Sunday, February 5, 2012

TinKode-NASA Full-Disclosure! AGAIN


NASA Full-Disclosure! AGAIN

Posted by isrtinkode on February 19, 2010
 _   _                      _               _
| \ | | __ _ ___  __ _     / \   __ _  __ _(_)_ __
|  \| |/ _` / __|/ _` |   / _ \ / _` |/ _` | | '_ \
| |\  | (_| \__ \ (_| |  / ___ \ (_| | (_| | | | | |
|_| \_|\__,_|___/\__,_| /_/   \_\__, |\__,_|_|_| |_|
                                |___/
              #Full Disclosure... c0de.breaker
#Important
Ok. First of all, the reason I made this SQLi public ( even though I had no intention to make this ) , is because I found out that somebody else discovered the vulnerable parameter.I found this SQLi 3 months ago.
# Why do I test websites?
Because it is my hobby , and I want to prove that even the big websites, which should be highly secured, can be hacked. This is the reality , and it makes me sad.I feeling alright about what I’m doing, because if anyone finds a vulnerability before me , he/she could use it in harmful ways such as: shelling , rooting , backdooring , deleting etc
The WebSite Vulnerable: http://saif-1.larc.nasa.gov (CEOS Systems Analysis Database)
Testing:


Informations:
#Version: 5.1.31-community
#User: *******
#Main Database: *******
#Path of MySQL: C:\Documents and Settings\All Users\Application Data\MySQL\MySQL Server 5.1\Data\
Also, the magic_quotes_gpc=OFF, and “user” from mysql have all privileges:
Bad…
Other Databases:
#ceossadb
#information_schema
#mysql
#ceosvis
Tables from “ceosvis” database:
#instrument
#takes
#measurement
#contains
#mission
Tables from main Database:
#agency
#alt_names
#cat_measurements
#cat_missions
#cat_series
#cat_wavebands
#ceosdbversion
#constellations
#data_access_links
#db_update_phases
#ecv
#instr
#instr_agencies
#instr_desc
#instr_geometry
#instr_maturity
#instr_mission
#instr_res_swath_temp
#instr_sampling
#instr_status
#instr_status_biz
#instr_technology
#instr_technology_rawdata
#instr_type
#instr_waveband
#mappedor1
#measurement_confidence
#measurement_desc
#measurement_type
#measurementtypesconfidencepilot
#measurementtypespending
#method
#mission_agencies
#mission_status
#missions
#obs_requirments
#orbit_sense
#orbit_type
#requirements
#series
#series_agency
#series_missions
#societal_benefits
#sys_diagrams
#taxonomy
#typeatmosphere
#typereqapplication
#typerequirementsource
#typesmeasurementsconfidencepilot
#wmo_measurement
I made this public, because I saw the website down, and I think the administrators will fix the vulnerability once someone reports the problem. (sorry because i didn’t make this first, if was that)

TinKode-NASA vulnerable to MSSQL Injection


NASA vulnerable to MSSQL Injection

Posted by isrtinkode on February 19, 2010
 _   _                   __  __  _____ _____  ____  _      _
| \ | |                 |  \/  |/ ____/ ____|/ __ \| |    (_)
|  \| | __ _ ___  __ _  | \  / | (___| (___ | |  | | |     _
| . ` |/ _` / __|/ _` | | |\/| |\___ \\___ \| |  | | |    | |
| |\  | (_| \__ \ (_| | | |  | |____) |___) | |__| | |____| |
|_| \_|\__,_|___/\__,_| |_|  |_|_____/_____/ \___\_\______|_|

   #Nasa vulnerable again (MSSQLi)@c0de.breaker
Hello, unfortunately I found another serious vulnerability in NASA, more precisely a MSSQL Injection .
I admit that, this time it was harder to make the injection.
It is the forth time this happens, but nothing can surprise me anymore. As always, I showed no interest in the content of the website.
I hope this is the last time I see these kinds of vulnerabilities.
Link: www.gltrs.grc.nasa.gov
Testing:


As you can see, this time I didn’t hide the vulnerable parameter, mainly because it can be easily found on google with filetype:aspx.
Main Informations:
#Version: Microsoft SQL Server
#Operating system: Windows
#Web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 2.0.7
#Main Database: RDP
#Current User: RDP_Ext_RA
Tables from main database “RDP”:
#Abstract
#Author
#AuthorTypeLookup
#RDPLibrary
#RDPTemp
#ReportTemplateLookup
#ReportTypeLookup
#RptTempDistLookup
#RDP
All databases (92):
#AdventureWorks
#AppSecAdmin
#COD
#CODAppsAdmin
#CODSecurity
#Cont_999
#ContractMgmt
#CopierMDSTool
#CostRecovery
#DivAppSec
#DivisionInfo
#DivSurveys
#dnn-ltid
#dnn-metrology
#Eform
#EventSentry
#EventSentry_ext
#EventSentry_int
#FoodServices
#FormsMgmt
#FurnitureInventory
#Grants
#GRCHistory
#InstPool
#ITC
#ITCImagenet
#ITSInfo
#ITSProjectMgmt
#Library
#LibraryPatronReq
#Logistics
#LTIDLookup
#LTOCSecurity
#LVSS
#master
#metafldr
#Metcal
#Moc1Archives
#model
#msdb
#MTS
#nasath
#Northwind
#NPTRegistration
#PDOInventory
#Phone
#Projects
#PTF-HST-GHC
#PTF-HST-PSL
#PTF-ITC-AWT
#PTF-ITC-C_Archive
#PTF-ITC-CM_Archive
#PTF-ITC-Constellation
#PTF-ITC-Facilities
#PTF-ITC-ITC2_Rotocraft
#PTF-ITC-ITC4_GAGroundIcing
#PTF-ITC-ITC6_MarketingProject
#PTF-ITC-ITC0_CEV_Model
#PTF-ITC-NPTAssets
#PTF-ITC-Ohio_VIP
#PTF-ITC-Orion
#PTF-ITC-PBRF_RFP
#PTF-ITC-Template
#Publishing
#pubs
#pwots
#RDP
#RecordsMgmt
#ReportServer
#ReportServerTempDB
#RetireeReg
#RollCall
#ServerAdmin
#ServReqMgmt
#Sharepoint
#SPS
#SupplyMgmt
#tempdb
#TIALSPurchasing
#TMP2_MTS
#VTWinNASA
#WorkMgmt
#WSS-BRehab
#WSS-custodialservices
#WSS-ITC-MTPV
#WSS-ITS
#WSS-LTID
#WSS-LTIDWebAdmin
#WSS-PubsMgmt
#WSS-TIALS
#WSS-TIALSExecRpts
#WSS-webredesign
As a last remark:
I hope my findings aren’t all for nothing, and that NASA will do a complete inspection on all their websites.

TinKode-NASA website security issues


NASA website security issues

Posted by isrtinkode on February 19, 2010
     _   _           _____
    | \ | |   /\    / ____|  /\
    |  \| |  /  \  | (___   /  \
    | . ` | / /\ \  \___ \ / /\ \
    | |\  |/ ____ \ ____) / ____ \
    |_| \_/_/    \_\_____/_/    \_\
      #TinKode@Romania

