How to Change MAC address of your Machine

How to change the MAC address in Windows machines

Changing MAC address in Windows machine is much easier with GUI interface. So lets start it.

Go to Network Properties.

Then click on Configure button

How to make a remote desktop connection on Linux and Windows

Here we are going to talk about how to make remote desktop connections in Linux and Windows OSs. I think you know how to establish a RDP connection to windows machine from another windows machine. So firstly i will talk about how to establish a RDP connection to a Windows machine from Linux machine.

Note : This demonstration is for Ubuntu and Kali like linux machines

RDP from Windows to Linux
  
Get the terminal. And type apt-get install xrdp

It will install the XRDP on your linux system. Then type service start xrdp
This will start the XRDP service on your linux machine.

Now in the terminal type whoami. This will show you the host name of your linux. Remember it. And type ifconfig find your ip address and keep in mind.
Go to your Windows machine and get run and type mstsc. Type your linux machine's IP and click on connect. Then a windows will come with black background popup for input username and password. Make sure in front of the Module has selected the Sesman-Xvnc. On the Username field type the Hostname of your linux. On the password type it's password (login password for your linux). Click on OK. Then RDP connection to the linux machine will come.

RDP from Linux to Windows


Install XRDP in Linux machine as above. Get the terminal and type rdesktop and enter. If it say rdesktop has to be install type apt-get intall rdesktop. Then type rdesktop [IP address] . In the [IP address] type your windows machine's IP addres and enter. Then in a new windows it will open up the remote desktop connection to the windows machine. Some times you may get an error of "Failed to connect , CredSSP required by server". For this go to your windows machine and got remote connection properties (Right click Comuter > Properties > Remote Settings >)  Under the Allow Remote connection to this computer remove the tick for Allow connections only from computers running Remote Desktop with Network Level Authentication(recomended). Its for Windows 8. In Windows 7 go to Remote connection settings and select the middle one which is Allow connections from computers running any version of Remote Desktop (less secure). Then connect again from your linux machine.

You can give any resolution for the RDP windows like this. Lets say you want 1320x1020 resolution for the RDP connection... type

rdesktop [IP Address] -g 1320x120

RDP with linux two linux machine also can be done in same manner. Type rdesktop [IP Address] in the other linux machine. You can get the Remote desktop connection.

How to speedup Android phone

Today android has covered the most of Phones Tablets and other equipments' software needs and OS. Undoubtedly Android use more percentage than IOS (up to today). So Here is best tricks to speedup your android device .Coz I'm writing this after referred many posts,forums and practically done with my android device.

1. Getting start with cleaning

As we do in our PCs cleaning is a best method to keep the speed of your all devices. Clean means delete unwanted and duplicated files from your device. As in PCs we can use tools to do this.
When your storage fill with lots of files and data device get more time to read/find the specific files. Mostly storage is consuming by duplicated files and unwanted files or apps. And also remember cache data also consuming your storage. But  the cache is important. I will come to that in next topic. So as to now remember every thing you don't need is consuming your wanted space and speed.

Delete unwanted apps.

Unwanted apps will slow down your device in many ways. They use your devices storage, CPU usage to its works, and also your internet bandwidth for updates and Sync like things. So its important to uninstall unwanted apps

You can do this in two ways. Go to your app drawer (Go to Settings > Application Manager) and surf through apps to find the apps that you are not use and do not need any more.
Or I recommend you to download Clean Master app install on your device. It's great tool to manage things in your phone. All over this post this app's features will discuss. Any way download it , install it. It will shows you the idle apps in your android device and let you to uninstall them through this app.

How to remove startups from registry

You know that it's not sufficient to avoid starting programs on startup by disabling the programs in startup option. They live in the registry. Some times those registries also should removed in-order to avoid them starting on the startup.

Get RUN and type regedit.

Now registry will open.You should go through two things. When we installing app it could be a 32 bit one or 64 bit one. The startup registry files of 32 bits apps will build in HKLM or HKCU (HKLM-HKEY_LOCAL_MACHINE , HKCU-HKEY_CURRENT_USER) , HKLM/Software/Wow6432node/Microsoft/Windows/Current Version/Run
or
HKCU/Software/Wow6432node/Microsoft/Windows/Current Version/Run

Startup registry files of 64 bit apps will build in

HKLM/Software/Microsoft/Windows/Current Version/Run
or
HKCU/Software/Microsoft/Windows/Current Version/Run

Deleting the remaining registry files of a app that you dont want to run on startup will work well. Specially with the malwares. Most malwares created to execute at the startup. Deleting registry files of that malware like this would end up the malware activities on your computer toatally.

Some Forensic Investigation Tools.

1.P2 eXplorer
P2 eXplorer is a forensic image mounting tool designed to help investigators manage and examine evidence. With P2 eXplorer, you can mount forensic images as read-only local logical and physical disks. Once mounted, you can explore the contents of the image using Windows Explorer or you can load it into your forensic analysis tool.

2.HxD
HxD is a carefully designed and fast hex editor which, additionally to raw disk editing and modifying of main memory (RAM), handles files of any size. The easy to use interface offers features such as searching and replacing, exporting, checksums/digests, insertion of byte patterns, a file shredder, concatenation or splitting of files, statistics and much more.

