bits and is used to update, fix, or view the network or network settings.
It is mostly used for viewing (only services that are started), stopping and starting services:

• net stop server
• net start server
• net start (display running services)

and for connecting (mapping) and disconnecting with shared network drives:

• net use m: \\myserver\sharename
• net use m: \\myserver\sharename /delete

Other commands used with net command are, accounts (manage user accounts), net print (manage print jobs), and net share (manage shares).
Below are all the options that can be used with the net command.

[ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP |HELPMSG | LOCALGROUP | PAUSE | PRINT | SESSION | SHARE | START |STATISTICS | STOP | TIME | USE | USER | VIEW ]

7 - nslookup - With the Internet, DNS (Domain Name Service) is the key for allowing us to use friendly names when surfing the web instead of needing to remember IP Addresses. But when there are problems, nslookup can be a valuable tool for testing and troubleshooting DNS servers.
Nslookup can be run in two modes: interactive and noninteractive. Noninteractive mode is useful when only a single piece of data needs to be returned. For example, to resolve google.com:

To use the interactive mode, just type nslookup at the prompt. To see all available options, type help while in interactive mode.

Don't let the help results intimidate you. Nslookup is easy to use. Some of the options I use when troubleshooting are:
set ds (displays detailed debugging information of behind the scenes communication when resolving an host or IP Address).
set domain (sets the default domain to use when resolving, so you don't need to type the fully qualified name each time).
set type (sets the query record type that will be returned, such as A, MX, NS)
server NAME (allows you to point nslookup to use other DNS servers than what is configured on your computer)
To exit out of interactive mode, type exit .

8 - ping and tracert - These tools can be helpful with connectivity to other systems. Ping will test whether a particular host is reachable across an IP network, while tracert (traceroute) is used to determine the route taken by packets across an IP network.
To ping a system just type at the prompt: ping www.google.com. By default, ping will send three ICMP request to the host and listen for ICMP “echo response” replies. Ping also includes switches to control the number of echo requests to send (-n ), and to resolve IP addresses to hostname (-a ).
To use tracert, type at the prompt: tracert www.google.com. You can force tracert to not resolve address to hostnames by using the -d switch, or set the desired timeout (milliseconds) for each reply using -w switch.

9 - gpresult - Used mostly in environments that implement group poicies, gpresults (Group Policy Results) verifies all policy settings in effect for a specific user or computer. The command is simple to use, just enter gpresults at the prompt. It can also be used to connect to computers remotely using the /S and /U switches.

10 - netsh - Without a doubt the most powerful command line tool available in Windows. Netsh is like the swiss army knife for configuring and monitoring Windows computers from the command prompt. It capabilities include:

• Configure interfaces
• Configure routing protocols
• Configure filters
• Configure routes
• Configure remote access behavior for Windows-based remote access routers that are running the Routing and Remote Access Server (RRAS) Service
• Display the configuration of a currently running router on any computer

Some examples of what you can do with netsh:

• Enable or disable Windows firewall:

netsh firewall set opmode disable
netsh firewall set opmode disable

• Enable or disable ICMP Echo Request (for pinging) in Windows firewall:

netsh firewall set icmpsetting 8 enable
netsh firewall set icmpsetting 8 disable

• Configure your NIC to automatically obtain an IP address from a DHCP server:

netsh interface ip set address "Local Area Connection" dhcp

(For the above command, if your NIC is named something else, use netsh interface ip show config and replace the name at Local Area Connection).
As you can see netsh can do alot. Instead of re-inventing the wheel, check out the following Microsoft article for more info on netsh.

Steganography - Hiding data into any Image

Is the art and science of hiding messages, Images, Data .etc in such a way that no one, apart from the sender and intended recipient, suspects the existence of the Data, a form of security through obscurity. By using this trick your data will get hidden into any image of your choice without reducing its quality, In following tutorial i will show you how you can hide data behind images without using any software:

STEPS :-



1. Create a folder in your C drive and name it as “hide”

2. Copy all the images you want to hide and also the image behind which you want hide into this directory.

3. Now select the images you want to hide and add them to archive i.e keep them in winrar.
Now you will see one more file named “hide.rar” in your directory.

