Planet Duffy

Thursday, January 18, 2024

Hacking Windows 95, Part 2

In the Hacking Windows 95, part 1 blog post, we covered that through a nasty bug affecting Windows 95/98/ME, the share password can be guessed in no time. In this article, I'm going to try to use this vulnerability to achieve remote code execution (with the help of publicly available tools only).

The first thing we can do when we have read access to the Windows directory through the share, is to locate all the *.pwl files on the c:\windows directory, copy them to your machine where Cain is installed, switch to Cracker tab, pwl files, load the pwl file, add username based on the filename, and try to crack it. If you can't crack it you might still try to add a .pwl file where you already know the password in the remote windows directory. Although this is a fun post-exploitation task, but still, no remote code execution. These passwords are useless without physical access.

One might think that after having a share password and user password, it is easy to achieve remote code execution. The problem is:

there is no "at" command (available since Windows 95 plus!)
there is no admin share
there is no RPC
there is no named pipes
there is no remote registry
there is no remote service management

If you think about security best practices, disabling unnecessary services is always the first task you should do. Because Windows 95 lacks all of these services, it is pretty much secure!

During my quest for a tool to hack Windows 95, I came across some pretty cool stuff:

Internet periscope

Winfingerprint

LanSpy

But the best of the best is Fluxay, which has been written by chinese hackers. It is the metasploit from the year 2000. A screenshot is worth more than a 1000 words. 4 screenshot > 4 thousand words :)

It is pretty hard to find the installer, but it is still out there!

But at the end, no remote code execution for me.

My idea here was that if I can find a file which executes regularly (on a scheduled basis), I can change that executable to my backdoor and I'm done. Although there is no scheduler in the default Windows 95, I gave it a try.

Let's fire up taskman.exe to get an idea what processes are running:

Looks like we need a more powerful tool here, namely Process Explorer. Let's try to download this from oldapps.com:

LOL, IE3 hangs, can't render the page. Copying files to the Win95 VM is not that simple, because there are no shared folders in Win95 VM. And you can't use pendrives either, Win95 can't handle USB (at least the retail version). After downloading the application with a newer browser from oldapps, let's start Process Explorer on the test Windows 95.

Don't try to download the Winsocks 2 patch from the official MS site, it is not there anymore, but you can download it from other sites.

Now let's look at the processes running:

After staring it for minutes, turned out it is constant, no new processes appeared.
Looking at the next screenshot, one can notice this OS was not running a lot of background processes ...

My current Win7 has 1181 threads and 84 processes running, no wonder it is slow as hell :)

We have at least the following options:

You are lucky and not the plain Windows 95 is installed, but Windows 95 Plus! The main difference here is that Windows 95 Plus! has built-in scheduler, especially the "at" command. Just overwrite a file which is scheduled to execution, and wait. Mission accomplished!
Ping of death - you can crash the machine (no BSOD, just crash) with long (over 65535 bytes) ICMP ping commands, and wait for someone to reboot it. Just don't forget to put your backdoor on the share and add it to autoexec.bat before crashing it.
If your target is a plain Windows 95, I believe you are out of luck. No at command, no named pipes, no admin share, nothing. Meybe you can try to fuzz port 137 138 139, and write an exploit for those. Might be even Ping of Death is exploitable?

Let's do the first option, and hack Windows 95 plus!

Look at the cool features we have by installing Win95 Plus!

Cool new boot splash screen!

But our main interest is the new, scheduled tasks!

Now we can replace diskalm.exe with our backdoor executable, and wait maximum one hour to be scheduled.

Instead of a boring text based tutorial, I created a YouTube video for you. Based on the feedbacks on my previous tutorialz, it turned out I'm way too old, and can't do interesting tutorials. That's why I analyzed the cool skiddie videoz, and found that I have to do the followings so my vidz won't suck anymore:

use cool black windows theme
put meaningless performance monitor gadgets on the sidebar
use a cool background, something related with hacking and skullz
do as many opsec fails as possible
instead of captions, use notepad with spelling errorz
there is only one rule of metal: Play it fuckin' loud!!!!

Wednesday, January 17, 2024

BurpSuite Introduction & Installation

What is BurpSuite?
Burp Suite is a Java based Web Penetration Testing framework. It has become an industry standard suite of tools used by information security professionals. Burp Suite helps you identify vulnerabilities and verify attack vectors that are affecting web applications. Because of its popularity and breadth as well as depth of features, we have created this useful page as a collection of Burp Suite knowledge and information.

