SASANK@TECHNOMANIA

best site for interview questions

2010-11-12T01:12:00.004+05:30

A comprehensive repository of commonly asked Interview Q&A and a collaboration tool for sharing them.Contains questions from most of the possible topics asked in interviews.. This site provides answers to all these most frequently asked interview questions and also answers to these questions!. Most of the interviews conducted by leading IT companies hover around the questions.
visit http://www.cracktheinterview.org/ for comprehensive overview of interview experiences of candidates who attended interviews for various companies.You can also find the sample question papers of various company interviews and written exams

It’s Official: Facebook Passes 500 Million Users

2010-07-21T22:43:00.000+05:30

As widely expected, Facebook has announced that it has passed the 500 million member mark.
In a blog post, CEO Mark Zuckerberg writes that, “I could have never imagined all of the ways people would use Facebook () when we were getting started 6 years ago. I want to thank you for being part of making Facebook what it is today and for spreading it around the world.”
Zuckerberg has also announced the launch of Facebook Stories, showcasing interesting ways that people have used the social network around the world. News of the feature leaked over the weekend.
Later today, Zuckerberg is expected to make a rare television appearance on ABC’s World News, where he’ll be interviewed by Diane Sawyer. Presumably, the interview will focus on what the 500 million milestone means for the company, but we also expect a number of questions about recent privacy gaffes and other controversial subjects, including the soon to be released movie based on Facebook’s controversial beginnings.
More to come

Oracle Interview Questions and Answers : SQL

2010-07-20T20:41:00.000+05:30

Oracle Interview Questions and Answers : SQL
1. To see current user name
Sql> show user;
2. Change SQL prompt name
SQL> set sqlprompt “Manimara > “
Manimara >
Manimara >
3. Switch to DOS prompt
SQL> host
4. How do I eliminate the duplicate rows ?
SQL> delete from table_name where rowid not in (select max(rowid) from table group by
duplicate_values_field_name);
or
SQL> delete duplicate_values_field_name dv from table_name ta where rowid <(select min(rowid) from
table_name tb where ta.dv=tb.dv);
Example.
Table Emp
Empno Ename
101 Scott
102 Jiyo
103 Millor
104 Jiyo
105 Smith
delete ename from emp a where rowid < ( select min(rowid) from emp b where a.ename = b.ename);
The output like,
Empno Ename
101 Scott
102 Millor
103 Jiyo
104 Smith
5. How do I display row number with records?
To achive this use rownum pseudocolumn with query, like SQL> SQL> select rownum, ename from emp;
Output:
1 Scott
2 Millor
3 Jiyo
4 Smith
6. Display the records between two range
select rownum, empno, ename from emp where rowid in
(select rowid from emp where rownum <=&upto
minus
select rowid from emp where rownum<&Start);
Enter value for upto: 10
Enter value for Start: 7
   ROWNUM EMPNO ENAME
--------- --------- ----------
   1 7782 CLARK
   2 7788 SCOTT
   3 7839 KING
   4 7844 TURNER
7. I know the nvl function only allows the same data type(ie. number or char or date
Nvl(comm, 0)), if commission is null then the text “Not Applicable” want to display, instead of
blank space. How do I write the query?
SQL> select nvl(to_char(comm.),'NA') from emp;
Output :
NVL(TO_CHAR(COMM),'NA')
-----------------------
NA
300
500
NA
1400
NA
NA
8. Oracle cursor : Implicit & Explicit cursors
Oracle uses work areas called private SQL areas to create SQL statements.
PL/SQL construct to identify each and every work are used, is called as Cursor.
For SQL queries returning a single row, PL/SQL declares all implicit cursors.
For queries that returning more than one row, the cursor needs to be explicitly declared.
9. Explicit Cursor attributes
There are four cursor attributes used in Oracle
cursor_name%Found, cursor_name%NOTFOUND, cursor_name%ROWCOUNT, cursor_name%ISOPEN
10. Implicit Cursor attributes
Same as explicit cursor but prefixed by the word SQL
SQL%Found, SQL%NOTFOUND, SQL%ROWCOUNT, SQL%ISOPEN
Tips : 1. Here SQL%ISOPEN is false, because oracle automatically closed the implicit cursor after
executing SQL statements.
   : 2. All are Boolean attributes.
11. Find out nth highest salary from emp table
SELECT DISTINCT (a.sal) FROM EMP A WHERE &N = (SELECT COUNT (DISTINCT (b.sal)) FROM EMP B
WHERE a.sal<=b.sal);
Enter value for n: 2
   SAL
---------
   3700
12. To view installed Oracle version information
SQL> select banner from v$version;
13. Display the number value in Words
SQL> select sal, (to_char(to_date(sal,'j'), 'jsp'))
from emp;
the output like,
   SAL (TO_CHAR(TO_DATE(SAL,'J'),'JSP'))
--------- -----------------------------------------------------
   800 eight hundred
   1600 one thousand six hundred
   1250 one thousand two hundred fifty
If you want to add some text like,
Rs. Three Thousand only.
SQL> select sal "Salary ",
(' Rs. '|| (to_char(to_date(sal,'j'), 'Jsp'))|| ' only.'))
"Sal in Words" from emp
/
Salary Sal in Words
------- ------------------------------------------------------
   800 Rs. Eight Hundred only.
  1600 Rs. One Thousand Six Hundred only.
  1250 Rs. One Thousand Two Hundred Fifty only.
14. Display Odd/ Even number of records
Odd number of records:
select * from emp where (rowid,1) in (select rowid, mod(rownum,2) from emp);
1
3
5
Even number of records:
select * from emp where (rowid,0) in (select rowid, mod(rownum,2) from emp)
2
4
6
15. Which date function returns number value?
months_between
16. Any three PL/SQL Exceptions?
Too_many_rows, No_Data_Found, Value_Error, Zero_Error, Others
17. What are PL/SQL Cursor Exceptions?
Cursor_Already_Open, Invalid_Cursor
18. Other way to replace query result null value with a text
SQL> Set NULL ‘N/A’
to reset SQL> Set NULL ‘’
19. What are the more common pseudo-columns?
SYSDATE, USER , UID, CURVAL, NEXTVAL, ROWID, ROWNUM
20. What is the output of SIGN function?
1 for positive value,
0 for Zero,
-1 for Negative value.
21. What is the maximum number of triggers, can apply to a single table?
12 triggers.

Most asked DBMS interview questions with answers part 2

2010-07-20T20:38:00.003+05:30

1. Explain the difference between a database administrator and a data administrator.

Database Administrator :- A person (or group of people) responsible for the maintenance and performance of a database and responsible for the planning, implementation, configuration, and administration of relational database management systems.

Data Administrator :- The individual or organization responsible for the specification, acquisition, and maintenance of data management software and the design, validation, and security of files or databases. The DA is in charge of the data dictionary and data model.

2. Explain the difference between an explicit and an implicit lock.

Explicit Lock :- Lock is explicitly requested for a record or table.
Implicit Lock :- Lock is implied but is not acquired

3. What is lock granularity?

There are many locks available for the database system to have like
Intent Shared, Shared, Intent exclusive, exclusive and Shared Intent exclusive.
Locking granularity refers to the size and hence the number of locks used to ensure the consistency of a database during multiple concurrent updates.

4. In general, how should the boundaries of a transaction be defined?

A transaction ensures that one or more operations execute as an atomic unit of work. If one of the operations within a transaction fails, then all of them are rolled-back so that the application is returned to its prior state. The boundaries that define a group of operations done within a single transaction.

5. Explain the meaning of the expression ACID transaction.

ACID means Atomic, Consistency, Isolation, Durability, so when any transaction happen it should be Atomic that is it should either be complete or fully incomplete. There should not be anything like Semi complete. The Database State should remain consistent after the completion of the transaction. If there are more than one Transaction then the transaction should be scheduled in such a fashion that they remain in Isolation of one another.Durability means that Once a transaction commits, its effects will persist even if there are system failures.

6. Explain the necessity of defining processing rights and responsibilities. How are such responsibilities enforced?

One of the reason to define rights is the security in the database system. If any user is allowed to define the data or alter the data then the database would just be of no use and so processing rights and responsibilities are clearly defined in any database system. The resposibilities are enforced using the table space provided by the database system.

7. Describe the advantages and disadvantages of DBMS-provided and application-provided security.

DBMS provided security :- Any database system requires you to login and then process the data depending on the rights given by the DBA to the user who has logged in. The advatage of such a system is securing the data and providing the user and the DBA the secured platform. Any user who logs in cannot do whatever he want but his role can be defined very easily. There is no major disadvantage about the DBMS provided security apart from overhead of storing the rights and priviledges about the users.

Application-provided security :- It is much similar to the DBMS provided security but the only difference is that its the duty of the programmer creating the application to provide all the seurities so that the data is not mishandled.

8. Explain how a database could be recovered via reprocessing. Why is this generally not feasible?

If we reprocess the transaction then the database can be made to come to a state where the database is consistent and so reprocessing the log can recover the database. Reprocessing is not very feasible for a very simple reason that its very costly from time point of view and requires lots of rework and many transaction are even rollback giving more and more rework.

9. Define rollback and roll forward.

Rollback :- Undoing the changes made by a transaction before it commits or to cancel any changes to a database made during the current transaction
RollForward :- Re-doing the changes made by a transaction after it commits or to overwrite the chnaged calue again to ensure consistency

10. Why is it important to write to the log before changing the database values?

The most important objective to write the log before the database is changed is if there is any need to rollback or rollforward any transaction then if the log are not present then the rollback rollforward cannot be done accurately.

Most asked DBMS interview questions with answers

2010-07-20T20:38:00.001+05:30

Most asked DBMS interview questions with answers

2010-07-20T20:37:00.001+05:30

Question: What are the wildcards used for pattern matching.

Answer: _ for single character substitution and % for multi-character substitution.

Question: How can I hide a particular table name of our schema?

Answer: you can hide the table name by creating synonyms.

e.g) you can create a synonym y for table x

create synonym y for x;

Question: When we give SELECT * FROM EMP; How does oracle respond:

Answer: When u give SELECT * FROM EMP;

the server check all the data in the EMP file and it displays the data of the EMP file

Question: What is the use of CASCADE CONSTRAINTS?

Answer: When this clause is used with the DROP command, a parent table can be dropped even when a child table exists.

Question: There are 2 tables, Employee and Department. There are few records in employee table, for which, the department is not assigned. The output of the query should contain all th employees names and their corresponding departments, if the department is assigned otherwise employee names and null value in the place department name. What is the query?

Answer: What you want to use here is called a left outer join with Employee table on the left side. A left outer join as the name says picks up all the records from the left table and based on the joint column picks the matching records from the right table and in case there are no matching records in the right table, it shows null for the selected columns of the right table. E.g. in this query which uses the key-word LEFT OUTER JOIN. Syntax though varies across databases. In DB2/UDB it uses the key word LEFT OUTER JOIN, in case of Oracle the connector is Employee_table.Dept_id *= Dept_table.Dept_id

SQL Server/Sybase :

Employee_table.Dept_id(+) = Dept_table.Dept_id

Question: on index

why u need indexing? Where that is stored

and what u mean by schema object?

For what purpose we are using view

Answer: We can?t create an Index on Index. Index is stored in user_index table. Every object that has been created on Schema is Schema Object like Table, View etc. If we want to share the particular data to various users we have to use the virtual table for the Base table...So that is a view.

Question: How to store directory structure in a database?

Answer: We can do it by the following command: create or replace directory as 'c: \tmp'

Question: Why does the following command give a compilation error?

DROP TABLE &TABLE_NAME;

Answer: Variable names should start with an alphabet. Here the table name starts with an '&' symbol.

Question: Difference between VARCHAR and VARCHAR2?

Answer: Varchar means fixed length character data (size) i.e., min size-1 and max-2000

Varchar2 means variable length character data i.e., min-1 to max-4000

Question: Which command displays the SQL command in the SQL buffer, and then executes it

Answer: You set the LIST or L command to get the recent one from SQL Buffer

Question: Which system table contains information on constraints on all the tables created?

Answer: USER_CONSTRAINTS.

Question: How do I write a program which will run a SQL query and mail the results to a group?

Answer: Use DBMS_JOB for scheduling a program job and DBMS_MAIL to send the results through email.

Question: There is an Eno. & gender in a table. Eno. has primary key and gender has a check constraints for the values 'M' and 'F'.

While inserting the data into the table M was misspelled as F and F as M.

What is the update?

Answer: update set gender=

case where gender='F' Then 'M'

where gender='M' Then 'F'

Question: What the difference between UNION and UNIONALL?

Answer: union will return the distinct rows in two select s, while union all return all rows.

Question: How can we backup the sql files & what is SAP?

Answer: You can backup the sql files through backup utilities or some backup command in sql. SAP is ERP software for the organization to integrate the software.

Question: What is the difference between TRUNCATE and DELETE commands?

