Tips & Tricks: Tutorials

Showing posts with label Tutorials. Show all posts

How to Jailbreak iPhone 4.3.2 on Windows and Mac Using Redsn0w 0.9.6

If you don’t care about baseband upgrade, the current latest version of Redsn0w 0.9.6 can also jailbreak iOS 4.3.2 for both Windows and Mac users on iPhone 4, 3GS, iPad, and iPod touch 4G/3G.

But just like the PwnageTool jailbreak, Redsn0w 0.9.6 too is limited to tethered boot only, which means that you will have to boot your iOS device in tethered state on every reboot.

Cydia running on iOS 4.3.2, iPhone 4 (GSM)

NOTE: Those of you who rely on a carrier unlock MUST STAY AWAY from Redsn0w and stock iOS 4.3.2 firmware. Also, the patches for 4.3.2 are said to be broken on this version of Redsn0w. PwnageTool 4.3 with 4.3.2 PwnageTool bundles is the recommended way to go

How to jailbreak iOS 4.3.2 using Redsn0w on Windows and Mac:

Step 1: Download iOS 4.3.2 and iOS 4.3.1 (required by Redsn0w 0.9.6 for 4.3.2 jailbreak) for your version of iOS device.

Step 2: Update/Restore to iOS 4.3.2 firmware using the IPSW file you just downloaded via iTunes 10.2.1.

Step 3: Start Redsn0w and point it to the official iOS 4.3.1 firmware file (NOT iOS 4.3.2 file).

Step 4: Now select “Install Cydia” and click “Next”. Optionally (if available), you can also select any other option you like.

Step 5: Now make sure your device is both OFF and PLUGGED IN to the computer before you click “Next”.

At this stage you will be presented with a screen where you will be guided on how to enter DFU mode. Quickly hold “Power” button and then while holding the “Power” button, you will now have to hold “Home” button too. Now after few seconds release “Power” button but keep holding “Home” button until installation begins.

Step 6: Sit back and enjoy while Redsn0w does the rest for you. Once done, your iPhone, iPad or iPod touch will restart automatically and you will find it fully jailbroken on the latest iOS 4.3.2 firmware.

Step 7: Now from here onwards, whenever you want to do anything related to jailbreak like SSHing into your device, or running Cydia, you must first run your device in the so called “jailbroken state” on every reboot by using “Just boot tethered right now” option in Redsn0w.

Download iOS 4.3.1 for iPhone 4, 3GS, 3G, iPad, iPod touch
Download iOS 4.3.2 for iPhone 4, 3GS, 3G, iPad, iPod touch
Download Redsn0w 0.9.6rc12 for Windows
Download Redsn0w 0.9.6rc12 for Mac
Download iTunes 10.2.1 for Windows or Mac

DNS Poisoning Tutorial

This is an introduction to DNS poisoning which also includes an example of quite a nifty application of it using the IP Experiment. It’s purely educational, so I’m not responsible for how you use the information in it.

To start, you’ll need

• A computer running Linux (Ubuntu in my case)

• A basic understanding of how the Domain Name System (DNS) works.

Note that this is a more advanced topic; don’t try this if you don’t know what you’re doing.

Why DNS?

The DNS provides a way for computers to translate the domain names we see to the physical IPs they represent. When you load a webpage, your browser will ask its DNS server for the IP of the host you requested, and the server will respond. Your browser will then request the webpage from the server with the IP address that the DNS server supplied.

Here’s a pretty diagram to help explain it

google dns DNS Poisoning Tutorial

If we can find a way to tell the client the wrong IP address, and give them the IP of a malicious server instead, we can do some damage.

Malicious DNS Server

So if we want to send clients to a malicious web server, first we need to tell them its IP, and so we need to set up a malicious DNS server.

The server I’ve selected is dnsmasq – its lightweight and the only one that works for this purpose (that I’ve found)

To install dnsmasq on Ubuntu, run sudo apt-get install dnsmasq, or on other distributions of Linux, use the appropriate package manager.

Once you’ve installed it you can go and edit the configuration file (/etc/dnsmasq.conf)

sudo gedit /etc/dnsmasq.conf

The values in there should be sufficient for most purposes. What we want to do is hard-code some IPs for certain servers we want to spoof

The format for this is address=/HOST/IP

So for example;

address=/facebook.com/63.63.63.63

where 63.63.63.63 is the IP of your malicious web server

Save the file and restart dnsmasq by running

sudo /etc/init.d/dnsmasq restart

You now have a DNS server running which will redirect requests for facebook.com to 63.63.63.63

Malicious Web Server

You probably already have a web server installed. If not, install apache. This is pretty basic, so I won’t cover it here.

There are a couple of things you can do with the web server. It will be getting all the traffic intended for the orignal website, so the most likely cause of action would be to set up some sort of phishing site

I’ll presume you know how to do that though

Another alternative is to set up some sort of transparent proxy which logs all activity. I might come back to this in the future.

I Can Be Ur DNS Server Plz?

An alternative is to, instead of a spoof webserver, set up a Metasploit browser_autopwn module . You can have lots of fun with that

But how do you get a victim? Well this is where my project, the IP Experiment could come in handy

If you don’t know, the IP Experiment basically harvests people’s IPs through websites such as forums and scans them for open ports. A surprising number of these IPs have port 80 open and more often that not, that leads straight to a router configuration mini-site. ‘Admin’ and ‘password’ will get you far in life; its fairly easy to login and change the DNS settings, and BOOM. You have a victim!

The same techniques can be applied to in many different ways.

Enjoy.......

How to Hack/Cheat almost any Flash Game (Netlog, Facebook, ...)

Credits : DerRoteBlitz1998

Netlog updated the game and obfuscated the code, hence new hex values are needed (scroll down)
The current version you get from Netlog look totally different compared to the version you see in the video, but I hope you can still use it as example how the hacking Flash games generally works.

If you don't follow the tutorial step by step and want to try the cheat right ahead use this values for search and replace use:
2561cb02d211270000
4b61cb02d211270000*

The software used in the video:

HxD:
http://mh-nexus.de/en/hxd/

Compress/Decompress SWF-Files:
http://www.buraks.com/swifty/swfc.html

SWF Decompiler:
http://www.sothink.com/

---

Of course there are other products that work just as well.
Decompiler and Decompresser: http://www.dcomsoft.com/
My favorite Hex editor: www.winhex.com
A cool Action/AIR disassembler (Free):
http://www.docsultant.com/nemo440/

ActionScript Virtual Machine 2 Overview:
www.adobe.com/devnet/actionscript/articles/avm2overview.pdf

25 Stunning Photoshop Fire & Explosion Tutorials

Photoshop tutorials help a lot for improving the design skills. Besides learning something totally new, it is also possible to findout the other ways of creating the same effects.
Fire, flames or explosion are frequently used effects in everyday design. In general, they look hard to implement, specially to create a quality one.
Here are 25 stunning fire & explosion Photoshop tutorials which describe the steps well, have beautiful outputs & shows that such effects are not that difficult to create.