Bharat Banate's Work Profile

View Bharat Banate's profile on LinkedIn

Tuesday, March 25, 2008

What is Hacking?

Username: system
Password: manager
Welcome to ABL Computer Research Lab. You have five new messages.
$

That is how easy it was to hack into a computer network. The most prominent definition of hacking is the act of gaining access without legal authorization to a computer or computer network. A hacker first attacks an easy target, and then uses it to hide his or her traces for launching attacks at more secure sites. The goal of an attack is to gain complete control of the system (so you can edit, delete, install, or execute any file in any user’s directory), often by gaining access to a "super-user" account. This will allow both maximum access and the ability to hide your presence.

Often attacks are based on software bugs that a hacker can use to give himself or herself super-user status. The example above was used by West German hacker "Pengo" who exploited the fact that many systems came with default usernames and passwords which some buyers neglected to change. He succeeded by persistence.

Also one can get a copy of the password file (which stores usernames and encrypted passwords and is often publicly accessible) and either do a brute-force attack trying all possible combinations, or encrypt a dictionary and compare the results to see if anyone chose a password that is a dictionary word. Another method of hacking is to email someone a program that either automatically runs, or that runs when they click on an attachment. This can install a program that will give you control of their computer. L0pht Heavy Industry’s Back Orifice 2000 (a crude parody of Microsoft’s Office 2000) allows someone to have nearly complete control (running programs, deleting files, viewing the screen, logging typed keys, etc.) over the target computer without being noticed. One complicated method, known as IP spoofing, is to get one computer to pretend that it is another one which is trusted by the target system, thus gaining the access privileges of the latter.

Early hackers needed to be very knowledgeable so that they were able to identify bugs themselves (a task requiring extensive knowledge about the operating system, and reading complex manuals) and often write their own programs to exploit them. They had to keep track of the leading developments in the field (latest bugs, latest patches, latest bugs in the patches, etc.). Later hackers were able to increasingly rely upon the hacking community to identify bugs and write programs that could be adapted for their specific purpose. For instance, famed hacker Kevin Mitnick used a trojan horse written by the West German Chaos Gang to gain access to hundreds of systems. As another example, it does not take much intelligence to download a copy of Back Orifice 2000 from www.bo2k.com and send a copy of the client as an attachment disguised as a game or cute program, to an unsuspecting person. In fact, Back Orifice has been downloaded over 300,000 times (Deane 1999) and received substantial computer media coverage. In Pengo’s case it is often more a matter of dedication and trying well-known recipes until one finds a place that has not fixed the bugs, than genius.

The growing number of inexperienced hackers (deridingly called "lamers" or "crackers"), due to the growth first in BBSes and then in the Internet, helps explain the antagonism between the older generation that did more of the problem-solving for themselves and the new generation that can get a quick start by running hacker programs without understanding how they work. The reaction of the older generation is to shun the newbies, thus ignoring those who might show talent as well as those who are in it just to copy tactics.

Monday, March 24, 2008

VMware Server (for Windows and Linux systems)

VMware Server (for Windows and Linux systems)

Use Multiple Operating Systems Concurrently on the Same PC

VMware Workstation 6 makes it simple to create and run multiple virtual machines on your desktop or laptop computer. You can convert an existing physical PC into a VMware virtual machine, or create a new virtual machine from scratch. Each virtual machine represents a complete PC, including the processor, memory, network connections and peripheral ports.

VMware Workstation lets you use your virtual machines to run Windows, Linux and a host of other operating systems side-by-side on the same computer. You can switch between operating systems instantly with a click of a mouse, share files between virtual machines with drag-and-drop functionality and access all the peripheral devices you rely on.

Take Snapshots & Videos of your Virtual Machines

With Workstation, you can take a “snapshot” that preserves the state of a virtual machine so you can return to it at any time. Snapshots are useful when you need to revert your virtual machine to a prior, stable system state. Workstation displays thumbnails of all your snapshots on a single screen, making it easy for you to track and revert to a previously saved snapshot.

You can even use Workstation 6 to record and play video files that capture all changes to a virtual machine over a period of time. This function is exclusive to VMware Workstation and is incredibly useful for software debugging, Help Desk forensics, sales demonstrations and training.

Run an Entire Multi-tier System on a Single Host Computer

Run multi-tier enterprise applications on a single piece of hardware by managing network-connected virtual machines with the Teams feature of Workstation 6. Teams let you create virtual network environments that include client, server and database virtual machines.