Answer: TRUNCATE is a DDL command whereas DELETE is a DML command. Hence DELETE operation can be rolled back, but TRUNCATE operation cannot be rolled back.

WHERE clause can be used with DELETE and not with TRUNCATE.

Question: State true or false. !=, <>, ^= all denote the same operation.

Answer: True.

Question: State true or false. EXISTS, SOME, ANY are operators in SQL.

Answer: True.

Question: What will be the output of the following query?

SELECT REPLACE (TRANSLATE (LTRIM (RTRIM ('!! ATHEN!!','!'), '!'), 'AN', '**'),'*','TROUBLE') FROM DUAL;

Answer: TROUBLETHETROUBLE.

Question: What is the advantage to use trigger in your PL?

Answer: Triggers are fired implicitly on the tables/views on which they are created. There are various advantages of using a trigger. Some of them are:

- Suppose we need to validate a DML statement (insert/Update/Delete) that modifies a table then we can write a trigger on the table that gets fired implicitly whenever DML statement is executed on that table.

- Another reason of using triggers can be for automatic updation of one or more tables whenever a DML/DDL statement is executed for the table on which the trigger is created.

- Triggers can be used to enforce constraints. For eg: Any insert/update/ Delete statements should not be allowed on a particular table after office hours. For enforcing this constraint Triggers should be used.

- Triggers can be used to publish information about database events to subscribers. Database event can be a system event like Database startup or shutdown or it can be a user even like User login in or user logoff.

Question: How write a SQL statement to query the result set and display row as columns and columns as row?

Answer: TRANSFORM Count (Roll_no) AS Count of Roll_no

SELECT Academic_Status

FROM tbl_enr_status

GROUP BY Academic_Status

PIVOT Curnt_status;

Question: Cursor Syntax brief history

Answer: To retrieve data with SQL one row at a time you need to use cursor processing. Not all relational databases support this, but many do. Here I show this in Oracle with PL/SQL, which is Procedural Language SQL .Cursor processing is done in several steps:1. Define the rows you want to retrieve. This is called declaring the cursor.2. Open the cursor. This activates the cursor and loads the data. Note that declaring the cursor doesn't load data, opening the cursor does.3. Fetch the data into variables.4. Close the cursor.

Question: What is the data type of the surrogate key?

Answer: Data type of the surrogate key is either integer or numeric or number

Question: How to write a sql statement to find the first occurrence of a non zero value?

Answer: There is a slight chance the column "a" has a value of 0 which is not null. In that case, you?ll loose the information. There is another way of searching the first not null value of a column:

select column_name from table_name where column_name is not null and rownum<2;

Question: What is normalazation, types with e.g.\'s. _ with queries of all types

Answer: There are 5 normal forms. It is necessary for any database to be in the third normal form to maintain referential integrity and non-redundancy.

First Normal Form: Every field of a table (row, col) must contain an atomic value

Second Normal Form: All columns of a table must depend entirely on the primary key column.

Third Normal Form: All columns of a table must depend on all columns of a composite primary key.

Fourth Normal Form: A table must not contain two or more independent multi-valued facts. This normal form is often avoided for maintenance reasons.

Fifth Normal Form: is about symmetric dependencies.

Each normal form assumes that the table is already in the earlier normal form.

Question: Given an unnormalized table with columns:

Answer: The query will be: delete from tabname where rowid not in (select max (rowid) from tabname group by name) Here tabname is the table name.

Question: How to find second maximum value from a table?

Answer: select max (field1) from tname1 where field1= (select max (field1) from tname1 where field1<(select max(field1) from tname1);

Field1- Salary field

Tname= Table name.

Question: What is the advantage of specifying WITH GRANT OPTION in the GRANT command?

Answer: The privilege receiver can further grant the privileges he/she has obtained from the owner to any other user.

Question: What is the main difference between the IN and EXISTS clause in sub queries??

Answer: The main difference between the IN and EXISTS predicate in sub query is the way in which the query gets executed.

IN -- The inner query is executed first and the list of values obtained as its result is used by the outer query. The inner query is executed for only once.

EXISTS -- The first row from the outer query is selected, then the inner query is executed and, the outer query output uses this result for checking. This process of inner query execution repeats as many no .of times as there are outer query rows. That is, if there are ten rows that can result from outer query, the inner query is executed that many no. of times.

Question: TRUNCATE TABLE EMP;

DELETE FROM EMP;

Will the outputs of the above two commands differ

Answer: The difference is that the TRUNCATE call cannot be rolled back and all memory space for that table is released back to the server. TRUNCATE is much faster than DELETE and in both cases only the table data is removed, not the table structure.

Question: What is table space?

Answer: Table-space is a physical concept. It has pages where the records of the database are stored with a logical perception of tables. So table space contains tables.

Question: How to find out the 10th highest salary in SQL query?

Answer: Table - Tbl_Test_Salary

Column - int_salary

select max (int_salary)

from Tbl_Test_Salary

where int_salary in

(select top 10 int_Salary from Tbl_Test_Salary order by int_salary)

Question: Which command executes the contents of a specified file?

Answer: START or @.

Question: What is the difference between SQL and SQL SERVER?

Answer: SQL Server is an RDBMS just like oracle, DB2 from Microsoft

whereas

Structured Query Language (SQL), pronounced "sequel", is a language that provides an interface to relational database systems. It was developed by IBM in the 1970s for use in System R. SQL is a de facto standard, as well as an ISO and ANSI standard. SQL is used to perform various operations on RDBMS.

Question: What is the difference between Single row sub-Query and Scalar Sub-Query?

Answer: SINGLE ROW SUBQUERY RETURNS A VALUE WHICH IS USED BY WHERE CLAUSE, WHEREAS SCALAR SUBQUERY IS A SELECT STATEMENT USED IN COLUMN LIST CAN BE THOUGHT OF AS AN INLINE FUNCTION IN SELECT COLUMN LIST.

Question: What does the following query do?

Answer: SELECT SAL + NVL (COMM, 0) FROM EMP;

It gives the added value of sal and comm for each employee in the emp table.

NVL (null value) replaces null with 0.

Question: How to find second maximum value from a table?

Answer: select max (field1) from tname1 where field1= (select max (field1) from tname1 where field1< (select max (field1) from tname1);

Field1- Salary field

Tname= Table name.

Question: I have a table with duplicate names in it. Write me a query which returns only duplicate rows with number of times they are repeated.

Answer: SELECT COL1 FROM TAB1

WHERE COL1 IN

(SELECT MAX (COL1) FROM TAB1

GROUP BY COL1

HAVING COUNT (COL1) > 1)

Question: How to find out the database name from SQL*PLUS command prompt?

Answer: Select * from global_name;

This will give the data base name which u r currently connected to.....

Question: How to display duplicate rows in a table?

Answer: select * from emp

group by (empid)

having count (empid)>1

Question: What is the value of comm and sal after executing the following query if the initial value of ?sal? is 10000

UPDATE EMP SET SAL = SAL + 1000, COMM = SAL*0.1;

Answer: sal = 11000, comm = 1000.

Question: 1) What is difference between Oracle and MS Access?

2) What are disadvantages in Oracle and MS Access?

2) What are features & advantages in Oracle and MS Access?

Answer: Oracle's features for distributed transactions, materialized views and replication are not available with MS Access. These features enable Oracle to efficiently store data for multinational companies across the globe. Also these features increase scalability of applications based on Oracle.

50 Most asked DBMS interview questions with answers

2010-07-20T20:31:00.002+05:30

What is database?

ANSWER:
A database is a logically coherent collection of data with some inherent meaning, representing some aspect of real world and which is designed, built and populated with data for a specific purpose.

QUESTION 2:
What is DBMS?

ANSWER:
? Redundancy is controlled.
? Unauthorized access is restricted.
? Providing multiple user interfaces.
? Enforcing integrity constraints.
? Providing backup and recovery.

QUESTION 3:
What is a Database system?

ANSWER:
The database and DBMS software together is called as Database system.

QUESTION 4:
Disadvantage in File Processing System?

ANSWER:
? Data redundancy & inconsistency.
? Difficult in accessing data.
? Data isolation.
? Data integrity.
? Concurrent access is not possible.
? Security Problems. .

QUESTION 5:
Describe the three levels of data abstraction?

ANSWER:
The are three levels of abstraction:

? Physical level: The lowest level of abstraction describes how data are stored.

? Logical level: The next higher level of abstraction, describes what data are stored in database and what relationship among those data.

? View level: The highest level of abstraction describes only part of entire database.

QUESTION 6:
Define the "integrity rules"

ANSWER:
There are two Integrity rules.

? Entity Integrity: States that ?Primary key cannot have NULL value?

? Referential Integrity: States that ?Foreign Key can be either a NULL value or should be Primary Key value of other relation.

QUESTION 7:
What is extension and intension?

ANSWER:
Extension -It is the number of tuples present in a table at any instance. This is time dependent.

Intension – It is a constant value that gives the name, structure of table and the constraints laid on it.

QUESTION 8:
What is System R? What are its two major subsystems?

ANSWER:
System R was designed and developed over a period of 1974-79 at IBM San Jose Research Center . It is a prototype and its purpose was to demonstrate that it is possible to build a Relational System that can be used in a real life environment to solve real life problems, with performance at least comparable to that of existing system.

Its two subsystems are

? Research Storage

? System Relational Data System.

QUESTION 10:
How is the data structure of System R different from the relational structure?

ANSWER:
Unlike Relational systems in System R

? Domains are not supported

? Enforcement of candidate key uniqueness is optional

? Enforcement of entity integrity is optional

? Referential integrity is not enforced

QUESTION 11:
What is Data Independence?

ANSWER:
Data independence means that ?the application is independent of the storage structure and access strategy of data?. In other words, The ability to modify the schema definition in one level should not affect the schema definition in the next higher level.

Two types of Data Independence:
? Physical Data Independence : Modification in physical level should not affect the logical level.
? Logical Data Independence : Modification in logical level should affect the view level.

NOTE: Logical Data Independence is more difficult to achieve

QUESTION 12:
What is a view? How it is related to data independence?

ANSWER:
A view may be thought of as a virtual table, that is, a table that does not really exist in its own right but is instead derived from one or more underlying base table. In other words, there is no stored file that direct represents the view instead a definition of view is stored in data dictionary.
Growth and restructuring of base tables is not reflected in views. Thus the view can insulate users from the effects of restructuring and growth in the database. Hence accounts for logical data independence. .

QUESTION 13:
What is Data Model?

ANSWER:
A collection of conceptual tools for describing data, data relationships data semantics and constraints.

QUESTION 14:
What is E-R model?

ANSWER:
This data model is based on real world that consists of basic objects called entities and of relationship among these objects. Entities are described in a database by a set of attributes.

QUESTION 15:
What is Object Oriented model?

ANSWER:
This model is based on collection of objects. An object contains values stored in instance variables with in the object. An object also contains bodies of code that operate on the object. These bodies of code are called methods. Objects that contain same types of values and the same methods are grouped together into classes.

QUESTION 16:
What is an Entity?

ANSWER:
It is a ‘thing’ in the real world with an independent existence.

QUESTION 17:
What is an Entity type?

ANSWER:
It is a collection (set) of entities that have same attributes.

QUESTION 18:
What is an Entity set?

ANSWER:
It is a collection of all entities of particular entity type in the database.

QUESTION 19:
What is an Extension of entity type?

ANSWER:
The collections of entities of a particular entity type are grouped together into an entityset.

QUESTION 20:
What is Weak Entity set?

ANSWER:
An entity set may not have sufficient attributes to form a primary key, and its primary key compromises of its partial key and primary key of its parent entity, then it is said to be Weak Entity set.

QUESTION 21:
What is an attribute?

ANSWER:
It is a particular property, which describes the entity.

QUESTION 22:
What is a Relation Schema and a Relation?

ANSWER:
A relation Schema denoted by R(A1, A2, ?, An) is made up of the relation name R and the list of attributes Ai that it contains. A relation is defined as a set of tuples. Let r be the relation which contains set tuples (t1, t2, t3, …, tn). Each tuple is an ordered list of n-values t=(v1,v2, …, vn).

QUESTION 23:
What is degree of a Relation?

ANSWER:
It is the number of attribute of its relation schema.

QUESTION 24:
What is Relationship?

ANSWER:
It is an association among two or more entities.

QUESTION 25:
What is Relationship set?

ANSWER:
The collection (or set) of similar relationships.

QUESTION 26:
What is Relationship type?

ANSWER:
Relationship type defines a set of associations or a relationship set among a given set of entity types.

QUESTION 27:
What is degree of Relationship type?

ANSWER:
It is the number of entity type participating.

QUESTION 28:
What is Data Storage – Definition Language?

ANSWER:
The storage structures and access methods used by database system are specified by a set of definition in a special type of DDL called data storage-definition language.

QUESTION 29:
What is DML (Data Manipulation Language)?