            The Center for Aerosol Research at NASA's Goddard Space Flight Center

                                    
The Goddard Space Flight Center (GSFC) is a major NASA space research laboratory established on May 1, 1959 as NASA’s first space flight center. GSFC employs approximately 10,000 civil servants and contractors, and is located approximately 6.5 miles (10.5 km) northeast of Washington, D.C. in Greenbelt, Maryland, USA. GSFC, one of ten major NASA field centers, is named in recognition of Dr. Robert H. Goddard (1882-1945), the pioneer of modern rocket propulsion in the United States.
Vulnerable website: http://aerocenter.gsfc.nasa.gov
I want to say that it was very hard to make this injection
The webserver had good protection but wasn’t fully secured.
This kind only works manually , you can’t do it with apps.
In this picture you can see the visible columns:
Main informations:
#Version:5.0.82-log
#User:carwww@localhost
#Database:aerocenter
#Datadir:/var/mysql/
Here we can see all databases:
[1] information_schema
[2] aerocenter
[3] car
[4] test
In this screenshot are all tables from all databases:
I don’t know exactly from which database are the tables… so I think I have not split them very well
Tables from “aerocenter” database:
[1] files
[2] milagro_users
[3] modis_wshop
[4] news
[5] news_files
[6] personnel
[7] siteupdate
[8] test
[9] users
[10] workshop_files
[11] yoram2007
[12] yoram2007_agenda
Tables from “car” database:
[1] car_content
[2] car_data_info
[3] car_data_missions
[4] car_data_overview
[5] car_data_quicklooks
[6] car_files
[7] car_homefeature
[8] car_homefeature_title
[9] car_homeimage
[10] car_homemission
[11] car_images
[12] car_news
[13] car_news_files
[14] car_pers_ordering
[15] car_personal_pages
[16] car_personnel
[17] car_publications,
[18] car_publications_authors
[19] car_publications_coauthors
[20] car_sections
[21] car_siteupdate
[22] car_subsections
[23] car_users
Tables from “test” database:
[1] content
[2] homeimage
[3] hometext
[4] images
[5] news
[6] news_files
[7] personnel
[8] publications
[9] publications_authors
[10] publications_coauthors
[11] sections
[12] siteupdate
[13] subsections
[14] users
Columns from all databases:
Here we have the same situation like with tables…
[1] filename
[2] title
[3] user
[4] actualname
[5] firstname
[6] lastname
[7] username
[8] userpassword
[9] userlevel
[10] status
[11] email
[12] phone
[13] affiliation
[14] focusgroup
[15] flag
[16] date_entered
[17] event_date
[18] time
[19] location
[20] art_title
[21] talk_title
[22] art_content
[23] article_id
[24] rank
[25] cal_lastname
[26] cal_firstname
[27] cal_middlename
[28] cal_email
[29] fax
[30] su_content
[31] last_updated
[32] badge
[33] citizen
[34] country
[35] content
[36] ordering
[37] section_title
[38] subsection_title
[39] header
[40] link_text_before
[41] linked_text
[42] link_url
[43] link_text_after
[44] html
[45] mission_id
[46] flight_number
[47] date
[48] time_flight
[49] time_data
[50] aircraft_type
[51] flight_scientist
[52] lat_long
[53] flight_map_lg
[54] modis_img_lg
[55] goes_img
[56] details
[57] flight_schedule
[58] anim_img_type
[59] static_img_type
[60] modis_credit
[61] flight_track_credit
[62] quicklook_credit
[63] details_credit
[64] modis_anim
[65] modis_aqua
[66] modis_terra
[67] goes_utc
[68] kmz_file
[69] mission_name
[70] year
[71] objective
[72] logo
[73] logo_width
[74] logo_height
[75] table_number
[76] data
[77] flight_num
[78] img_sm
[79] img_lg
[80] content_id
[81] image
[82] image_alt
[83] image_align
[84] active
[85] feature_title
[86] image_caption
[87] image_large
[88] id_ordering
[89] order_id
[90] page_id
[91] pers_id
[92] middlename
[93] profile_active
[94] profile_img
[95] class
[96] onlinestatus
[97] classification
[98] monthdays
[99] found_in
[101] eds
[102] publication
[103] volume
[104] issue
[105] pages
[106] pub_id
[107] author
[108] lab_member_auth
[109] coauthors
[110] lab_member_coauth
[111] sectionTitile
[112] parentSection
[113] cal_login
[114] cal_passwd
[115] profile
[116] profile_img1
[117] profile_img2
Admins accounts:
g****sa:****bb*******8418dfce03f42193***:ghalusa@climate.gsfc.nasa.gov
m***gro:****a4343e0f1c5************0be96:ghalusa@climate.gsfc.nasa.gov
g***usa:ee***81bd*****2baa934eb571c*****:Goran.N.Halusa@gsfc.nasa.gov
kl***man:34a9dbef0*****86d1b71f6662c*****:Richard.Kleidman@nasa.gov
lr***er:******76c7041eae26695ec259aa*****1:Lorraine.A.Remer@nasa.gov
p***ul:**********3f3529e02ff313dcaf49ce*****:paul.d.przyborski@nasa.gov
l****y:*************1fb629d312948e9642f95df*****:Robert.C.Levy@nasa.gov
These hashes are md5() and they can be easily cracked.
Bye, TinKode! :)