4. Now open command prompt and change your root to your current directory as shown in the image and type the following command:

Copy /b aish.jpg + hide.rar output.jpg

Here “aish.jpg “ is the image behind which you want to hide.
“hide.rar” is the file of images to be hidden.
“output.jpg “ is the output file that we want.

After executing the following command, we will see an extra image called “output.jpg”

Now you can delete all the files except “output.jpg”. If you double click the file, it opens a normal image. But you can see the hidden files by opening the file with winrar.

This tutorial can be used for any type of files like mp3,wmv,txt etc
can we hide keylogger(remote installation file, .exe file) behind the image in this way... so it can be automatically executed when run by the victim??? - No, because it should be opened as an executable to open the file.
i.e we cant open it unless we have an executable code in it.

Permanent Denial Of Service (PDOS) - Phlashing used for hardware attack

A permanent Denial Of Service (PDOS), also known as "Phlashing". It's an attack that damages a system so badly that it requires replacement or reinstallation of hardware. Phlashing used for hardware attack. Unlike the distributed denial-of-service attack, a PDoS attack exploits security flaws which allow remote administration on the management interfaces of the victim's hardware, such as routers, printers, or other networking hardware. The attacker uses these vulnerabilities to replace a device's firmware with a modified, corrupt, or defective firmware image a process which when done legitimately is known as flashing. This therefore "bricks" the device, rendering it unusable for its original purpose until it can be repaired or replaced.

The PDOS is a pure hardware targeted attack which can be much faster and requires fewer resources than using a botnet in a DDoS attack. Because of these features, and the potential and high probability of security exploits on Network Enabled Embedded Devices (NEEDs), this technique has come to the attention of numerous hacker communities. PhlashDance is a tool created by Rich Smith (an employee of Hewlett-Packard's Systems Security Lab) used to detect and demonstrate PDoS vulnerabilities at the 2008 EUSecWest Applied Security Conference in London. Smith said remotely abusing firmware update mechanisms with a Phlashing attack, for instance, is basically a one-shot attack. “Phlashing attacks can achieve the goal of disrupting service without ongoing expense to the attacker; once the firmware has been corrupted, no further action is required for the DOS condition to continue,”

An attacker could use remote firmware update paths in network hardware, which are often left unprotected, to deliver corrupted firmware and flash this to the device. As a result, the device would become unusable.

Setting Up Your Mozilla Firefox Browser for Maximum Security Using Plugins

All Firefox browsers and it's variants use the Google Safe Browsing Blacklist to block yourself from all common vulnerabilities and infected pages. While most Firefox variants are good in terms of security, Comodo IceDragon is a great browser which uses Comodo DNS which gives you a pretty decent security. Now we will see some addons that we can install on Firefox which are really helpful, free and intuitive. It is completely safe for you to use these addons and will not cause any problems whatsoever.

----PLUGINS FOR PERSONAL SECURITY----

◘ Web Of Trust (WOT) : shows you which websites you can trust based on millions' of users experiences. With this addon installed along with some common sense, yo should be able to avoid all websites that you should not visit. This does not ever interfere your browsing experience and if you ever feel like visiting a website even if WOT does not trust it, you can do it with a simple click. Please keep in mind that this plugin might not be completely accurate since this is largely driven by user reviews and personal vendetta, religious beliefs etc can vary the trusted lists quite a bit. But overall, it's a very trusted plugin that helps you notice a good website from the bad.

◘ BitDefender Trafficlight - Bitdefender TrafficLight is the best way to a completely secure Web browsing experience. It is a free cross-browser add-on that intercepts, processes, and filters all Web traffic, blocking any malicious content and taking browser security to new levels. It blocks all kinds of malicious websites, phishing websites, and othe fraudulent websites. This service sends user results to Bitdefender database which can be disabled by disabling it in the options.

