tag:blogger.com,1999:blog-355622802012-01-22T23:04:13.034-08:00buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.comBlogger431100tag:blogger.com,1999:blog-35562280.post-49753449350813186692012-01-10T12:54:00.001-08:002012-01-10T13:23:49.209-08:00

The problem with android is that: until now, there hasn't been any Android device that can put its WiFi chipset on monitoring mode. It's a downside especially if you wanted to collect packets from open WiFi network or just to crack encrypted ones. The other problem is that: you need to root your device in order to get sniffers to work. So if you already did the latter, you may find the rest of

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-82800779935207967592011-06-14T16:01:00.001-07:002011-06-14T16:15:50.717-07:00

I just pulled an old video that I made while messing around with ettercap years ago. So I decided to upload it on youtube and post the link here.

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-73549210387949470792011-03-17T08:44:00.000-07:002011-03-17T08:50:57.294-07:00

If you have ever wondered how to get a yahoo messenger that supports voice on android, you can either go to Android Market and search for it; which did not work for me! or download the apk files.You need two files, the first one is the newest(at the moment) yahoo messenger, and the second one the matching version voice and video calling plugin.File 1: http://www.mediafire.com/?0fzg9sk8rb501dm

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com2tag:blogger.com,1999:blog-35562280.post-21701201414511751552010-09-05T14:54:00.000-07:002010-09-05T15:13:05.029-07:00

I have been hesitating for months about using a 64-bit equivalent of my trusted old 32-bit Ubuntu, I tried the switch once with my HP Compaq 6720 (6720s) laptop, but it wasn't successful at any level, because there seemed to be an issue with its hardware that made using the two CPU cores at the same time impossible, so I had to login using the command acpi=nolapic which essentially turns off

circoficushttp://www.blogger.com/profile/08605562338002477099noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-54457805106324035512009-08-24T14:20:00.002-07:002009-08-24T14:27:02.307-07:00

I have added a donation button on the right side of the screen, please if you feel that the blog has helped you and you can put some money for donation to Bug-Code the team will be very grateful, whatever the amount you want to donate it will make a difference.Regards,Bug-Code Team

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com1tag:blogger.com,1999:blog-35562280.post-21510041299635938832009-05-10T09:49:00.000-07:002009-05-10T10:20:09.695-07:00

If you are using multiple connections (like to get internet. networks..etc) you may find it boring that each time you have to change settings using GUI, MS "netsh" has the answers(not advertising for it!)..see the following examples (change the "Local Area Connection" to your connection name, and substitute the xxx with the ip number accordingly!):netsh int ip set address name="Local Area

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-89079105454924719682008-12-17T23:27:00.000-08:002008-12-18T00:03:56.555-08:00

Firefox was one of the first browsers to have this neat feature of incorporating a textbox in which u enter search terms to look for instead of visiting the search engine site and typing ur keywords in the site's search area, this feature saves alot of inconvenience and little time...The basis for this feature is that there is a folder in firefox called "searchplugins" which contains a plethora

circoficushttp://www.blogger.com/profile/08605562338002477099noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-91546309810238470762008-12-17T10:53:00.000-08:002008-12-17T11:14:25.511-08:00

I was having hard time trying to add specific dll with certain function to an executable PE file until I reached two great tuts about this subjecthere and hereThe first thing we have to have extra space in that PE file, for me I am accustomed with adding new section using some article from Sunshine( the same site of the latter link) but the problem was the conflict that I faced while

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-42790268821672854272008-12-09T23:49:00.000-08:002008-12-10T08:30:24.794-08:00

After aching my head with winedump/winebuild to figure out a way to add dynamic-libraries to Wine I found that I can add whatever dll directly to wine simulated windows directory./home/[user]/.wine/drive_c/windows/system32Where [users] substitued by by user name of the system.Just copying the dll to that path and you got it working or putting the required dll in the same directory of that

