Showing posts with label Windows. Show all posts
Showing posts with label Windows. Show all posts

Tuesday, March 03, 2009

CyberXP Xtreme










CyberXP Xtreme

CyberXP Xtreme - SP3 - Final - February 2009 Genuine
Bootable CD ISO | English | 514MB

"The fastest and coolest windows yet..."


RELEASE INFO
Release Date .... February 2009
Program Type .... OS
Platform ........ Windows XP Professional
Language ........ English
Image Type ...... ISO
Size............. 514MB

INSTALL NOTES
1. Unrar and burn with Nero/UltraISO
2. License Product key intergated.

Themes Added:
VistaVG Black [Default] + VistaVG Blue

Tweaks:
over 60 reg tweaks

Intergated:
AIO Net. Framework Pack
Adobe Flash AIO
Google Chrome 0.3.154.0
Foxit Reader 2.3.3309
Nero Micro
NNS Genuine 2.5
Notepad+ 4.92
Firefox 3.0.6
VLC 0.9.2
Internet Explorer 7
Windows Media Player 11
WinRAR 3.71
Reapers CPUZ 1.48
Kaspersky Internet Security 2009

Official discussion forum:

http://cyberwarez.info/forum/cyberwarez-os-centre/

Downloads:

http://uploaded.to/file/owogs8/Cyber_Xp_Final_Feb2009_By_SANDiP.part1.rar
http://uploaded.to/file/6xgx4n/Cyber_Xp_Final_Feb2009_By_SANDiP.part2.rar
http://uploaded.to/file/p80gxe/Cyber_Xp_Final_Feb2009_By_SANDiP.part3.rar
http://uploaded.to/file/qsb9rp/Cyber_Xp_Final_Feb2009_By_SANDiP.part4.rar
http://uploaded.to/file/bxpj55/Cyber_Xp_Final_Feb2009_By_SANDiP.part5.rar

Wednesday, January 28, 2009

TinyXP Rev09 SP3 by eXPer1ence

________________________________________________________

eXPerience Presents...

Windows TinyXP Rev09
________________________________________________________

Thank you for trying TinyXP Rev09...

To install Windows TinyXP from this CD, set your PC up so it will boot from the CD-ROM in the PC's BIOS.

You cannot install TinyXP as an "upgrade" from within Windows.

This TinyXP now has a "Repair Option" (Option 9) where you can install Windows the way you want, your own username, regional and language options etc. One file was hacked in this untweaked "attended" version so that you can see the product key on the actual installation screen as you install Windows. The hacked file is for installation purposes only and never ends up on your system. This #9 option in the boot menu for XP is the same as option #2 except in #2 it is an unattended installation and in #9 it is a standard install where you need to click next, etc.

Or you can choose any of the other eight different flavours of TinyXP.
Options 1 to 8 are all unattended and vary in size and whether they install with the added drivers or not.

Only install TinyXP onto a freshly formatted partition or hard disk. There is no upgrade option available in TinyXP, because the option is removed. You do not need any product key in this release - the installation of TinyXP is unattended, once you choose the drive or partition on which to install TinyXP.

Even on option nine, the product key is filled in for you on the screen, you simply click next without having to type a key in.

All installations are set to US English.

________________________________________________________

When you boot from this CD you have the following options:

Choosing #1 at the main menu, gives you the following menu:

1 - TinyXP With IE/OE/WMP (With Added Driverpacks)
2 - TinyXP With IE/OE/WMP (Without Added Driverpacks)
3 - TinyXP Without IE/OE/WMP (With Added Driverpacks)
4 - TinyXP Without IE/OE/WMP (Without Added Driverpacks)
5 - TinyXP BARE With IE/OE/WMP (With Added Driverpacks)
6 - TinyXP BARE With IE/OE/WMP (Without Added Driverpacks)
7 - TinyXP BARE Without IE/OE/WMP (With Added Driverpacks)
8 - TinyXP BARE Without IE/OE/WMP (Without Added Driverpacks)
9 - TinyXP With Repair Option (Product Key Already Filled In)

Choosing #2 at the main menu, gives you the following menu:

1 - Acronis Backup + Restore (Safe For Vista)
2 - Damn Small Linux v4.3
3 - Hiren's BootCD v9.5
4 - SpinRite v6.0

Abbreviations from above:

