Garage4Hackers Ranchoddas Webcast on XSS Protection Bypass By Ashar Javed

Great talk about XSS filter bypass in the Ranchoddas Webcast by Garage4hackers.com

Gynvael's [EN] Talk: Practical RE tips (Ranchoddas Series 2)

Python Android Script copy photos from Whats App Profiles

I think everybody reading this must be using WhatsApp by now. :-D
I am amazed by how much ignorance people have. I have been told by many people that it is secure to share profile photo on WhatsApp since the application doesnt allow to save other people profile photos. Well when I saw my one friend dying to get his friend's profile photos over whatsapp (offcourse it was a girl, Haaa hahaa.) I just checked the whats app folder location and showed him that the profile photos are temporary saved in this folder. For his phone it was "/storage/sdcard0/WhatsApp/Profile Pictures" path.
 Then one more issue came forward WhatsApp deletes the profile photos automatically after some couple of days. (No I didnt bothered to find out after how much time).
        So I told him to copy the files to other folder using some file manager. But as always I was thinking of automation in my mind. So I wrote a python script which can be run by using qpython for android (http://qpython.com/). This script copies the files in the default directory of WhatsApp to user specified directory. (You will have to specify the directory in the python script, its easy this way in Android instead of going for command line and etc.
      So again one small problem was there. Every time the WhatsApp profile photo is changes it is stored by using the mobile number as filename. So by default if you copy files it would overwrite them. So you cannot use filenames to identify if the file different from existing photo in the bkp directory. So I used the md5 library in python to check the md5 sum of the files in the backup directory and tally it with same phone number file in the WhatsApp directory. So now the script copies the filename and count the files with similar name in the backup directory and paste with the one added counter name.
E.g. +919887766554-0.jpg , +919887766554-1.jpg , +919887766554-2.jpg etc.

So there you go my friend. (and any one else who needed similar script)
Steps to use
1) Install qpython on your android phone from http://qpython.com/
2) download file WatsAppCp.py from  https://sites.google.com/site/neo1981/files/WatsAppCp.py?attredirects=0&d=1
3) copy file to the scripts directory of qpython.
4) Edit the file and pur your phones path to the WhatsApp profile pictures
--  Change following variables in py file
--- mysrc = "/storage/sdcard0/WhatsApp/Profile Pictures"
--- mydst = "/storage/sdcard0/.Wats App profile BKP"
--Here mysrc is the WhatsApp profile pictures folder
--and mydst is bkp folder which you can specify

5) Run the WatsAppCp.py file from qpython
6) File whill show copying message for every photo which is copied.

Bitdefender 2012 review II - Bad sales/support also

You might be aware that last year I had done a quick review of the Bitdeffender.
I hadn't give it good rating at that time.
But it seems only technical problems were not enough they also have bad sales/support.

One of my friend had purchased Bitdeffender 2012 Antivirus and he was trying it on Windows 8 but it seems it is not designed to be work with Windows8. But what happened afterwards is more problematic in terms of support. My friend tried to contact customer care service and trying to get this issue resolved. The customer care executive told him to download Bitdeffender windows 8 version and told same serial would work with it. But it was utter lie. The customer care executive doesn't seem to be knowing their own licencing system. Well now it has been more than two weeks my friend tried to get this issue resolved. The in-country distributor also not helping and says to contact Bitdeffender online support.
My Poor friend is all frustrated.
So it seems not only technical issues with the Bitdeffender but also sales and support problems are persistent.

python script to download files via google search Ver. 2

Well some one suggested a feature in python download script and today I was in a mood to do little bit coding so changed the script in incarporate a new option.

--num number_of_files_to_download

If given this option script will stop after the number of files given .

you can download new version 2  HERE

Bitdefender Total Security 2012 Review – I) Installation

Well you might be surprised and ask why I am doing a Security Product review suddenly? So before you ask let me tell … I had been contacted by Bitdefender and asked if I wanna write a review on their product Bitdefender 2012 Security Suit. I have used lots of other Antivirus and Software Firewalls but I had not used Bitdefender, I thought ok I will give it a shot on one Testing windows PC to see how it works.

Surprisingly when I registered one License key from Bitdefender, They were generous to provide me with 5 more keys to give to my friends. Well those keys are already distributed to friends so don’t ask me for a key :-)

Since I am too lazy to write the whole review at a time I thought to do it in pieces. So I will start with installation process of this and in later part I will cover other aspects of this suit.