TinKode-US Army full disclosure


US Army full disclosure

Posted by isrtinkode on February 19, 2010
                                                                         _
                                /\                                    (_) |
                               /  \   _ __ _ __ ___  _   _   _ __ ___  _| |
                              / /\ \ | '__| '_ ` _ \| | | | | '_ ` _ \| | |
                             / ____ \| |  | | | | | | |_| |_| | | | | | | |
                            /_/    \_\_|  |_| |_| |_|\__, (_)_| |_| |_|_|_|
                                                      __/ |
                                                     |___/
                                              #full disclosure@c0de.breaker
#Informations:
First Army was established on August 10, 1918 as a field army when sufficient American military manpower had arrived in France during World War I. As an element of the American Expeditionary Force (AEF) in the latter stages of World War I it was the first of three field armies established under the AEF. Serving in its ranks were many figures who later played important roles in World War II. First Army was inactivated in April 1919.
Few time ago I found a website vulnerable to MSSQL Injection (www.onestop.army.mil)… But today I tested another website, and in 2 minutes i found a vulnerable parameter.
Vulnerable link: www.first.army.mil
Testing:


Main Informations:
#Version: Microsoft SQL Server 2005 - 9.00.4035.00 (Intel X86) Nov 24 2008 13:01:59 Copyright (c) 1988-2005 Microsoft Corporation Enterprise Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
#User: Vacancyuser
#Principal Database: FirstArmyVacancies
#Server Name: GIcensoredL02
#Server: Microsoft-IIS/6.0
Version:
All databases from webserver:
[1] FirstArmyVacancies
[2] master
[3] tempdb
[4] model
[5] msdb
[6] ReportServer
[7] ReportServerTempDB
[8] gis_production
[9] 1st_Army_East
[10] FirstArmy_ATLevel_Training
[11] BESMgmt3
[12] 68W
[13] FirstArmy_Common
[14] G5MOB
[15] SpotlightManagementFramework
[16] HQ_Apps
[17] SurgeonsCTT
[18] TrainingOperationsPlanner
[19] UnitMilestone
[20] WheelsUpDown
[21] GFI
[22] CommandersTrainingTool
[23] NetPerfMon
[24] fsweb
Tables from “fsweb” database:
[1] Categories
[2] BuddyList
[3] ApptTypes
[4] DistanceList
[5] AppointmentBook_Properties
[6] AppointmentBook_Locations
[7] Appointmentbook_Holidays
[8] AppointmentBook
[9] AliasChart
[10] Abreviations
[11] UserActivityLog
[12] websafeFONTS
[13] PortalPageContent
[14] ValidFileTypes
[15] VerificationQuestions
[16] websafeFontSize
[17] Ziplist
[18] TimeSchedule
[19] POC
[20] SystemClearance
[21] CELL_CONFTABLE
[22] Messages
[23] States
[24] PortalPageData
[25] portalMENUS
[26] PortalGroups
Columns from table_name “POC
[1] UserName
[2] ClientID
[3] PortalWebsite
[4] Prefix
[5] FirstName
[6] MiddleName
[7] LastName
[8] Suffix
[9] Email
[10] regEmail
[11] Expertise
[12] Fax
[13] City
[14] State
[15] Zip
[16] DisplayZip
[16] Address1
[17] Address2
[18] Phone
[19] Cell
[20] Author
[21] Password
[22] ClearanceLevel
[23] Notes
[24] BranchofService
[25] Ext
[26] RegistrationNumber
[27] LastLogin
[28] FailedLogins
[29] ActiveLogins
[30] VerificationQuestion1
[31] VerificationResponse1
[32] VerificationQuestion2
I want to say, i didn’t extract anything from any database like username,passwords,adresses,etc