In its simplest form, Burp Suite can be classified as an Interception Proxy. While browsing their target application, a penetration tester can configure their internet browser to route traffic through the Burp Suite proxy server. Burp Suite then acts as a (sort of) Man In The Middle by capturing and analyzing each request to and from the target web application so that they can be analyzed.

Everyone has their favorite security tools, but when it comes to mobile and web applications I've always found myself looking BurpSuite . It always seems to have everything I need and for folks just getting started with web application testing it can be a challenge putting all of the pieces together. I'm just going to go through the installation to paint a good picture of how to get it up quickly.

BurpSuite is freely available with everything you need to get started and when you're ready to cut the leash, the professional version has some handy tools that can make the whole process a little bit easier. I'll also go through how to install FoxyProxy which makes it much easier to change your proxy setup, but we'll get into that a little later.

Requirements and assumptions:

Mozilla Firefox 3.1 or Later Knowledge of Firefox Add-ons and installation The Java Runtime Environment installed

Download BurpSuite from http://portswigger.net/burp/download.htmland make a note of where you save it.

on for Firefox from https://addons.mozilla.org/en-US/firefox/addon/foxyproxy-standard/

If this is your first time running the JAR file, it may take a minute or two to load, so be patient and wait.

Video for setup and installation.

You need to install compatible version of java , So that you can run BurpSuite.

More info

Tuesday, January 16, 2024

Link Building: Definition, Strategies, Tools, Benefits, Challenges, Best Practices

What is Link Building, and Why is It Important for SEO?

Link building is the process of acquiring hyperlinks from other websites to your own website. It's a crucial aspect of search engine optimization (SEO) because search engines like Google use links as a signal of a website's authority and relevance. When authoritative websites link to your content, it sends a signal to search engines that your content is valuable and trustworthy, which can boost your website's rankings in search results.

According to a study by Ahrefs, websites with a high number of backlinks tend to rank higher in search results than those with fewer backlinks.

Link building remains a critical component of SEO strategies in 2024. A recent survey of SEO professionals by Moz found that 95% of respondents consider link building to be a "very important" or "somewhat important" factor for ranking websites. Here are a Linkedin post on how to hire a link building specialist.

Link Building Strategies

Here are some of the most effective link building strategies:

Content Marketing: Create high-quality content that other websites will naturally want to link to. This could include blog posts, infographics, videos, or other types of informative content.

Case Study: A software company increased organic traffic by 25% by publishing a series of in-depth blog posts on industry topics.

Guest Blogging: Write guest posts for other websites in your industry with links back to your own website.

Statistic: A study by Backlinko found that guest blogging can increase website traffic by an average of 20%.

Broken Link Building: Find broken links on other websites in your industry and reach out to the website owners to suggest replacing the broken link with a link to your own relevant content.
Public Relations: Generate positive press coverage and backlinks from reputable news websites and blogs.
Social Media Promotion: Share your content on social media to attract links from other users and websites.
Email Outreach: Reach out to website owners and bloggers directly to ask for links to your content.

Link Building Tools

Several link building tools can help you research backlink opportunities, track your progress, and analyze your backlink profile. Some popular options include:

Ahrefs
SEMrush
Moz
Majestic
BuzzSumo

Benefits of Link Building

Link building can provide several benefits for your website, including:

Increased search rankings
Increased website traffic
Increased brand awareness
Improved credibility and authority
Stronger relationships with other websites in your industry

Challenges of Link Building

Link building can be a challenging and time-consuming process. Some of the common challenges include:

Building high-quality links requires effort and expertise.
It can be difficult to secure links from high-authority websites.
There's a risk of being penalized by search engines for using unethical link building tactics.

Best Practices for Link Building

Here are some best practices for link building:

Focus on quality over quantity. It's better to have a few high-quality links from reputable websites than many low-quality links.
Build relationships with other website owners in your industry.
Diversify your link profile with links from a variety of websites.
Monitor your backlinks regularly for spam or low-quality links.
Avoid spammy or unethical link building tactics.
Always follow Google's Webmaster Guidelines.