◘ Adblock Plus - Adblock Plus is one of the most widely used Firefox plugin which supposedly blocks all kinds of popups, advertisements, automated downloads, YouTube ads, banners and almost every single ad you will ever see. After you install this plugin, there is barely any chance youwill ever encounter another ad ever. I highly recommend this addon to prevent all kinds of ads on your browser.

◘ NoScript - Noscript blocks nearly every single script that might automatically execute on your PC. It filters out all scripts, popups, dangerous contents and other privacy threats. But keep in mind there are several websites that uses good scripts for their proper functioning and these might be blocked too. So if you visit such a website occasionally, you might want to add that site to the whitelist in-order for it to properly work. It takes time for you to get used to it but if you are really serious about online security, you should not forget to get this add-on.

Firefox browser and all it's variants gives you a feature for private browsing which means no cookies, no history and no cache will be ever stored during the private browsing section. This is a great way for you to make sure no traits are left behind while you use the computer.Visit

https://support.mozilla.org/en-US/kb/private-browsing-browse-web-without-saving-info

to know more about Private Browsing and how you can enable it on your browser ( Shortcut on Keyboard : Ctrl+shift+P) .

Now we will see more steps which you can use to increase your privacy on Firefox browser.
-Click Firefox > Options > Privacy Tab.
-Select 'Tell websites I do not want to be tracked'.
-Click History tab.
-Select 'Use custom settings for history'.
-Uncheck 'Accept third-party cookies'.

----PLUGINS FOR PERSONAL PRIVACY----

◘ HTTPS Everywhere - This plugin automatically forces websites which have the option to encrypt your connection to actually encrypt it unlike the default case where the connection is not encrypted. So you are much more secure when browsing those sites.

◘ LastPass - LastPass is a secure and widely used password manager for firefox. It helps you with password form filling and helps you create strong passwords, change them often etc. A great plugin if you're concerned about your passwords getting hijacked.
Better Privacy - This a cool and nifty addon that removes any LSO's ( Local Shared Objects) from your computer.

◘ Self Destructing Cookies - This plugin automatically deletes all cookies related to a website as soon as the website is closed. It dramatically helps you increase your privacy against cookie stealers and similar hacks.

◘ Do Not Track Me - This will stop almost all third-party addons, scripts and search engines from tracking your web pages and cookies. This is a great addon you can add to your arsenal to increase your privacy by leaps and bounds.

◘ Request Policy - Request Policy is a useful plugin that all cross-site requests by default. So you will be secure from all cross-site request forgery attacks which might help others obtain your cookies. Please keep in mind to keep the settings default while using this addon for maximum efficiency.

◘Cookie Monster - This plugin is another extension to your privacy by disabling all cookies by default. It allows you to readily manage cookies, whether to delete them or keep them. This might not be recommended to beginner users who are casual internet users and do not want to mess with the cookies.

Top 10 Free VPN ( Virtual Private Network ) Services

First of all, lets talk about what is VPN. Virtual Private Network. Basically it’s a private network which lets users to connect to other users or remote sites using a public network, usually internet. It uses “virtual” connections routed through the Internet from the company’s private network to the remote site or employee instead of physical connections. In short, it is private network constructed within a public network infrastructure, such as the global Internet.

Why You Need VPN:
- To protect privacy, either on a LAN or a public hotspot.
- To stay Anonymous during Internet Surfing
- Full anonymity by hiding your real IP address.
- Bypass geographical blocks from certain websites
- Unlike a proxy, you get secured connection for all programs you are using
- Quality Network ensures your VPN service will be fast wherever you are in the world
- Protection against your ISP
- Bypass ISP Blocking for VOIP Applications like Skype

Let's have a look at the top 10:

1. UltraVPN

It is a free VPN client/server SSL VPN solution based on OpenVPN. It encrypts and anonymizes your network connection making your connection safe and secure.

