Download (PPTX, 720.13KB)

Download (PPTX, 763.95KB)

Log On to Windows

    User name: _____________

    Password:  _____________

WARNING :

Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the “Changing Keys and Values” Help topic in Registry Editor (Regedit.exe) or the “Add and Delete Information in the Registry” and “Edit Registry Data” Help topics in Regedt32.exe. Note that you should back up the registry before you edit it. If you are running Windows NT or Windows 2000, you should also update your Emergency Repair Disk (ERD).

Use the classic logon screen

To temporarily use the classic logon screen, press CTRL+ALT+DEL twice on the Welcome logon screen.

To configure Windows XP to use the classic logon and shutdown screens for every logon session, do the following:

1. Click Start , and then click Control Panel .

1. Double-click User Accounts .

1. Click Change the way users log on or off .

1. Click to clear the Use the Welcome screen check box.

NOTE : If you disable the Welcome logon screen, you also disable the Fast User Switching option.

Require users to press CTRL+ALT+DEL before the classic logon is displayed

If you want to set up a requirement for a user to press CTRL+ALT+DEL before the classic logon is displayed, in the same manner as it behaves on Windows XP Server:

1. Click Start , click Run , type: regedit , and then click OK .

1. Select the Winlogon subkey at the following registry location:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

3. Click Edit , click New , and then click DWORD value .
4. Change the value name to “DisableCAD” (without the quotes) and press ENTER.

3. Keep the data value set to 0 which is displayed as 0×00000000(0).

This tutorial contains step-by-step instructions on how install TrueCrypt on windows XP.

• First off all download TrueCrypt from this link: http://www.truecrypt.org/downloads

• move down to this window

• After that double click on TrueCrypt exe amd after that click on next button.

• Now select Install and click on next button.

• After this on next window select required or all options and click next button.

• On next window click Install button.

• After that installation will start.

• Now click on ok button.

• If you want  to learn about TrueCrypt click on yes button. If you dont want to learn click on NO button.

• Now click on the Finish button and your TrueCrypt installation is complete.

#vi /etc/ssh/sshd_config
######Look for the following line:
#Port 22
######Change the port to
Port 3210
#### Save sshd_config file with this command
:wq!

Restart SSH services with this command

#service sshd restart
or
#/etc/init.d/sshd restart

Try to connect to your server via putty, but you need to change the ssh default port to 3310.

It detects hidden processes by using three techniques:

• The proc technique consists of comparing /proc with the output of /bin/ps.
  The sys technique consists of comparing information gathered from /bin/ps with information gathered from system calls.
• The brute technique consists of bruteforcing the all process IDs. This technique is only available on Linux 2.6 kernels.
• Most rootkits use the power of the kernel to hide themselves, they are only visible from within the kernel. You can use unhide or tool such as rkhunter to scan for rootkits, backdoors and possible local exploits.

Install UNHIDE

If you are using ubuntu / debian linux you can enter this command below:

#apt-get install unhide

If you are using FreeBSD / unix you can install it using this command below :

#cd /usr/ports/security/unhide
#make install clean

How to use UNHIDE

unhide-tcp is a tool that identifies TCP/UDP ports that are listening but are not listed in /bin/netstat through brute forcing of all TCP/UDP ports available.

You can use it as follows:

# unhide-posix proc
# unhide-posix sys
OR
# unhide-linux26 proc
# unhide-linux26 sys
# unhide-linux26 brute

Sample outputs:

Unhide 20100201
http://www.security-projects.com/?Unhide
[*]Searching for Hidden processes through kill(..,0) scanning
[*]Searching for Hidden processes through  comparison of results of system calls
[*]Searching for Hidden processes through getpriority() scanning
[*]Searching for Hidden processes through getpgid() scanning
[*]Searching for Hidden processes through getsid() scanning
[*]Searching for Hidden processes through sched_getaffinity() scanning
[*]Searching for Hidden processes through sched_getparam() scanning
[*]Searching for Hidden processes through sched_getscheduler() scanning
[*]Searching for Hidden processes through sched_rr_get_interval() scanning
[*]Searching for Hidden processes through sysinfo() scanning
HIDDEN Processes Found: 1

If you found something interesting:

# unhide-tcp

Sample outputs:

Unhide 20100201
http://www.security-projects.com/?Unhide
Starting TCP checking
Found Hidden port that not appears in netstat: 1048
Found Hidden port that not appears in netstat: 1049
Found Hidden port that not appears in netstat: 1050
Starting UDP checking

The netstat -tulpn or ss commands displayed nothing about the hidden TCP ports # 1048, 1049, and 1050:

# netstat -tulpn | grep 1048
# ss -lp
# ss -l | grep 1048

Disable Exec Shield protection

Login as root
Type the following command below :

# sysctl -w kernel.exec-shield=0

You can disable it permanently by adding following line to /etc/sysctl.conf file:

# vi /etc/sysctl.conf
kernel.exec-shield=0

Save and close the file.

Note :
Exec Shield disabling is not recommended one.

Exec Shield protection can also simply disabled via GRUB loader

Add up following lines in grub.conf

# vi /etc/grub.conf
Modify / append exec-shield=0 parameter as follows:
kernel /vmlinuz-2.6.8 ro root=LABEL=/ exec-shield=0

Close and save the file.

Enable ExecShield Protection Against Buffer Overflows

Open your /etc/sysctl.conf file:
#

vi /etc/sysctl.conf

#### Add the following lines:

kernel.exec-shield = 1
kernel.randomize_va_space = 1

Save and close the file.
The First line will enable ExecShield protection and second line will enable random placement of virtual memory regions protection.

To load sysctl without reboot enter the command given below:

# sysctl -p

Telnet is an abbreviation of Telecommunication Network, which is an old network protocol. This protocol is used for remote host connection. It provides a two way interactive command / console line interface.
By default telnet is not enabled in windows. Telnet command will produce an error that telnet is not recognized as an internal or external command.

Click Start Menu, type “cmd” in the search box, right-click cmd command. And choose Run as administrator from the context menu.

You will see a command line console then
Type Telnet

Login into your Windows 7 with administrator access
Click Start >> Control Panel >> Programs >> Programs and Features >> Turn Windows Features On or Off >> Check Telnet client >> Press “Enter”

After you have Click OK button.
Then verify rather telnet is working or not.

You will see a result as shown below.

db : wpmu
user : wpmu
pass : wpmupass

Download WordPress MU

http://mu.wordpress.org/download/ Extract all files into desired folder

ex: http://www.yourdomain.com/blogs/

Begin installation

Point your browser to whichever directory you extracted your files to (ex: http://www.yourdomain.com/blogs/). The index.php file will load automatically “Installing WordPress µ” screen. You required ti fill some forms before proceeding.

change permissions

Delete .htaccess or move .htaccess to .htaccess-bak. change permissions on the public_html and wp-content directories. If you’re using FileZilla for FireFTP or similar, just right click on the folders and check all the boxes to change to 777

subdomains or subdirectories

Select whether you want the blog addresses for the install to be subdomains or subdirectories.

Database details required WordPress MU installation

Fill in your database name, username, and database password, as requested.

installation finished

If all goes well, you should see this happy screen reminding you to reset your directory permissions to 755.

Copy the password

Copy the password it generates for you and login. Immediately change your password to something better that you’ll remember.

Default Display

You’re finished! Your site should be fully installed now. It will display the default theme and will look something like this