IE ---> Internet Explorer
OE ---> Outlook Express
WMP ---> Windows Media Player

________________________________________________________

Installations 1 to 8 of TinyXP include the following items, which are all automatically installed along with Windows:

Service Pack 3 Final (Build 5512)
All Hotfixes Up To May 2008
DirectX DLL Libraries (24 to 36)
Flash Player v9.0.124.0 (IE) - / - Plugin DLL v9.0.124.0 (Firefox/Opera)
Royale Theme (Options 1 to 4) - / - Classic Theme (Options 5 to 8)

________________________________________________________

Here is a breakdown of the twelve options:

Microsoft Windows XP Professional SP3:

For Microsoft fans...
Options 1, 2, 5 and 6 all include Internet Explorer Web Browser v6, Outlook Express Email Client and Windows Media Player v9. These older versions of Internet Explorer and Windows Media Player are what would install with Windows XP by default. If you want to install the later versions of these programs (Internet Explorer 7 and Windows Media Player 11) its no problem, those installers are in the EXTRAS folder on the CD to be applied after Options 1,2,5 or 6 have been installed. The IE7 and WMP11 installers are silent (just double click the file once to install) and they even install the post IE7 and WMP11 hotfixes! Windows XP is completely up to date and as Bill Gates intended.

For people who don't like Microsoft programs...
Options 3, 4, 7 and 8 do not include Internet Explorer, Outlook Express or Windows Media Player. Mozilla Firefox v3.0 is included to replace Internet Explorer. There are no replacements in these options to Outlook Express or Windows Media Player. You can just use your own programs like Mozilla Thunderbird to replace Outlook Expess and Winamp/VLC/MPC to play audio and video files.

For people who want the most features...
Options 1, 2, 3, and 4 are as full as this Windows XP could possibly be made, while still fitting everything onto a 700Mb CD. You still have System Restore, games, almost every single service. The only removed services are removed because they are annoying, not to save space, all functionality is still there. All services are set to their default settings. This is the recommended installation, the first option, because it is the most complete one - with added drivers too.

For people who want a smaller faster leaner BARE installation...
Options 5, 6, 7, and 8 are as stripped as Windows XP can be made without losing vital functionality like local networking. Bear in mind that a lot of components are removed from these options! For example, games, themes, even Windows Firewall is removed. These BARE options still support printers, scanners, cameras etc and these installations still include MDAC, Jet Database, COM+. These are smaller installs but they are still reasonably functional, 99% in fact!

Automatic Driver Installation...
Options 1, 3, 5 and 7 include drivers to cover the following:
Broadband
Chipset
CPU
Input (Mice, Keyboards)
LAN Ethernet
Monitors
SATA & Mass Storage
Scanners
Sound Cards
TV cards
Wireless LAN

No Drivers Included...
Options 2, 4, 6 and 8 do not contain those drivers - this is in case you have SATA problems with options 1, 3, 5, or 7, or if you just want to install your own drivers.

Repair Option...
Option 9 is the same TinyXP as option 2 but option 9 is not unattended.
You will need to click "Next" and "OK" a few times whilst it installs. This is here so you can boot into the "Repair Option" from the CD. When Windows is unattended like in options 1 to 8, you do not get this "Repair Option". You might need it one day.

________________________________________________________

Live Rescue Options:

Acronis Backup + Restore...
Option 1 on the rescue menu allows you to backup your existing partition(s) before installing Windows, or you can quickly restore a backup made previously with Acronis.

Damn Small Linux v4.3...
This has to be one of the best things ever created in the world of computing! Option 2 is a 50Mb live Linux environment with the ability to connect to the internet from within the Linux environment. Includes Mozilla Firefox web browser and many other tools. What would you do if you totally lost your Windows install and had to get online to troubleshoot the problem? This is where Damn Small Linux comes in.
NOTE: You might get an SCSI problem when booting into this Damn Small Linux, if this happens, type "dsl noscsi" (without quotes) when you are loading Linux and it will work. You may need to type this command to boot Damn Small Linux in VMware. There is a Damn Small Linux text file in the DOCS folder on the CD.

