21/02/2015

How to send facebook messages to those who have blocked you

Did you know that its really possible to send the message to the person who has blocked you on Facebook. To your surprise,YES IT IS.
With the increased popularity of facebook, facebook has made this really. Either Call it one of the flaws of facebook or the relaxation given to the people who have just got blocked by someone but still want to maintain the conversation with him/her.
Facebook never closes any option completely. It always lefts an undisclosed alternative for everything. You just have to find that alternative.Today I am bringing one such brilliant alternative to you.

How to Send the Message

For sending the message, all your friends "facebook username" of the person who has blocked you. Obviously, if the person has blocked you, you won't be able to visit his/her profile. But finding the facebook username is really a cakewalk. you can make a new account to find the username or better you can simply ask any of your friend just to tell you the person's facebook username. Once you know the username, You just need to open your email account whether it is associated to your facebook account or not. Sending the message using email is as simple as sending a normal mail to anybody. In the "To" section ,you have to add the person's facebook username. For example your facebook friend have username john.el. So you need to type your friend's username in "To" section but remember don't forget to add @facebook.com after username (john.el@facebook.com) leave subject body empty and then type your message in message body after that click send message and you are done.

How to send facebook messages to those who have blocked you

After you send the email, the message will arrive in the person's facebook message box in the folder named Other and he/she will be able to read out your message like other normal messages he/she receives.
Note: That person won't be able to reply to your messages but will see an immediate option to unblock you and continue the conversation with you. In order to be able to reply you, He/She must follow the same procedure as discussed above.So doing this, you can really increase your chances of getting back in touch with the person whom you have lost the contact with or atleast you can convey your message to the person who doesn't even want to talk to you anymore.

09/01/2015

Make Chemical Fire Without Matches or a Lighter

Make Chemical Fire Without Matches or a Lighter
Learn four ways to make fire using chemical reactions. No matches or lighter are needed to start the fire.
1. Chemical Fire
*. Potassium permanganate
*. Glycerin
*. Water
Add a few drops of glycerin to a few crystals of potassium permanganate. Accelerate the reaction by adding a couple of drops of water.
2. Chemical Fire
*. Acetone
*. Sulfuric acid
*. Potassium permanganate
Soak a tissue with acetone to make it more flammable. Draw sulfuric acid into a glass pipette. Dip the pipette into potassium permanganate so that the tip of the pipette is coated with a few crystals. Dispense the sulfuric acid onto the tissue. The potassium permangante and sulfuric acid mix to produce manganese heptoxide and fire.
3. Chemical Fire
*. Sodium chlorate
*. Sugar
*. Sulfuric acid
Mix a small amount of sodium chlorate and sugar. Initiate the reaction by adding a few drops of sulfuric acid.
4. Chemical Fire
*. Ammonium nitrate powder
*. Finely ground zinc powder
*. Hydrochloric acid
Mix together a small amount of ammonium nitrateand zinc powder. Initiate the reaction by adding a few drops of hydrochloric acid.
Chemical Fire Safety
If you are performing a demonstration of chemical fire using any of these reactions, use very small amounts of the chemicals listed for each project. Wear proper safety gear and work on a fire-safe surface.

08/01/2015

Make Fireballs You Can Hold in Your Hand

Make Fireballs You Can Hold in Your Hand
Fire is made up of light and heated gases from combustion. You can control the temperature of fire by selecting a fuel that burns with a cool flame. If you pour the fuel onto a substance that won't burn, you can make a fireball that you can hold in your hand or juggle. Here are written instructions for making your own handheld fireballs.

Materials Needed to Make Fireballs
*. 2" x 5" strip of cotton cloth (like from a t-shirt)
*. 100% cotton thread.
*. Needle
*. Naphtha lighter fluid (e.g. Ronsonol™)
*. Match or lighter