WinRAR


Download WinRAR 4.20 
Arabic (32 bit, 64 bit),
Armenian (32 bit, 64 bit),
Azerbaijani (32 bit, 64 bit),
Belarusian (32 bit, 64 bit), 
Bulgarian (32 bit, 64 bit),
Catalan (32 bit, 64 bit),
Chinese Simplified (32 bit64 bit),
Chinese Traditional (32 bit, 64 bit),
Croatian (32 bit, 64 bit),
Czech (32 bit, 64 bit),
Danish (32 bit, 64 bit),
Dutch (32 bit, 64 bit),
English (32 bit, 64 bit),
Estonian (32 bit, 64 bit),
Finnish (32 bit, 64 bit),
French (32 bit, 64 bit),
Georgian (32 bit, 64 bit),
German (32 bit, 64 bit),
Greek (32 bit, 64 bit),
Hebrew (32 bit, 64 bit),
Hungarian (32 bit, 64 bit),
Indonesian (32 bit, 64 bit),
Italian (32 bit, 64 bit),
Japanese (32 bit, 64 bit),
Lithuanian (32 bit, 64 bit),
Macedonian (32 bit, 64 bit),
Norwegian (32 bit, 64 bit),
Persian (32 bit, 64 bit),
Polish (32 bit, 64 bit),
Portuguese (32 bit, 64 bit),
Portuguese Brazilian (32 bit, 64 bit),
Romanian (32 bit, 64 bit),
Russian (32 bit, 64 bit),
Slovak (32 bit, 64 bit),
Slovenian (32 bit, 64 bit),
Spanish (32 bit, 64 bit),
Swedish (32 bit, 64 bit),
Thai (32 bit, 64 bit),
Turkish (32 bit, 64 bit),
Ukrainian (32 bit, 64 bit),
Uzbek (32 bit, 64 bit),
Valencian (32 bit, 64 bit),
Vietnamese (32 bit, 64 bit).

WinRAR is a powerful archive manager. It can backup your data and reduce the size of email attachments, decompress RAR, ZIP and other (CAB,ARJ,LZH,TAR,GZ and TAR.GZ,BZ2 and TAR.BZ2,ACE,UUE,JAR (Java Archive),ISO (ISO9660 - CD image),7Z,Z (Unix compress)) files downloaded from Internet and create new archives in RAR and ZIP file format. You can try WinRAR before buy, its trial version is available in downloads.
WinRAR_archiver_is_a_powerful_archive_manager


Keywords: Arhivatoare, Backup Data Software, Backup Software, Compression/decompression Software, Compression/decompression Tools, Downloads, Free to try software, Trial Software,Freeware Software.


SlavaSoft HashCalc

Mirror 1
Download HashCalc 2.02
Mirror 2
Download HashCalc 2.02


SlavaSoft HashCalc
HASH, CRC, AND HMAC CALCULATOR


A fast and easy-to-use calculator that allows to compute message digests, checksums and HMACs for files, as well as for text and hex strings. It offers a choice of 13 of the most popular hash and checksum algorithms for calculations.


