Thursday, 28 March 2013

Install Smplayer 0.8.4 in ubuntu 13.04

smplayers

SMPlayer is a free media player for Windows and Linux with built-in codecs that can play virtually all video and audio formats. It doesn't need any external codecs. Just install SMPlayer and you'll be able to play all formats without the hassle to find and install codec packs.

One of the most interesting features of SMPlayer: it remembers the settings of all files you play. So you start to watch a movie but you have to leave... don't worry, when you open that movie again it will be resumed at the same point you left it, and with the same settings: audio track, subtitles, volume...

SMPlayer is a graphical user interface (GUI) for the award-winning MPlayer, which is capable of playing almost all known video and audio formats. But apart from providing access for the most common and useful options of MPlayer, SMPlayer adds other interesting features like the possibility to play Youtube videos or download subtitles.

List of Features:

  • Complete preferences dialog, where you can change the key shortcuts, colors and fonts of the subtitles, and many more.

  • Filters. Many video and audio filters are available: deinterlace, postprocessing, denoise... and even a karaoke filter (voice removal).

  • Seeking by mouse wheel. You can use your mouse wheel to go forward or backward in the video. The mouse buttons can also be customized.

  • Video equalizer, allows you to adjust the brightness, contrast, hue, saturation and gamma of the video image.

  • Multiple speed playback. You can play at 2X, 4X... and even in slow motion.

  • Audio and subtitles delay adjustment. Allows you to sync audio and subtitles.

  • Advanced options, such as selecting a demuxer or video & audio codecs.

  • Possibility to search and download subtitles from opensubtitles.org.

  • It can play Youtube videos. A Youtube browser is included, which allows to easily download Youtube videos too.

  • Translations: currently SMPlayer is translated into more than 30 languages, including Spanish, German, French, Italian, Russian, Chinese, Japanese....

  • Possibility to change the style and icon set of the interface.

  • Free and opensource. SMPlayer is under the GPL license.


Fixes in this Release:

  • New option to select the fps for external subtitles.

  • YouTube is fixed again.

  • Now smplayer checks for updates automatically and notifies the user if a new version is found.

  • Support for encoding ISO-8859-16 for subtitles.

  • New translations: Thai and Hebrew.

  • The video equalizer dialog has been rewritten.

  • Some bugfixes.


Supported Input Formats

- (S)VCD (Super Video CD)
- CDRwin's .bin image file
- DVD, including encrypted DVD
- MPEG-1/2 (ES/PS/PES/VOB)
- AVI file format
- ASF/WMV/WMA format
- QT/MOV/MP4 format
- RealAudio/RealVideo format
- Ogg/OGM files
- Matroska
- NUT
- NSV (Nullsoft Streaming Video)
- VIVO format
- FLI format
- NuppelVideo format
- yuv4mpeg format
- FILM (.cpk) format
- RoQ format
- PVA format
- streaming via HTTP/FTP, RTP/RTSP, MMS/MMST, MPST, SDP
- TV grabbing

Supported Video (only the most important are listed)

- MPEG-1 (VCD) and MPEG-2 (SVCD/DVD/DVB) video
- MPEG-4 ASP in all variants including DivX ;-), OpenDivX (DivX4), DivX 5 (Pro), Xvid
- MPEG-4 AVC aka H.264
- Windows Media Video 7/8 (WMV1/2)
- Windows Media Video 9 (WMV3) (using x86 DLL)
- RealVideo 1.0, 2.0 (G2)
- RealVideo 3.0 (RP8), 4.0 (RP9) (using Real libraries)
- Sorenson v1/v3 (SVQ1/SVQ3), Cinepak, RPZA and other QuickTime codecs
- DV video
- 3ivx
- Intel Indeo3 (3.1, 3.2)
- Intel Indeo 4.1 and 5.0 (using x86 DLL or XAnim codecs)
- VIVO 1.0, 2.0, I263 and other H.263(+) variants (using x86 DLL)
- MJPEG, AVID, VCR2, ASV2 and other hardware formats
- FLI/FLC
- HuffYUV
- various old simple RLE-like formats

Supported audio codecs (only the most important are listed)

- MPEG layer 1, 2, and 3 (MP3) audio
- AC3/A52, E-AC3, DTS (Dolby Digital) audio (software or SP/DIF)
- AAC (MPEG-4 audio)
- WMA (DivX Audio) v1, v2
- WMA 9 (WMAv3), Voxware audio, ACELP.net etc (using x86 DLLs)
- RealAudio: COOK, SIPRO, ATRAC3 (using Real libraries)
- RealAudio: DNET and older codecs
- QuickTime: Qclp, Q-Design QDMC/QDM2, MACE 3/6 (using QT libraries), ALAC
- Ogg Vorbis audio
- VIVO audio (g723, Vivo Siren) (using x86 DLL)
- alaw/ulaw, (ms)gsm, pcm, *adpcm and other simple old audio formats

To install SMPlayer in Ubuntu/Linux Mint


  • sudo add-apt-repository ppa:rvm/smplayer

  • sudo apt-get update

  • sudo apt-get install smplayer smtube smplayer-themes


 

Click Here to Donwload Smplayers


VIDEO :


Enumerate Wordpress Users Using Wpscan in Kali Linux

wpscan

WPScan is a black box WordPress Security Scanner written in Ruby which attempts to find known security weaknesses within WordPress installations. Its intended use it to be for security professionals or WordPress administrators to asses the security posture of their WordPress installations. The code base is Open Source and licensed under the GPLv3.