With Workstation Teams, you can turn an entire multi-tier environment on and off with a single click of the mouse button. Workstation displays live thumbnails of all connected virtual machines, enabling you to easily identify and switch between the virtual machines associated with a team.


Broadest Host & Guest Operating System Support

* Runs on both Windows and Linux host operating systems and supports most desktop and server editions of Microsoft Windows, Linux, Solaris x86, Netware, and FreeBSD as guest operating systems
* Supports both 32-bit and 64-bit host and guest operating systems
* Supports two-way Virtual SMP™ – Assign one or two processors to virtual machines
* Experimental support for VMI 3.0 enabled paravirtualized Linux kernels

Click Here To Download VmWare..

How to study SQL Online...

Hello Guys...........

Click on following link and study SQL.You can also fire Query there,no need of having Oracle installed on your machine.

Click Here TO Study SQL Online.

Crontab : Scheduling Tasks

Crontab permits to schedule tasks on your computer. For example you can program a safeguard every month on the 13th, or administrative tasks such as booting tasks (checking emails, log off network stations , etc...).
Keywords: @annually , @daily , @hourly , @midnight , @monthly , @reboot , @weekly , @yearly , command , cron.allow , cron.deny , crontab , Scheduling tasks , user .

We first notice that crontab stands out the at utility. Indeed crontab permits to schedule tasks, that is to say repetitive tasks, whereas at only executes one task.

Allow a user to use crontab


My username is nadir. First you have to allow nadir to use the crontab command. We log in as root and we check if the /etc/cron.allow file exists. If it exists, add the user nadir in the file, if it does not exist create it and add the user nadir.
root@ipower:~# nano -w /etc/cron.allow

or write (vi,gedit, nedit, kwrite, etc...) and fill out the file accordingly.

From now on, the nadir user is allowed to use crontab. So it is possible to specify who are the (users) allowed to use crontab and those who are not allowed. To do that, we use the /etc/cron.allow and /etc/cron.deny files.

If the /etc/cron.allow file exists, only the users mentioned will have the right to use the cron command.

If the /etc/cron.allow file does not exist, it is the /etc/cron.deny file which is taken into account: the mentioned users will not have the right to use the cron command.

If neither of the two files exists, only the super user (root) will have the right to use the cron command.

Note: an empty /etc/cron.deny file means that all the users can use the cron commande.

Use of crontab


Once the nadir user is allowed, this one is able to use crontab. Using the crontab -l option, list the current tasks:
nadir@ipower:~$ crontab -l no crontab for nadir

We can clearly see that no task is defined. Well, it is now or never!

First of all, create a task file
nadir@ipower:~$ crontab -e

Now you had to fill out it. The syntax is: m h dom mon dow command
- m forminute between 0 and 59
- h for hour between 0 and 11
- dom for day of month between 1 and 31
- mon for month between 1 and 12
- dow for day of week between 0 and 7, sunday is represented by 0 or 7, monday by 1, etc ...
- command to execute the command.

Now, take an interest in some special characters (metacharacters) :
- *, if one of the m h dom mon dow fields owns the * character, then it indicates evey minute or evey hour or every day or every day of the month or every month or every day of the week, it depends on which field is placed *.
- / permits to specify a repetition.
- - permits to define a range.
- , permits to specify several values.

Some examples:

*/5 * * * * command to execute a command every 5 minutes.

0 22 * * 1-5 command to execute a command every day, monday to friday, at 10 p.m.

17 19 1,15 * * command means the first and the fifteenth day of the month at 19h17 (7.17 p.m.)

23 0-16/2 * * * command means every 2 hours at the twenty-third minute, between midnight and

Monday, February 4, 2008

How to use java in OPEN Source....

Java Open Source Workflow
Enhydra Shark
The Enhydra Shark project delivers an Open Source Java workflow server with a difference. It is an extendable and embeddable Java open source workflow engine framework including a standard implementation completely based on WfMC specifications using XPDL (without any proprietary extensions !) as its native workflow process definition format and the WfMC "ToolAgents" API for serverside execution of system activities. Every single component (persistence layer, transaction manager, scripting engines, process repository,...) can be used with its standard implementation or extended/replaced by project specific modules.