Major Features:

  •       Support of 12 well-known and documented hash and checksum algorithms: MD2, MD4, MD5, SHA-1, SHA-2( 256, 384, 512), RIPEMD-160, PANAMA, TIGER, ADLER32, CRC32.
  •       Support of a custom hash algorithm (MD4-based) used in eDonkey and eMule applications.
  •       Support of 2 modes of calculations: HASH/CHECKSUM and HMAC.
  •       Support of 3 input data formats: files, text strings and hex strings.
  •       Work with large size files. (Tested on file sizes up to 15 GB).
  •       Drag-and-drop support.
  •       Quick and simple installation.
  •       Calculates hash/checksum and HMAC for files of any type: music, audio, sound, video, image, icon, text, compression, etc., with the extensions: .mp3, .wav, .avi, .mpg, .midi, .mov, .dvd, .ram, .zip, .rar, .ico, .gif, .pif, .pic, .tif, .tiff, .txt, .doc, .pdf, .wps, .dat, .dll, .hex, .bin, .iso, .cpp, .dss, .par, .pps, .cue, .ram, .md5, .sfv, etc.


ESET Antivirus


Download ESET Smart Security 5 for Windows_live_installer
Download ESET NOD32 Antivirus 5 for Windows_live_installer

Download ESET NOD32 Antivirus 4 for Windows 32 bit
Download ESET NOD32 Antivirus 4 for Windows 64 bit

 ESET Antivirus  is a complete security solution combining maximum protection and a minimal system footprint. The advanced technologies, based on artificial intelligence, are capable of proactively eliminating infiltration by viruses, spyware, trojan horses, worms, adware, rootkits, and other Internetborne attacks without hindering system performance or disrupting your computer.








Keywords: Antimalware, Antirootkits, Antispam, Antispyware, Antitrojan horses, Antivirus, Antivirus Software, Downloads, Firewall, Free to try software, Security Software, Trial Software.


Download Avira Free Antivirus 2012


Download Avira Free Antivirus.

Basic protection doesn’t get any easier. It takes just two clicks to install and configure your free antivirus.
Our entry-level antivirus eliminates many forms of malware, including worms, rootkits and costly dialers.



Internet Download Manager



MIRROR 1
Download Internet Download Manager.
MIRROR 2
Download Internet Download Manager.


Internet Download Manager (IDM) is a tool to increase download speeds by up to 5 times, resume and schedule downloads. Comprehensive error recovery and resume capability will restart broken or interrupted downloads due to lost connections, network problems, computer shutdowns, or unexpected power outages. Simple graphic user interface makes IDM user friendly and easy to use.Internet Download Manager has a smart download logic accelerator that features intelligent dynamic file segmentation and safe multipart downloading technology to accelerate your downloads. Unlike other download managers and accelerators Internet Download Manager segments downloaded files dynamically during download process and reuses available connections without additional connect and login stages to achieve best acceleration performance.

Internet Download Manager supports proxy servers, ftp and http protocols, firewalls, redirects, cookies, authorization, MP3 audio and MPEG video content processing. IDM integrates seamlessly into Microsoft Internet Explorer, Netscape, MSN Explorer, AOL, Opera, Mozilla, Mozilla Firefox, Mozilla Firebird, Avant Browser, MyIE2, and all other popular browsers to automatically handle your downloads. You can also drag and drop files, or use Internet Download Manager from command line. Internet Download Manager can dial your modem at the set time, download the files you want, then hang up or even shut down your computer when it's done.
Other features include multilingual support, zip preview, download categories, scheduler pro, sounds on different events, HTTPS support, queue processor, html help and tutorial, enhanced virus protection on download completion, progressive downloading with quotas (useful for connections that use some kind of fair access policy or FAP like Direcway, Direct PC, Hughes, etc.), built-in download accelerator, and many others.
Version 6.07 adds IDM download panel for web-players that can be used to download flash videos from sites like YouTube, MySpaceTV, and Google Videos. It also features complete Windows 7 and Vista support, YouTube grabber, redeveloped scheduler, and MMS protocol support. The new version also adds improved integration for IE and IE based browsers, redesigned and enhanced download engine, the unique advanced integration into all latest browsers, improved toolbar, and a wealth of other improvements and new features.



