Hiding Files in Jpeg Images

In the recently concluded Cryptex (the Hacking Contest at Technozion), in its online avatar posed a question based on this concept..

The concept was explored before itself and been referred to as the Poor Man’s Steganography.

Still no clue what I am talking about..

Try to find out the hidden message in this pic..

Spoiler Alert :

try forcefully extracting the image.

How do we do this..

Its simple.

Step 1 : Get a pic of your choice, say “abc.jpg“.

Step 2 : Open Notepad. Type in your secret message. Name it as some “secret.txt“.

Step 3: Rar the text file. Now you get some “secret.rar“. Put this rar file in the same folder as your image.

Step 4 : Now the trick comes.

Goto Run, and type in cmd.

The Command Prompt comes up.

Navigate to the folder where your image and rar file is located..

Now type in :

copy /b abc.jpg + secret.rar hackthisimage.jpg

The format is copy /b sourceimage + rarfile destinationimage

Step 5 : Now what you obtain is a new image named as hackthisimage.jpg in the same folder.

Extract this image using Winrar to get your secret message!!.

The credit goes to HV

Check out the video tutorial if you are still confused..

Video Tutorial

But remember this is never a good way of encrypting your stuff. Get a good software for that.

Happy hacking!!.

Yahoo Messenger Status Checker

This is a diff method and I found it quite accidentally..
While running an nmap scan over the network, came to notice admdog on port 5101.
Did a quick Google on it..
and came to know that it was the yahoo messenger port.
So even if your friend is invisible running an nmap (provided you know the ip ) you can get to know whether he is online.

But I found this hack to be pretty useful though even better methods are there to check on the Messenger Status.

Googled!!

Google , Google and more Google…

My day starts with Google.. Gmail,Orkut,Analytics the list of google components that I use are endless…

But this post is a take on the lighter side of Google.

Google’s April Fool Day hoaxes are pretty interesting and I almost fell for the Gmail Paper hoax..

A year wise list of Google Hoaxes..

2000: Google MentalPlex

2002: Pigeon Rank

2004: Google Lunar/Copernicus Center

2005: Google Gulp

2006: Google Romance

2007: Gmail Paper

2007: Google TiSP

and finally http://www.googleaprilfools.com/

a 2008 Google page could be showing ” Google announces Ajay George as their new CEO ”

Search engine optimization

Its been awhile since AGP Blog was active.Expect a series of articles starting from today…

SEO as it is popularly known , refers to optimizing your site so that the Search Engines are able to crawl it and your site thus gets a better rank among the results.

A subset of search engine marketing,it is the process of improving the volume and quality of traffic to a web site from search engines via “natural” (“organic” or “algorithmic”) search results.

The two types of SEO techniques are White hat and Black Hat.

(refer Wiki for more)

Now I am going to deal with a set of indispensable SEO Tools and procedures that will ensure your site a better page rank.

Have Google Analytics running on your site.Ask your friends to link up your site.Subscribe to Google Adsense and start making money while your page rank goes up.

Now from a hacker’s point of view…

adding arificial keywords…

Now for my site to increase the rank for keyword for my name,I can have multiple ajay thus making the bot to crawl many number of Ajay’s in the process..

Another method could be Spamdexing in which Link Farming is an interesting method..(Again Wiki it)

Icing on the cake : Seochat.com

A comprehensive collection on all the SEO stuff..

Thats all for now…

Nmap

Nmap is a powerful security scanner and getting acquainted with the usage of this software mite be your first step towards ur hacking career .

Nmap (“Network Mapper”) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. Nmap runs on most types of computers and both console and graphical versions are available. Nmap is free and open source (license).

read more at.. http://insecure.org/nmap/ 

Nmap featured in the Matrix Reloaded

We have all seen many movies like Hackers which pass off ridiculous 3D animated eye-candy scenes as hacking. So I was shocked to find that Trinity does it properly in The Matrix Reloaded [Under $10 at Amazon]. She whips out Nmap version 2.54BETA25, uses it to find a vulnerable SSH server, and then proceeds to exploit it using the SSH1 CRC32 exploit from 2001. Shame on them for being vulnerable (timing notes). Congratulations to everyone who has helped make Nmap successful! And thanks to Jason Algol, Titney, Thorsten Delbrouck, and others for sending pics! Click them for higher-res or see more pics here.

The Complete Trojan List

Many were requesting for this article…

the complete list with the port numbers :