Friday, June 12, 2009

Gns Lookup, a tool for Looking up a specific Name Server

Gns Lookup is stands for genius name server lookup, a tool for doing a zone transfer from your dns server,you may know many tools for this kind of action, but it's developed under .Net Framework and it's really fast and also just 10 KBs (!).
for getting respond, first when you want acting a Name Server Transfer, you will enter your domain name and then click Resolve button, i'll promise you will get your respond less than 4 seconds ;)



#developed under C#.Net 2008#

I developed it for Free and you can use it without givving any payment.
hope you like it.

Download

Thursday, June 11, 2009

Conficker worm binary !

hey, all of them surely heard about the robust worm named Conficker, here's an example of this worm, you can download it and run it under an Isolated environment and start analysing this.
if you have any good report and result on analysing feel free to submit by comment and I will post it with your copyright ;)

Download

Wednesday, June 10, 2009

when you got infected with a robust malware !

when you got infected with a robust malware which use ring0 kernel drivers something like that may be happned,


well done, I've been killed this shit and hunt it's device section :)
any feedback about the picture !?

Develop your Drivers under Visual Studio !

sounds like new things in driver development hom ?!
yes, that's it, you read right, once again a new change in the driver development world .

before, when you want develop a driver under your windows NT based box, you have many problems like Compiling, preparing for MAKEFILE and also SOURCES files, after all you must go to DDK checked/Free envirenment and enter in the your driver's project directory then issue the "Build" command and may see lots of errors some of them related to syntax, something related to directory naming and such things like that and it may be confuse you for times.
you may know, there was no specific IDE (integrated Development Environment) for developing windows drivers and every time and many times you launch notepad and start to writing your own driver, but now things changed, now there's a new IDE dedicated to Driver development under DDK architecture, you can use it for many driver development purposes . ok let's explore some of it's features,
first you can Download it free with source code include (an open source project) from here, it's very tiny and if you one of guys or even girls that have no access to DSL connection you can download it easily.

after downloading it, you must have Visual Studio 2008/2005 not old Visual Studio 6.0, when you launch the setup you will see some options that need to configure them out .
when you install and configure it out correctly you can launch your visual studio and then select your driver project which added to projects section,

then you can specify a name for your project




we suppose the driver's project name is HelloWorld . then we start to create the project,



you can see what's the easy means ! it was generate all the source code for a hello world application automatically, the source file can appear such thing.
if you remind, in DDK console complilation when we want to compile the source code we must do 2 thing, first write the MAKEFILE which points to MAKEFILE.def in the DDK directory, and then add a SOURCES file which include our source's files .
after this two long work, we must simply issue the BUILD command from checked/free environment .
now these steps just need two key Ctrl+F5 keys, when you press them, if your application has no error then you see a Dialog Box which say it's not possible to execute your .Sys file and it's right !
it's a good news which tell you, your driver was made !
after this simply step you'll follow the driver's path, give it to Huglond's InstDrv and then you can see the driver's output with DebugView ( a kernel level Debug Viewer ) .


if you are a driver developer you can understand how much this work is worthy .
thanks to it's developer basiz :)

Friday, June 5, 2009

good or bad idea ?!

hey, after almost long time, once again ...
I've been so busy with my Universities's Exams, works and my personal researchs in the area of security .
I'm apologizing ...
the last week, I've 9 student's for network materials, all of them were girls of computer's major ...
they want to learn some basic networking for their network exam on university .
and the importance part was about subnnetting and supernetting, a material of CCNA Certified .
unluckily, 'cuze of difficulty of this subject, I've some problem with this material which I think I can solve it as soon as possible.
the class was about 3 hours .
after that, now I'm working and studing Object Oriented Data Structures in C++ for my tommorrow's Exam .
in this term we had the subject of Data Structures using classes and objects for Implementing them, Now I'm studing how to delete a node from a linked list with OOP aspect which I think this is very easiest than implementing it using structures (I mean data types).
ohhhhhh, a good news ..., I've been in a Conference with the subject of information security, I've present it with good materials about network security and it's related materials.
I've teached Firewalls, how firewall systems work, how to design them, the rule of a standard firewall and other materials about firewalling which include in Implementing windows based and Unix based firewalls .
after that, I've present Attack vectors, Vectors for attacking systems, include social engineering, the art of deception, how to poisoning a switched network and intercept it's traffic, how to exploit windows and linux systems and others ...
be patience for uploading it's PPT, and then you can see and download and read it, it's in persian ! :)
and the final words are, I want to write a great paper for Data Structures, using oop aspect . it's a great idea, hom !?
I'll trying to make it understandable and pretty with Adobe Flash with Full of codes.
any feedback !?
if you want to become my partner in this project, let me know .

Saturday, May 16, 2009

winner !

hey, after a log time challenge I have good news .
I think before I mentined that I have a Programming challenge through some states around our city, the materials were about C++ Data Structures and DataBase Programming with C#, also not whole materials were about Programming, we had a part that was dedicated to networking and even it was the hardest and critical part of our challenge .
fortunately I must annouce that I could locate in the highest score mearning in the first place from about 13 others ...
the exams were so hard and the first exam was Data Structures .
this exam had about 4 hours long and the exam was almost hard but Me and my friend could write it .
after a long time coding data structures in C++ we have a break for about 1 hour .
after it, the next exam was DataBase Programming and Analysing using C# ...
it was the great part and me and my friend started to Code and Analyz the program .
after about 3 hours we wrote the program and completed the mission, it was the greatest part and we knew, we got to a good score and we got the point 97/100 !
after that, the last exam was about netwroking stuff, it was almost hard .
we should calculate the IP addresses for both our client and server, and lastly we must compute the subnet mask of our network .
the next section we must complete that was about cabling , a non standard cable we sould made that no one ever seen ..., this section was bad and we got no chance !
for that section we decided to make one standard cross over cable and of our bad chance we could arrive to 15 score of whole 30 score (15/30 || 1/2) .
the next section was the interesting part , there was to machine, one of them had Windows Server 2003 enterprise edition that should inact as the server and should had active directory installed as our domain controller also, an IIS must be install for intracting as web server and the domain must had the name alireza.com ...
after about 2 hours patience I could complete this mission and can surf the web by our client to the address www.alireza.com on our server machine .
after that all, leaders decided to calculate our scores and announce them all .
Me and my friend (Mohsen) got the first place with 230 score of whole 300 scores !
this was a great challenge between guys and girls whom interested in both Programming and Networking stuff, and now Me and mohsen are waiting for challenges in the country level .
it was a good news which I think is good for annoucing in this place.


