Categories
Tips

Hidden "about:" Pages in Mozilla Firefox!

If u r a web developer or know HTML somewhat then u might have come across a about:blank address/parameter. Actually the developers need to include some more about: addresses for various reasons. These about: addresses are most of the time browser specific and they refers to internal or say hidden pages.
What follows is a list of such about: pages for mozilla firefox!

about: A simple prompt without any parameter will display the Mozilla about information. Since it’s accessible from the top menus as well, it’s not quite a hidden feature. (This is equivalent to using Help >> About Mozilla Firefox option.)

about:blank A blank page. Useful for setting as your homepage.

about:buildconfig Obviously, it will show the build platform configuration and parameters. Well if u r not a programmer then u may find only junk! 😀

ADVERTISEMENT

about:cache Displays cache statistics and disk cache directory location. This has following two options.

  • about:cache?device=memory Lists memory cache entries.
  • about:cache?device=disk Lists disk cache entries.

about:config GUI for modifying user preferences (prefs.js). The most complex and meaningful of them all. Careful on what you plan to change here, your browser won’t run properly after if you play with the wrong things.

about:plugins This option will display detailed information about all the plugins installed for Mozilla Firefox. (Note plugin is different from extension)

ADVERTISEMENT

about:credits It’s time to give the credit to whoever deserves it. There’s an alphabetically sorted list of all the people that gave their contribution to the development of Firefox.

about:Mozilla This is a weird thing. It will display the so-called Book of Mozilla. Something similar was present in Netscape too. There’s actually no real book although the quotations might give you that impression.

about:license Shows the Mozilla Public License and the Netscape Public License for the piece of software.

Well moreover some extensions add their own about: pages like:

  • about:chrome
  • about:language
  • about:tmp
  • about:flashblock
ADVERTISEMENT

<

p style=”font-weight: bold”>Wait its not over yet! We love firefox for many reason and one of them is availability of extensions for everything! Well there is a MR Tech About:About extension for this. It adds the following “about:” options to the Help menu:

  • about:
  • about:config
  • about:plugins
  • about:about
  • about:buildconfig
  • about:cache
  • about:cache (Disk)
  • about:cache (Memory)
  • about:credits, about:license
  • about:mozilla

Here are some more contributed by different users from comment form below…

  • about:robots (added by S & tjwoosta)
  • about:rights (added by Jan G)
  • about:crashes (added by okkie)

If you know more, please let us know via comments. We will keep adding them! 🙂

Categories
Tips

Details of Google’s Latest Security Hole which resulted into session hijacking!

Tony Ruscoe exposed another google security bug! This was used for session hijacking!

As Philipp Lenssen Says,

Tony’s not a malicious hacker of course (in fact, the first thing he did was inform Google Security!), but he found a loophole in a new feature Google rolled out recently. Using a proof of concept script targeting this loophole “ which I can detail once it’s fixed “, all Tony needed to do was make a user who’s logged into their Google Account visit a page of his, which happened to be on a trustworthy google.com sub-domain. I visited Tony’s page, which sent my Google cookies to Tony

Well what could Tony did with these cookies??? Here is a (incomplete) list…

ADVERTISEMENT
  • Get into my Google Docs & Spreadsheets application and read and modify documents I saved there
  • Read subjects from my Gmail inbox, as well as the first few words of these emails, by adding a Gmail module to the Google Personalized Homepage
  • View my Google Accounts page
  • Enter my Google Reader
  • Read my private Google Notebook
  • View my complete Google search history (for as long as I had the search history feature enabled in Google)

Tony phrased it on his proof of concept page, Think yourself lucky that I wasn’t that evil!

For details…

Well Tony was not evil n thats for sure. The bug is also fixed now without causing any damage!

Thanks Tony!

Related posts:

Categories
Reviews

Review: Hacking Rapidshare, Megaupload et. al.