Hirens Boot CD v9.5...
Option 3 allows you to boot into Hirens Boot CD version 9.5. This is a massive collection of more then 200 tools! Including Partition Tools, Disk Clone Tools, Antivirus Tools, Recovery Tools, Testing Tools, RAM (Memory) Testing Tools, Hard Disk Tools, System Information Tools, MBR (Master Boot Record) Tools, BIOS / CMOS Tools, MultiMedia Tools, Password Tools, NTFS, Ext2FS, Ext3FS (FileSystems) Tools, Dos File Managers, Dos Tools and Windows Tools. You can boot into Hiren's and have access to Norton Partition Magic, Paragon Partition Manager, EasyRecovery... please see the Hirens text file that is in the DOCS
folder on the CD for the full list of tools included in the Hirens Boot CD.

SpinRite v6.0...
SpinRite attempts to recover data from damaged portions of hard disks that might not be readable via the operating system. When it encounters a sector with errors that cannot be corrected by the disk drive's error correcting code, it tries to read the sector up to 2000 times, and tries to determine the most probable value of each bit by comparing the results. The data is then saved onto a new block of the same disk.

________________________________________________________

EXTRAS folder (CD)

This folder contains:

Internet Explorer 7 Silent Installer
Windows Media Player 11 Silent Installer
eXPerience Registry Tweaks 2008

________________________________________________________

ISO folder (CD)

If you want to make standalone ISO's of any of the nine Windows XP installations, you can do this by running one of the batch files included in the ISO folder on the CD.

You can also make a separate ISO with the four rescue options (Acronis + Damn Small Linux + Hiren's BootCD + SpinRite)

See the ISO folder for more info.

-----------------------------------------------
HOW TO MAKE A SEPERATE ISO WITHOUT BURNING A CD
-----------------------------------------------

You can use any of these programs:

Daemon Tools (free)
Alcohol 120% (not free)
UltraISO (not free)

Lets use Daemon Tools as an example - install Daemon Tools and mount the main ISO file of TinyXP_Rev09. Now open the virtual drive and open the ISO folder. Simply click any BAT file to make an ISO.

This is also especially useful if you downloaded a DVD but only have a CD player, as long as the DVD in question allows you to create standalone ISO files ;)

________________________________________________________

OEM folder (CD)

If you want to install the drivers on this CD independently of installing Windows, this is now possible by running one BAT file. In the OEM folder on the CD you will find a file called:

INSTALL DRIVERS.bat

Run this INSTALL DRIVERS.bat file and sit back whilst the process unpacks
the drivers, then tries to find any drivers you might need installing, then installs the drivers, then removes the initial drivers that were extracted, because they are not needed afterwards.

You can run this INSTALL DRIVERS.bat file anytime, on any x86 Windows XP.

Do not move the BAT file from the OEM folder. If the BAT file is not left where it is inside the OEM folder, it will not work.

________________________________________________________

eXPerience folder (Desktop)

Most of these folders contain quick solutions to things that otherwise would be buried away in the Windows GUI or require DOS style commands. E.g. "control userpasswords2" will open the screen to change your Windows XP login password, or "intl.cpl" runs the "Regional and Language Options" from Control Panel.

FOLDERS:

Desktop Icon Layout - Allows you to save your icon setup on the Desktop.
Hibernation - Turns Hibernation on/off with one double click.
Keyboard Settings - Quick way to open "Regional and language Options"
Program Links - Download links to many great programs, all freeware.
Registry Backup - Easily backup your registry in one double click.
Services Configuration Files - Configure Windows to use less RAM.
ShrinkXP Scripts - Removal of components whilst Windows is running.
User Password - Easily change your password for Windows.


________________________________________________________

Removed Items:

The breakdown of items removed is far too long to list here.

Instead, think about which option you chose (the number) for example option 3. So then go to this folder:

ROOT\0003\$OEM$\nLite

In that nLite folder you will find a "Last Session.ini" file for nLite.

This file lists every component that is removed. If the item is not in the list then the feature is still present in Windows.

