Monday, September 23, 2013

List of digital forensics tools

During the 1980s, most of digital forensic investigations consisted of "live analysis", examining digital media directly using non-specialist tools. In the 1990s several freeware and other proprietary tools (both hardware and software) were created to allow investigations to take place without modifying media. This first set of tools mainly focused on computer forensics, although in recent years similar tools have evolved for the field of mobile device forensics.

More tools on:
-----------------
http://en.wikipedia.org/wiki/List_of_digital_forensics_tools


Monday, August 12, 2013

NTLDR is Missing

If your computer suddenly stop working with a message shown in following image and you can’t start Windows, then maybe the file ntldr or ntdetect.com is corrupted or deleted.These files are always located in C:\ . Note that they are hidden system files so if you want to see them, just read this.

Now just follow the steps below.
1. Insert the Windows XP bootable CD into the computer.
2. When prompted to press any key to boot from the CD, press any key.

3. Now that you are in the Windows XP setup menu press the “R” key to repair Windows.

4. Log into your Windows installation by pressing the “1″ key and then Enter.

5. You will then be prompted for your administrator password, enter that password or if you dont have an active password just press Enter.

6. Copy the files ntldr and ntdetect.com to the C:\ ( root directory of the primary hard disk ) . In this example we are copying these files from the CD-ROM drive, which in this case has drive letter “F”. Note that this letter may be different on your computer. For example : if your hard drive has 3 partitions (e.g. C , D , E ) then most likely your CD drive will be F. Just keep in mind that the drives are arranged in alphabetical order.

7. Perform the following commands: copy F:\i386\ntldr C:\
copy F:\i386\ntdetect.com C:\

8. Once both of these files have been successfully copied, remove the CD from the computer and reboot.


 

Rainmeter a desktop customization platform.



Rainmeter 2.3 build 1304 | 5.23 MB

Rainmeter is a desktop customization platform. Through Rainmeter, you can enhance your Windows computer at home or work with skins: handy, compact applets which float freely on your desktop, much like Windows Sidebar gadgets, or dashboard widgets for the Mac. Rainmeter skins provide you with useful information at a glance. It's easy to keep an eye on your system resources, like memory and battery power, or your online data streams, including email, RSS feeds, and weather forecasts. Many skins are even functional: they can record your notes and to-do lists, launch your favorite applications, and send your tweets to Twitter - all in a clean, unobtrusive interface that you can rearrange and customize to your liking.
-
With Rainmeter, there are no secrets. Our bundled library of open-source skins covers a wide range of functions, but if you want your desktop to do something new, you don't have to wait for us.

Every inch of a skin is completely customizable. Rainmeter skins are written in a simple, elegant language that's easy to learn for anyone who's willing to put in the effort. Skins call upon measures, a set of powerful built-in modules that do all the heavy lifting, and create interactive meters to display that information however you decide. In this way, Rainmeter brings productive innovation together with creative artistry like no other platform of its kind.

Rainmeter can measure:

CPU load
Allocated Memory
Network Traffic
Performance data
Uptime
Free disk space


Download:
http://extabit.com/file/2dva8erbdgujd/Rainmeter.2.3.build.1304.rar
or
http://letitbit.net/download/53102.5afd699d3d14a3289c74691bbee2/Rainmeter.2.3.build.1304.rar.html

HOW TO COPY PENDRIVE OR DVD AUTOMATICALLY

1. open cmd
3. type copy con filename.bat

3. now type "xcopy i: f:\copied /h /s /c /q /i" remove " "
4. type Exit
4. press f6
5. now it will create a batch file named filename.bat

here
xcopy is a command which is used to copy file and folder
i: is the name of your pen-drive drive name replace with your drive name
f:\copied is the name of folder where you wish to copied data is to be placed replace
with your own folder or path
/h is used to copy hidden files also

now copy this file into desktop now whenever someone insert his/her pen drive into your system then click on this file his data is automatically copied into the folder specified by you.

Lock Folder Using Command Prompt & Make Your Own access control

Syntax:
cacls FileName [/t] [/e] [/c] [/g User:permission] [/r User [...]] [/p User:permission [...]] [/d User [...]]