Guys, long time back I had posted about Rapidshare and Megaupload Hacking.
That hack did not work for long but the Chitz from whose forum I gotta knew about that hack started a dedicated blog on this issue!

Considering frequency of his posts I can only say God Bless Rapidshare, Megashare and companies like them! What a good news for downloaders!

Click here to visit his blog!

P.S. Chitzs is new to blogsphere so freely post comment if u like some of his work!

Thank U!

Categories
Tips

JavaScript to Unmask Password on Web Pages!

If you ever come across a page like below, then this is for you!

U might have heard about Sandboy’s Revelation who unmask password fields like this!

But Revelation works with only windows based application and fails with Firefox! Once again thanks to open-source for Firefox!

ADVERTISEMENT

Now lets do it in Geekish way so it will work with all kinda browsers and of course independent of platform!

Here comes javascript which is tested on Firefox & IE!

javascript: alert(document.getElementById('Passwd').value);

Just copy above code and paste it in ur browsers address bar (navigation bar or url bar).

They press enter and you will see a prompt like this!

Of course your password may be different!

There is one more similar script! This will change HTMLs <input> tags “type” attribute from “password” to “text”!

ADVERTISEMENT

javascript: alert(document.getElementById('Passwd').type='text');

On hitting enter you will see a prompt, just ignore it and look at screen… The password field will be unmasked any now and look like this…

The above script may fail on hotmail when opened in firefox! But don’t worry, as you are in Devil’s Workshop!

Try following code in the same way! This does not work with antique IE 6.0 and with release of firefox 2.0, I did not bothered to give IE 7.0 a try!

ADVERTISEMENT

This will again prompt password like above!

ADVERTISEMENT

javascript: function getElementsByAttribute(oElm, strTagName, strAttributeName, strAttributeValue){ var arrElements = (strTagName == "*" && oElm.all)? oElm.all : oElm.getElementsByTagName(strTagName); var arrReturnElements = new Array(); var oAttributeValue = (typeof strAttributeValue != "undefined")? new RegExp("(^|s)" + strAttributeValue + "(s|$)") : null; var oCurrent; var oAttribute; for(var i=0; i< ocurrent =" arrElements[i];" oattribute =" oCurrent.getAttribute" oattribute ="="> 0){ if(typeof strAttributeValue == "undefined" || (oAttributeValue && oAttributeValue.test(oAttribute))){ arrReturnElements.push(oCurrent);}}} return arrReturnElements; } alert( getElementsByAttribute(document.body, "input", "type", "password")[0].value);

And this will unmask password filed like above!

javascript: function getElementsByAttribute(oElm, strTagName, strAttributeName, strAttributeValue){ var arrElements = (strTagName == "*" && oElm.all)? oElm.all : oElm.getElementsByTagName(strTagName); var arrReturnElements = new Array(); var oAttributeValue = (typeof strAttributeValue != "undefined")? new RegExp("(^|s)" + strAttributeValue + "(s|$)") : null; var oCurrent; var oAttribute; for(var i=0; i< ocurrent =" arrElements[i];" oattribute =" oCurrent.getAttribute" oattribute ="="> 0){ if(typeof strAttributeValue == "undefined" || (oAttributeValue && oAttributeValue.test(oAttribute))){ arrReturnElements.push(oCurrent);}}} return arrReturnElements; } ; alert( getElementsByAttribute(document.body, "input", "type", "password")[0].type="text" ) ;

Above scripts successfully tested on gmail, yahoo, hotmail, rediff login pages! Orkuts login pages have frames so the above may fail! In fireox you can also right-click on any frame and can open that frame separately in different window or tab and then can use any of above script!

ADVERTISEMENT

Also any password field can be unmasked using DOM Inspector in firefox! Please don’t make false assumption that firefox is insecure! There is a feature called “master password” in firefox! That will protect your passwords against all javascript, DOM Inspectors, etc!

Who needs revelation (at least for web pages) … Enjoi!!!