Conclusion

Link building is a crucial aspect of SEO and can significantly impact your website's visibility and success in search results. By implementing a strategic and ethical link building plan, you can improve your website's rankings, drive more traffic, and boost your brand awareness.

--
You received this message because you are subscribed to the Google Groups "Broadcaster" group.
To unsubscribe from this group and stop receiving emails from it, send an email to broadcaster-news+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/broadcaster-news/c9e2ad9e-7ea5-4f29-8c62-4ae5f497c582n%40googlegroups.com.

Thursday, January 11, 2024

Agility Writer Review: Definition, Features, Benefits, Pricing, How to Use

What Is Agility Writer?

Agility Writer is an AI-powered writing assistant that helps writers improve their productivity and the quality of their work. Launched in 2020, Agility Writer quickly gained popularity among content writers, bloggers, copywriters, and students. With its user-friendly interface and advanced features, Agility Writer is a valuable tool that can help writers create high-quality content faster and more efficiently.

Key Features of Agility Writer

Agility Writer offers a wide range of features designed to help writers create better content, including:

Real-time Feedback: Get instant feedback on your writing, including suggestions for grammar, spelling, and style.
One-Click Rewrite: Quickly rewrite sentences or paragraphs to improve clarity, conciseness, and tone.
Tone of Voice Suggestions: Choose from a variety of tone of voice suggestions to match your writing to the intended audience.
Plagiarism Checker: Scan your text for plagiarism and get suggestions for how to avoid it.
Collaboration Tools: Collaborate with other writers and editors on shared documents.
Integrations with Other Tools: Easily integrate Agility Writer with your favorite writing tools and platforms.

Benefits of Using Agility Writer

Agility Writer offers several benefits to writers, including:

Improved Writing Quality: Agility Writer's real-time feedback and one-click rewrite features help writers improve the quality and clarity of their writing.
Increased Productivity: Agility Writer's collaboration tools and integrations with other writing tools help writers save time and increase their productivity.
Reduced Errors: Agility Writer's grammar and plagiarism checkers help writers avoid errors and improve the accuracy of their writing.
Enhanced Creativity: Agility Writer's tone of voice suggestions and other creative features help writers explore new ways to express themselves and engage with their audience.

Pricing

Agility Writer offers a variety of pricing plans to suit different needs and budgets:

Free Plan: The free plan includes basic features like grammar and spell checking, as well as a limited number of rewrites and plagiarism checks.
Standard Plan: The standard plan costs $29 per month and includes all the features of the free plan, plus unlimited rewrites, plagiarism checks, and collaboration tools.
Premium Plan: The premium plan costs $49 per month and includes all the features of the standard plan, plus additional features like priority support and access to a team of writing experts.

User Reviews

Agility Writer has received positive reviews from users, with many praising its ease of use, powerful features, and ability to improve writing quality.

"Agility Writer has been a game-changer for me. It's helped me improve my writing skills and save time on editing." - John Smith, Content Writer
"I love Agility Writer's real-time feedback feature. It's like having a writing coach at my fingertips." - Mary Johnson, Blogger
"Agility Writer is the best AI writing assistant I've used. It's helped me write better copy and improve my marketing results." - Tom Brown, Copywriter

How to Use Agility Writer to Improve Your Writing

Getting started with Agility Writer is easy. Simply create an account and start using the web-based editor or download the desktop app. Once you're logged in, you can start writing or upload a document to get feedback.

Agility Writer's real-time feedback feature will highlight errors and suggest improvements as you type. You can also click the "Rewrite" button to quickly generate different versions of your text.

To use Agility Writer's collaboration tools, simply invite other users to join your document. You can then work together in real time, leaving comments and suggestions for each other.

Conclusion

Agility Writer is a powerful AI-powered writing assistant that can help writers improve their productivity and the quality of their work. With its user-friendly interface, advanced features, and affordable pricing, Agility Writer is a valuable tool for writers of all levels.

Whether you're a content writer, blogger, copywriter, or student, Agility Writer can help you write better content faster and more efficiently. Try it today and see the difference it can make in your writing.

--
You received this message because you are subscribed to the Google Groups "Broadcaster" group.
To unsubscribe from this group and stop receiving emails from it, send an email to broadcaster-news+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/broadcaster-news/d742458a-c78f-435d-bccd-39ce51dd5c7fn%40googlegroups.com.