________________________________________________________

Statistics:

OPTION 1/2 (With IE/OE/WMP)
RAM Usage On First Installation............ 85 Mb
WINDOWS Folder............................. 561 Mb

OPTION 3/4 (Without IE/OE/WMP)
RAM Usage On First Installation............ 75 Mb
WINDOWS Folder............................. 517 Mb

OPTION 5/6 (BARE, With IE/OE/WMP)
RAM Usage On First Installation............ 60 Mb
WINDOWS Folder............................. 488 Mb

OPTION 7/8 (BARE, Without IE/OE/WMP)
RAM Usage On First Installation............ 50 Mb
WINDOWS Folder............................. 459 Mb

ISO File MD5 Hash:
2d42d9803960535efb254d0e8ba72957
________________________________________________________

Downloads (ISO 652 MB):
Torrent:
TinyXP_Rev09 - eXper1ence
Direct Links:
Part 1
Part 2
Part 3
Part 4
Part 5
Part 6
Part 7
Part 8
Part 9

Saturday, January 24, 2009

Windows Icon files (.ICO)

I gathered a set of articles which can be useful for anybody that is interested in Windows Icon files (.ICO). It may seem a simple matter but ICO files are a slightly complex world; I found myself having to deal with these concepts during the implementation of a Windows .exe crypter: the extraction of ICO from a .exe and its assignment to another .exe isn't a trivial issue.

http://en.wikipedia.org/wiki/ICO_%28icon_image_file_format%29

http://msdn.microsoft.com/en-us/library/ms997538.aspx

http://msdn.microsoft.com/en-us/library/ms997636.aspx

http://www.codeproject.com/KB/cs/IconLib.aspx

http://www.codeproject.com/KB/vb/MultiIcon.aspx

Tuesday, January 20, 2009

Pass-The-Hash Toolkit

(Freeware/OpenSource)

Home: http://oss.coresecurity.com/projects/pshtoolkit.htm

Blog: http://hexale.org/forums/

current version: 1.4 (July 2, 2008)

********************************
What is Pass-The-Hash Toolkit?


The Pass-The-Hash Toolkit contains utilities to manipulate the Windows Logon Sessions mantained by the LSA (Local Security Authority) component. These tools allow you to list the current logon sessions with its corresponding NTLM credentials (e.g.: users remotely logged in thru Remote Desktop/Terminal Services), and also change in runtime the current username, domain name, and NTLM hashes (YES, PASS-THE-HASH on Windows!).


Utilities in the toolkit:
  • IAM.EXE/IAM-ALT.EXE:
    Pass-The-Hash for Windows. These tools allows you to change your current NTLM credentials withouth having the cleartext password but the hashes of the password. The program receives a username, domain name and the LM and NT hashes of the password; using this it will change in memory the NTLM credentials associated with the current windows logon session. After the program performs this operation, all outbound network connections to services that use for authentication the NTLM credentials of the currently logged on user will utilize the credentials modified by IAM.EXE. This includes 'net use', 'net view', many third-party DCOM services that use NTLM authentication, etc. This is basically 'pass-the-hash' for windows; one of the main advantages is that you don't need to use a modified version of samba or samba-tng and be restricted to the limited functionality they implement, you can now use windows and any third-party software with stolen hashes withouth having to obtain the cleartext version of a password. For more information take a look at this paper I wrote back in 2000 Modifying Windows NT Logon Credentials.
  • WHOSTHERE.EXE/WHOSTHERE-ALT.EXE:
    These tools will list logon sessions with NTLM credentials (username,domain name, LM and NT hashes). Logon sessions are created by windows services that log in using specific users, remote desktop connections, etc. This tool has many uses, one that i think is interesting: Let's say you compromised a Windows Server that is part of a Windows Domain (e.g.: Backup server) but is NOT the domain controller. Since it is not the domain controller, you only have access to the local SAM and although you did effectively comprise a sensitive server you did not compromise the domain. However, it is very common in such situations to find that administrators are using Remote Desktop to connect to the compromised server to perform different tasks. So this is your chance, just wait for the administrator to log into the compromised server using remote desktop, at that point, run 'WHOSTHERE.EXE' and you will observe the administrators username,domain name, and NTLM hashes. Now go to your machine, use them with IAM.EXE and compromise the domain controller using the administrator's credentials.
  • GENHASH.EXE:
    This is a small utility that generates LM and NT hashes using some 'undocumented' functions of the Windows API. This is a small tool to aid testing of IAM.EXE.

Setup



Quick start:
There's not much to be done, extract the .tgz file and have fun!.