ANSWER:
This language that enable user to access or manipulate data as organised by appropriate data model.

? Procedural DML or Low level: DML requires a user to specify what data are needed and how to get those data.

? Non-Procedural DML or High level: DML requires a user to specify what data are needed without specifying how to get those data.

QUESTION 30:
What is VDL (View Definition Language)?

ANSWER:
It specifies user views and their mappings to the conceptual schema.

QUESTION 31:
What is DML Compiler?

ANSWER:
It translates DML statements in a query language into low-level instruction that the query evaluation engine can understand.

QUESTION 32:
What is Query evaluation engine?

ANSWER:
It executes low-level instruction generated by compiler.

QUESTION 33:
What is DDL Interpreter?

ANSWER:
It interprets DDL statements and record them in tables containing metadata.

QUESTION 34:
What is Record-at-a-time?

ANSWER:
The Low level or Procedural DML can specify and retrieve each record from a set of records. This retrieve of a record is said to be Record-at-a-time.

QUESTION 35:
What is Set-at-a-time or Set-oriented?

ANSWER:
The High level or Non-procedural DML can specify and retrieve many records in a single DML statement. This retrieve of a record is said to be Set-at-a-time or Set-oriented.

QUESTION 36:
What is Relational Algebra?

ANSWER:
It is procedural query language. It consists of a set of operations that take one or two relations as input and produce a new relation.

QUESTION 37:
What is Relational Calculus?

ANSWER:
It is an applied predicate calculus specifically tailored for relational databases proposed by E.F. Codd. E.g. of languages based on it are DSL ALPHA, QUEL.

QUESTION 38:
How does Tuple-oriented relational calculus differ from domain-oriented relational calculus

ANSWER:
The tuple-oriented calculus uses a tuple variables i.e., variable whose only permitted values are tuples of that relation. E.g. QUEL

The domain-oriented calculus has domain variables i.e., variables that range over the underlying domains instead of over relation. E.g. ILL, DEDUCE.

QUESTION 39:
What is normalization?

ANSWER:
It is a process of analysing the given relation schemas based on their Functional Dependencies (FDs) and primary key to achieve the properties

? Minimizing redundancy

? Minimizing insertion, deletion and update anomalies.

QUESTION 40:
What is Functional Dependency?

ANSWER:
A Functional dependency is denoted by X Y between two sets of attributes X and Y that are subsets of R specifies a constraint on the possible tuple that can form a relation state r of R. The constraint is for any two tuples t1 and t2 in r if t1[X] = t2[X] then they have t1[Y] = t2[Y]. This means the value of X component of a tuple uniquely determines the value of component Y.

QUESTION 41:
When is a functional dependency F said to be minimal?

ANSWER:
? Every dependency in F has a single attribute for its right hand side.

? We cannot replace any dependency X A in F with a dependency Y A where Y is a proper subset of X and still have a set of dependency that is equivalent to F.

? We cannot remove any dependency from F and still have set of dependency that is equivalent to F.

QUESTION 42:
What is Multivalued dependency?

ANSWER:
Multivalued dependency denoted by X Y specified on relation schema R, where X and Y are both subsets of R, specifies the following constraint on any relation r of R: if two tuples t1 and t2 exist in r such that t1[X] = t2[X] then t3 and t4 should also exist in r with the following properties

? t3[x] = t4[X] = t1[X] = t2[X]

? t3[Y] = t1[Y] and t4[Y] = t2[Y]

? t3[Z] = t2[Z] and t4[Z] = t1[Z]

where [Z = (R-(X U Y)) ]

QUESTION 43:
What is Lossless join property?

ANSWER:
It guarantees that the spurious tuple generation does not occur with respect to relation schemas after decomposition.

QUESTION 44:
What is 1 NF (Normal Form)?

ANSWER:
The domain of attribute must include only atomic (simple, indivisible) values.

QUESTION 45:
What is Fully Functional dependency?

ANSWER:
It is based on concept of full functional dependency. A functional dependency X Y is full functional dependency if removal of any attribute A from X means that the dependency does not hold any more.

QUESTION 46:
What is 2NF?

ANSWER:
A relation schema R is in 2NF if it is in 1NF and every non-prime attribute A in R is fully functionally dependent on primary key.

QUESTION 47:
What is 3NF?

ANSWER:
A relation schema R is in 3NF if it is in 2NF and for every FD X A either of the following is true

? X is a Super-key of R.

? A is a prime attribute of R.

In other words, if every non prime attribute is non-transitively dependent on primary key.

QUESTION 48:
What is BCNF (Boyce-Codd Normal Form)?

ANSWER:
A relation schema R is in BCNF if it is in 3NF and satisfies an additional constraint that for every FD X A, X must be a candidate key.

QUESTION 49:
What is 4NF?

ANSWER:
A relation schema R is said to be in 4NF if for every Multivalued dependency X Y that holds over R, one of following is true

? X is subset or equal to (or) XY = R.

? X is a super key.

QUESTION 50:
What is 5NF?

ANSWER:
A Relation schema R is said to be 5NF if for every join dependency {R1, R2, …, Rn} that holds R, one the following is true

? Ri = R for some i.

? The join dependency is implied by the set of FD, over R in which the left side is key of R.

HTTP Headers

2010-06-29T21:52:00.000+05:30

In HTTP protocol, client(also referred as a user agent) submits HTTP requests to the server by sending messages to it. The server sends messages back to the client in HTTP response. Both HTTP requests and HTTP responses use headers to send information about the HTTP message. A header is a series of lines, with each line containing a name followed by a colon and a space, and then a value. The fields can be arranged in any order. Some header fields are used in both request and response headers, while others are appropriate only for either a request or a response.

Many request header fields will allow the client to specify several acceptable options in the value part and, in some cases, even rank each option’s preference. Multiple items are separated using a comma. For example, a client could send a request header that includes “Content-Encoding: gzip, compress,” indicating it would accept either type of compression. If the server uses gzip encoding for the response body, its response header would include “Content-Encoding: gzip“. One can add his own field in HTTP headers so that it contains some value specified by user. Some fields can occur more than once in a single header. For example, a header can have multiple “Warning” fields.

In most the the hacking contest you will find atleast one question on HTTP headers. Information can be hidden in them. To clear that level you have to see and edit the HTTP headers fields. There are lots of softwares/addons available on the net that make it possible to see and edit HTTP header.

Some firefox addon: Firebug, Add and Modify Headers, Live HTTP headers

For more information regarding HTTP headers fields and their values please visit http://en.wikipedia.org/wiki/HTTP

BackTrack : The hacker's haven

2010-06-29T21:48:00.000+05:30

Whether you are hacking wireless, exploiting servers, learning, performing a web application assessment, or social-engineering a client, BackTrack is the one-stop-shop for all of your security needs. BackTrack is intended for all audiences from the most savvy security professionals to early newcomers to the information security field. BackTrack promotes a quick and easy way to find and update the largest database of security tool collection to-date.

The evolution of BackTrack spans many years of development, penetration tests, and unprecedented help from the security community. BackTrack originally started with earlier versions of live Linux distributions called Whoppix, IWHAX, and Auditor. When BackTrack was developed, it was designed to be an all in one live cd used on security audits and was specifically crafted to not leave any remnants of itself on the laptop. It has since expanded to being the most widely adopted penetration testing framework in existence and is used by the security community all over the world.

Offensive Security has announced the release of BackTrack 4, an Ubuntu-based live DVD containing a large collection of tools for security audits, computer forensics and penetration testing: “BackTrack 4 final is out and along with this release come some exciting news, updates, and developments. BackTrack 4 has been a long and steady road, with the release of a beta last year, we decided to hold off on releasing BackTrack 4 final until it was perfected in every way, shape and form. This release includes a new kernel, a larger and expanded toolset repository, custom tools that you can only find on BackTrack, and more importantly, fixes to all major bugs that we knew of. This release has received an overwhelming support from the community and we are grateful to everyone who has contributed to the success of this release.”

Name of some tools that are included in BackTrack
1. Metasploit integration
2. RFMON Injection capable wireless drivers
3. Kismet
4. AutoScan-Network
5. Nmap
6. Ettercap
7. Wireshark (formerly known as Ethereal)
8. BeEF (Browser Exploitation Framework)

Download BackTrack
For more information about BackTrack visit their website.

Rapidshare and Megaupload Premium Link Generators

2010-06-29T21:45:00.000+05:30

I think all of us are regular user of Rapidshare and Megauplaod ,famous file sharing websites. Everytime when we want to download we have to wait for certain amount of time untill the download link appears. In case of Rapidshare, if your ip is already downloading some files from their server then you have to wait for the time period untill that download finished. Thus you might want to get yourself a premium account to avoid waiting every time you download files from it. Unfortunately, we don’t have money or don’t have will to buy premium account. Specially kids and teenagers who don’t own credit cards are not able to purchase a premium account.

Thus here are some link that genrate premium account for you so that you can download files easily.

http://rapid8.com/
http://www.rapidtime.net/
http://rapidshare-premium-link-generator.com/
http://premiumrapidshare.net/rapidshare.php
http://www.youleech.net/
http://www.hellorapid.com/public/index.php

To see how Rapidshare, Megaupload Premium Link Generator works visit link

If you have a Rapidshare premium account, you can also set up a generator for others using the source code provided on internet. I’m not sure if it’s legal though, so use at your own risk.

How to operate torrents behind a firewall

2010-06-28T23:00:00.000+05:30

Use of BitTorrent is not possible on some networks (e.g. institute or office lan). By using a secure connection (SSH), you can bypass almost every firewall. Linux or a UNIX-based OS terminal supports SSH. For Windows, you have to download SSH clients. There are may SSH clients, but PuTTY is (probably) the best and certainly the most popular. For this hack you need a SSH account. You can try one of these free shell providers from this list . So here it goes….
Steps:
1. Run putty and In the address box, put the hostname or IP address of the server you have an SSH account on. Make sure the SSH radio button or check-box is ticked, and be sure you’re using port 22.
2. In the menu, click on Proxy tab under Connections and put your proxy settings there.
3. In the menu, click on SSH and select enable compression. this will compress the traffic thru your SSH tunnel, which not only provides a modest improvement in transfer rates, but has some minor security benefits as well. Set your preferred protocol to “2″, or “2 only”.
4. Click on the tunnels menu under SSH. At the bottom, select the dynamic button, and enter a source port. Use any port (greater than 1024 like 4567). Click the “add” button.
5. Go back to the session tab in the menu, enter in a title for this proxy, and click save.
6. Now Configure your BitTorrent client. In uTorrent go to Options > Preferences > Connection. Enter your port number (which u use earlier like 4567), socks 4 or 5 as type, and localhost in the proxy field. Socks5 is preferable to version four, and supported by our SSH tunnel, so select it. Click OK, and you should now be proxying thru the server with the SSH account.
You’re done, restart your BitTorrent client and you’re ready to go. BitTorrent over SSH tends to be a bit slower than your normal connection, but it’s a great solution when BitTorrent connections are blocked.

Pakistan blocks 800 URLs over Facebook cartoon row

2010-05-23T00:14:00.002+05:30

Pakistani authorities have blocked 800 URLs that feature "blasphemous" and "sacrilegious" content in the wake of the ban on Facebook and YouTube, a representative of the country's association of internet service providers said on Saturday.

Acting on an order of the Lahore High Court, the Pakistan Telecommunication Authority initially banned popular social networking website Facebook over a page featuring a contest for "blasphemous" cartoons of Prophet Mohammed.

The ban was later extended YouTube and other links. The move also affected access to Wikipedia and Twitter, internet users said.

"So far, two sites and about 800 URLs have been blocked to prevent access to blasphemous and sacrilegious content," Wahaj-us-Siraj, a spokesman for the Internet Service Providers Association of Pakistan said.

URL or Uniform Resource Locator is the global address of documents and other resources on the World Wide Web.

Siraj said that since the author of the page on Facebook featuring the blasphemous cartoons had been removed, the PTA "probably needs to go back to the Lahore High Court, and then the court could lift the ban".

The final decision in such matters would have to be made by the PTA, he said. PTA spokesman Khurram Mehran said the authority would lift the ban only after receiving instructions from the government.

The competition for the caricatures triggered angry protests in Pakistan though internet users in bigger cities expressed disappointment at the blanket ban on popular websites.

Islam strictly prohibits the depiction of any prophet as blasphemous and Muslims all over the world staged angry protests over the publication of satirical cartoons of Prophet Mohammed in European newspapers in 2006.

Pakistan briefly banned YouTube in February 2008 over blasphemous cartoons of the Prophet Mohammed.

Facebook Privacy Breach-Shares Usernames With Advertisers

2010-05-22T16:43:00.002+05:30

Last night the Wall Street Journal published about a new Facebook “privacy loophole” that resulted in user information being shared with advertisers. The information that was often shared by Facebook was the username of the person who clicked on the ad as detailed by Ben Edelman. While Facebook has become the subject of security attacks in recent weeks and has come under fire for legitimate concerns, your username has always been for sale, and not by Facebook.