Monday, January 8, 2024

Water Softeners and Sizing: How to Choose the Right One for Your Home

Water hardness can make everyday tasks a hassle. It leaves soap scum on your shower walls, creates stubborn stains on your dishes, and dries out your skin and hair. The solution? A water softener. But with so many options available, figuring out the right size for your home can be tricky.

Grains of Hardness and Grain Capacity: Breaking Down the Essentials

Water hardness is measured in grains per gallon (GPG). The higher the GPG, the harder your water.

Typical hardness levels:
- Soft: 0-3 GPG
- Slightly hard: 3-6 GPG
- Moderately hard: 6-12 GPG
- Hard: 12-18 GPG
- Very hard: 18+ GPG

Water softeners have a grain capacity, which indicates how many grains of hardness they can remove before needing to regenerate.

Factors Affecting Water Softener Size

Several factors influence the size of water softener you need:

Number of people in your household: More people mean more water usage.
Average daily water consumption: This includes showering, laundry, dishwashing, and other water-related activities.
Water hardness level: The higher the hardness, the larger the softener you'll need.

How to Calculate Grain Capacity

Here's a general formula to estimate the grain capacity you need:

Number of people in household x Average daily water usage (gallons) x Water hardness (GPG) x 7 = Grain capacity

Example: A family of four uses 80 gallons of water per day, with a water hardness of 15 GPG.

4 x 80 x 15 x 7 = 33,600 grains

They would need a softener with a grain capacity of at least 33,600.

Common Size Recommendations:

1-2 people: 20,000-30,000 grains
3-4 people: 30,000-40,000 grains
5+ people: 40,000+ grains

Additional Considerations:

Iron content: If your water has high iron levels, you may need a larger softener.
Water usage patterns: If you have periods of high water usage (e.g., frequent guests, laundry days), consider a larger softener.
Space constraints: Ensure you have adequate space for the softener and its brine tank.

Consulting a Professional for Accurate Recommendations

For the most accurate sizing recommendations, consult a water treatment professional. They can test your water hardness and assess your specific needs.

Remember, choosing the right size water softener is essential for ensuring its effectiveness and efficiency. By understanding the factors involved and following these guidelines, you can select the perfect fit for your home.

Sources:

--
You received this message because you are subscribed to the Google Groups "Broadcaster" group.
To unsubscribe from this group and stop receiving emails from it, send an email to broadcaster-news+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/broadcaster-news/f54e144d-faa7-4607-9df3-428af0a33eb4n%40googlegroups.com.

Friday, January 5, 2024

Best Biodynamic Gardening Courses

Biodynamic gardening goes beyond organic principles to create a truly holistic approach to cultivating life. It blends science and spirituality, recognizing the interconnectedness of all elements within a garden ecosystem. By aligning with cosmic cycles and fostering a deep understanding of nature's rhythms, biodynamic gardeners strive to produce nutrient-rich food, vibrant plants, and a harmonious relationship with the environment.

I recommend that you read this Biodynamic Gardening Book - https://www.amazon.com/Biodynamic-Gardening-Composting-Preparations-Agricultural/dp/B0CLDKZ2GR

Unlocking the Secrets of Biodynamics Through Expert Guidance

Whether you're a seasoned gardener seeking a deeper connection with nature or a beginner eager to explore this sustainable practice, biodynamic gardening courses offer invaluable insights and hands-on experiences. These courses delve into:

Key Principles and Practices:

Understanding the foundations of biodynamic philosophy, developed by Rudolf Steiner in the early 20th century.
Preparing and applying biodynamic preparations, unique compost and herbal remedies that enhance soil health and plant vitality.
Working with the lunar and astrological cycles to guide planting, harvesting, and other gardening activities.
Integrating composting, cover cropping, and other regenerative techniques to build healthy soil ecosystems.
Fostering biodiversity through companion planting and pollinator habitats.
Creating a closed-loop system that minimizes waste and maximizes resource utilization.