Requirements
  • You can compile the tools using Microsoft Visual C++ 2005 Express Edition (available at http://msdn.microsoft.com/vstudio/express/). Minor modifications might be needed to compile them using other C compilers.
  • You must have Administrator privileges to run these tools (except for genhash.exe).
  • IAM.EXE was mostly tested on WinXP and Windows Server 2003, although it should also work on Vista. WHOSTHERE.EXE now works correctly on Windows Server 2003. Support for Vista will be added.

Sunday, January 18, 2009

Book: Hacking Exposed Windows


Hacking Exposed Windows: Microsoft Windows Security Secrets and Solutions, Third Edition (Hacking Exposed)






http://www.amazon.com/exec/obidos/tg.../-/007149426X/
  • Publisher: McGraw-Hill Osborne Media
  • Publication Date: December 4, 2007
  • Author: Joel Scambray
  • Language: English
  • Number of pages: 451
  • ISBN-10: 007149426X
  • ISBN-13: 978-0071494267

Saturday, January 17, 2009

KernelEx


source
: http://www.msfn.org/board/KernelEx-v...ed-t71476.html
current version: 0.3.6 (October 21, 2008)
by: Xeno86/Tihiy

Description:

What is KernelEx? KernelEx is a compatibility layer to allow running Windows XP-only applications on Windows 98 and Windows Millennium. KernelEx is an open source project and is not distributing any copyrighted files. This project neither requires nor includes files from newer OSes, like Windows 2000 or Windows XP.

The aim of the project is to implement functions (not present on Windows 98 / ME) to kernel32.dll and other system libraries so that recent Windows XP programs and games work on Windows 98 / ME.


Requirements:* Windows 98 FE or Windows 98 SE or Windows ME (any language version and kernel version)
* Microsoft Layer for Unicode (MSLU) [Unicows.dll], version 1.1.3790.0


Latest changes:
KernelEx v0.3.6 by Xeno86/Tihiy
10/21/2008
* added custom MSIMG32 library
* rewritten non-working TryEnterCriticalSection implementation
* PeekMessageW, DispatchMessageW, IsDialogMessageW, TranslateAcceleratorW, CopyAcceleratorTableW, CreateAcceleratorTableW, CallMsgFilterW call their ANSI counterparts directly
* in unicode to codepage translations for file apis, "_" is now default character instead of "?"
* Fixed SetFilePointerEx to preserve LastError
* Fixed GetVersion apis ignoring Skip Modules list in some cases
* Fixed RegQueryValueExW bug that could lead to crash in kexulay
* Fixes and workarounds for various MSLU wndproc-related issues:
* Changed: CallWindowProcA, GetWindowLongA, RegisterClassW/Ex
* Patch to remove KERNEL32.DLL resource checking ("program is invalid format or appears corrupted")
* Implemented:
- LockFileEx
- GetCharWidthI
- LockWorkstation
- IsHungAppWindow
- RealGetWindowClassW
- MoveFileWithProgressA/W
- CommandLineToArgvW
- HeapSetInformation
* Stubs:
- RegOverridePredefKey
- ReplaceFileA/W
- CreateJobObjectA/W,TerminateJobObject,OpenJobObjec tA/W,QueryInformationJobObject,SetInformationJobOb ject,AssignProcessToJobObject
- RegisterWaitForSingleObject/Ex,UnregisterWait/Ex
- RegDisablePredefinedCache,IsWellKnownSid,SecurityS ecurityDescriptorDescriptorblahblah
- IsValidLanguageGroup
- more stubs in psapi.dll

Supported by this release:
* OpenOffice.org 3.0
* Macromedia Flash 8 Professional
* Winamp (5.35)
* Media Player Classic Unicode [HomeCinema]
* Windows XP Paint and Charmap
* Adobe Acrobat Reader 7 (with minor problems)
* Google Picasa 3 beta

DOWNLOAD:


http://x86.neostrada.pl/KernelEx/

Thursday, January 15, 2009

Microsoft Windows MicroXP


Microsoft Windows MicroXP

by eXperience

current version: 0.82

Released: 2008

Following the release of MicroXP v0.82, this new version fixes an issue with Wireless LAN where it was not able to automatically find networks around you without knowing the SSID identification code of the network. This problem only appeared with Service Pack 3. The fix was simple, just replace three DLL files in this SP3 version with the older SP2 versions of the files - problem is fixed and you can use wireless just the same as you could in previous (SP2) releases of MicroXP. Thanks to christianpeso from SRN for working on this and fixing it. All previous fixes in all previous versions of MicroXP apply in this new version 0.82.