- Genius

Saturday, May 9, 2009

Tehran International Book Exhibition

as you know every year in tehran there's an international exhibition which is dedicated to internaltional books of many publishers ..., luckily in this exhibition I was one of guys who bought lots of computer related books, unluckily some of my books that was in my mind can't be found and the chance didn't allow me to buy my full books.
there was famous and pupolar publishers out there like John Wiley, Mac-Graw Hill , for dummies, O'Reilly and many others .
about 6 hours I was in exhibition and I can't find my own book "Shellcoder's Hanbook Second Edition" and "MCTS .net Application development" ...
but, I bought some of my owns which you can see them here :



here you can see which books I bought in exhibition, Programming Python is one of the best python books ever I've seen, a book with fully of great materials on Python programming whether topics are related to Application development, GUI development, Web Programming, Sys programming and many other things ...
you can see materilas which is covered by "Programming Python" , a book from famous publisher O'Reilly
  • Introduction to Python
  • Basic system scripts with Python (including file and directory tools)
  • Working with processes and threads
  • Pipes and signals
  • Sample scripts for system and Web utilities (including backing up files, program launching, replicating and managing directories)
  • Graphical user interface design in Python (including the Tkinter module)
  • Widgets and basic components
  • Layout options
  • Event handling
  • GUI examples (including a working text editor, image viewer, and clock)
  • Network scripting (sockets, FTP, and e-mail clients)
  • Server-side scripting
  • Sample server scripts for an online errata database
  • Python on the Internet (including Zope, JPython, and XML tools)
  • Databases and persistence in Python (including pickled objects and shelf files)
  • Custom and built-in data structures in Python
  • Text and string handling
  • C integration with Python (including the SWIG module)
  • Embedding Python calls within C
  • Hints for using Python in real projects
  • Reference to recent changes to Python
  • Python vs. C++ quick-start guide

another books which I'm interesting in is "Professional Linux Programming" from Wrox .
this books is about professional development under Linux OS and is one of the best rated books that you can see ever, in this books you can see even topics that covered Kernel Module Programming, sounds like Loadable Kernel Module Rootkit and bad guys interested in this book surely .
here you can see topics which is covered in this treasure :

  • How to use tools such as compilers, debuggers, and Software Configuration Management
  • Ways to interact with Linux systems through network interfaces, graphical user environments, and LAMP stacks

  • Techniques for building software for different compatible platforms

  • Tips for utilizing the GNU automated build for faster development

  • Steps for using emulation and virtualization technologies for kernel development and application testing

  • How to write your own GNOME software and powerful web applications


another books which is dedicated to my vacation times is Wireless Hacking for dummies, this is a simple book about Hacking Wireless networks using ready toolkits which is dedicated to Network and wireless networks, this one is also covered some topics you can see here :
  • Perform ethical hacks without compromising a system
  • Combat denial of service and WEP attacks
  • Understand how invaders think
  • Recognize the effects of different hacks
  • Protect against war drivers and rogue devices

the other book which is uniquly is "The web application hacker's hanbook, discovering and exploiting security holes" , sounds like interesting hom !?, this one is dedicated to one who is interested in Web Hacking and web vulnerability discovering, this is also a good book with lots of updated materials which you can see here,

This book is a practical guide to discovering and exploiting security flaws in web applications. The authors explain each category of vulnerability using real-world examples, screen shots and code extracts. The book is extremely practical in focus, and describes in detail the steps involved in detecting and exploiting each kind of security weakness found within a variety of applications such as online banking, e-commerce and other web applications.

The topics covered include bypassing login mechanisms, injecting code, exploiting logic flaws and compromising other users. Because every web application is different, attacking them entails bringing to bear various general principles, techniques and experience in an imaginative way. The most successful hackers go beyond this, and find ways to automate their bespoke attacks. This handbook describes a proven methodology that combines the virtues of human intelligence and computerized brute force, often with devastating results.

The authors are professional penetration testers who have been involved in web application security for nearly a decade. They have presented training courses at the Black Hat security conferences throughout the world. Under the alias "PortSwigger", Dafydd developed the popular Burp Suite of web application hack tools.

and lastly one of the books which I think is hard to understand is "CCIE Professional Development, Routing TCP/IP " , this one as you surely know is related to cisco networking stuff and is a cisco press book which I interested in, you can see the covered materials here,

  • A complete revision of the best-selling first edition--widely considered a premier text on TCP/IP routing protocols
  • A core textbook for CCIE preparation and a practical reference for network designers, administrators, and engineers
  • Includes configuration and troubleshooting lessons that would cost thousands to learn in a classroom and numerous real-world examples and case studie

  • that's all, if you want to buys one of them and need some description about the materilas Quality feel free to contact me or comment it out here .

    hope to like these information .

    - Genius