Parameters :
FileName : Required. Displays DACLs of specified files.
/t : Changes DACLs of"0Changes DACLs%2irectory and all subdirectories.
/e : Edits a DACL instead of replacing it.
/c : Continues to change DACLs, ignoring errors.
/g User:permission : Grants access rights to the specified user. The following table lists valid values for permission.

Value Description :
n None
r Read
w Write
c Change (Write)
f Full Control

/r User : Revokes access rights for the specified user.

/p User:permission : Replaces access rights for the specified user. The following table lists valid values for permission.

Value Description
n None
r Read
w Write
c Change (Write)
f Full Control

/d User : Denies access for the specified user.

Chat using IP address

You can try this in your school or college systems(it should be networked systems).
Step 1:
Get the ip address of your friend's system.
if you are using college or school system,then ip address will be in particular range.

Step 2:
copy the following Batch code in notepad:

@echo off
:A
Cls
echo TypeIPAddress
set /p n=IPAddress:
set /p m=Message:
net send %n% %m%
Pause
Goto A

Save the file with .bat extension(For Eg: message.bat)

Step 3:
Open command prompt and navigate to that batch file location.
open the file in notepad.

If you don't know how to move to that path,simply drog and drop in cmd.Then hit enter.

Step 4:
Now it will ask you for the IPAddress.
Enter the IP address which you want to send message.
Hit enter
Now it will ask you for the message.
Enter and hit enter

Note:
The user with whom you connecting system's cmd should be opened in order to receive.

ફોલ્ડર બનાવી જુઓ..

કોમ્પુટરમાં નીચે બતાવેલા ફોલ્ડર બનાવી જુઓ..

1. CON
2. PRN
3. AUX
4. NUL
5. COM1
6. COM2
7. COM3
8. COM4
9. COM5
10. COM6
11. COM7
12. COM8
13. COM9
14. LPT1
15. LPT2
16. LPT3
17. LPT4
18. LPT5
19. LPT6
20. LPT7
21. LPT8
22. LPT9
ટ્રાય કરી? ના બન્યા? તો આ રહ્યો જવાબ:

કમાન્ડ પ્રોમ્પ્ટ પર નીચે બતાવેલ કમાન્ડ ટાઇપ કરો અને જુઓ કમાલ
mkdir \\.\c:\con
આ કમાન્ડ થી c ડ્રાઈવ માં con નામનું ફોલ્ડર બની ગયું હશે. આમજ બીજા ફોલ્ડર પણ બનાવી શકાય.
Photo: કોમ્પુટરમાં નીચે બતાવેલા ફોલ્ડર બનાવી જુઓ..

1. CON
2. PRN
3. AUX
4. NUL
5. COM1
6. COM2
7. COM3
8. COM4
9. COM5
10. COM6
11. COM7
12. COM8
13. COM9
14. LPT1
15. LPT2
16. LPT3
17. LPT4
18. LPT5
19. LPT6
20. LPT7
21. LPT8
22. LPT9
ટ્રાય કરી? ના બન્યા? તો આ રહ્યો જવાબ:
 
કમાન્ડ પ્રોમ્પ્ટ પર નીચે બતાવેલ કમાન્ડ ટાઇપ કરો અને જુઓ કમાલ
mkdir \\.\c:\con
આ કમાન્ડ થી c ડ્રાઈવ માં con નામનું ફોલ્ડર બની ગયું હશે. આમજ બીજા ફોલ્ડર પણ બનાવી શકાય.

Block USB port Using 3 Different Ways:


Many times you might observe that your pen drive is not detecting in cyber cafe or in your college lab or etc places.Have you ever think how it happens??!!!!after reading this post you may got surprised because its very simple trick.
So here is the to block USB ports of your PC.
I have described three Different methods.
You can choose whatever you want.

1:DISABLING THROUGH REGISTRY EDITOR

Three simple steps for this trick.
Step 1)
Open Run window and type regedit and press enter.
Step 2)
nevigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlset\Services\UsbStor
Step 3)
Double click on Start (right side)
change value to 4 and select hexadecimal(if not selected).
Done!!
to enable it:change value to 3.