A number of companies in the “social media” space are in the business of selling your data to third parties. Interestingly enough, many of these companies already have the profile data of the majority of Facebook users. That information has been systematically collected through applications as well as public resources found through Google. Trust me, the advertiser who could have theoretically collected your username through ads (even though they probably didn’t realize this was possible), would have paid more for your data by purchasing Facebook ads than going direct to third-party data sales companies.
The irony of the recent Facebook privacy debacle is that Facebook is actually attempting to give users more control, while third-parties are simultaneously stripping users of it. Yes, Facebook has overstepped their boundaries with the new “Instant Personalization” program in my own opinion, however most of your data has been accessible as long as you’ve been on the site.
Most likely that information was shared through third-party applications, but even if you chose not to use those applications, new data sales companies will create profiles of you based on the data you placed across multiple social networks. While we could dive into more details about the business of data sales the main point is this: having your Facebook username shared with advertisers is the tip of the iceberg.
The best way to protect your information is to avoid posting online anything you don’t want public. While I support users’ right to privacy, it’s best to assume your data is already available to other parties the moment you put it online. While I think we’re in the midst of a greater debate over the future of user privacy on the web thanks to the latest Facebook changes, the users already had control the moment they put their information into the ether.

Latest Kites Movie Review

2010-05-22T16:22:00.000+05:30

For over a year now, the Roshans have been drumming up a steady beat, a feat unheard of in the film industry, in promoting their home production Kites. Be it the Barbara Mori-Hrithik Roshan kiss that almost put paid to his marriage with Suzanne, or the ailments suffered by director Anurag Basu and Barbara Mori, which bonded them on the sets or any such trivia they could get their hands on. Topmost being the Barbara-Hrithik romance/chemistry/escapades. All I believe, well choreographed by their PR machinery to feed the hungry media always on the overdrive to be the 'first' to get the 'scoop'.

So why am I beginning a review with the Roshan's PR strategy? Well, to begin with, this film does warrant this type of a scrutiny considering the moolah pumped in for PR, marketing, and the fact the that this is Hrithik's major release after two years. JODHAA AKBAR being his last if you discount his guest appearance in LUCK BY CHANCE. Everything for Hrithik hinged on KITES and he put every ounce of his creative energy in the promotion.

So is the PR strategy a success? You bet. Considering the people that thronged to watch the paid previews. Hrithik is a top draw and he does not disappoint once he gets his audience settled in their seats. KITES is a complete entertainer, a first of its kind in Bollywood; a multi-lingual film in Hindi-English and a spattering of Spanish. However, this film may find it hard to penetrate the interiors precisely for this reason.

But for now, let's celebrate KITES.

The story is uncomplicated. J (Hrithik) is a dance teacher with an eye on making a quick buck. Almost nine marriages later, with immigrants wanting a Green Card, he is stalked by Gina (Kangana Ranaut) a psycho who is besotted by him. J is freaked but soon realizes that she is his jackpot. Natasha (Barbara Mori) is one of his 'brides' who is now marrying Tony (Nick Brown), Gina's brother. Their father is an influential businessman who fronts a famous casino in the US of A. They have the entire state machinery in their pockets. Rub them the wrong way at your own risk.


	download KITES wallapers

Here is where a deliciously terrifying thunderbolt of love strikes. Both Hrithik and Barbara look good together and put in super performances. Hrithik, first gets to display his dance, then romance and finally, fury. What more can you want? At least it's not a brainless entertainer.

Basu uses camera movements to highlight emotions to telling effect. In one scene, where J and Natasha are getting passionate, the camera lingers on her family portrait and she immediately backs off. Her poverty is powerfully driven home and the marriage she is getting into for money's sake. The editing is sharp, getting back to 'cut' after a flashback scene. It's a seamless flow of action, dance and drama. Speaking about action, the scenes are top-notch, on par with the best in Hollywood.

Apart from Hrithik and Barbara, who makes the cut, Nick Brown puts in a power performance as the 'crazy' casino owner who will not spare anyone who crosses his path. Kangana as the psycho is perfect while Kabir Bedi is judiciously used. The music changes mood to the feel of the scenes from Wild West to simply bollywood.

At the start, Hrithik's voice-over explains the reasoning of KITES. In the end, you see the allegory.

KITES is a business module for anyone wanting to invest in movies and hit the jackpot. Provided they also get their PR machinery in place, almost a year before the release.

Rating - 2/5

Investigators say IPL fixed: Newspaper report

2010-04-23T22:26:00.000+05:30

The Indian Premier League (IPL) matches you have been keenly following for most of the past two months have been fixed, according to an income tax (I-T) report. Worse still, by none other than your cricketing idols.

Shockingly, those involved in fixing the matches are superstars of Indian cricket and even an international player, who is a captain of one of the teams, according to a top official in Delhi who is part of the I-T team investigating the alleged IPL scam. Some team owners too are allegedly involved.

Thankfully, the Big Three of Indian cricket -- Sachin Tendulkar, Sourav Ganguly and Rahul Dravid -- are clean and above this muck, the I-T investigator revealed.

The report (a copy of which is with MiD DAY) says, "During IPL, the match fixing and betting racket has scaled new heights."

Some seniors have allegedly been influencing juniors, often from their own regions, to fix matches. Probably for the first time in cricketing history, senior and junior cricketers playing in rival teams jointly fixed the outcome of matches, the official said. A clear pattern has supposedly emerged where a particular bowler has bowled easy deliveries and dropped catches, while his 'partner in crime' went on a scoring spree.

Investigating teams from I-T and the Enforcement Directorate are analysing phone records of some of the franchises after match-fixing speculations. Investigators are checking the phone records of several personalities who had access to VIP enclosures during IPL matches.

One of the persons mentioned in the I-T report is Samir Thukral, who, according to the report, "has an opulent lifestyle despite having no apparent source of income" and "carries out the betting on behalf of Lalit Modi where insider information as well as outcome fixing are hinted at".

About the IPL chairman's involvement, the I-T report says, "Lalit Modi is apparently deeply embroiled in both generation of black money, money laundering, betting in cricket (match fixing of certain IPL matches)."
While the report says that Thukral "is a permanent fixture at all IPL tournament matches", he told MiD DAY that he had attended only one match this season.

In an e-mail, Thukral said, "I would like to state that Lalit Modi is an old friend from college days and I have known him for over 30 years. However, I have no business or financial dealings with him or the IPL of any sort.

Also, in the last eight to 10 months I have only had the opportunity to meet him once. I strongly refute the allegations which are being made against me in the news; there is no truth in any of them."

A bookie, who did not wish to be named, revealed, "The stakes are so high that all operators want a share of the income. The value of IPL is well over Rs 6,000 crore and betting during each match is estimated at around Rs 500 crore. Some members of the underworld are believed to have secretly invested in the teams."

Google’s Go: A New Programming Language: Python plus C++

2009-11-11T19:58:00.000+05:30

Google on Tuesday said it was putting into the open source realm an experimental programming language called Go, which attempts to combine the development speed of a dynamic language like Python with the performance and safety of a compiled language like C or C++.

Here’s how Google describes Go in its blog post:

Go attempts to combine the development speed of working in a dynamic language like Python with the performance and safety of a compiled language like C or C++. In our experiments with Go to date, typical builds feel instantaneous; even large binaries compile in just a few seconds. And the compiled code runs close to the speed of C. Go is designed to let you move fast.
We’re hoping Go turns out to be a great language for systems programming with support for multi-processing and a fresh and lightweight take on object-oriented design, with some cool features like true closures and reflection.

Go is …

… simple

package main

import "fmt"

func main() {
  fmt.Printf("Hello\n")
}

… fast

Go compilers produce fast code fast. Typical builds take a fraction of a second yet the resulting programs run nearly as quickly as comparable C or C++ code.

… safe

Go is type safe and memory safe. Go has pointers but no pointer arithmetic. For random access, use slices, which know their limits.

… concurrent

Go promotes writing systems and servers as sets of lightweight communicating processes, called goroutines, with strong support from the language. Run thousands of goroutines if you want—and say good-bye to stack overflows.

… fun

Go has fast builds, clean syntax, garbage collection, methods for any type, and run-time reflection. It feels like a dynamic language but has the speed and safety of a static language. It's a joy to use.

… open source

Go for it.

Destroy twitter..a twitter app built on adobe air

2009-10-23T22:24:00.003+05:30

DestroyTwitter is a compact though robust Twitter application built to run on Mac, Windows, and Linux using Adobe AIR. It consists of a series of canvases that constantly update to keep tweets up-to-date using notifications that appear when a new tweet arrives. DestroyTwitter uses a minimal amount of memory compared to its AIR-based alternatives without sacrificing functionality and performance. As a result, it can easily run in the background as an automated process.

DestroyTwitter also features complete direct messaging functionality. Messages and tweets can be replied to with the original visible for quick and easy reference. A search function is also available to track anything that’s being talked about although not as powerfull as Tweetdeck’s searching options

Destroy Twitter’s full Feature List

– Auto refresh
– Notifications
– Full tweet, reply, and direct message support
– User profiles
– Preferences
– Searching
– Account updating
– Scroll wheel support
– TinyURL integration
– Mac OS X hotkey support
– Tweet dialogue
– API limit status and notification

You can choose from three different “canvases” displayed in columns:

Home, Replies and (Direct) Messages
Search, Saved (Favorites), and Sent
Preferences, Account, People

Each pane is pretty much self explanatory for most Twitter users, even though they’ve given them slightly different names.. The account pane shows your profile information and the people pane shows user information when you click on an avatar, similarly to Tweetdeck. Unlike Tweetdeck you can’t create custom columns for groups, probably the most important feature in TweetDeck in my book.

The preferences pane is where the best features are. You can fine-tune your preferences to open the app at start-up, manage the size of the workspace and how many tweets you want to show at once, or make the font size larger (essential for me, the font when it first launches is unbelievably small). In these days of limkited API calls to Twitter, you can set how often you want DestroyTwitter to ping Twitter for new Tweets and you can set different rates for search and messages, so you can ration your 100 calls to the API per hour based on how you use Twitter. Like the new release of TweetDeck, you can also see how many calls to the API you’ve made, and if you’ve gone over limit, when you’ll be able to call again.

NS2 installation problems in ubuntu

2009-10-11T22:55:00.002+05:30

The ns2 version taken here is 2.31, if you downloaded any other version, please modify your version during installation

1)Uncompress the ns2

tar zxvf ns-allinone-2.31.tar.gz
or
gzip -d ns-allinone-2.31.tar.gz
tar xvf ns-allinone-2.31.tar

2) cd /opt/ns-allinone-2.31 (since /opt is the folder which is unused, so i have selected that folder to install, however you can install that in any folder)

3) ./install (execute the command)

4) If the installation fails in the middle, then try to install the linux packages that are

necessary to run NS2. (In any linux (ubuntu or fedora or redhat or suse), install the TCL/TK, Perl packages during the installation of linux...)

Common errors

While installing ns2, sometimes we get errors some of them are mentioned below (as keywords used to search). Apart from these errors there are many other types of errors also which occurs.

tcl8.4.18 make failed! exiting…
tk8.4.18 make failed!
make: *** [tk3d.o] error 1 tk8.4.18 make
tk8.4.18 make fail

Here are some steps and precautions to install ns2 in one shot.

Always install your linux distro with full programming support, this will help you to install ns2 more easily, here programming support means support for perl, tcl, gcc etc.
Also install this packages

install autoconf

install automake

install gcc-c++

install libX11-devel

install xorg-x11-proto-devel

install libXt-devel

install libXmu-devel

Now try installing ns2, hope it should get install properly

5) Once the installation succeeded, then the path information will be provided by the NS2

6) Set the path in the /root/.bash_profile
(vi /root/.bash_profile)

or
If you are a user home//.bash_profile (for example, if your the username is tsp, then execute this command vi /home/tsp/.bash_profile)
7) set the PATH and the LD_LIBRARY_PATH according to the point number 11.

8) logout and login.

9) go to the terminal and try ns or nam

Track your information with Formfox-Addon for Firefox

2009-10-11T02:32:00.000+05:30

Track your information with Formfox

Do you know where your information is going once you send it across the internet? Well you may be surprised at what you find about some of the most trusted sites. That's when Formfox comes in. Formfox allows you to protect yourself by knowing where your information is being sent and who can see this information. The information of where your information is going shows up anywhere information can be entered at. I know I said information too much in one sentence lol, but its all good. So is your information if you use Formfox to keep your personal information safe from hackers and identity thieves.