XMedia Recode


Download XMediaRecode3081_setup.exe
Download XMediaRecode3060.zip Portable


XMedia Recode can convert almost all known audio and video formats, including 3GP, 3GPP, 3GPP2, AAC, AC3, AMR, ASF, AVI, AVISynth, DVD,FLV, FLAC, H.261, H.263, H.264, M4A , m1v, M2V, M4V, Matroska (MKV), MMF, MPEG-1, MPEG-2, MPEG-4, TS, TRP, MP3, MP2, MP4, MP4V, MOV, OGG, PSP, (S) VCD, SWF , VOB, WAV, WMA and WMV.

XMedia Recode can only convert unprotected DVDs and Blu-ray.

XMedia Recode converts: 3GP to AVI, 3GP to FLV, AC3 to WAV,AC3 to MP3, ASF to 3GP, ASF to FLV, ASF to MP4, AVI to FLV, AVI to 3GP, FLAC to MP3, FLAC to WMA, FLV into 3GP, FLV to Mp3, DVD to 3GP, DVD to AC3, DVD to AVI, DVD to MP3, DVD to MP4, DVD to MOV, DVD to SVCD, DVD to VCD, DVD to WMV, OGG to MP3, OGG to WMA, MPEG to AVI, MP4 to FLV,MP2 to MP3, MP4 to AVI, M4P to MP3, MOV to 3GP, MOV to AVI, MOV to FLV, WMA to MP3, WMV to FLV, WAV to MP3

To use the DivX codec, you need to have the DivX codec installed.


Features:

    * Video Editing
    * Parts of the video cut off (crop)
    * With freely selectable frame color (padding)
    * Color Correction (brightness, contrast, gamma, hue, saturation)
    * Drag-n-drop of video directly on the encoder
    * Selecting the picture size (1:1, 3:2, 4:3, 5:4, 5:6, 11:9,16:9, 16:10, 2.21:1)
    * Zoom (no letterbox, the media, Pan Scan, Fit to Screen)
    * Direct Stream Copy function
    * 2-Pass Encoding
    * Volume correction
    * Volume Normalize
    * Framerate, bitrate, resolution can be adjusted
    * Can stream audio from most video formats, extract
    * Creates DVD copies of the Pocket PC
    * Creates DVD copies for your mobile phone
    * Creates DVD copies for the iPod and iPhone
    * Creates DVD copies for the PSP and PS3



CCCP


Download Combined-Community-Codec-Pack-2011-11-11.exe

The Combined Community Codec Pack is a simple playback pack for Windows with the goal of supporting the majority of video formats in use today.




CCCP Insurgent


Download CCCP-Insurgent-2007-01-01.exe
Exactly what is the CCCP Insurgent?
CCCP Insurgent (CCCPI) is a program that is able to detect other playback packs and thus help you (and us) in the troubleshooting process. It has a number of diagnostics features, as well as some power tools to manage DirectShow filters. The only part of it the causual user should be using is the leftmost column, that displays any other codec packs detected on your system. The other parts are probably too obscure to be useful for most users. Tools -> Test render... and Tools -> CRC check... are pretty straightforward, but still  mostly useful for people helping others with playback problems. Note that the "Unregister filter" and "Register filter" buttons should NOT be used unless you are very sure about what you're doing!