2:DISABLING THROUGH DEVICE MANAGER

Steps are:
Step 1)
Open Run window
Step 2)
type “devmgmt.msc”
Step 3)
Go To Universal serial bus controller
Step 4)
Select and right click on it and you can find disable option

3:DISABLE THROUGH BIOS

Steps are:
Step 1)
At system startup press DEL or F2 key to open BIOS settings
Step 2)
In BIOS find advance settings or Onboard devices menu(change with BIOS manufacturer).
Step 3)
Find USB configurations and Disable USB controllers to disable all USB ports.
Change it to Enable if you want to enable.

Photo: Block USB port Using 3 Different Ways:

Many times you might observe that your pen drive is not detecting in cyber cafe or in your college lab or etc places.Have you ever think how it happens??!!!!after reading this post you may got surprised because its very simple trick.
So here is the to block USB ports of your PC.
I have described three Different methods.
You can choose whatever you want.

1:DISABLING THROUGH REGISTRY EDITOR

Three simple steps for this trick.
Step 1)
Open Run window and type regedit  and press enter.
Step 2)
nevigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlset\Services\UsbStor
Step 3)
Double click on Start (right side)
change value to 4 and select hexadecimal(if not selected).
Done!!
to enable it:change value to 3.

2:DISABLING THROUGH DEVICE MANAGER

Steps are:
Step 1)
Open Run window
Step 2)
type “devmgmt.msc” 
Step 3)
Go To Universal serial bus controller 
Step 4)
Select and right click on it and you can find disable option

3:DISABLE THROUGH BIOS
 
Steps are:
Step 1)
At system startup press DEL or F2 key to open BIOS settings
Step 2)
In BIOS find advance settings or Onboard devices menu(change with BIOS manufacturer).
Step 3)
Find USB configurations and Disable USB controllers to disable all USB ports.
Change it to Enable if you want to enable.

Monday, August 5, 2013

Facebook: Check your FB setting for the People, Pages, Places Directory


The Facebook People, Pages, Places directory feature (LINK) https://www.facebook.com/directory/people/ has been out now a couple of weeks, however I still find people that don’t know about it. If you were concerned about (hoping for) privacy, well this feature just pretty much ends any and all hope. With the PPP directory Facebook has every user, page, place easily accessible to everyone.

All you need to know is a name (or you can just throw in a fake name if you want to meet strangers). The screen shot below is the current 1st page of the directory..!!

Every user on Facebook is in this directory, and unfortunately (AGAIN!) Facebook does NOT give a way to completely opt out of being listed. However, there is something you can do to limit your visibility in the Facebook PPP directory.

There is now a setting (which seems to be set to Everyone by default) by going to your privacy settings (Top right of page) –> How You Connect (Bottom of page)

Once you are in the “How You Connect” window, you will see as the very 1st choice “Who can look up your timeline by name or contact info?”

Any Facebook user who is still trying to hold out for just that little bit of privacy while still being able to use Facebook will want to change the setting to Friends only, or Friends of Friends if you are ok with privacy middle ground.

Making this change should limit your exposure from the PPP directory. As always its suggested that you look over all the settings under privacy (even make notes if you have a hard time remembering) on a regular basis, you never know when a setting could be changed or added “for your benefit” that you would rather not have.

Photo: Facebook: Check your FB setting for the People, Pages, Places Directory
=========================================

The Facebook People, Pages, Places directory feature (LINK) https://www.facebook.com/directory/people/ has been out now a couple of weeks, however I still find people that don’t know about it. If you were concerned about (hoping for) privacy, well this feature just pretty much ends any and all hope.  With the PPP directory Facebook has every user, page, place easily accessible to everyone.

     All you need to know is a name (or you can just throw in a fake name if you want to meet strangers).  The screen shot below is the current 1st page of the directory..!!

 Every user on Facebook is in this directory, and unfortunately (AGAIN!) Facebook does NOT give a way to completely opt out of being listed.  However, there is something you can do to limit your visibility in the Facebook PPP directory.

     There is now a setting (which seems to be set to Everyone by default) by going to your privacy settings (Top right of page) –> How You Connect (Bottom of page)

     Once you are in the “How You Connect” window, you will see as the very 1st choice “Who can look up your timeline by name or contact info?”

     Any Facebook user who is still trying to hold out for just that little bit of privacy while still being able to use Facebook will want to change the setting to Friends only, or Friends of Friends if you are ok with privacy middle ground.