Firefox features

2009-10-11T02:28:00.001+05:30

Features

Firefox 3.5 uses the Gecko 1.9.1 engine, which adds features that were not included in the 3.0 release. These include support for the and elements defined in the HTML 5 draft specification, with a goal to offer video and audio playback without being encumbered by patent issues associated with most plugin and codec technologies.^[27] Codecs for Theora video, Vorbis audio and the Ogg container are built in. As originally recommended by HTML 5 (see Ogg controversy), this codec combination for supporting the audio and video elements are also working in test versions of the Opera and Chrome browsers, see Theora#Playback. Cross-site XMLHttpRequests (XHR), which can allow for more powerful web applications and an easier way to implement mashups, are also implemented in 3.5.^[28] A new global JSON object contains native functions to serialize and deserialize JSON objects, as specified by the ECMAScript 3.1 draft,^[29] and CSS 3 selector support has been added. Multi-touch support was also added to the release, including gesture support like pinching for zooming and swiping for back and forward.^[30] Firefox 3.5 also features an updated logo from the previous releases.^[31]

A minor change for Version 3.5 is the default search engine in Russian language builds, which uses the search engine Yandex rather than Google, after a survey of Russian Firefox users indicated they preferred Yandex.^[32]

The first update, 3.5.1, was released on July 16, 2009. It solved some vulnerabilities detected after the final release. Another update, 3.5.2, was released on August 3, 2009, followed by version 3.5.3 on September 9, 2009.

The results of the Acid3 test on Firefox 3.5

Starting July 14, 2009, the upgrade to 3.5 was offered to users of Firefox 3.0 through the automatic internal "push" update mechanism.

What is John the Ripper

2009-09-30T00:12:00.002+05:30

John the ripper is a password cracking tool which decryptes the passwords using DES standards..

Password Files

Create a text document with the password that you want to crack in it with the format given below

john:234abc56

Or you can just use the file in the format it is given, John the Ripper will work with either format, this is an example of what part of a password file looks like with all the information.

john:234abc56:9999:13:John Johnson:/home/dir/john:/bin/john

To open a text document in windows go to start/programs/accessories/word pad

-----------------2.1
Broken down, this is what the above password file states:

john:234abc56:9999:13:John Johnson:/home/dir/john:/bin/john

Username: john

Encrypted Password: 234abc56

User Number: 9999

Group Number: 13

Other Information: John Johnson

Home Directory: /home/dir/john

Shell: /bin/john

John the Ripper

Open a Dos window, then change to the directory in which the john.com file is in (using the cd comand) then you must decide how you want to crack the file. I would recommend the following approach
single mode
wordlist mode
wordlist mode with rules
incremental

To open a dos window go to start/programs/dos prompt

Using the Single Crack Mode

Using the single crack mode is recommended as the first mode as it will break all the week passwords. Single crack mode runs through a set of simple rules with a basic word list, this mode is a good way to start as it is fast and will quickly break weak passwords.

john -single pass.txt

where pass.txt is your password file, information on configuring the single crack mode from the defaults is given in the documentation that comes with John the Ripper in the RULES document

Using the Wordlist Mode

To run John the Ripper with a wordlist using the rules option, type in the Dos window

john -w:word.dic -rules pass.txt

where word.dic is your wordlist and pass.txt is your password file, a word list of 2megs is recommended. This mode of cracking will use your specified wordlist with a set of rules and will break most passwords as most users will chose passwords which have meaning and are easy to remember.

Using the Incremental Mode

The incremental mode should be used after trying the single and wordlist modes.

john -i:all pass.txt goes through all characters

john -i:alpha pass.txt goes though all the letters

john -i:digits pass.txt goes through all numbers

john -i:lanman pass.txt goes through capital letters, lower case letters, numbers and a few special characters

The incremental does as the name suggests by incrementing though all possible permiutations of the character set. First it would try a then b then c through to zzzzzz if the minimum value was 1 and the maximum value was 6, and the character set was all lower case letters.

Using an external mode

.
john -external:MODE pass.txt

where pass.txt is the password file to be cracked and MODE is defined in the john.ini file in the [list.External:MODE] section.

Trading Hard-Drive Space for Speed

Trading hard-drive space for speed

if you use jtr and you use the incremental modes often you might want to try this.

john -stdout i:[whatever] > blah.txt

where whatever is your favorite mode for john. Then when you want to run that incremental you would type

john -w:blah.txt

this works much faster and comes in handy if you can trade hard drive space for preformance

Customizing Cracking Modes

Configuring Incremental Mode

Editing the john.ini file for the incremental mode can be done as shown below

1) scroll down to where it says #incremental

2) go to the

[Incremental:Alpha]

File = ~/alpha.chr

MinLen = 0

MaxLen = 8

CharCount = 26

Now you need to guess the minimum and maximum lengths so if you think that it is a 5 digit password you would change it to look like

[Incremental:Alpha]

File = ~/alpha.chr

MinLen = 5

MaxLen = 5

CharCount = 36

Extra=1234567890

save your changes and then open your Dos windows and type

john -i:alpha pass.txt

Configuring the Wordlist Mode

Open the john.ini file and scroll down to the

[list.Rules:Wordlist]

add the rules in the order that u want them to run, for more information on how to create a rule set refer to the RULES document that comes with John the Ripper click here for some examples.

Making a Character Set

To generate a character set for use with the incremental mode.

This mode is usefull in using any characters you choose to use. Say for instance by some deceptive means that we know the password is only made up of capitol letters and numbers.
( but you can use any combination of upper case, lower case, a couple of special chars, any thing you want to add).

To generate the character set follow the following instructions.

1) Open up a text editor (click here if unsure how)

2) type the characters you want preceeded by a ":" you will type this

:ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789

3) then goto save as " john.pot" make sure you DONT save it as a text file so select all file types, also make sure you save it in the same dir as your JTR program.

4) Then go to your dos prompt where you normally run JTR from and type

john -makechars:custom.chr

5) JTR will do a few calculations and it will tell you how many characters you have used - make a note of how many.

6) then either edit john.ini or open it with your text editor. Scroll down till you see the incremental section. Add the following lines.

[Incremental:custom]

File = ~/custom.chr

Minlen = 0

Maxlen = 8

CharCount = 36

7) You make the charcount what ever JTR calculated - obviuosly if you have the alphabet plus ten numbers that is going to add up to 36, then save the changes made to john.ini.
minlen and maxlen can be anything you want, for values of min length under 3 is almost instantanous so you may as well make it start at 0 just in case some sys admin was feeling easy that day. There is no sense in making the max lenghth larger than 8 unless you have way too much time on your hands, especially in word mode where the way JTR handles it - if it gets a match on the first 8 chars then that will be considered a correct guess.

9) In your dos prompt or wherever you normally run JTR from type

john -i:custom pass.txt

where pass.txt is the password file to break

Cracking specific accounts

a) ignoring a type of shell

b) choseing the shells u want to crack

c) cracking specific users in multiple accounts

d) excluding users from cracking attempt

e) loading specific users

a)
If you notice that an account has a disabled shell you can make John ignore them. If the disabled shell was /etc/expired you would type

john -show -shells:-/etc/expired password.txt

where password.txt is the encrypted file. If there are multiple shells you wish to ignore you would type

john -show -shells:-expired,newuser password.txt

if the other shell was /etc/newuser

b)
If you only want to crack accounts from shells;sh,csh,tcsh,bash you would type
john -w:dictonary.dic -rules -shells:sh,csh,tcsh,bash

you might choose this option if the other user accounts have very limited priviledges

c)
To crack a specific user in multiple password files password1.txt password2.txt and password3.txt you would type

john -w:dictonary.dic -rules -users:0 password*

that will attempt to crack root in all three files.

d)
To exclude users from the cracking attempt, for example say that you know the root password consists on 9 characters, since you wont want to waste your time trying to crack root you would type

john -w:dictonary.dic -rules -users:-root password.txt

e)
Loading specific users type
john -users:[-]LOGIN|UID[,..] pass.txt for specific users
john -groups:[-]GID[,..] pass.txt for specific groups
john -shells:[-]SHELL[,..] pass.txt for specific shells

with the shell option you can omit the path before a shell name, so '-shells:csh' will match both '/bin/csh' and '/usr/bin/csh', while '-shells:/bin/csh' will only match '/bin/csh'.

Simultaneous Cracking

If you have several password files you can crack them all at the same time, if your password files are password1.txt, password2.txt and password3.txt you would type

john -single password1.txt password2.txt password3.txt
or
john -single password*

Defining Custom Rules

Rules
There isn't really any way that I can make all this up from scratch, so I am going to refer heavily to the JTR documentation in this section, though I will add examples of how you could use each option. I am unfortunately going to tell you that you must read the example rules in the original john.ini file as these are well annotated and explain what happens to each word. I am not going to explain the rules too simply so click here for a breakdown of what each command does.

I am going to assume you leave the -single option alone, but want to apply rules to your own wordfile. The command to run is then :

john password.txt -w:wordfile.dic -rules

Load up the original john.ini and find this about half way down :

Wordlist mode rules

[list.Rules:Wordlist]

This is where you will type your rules, and where the example set are. Note that any line starting with "#" is an annotation and ignored by JTR, and I ( and I suggest you ) comment out lines that could be run by adding a semi-colon in front of it so that JTR skips it this time.

I suggest you delete everything that is there already - remember you can click the above link to get them back again. Remember that in what follows, only the yellow lines would run - so comment the others out ( best not delete them so you can refer back to them later )

<4>7

only check words that are 5 or 6 characters long

<5>7lc

only check words that are 6 long, and then lowercase and make first letter a capital

l<9/ese3

lowercase, and swap 'e' for '3'. Reject if no 'e' or longer than 8

l>2<4/isi1

lowercase, and swap 'i' for '1'. Reject if no 'i' or length not equal to 3

l<8/isi1^[0-9]

lowercase, swap 'i' for '1' and prepend 0-9 in turn. Reject if no 'i' or starting word length is 8+

'6/ese3/isi1$[0-9]

Truncate at 6 long, swap 'i' for '1' and 'e' for '3' and append one digit. Reject if no 'i' or 'e'

Word = 4 long, prepend 2 digits ( i.e. birthyear ) and swap case of second letter ( position 1 )

'7T0$[aeiou0-9]

Truncate at 7 chars, swap case of first letter, then append either a vowel or a number

i0[X]i2[Y]

Using insertion, make first char be 'X' and third 'Y' - i.e. word -> XwYord

o4[123]

Overwrite fifth character to be 1,2 or 3 - i.e. password -> pass1ord, pass2ord, pass3ord

!?ds5Y

Reject the word unless it has a number. Swap '5' for 'Y', if it has one

=0?d$6

Reject the word unless it has a digit as the first character. Then append a '6'

@?w

Delete all spaces from the word ( well, phrase here

%2x

Reject the word unless 'x' appears at least twice

Those are the main types of rule, and by mixing and matching then you can probably crack any password that is based on a word. Instant respect to those that crack 2hqBaxh/iGPzU. I have a 91kb word.ini, which about covers everything - but with substantial cutting, pasting, searching and replacing

The only other thing to mention is that in some circumstance ( such as if you applying very complicated rules, or only doing a few simple one ) you can output what the rules are doing to the words by typing :

john -w:wordfile.dic -rules -stdout > output.file

Note that no cracking is actually occuring so no password file is specified. The most useful advantage of the above is that it enables you to check that the rules are doing what you wanted them to do, and that you haven't gone wrong in writing john.ini. Bear in mind that JTR generates words very quickly - mine creates a MB in just over 30 seconds. If you apply very complicated rules to a large wordfile, you can fill up your HD so press 'space' to check on your progress. I wouldn't go running it for more than an hour without some simple maths to check you have the space

Saving and Viewing Cracked Passwords

Saving and restoring multiple or single sessions

saving your cracking attack, push Ctrl C and john will save where it is up to, to resume type

john -restore

This will only allow you to save one file, to save more than one file you must define the session before starting by typing

john -session:name pass.txt

where name is the name you want to give to the session and pass.txt is the password file you want to crack. To restore the session type

john -restore:name

To view how far through a saved session you are type

john -status:name

View your cracked passwords

Type

john -show pass.txt

where pass.txt is the password file to break

Viewing the Status of a Saved or Interrupted file

If your session has been interupted (computer reset, power failure, etc) you can see how far through the process you where by typing

john -status

this will give an output like this

guesses: 3 time: 0:00:00:50

If you have been running multiple session and have them saved using different names you can view each one seperatly by typing

john -status:name1

john -status:name2

where name1 and name2 are two session you where running previously. Click here for information on how to save multiple sessions.

Viewing specific cracked accounts

To check if any root accounts got cracked type

john -show -users:0 password.txt

To check multiple files, password1.txt and password2.txt type

john -show -users:0 password*

To check for privileged accounts type

john -show -groups:0,1 password.txt

Piping the output

What is pipeing? Pipeing is where you can redirect the output of a dos program from the screen into a file. This makes it possible to view all the output, where some of the output wont fit on the screen. Another way to view all the output is using the scroll lock key, however pipeing allows you to reference the output later.
When you crack a large file all the cracked accounts will not fit on to the screen, so to make for easy viewing you can pipe the results into a text file, for example if you had cracked a file called pass.txt to pipe the cracked accounts into a text file you could type

john -show pass.txt > output.txt

where output.txt is the file you wish to pipe the cracked accounts into.