Xrecode II


Download setup_xrecode2_1.0.0.185_full.zip
Download xrecode2_portable_build_1.0.0.185.zip
Download xrecode2_portable_build_1.0.0.185.7z

Shell extension for 32/64-bit windows
 Download setup_xrecode2_shell_1.0.0.7.zip
 Download  xrecode2 encoders
 Download Lame Encoder
 Download neroAacEnc Encoder
 Download shorten Encoder
 Download Takc Encoder
xrecode II is converter and audio-grabber which allows you to convert from mp2, mp3, wma, aiff, amr, ogg, flac, ape, cue, ac3, wv, mpc, mid, cue ,tak, tta, wav, wav(rf64), dts, m4a, m4b, mp4, rm, ra, avi, aac, mpg, vob, mka, mkv, flv, swf, mov, ofr, wmv, divx, m4v, spx, 3gp, 3g2, m2v, m4v, ts, m2ts, adts, shn, tak, xm, mod, s3m, it, mtm, umx, mlp to m4a, alac, ape, flac, mp3, mp4 (using NeroAAC), ogg, raw, wav, wav(rf64), wma, WavPack, mpc, mp2, Speex, ofr, ac3, aiff, tak and Shorten formats. Command Line parameters are supported.
Developer:XRECODE
Updated:08.01.2012
Price:Shareware, $15
OS:Windows XP/Vista/7

Download Ogg Codecs


Windows 32/64-bit Installer: opencodecs_0.85.17777.exe
Windows Mobile 5.0 - 6.5 cab package: opencodecs_0.84.17359-wm5.cab

Directshow Filters for Ogg Vorbis, Speex, Theora, FLAC, and WebM
This includes decoders and encoders for all the Xiph.org formats.It is released under a BSD license, so they can be used by both open-source and commercial applications.
If you are a Windows user who wants to be able to listen to .ogg files in Windows Media Player, then this is what you want. The Xiph.org DirectShow filters support playing of files encoded with Vorbis, Speex, Theora, and/or FLAC.
Make sure to uninstall any previous versions (remove "oggcodecs" from Add/Remove Programs), and make sure Windows Media Player (or any other DirectShow application) is closed before installing.

Flash Movie Player


Download Flash Movie Player (version: 1.5) (~510 KB)


Flash Movie Player is a free stand-alone player for ShockWave Flash (SWF) animations, based on the Macromedia Flash Player plugin. In addition to all Macromedia Flash Player abilities, it has some extended features, such as animation rewinding,advanced full screen mode, browser cache integration,playlists and exe projectors support.

Flash Movie Player advantages

•Flash Movie Player is absolutely free - no ads,no nag screens, no spyware, no time limit.
•Allows to rewind swf movies, animations and Flash games to any position in playing or paused mode.
•Opens exe projector files from version 4 to version 7 and works with them same way as with ordinary SWF files (allows rewinding, etc.)
•Flash Movie Player can extract flash movies from exe projector files and save them in SWF format.
•Supports Playlists. Playlist entry editor, sorting functions.
•Has full screen mode with auto-hiding navigation bar.
•All other Macromedia Flash Player standard features (zoom, quality select, repeat, scale mode select).
•Snapshots creation : allows to create snapshot of any animation's frame and save the image in Jpeg or Bmp format.
•Hotkeys for all frequent operations.
•Has Drag-n-drop support.
•The executable has small size and low system requirements.
•Multilingual interface. (40 Languages supported at the moment).
•Allows to explore cached SWF files. (Add swf files from IE, Firefox and Opera cache to playlist).
•Can act as Screensaver. You can set up Flash Movie Player as your screensaver to play flash animations while computer is in idle.






Malwarebytes Anti-Malware

Download Malwarebytes Anti-Malware


Taking the Byte out of Malware

Malwarebytes technology takes the next step in the fight against malware. Malwarebytes Anti-Malware PRO detects and removes malware where even the best known anti-virus and anti-malware applications fail.
Malwarebytes Anti-Malware PRO monitors every process and stops malicious processes before they even start. The Proactive Protection Module keeps your system safe and secure with advanced heuristic scanning technology. The comprehensive Threats Center keeps you up-to-date with the latest malware threats.