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-16126934867146477092008-08-19T15:11:00.000-07:002008-08-19T15:36:49.908-07:00

After some time searching on internet I tried to find a suitable php script support attachment in a way that is well established through html form .I found several examples but it didnt satisfy my needs . So after a while of copying and pasting from the internet free source php snippets codes ,and after some reading about php (reflecting my bad background concerning that language) I finally

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com1tag:blogger.com,1999:blog-35562280.post-29240835696614671752008-04-08T14:39:00.000-07:002008-04-08T14:48:21.507-07:00

Ever installed linux, then had to install windows or fix windows by reinstalling it, only to see that the Grub menu u used to log into linux from has disappeared?This has happened to me all too many times, therefore i put the instructions here for future reference, as a friend has advised me to do...The removal of the grub boot menu happens because it resides on Master boot Record(MBR) part of

circoficushttp://www.blogger.com/profile/08605562338002477099noreply@blogger.com1tag:blogger.com,1999:blog-35562280.post-56810419545273473162008-04-03T08:39:00.000-07:002008-04-03T09:32:34.385-07:00

Long time ago i posted about Pro-Rat, and how bad guys(!?) use it to hack into others pcs!!Now what about retrieving information about those evil people :Daccording to the rat server i got (1.9 FIX-18):This Registry :HKEY_CURRENT_USER\Software\Microsoft\Windows NT Script Host\Microsoft DxDiag\WinSettingsInside it resides the info u need, all the info are encrypted by xor!!! in this occasion xored

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-34278495396504264732007-12-14T18:21:00.000-08:002007-12-14T18:42:42.257-08:00

AP router firmware was one of my first choices to install as a substitute to the original firmware of my senao ECB-3220 accesspoint, because it offer much more features that the original firmware, some of which, but not restricted to: the ability to act as a router from both interfaces, ie the client side can be from the wireless end (ie the LAN port is from the ISP) or the client side can be

circoficushttp://www.blogger.com/profile/08605562338002477099noreply@blogger.com3tag:blogger.com,1999:blog-35562280.post-48994405084090784132007-12-06T23:30:00.000-08:002007-12-06T12:31:07.135-08:00

Today I manged to buy 1024 MB DIM2 and installed to my laptop which already got 512mb ram, I made a simple movie demonstrating it.

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-79921520975131474252007-12-03T15:41:00.000-08:002007-12-03T16:29:11.643-08:00

Seems that I had my own share of hardware dreadful trips!So circoficus would not be the alone any more in that field. Today I had the most dreadful event regarding computer hardware ever, While I was using my laptop something happened that made me rush into it(electrical power came!!) when I didnt realize that I am going to make the biggest mistakes of my life.Hearing sound of a falling object ,

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com3tag:blogger.com,1999:blog-35562280.post-20274520210494610462007-11-07T07:30:00.000-08:002007-11-07T08:09:17.291-08:00

Today while I was receiving all these lame tries (from several different forums)to hack people *puters using several well known malwares ,I decided to look inside what these files would carry.First the file was packed by "Win32 Cabinet Self-Extractor" a simple tool in the hands of all people.After using "resource hacker" I found the RC_DATA resource which contains the executable file that to be

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-56466566250435959802007-10-18T04:32:00.000-07:002007-10-18T04:33:39.278-07:00

Who hasn't seen StormWorm in the wild, It reached most of the email addresses in the world ,one of them was my email."The malware attacks behind this botnet have been relentless all year, using a wide range of clever social engineering lures to trick Windows users into downloading executable files with rootkit components. By some accounts, the malware has successfully created a massive botnet

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-89481033998178816502007-09-02T10:18:00.000-07:002007-09-02T10:35:56.379-07:00

Today I noticed that youtube has changed its streaming page alittle bit, so the "youtube link revealer" I coded won't work anymore, I am too pessimistic about updating the program since youtube may changetheir page over and over again,the change was simple;so you can still use the method before a handcraft method to download the flv file since the 't' and 'video_id' values still the same.Here I