Specifying the Type of Encryption to crack

To change the type of cipher text to crack type

john -format:NAME

where name is one of the following: DES, BSDI, MD5, BF, AFS, LM

Using Salts

The salts are used to make the encryption harder to break, to example sections of password files are given below, try using John the Ripper with both of them and look at the different in the c/s

rj:GpZfNL9Uyz.F6
swimmer:Gpa/yCH9EN4CU
cristian:GpNCyGwgDgRX.
galaxyeng:GpM82aYsocajg
puppy3481:GpLz4TL.M6BeM
Quinn:GpsyHfQzLfwzg
tigger:GpwrQgJEC1otc
boeluv:GpvLPwjqdkmJY
mbrooks:Gpkv73fL6Jh9Y
eros_96:GpoQAPAFJ3FPY
MEvans9321:GpGYjZZWx6lOs
ROOTY:GpCmFE5HFhmeA
alant:GpwVv9cUpUOXo
wickdani:Gp.0w1z7.C79M

Notice that the first two letters of each encrypted password are the same.

admin:ZUThDIlsSDhRs

szymonw:aYCHor8ozVxYg

amac0008:a3sYyPAERdgSc

wula1966:a5q2SbwGztH2s

tommbakk:a5Yf2a.GpI.mk

sundsval:adVAGtPKOFX9g

121221:aeJW.a8Mgo6zU

THEHBIC:ae2RwyRHFh9ME

THEEBIC:ahkhlQxhU0.X6

kwfish:aoeaE0bJ5RmEw

bufflo:arIBOGP3msI42

randy77:uVZ2OleOtJDu6

mxtwrestler:aQ6/Mh5xGU2xc

BUFFLO:aciTcHHepUUZY

Notice that when you run the second password file you will get values of around 7000 c/s where as with the first lots of passwords you will get values around 2500000 c/s. When there are no different salts brute forcing a - zzzzzz becomes a very feasible option.

the modes for using the salts are

-salts:2

-salt:-2

an example command would be

john password.txt -salt:1000 -i:custom

The 'salt' option tells it only to crack accounts if there are at least 1000 accounts with the same salt.

Common Problems

Zero Passwords loaded

click here first, if you have done this step correctly try typing

john -show pass.txt

as the password may already be cracked and stored in john.pot

John opens then immediately closes

John gives you an incorrect password

If you run John and it displays a password that doesnt work or looks like

guesses: 0 time 00.00.01:13 c/s 6100 trying trypah - tuahj

This is NOT a cracked password this is a common mistake people make a cracked

password looks like this

guesses: 0 time 00.00.01:13 c/s 6100 trying trypah - tuahj

blah (blah)

Fatal Errors or Access Denied

Simply delete your copy of John the Ripper and go to the homepage and download it again

Windows XP file association fixes...also adding items in right click

2009-09-07T14:34:00.002+05:30

Recently i stubled upon this amazing collection which has a registry fix for almost every possoble file association in XP.
My regareds to dougnox for this collection
Here are the fixes

The files listed here are all ZIP files, which contain a REG (Registry) file. Download the ZIP and open it. Extract the REG file to your hard disk and double click it. Answer yes to the import prompt. REG files can be viewed in Notepad. Each of the REG files contains the default settings for the file extension indicated. For the ZIP file fix, the download is a REG file, since ZIP's aren't working anyway!

NOTE: If your EXE file associations are corrupted, it can be difficult to open REGEDIT, or to even import REG files. To work around this, press CTRL-ALT-DEL and open Task Manager. Once there, click File, then hold down the CTRL key and click New Task (Run). This will open a Command Prompt window. Enter REGEDIT.EXE and press Enter.

Batch File Association Fix (Restore the default associations for BAT files)
CAB File Association Fix (Restore the default associations for CAB files)
CHM File Association Fix (Restore the default associations for CHM files)
COM File Association Fix (Restore the default associations for COM files) - Thanks to John Hanney
CPL File Association Fix (Restore the default associations for CPL files)
Directory Extension Fix (Restores defaults to HKCR\Directory)
Drive Association Fix (Restores default settings for hard drives)
EML File Association Fix (Restores defaults for EML files)
EXE File Association Fix (Restore default association for EXE files)
Folder Association Fix (Restore default associations for File Folders)
GIF File Association Fix (Restore default associations for GIF Files)
HLP File Association Fix (Restore default associations for HLP files)
HTA File Association Fix (Restore default associations for HTA Files
HTM/HTML Associations (Restore the default associations for htm/html files)
ICO File Association Fix (Restore the default association for ico files)
INF File Association Fix (Restore the default assocation for INF files)
Internet Explorer Desktop Icon Fix (Restore the default behavior for the Desktop IE icon)
JPE/JPG/JPEG Association Fix (Restore the default associations for jpe/jpg/jpeg files)
LNK (Shortcut) File Association Fix (Restores Default Shortcut Behavior)
MPG/MPEG File Association Fix (Restores default associations for MPG/MPEG files)
MSC File Association Fix (Restore default associations for MSC files)
MSI File Association Fix (Restore default associations for MSI files)
MSP File Association Fix (Restore default associations for MSP files)
REG File Association Fix (Restore default associations for REG files)
SCF File Association Fix (Restore default associations for SCF files)
SCR File Association Fix (Restore default associations for SCR files)
TXT File Association Fix (Restore default associations for TXT files)
TIF/TIFF File Association Fix (Restores default associations for TIF/TIFF files)
URL File Association Fix (Restores default associations for URL - Internet shortcuts)
VBS File Association Fix (Restores default associations for VBS files)
ZIP Folder Association Fix (Restores default associations for ZIP Folders - REG File)

Top 100 Network Security Tools (by http://sectools.org/)

2009-08-22T17:38:00.002+05:30

Top 100 Network Security Tools

After the tremendously successful 2000 and 2003 security tools surveys, Insecure.Org is delighted to release this 2006 survey. I (Fyodor) asked users from the nmap-hackers mailing list to share their favorite tools, and 3,243 people responded. This allowed me to expand the list to 100 tools, and even subdivide them into categories. Anyone in the security field would be well advised to go over the list and investigate tools they are unfamiliar with. I discovered several powerful new tools this way. I also point newbies to this site whenever they write me saying “I don't know where to start”.

Respondents were allowed to list open source or commercial tools on any platform. Commercial tools are noted as such in the list below. No votes for the Nmap Security Scanner were counted because the survey was taken on a Nmap mailing list. This audience also biases the list slightly toward “attack” hacking tools rather than defensive ones.

Each tool is described by one ore more attributes:

	Did not appear on the 2003 list
/	Popularity ranking rose / fell the given number since the 2003 survey
	Generally costs money. A free limited/demo/trial version may be available.
	Works natively on Linux
	Works natively on OpenBSD, FreeBSD, Solaris, and/or other UNIX variants
	Works natively on Apple Mac OS X
	Works natively on Microsoft Windows
	Features a command-line interface
	Offers a GUI (point and click) interface
	Source code available for inspection.

Please send updates and suggestions (or better tool logos) to Fyodor. If your tool is featured or you think your site visitors might enjoy this list, you are welcome to use our link banners. Here is the list, starting with the most popular:

Nessus : Premier UNIX vulnerability assessment tool
Nessus was a popular free and open source vulnerability scanner until they closed the source code in 2005 and removed the free "registered feed" version in 2008. A limited “Home Feed” is still available, though it is only licensed for home network use. Some people avoid paying by violating the “Home Feed” license, or by avoiding feeds entirely and using just the plugins included with each release. But for most users, the cost has increased from free to $1200/year. Despite this, Nessus is still the best UNIX vulnerability scanner available and among the best to run on Windows. Nessus is constantly updated, with more than 20,000 plugins. Key features include remote and local (authenticated) security checks, a client/server architecture with a GTK graphical interface, and an embedded scripting language for writing your own plugins or understanding the existing ones.

See all vulnerability scanners

Wireshark : Sniffing the glue that holds the Internet together
Wireshark (known as Ethereal until a trademark dispute in Summer 2006) is a fantastic open source network protocol analyzer for Unix and Windows. It allows you to examine data from a live network or from a capture file on disk. You can interactively browse the capture data, delving down into just the level of packet detail you need. Wireshark has several powerful features, including a rich display filter language and the ability to view the reconstructed stream of a TCP session. It also supports hundreds of protocols and media types. A tcpdump-like console version named tethereal is included. One word of caution is that Ethereal has suffered from dozens of remotely exploitable security holes, so stay up-to-date and be wary of running it on untrusted or hostile networks (such as security conferences).

See all packet sniffers

Snort : Everyone's favorite open source IDS
This lightweight network intrusion detection and prevention system excels at traffic analysis and packet logging on IP networks. Through protocol analysis, content searching, and various pre-processors, Snort detects thousands of worms, vulnerability exploit attempts, port scans, and other suspicious behavior. Snort uses a flexible rule-based language to describe traffic that it should collect or pass, and a modular detection engine. Also check out the free Basic Analysis and Security Engine (BASE), a web interface for analyzing Snort alerts.

Open source Snort works fine for many individuals, small businesses, and departments. Parent company SourceFire offers a complimentary product line with more enterprise-level features and real-time rule updates. They offer a free (with registration) 5-day-delayed rules feed, and you can also find many great free rules at Bleeding Edge Snort.

See all intrusion detection systems

Netcat : The network Swiss army knife
This simple utility reads and writes data across TCP or UDP network connections. It is designed to be a reliable back-end tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need, including port binding to accept incoming connections. The original Netcat was released by Hobbit in 1995, but it hasn't been maintained despite its immense popularity. It can sometimes even be hard to find nc110.tgz. The flexibility and usefulness of this tool have prompted people to write numerous other Netcat implementations - often with modern features not found in the original. One of the most interesting is Socat, which extends Netcat to support many other socket types, SSL encryption, SOCKS proxies, and more. It even made this list on its own merits. There is also Chris Gibson's Ncat, which offers even more features while remaining portable and compact. Other takes on Netcat include OpenBSD's nc, Cryptcat, Netcat6, PNetcat, SBD, and so-called GNU Netcat.

See all Netcats

Metasploit Framework : Hack the Planet
Metasploit took the security world by storm when it was released in 2004. No other new tool even broke into the top 15 of this list, yet Metasploit comes in at #5, ahead of many well-loved tools that have been developed for more than a decade. It is an advanced open-source platform for developing, testing, and using exploit code. The extensible model through which payloads, encoders, no-op generators, and exploits can be integrated has made it possible to use the Metasploit Framework as an outlet for cutting-edge exploitation research. It ships with hundreds of exploits, as you can see in their online exploit building demo. This makes writing your own exploits easier, and it certainly beats scouring the darkest corners of the Internet for illicit shellcode of dubious quality. Similar professional exploitation tools, such as Core Impact and Canvas already existed for wealthy users on all sides of the ethical spectrum. Metasploit simply brought this capability to the masses.

See all vulnerability exploitation tools

Hping2 : A network probing utility like ping on steroids
This handy little utility assembles and sends custom ICMP, UDP, or TCP packets and then displays any replies. It was inspired by the ping command, but offers far more control over the probes sent. It also has a handy traceroute mode and supports IP fragmentation. This tool is particularly useful when trying to traceroute/ping/probe hosts behind a firewall that blocks attempts using the standard utilities. This often allows you to map out firewall rulesets. It is also great for learning more about TCP/IP and experimenting with IP protocols.

See all packet crafting tools

#7
10

Kismet : A powerful wireless sniffer
Kismet is an console (ncurses) based 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. It identifies networks by passively sniffing (as opposed to more active tools such as NetStumbler), and can even decloak hidden (non-beaconing) networks if they are in use. It can automatically detect network IP blocks by sniffing TCP, UDP, ARP, and DHCP packets, log traffic in Wireshark/TCPDump compatible format, and even plot detected networks and estimated ranges on downloaded maps. As you might expect, this tool is commonly used for wardriving. Oh, and also warwalking, warflying, and warskating, ...

See all wireless tools, and packet sniffers

#8
3

Tcpdump : The classic sniffer for network monitoring and data acquisition
Tcpdump is the IP sniffer we all used before Ethereal (Wireshark) came on the scene, and many of us continue to use it frequently. It may not have the bells and whistles (such as a pretty GUI or parsing logic for hundreds of application protocols) that Wireshark has, but it does the job well and with fewer security holes. It also requires fewer system resources. While it doesn't receive new features often, it is actively maintained to fix bugs and portability problems. It is great for tracking down network problems or monitoring activity. There is a separate Windows port named WinDump. TCPDump is the source of the Libpcap/WinPcap packet capture library, which is used by Nmap among many other tools.