Related Link:
Inspect Element with DOM Inspector
(Please note that the DOM Inspector must be installed. (Select “Developer Tools” during custom setup of Firefox)

Click here to download Firefox!

Credits: Thanx to Robert Nyman for getElementsByAttribute! I wish a function like this should be included in standard!

Categories
Tips

Firefox: 4 Ways to Make Old Extensions Compatible with Firefox 2.0

With Firefox 2.0, many of old extensions facing compatibility problem!

Gleb Reys posted 3-ways to make old firefox extensions compatible with firefox 2.0! The three way covers up so many details that u will end up either making ur old extensions compatible with firefox or removing them for sure!

The 4-th way I’m presenting here based on 3rd way! This is for all firefox extensions developers! Just follow the steps below…

1. Open the directory of your extensions source code n locate “install.rdf”.
2. Look for following fields…

em:minVersion=”1.5″
em:maxVersion=”1.5.0.*”

3. em:maxVersion field specifies the maximum firefox version with which your extension is compatible.
4. Just replace “1.5.0.with “2.0.“.
5. Save “install.rdf” n rebuild your extension! Thats it!

A word of caution!
Don t forget to test your extension before releasing although this will work most of the times!

Related Link:
Click here to download Firefox 2.0+!

Categories
Reviews

Using Orkut From Mobile Devices!

Important Update: Orkut is officially accessible on mobile now, so this post will be marked outdated.


Recently I have seen lots of people talking about orkutting from mobile devices!Before going ahead here is an excerpt from Orkut Help page!

Why can’t I access orkut from my mobile device?

ADVERTISEMENT

We’re sorry to hear about any difficulty you’ve experienced accessing orkut.com. Currently, orkut.com isn’t compatible with mobile devices. To access your orkut profile, please try logging in using your computer’s web browser.

So today I’m posting about how to use orkut from mobile devices! Before going ahead lemme tel u few things about my environment! I have Nokia N-70 with opera 8.62 installed!
U may use opera mini or any version of opera which support javascript!
With these assumptions lets start the ride!

Login Issue! (updated: 2007, August 30)
You can use original address http://orkut.com from opera MINI nut the page have some problems in OPERA MOBILE. But don’t worry as you can use following address to log into orkut! Its a very long address so better bookmark it with name like Orkut Login! In fact you can use the following address from PC for fast login on orkut!

https://www.google.com/accounts/ServiceLoginBox?service=orkut&nui=2&skipll=true&skipvpage=true&continue=http%3A%2F%2Fwww.orkut.com%2FRedirLogin.aspx%3Fmsg%3D0%26page%3Dhttp%253A%252F%252Fwww.orkut.com%252F&followup=http%3A%2F%2Fwww.orkut.com%2FGLogin.aspx&hl=en-US

ADVERTISEMENT

Also you can use o.devilsworkshop.rsites.dev6.rt.gw which is configured to redirect you to the above link only!

Clicking on button does not work!

As of now u log into orkut but experiencing problem while clicking on buttons! The most common problem I have seen button like submit, delete, yes, no, accept, reject does not work!

There are two solution. First is for opera mobile user and second lies in JavaScript!

Opera solution (For Nokia and Windows based Mobiles Only)

This great solution is found by one of my Doctor friend Rahul Talele (Shame on us engineers. ;-)
Best thing about this it works for all buttons without any coding effort!!!(Really great na)!!!

Now after logging into orkut using opera,
Go to Options >> Navigation >> Find in page

Put caption of button means ‘submit’ , delete’, yes’, no’, etc in text to be found.
The moment text on button starts highlighting exit from Find wizard pressing roght-selection key (which have Stop option).
Now clicking on that button works!