Enhydra JaWE
Enhydra JaWE (Java Workflow Editor) is the first open source graphical Java workflow process editor fully according to WfMC specifications supporting XPDL as its native file format. It can be used to edit / view every XPDL file which conforms to WfMC XPDL specifications , does NOT use any proprietary XPDL extensions and is available in English, German, French and Serbian language already. Advanced features like the consistency validation and guided property editor dialogs for all XPDL objects make it really easy to create valid XPDL files. The representation of workflow participants as "swimlanes" in the editor graphics gives a comprehensive overview of process responsibilities.


Home
Enhydra.org Sucess Stories

Versicherungs-Vergleich.at is using Enhydra Application Server and Enhydra Shark Workflow to develop its new base software for online insurance comparisons.

etenso GmbH in Germany uses Enhydra Server to implement a knowledge and information management product and wins the ObjectWeb Award ! Read more...

AKBANK in Turkey uses Enhydra Shark and Enhydra JaWE with support from Together for approval mechanisms in retail banking. Read more...

OpenUSS uses Enhydra Enterprise to serve thousands of students worldwide.

OfBiz uses Enhydra Shark as their internal workflow engine with thousands of users worldwide.

GrECo International AG succesfully deployed Enhydra Snapper in their LAN, integrated the fulltext indexing / search and the document previewer into their insurance broking application "BroSys" and GrECo users search in about 2.2 million documents in fragments of seconds !

Java Open Source Workflow

Enhydra Shark

The Enhydra Shark project delivers an Open Source Java workflow server with a difference. It is an extendable and embeddable Java open source workflow engine framework including a standard implementation completely based on WfMC specifications using XPDL (without any proprietary extensions !) as its native workflow process definition format and the WfMC "ToolAgents" API for serverside execution of system activities. Every single component (persistence layer, transaction manager, scripting engines, process repository,...) can be used with its standard implementation or extended/replaced by project specific modules.


Enhydra JaWE
Enhydra JaWE (Java Workflow Editor) is the first open source graphical Java workflow process editor fully according to WfMC specifications supporting XPDL as its native file format. It can be used to edit / view every XPDL file which conforms to WfMC XPDL specifications , does NOT use any proprietary XPDL extensions and is available in English, German, French and Serbian language already. Advanced features like the consistency validation and guided property editor dialogs for all XPDL objects make it really easy to create valid XPDL files. The representation of workflow participants as "swimlanes" in the editor graphics gives a comprehensive overview of process responsibilities.



Java Open Source Application Server

Enhydra Server
Enhydra Server is an Open Source Java application and webservice server including standard Apache Tomcat (or alternatively Jetty) and Apache Axis with a very big difference ! While the servlet API is used to support presentation logic, the platform contains just about all enterprise level services to build extreme high volume web sites in an n-tier architecture. The architecture is designed for perfomance and in tests we showed incredible performance numbers ! Many Enhydra servers are powering the Web today, some catering to millions of transactions a day. One of the most talked about features of Enhydra is its Enhydra XMLC technology - an object-oriented standards based replacement for JSP that completely separates the designer and developer. In addition, Enhydra includes a relational-to-object mapping tool (Enhydra DODS), Enhydra Workflow (Shark and JaWE), clustering web server extensions for Apache, IIS and IPlanet and much more. Check it out, you won't be sorry! :-)


Enhydra Enterprise
This is the effort to bring the advantages of the Open Source Java application server Enhydra to existing J2EE container implementations. Open Source J2EE containers like JOnAS and JBoss are supported already ! And Apache Geronimo will also be packaged as an alternative to EAF addons for commercial J2EE servers like IBM Websphere, BEA Weblogic, Oracle and Sun J2EE servers.


Home
Enhydra.org Sucess Stories

Versicherungs-Vergleich.at is using Enhydra Application Server and Enhydra Shark Workflow to develop its new base software for online insurance comparisons.

etenso GmbH in Germany uses Enhydra Server to implement a knowledge and information management product and wins the ObjectWeb Award ! Read more...

AKBANK in Turkey uses Enhydra Shark and Enhydra JaWE with support from Together for approval mechanisms in retail banking. Read more...

OpenUSS uses Enhydra Enterprise to serve thousands of students worldwide.

OfBiz uses Enhydra Shark as their internal workflow engine with thousands of users worldwide.

GrECo International AG succesfully deployed Enhydra Snapper in their LAN, integrated the fulltext indexing / search and the document previewer into their insurance broking application "BroSys" and GrECo users search in about 2.2 million documents in fragments of seconds !

