Raymond.CC Blog

Microsoft is always lacking of one important security feature that is the ability to password protect your folders. Even in Windows XP, this feature hasn’t been implemented yet. Now, Microsoft is offering a free program called “Microsoft Private Folder” which it will create a folder called My Private Folder at your desktop. Microsoft Private Folder 1.0 is provided specifically for genuine Windows customers, and requires genuine Windows validation in order to download. The software is free, and does not come with product support.

The following hardware and software are required to run Microsoft Private Folder 1.0:

Check out the test I ran with Microsoft Private Folder.

That microsoft’s code is not always secure, is very clear again with this XSS exploit. This is not the first XSS exploit that has been found, others have been found.

Sixteen year-old Adriaan Graas from The Netherlands informed Microsoft last week about an XSS (cross site scripting) exploit he found in Hotmail. The exploit allows hackers to steal cookies from their victims and obtain full control over their inboxes without the need of knowing their passwords.

The idea is simple. When you are logged-in into Hotmail, a cookie is created which allows you access every time you are in it’s domain. Since the cookie is not IP-bind (how is this possible? – microsoft) we are able to fake the cookie, when stolen. Then use it to login. This all does mean that we do not have to know the password or even the email address of the victim. Trough XSS we can insert an piece of javascript code that will send the cookie to a webserver with an log script. This can be written in PHP, ASP, CGI practically anything you want. The cookie can be faked with Proxomitron.

Read more…

You can simply use any port scanner to scan your network on port 5900 for VNC Server because the default port for any VNC Server is 5900.
I’ve found a script based port scanner which claims to be a VNC Network Scanner. I believe you can also use to scan for other services since you can define both port and IP range to scan. This is something different to me because most of the port scanners out there are in executable(.exe) format.

This script has the extension of .wsf, which is Windows Scripting Host. The script makes use of function pointers hooked up to a programmatically generated Internet Explorer page to allow user input in a flexible environment while giving the advantages of the tighter security and lower overhead of WSH.

As you can see, the image below shows that this VNC Server scanner is being run on Internet Explorer and it’s not any compiled executable program.

SCAN4VNC may be run directly after the Winsocklib DLL is registered on your system. You can obtain the Winsocklib DLL file from the zip archive with the filename kvbWinsockLib.Dll. Running scan4vnc.wsf directly without registering the kvbWinsockLib.Dll will give you an error message “Error: 424 Microsoft VBScript runtime errorObject required”

You need regsvr32.exe to register the kvbWinsockLib.Dll. Follow the steps below to register kvbWinsockLib.Dll to your system.

For the past 2 weeks, I’ve been lucky to stumble twice on RapidShare giving out free premium accounts while I was accessing RapidShare to download some files. You can always browse to RapidShare freeaccount.cgi to check but it’s very troublesome since you need to refresh each time to check.
The full link to for RapidShare Free Premium Accounts is http://rapidshare.de/cgi-bin/freeaccount.cgi.
If RapidShare is not offering any Free Premium Accounts, you will get a popup saying “All free-accounts are already taken“.

However, if you’re lucky to visit the freeaccount.cgi when RapidShare is offering Free Premium Accounts, then you will get a page where it ask you to enter your email address and 3 random CAPTCHA code to verify that its human registering and not some automated programs.

The RapidShare Free Premium account will be valid for 2 days and will not be deleted after those 2 days. You can extend your account month by month for free by uploading files and collecting premium-points. You get points as soon as someone downloads your files. RapidShare will delete expired accounts after 45 days. This means, you have whole 47 days to collect 10000 points. As you can see, RapidShare free premium accounts only last 2 days if you keep on downloading without uploading.

You can easily use the free programs below to automate checking of RapidShare free premium accounts.

Remote Desktop is a nice feature of Windows 2003, XP, and 2000 server that lets you remotely login to, and work on the system as if you were there. By default, Remote Desktop is turned off. Many times you find that you need it enabled but the machine you are trying to access is far across your network where it is tough to reach. Turning it on all the time poses a security threat because if someone could just use brute force to try to crack the password and gain access to the computer that has Remote Desktop turned on all the time. How you wish you can turn it on when you need it and turn it off when you’re finished using remote desktop.

To enable Windows built-in Remote Desktop, right click on My Computer, select Properties and click on the Remote tab.
Check on the box where it says “Allow users to connect remotely to this computer” and your computer will start listening for remote access connections on the default port 3389.

There is nothing within windows that will allow you to enable this feature remotely. However, thank goodness IntelliAdmin has created a freeware enables you to turn Remote Desktop on or off remotely.

VNC Neighborhood is a free VNC server TCP scanner. It uses Microsoft Windows Networking features to locate computers in Microsoft Windows domains and workgroups.

VNC Neighborhood features:
• RealVNC 4.xx Viewer Free Edition basic support
• Scan your network for VNC computers
• Install* VNC to remote NT/2K/XP/2K3 computers
• Manage computer system settings using the MMC interface*
• Start and stop remote VNC services*
• Connect to VNC servers with external viewer or web browser
• Reboot remote computers*
• Lock remote computers*
• Ping remote computers
• Get VNC server information on remote computers
• Find who is logged into remote computers*
• Connect to Windows file shares on remote computers*
• It’s FREE

Get your own free Premium-Account and become a part of the daily growing RapidShare-Community! The access-data will be sent to your given e-mail address. There are 45458 free premium-accounts left and it’s going fast! So hurry up!

This account will be valid for 2 days and will not be deleted after those 2 days. You can extend your account month by month for free by uploading files and collecting premium-points. You get points as soon as someone downloads your files. We will delete expired accounts after 45 days. This means, you have whole 47 days to collect 10000 points. You can upload new files all the time to collect even more points.