Get the IP of some one using a link

Go to this site
http://blasze.tk

and enter a URL to redirect the victim. Then you will receive a code to track the IP of the victim's. Use the code to get the IP of the Victim.

How to make a Squid server and apply Rules

Proxy servers operate as an intermediary between a local network and Internet. Requests from local clients for web services can be handled by the proxy server. Squid is a high-performance HTTP and FTP caching proxy server. It is also known as a Web proxy cache. As it stores data from frequently used Web pages and files, it can often give your users the data they need without their systems having to look to the Internet.

So let's begin the tutorial.

Firstly we should install the squid in our linux system.

It's different from each linux dist but here i will get the ubuntu OS for example. And there is no more difference on these steps just browse over internet to know how to install squid to your linux OS.

Ok get the terminal and type

apt-get install squid3

As i said this is for ubuntu. apt-get install will remains as same in other Linux OSs. But dunno about squid.

Then we have to set a static IP to our server. Go to System Settings and Networks. You can change the IP, Gateway, DNS there without bothering of the commands in the terminal.

To check surely the Squid has installed in the system go to etc folder in file system or root. Try to find something like squid. In this case it's "squid3".

Go to the terminal and type

sudo nano /etc/squid3/squid.conf

Using this command we are going to open the squid.conf with nano for editing purpose. 

Then you will see a more than 5000 lines of doc in there.

press ctrl+w and searching menu will appear. type visible_hostname. It will go to the point that phrase exist and when you slowly scroll down you will see under the  default: , after the visible_hostname localhost or something. Give it a desired name or it's better to use your machine host name (type in the terminal hostname and enter.)

Again press ctrl+w and type to search tag: acl.

now we are going to build access control list. In this scenario i'm going to do this.

• block internet to 192.168.100.250
• allow internet to all of other network users
• but block www.facebook.com for every user

So lets we write a ACL to achieve these settings

scroll down after pointing the tag: acl. after default: you will see there is a acl as "acl all src all".This is default. Now i'm gonna write following ACLs.

acl deny_host src 192.168.100.250

acl allow_network src 192.168.100.0/24

acl deny_web dstdomain "/etc/squid3/deny_web"

acl all src all  - this is default one

src=source dst=destination dstdomain=destination domain

This is how we write acl to achieve above internet filtering. In the last acl we have open a acl called "deny_web" and we suggest it to look for certain destination domains where in /etc/squid3/deny_web. This was not in that folder but we are creating this to add the domains that we want to block. When you go to that directory you can see deny_web.conf file has there.

Are we done???

no we have to assign those ACLs to http access list. In acl list we are only saying to the squid "hey squid you are going inspect on these elements with these parameters". How we say to squid "don't allow these elements but you should allow these eliments through you". This is how it's gonna happen.

again ctrl+w search for tag: http_access. scroll down and after default: you will see there already an access rule saying http_access deny all. Remember this is the most important part. You should aware about this allow and deny. keep the http_access deny all at the bottom every time. It should be there. Or else there should be allow all. But if we want to permit only trusted connections and we want to abort all others deny all is huge privilege. Remember, squid read this rules top to bottom. So top one gets high priority.I will say you a simple trick to get easy with these rules.

Let assume you are in a position which is all post cards from your country(let say US) inspected by you. You got a following list to filter out the post cards.

• Deny post cards from New York.
• Deny post cards to new delhi in India
• Allow post cards from America
• Deny any

Let's say accidentally you got a post card that has "from: Ottawa,Canada to: colombo,sri lanka

ok you look at the list will see is it from new york? no.Is it to delhi in India? no. Is it from America? no. Then you see deny any. So you drop the post card. Let's say you are getting post card "from : Virginia,America to : Delhi,India". So you look at the list...Is it from New york? no. Is it to Delhi in India? oops.yes. it is. So you drop it. Because it says deny post cards to New Delhi in India. The important thing is you are not going to look at the third rule. "Allow post cards from America". Because you give high priority for top rules. Is it from America? yes it is. But it was not in the top of the other rules. So now you have dropped it. The Squid server (and most of ACLs) following like this method. It's agree with the first rule that's gonna be "true" with the situation by looking IP addresses, domain names, ports and other things inside the request packets and it will pass through it or block.

So let's make the Http_access list

http_access deny deny_host

http_access deny deny_web

http_access allow allow_network

http_access deny all

ok now you finish.

press ctrl+x and ask are you sure to save this changes. Give Y and press enter.

Now you should input what sites are going to block under the deny_web acl. To do that get the terminal and type sudo nano /etc/squid3/deny_web

then enter the web site to block. As to our example www.facebook.com. Type it and ctrl+x press y to save and press enter.

now you are done. Go to client machines and go to Internet Properties > Connections > LAN Settings . Tick "Use a proxy server for your LAN" and enter the IP of the server. And the port you can find go to server get the terminal and type nano /etc/squid3/squid.conf and ctrl+w , search for http_port. 
There you will see what port squid is listening. Enter that port on the port: text box of proxy settings of the client machine. So check it out.