ADVERTISEMENT

Extra tip: Assign a shortcut key to Find in Page option by going to Option >> Settings

JavaScript solutions (for others)

ADVERTISEMENT

Submitting Scrap! (updated 2007, August 30)
First thing If u want to scrap someone u hv to go into his/her scrapbook! (The code following are not for orkut’s new reply feature!)
After opening intended scrapbook, write scrap with optional formatting the way u usually write!
In next step, without leaving that page(or tab if u r using opera with tab browsing) go to this address:

For scrapbooks with new features

javascript: _submitForm(document.getElementById('scrapInputContainer').getElementsByTagName('a')[0], 'submit', 'true');

Similarly.

Delete Scrap:

ADVERTISEMENT

This will delete first scrap from ur scrapbook. For 2nd scrap replace b6² by b9² , for 3rd scrap replace b6² by b12² ans so on
Same code can be used to delete scraps from others scrapbook (of course scraps dent by you).

In this case replace b6² by b3² (for 1st delete button), b4² (for 2nd) and so on

javascript: var rb = document.getElementById('b6²).onclick ; var strrb = rb.toString(); var rbparts = strrb.split('{'); var rbfinal = rbparts[1].split('}') ; location.href=javascript: + rbfinal[0];

New Friend: Accept
To accept new friend request which is shown on ur orkut home page! Note, this will work for first request if u have too many! u can increment b0² by 2 for next request and so on if u hv multiple requests and directly want to accept other than first request!

e.g. b2² for 2nd, b4² for 3rd.
javascript: var rb = document.getElementById('b0²).onclick ; var strrb = rb.toString(); var rbparts= strrb.split('); location.pathname=rbparts[1];

New Friend: Decline Works in the opposite way of new friend accept Executing this wil decline first request..
increment
b1² in the script by 2 for 2nd request and so on
e,g, b3² for 2nd, b5² for 3rd.
javascript: submitForm(document.getElementById('b1²), declineFriend', );

Friend: Confirm yes: You will need to confirm whenever you are accepting a new friend request or sending a new friend request to someone

javascript: _submitForm(document.getElementById('b1²), yes',);

Community: New Topic
While on a community, execute this to start a new topicjavascript: window.location.href = window.location.href.replace (/Community/,'CommMsgPost');

Community: Reply to Topic
While reading a topic on a community, execute this to reply to that topic

window.location.href = window.location.href.replace (/CommMsgs/,'CommMsgPost');

Community: Submit Post
After writing ur new post or reply, execute this to submit itjavascript: _submitForm(document.getElementById('b2²), 'submit')

Community: Confirm Join
javascript: submitForm(document.getElementById('b1²), join');
Profile: UPDATE button while editing profile

javascript: submitForm(document.getElementById('b1²), update', );

Actually this is not a web address but javascript which will execute submit button!

Again bookmark this address by naming Submit Scrap or something! The advantage of bookmarking is that u can directly open the bookmark after writing scrap!

Steps for bookmarking above codes into ur mobile browser:

  1. Copy content in text-box to say notepad and send that file to ur mobile.
  2. Open that file in any editor in mobile!
  3. Copy the script on clipboard! (using edit key in Nokia).
  4. Open ur browser and go to Add Bookmarks Option!
  5. Chose a name u like and paste the script in address field! OR U can manually create the bookmark by entering the script instead of copy-paste n sending a file to mobile!

Now once u have created these bookmarks, u can log into orkut fast as well as scrap someone!

In future will write code for other buttons if i found people interested in this cumbersome orkutting from mobile! U can subscribe to this blog to get updates automatically!

Categories
Reviews

Orkut: Collection of hacks to be kool Orkuttian!

Listing in this post some orkut hacks, tricks which you can use to be kool orkuttian!

ALT+0173 Tricks

1. Ever seen someone without First name and/or Last Name! If yes, you might have tried to do the sane but while editing your profile came 2 know that first name n last name can not be left blank! So how did others did that?