See all packet sniffers

#9
23

Cain and Abel : The top password recovery tool for Windows
UNIX users often smugly assert that the best free security tools support their platform first, and Windows ports are often an afterthought. They are usually right, but Cain & Abel is a glaring exception. This Windows-only password recovery tool handles an enormous variety of tasks. It can recover passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols. It is also well documented.

See all password crackers, and packet sniffers

#10
1

John the Ripper : A powerful, flexible, and fast multi-platform password hash cracker
John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Several other hash types are added with contributed patches. You will want to start with some wordlists, which you can find here, here, or here.

See all password crackers

#11
2

Ettercap : In case you still thought switched LANs provide much extra security
Ettercap is a terminal-based network sniffer/interceptor/logger for ethernet LANs. It supports active and passive dissection of many protocols (even ciphered ones, like ssh and https). Data injection in an established connection and filtering on the fly is also possible, keeping the connection synchronized. Many sniffing modes were implemented to give you a powerful and complete sniffing suite. Plugins are supported. It has the ability to check whether you are in a switched LAN or not, and to use OS fingerprints (active or passive) to let you know the geometry of the LAN.

See all packet sniffers

#12
4

Nikto : A more comprehensive web scanner
Nikto is an open source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 3200 potentially dangerous files/CGIs, versions on over 625 servers, and version specific problems on over 230 servers. Scan items and plugins are frequently updated and can be automatically updated (if desired). It uses Whisker/libwhisker for much of its underlying functionality. It is a great tool, but the value is limited by its infrequent updates. The newest and most critical vulnerabilities are often not detected.

See all web vulnerability scanners

#13

Ping/telnet/dig/traceroute/whois/netstat : The basics
While there are many whiz-bang high-tech tools out there to assist in security auditing, don't forget about the basics! Everyone should be very familiar with these tools as they come with most operating systems (except that Windows omits whois and uses the name tracert). They can be very handy in a pinch, although for more advanced usage you may be better off with Hping2 and Netcat.

#14
2

OpenSSH / PuTTY / SSH : A secure way to access remote computers
SSH (Secure Shell) is the now ubiquitous program for logging into or executing commands on a remote machine. It provides secure encrypted communications between two untrusted hosts over an insecure network, replacing the hideously insecure telnet/rlogin/rsh alternatives. Most UNIX users run the open source OpenSSH server and client. Windows users often prefer the free PuTTY client, which is also available for many mobile devices. Other Windows users prefer the nice terminal-based port of OpenSSH that comes with Cygwin. Dozens of other free and proprietary clients exist. You can explore them here or here.

#15
35

THC Hydra : A Fast network authentication cracker which supports many different services
When you need to brute force crack a remote authentication service, Hydra is often the tool of choice. It can perform rapid dictionary attacks against more then 30 protocols, including telnet, ftp, http, https, smb, several databases, and much more. Like THC Amap this release is from the fine folks at THC.

See all password crackers

#16

Paros proxy : A web application vulnerability assessment proxy
A Java based web proxy for assessing web application vulnerability. It supports editing/viewing HTTP/HTTPS messages on-the-fly to change items such as cookies and form fields. It includes a web traffic recorder, web spider, hash calculator, and a scanner for testing common web application attacks such as SQL injection and cross-site scripting.

See all web vulnerability scanners

#17
10

Dsniff : A suite of powerful network auditing and penetration-testing tools
This popular and well-engineered suite by Dug Song includes many tools. dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.). arpspoof, dnsspoof, and macof facilitate the interception of network traffic normally unavailable to an attacker (e.g, due to layer-2 switching). sshmitm and webmitm implement active monkey-in-the-middle attacks against redirected ssh and https sessions by exploiting weak bindings in ad-hoc PKI. A separately maintained partial Windows port is available here. Overall, this is a great toolset. It handles pretty much all of your password sniffing needs.

See all packet sniffers

#18
7

NetStumbler : Free Windows 802.11 Sniffer
Netstumbler is the best known Windows tool for finding open wireless access points ("wardriving"). They also distribute a WinCE version for PDAs and such named Ministumbler. The tool is currently free but Windows-only and no source code is provided. It uses a more active approach to finding WAPs than passive sniffers such as Kismet or KisMAC.

See all wireless tools, and packet sniffers

#19
18

THC Amap : An application fingerprinting scanner
Amap is a great tool for determining what application is listening on a given port. Their database isn't as large as what Nmap uses for its version detection feature, but it is definitely worth trying for a 2nd opinion or if Nmap fails to detect a service. Amap even knows how to parse Nmap output files. This is yet another valuable tool from the great guys at THC.

See all application-specific scanners

#20
12

GFI LANguard : A commercial network security scanner for Windows
GFI LANguard scans IP networks to detect what machines are running. Then it tries to discern the host OS and what applications are running. I also tries to collect Windows machine's service pack level, missing security patches, wireless access points, USB devices, open shares, open ports, services/applications active on the computer, key registry entries, weak passwords, users and groups, and more. Scan results are saved to an HTML report, which can be customized/queried. It also includes a patch manager which detects and installs missing patches. A free trial version is available, though it only works for up to 30 days.

See all vulnerability scanners

#21

Aircrack : The fastest available WEP/WPA cracking tool
Aircrack is a suite of tools for 802.11a/b/g WEP and WPA cracking. It can recover a 40 through 512-bit WEP key once enough encrypted packets have been gathered. It can also attack WPA 1 or 2 networks using advanced cryptographic methods or by brute force. The suite includes airodump (an 802.11 packet capture program), aireplay (an 802.11 packet injection program), aircrack (static WEP and WPA-PSK cracking), and airdecap (decrypts WEP/WPA capture files).

See all wireless tools, and password crackers

#22
4

Superscan : A Windows-only port scanner, pinger, and resolver
SuperScan is a free Windows-only closed-source TCP/UDP port scanner by Foundstone. It includes a variety of additional networking tools such as ping, traceroute, http head, and whois.

See all port scanners

#23
2

Netfilter : The current Linux kernel packet filter/firewall
Netfilter is a powerful packet filter implemented in the standard Linux kernel. The userspace iptables tool is used for configuration. It now supports packet filtering (stateless or stateful), all kinds of network address and port translation (NAT/NAPT), and multiple API layers for 3rd party extensions. It includes many different modules for handling unruly protocols such as FTP. For other UNIX platforms, see Openbsd PF (OpenBSD specific), or IP Filter. Many personal firewalls are available for Windows (Tiny,Zone Alarm, Norton, Kerio, ...), though none made this list. Microsoft included a very basic firewall in Windows XP SP2, and will nag you incessantly until you install it.

See all firewalls

#24

Sysinternals : An extensive collection of powerful windows utilities
Sysinternals provides many small windows utilities that are quite useful for low-level windows hacking. Some are free of cost and/or include source code, while others are proprietary. Survey respondents were most enamored with:

ProcessExplorer for keeping an eye on the files and directories open by any process (like LSoF on UNIX).
PsTools for managing (executing, suspending, killing, detailing) local and remote processes.
Autoruns for discovering what executables are set to run during system boot up or login.
RootkitRevealer for detecting registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit.
TCPView, for viewing TCP and UDP traffic endpoints used by each process (like Netstat on UNIX).

Update: Microsoft acquired Sysinternals in July 2006, promising that “Customers will be able to continue building on Sysinternals' advanced utilities, technical information and source code”. Less than four months later, Microsoft removed most of that source code. Future product direction is uncertain.

See all rootkit detectors

#25
5

Retina : Commercial vulnerability assessment scanner by eEye
Like Nessus, Retina's function is to scan all the hosts on a network and report on any vulnerabilities found. It was written by eEye, who are well known for their security research.

See all vulnerability scanners

Cain & Abel..a password Cracker with Network Sniffing(APR poisoning)

2009-08-22T17:30:00.003+05:30

This utility helps you decrypt or recover your lost or forgotten passwords.

Cain & Abel is a password recovery application for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols.

It covers some security aspects/weakness present in protocol's standards, authentication methods and caching mechanisms; its main purpose is the simplified recovery of passwords and credentials from various sources, however it also ships some "non standard" utilities for Microsoft Windows users.

Cain & Abel has been developed in the hope that it will be useful for network administrators, teachers, security consultants/professionals, forensic staff, security software vendors, professional penetration tester and everyone else that plans to use it for ethical reasons.

The author will not help or support any illegal activity done with this program. Be warned that there is the possibility that you will cause damages and/or loss of data using this software and that in no events shall the author be liable for such damages or loss of data. Please carefully read the License Agreement included in the program before using it.

The latest version is faster and contains a lot of new features like APR (Arp Poison Routing) which enables sniffing on switched LANs and Man-in-the-Middle attacks. The sniffer in this version can also analyze encrypted protocols such as SSH-1 and HTTPS, and contains filters to capture credentials from a wide range of authentication mechanisms.

The new version also ships routing protocols authentication monitors and routes extractors, dictionary and brute-force crackers for all common hashing algorithms and for several specific authentications, password/hash calculators, cryptanalysis attacks, password decoders and some not so common utilities related to network and system security.

Note: Some antivirus and antispyware programs flag Cain & Abel as being infected/malware, although the application is perfectly safe and does not pose a threat to your system. This is called a 'false positive'. The term false positive is used when antivirus software wrongly classifies an innocuous (inoffensive) file as a virus. The incorrect detection may be due to heuristics or to an incorrect virus signature in a database. [Similar problems can occur with antitrojan or antispyware software.]

What's New in This Release: [ read full changelog ]

· SIPS Man-in-the-Middle Sniffer (TCP port 5061; successfully tested with Microsoft Office Communicator with chained certificates).
· Added support for RTP G726-64WB codec (Wengo speex replacement ) in VoIP sniffer.
· X509 certificate's extensions are now preserved in chained fake certificates generated by Certificate Collector.
· Extended ASCII characters support for SSID in Passive Wireless Scanner.
· Some bugs in Cain's Traceroute fixed.

Drag ang drop files from a windows machine to a linux machine..

2009-08-18T01:04:00.002+05:30

Do not want to use troublesome linux commands on putty for simple file transfers from a windows to linux machine...
Then Winscp is the solution

WinSCP is an open source free SFTP client and FTP client for Windows. Legacy SCP protocol is also supported. Its main function is safe copying of files between a local and a remote computer.

Download Winscp here

Basic Gym workouts..Myth buster

2009-08-08T19:48:00.002+05:30

Recently I started working out in the Gym and had like a million doubts about what workout am i supposed to do..Lee hayward in his site gave some very fine points about fitness

There is really no right or wrong way to workout. You could ask 10 different bodybuilders to explain their workout routine and most likely you would get 10 different answers.

"Everything works, but nothing works forever." That is probably the most important thing to remember for making consistent progress with your workouts. You can follow most any type of workout routine and you will make good progress for the first few weeks (provided that you are getting adequate nutrition, rest, etc.). But generally after a few weeks of following a set workout program your progress will slow down and eventually you will no longer make progress with that routine.

Our bodies are very smart and naturally accommodate to stress. Your body will add as little muscle as necessary to get the job done. This is why construction workers get only big enough to handle the exact amount of work they do during a days work and no bigger, even though they are doing physical work all day long.

Adding muscle is a very unnatural thing to your body. You must constantly throw "curve balls" at your muscles to get them to grow. Generally, you will make the best progress for the first 3 weeks of starting a new workout routine. After 3 weeks your body starts to adapt and your progress will slow down.

In the following workout routine I have placed 4 different, 3-week workout cycles back to back in order to make a 12 week workout program.

This program requires you to workout 4 days per week. Ideally you would workout on Monday, Tuesday, Thursday, and Friday. And rest on Wednesday's and weekends. But if this doesn't fit your schedule you can workout on other days of the week. Just make sure that you do not workout for more then 2 days in a row before taking a day off.

By doing this you will give your body plenty of time for recuperation and muscle growth. Muscles do not grow while you are working out; they grow while you are resting. Working out will stress and damage the muscles slightly. Then your body reacts by building up the muscles in order to handle the extra work and stress.

Note:
With each of the exercises do as many warm up sets as you need to get to your top working weight. Then perform the required sets and reps with the same weight.

For example:
So let’s just say your top weight for 5 sets of 5 reps is 100 lbs.

- Do one warm up set with 50 lbs.
- Do another warm up with 75 lbs.
- Then go to your top weight of 100 lbs. and perform 5 x 5 with 100 lbs.

If you get all 5 x 5 with good form, then up the weight to 105 lbs. for your next workout and repeat the process.

If you can't get all 5 x 5 or you found them extremely difficult, keep the same weight for your next workout.

The Workout Routine

Click on the exercise name for a picture of the exercise (all pictures open in a new window).

Weeks 1, 2, and 3 do the following workout routine.