You need to download and install the client and create a (username, password) to use this service:
https://www.ultravpn.fr/

2. Logmein Hamachi

It’s a great free VPN service from the well known guys who are behind the Logmein Service of remote apps management. It’s free for non-commercial and personal use.

Features :
No hardware required – A quick, simple and easy-to-use VPN that just works
Secure communications – Encrypted tunneling across public and private networks
Flexible networking – Combines the ease of an SSL VPN with the connectivity of an IP-sec VPN
Web-based management – Deploy to anyone, manage from anywhere, access anytime
Free for non-commercial usage – Absolutely free for non-commercial use
https://secure.logmein.com/products/hamachi/download.aspx

3. Packetix

Its a japanese free VPN solution with technology developed by SoftEther Corporation.You can use PacketiX.NET online test service for free.Here’s what you can do with this service.

You can create your private Virtual VPN Hub. You can configure and use the hub for free.You can use all functions the PacketiX VPN software has to offer, such as creating a remote connection to your home network or uniting local networks at different sites. With our system, you won’t need to set up a VPN server with a global IP address yourself. The VPN server administration is done over an easy web interface:
http://www.packetix.net/en/

4. Open VPN

Open VPN drives UltraVPN, OpenVPN is a SSL/TLS based VPN, it provides high security and privacy. The biggest difference between PPTP VPN and OpenVPN is you need install OpenVPN client software to use OpenVPN service, and OpenVPN DO NOT work on mobile devices such as Iphone, Ipad Windows Mobile and Android. But OpenVPN works on Windows, Mac and Linux:

5. Your Freedom

This one is basically not a VPN service but its performs almost the same function with great ease, hence i included this in this list.

It provides both a free and paid service. Free service limits to six hours of usage per day (up to 18 hours per week). You need to install a client on your system and a user name & password to use this:
http://www.your-freedom.net/index.php?id=downloads

6. Macro VPN

Just like other services MacroVPN offer free VPN service for the user's, it provides 128bit PPTP encrypted VPN Connection Service, protection on wifi hotspot. Normally assigned US based IP's:
http://www.macrovpn.com/

7. Hotspot Shield

Hotspot Shield is a free VPN service which protects your entire web surfing session; securing your connection at both your home Internet network & Public Internet networks (both wired and wireless)

Hotspot Shield protects your identity by ensuring that all web transactions (shopping, filling out forms, downloads) are secured through HTTPS.Here also, you need to download and install a client to use it on your computer:
http://www.hotspotshield.com/trial/

8. Its Hidden

Itshidden is part of Port 80 Limited(Seychelles) company providing both free VPN and paid services of VPN

It creates a secure connection encrypting all the data protecting your privacy and securing you. You dont need to install any software. ItsHidden.com works on all Platforms including Windows, Mac, Linux, IPhone etc:
http://www.itshidden.eu/

9. CyberGhost

This a free VPN service from Germany which helps you route you through a German IP. The free service is limited to 10GB traffic every month, which is more than enough for surfing on websites, chatting and email:
http://cyberghostvpn.com/

10. Gpass

This is another free VPN service product of the World’s Gate, Inc which offers Internet solutions for information freedom in China and other regions.

You need to install a software client to use this:
http://gpass1.com/gpass/

If you found it useful and If you think this could help your friends - share it

Simple Steps To Disable or Lock USB port

Lock USB Port

1. Goto run

2. Type 'regedit' without quotes

3. Click on HKEY_LOCAL_MACHINE

4. goto SYSTEM

5. Click on CurrentControlSet

6. Click on services

7. Goto USBSTOR

8. Double click on 'Start' where value is 3

9. Now change the value data with 4

10. Now press ok and refresh your desktop your USB port is disabled, to enable the usb port replace the value 4 with 3.