Home / Archives for Hacking

Protect WordPress from Hackers – Secure that Beeotch!

December 3, 2009 By 16 Comments

Atom BombDammit!!!! I HATE SPAMMERS MORE THAN ANYONE ON EARTH! I honestly, 100% mean it when I say that I want to KILL spammers. You guys are laughing right now… “hehehe. Here goes that crazy John P. with another rant about spammers. Aww, he’s just kidding!” No! I am an ex-Marine, I own guns and knives, and I’m begging a spammer to show up at my house so I can do horrible things to him!!!! GRRRRR!!!!!

Today I got an email from Google as follows:

Dear site owner or webmaster of onemansblog.com,

While we were indexing your webpages, we detected that some of your pages were using techniques that are outside our quality guidelines, which can be found here: http://www.google.com/support/webmasters/bin/answer.py?answer=35769&hl=en. This appears to be because your site has been modified by a third party. Typically, the offending party gains access to an insecure directory that has open permissions. Many times, they will upload files or modify existing ones, which then show up as spam in our index.

The following is some example hidden text we found at http://onemansblog.com/:

calendar acrobat download wcc adobe’s click. create watermark in adobe acrobat ea adobe acrobat professional Software Planetadobe creative suite 2 rumors adobe acrobat not finding scanner . adobe acrobat 8.01 professional software adobe acrobat 5.0. activate adobe acrobat 8 adobe acrobat contact sheet Adobe Acrobat 9 Pro Extended | Software Planetadobe acrobat 6 professional serial numbers c adobe acrobat fields sql . download adobe acrobat reader full version could not find adobe acrobat plugin

In order to preserve the quality of our search engine, pages from onemansblog.com are scheduled to be removed temporarily from our search results for at least 30 days.

Why, pray tell, would Google ban OneMansBlog from the index? Well, because some sneaky bastard somehow added a bunch of spam to the footer of my blog! HOW? My directory permissions are correct, I have all the latest versions of plugins installed and WordPress is up to date. So, let’s run down a checklist of things you should do so as not to fall victim to the spammers too:
[Read more...]

Filed Under: Security, Wordpress Tagged With: , , , , , ,

Tutorial: How-to Recover Windows Login Passwords

January 7, 2008 By 14 Comments

Ophcrack Hacking Windows Passwords

Windows security is sad. Although most of you have probably already read my article about using strong passwords, even the strongest passwords won’t keep your Windows login account from being penetrated. In fact, it takes only a couple of minutes to gain complete access to a Windows system using nothing more than a free CD ROM.

Now, if there is any good news – people are constantly locking themselves out of their personal laptops and home computers by forgetting the password. And recently I’ve had two different friends do this within a period of a couple of days. So you guys know how this works… when I start getting requests, I document the solution.
[Read more...]

Filed Under: Security, Videos Tagged With: , , , , ,

The Threat of Free Public WiFi

October 23, 2007 By 24 Comments

Folks, I was at the airport and I popped open my laptop to hop on the net and upon doing so I encountered a seriously sneaky bastard. Do you see anything wrong with the image below?

Free Public WiFi Threat

Well, hopefully you notice the little icon of a laptop beside the network entitled “Free Public WiFi”. This is NOT a free wireless access point, but instead a laptop computer that someone has configured to capture your personal data and rob you blind.
[Read more...]

Filed Under: Security, Travel Tagged With: , , , , , , , , , , ,

How To Cheat A Coin Operated Washing Machine

September 6, 2007 By 122 Comments

Cheat a Washing MachineI wouldn’t actually do this, but for some reason I’m just fascinated with these unbelievably simple methods of circumventing the system.

Just like the How to Pick a Padlock, this method of using a coin operated washing machine for free is so simple it makes you wonder how they would ever collect any money in these machines!
[Read more...]

Filed Under: Tutorials, Videos Tagged With: , , , ,

Why Combination Padlocks Are Totally Insecure

April 22, 2007 By 7 Comments

Here is a demonstration of how to open a padlock in 1 minute or less using nothing more than scissors and a coke can.
[Read more...]

Filed Under: Security, Tutorials, Videos Tagged With: , , , ,

How I’d Hack Your Weak Passwords

March 26, 2007 By 435 Comments

User LoginIf you invited me to try and crack your password, you know the one that you use over and over for like every web page you visit, how many guesses would it take before I got it?

Let’s see… here is my top 10 list. I can obtain most of this information much easier than you think, then I might just be able to get into your e-mail, computer, or online banking. After all, if I get into one I’ll probably get into all of them.

  1. Your partner, child, or pet’s name, possibly followed by a 0 or 1 (because they’re always making you use a number, aren’t they?)
  2. The last 4 digits of your social security number.
  3. 123 or 1234 or 123456.
  4. “password”
  5. Your city, or college, football team name.
  6. Date of birth – yours, your partner’s or your child’s.
  7. “god”
  8. “letmein”
  9. “money”
  10. “love”

Statistically speaking that should probably cover about 20% of you. But don’t worry. If I didn’t get it yet it will probably only take a few more minutes before I do…
[Read more...]

Filed Under: Computing, Security Tagged With: , , , , , , , , ,

Access For-Pay Web Sites, For-Free!

December 15, 2006 By 5 Comments

Have you ever come across a link in a blog post or from a Google search to a Web site that essentially wanted you to either register or pay to access the content? Well, it just so happens that most of the sites that make you register allow Google to come right on in because they want their content indexed so that people will find it, come to their site, and register!

Given that information, all we need to do now is convince the Web site that we are Google. The way to do that is to change a setting, called the User Agent, in the Windows registry which gets fed to the Web server in question.

I’ve put together an easy way to do this for myself, and I’m sharing it with the world in case anyone else would like to do so as well.
[Read more...]

Filed Under: Google Tools, Tutorials, Web Links Tagged With: , , , ,

UN on Security Concerns Regarding ID Theft

December 5, 2006 By Leave a Comment

PasswordsDamn it! I’ve been preaching this for years but I don’t think many people are listening. Security practices in the Internet era have to change! We are way, way behind the technology available and it’s costing far more not to do anything about it than to fix the problems.

For example, the UK government estimates that ID theft costs the nation £1.7bn every year. Let’s see, that’s 1.7 billion divided by 60 million people or £28 per year, for every man, woman, child, infant, invalid and 90 year old in a nursing home. You could equip every person in the country with a fingerprint reader or secure ID token for a fraction of that cost and practically eliminate this huge – and growing – threat.
[Read more...]

Filed Under: Computing, Security Tagged With: , , , , ,

One More Reason not to Trust Bank Security

December 1, 2006 By 1 Comment

Bank VaultI hate to be the one to continually complain about security, but that doesn’t mean I won’t keep doing it. I would estimate that 95% of people are FAR too lax when it comes to security measures, and that another 4% are just plain old lax.

This latest story focuses on a concept called social engineering as a weak link in the chain (among other issues). Social engineering is the process of causing a security breach through submersive human interaction – in this case fooling bank personnel into believing you are someone you are not.
[Read more...]

Filed Under: Computing, Security Tagged With: , , , , ,
« Older Posts