     Making this change should limit your exposure from the PPP directory. As always its suggested that you look over all the settings under privacy (even make notes if you have a hard time remembering) on a regular basis, you never know when a setting could be changed or added “for your benefit” that you would rather not have.

Guide to IMEI Numbers and Preserving Them on Android


Your IMEI (International Mobile Equipment Identity) is transmitted to the Network provider the moment you switch ON your phone

It is used by your Network to identify the following

1) The first two numbers is RBI (Reporting Body Identifier) = who registered that type of phone
( verify here: http://en.wikipedia.org/wiki/Reporting_Body_Identifier )

2) The next four numbers is TAC (Type Allocation Code) = what type of unit and its complete specifications

3)The next two numbers is FAC (Final Assembly Code) = who manufacture it

example :-

01 AEG
04 Samsung
07 Motorola
10 Nokia
30 Ericsson
41 Siemens
50 Bosch
51 Sony

4) The next six numbers is the Serial Number of the Phone

5) The last number is sort of a check sum, that verifies the previous numbers

Combined a total of 15 numbers is used by your network to get the complete information about your phone that is used against their database of Blacklisted phones and final approval to connect to their network, IF they were inaccurate or had complaints (like being stolen, not paid telecoms dues etc) it will be rejected and BLOCKED immediately from connecting to that Network

You can verify all this by entering you IMEI here

http://imei-number.com/imei-number-lookup/
&
http://www.numberingplans.com/?page=analysis&sub=imeinr

And also here to check if it is blacklisted

http://www.imeidetective.com/englishaparativbazi.php

Your IMEI is also needed for networks to BLOCK your phone when needed as well as ANTI theft apps.

Hence if your IMEI changes or gets lost, it may fail to connect to the network, depending on the restrictions of that network provider.

It is clear that Flashing custom ROMS can cause your IMEI to Change or get deleted as they may be ported from another manufacturer or from another version of the same manufacturer as the IMEI embedded in the chip of your phone.

IF you want to AVOID this problem, safe you EFS folder the moment you think of Flashing any ROM that is NOT the original Firmware for that phone

It is noted that to resolve this problem you have to return to its original firmware to recover your embedded IMEI and do a progressive upgrade . eg. from GingerBread to ICS before going on to Jelly Bean.

Photo: Guide to IMEI Numbers and Preserving Them on Android
======================================

Your IMEI (International Mobile Equipment Identity) is transmitted to the Network provider the moment you switch ON your phone

It is used by your Network to identify the following

1) The first two numbers is RBI (Reporting Body Identifier) = who registered that type of phone 
( verify here: 
http://en.wikipedia.org/wiki/Reporting_Body_Identifier )

2) The next four numbers is TAC (Type Allocation Code) = what type of unit and its complete specifications

3)The next two numbers is FAC (Final Assembly Code) = who manufacture it

example :-

01 AEG
04 Samsung
07 Motorola
10 Nokia
30 Ericsson
41 Siemens
50 Bosch
51 Sony

4) The next six numbers is the Serial Number of the Phone

5) The last number is sort of a check sum, that verifies the previous numbers 

Combined a total of 15 numbers is used by your network to get the complete information about your phone that is used against their database of Blacklisted phones and final approval to connect to their network, IF they were inaccurate or had complaints (like being stolen, not paid telecoms dues etc) it will be rejected and BLOCKED immediately from connecting to that Network

You can verify all this by entering you IMEI here

http://imei-number.com/imei-number-lookup/
&
http://www.numberingplans.com/?page=analysis&sub=imeinr

And also here to check if it is blacklisted 

http://www.imeidetective.com/englishaparativbazi.php

Your IMEI is also needed for networks to BLOCK your phone when needed as well as ANTI theft apps.

Hence if your IMEI changes or gets lost, it may fail to connect to the network, depending on the restrictions of that network provider.

It is clear that Flashing custom ROMS can cause your IMEI to Change or get deleted as they may be ported from another manufacturer or from another version of the same manufacturer as the IMEI embedded in the chip of your phone.

IF you want to AVOID this problem, safe you EFS folder the moment you think of Flashing any ROM that is NOT the original Firmware for that phone

It is noted that to resolve this problem you have to return to its original firmware to recover your embedded IMEI and do a progressive upgrade . eg. from GingerBread to ICS before going on to Jelly Bean.