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-9312282446891434912007-08-31T13:05:00.000-07:002007-09-01T04:14:11.684-07:00

I dont know when did yahoo start this new (for me) policy, it is regarding yahoo messenger channels, the last time as I remember the channels were riddled with bots,spambots,worms...etc.Until today I discovered that they have changed the channels a little bit,they put their own bot, "yahoo messenger admin", where it supervise who gets in,so in order to chat in a channel you must verify your

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-7926573643820787812007-08-19T17:48:00.001-07:002007-10-20T00:18:30.117-07:00

Some proprietary firmwares are available to provide alot of useful features and options for the RTL8186-based accesspoints. Mine is Senao/Engenius NCB/ECB-3220. From examining the log produced by the firmware (Management->Log), one can see several lines mentioning the firmware, eg:8186NIC Ethernet driver v0.0.5 (Mar 3, 2006)rtl8186_crypto_init()...One of the most popular proprietary firmwares is

circoficushttp://www.blogger.com/profile/08605562338002477099noreply@blogger.com8tag:blogger.com,1999:blog-35562280.post-83582825690036025852007-08-11T20:18:00.000-07:002007-08-26T19:36:23.474-07:00

It all started when i was thinking about using the linux shell inside my AP, which sounded (and still) like a very exciting idea since i could change things directly from the AP without the need for the very limited web interface.however, since this required a cable of some sort and due to my poor ability to arrange such a tool i unwillingly dropped the AP shell idea, until i found out of

circoficushttp://www.blogger.com/profile/08605562338002477099noreply@blogger.com2tag:blogger.com,1999:blog-35562280.post-7331994543500166622007-07-29T03:29:00.000-07:002007-07-29T03:57:17.425-07:00

In order to create a divx movie out of your ripped off flv file from any streaming site , you will need :1- DrDivx with Divx codec2- ffdshow and configure VFW after completing installation as shownNote :While Installing check every FLV1 check box ,better check them all.now You will have DrDivx able to convert flv movies to divx.

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com1tag:blogger.com,1999:blog-35562280.post-79000766618824488992007-05-03T15:38:00.000-07:002007-05-03T15:41:50.403-07:00

If u wanted to create a simple accesspoint to make ur own accesspoint-based wireless network for watever purpose then this is for u...however by no means accesspoints are the only way to make wireless networks, an ad-hoc network is a wireless network that doesnt have a central accesspoint but is based on a peer-to-peer communication...Creating the AP can be done on different OSs, on the linux

circoficushttp://www.blogger.com/profile/08605562338002477099noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-65163784927941747432007-04-28T12:11:00.000-07:002007-04-28T12:48:27.200-07:00

It is not the Blue pill neither SubVirt ,it is the new rootkit which is coded by indians fellows,They presented VBootKit which works on vista (see security focus Column...)Unfortunatily the only source code available is a BOOTKits which they are designed for (200,XP,2003) and not the vBootKit(Vista designed one).The Idea behind boot kit that it doesnt require the Operating System to work , it

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-21402314032032070122007-04-15T11:35:00.000-07:002007-04-15T12:11:34.876-07:00

Breaking the boredom... here I present:Youtube Movie file link revealer v.1.0 (youtube movie link grabber)It is coded purily in ASM you can find the link to binary :http://rawbinsoft.googlepages.com/download.htmlDirect Link:http://rawbinsoft.googlepages.com/youtube.zipsnapshoot:One day I will publish the source code of it, as soon as I make it more tidy :pWarning:The Author will not be

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-73138192293952863152007-03-25T07:32:00.000-07:002007-03-25T07:50:17.334-07:00

Etttercap is a powerful Metworking tool and for Man In the Middle Attacks, It is widely installed on Linux systems.Lately I found links to Ettercap Windows binaries :SourceForge.net Win32 Binary list(Unofficial)Pandora-Security Forum LinkOr just Search Google.com for "ettercap-NG-0.7.3-win32"And you need To Download WinPCap in order to run ettercap on windowsWinPCap Download PageI tested

