Wednesday, April 27, 2011

Insert Images into Your Gmail Messages

Well, it's around 3am . one of my frd asked how to insert image in gmail  

Solution: To put images into your messages or attach images  want to inline them. Just turn on "Inserting images" from the Labs tab under Settings



Make sure you're in rich formatting mode, or it won't show up. Click the little image icon, and you can insert images in two ways: by uploading image files from your computer or providing image URLs.

Gmail doesn't show URL-based images in messages by default to protect you from spammers, so if you're sending mail to other Gmail users, they'll still have to click "Display images below" or "Always display images from ..." to see images you embed.

Tuesday, February 15, 2011

Compile Linux kernel 2.6

Step # 1 Get Latest Linux kernel code

Visit http://kernel.org/ and download the latest source code. File name would be linux-x.y.z.tar.bz2, where x.y.z is actual version number.

root@asheesh#cd /tmp
root@asheesh#wget http://www.kernel.org/pub/linux/kernel/v2.6/linux-x.y.z.tar.bz2


Step # 2 Extract tar (.tar.bz2) file

root@asheesh# tar -xjvf linux-2.6.25.tar.bz2 -C /usr/src
root@asheesh# cd /usr/src


Step # 3 Configure kernel
root@asheesh# apt-get install gcc (if gcc is not installed)
root@asheesh#make menuconfig

Step # 4 Compile kernel

Start compiling to create a compressed kernel image
root@asheesh# make

Start compiling to kernel modules:
root@asheesh# make modules
root@asheesh#make modules_install

Step # 5 Install kernel

Compiled kernel and installed kernel modules.
root@asheesh#make install

Step # 6: Create an initrd image

Type the following command at a shell prompt:
root@asheesh# cd /boot
root@asheesh# mkinitrd -o initrd.img-2.6.37 2.6.37


Step # 7 Modify Grub configuration file

- /boot/grub/menu.lst (before Edit Please take backup)

Open file using vi or gedit:
root@asheesh# vi /boot/grub/menu.lst

title Debian GNU/Linux, kernel 2.6.25 Default
root (hd0,0)
kernel /boot/vmlinuz root=/dev/hdb1 ro
initrd /boot/initrd.img-2.6.25
savedefault
boot



Remember to setup correct root=/dev/hdXX device. Save and close the file. If you think editing and writing all lines by hand 
is too much for you, try out update-grub command to update the lines for each kernel in /boot/grub/menu.lst file. Just type 

the command:
root@asheesh#update-grub



Step # 8 : Reboot computer and boot into your new kernel

root@asheesh# reboot

Wednesday, December 15, 2010

Problem in Installation - Armitage

Problem while Connection Mysql Database

solution

1)msf > db_driver

2)msf > db_driver mysql

3)root@bt:/pentest/exploits/framework3# mysql -u root -p

4)mysql> CREATE USER msf3@localhost IDENTIFIED BY 'test';

5)mysql> CREATE DATABASE msf3;

6)mysql> GRANT ALL PRIVILEGES ON msf3.* TO msf3@localhost;


Another Problem while Installing if you are using sqlite3
then

root@bt:/pentest/exploits/armitage# ./armitage.sh

password is blank i.e

DB Connect String -

Armitage Setup

To install Armitage in BackTrack,

1)root@bt:~# apt-get update

2)root@bt:~# apt-get install armitage

3)root@bt:~# msfrpcd -f -U msf -P test -t Basic

4)root@bt:~# /etc/init.d/mysql start



5)root@bt:/pentest/exploits/armitage# ./armitage.sh


In BackTrack, the default MYSQL credentials are root / toor and for PostgreSQL,
if using sqlite3 credential is blank password

6)select the "Use SSL" checkbox, verify the rest of the settings and click "Connect".

Saturday, September 25, 2010

Microsoft DRM technology (msnetobj.dll) ActiveX Multiple Remote Vulnerabilities

Detail of POC can be viewed
http://www.exploit-db.com/exploits/15061/
http://www.securityfocus.com/bid/43345/info

Microsoft DRM technology (msnetobj.dll) ActiveX Multiple Remote Vulnerabilities
by

Asheesh Kumar Mani Tripathi


# Vulnerability Discovered By Asheesh kumar Mani Tripathi

# email informationhacker08@gmail.com

# company www.aksitservices.co.in

# Credit by Asheesh Anaconda

# Date 18th Sep 2010

# Description: Microsoft DRM technology (msnetobj.dll) ActiveX suffers from multiple remote vulnerabilities such as buffer overflow, integer overflow and denial of service (IE crash). This issue is triggered when an attacker convinces a victim user to visit a malicious website.

The "GetLicenseFromURLAsync" function does not handle input correctly.
Remote attackers may exploit this issue to execute arbitrary machine code in the context of the affected application, facilitating the remote compromise of affected computers. Faile exploit attempts likely result in browser crashes.

Detail of POC can be viewed
link:http://www.exploit-db.com/exploits/15061/
link:http://www.securityfocus.com/bid/43345/info

Wednesday, August 18, 2010

Problem :No Internet in Backtrack 4

Problem :No Internet in Backtrack 4 BT4

1)start the Network ..

In command line type
bt# /etc/init.d/networking start

or Menu -> Services -> NETWORK -> Start NETWORK

Then Configure Network Card

Static IP address

ifconfig eth0 192.168.1.2

For variable subnet mask
ifconfig eth0 192.168.1.2 netmask 255.255.255.224


Add a default gateway:

route add default gw 192.168.1.1 eth0

Replace the IP address with your default gateways


Assign DNS servers:

echo nameserver 200.1.1.1 > /etc/resolv.conf


For DHCP

dhcpcd eth0

Metasploit db_create error

msf > db_create
[-]
[-] Warning: The db_create command is deprecated, use db_connect instead.
[-] The database and schema will be created automatically by
[-] db_connect. If db_connect fails to create the database, create
[-] it manually with your DBMS's administration tools.

Solution
Just use


msf > db_driver sqlite3

or
msf > db_connect