Java Open Source Workflow


Enhydra Shark
The Enhydra Shark project delivers an Open Source Java workflow server with a difference. It is an extendable and embeddable Java open source workflow engine framework including a standard implementation completely based on WfMC specifications using XPDL (without any proprietary extensions !) as its native workflow process definition format and the WfMC "ToolAgents" API for serverside execution of system activities. Every single component (persistence layer, transaction manager, scripting engines, process repository,...) can be used with its standard implementation or extended/replaced by project specific modules.


Enhydra JaWE
Enhydra JaWE (Java Workflow Editor) is the first open source graphical Java workflow process editor fully according to WfMC specifications supporting XPDL as its native file format. It can be used to edit / view every XPDL file which conforms to WfMC XPDL specifications , does NOT use any proprietary XPDL extensions and is available in English, German, French and Serbian language already. Advanced features like the consistency validation and guided property editor dialogs for all XPDL objects make it really easy to create valid XPDL files. The representation of workflow participants as "swimlanes" in the editor graphics gives a comprehensive overview of process responsibilities.



Java Open Source Application Server

Enhydra Server
Enhydra Server is an Open Source Java application and webservice server including standard Apache Tomcat (or alternatively Jetty) and Apache Axis with a very big difference ! While the servlet API is used to support presentation logic, the platform contains just about all enterprise level services to build extreme high volume web sites in an n-tier architecture. The architecture is designed for perfomance and in tests we showed incredible performance numbers ! Many Enhydra servers are powering the Web today, some catering to millions of transactions a day. One of the most talked about features of Enhydra is its Enhydra XMLC technology - an object-oriented standards based replacement for JSP that completely separates the designer and developer. In addition, Enhydra includes a relational-to-object mapping tool (Enhydra DODS), Enhydra Workflow (Shark and JaWE), clustering web server extensions for Apache, IIS and IPlanet and much more. Check it out, you won't be sorry! :-)


Enhydra Enterprise
This is the effort to bring the advantages of the Open Source Java application server Enhydra to existing J2EE container implementations. Open Source J2EE containers like JOnAS and JBoss are supported already ! And Apache Geronimo will also be packaged as an alternative to EAF addons for commercial J2EE servers like IBM Websphere, BEA Weblogic, Oracle and Sun J2EE servers.



Java Open Source Tools and Technologies

Enhydra XMLC

Enhydra XMLC is the presentation technology that supports the needs of designers, developers and architects alike, delivering what JSP cannot - strict separation of markup and logic in a true object view of dynamic presentations. XMLC is now fully portable to Tomcat 4, 5 as well as JBoss, BEA, Enhydra and other Web Container implementations. Enhydra XMLC is included in Enhydra Server and Enhydra Enterprise. Several Enhydra Demos also use XMLC !


Enhydra DODS
Enhydra DODS (Data Object Design Studio) is an open source relational-object-mapping tool with a difference. Based on XML data model descriptions the SQL DDL, sophisticated Java code and documentation (HTML, pdf, XMI) is generated automatically using a generator GUI, by Ant tasks or from within the Eclipse IDE. The generated Java code provides a lot of possibilities for runtime optimization (DO LRU caching, Query LRU caching, cache initialization, lazyloading,...).


Enhydra Director
Enhydra Director is a collection of open source web-server plugins to provide loadbalancing, clustering and unified connection methods for different web-servers on different platforms. It supports several popular Web servers and operating systems, including Apache (on Linux/Unix and Windows), Netscape Enterprise Server (on Linux/UNIX and Windows), and Microsoft Internet Information Server. Director also supports several applications servers: Tomcat (v5.xx and v5.5x), Jetty, JOnAS, JBoss and Enhydra Server.


Enhydra Octopus
Enhydra Octopus is a Java-based Extraction, Transformation, and Loading (ETL) tool. It may connect to any JDBC data sources and perform transformations defined in an XML file.


Enhydra Application Framework
Enhydra application framework EAF is a portable set of APIs making development of typical web applications a lot easier but still keeping portability to the application server of your choice by using plug-ins to adopt the EAF API's to the specific environment.


Enhydra Kelp
The Enhydra Kelp project is focused on creating tools that make it easy to get the most out of other Enhydra technologies such as XMLC, Octopus and DODS. Kelp includes command line tools, application wizards and Eclipse IDE plug-ins.


Enhydra Oyster
Enhydra Oyster is an Open Source Java library for SMIME signing and encryption of E-Mails using different key strengths and algorithms. It is developed with suport and testing for major E-Mail clients.