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com3tag:blogger.com,1999:blog-35562280.post-81351395838887937702007-03-23T12:22:00.000-07:002007-03-23T12:41:52.871-07:00

Used Internet Explorer 7 ,yet?Well I am using it and something bugged me is that whenever it cant find a site it switch to some search page... I found the Registry Key for it that will stop that lame if you delete itIN--->>HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopesRemove that REG_SZ value----->>URL="Some value"

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com3tag:blogger.com,1999:blog-35562280.post-87336306411583775032007-03-18T11:01:00.000-07:002007-03-18T12:15:15.434-07:00

It is easy and simple to get hi5.com video clips shared by their users downloaded , here I will introduce simple steps to download that flv file :-Get to the page where the streaming is about to begin ,duh!!-Either use 'View page source' or from "Embed:" value in the page .-Find that part where hi5.XXX.download.videoegg.com/gidXXX/cidXXXX/JV/SN/XXXXX..etc-Now get that URL add 'http://' in the

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-21690432886061993622007-03-17T00:16:00.000-07:002007-03-17T09:59:00.124-07:00

It seems that Symantec Anti-virus company made a youtube channel, I found it in some link in one of their blogging articles.There is something I regard it lame !!,It may be called PoC(as Circoficus would call it :lol:) it was entitled "Vista Speech Recognition Attack" ... Funny way to attack people's vista installed machines, See the following video .

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-66409560176043158002007-03-12T14:26:00.000-07:002007-03-12T14:40:25.068-07:00

I was testing how to implement code execution or storing data in stack I found that using forward pointer from esp e.g.: add esp,4 will not help for large size codes/data cause it result in Access violation ,so instead using a backward pointer from esp e.g sub esp,100h is better and I think it is more reliable .Another thing regarding code execution in stack ,I heard vista will not let that

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-12245310588436605672007-02-28T03:24:00.000-08:002007-02-28T08:44:33.929-08:00

Some WMV files r protected using a microsoft DRM version 2, however this version is not the only one out there and one must check whether its this version or not before attempting to crack it...first of all, u have to have the key, since u cannot simply crack any protected content whereever its found...if u r using WMP version 10 u should switch to 9, this is done by removing it from add/revome

circoficushttp://www.blogger.com/profile/08605562338002477099noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-54600551976391716942007-02-27T04:05:00.000-08:002007-02-27T04:36:49.541-08:00

I use YMSGR rarily ..cause I hate it , but once I recieved this message from a friend ,it was a link to Miss world something picture donno, I knew from the first glance(smart me) it was a stupid yahoo messenger now adays worms :)The funny thing the attacker used a registered domain with .info .And again used a .jpg contained html to redirect the page to the index,where a series of decrypting and

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-75645052304250156642007-02-03T06:56:00.000-08:002007-02-07T01:22:56.607-08:00

It's been a while since the last time I submit a post. Life getting ugly day by day...Things are changing ,so I am some how busy more than ever before, but wait,I always do have time to code even if the apocolypse is right now :)Remember my previous post on using stack instead of data section, well here I use stack to put my code there and call it as a function ,see next:;-----------------------

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com1tag:blogger.com,1999:blog-35562280.post-43879599161440766852006-12-16T04:12:00.000-08:002006-12-16T04:21:37.676-08:00

It is a simple program created in my spare time ,It scans ip address for listening TCP ports also I am intending to add UDP too in future generations maybe .You can get the download page from http://rawbinsoft.googlepages.com/download.htmlAny bugs couldbe reported by sending an email to:rawbinsoft[at]gmail[dot]com ,Subject: port scanner.