How to Make a Fireball
*. Thread the needle with cotton thread.
*. Tightly roll the cotton strip into a ball.
*. Pierce the ball with the needle and wrap the ball with the thread.
End by running the needle through the ball one more time and break off the thread.
*. Soak the ball with lighter fluid. Don't soak your hands.
*. Don't ignite the the fireball while you are holding it. Set the ball on a fire-proof surface.
*. If you want to hold the fireball, my recommendation is to pick it up with tongs and carefully/slowly set it on your hand. That way you'll be able to tell if you can take the heat or not. Once you gain some confidence, you can pick the fireball up using your fingers.
*. It's best to use 100% cotton fabric and thread. If the fiber is synthetic (like nylon or polyester) it might burn or melt, with unpleasant consequences.
*. The 'trick' to this demonstration is the fuel. It needs to be naphtha or kerosene. I have had good luck with Ronsonol™ and Zippo™ (not the butane stuff read your ingredient list). Rubbing alcohol (isopropyl alcohol) works, but it burns a little hotter.
*. It's pretty hard to blow the fireball out. You either need to blow hard or else suffocate the flame to extinguish it. You can set a saucepan lid over the fireball.
*. The fireballs are reusable. Put them out when they run out of fuel or else the cotton will burn (you can tell this is happening when the ball starts to blacken and produce sooty smoke). If you get to the point where the cotton itself is burning, the fireball will be too hot to hold. Ideally you want to extinguish the fireball before it consumes all of its fuel. Simply soak it in more lighter fluid and relight it to reuse it.
*. Regarding holding these in your hand or doing tricks with them. The cone of the flame is hot, especially above the ball, however, the fuel burns at a relatively low temperature. The flashpoint of Ronsonol™ brand of naphtha is 6°C or 43° F, with combustion mainly around 400°F. To put that in perspective, touching the fireball is a lot like touching a hot pizza right out of the oven (except without the sticky cheese part).
Fireballs are great fun to make, but like all fire projects, use proper safety precautions and common sense. Don't get burned or set your house or yard on fire. This is a project which requires adult supervision.

29/12/2014

How to Perform Command Injection Attacks

Command injection tutorial
Introduction: Command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application. Command injection attacks are possible when an application passes unsafe user supplied data (forms, cookies, HTTP headers etc.) to a system shell. In this attack, the attacker-supplied operating system commands are usually executed with the privileges of the vulnerable application. Command injection attacks are possible largely due to insufficient input validation.
How to Perform Command Injection Attacks
In this artick, we will talk about the varieties of command injections and how they can be executed. There are a variety of ways to inject shell commands. Assume for a moment that you have found the page, which takes as an argument a filename as input and executes the shell command "cat" against that file. For example, a semicolon was used to separate out one command form another, to indicate that after the cat command completed, another function should be called in the same line. There are a number of ways to string shell commands together to create new commands.
Here are the common operators you can use, as well as examples of how they might be used in an attack:

Redirection Operators
Examples: <, >>, >
These operators redirect either input or output somewhere else on the server. < will make whatever comes after it standard input. Replacing the filename with < filename will not change the output, but could be used to avoid some filters. > redirects command output, and can be used to modify files on the server, or create new ones altogether. Combined with the cat command, it could easily be used to add unix users to the system, or deface the website. Finally, >> appends text to a file and is not much different from the original output modifier, but again can be used to avoid some simplistic detection schemes.

Pipes
Examples: |
Pipes allow the user to chain multiple commands. It will redirect the output of one command into the next. So you can run unlimited commands by chaining them with multiple pipes, such as cat file1 | grep "string".

Inline commands
Examples: ;, $
This is the original example. Putting a semicolon asks the command line to execute everything before the semicolon, then execute everything else as if on a fresh command line.

Logical Operators
Examples: $, &&, ||
These operators perform some logical operation against the data before and after them on the command line.
Common Injection Patterns & Results
Here are the expected results from a number of common injection patterns (appending the below to a given input string, assuming all quotes are correctly paired:
`shell_command` - executes the command
$(shell_command) - executes the command
| shell_command - executes the command and returns the output of the command
|| shell_command - executes the command and returns the output of the command
; shell_command - executes the command and returns the output of the command
&& shell_command executes the command and returns the output of the command
> target_file - overwrites the target file with the output of the previous command
>> target_file - appends the target file with the output of the previous command
< target_file - send contents of target_file to the previous command
- operator - Add additional operations to target command
These examples are only scratching the surface of possible command injection vectors. The full breadth of attack possibilities is dependent upon the underlying function calls. For instance, if an underlying function is using a shell program such as awk, many more attack possibilities arise than laid out here.
Finally, command injection can be more subtle than finding applications which directly call underlying operating system functions. If it is possible to inject code, say PHP code, then you can also perform command injections. Assume you find an application with a PUT vulnerability on a site which is PHP enabled. An attacker could simply upload a PHP file with a single line to have full access to a shell:
<?php
echo
shell_exec('cat '.$_GET[
'command']);
?>
Thus, it should be noted that many types of attacks, including SQL Injection, have shell injection as an end primary goal to gaining control of the server.