Monday: (five minutes of light cardio to warm up)

Squats:
- do a couple warm up sets first
- 5 sets of 5 reps (train heavy, but don't train to failure)

Dead lifts:
- do a couple warm up sets first
- 5 sets of 5 reps (train heavy, but don't train to failure)

Standing calf raise:
- 5 sets of 10 reps

Leg raises:
- 5 sets of 10 reps

Incline sit ups:
- 3 sets of 10-20 reps

Tuesday: (five minutes of light cardio to warm up)

Incline barbell bench press:
- do a couple warm up sets first
- 5 sets of 5 reps (train heavy, but don't train to failure)

Seated dumbbell shoulder press:
- 5 sets of 8 reps

Bicep cable curls: (from low pulley)
- 5 sets of 10 reps

Tricep push downs: (using straight bar attachment)
- 5 sets of 10 reps

Bent over dumbbell lateral raises:
- 3 sets of 10-15 reps

Thursday: (five minutes of light cardio to warm up)

Leg press:
- do a couple warm up sets first
- 4 sets of 15 reps

Leg curls:
- 4 sets of 15 reps

Wide grip pull downs:
- 4 sets of 15 reps

Hyper extensions:
- 4 sets of 10 reps

Pull down ab crunches:
- 4 sets of 15 reps

Friday: (five minutes of light cardio to warm up)

Incline dumbbell bench press:
- do a couple warm up sets first
- 4 sets of 10 reps

Dumbbell side lateral raises:
- 4 sets of 10 reps

Bicep dumbbell curls:
- 4 sets of 12 reps

Tricep push downs: (with rope attachment)
- 4 sets of 12 reps

Barbell upright rows:
- 3 sets of 15 reps

Keep records of the exercises, weights, sets, and reps that you do. Each workout try to beat what you did for your previous workout. With the squat, dead lift, and incline barbell bench press try to add 5 lbs. to the bar each week and do the same number of sets and reps.

Weeks 4, 5, and 6 do the following workout routine.

Monday: (five minutes of light cardio to warm up)

Bent over barbell rows:
- do a couple warm up sets first
- 5 sets of 8 reps

Barbell shoulder shrugs:
- 5 sets of 10 reps

Leg extensions:
- 5 sets of 10 reps

Leg curls:
- 5 sets of 10 reps

Seated calf raise:
- 5 sets of 10 reps

Incline sit ups:
- 3 sets of 10-20 reps

Tuesday: (five minutes of light cardio to warm up)

Decline barbell bench press:
- do a couple warm up sets first
- 5 sets of 5 reps (train heavy, but don't train to failure)

Seated barbell shoulder press: (i.e. military press)
- 5 sets of 8 reps

Preacher barbell curls:
- 5 sets of 10 reps

Lying tricep extensions: (with the EZ bar)
- 5 sets of 10 reps

Cable upright rows: (from the low pulley)
- 3 sets of 15 reps

Thursday: (five minutes of light cardio to warm up)

Hack Squat::
- do a couple warm up sets first
- 4 sets of 15 reps

Stiff leg dead lifts::
- 4 sets of 15 reps

Seated cable rows:
- 4 sets of 15 reps

Leg raises:
- 4 sets of 12 reps

Crunches::
- 4 sets of 25+ reps

Friday: (five minutes of light cardio to warm up)

Flat dumbbell bench press:
- do a couple warm up sets first
- 4 sets of 10 reps

Dumbbell front lateral raises:
- 4 sets of 10 reps

Bicep barbell curls:
- 4 sets of 12 reps

Tricep push downs: (with V bar attachment)
- 4 sets of 12 reps

Close grip pull downs:
- 4 sets of 15 reps

Keep records of the exercises, weights, sets, and reps that you do. Each workout try to beat what you did for your previous workout. With the decline bench press and the bent barbell row try to add 5 lbs. to the bar each week and do the same number of sets and reps.

Weeks 7, 8, and 9 do the following workout routine.

Monday: (five minutes of light cardio to warm up)

Squats:
- do a couple warm up sets first
- 5 sets of 5 reps (train heavy, but don't train to failure)

Partial Dead lifts: (use a power rack and set the bar just below your knees)
- do a couple warm up sets first
- 5 sets of 5 reps (train heavy, but don't train to failure)

Chin ups:
- 4 sets of as many reps as you can do

Pull down ab crunches:
- 5 sets of 10 reps

Leg raises:
- 5 sets of 10 reps

Tuesday: (five minutes of light cardio to warm up)

Flat barbell bench press:
- do a couple warm up sets first
- 5 sets of 5 reps (train heavy, but don't train to failure)

Bent over dumbbell lateral raises:
- 4 sets of 10 reps

Dumbbell side lateral raises:
- 4 sets of 10 reps

Dumbbell front lateral raises:
- 4 sets of 10 reps

Bicep cable curls: (from low pulley)
- 5 sets of 10 reps

Tricep push downs: (using straight bar attachment)
- 5 sets of 10 reps

Thursday: (five minutes of light cardio to warm up)

Hack Squat::
- do a couple warm up sets first
- 5 sets of 10 reps

Leg press:
- 4 sets of 15 reps

Chest supported row: (i.e. T-bar row, hammer strength seated row, etc.)
- 4 sets of 10 reps

Hyper extensions:
- 4 sets of 10 reps

Pull down ab crunches:
- 4 sets of 15 reps

Friday: (five minutes of light cardio to warm up)

Dumbbell bench press on the stability ball:
- do a couple warm up sets first
- 4 sets of 10 reps

Dumbbell shoulder press sitting on the stability ball:
- 4 sets of 10 reps

EZ bar bicep curls:
- 4 sets of 12 reps

One arm over head dumbbell extensions:
- 4 sets of 12 reps

One arm dumbbell rows:
- 3 sets of 15 reps

Keep records of the exercises, weights, sets, and reps that you do. Each workout try to beat what you did for your previous workout. With the squat, partial dead lift, and flat barbell bench press try to add 5 lbs. to the bar each week and do the same number of sets and reps.

Weeks 10, 11, and 12 do the following workout routine.

Monday: (five minutes of light cardio to warm up)

Leg press:
- do a couple warm up sets first
- 5 sets of 5 reps (train heavy, but don't train to failure)

Stiff leg dead lifts:
- do a couple warm up sets first
- 5 sets of 5 reps (train heavy, but don't train to failure)

Wide grip pull downs:
- 4 sets of 10 reps

Incline sit ups:
- 5 sets of 15 reps

Leg raises:
- 5 sets of 15 reps

Tuesday: (five minutes of light cardio to warm up)

Dips: (add extra weight if needed)
- do a couple warm up sets first
- 5 sets of 5 reps (train heavy, but don't train to failure)

Chin ups:
- 4 sets of as many reps as you can do

Side lateral raises:
- 4 sets of 10 reps

Seated barbell shoulder press: (i.e. military press)
- 4 sets of 10 reps

Bicep dumbbell preacher curls:
- 5 sets of 10 reps

Tricep push downs: (using rope attachment)
- 5 sets of 10 reps

Thursday: (five minutes of light cardio to warm up)

Squats:
- 4 sets of 15 reps

Leg curls:
- 4 sets of 15 reps

Leg extensions:
- 4 sets of 15 reps

Seated cable rows:
- 4 sets of 10 reps

Standing calf raise:
- 4 sets of 10 reps

Pull down ab crunches:
- 4 sets of 15 reps

Friday: (five minutes of light cardio to warm up)

Push ups with feet elevated on the stability ball:
- 4 sets of as many reps as you can do

Seated dumbbell shoulder press:
- 4 sets of 10 reps

Standing one arm dumbbell curls:
- 4 sets of 12 reps

(Super set the curls with the over head tricep extensions, you can use the same dumbbell for both exercises. For example, set of curls with one arm, set of curls with the other arm, set of extensions with one arm, set of extensions with the other arm, with no rest in between.)

One arm over head dumbbell extensions:
- 4 sets of 12 reps

Close grip pull downs:
- 4 sets of 15 reps

Keep records of the exercises, weights, sets, and reps that you do. Each workout try to beat what you did for your previous workout. With the weighted dips and leg press try to add 5 lbs. to the bar each week and do the same number of sets and reps.

Each 3 week cycle is different. You will focus on different exercises during each cycle. This will allow you to make consistent progress over the long term.

After you complete this 12 week workout program you can go through the program again and strive to beat your personal best lifts from the first time through. Or you can move on to something totally different.

Some other great workout programs that should check out are:
The Blast Your Bench Program
and The Bio-Genetic Program.

Download the 12 week workout in Excel spread sheet format.

Social Bookmarking Widget for blogger..sexy one..

2009-08-03T23:46:00.005+05:30

Sharing is most important thing for a blogger and blogger have been looking for a great social bookmarking widget. Well i tell u that now the wait is over

But, I have never found it with something sexy. Yes, It has a short title "add is sexy", very
stylist and also sexy.... :). Screenshot below.

Now, I will try to explain about how to add that in Blogger.

Step 1 Go to LAYOUT -- Edit HTML -- (checked expand widget templates)( I recommend you to Backup the existing Template first).Find the following

Step 2 Afterwards, Add this CSS composition below it.

Now Save the template and again expand the template

Step 3 Please find this code:

then, copy paste this HTML composition after the code


<span><div class="'sexy-bookmarks'"><ul class="'socials'"><li class="'sexy-delicious'"><a href="'"http://del.icio.us/post?<span" style="text-decoration: underline; color: rgb(0, 0, 0); font-size: 13px; font-weight: 400; font-style: normal; font-family: monospace;" class="IL_LINK_STYLE">url</span>=" + data:post.<span class="IL_SPAN"><input name="IL_MARKER" type="hidden">url</span> + "&title=" + data:post.title' target='_blank'/></li></span>
<li class="'sexy-digg'"><a href="'"" href="http://digg.com/submit?url=&quot">http://digg.com/submit?url=&quot</a><span>; + data:post.<span class="IL_SPAN"><input name="IL_MARKER" type="hidden">url</span> + "&title=" + data:post.title' target='_blank'/></li></span>
<li class="'sexy-technorati'"><a href="'"" href="http://technorati.com/faves?add=&quot">http://technorati.com/faves?add=&quot</a><span>; + data:post.<span class="IL_SPAN"><input name="IL_MARKER" type="hidden">url</span> + "&title=" + data:post.title' target='_blank'/></li></span>
<li class="'sexy-reddit'"><a href="'"" href="http://www.reddit.com/submit?url=&quot">http://www.reddit.com/submit?url=&quot</a><span>; + data:post.<span class="IL_SPAN"><input name="IL_MARKER" type="hidden">url</span> + "&title=" + data:post.title' target='_blank'/></li></span>
<li class="'sexy-stumble'"><a href="'"" href="http://www.stumbleupon.com/submit?url=&quot">http://www.stumbleupon.com/submit?url=&quot</a><span>; + data:post.<span class="IL_SPAN"><input name="IL_MARKER" type="hidden">url</span> + "&title=" + data:post.title' target='_blank'/></li></span>
<span><li class="'sexy-designfloat'"><a href="'"http://www.designfloat.com/submit.php?<span" class="IL_SPAN"><input name="IL_MARKER" type="hidden">url</span>=" + data:post.<span class="IL_SPAN"><input name="IL_MARKER" type="hidden">url</span> + "&title=" + data:post.title' target='_blank'/></li></span>
<li class="'sexy-facebook'"><a href="'"" href="http://www.facebook.com/sharer.php?u=&quot">http://www.facebook.com/sharer.php?u=&quot</a><span>; + data:post.<span class="IL_SPAN"><input name="IL_MARKER" type="hidden">url</span> + "&title=" + data:post.title' target='_blank'/></li></span>
<li class="'sexy-twitter'"><a href="'"" href="http://twitthis.com/twit?url=&quot">http://twitthis.com/twit?url=&quot</a><span>; + data:post.<span class="IL_SPAN"><input name="IL_MARKER" type="hidden">url</span> + "&title=" + data:post.title' target='_blank'/></li></span>
<li class="'sexy-furl'"><a href="'"" href="http://www.furl.net/storeIt.jsp?u=&quot">http://www.furl.net/storeIt.jsp?u=&quot</a><span>; + data:post.<span class="IL_SPAN"><input name="IL_MARKER" type="hidden">url</span> + "&title=" + data:post.title' target='_blank'/></li></span>
<li class="'sexy-syndicate'"><a href="'http://feeds2.feedburner.com/YOUR-FEEDBURNER-ID'" title="'Subscribe"></li>
<li class="'sexy-email'"><a href="'"" href="mailto:?subject=&quot">mailto:?subject=&quot</a><span>; + data:post.<span class="IL_SPAN"><input name="IL_MARKER" type="hidden">url</span> + "&title=" + data:post.title' target='_blank'/></li></span>
</ul><span class="'sexy-rightside'/"></div>

. Change YOUR FEEDBURNER ID in the code to your Feedburner Url .
Save Your Template. And it is done.