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-49728761932994966672006-12-10T13:28:00.000-08:002007-03-18T11:18:30.061-07:00

Wasting time and nothing else I do these days apart from daily horror living in Iraq ,I decided to post some of the stuff I learned long time ago .It is about Streaming SWF player ,With my Internet Connection it is impossible to stream any shit,so I made a series of SWF decompiling procedures and found some info that helped me to get the movie downloadable URL. you need flv-player to play the

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com2tag:blogger.com,1999:blog-35562280.post-1164742994261175702006-11-28T11:33:00.000-08:002006-12-03T12:20:26.143-08:00

Using process monitor from sysinternals [MS - property currently ] I found that dap checks specific registry key for its downloading file ,so here is what you can do to backup a dap file [DAP 8 was used in this article] : -Go to registry editor [run->regedit] and find this key [HKEY_CURRENT_USER\Software\SpeedBit\Download Accelerator\FileList\] here you can find various CLSID key names relevant

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-1163442582197149662006-11-13T10:22:00.000-08:002006-12-03T12:24:58.318-08:00

call @fdb "hello!! marhaba :) ",0@@:invoke MessageBox,0,[esp+8],0,0pop eaxret

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-1163176574416099592006-11-10T07:56:00.000-08:002006-11-10T08:45:40.296-08:00

SEH[Structured Exception Handling] it is a routine to carry out handling errors in our program rather than the system ,take windows for example it is by default shows an error message when ever your program tries to read from non-accessable memory ,do int 3 ...etc for more informations [see wikipedia or Microsoft System Journal]I always did the following inorder to setup SEH :assume fs:

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com1tag:blogger.com,1999:blog-35562280.post-1162806440112463872006-11-06T01:31:00.001-08:002006-11-07T18:08:45.320-08:00

Months ago someone asked me that if the login picture(animated one) of Yahoo Instant Messenger changeable or not ,that time I was not interested indeed ,I thought it is something to do with yahoo binaries or something like that, today I was messing up with yahoo trying to see what is all that buzz about it especially in tmy country see some of yahoo messenger tools that someone interested to

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com3tag:blogger.com,1999:blog-35562280.post-1162734606727288982006-11-05T05:40:00.000-08:002006-11-05T06:07:13.236-08:00

Hey there ,Today I was messing around with esp (again) and found a funny way to create an infinite loop :)call @f@@:sub dword ptr [esp],5 ;where call @f takes five bytes!invoke Sleep,1000retOf course an infinite loop could be something like this :@@:invoke Sleep,1000jmp @bI put the Sleep() so as not to consume 100% cpu resources ,so you can simply ommit it, any other thoughts and code snippets I

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-1160491327241505452006-10-10T07:17:00.000-07:002006-10-17T10:07:42.353-07:00

Today I was trying to restore my old desktop shortcut on taskbar,which I mistakingly removed ,I tried to get it back but all in vaine(I didnt use google till now) I was actually using [start key]+D to get desktop as a short cut,but I wanted that shortcut link back,I saw my other computer to see what was that link cos it is not a usual short cut created by simple right click--->create shortcut

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-1160337892305782972006-10-08T12:49:00.000-07:002006-10-11T04:27:53.503-07:00

Greetings miserable peopl*[if you are not miserable you are not welocmed here :) ]Couple of days ago I figured out a very distinctive way to use stack memory as your own data memory storage ,downsides that it will be a brainfuck to you in building large codes,and another thing each 'push' puts 4 bytes in the stack memory so for large sentences then you need more than one push ! .;code sample

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0tag:blogger.com,1999:blog-35562280.post-1160071946133119922006-10-05T11:04:00.000-07:002006-11-21T12:04:47.110-08:00

This is my first post in here (duh!) and this blog will be dedicated to publish my daily experience in computers ,as you will notice most of the things I discover was just a hobby nothing less nothing more ....you can still find my real me on "??XxxX??" .For people who knows me I say this is the new move from me,I am taking this move so as to pass the rawbinsoft project...and make this a real

buggycoderhttp://www.blogger.com/profile/01123265508516933070noreply@blogger.com0