MicroXP v0.81 to MicroXP v0.82
  • [REPLACED FILES]
    • Replaced SP3 version of "wzcdlg.dll" with SP2 version (saves 5Kb)
    • Replaced SP3 version of "wzcsapi.dll" with SP2 version (saves 1Kb)
    • Replaced SP3 version of "wzcsvc.dll" with SP2 version (saves 121Kb)
  • [REMOVED FILES]
    • Removed all .XSD files.
    • Removed "L2Schemas" folder from the WINDOWS folder.
    • Removed "Provisioning" folder from the WINDOWS folder.
[Services Remaining In Windows]

Cryptographic Services
DCOM Server Process Launcher
DHCP Client
Event Log
Logical Disk Manager
Logical Disk Manager Administrative Service
Network Connections
Plug and Play
Print Spooler
Remote Access Auto Connection Manager
Remote Access Connection Manager
Remote Procedure Call
Server
TCP/IP NetBIOS Helper
Telephony
Windows Audio
Windows Image Acquisition (WIA)
Windows Installer
Wireless Zero Configuration
Workstation

All these services are enabled on installation, so you can start using Windows straight away.

[WHAT YOU CAN DO]

- PROGRAMS -
You can still install and run just about all the programs and games that you can run on a normal installation of XP. There is a text file in the eXPerience folder on the desktop that has a list of programs that work and includes some that don't work (not many). Even Office 2007 installs on this version of Windows

- GAMES -
Up to now, there has not been one single report of any game not working on MicroXP. Gaming is what this edition of Windows is all about, it gives better benchmarks than any other version of Windows I have ever tested.

- LAN NETWORKING -
At last - MicroXP now has the ability to browse your local network. All you need to know is the computer name of the computer you want to connect to and thats about it, just right click My Computer and choose Map Network Drive. All computers can see each other even if every computer in the network is running this MicroXP.

- CAMERAS AND SCANNERS -
Now in MicroXP it is possible to use a digital camera (USB only, no Firewire) or a scanner. Tested and working with a Fuji FinePix 6MP camera. The Photo Printing Wizard is not included, neither is the wizard to download photos from the internet, but the rest of the functionality for cameras and scanners is as complete as
in full Windows. My favourite saying: whats missing, you're not gonna miss! Print photos with Photoshop or maybe even Irfanview. Ctrl+P to print works in every single program that supports it, so its not like we ever needed the photo printing wizard, which only ever made all images I fed through it A4, even small images,
so it actually did not even work, unless I skipped a button but there really are no buttons to skip in that wizard, its useless.

- DIAL-UP CONNECTION -
You can still use a Dial-Up connection (Broadband or old 56k modem).
This is the one major flaw in other stripped out operating systems, a lot of UK users still use a modem with broadband... in this edition, RAS Dial-Up/PPPoE/DSL/ADSL connectivity is OK as well as old 56k modems. Yes, try this install on a Pentium II or even an old 486 might run it! They had 75Mhz processors and 8Mb RAM with 4Mb graphics cards.

- WEB BROWSER -
This installation already includes a basic web browser called Browzar that uses a few core files left from Internet Explorer. No, Internet Explorer is not included, but select files included in this installation that come from Internet Explorer are vital to running Windows. Its also Internet Explorer related files that allow you to open CHM files, which you can do in this edition of Windows. This Browzar web browser is only here so you can at least get online and download Firefox, Opera, Netscape
or whatever browser you want. This not only saves space on this CD, but you get to choose what web browser you want to use and you get the latest version not an old and possibly insecure version. Flash v9.0.124.0 for Firefox and Opera is included, so Google Video and YouTube work straight away in whichever browser you install.

- PASSES WGA CHECKS -
If you go to download for example, Windows Media Player 11 from Microsoft's downloads section, you will need to validate windows by running the GenuineCheck.exe file that Microsoft asks you to download as part of the Windows Genuine Advantage checks. Its fine to do this, don't be scared of your key being blacklisted.

- FLASH -
If you install Opera or Firefox web browser(s) in this special MicroXP edition of Windows, you can go visit YouTube or Google Video without even having to install Flash Player. You can just watch the videos right away.


Download