Finding the Right Course for Your Needs

Course formats vary to accommodate different learning styles and preferences:

Online Courses:

Biodynamic Association: Online Introduction to Biodynamics
Biodynamic Agricultural College: Online Course in Biodynamic Principles and Practice

In-Person Workshops and Certification Programs:

Pfeiffer Center: Biodynamic Gardening Apprenticeship
Demeter Association: Biodynamic Farmer Training
Local farms and gardening organizations (explore options in your area)

Key Considerations When Selecting a Course:

Instructor experience and expertise in biodynamic methods
Course curriculum and alignment with your learning goals
Format and duration of the course
Location and accessibility
Cost and potential financial assistance

Benefits of Biodynamic Gardening Education:

Deepen your understanding of sustainable agriculture practices
Learn to create a thriving, self-sustaining garden ecosystem
Produce healthier, more nutritious food
Connect with a community of like-minded individuals
Enhance your connection to nature and the cosmos
Contribute to a more sustainable and regenerative food system

Ready to Embark on Your Biodynamic Journey?

Explore the courses mentioned above and connect with biodynamic organizations in your area to discover the perfect learning path. As you delve into this transformative approach to gardening, you'll not only cultivate healthier plants and ecosystems but also nourish a deeper connection with the rhythms of nature and the interconnectedness of all life.

--
You received this message because you are subscribed to the Google Groups "Broadcaster" group.
To unsubscribe from this group and stop receiving emails from it, send an email to broadcaster-news+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/broadcaster-news/9dca31d5-3a15-4765-9630-72866c6fc0ccn%40googlegroups.com.

Best Biodynamic Gardening Book 2024

Biodynamic gardening is an agricultural approach that transcends conventional organic methods. It embraces a holistic philosophy that views the farm or garden as a living organism, interconnected with the cosmos and its rhythms. By working in harmony with these natural cycles, biodynamic practitioners aim to create vibrant, resilient ecosystems that produce nutrient-rich, flavorful food.

Here is the best Biodynamic Gardening book - https://www.amazon.com/Biodynamic-Gardening-Composting-Preparations-Agricultural/dp/B0CLDKZ2GR

Unlocking the Wisdom of Biodynamic Gardening Books

If you're intrigued by this transformative approach to gardening, a wealth of knowledge awaits you in biodynamic gardening books. These books offer comprehensive guidance on:

The Principles of Biodynamic Agriculture: Delve into the foundations of biodynamic philosophy, including the concept of the farm organism, the importance of soil health, and the role of cosmic influences.
Practical Techniques and Preparations: Discover hands-on methods for composting, planting, and harvesting according to biodynamic principles. Learn how to create and apply biodynamic preparations, which are unique herbal and mineral remedies used to enhance soil fertility and plant vitality.
Seasonal Rhythms and Astrological Influences: Explore how to align your gardening practices with the rhythms of the seasons and the cycles of the moon and planets.
Case Studies and Inspirational Stories: Gain insights from experienced biodynamic farmers and gardeners, and find inspiration in their successes and challenges.

Essential Reads for Your Biodynamic Journey

Here are five books that stand out as exceptional resources for aspiring biodynamic gardeners:

Biodynamic Gardening by Monty Waldin (DK Publishing) - This comprehensive guide offers a clear and practical introduction to biodynamic gardening, covering everything from soil preparation to pest control.
Gardening for Life: The Biodynamic Way by Maria Thun (Floris Books) - Thun's classic text delves into the astrological influences on gardening and provides detailed planting calendars based on moon phases.
The Biodynamic Orchard by Ehrenfried Pfeiffer and Michael Maltas (Acres USA) - Learn how to apply biodynamic principles to fruit trees in this in-depth guide.
Moon Gardening by Matt Jackson (Chelsea Green Publishing) - Discover how to harness the power of the moon to enhance your gardening efforts.
What Is Biodynamics?: A Way to Heal and Revitalize the Earth by Rudolf Steiner (SteinerBooks) - Explore the origins of biodynamic agriculture in this foundational work by its founder.

Embarking on Your Biodynamic Journey

Whether you're a seasoned gardener seeking a deeper connection to nature or a newcomer eager to explore a more sustainable approach, biodynamic gardening books offer a path to a fulfilling and transformative gardening experience. Through their pages, you'll discover a world where gardening becomes a practice of reverence for the interconnectedness of all life.

--
You received this message because you are subscribed to the Google Groups "Broadcaster" group.
To unsubscribe from this group and stop receiving emails from it, send an email to broadcaster-news+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/broadcaster-news/e9eb615a-8dc4-407e-bc67-8ed33c5256ban%40googlegroups.com.