Using Google Cache Hacks to Bypass Logins

Using Google Cache Hacks to Bypass Logins

http://www.youtube.com/watch?v=EO9owbljpzA

1. Find a protected forum.
2. Type cache:[http://www.protectedsite.com] into Google. There is also a variation of this which involves disguising your browser as a Google Bot. I am aware that there is a plugin for Firefox that can do this for you.

Yahoo Booters Protection

What are ...

- Yahoo Booters ?
Yahoo booters are softwares that use packet codings to send the victim`s computer using yahoo messenger, these pack codes contain some inforemation and codes that computer can not understand, so computer gets hanged or slowed down by proccessing these packets, there r lots of diffrent kinds of packets created by programmers to boot yahoo users in diffrentw ays, like disconnecting them from yahoo messenger and internet, or hanging thier pcs, or closing thier yahoo messenger or sending them thousendes of im messages from diffrent yahoo ids...

-Yahoo Bots ?
Chatbot is a computer program that simulates a human chatting with other humans.

To protect yourself from booters you need to use one of the safe yahoo clients...
-YTunnel Pro

Y!TunnelPro provides enhancements and protection for users of Yahoo! Messenger. This includes enhanced privacy settings for all aspects of Messenger, boot code filtering, visual enhancements, SPAM Filtering, and full integration into Yahoo! Messenger.

One new key update included with version 2.5 is an all integration system that provides a highly stable and fault tolerant method of communication between Yahoo! Messenger and Y!TunnelPro.

Y!TunnelPro also includes several features to enhance your chat experience such as auto-completion of user names, SPAM Challenge user verification for instant messages, updated activity and diagnostic log windows, an all new auto update module, and major additions that integrate with Yahoo! Messenger.

Some of the features included with Y!YTunnelPro include:

* Easy to use! Select the filtering options you want and Y!TunnelPro does all the work.

* Yahoo! Messenger Integration. Y!TunnelPro integrates with Yahoo! Messenger allowing quick and easy access to commonly used features.

* Automatically receive updates and fixes. Y!TunnelPro can optionally be set up to automatically check for and download updates containing enhancements, fixes, and additional protection against malicious and abusive users.

* Unequaled Chat Protection! Places a barrier of protection between you and abusive users. This helps protect you against boots, invite bombs, lags.

* Duplicate line and flood filtering.Not everyone uses proper netiquette when participating in chatrooms. Repetitive messages, "screen clears", and flooding of chatrooms with random messages are filtered so you don't see them.

* Enhanced privacy.Y!TunnelPro includes privacy features that go beyond those included with Yahoo! Messenger. Enhanced privacy allows you to decide if you want to receive private messages and invites from people on your buddy list, people in chatrooms, and from people that you do not know.

* Font and Text Effects Filtering. Effects such as fading and alternating text colors and large fonts can disrupt chatrooms and in some cases can make if very difficult to read the text of the sender. Y!TunnelPro can optionally filter the senders text to remove these settings.

* "Spam-bot" blocking. Y!TunnelPro aggressively monitors the content of private messages sent by other users and will automatically block messages that appear to be generated by an automated "spam" bot.

* Enhanced chatroom and private message windows. Y!TunnelPro can optionally enlarge the chatroom and private message text entry area and the list of users participating in the chatroom making it easier to enter text and see who is in the chatroom.

* Ad Remover. Remove unwanted and possibly offensive ad banners from chatroom and webcam windows.

Source: www.ytunnelpro.com

What is DoS Attack (Denial of Service)

You probably heard before of the term Denial of Service. What does this mean?

Taking advantage of a known problem with the Operating System or any running services on the target, a good programmer can build an application that sends some data that causes the targeted system to crash.

The worst case scenario is not when a hacker crashes a service, but when it finds a way to maximize the CPU usage causing a total malfunction on the system.

Of course most of the attacks are not initiated by these kind of programmers, but by "script kiddies" who only read about it, find the program's source over the web and just use it without knowing the mechanisms it uses.

Usually, DoS attacks are closely related to brute force attacks. The brute force attack uses all combinations of possible characters or dictionary word lists to try find out any passwords on the system (eg root accounts). When a root account in a network is found out, any DoS attacks can be done easily over the specific network.