While editing name just put ALT+0173 i.e. press ALT & while it is pressed type 0173 in any field u want to left blank! You wont see any output! (In Opera u may see ‘-‘ character but surely nothing will be displayed in Firefox n IE)

2. You can also use this special character if you want to escape orkut’s default formatting which is applied to your text while posting on communities and writing scrap!

e.g. [r­ed]Hi[/­red] wont look Hi

ADVERTISEMENT

if u use [r(ALT+0173)ed]Hi[/r(ALT+0173)ed]!

Just insert ALT+0173 anywhere!
U can also insert in Url’s to escape image verification while posting links but they wont be clickable 🙁

3. You can just write ALT+0173 while posting on communities n scrapbook to post blank scrap n posts!

For More ALT+0173 Tricks n demos click here!

ADVERTISEMENT


Hompage Field…

The best link to setup as your homepage is https://www.orkut.com/GLogin.aspx?cmd=logout
When someone click on this the person will be logged out from his/her orkut session 😀

This made many people fool (including me) as we often don’t read actual content of homepage field while checking someone’s profile!


Do u think logging into Orkut is slow n login box disappears???

Bookmark the following link and use it to login into orkut!

https://www.google.com/…………www.orkut.com%2FGLogin.aspx

The above link directly opens orkut login box! So it is faster than normal orkut login!

Categories
Reviews

Tecchnorati: Organise Blogs Posts With Tags Into Sidebar!

This is for all bloggers from all domains having technorati account!

One problem old blogger felt that there was no way to categorize post according to tag! Mostly after each post we used to add technorati tags! Then came blogger in beta with this option right into blogger itself! Still instead of tagging all the posts again, you can use technorati API’s to take care of this! (For live example scroll down to see "TOP 10 TAGS" in this blogs sidebar itself!)

Don’t worry if you don’t know how to use technorati API’s (Even I don’t know 😉 ! Vijay Bhaskar already done some great work regarding this! So just listing here what you need to do!

1. Copy Following javascript code!

ADVERTISEMENT

2. Now Replace Following Fields:

  • <Your Technorati Username>
  • <Your Blog URL>
  • <Number of Tags>

After Modifying your code will look like…

ADVERTISEMENT

Just Paste modified code into your blog! That’s it!

Notes:

  1. You must have Technorati Account For this!
  2. You must have tagged your posts beforehand!
  3. Number of Tags can be set to 100 at the max!

 

I have switched already to blogger in beta! Still I like technorati tags over blogger’s label because when somebody clicks on technorati tags, it shows partial content of all the post tagged under that particular tag, while blogger shows full posts!
I feel technorati’s way is better as some of tags have large no. of posts tagged under them which make loading of those pages time-consuming!

Categories
Tips

Hacking: Blogger in Beta Profile Views

This is for all blogger in beta users!
You can increase your blogger profile-views with javascript!
Of course this was not possible for old blogger users!
As it has been said, correction of an error, may introduce new errors! It seems blogger is bugged this time!

So when you view a blogger in beta user profile (it does not need to be yours), u can just hit your browsers refresh button and the profile view get increased as profile gets reloaded!

Here come javascript to automate this!

javascript: function rb286(){document.location.reload();}; void(setInterval(rb286, 1000));

Procedure:

  1. Open the profile first!
  2. Just copy-n-paste above javascript in maroon color in your browsers address bar!
  3. This will start refreshing the page! It can be used with any page!

U can change value in blue which is time-interval as per your connection speed!

U can also install greasemonkey script by Vijay Bhaskar for this!
s

Categories
Tips

Hacking : Rapidshare & Megaupload Cracked!!!

One great new for all downloaders…
My friend Chitz running a forum and yesterday while surfing on his forum I found a great post which I tried out successfully!
The post is about cracking Rapidshare and Megaupload to get premium access!
Its unbelievably simple to use and you can download as many file as you want simultaneously and with your favorite download accelerators!
Its really cool post and believe me its worth trying even you have to register to view it!
Of course registration is free and fast!

After registering click-here to view the post!
The address of forum: http://desimirchi.free-forums.org/

Click-here to access Chitz orkut profile!