Features include:

Username enumeration
Weak password cracking (multithreaded)
Version enumeration
Vulnerability enumeration (based on version)
Plugin enumeration (todo)
Plugin vulnerability enumeration (based on version) (todo)
Other miscellaneous checks

 

Installation:

**Please use the up to date instructions found here; http://wpscan.org/

WPScan requires two non native Ruby gems, typhoeus and xml-simple. It should work on both Ruby 1.8.x and 1.9.x.
sudo apt-get install libcurl4-gnutls-dev
sudo gem install –user-install typhoeus
sudo gem install –user-install xml-simple

(I developed WPScan on Backtrack5 Gnome 32bit, if installing on another OS, you may not need the –user-install option when installing the non native gems)

Download:

WPScan will be hosted google code on GitHub at https://github.com/wpscanteam/wpscan.

You can download and start running WPScan ALPHA by checking out cloning the SVN trunk git trunk.
“svn checkout http://wpscan.googlecode.com/svn/trunk/ wpscan-read-only”
git clone https://github.com/wpscanteam/wpscan.git

Example usage:
Examples:
ruby wpscan.rb –url www.example.com
ruby wpscan.rb –url www.example.com –wordlist darkc0de.lst –threads 50
ruby wpscan.rb –url www.example.com –wordlist darkc0de.lst –username admin

 

VIDEO




Install Shotwell Photo Manager in Ubuntu

Shotwell

Shotwell is a digital photo organizer that runs on Linux. Shotwell is an efficient photo organizer designed specifically for the GNOME desktop. It can edit, sort, import, and organize the image collection of the users in fast and secure manner.

What's new in this Release:

  • Raw and enhanced image - It’s smarter at keeping paired images together now.

  • Better reporting and options to save the details, if something fails.

  • Shotwell using new Facebook Graph API‘d

  • New types of circular, checkboardular, nifty new wipes.

  • Along with all this come many bugs fixed, UI nits squashed and glitches – now fixed.


Shotwell offical Site : http://www.yorba.org

To install shotwell in Ubuntu/Linux Mint


  • sudo add-apt-repository ppa:yorba/ppa

  • sudo apt-get update

  • sudo apt-get install shotwell


Tuesday, 26 March 2013

Dorking with Fimap in BackTrack 5 R3

fimap_bigger

fimap is a little python tool which can find, prepare, audit, exploit and even google automaticly for local and remote file inclusion bugs in webapps. fimap should be something like sqlmap just for LFI/RFI bugs instead of sql injection. It's currently under heavy development but it's usable.

The goal of fimap is to improve the quality and security of your website.

Quick News for SVN and upcoming versions



  • Bing searching module implemented in SVN! Currently broken :-O

  • SSH-Logfiles can now be scanned and exploited through SSH username!

  • You can now define which target to exploit and execute shell commands without the interactive exploit interface! (FimapNonInteractiveExec)

  • New experimental fallback plugin which you can try when just /etc/passwd (or any other only-readable file was found. (FimapPhpInfoExploit)

  • New fallback plugin for windows victims! (FimapFindFirstFileExploit)


what works currently?



  • Check a Single URL, List of URLs, or Google results fully automaticly.

  • Can identify and exploit file inclusion bugs.

    • Relative\Absolute Path Handling.

    • Tries automaticly to eleminate suffixes with Nullbyte and other methods like Dot-Truncation.

    • Remotefile Injection.

    • Logfile Injection. (FimapLogInjection)



  • Test and exploit multiple bugs:

    • include()

    • include_once()

    • require()

    • require_once()



  • You always define absolute pathnames in the configs. No monkey like redundant pathes like:

    • ../etc/passwd

    • ../../etc/passwd

    • ../../../etc/passwd



  • Has a Blind Mode (--enable-blind) for cases when the server has disabled error messages. BlindMode

  • Has an interactive exploit mode which...

    • ...can spawn a shell on vulnerable systems.

    • ...can spawn a reverse shell on vulnerable systems.

    • ...can do everything you have added in your payload-dict inside the config.py



  • Add your own payloads and pathes to the config.py file.

  • Has a Harvest mode which can collect URLs from a given domain for later pentesting.

  • Goto FimapHelpPage for all features.

  • Works also on windows.

  • Can handle directories in RFI mode like:

    • <? include ($_GET["inc"] . "/content/index.html"); ?>

    • <? include ($_GET["inc"] . "_lang/index.html"); ?>

    • where Null-Byte is not possible.



  • Can use proxys.

  • Scans and exploits GET, POST and Cookies.

  • Has a very small footprint. (No senseless bruteforcing of pathes - unless you need it.)

  • Can attack also windows servers! (WindowsAttack)

  • Has a tiny plugin interface for writing exploitmode plugins (PluginDevelopment)


  • Non Interactive Exploiting (FimapNonInteractiveExec)


what doesn't work yet?



  • Other languages than PHP (even if engine is ready for others as well.)


VIDEO :