Here are some of the most known DoS attacks:

1. SYN Floods

You should know that when a client and a server want to transmit data over the TCP protocol, a three-way handshake occurs:

• The client asks for a connection with a SYN (synchronize) package
• The server replies to the client with a SYN-ACK (syn-acknowledgments)
• The client sends a third packages as a ACK and the transmission of the data starts.

The SYN flood works by sending SYN packets from false IP addresses (IP spoofing). The server replies to that false IP address with an SYN-ACK and then waits for ACK. Doing this many times will cause the server to end up in the impossibility of opening new connection, creating a network congestion.

Another SYN flood attack involves sending a packet to the server, spoofed with the server's address (let's say the server's IP is 192.168.1.20 then you send a SYN packet from 192.168.1.20 to 192.168.1.20). Repeating this many times will make the server sending SYN-ACK and ACK to itself, blocking it.

Patches to this kind of attack used a connection number limit from the same source/timeframe. SYN cookies also hold down the handling of the packets until the sender's IP address is verified.

2. SMURF attacks

In this kind of attacks a massive amount of ping traffic (ICMP echos) is sent to the broadcast address of the network. The source IP address is spoofed to look like the target's. If this traffic is forwarded to the network, all hosts will reply with an echo to the target, believing that they receive an echo request (PING) from it. In a large networks, a targeted server for example can be flooded by hundreds of replies at once. By sending the spoofed packet several times, the server will be flooded until it crashes from the overload.

This kind of attacks were mostly patched by making the routers not forwarding broadcast directed traffic to the network.

3. LAND attacks

LAND attacks take advantage of opened network services on the target. By using a port sniffer, opened ports and services are found out. Then spoofed packages are sent with IP address source the same as IP address destination (server's address) to make it reply to itself. Let's say for example that it uses SNMP (simple network management protocol - service used to report network and system's usage). By making a SNMP service to reply to itself continuously it finally crashes.

4. Ping of death

This type of DoS attack takes advantage of a known issue with Windows 9x and older NT stations, as well as Linux prior to 2.0.32. Many routers and printers older then 1998 are vulnerable to this too.
It works by sending a malformed format of a ping packet. Usually, ping packets are small-sized (like 32bytes or 64bytes by default). Older Operating Systems and other devices could not handle ping larger than the maximum IP packet size of 65535 bytes (defined by RFC 791). By sending a large packet or a malformed one, any system that doesn't know how to handle it crashes (eg. in Windows 9x a blue screen of death was generated).
Patches are available on the web for any old operating systems or devices.

5. Ping flooding

This is probably the simplest DoS attack that exists. It is also the most used. It works by overwhelming the target with echo requests (pings) having large packets. The target has it's bandwidth occupied by these requests already and floods itself by starting to reply back. Of course, the attacker must have a larger bandwidth than the target (for example flooding a dial-up user from a 1Mbps connection).
With the increase of the servers' bandwidth, this type of attacks became useless for an ADSL user for instance.
The "problem" was solved by using multiple hosts, creating the first DDoS attacks (distributed denial of service).
DDoS attacks work by owning let's say 50 boxes each with 1Mbps bandwidth. Then the attacker uses all of them to ping flood the target, creating a great amount of traffic on the host.
Stacheldraht for example is a console that connects to owned boxes running Stacheldraht server. It then coordinates the attacks from a single point.
The solution to this type of attacks is the firewall, which filters any echo replies from being sent. Of course, firewalls can be crashed as well.

6. Fraggle attacks

A fraggle attack takes place when an attacker send massive amount of UDP echo data to network broadcast addresses, using a the target's IP as the packet's source. All hosts reply to the target, flooding it. It usually uses UDP PORT 7 (echo). This code was written by the same person who written the smurf attack.

7. Teardrop attacks

This attack involves packets sent by the attacker to the target with oversized payloads. This exploits a bug in the TCP/IP protocol stack, crashing the system. Only Windows 3.11, 95 and Linux prior to 2.0.32 were vulnerable to this kind of attack.

8. Other type of attacks

Other type of attacks involve application flooding, like IRC bot raw line which usually crash Windows boxes running mIRC or any other client. These attacks are based on a greater number of raw socket transactions than a computer can handle.