Some Other Methods To Grabbing Banner

Hello guys,
Now we are gonna discuss some more methods to “Banner Grabbing”. Now I hope you enjoyed my last post on banner grabbing. Here in this post we will discus some tools or softwares that can be used to grab banners & we will also have our look on some of the applications that can be used for preventing our banners from getting grabbed from attacker. Following are some tools that can helps in banner grabbing.

1. NetCat :- Net-Cat or Ncat is TCP/IP debugging tool that can also be used for banner grabbing. Download Netcat from its official website, its free. It is available in both versions, windows & Linux.You download From official site for windows. Have a look on its documentation about how to use it (www.downloadnetcat.com).
Following command works same as telnet for netcat and helps grabbing banner.

C:\netcat\>nc IP_Address 80 (Ex. nc 201.71.105.112)

(Press enter twice and if it doesn’t work then type following)

(HEAD /HTTP/1.0 and press enter twice)

2. Httprint :- Httprint is a web server finger printing tool. It uses server signature to identify version of web application running on the server. Download it from its official website again its free. Again it is available for almost every operating system either it is windows, linux or anything else. Click Here to download for windows and CMD based. I don’t think there is need to explain how it works since their own help documentation is very small and easy to understand. Give it a try if you still don’t understand how to use it ask me, Just drop me a email at webmaster@starthack.com . I’ll include a new post on it for sure.

3. Miart HTTP Header :- Miart HTTP Header tool identifies banner information from HTTP Header and response type. Using it doesn’t require any skill just enter URL in input box and press enter.

—————————————————————————————————————————————————————

Prevention Against Banner Grabbing:

1. Preventing Apache Server & Its Derivative :- We can’t say that there is some tool or specific method available via which we can stop banner of Apache from getting grabbed but if you’ll have a look on its documentation, you’ll find its not even difficult either. Actually full information about Apache and its derivative related problems and their solutions is included in their documentation and they differ for each version. Since they differ for each version I ‘ll recommend read its documentation to stop Apache giving out valuable information.

2. Preventing IIS Server :- IIS shares some advantages over Apache since various tools are available that help IIS server to defend itself against banner grabbing.

3. IIS Lockdown :-Its works by turning off unnecessary features thus providing multiple layer protection. Download it from www.microsoft.com.

4. Server Mask :- Server Mask removes every detail from website about it is using IIS server including removing all finger printing traces. It removes HTTP headers and also encrypts signatures thus providing protection against signature based banner grabbing.

5. Page Xchanger :- It is content negotiation tool. It cleans all URLs from extensions and hence make them appear more clear and navigable. It negotiates with every file and extension making site more secure since your site will show nothing about files, extensions and default error messages.

How to Hide a folder without any third party Software !

Step 1 :

 Rename any folder with extension {645FF040-5081-101B-9F08-00AA002F954E}
For eg,-
If u’ve a folder with name “Anything”
press F2,
then type, “Anything.{645FF040-5081-101B-9F08-00AA002F954E}”
and Press Enter.

Step 2 :

 
 To get back to its original form,
Make a new batch file with any name and type
“ren Anything.{645FF040-5081-101B-9F08-00AA002F954E} Anything”.

How to recover hidden Files from Virus infected USB Pendrive

You can Read below to know how to do it Manually recover Hidden Files By Virus .
Now a days all the people use USB Flash drives like Pendrive, External Hard Disk and Many more. They all skipped DVD, CD and all optical Disc because it takes time to copy and it cannot be reused. So USB Pendrives are now with all people. I used to see all over my college, they hang USB pendrive in their necks. They carry Music, Movies, Datas in that. How USB flash drives improves as the mean while USB virus also increases along with that.

If you have some nasty virus on USB drive that hide all your file in the drive? ie; hides your files and folders, creates exe file extensions of your folders and even corrupt your files. You can view these files by going to Tools>>Folder Options ..But the attributes of these files often stay unchanged even if you uncheck hidden attribute on file/folder properties.
Here i going to tell the Permanent Solution for recovering hidden files by Command prompt in windows operating system.

Step One:

Plug your USB Pendrive or External HDD or Memory Card which is Affected.

Step Two:

Go to Start -> Run-> Type CMD and Enter

Step Three:

Find the drive letter for the connected USB drive. For Example, I:
In command prompt, type I:
and Hit enter. Command Prompt will show I:/

Step Four:

Then type
attrib -s -h /s /d *.*

  And Hit Enter

Make sure that you put space between each elements in the code.
and hit enter and wait for few seconds.
Check the Screen Shot of Above Steps:

Now check your USB pendrive you can see your files are back in their locations.

@hackingtricksmaster

A few things you might want to try with Google

Hand type the following prefixes and note their utility:

link:url Shows other pages with links to that url.

related:url same as "what's related" on serps.

site:domain restricts search results to the given domain.

allinurl: shows only pages with all terms in the url.

inurl: like allinurl, but only for the next query word.

allintitle: shows only results with terms in title.

intitle: similar to allintitle, but only for the next word. "intitle:webmasterworld google" finds only pages with webmasterworld in the title, and google anywhere on the page.

cache:url will show the Google version of the passed url.

info:url will show a page containing links to related searches, backlinks, and pages containing the url. This is the same as typing the url into the search box.

spell: will spell check your query and search for it.

stocks: will lookup the search query in a stock index.

filetype: will restrict searches to that filetype. "-filetype:doc" to remove Microsoft word files.

daterange: is supported in Julian date format only. 2452384 is an example of a Julian date.

maps: If you enter a street address, a link to Yahoo Maps and to MapBlast will be presented.

phone: enter anything that looks like a phone number to have a name and address displayed. Same is true for something that looks like an address (include a name and zip code)

site: www.somesite.net "+www.somesite.+net"
(tells you how many pages of your site are indexed by google)

allintext: searches only within text of pages, but not in the links or page title

allinlinks: searches only within links, not text or title

I hope there is something new in here for you and maybe this infos will be helpfull for ya.

How To Make Your Own Radio Station

Must HAVE Winamp (Any Version)
First, things First your speed has to be at least 256/64 kbps (which means Dial-up users, will have alot of latency, just dnt bother)
Second, your going to have to have a domain, an updated one with the current i.p active. (Could be anything e.g. My sig)

Now, Your gonna have to download the Shoutcast Files.

Go to www.shoutcast.com to get the files.

Ok After downloading these, installing Both of them in any order i dnt care. Go to START>PROGRAM FILES>SHOUTcast DNAS>EDIT SHOUTCAST DNS CONFIG.

Ok your gonna have to Configure it:
Go Down and where it says password: change (that means your gonna have to change it to whatever, make sure u remember)
The Portbase: change it to whatever port you want it
Maxusers: (lets be realistic here, dnt put in 10000, like NXS's radio station) your bandwidth has to be extremely good, if your cable, 50 user max is ok, ADSL should stay below 10 users, and T1 connections should do whatever tickles there fantasy.

Open winamp, RIGHT CLICK>OPTIONS>PREFRENCES>DSP EFFECT> and choose the NULLSOFT SHOUTCAST.

Go to OUTPUT, and then click on Connection, Through the ADDRESS, type your address which you have done through www.no-ip.com, PORT NUMBER, whatever u did in the EDIT.txt, and your password.

Then go to Encoder, and choose your quality of your music. Go back to OUTPU>OUTPUT CONFIG> YELLOW PAGES. this is your advertisemant information. dow hatever you like there.

Now Connect. to check that your Radio os on-line go to http://(your address that you added in the prefrence)

@hackingtricksmaster