I have made signs as bellow
-ve point = Negative Point (Whatever I did not like)
+ve point = Positive Point (I liked this)

This was the system config of the machine where I installed Bitdefender 2012 Total Security suit

The Installation:

1) No offline Installer (-ve point)

First point I noticed about the setup that it was completely online installer. Either there is no offline install or I am not able to found the offline installer for Bitdefender 2012 Security Suit. Well this is a negative point in my opinion. I had given a of Bitdefender to one of friend who’s PC was infected by some virus and he didn’t wanted the PC do be connected to Internet. But since no offline installer was found he didn’t installed Bitdefender Suit on his PC. L

2) Check conflicting products (+ve point)

Check for Other security product that might conflict with Bitdefender and runs uninstaller for those products. In my case I had Zonealarm and Avast Antivirus on the test machine. Bitdefender installed automatically run the uninstaller for both the conflicting products.

3) All products not uninstalled at one go (-ve point)

Only glitch in this I found that after uninstalling one product it only gives reboot or stop installation. It didn’t give option to uninstall all products at once and have only single reboot.

4) Not all conflicting products were uninstalled automatically (-ve point):

The Zonealarm Firewall was uninstalled properly via the Bitdefender setup, but some how it was not able to uninstall the Avast Antivirus which was present on the system. There was some error and at the time of removal of avast and PC got hanged. I don’t say it is bitdefender problem , it might be a M$ problem. I had to manually remove Avast Antivirus after reboot so the Bitdefender setup could continue.

5) First Uninstall other product then download setup: (-ve point)

According to my opinion this is a bad strategy to uninstall all the other antivirus and firewall first and then start downloading the setup files needed for continue setup. So if I get some problems downloading setup files (which I got when I was installing) then my PC is online without security products which I don’t like. I think the setup should download the files needed first then go for uninstallation of the other security products.

6) Download slow and problems continuation: (-ve point)

Bitdefnder download too Sooooo long, I went to sleep while it was downloading. On a normally 25 KB/s test connection Bitdefender setup was showing only around 10 KB/s

First I thought it was network trouble but when I started a normal download it was getting around 24KB/s

And I have tested it on multiple computer over multiple internet connections download speed of the installers seems to be a persistent issue. One other location where I installed it on the friends laptop the internet was getting disconnected quiet often. On that machine for hours I was trying to complete the installation.

7) Unable to copy or Save Licensing terms and conditions: (-ve point)

The Licensing terms and conditions is not allowing to save or copy the terms and condition that the user is agreeing to.

8) Too much time taken for first system scan (-ve point):

I have used lots of Antivirus for Bitdefender has taken most time to install on to the system. After its download has finished the setup was showing it is scanning system files for virus.

The system file scan started at 10:40 PM. It didn’t showed any progress till some minutes. I left the PC and gone to do some other work. I came back to PC after around 25 minutes and still it was not showing any progress on the progress bar.

For PC with good configuration as given in the start, I don’t think it should take that much amount of time to scan the system files.

It was around 11:20 PM and the progress bar still didn’t showed any kind of progress. L

So I was getting irritated and decided to go for sleep and do the installation some other day when I had time. But I decided to let the setup run but I didn’t know how much exact time it took to complete the setup. But at least it was completed when woke up the next morning

I will do some other tests on this suit and write about it in some days.

Do left your comments on your experience of Bitdefender if you have used it.

python script to download files via google search

Just now some one was asking to me on chat if there is some script which can download the files if given a google search query.

When thinking I suddenly remember that I had coded such a script some time ago using xgoogle libray of python. So I just searched for my script and here it is.

As you know I am lazy, I have used xgoogle and not directly handle google via httplib or urllib etc etc. My script used getopt library to parse the options given to the script. (again I am lazy)
(xgoogle library can be downloaded at http://www.catonmat.net/blog/python-library-for-google-search/)

The general syntax of this script is

python gsrchDwn.py --query "query_text" [--ftype file_extension] [--cnt contine_result_number] [--dir download_dir]

usage: python gsrchDwn.py --query maths made easy --ftype pdf

IMP Notes
1)It proper results are not got try the query in " (double quotes)
2) This file need xgoogle library found at http://www.catonmat.net/blog/python-library-for-google-search/

If --dir is not given it will download files into current directory.
If the script is stopped inbetween you can continue from the last result number by using --cnt result_number

This time I am have become a good boy and also added a status printing which shows how much percentage of current file is downlaoded.

grsrchDwn.py can be downloaded HERE

Let me know any comments.