mxgopop mail bomber

Made a quick and dirty mail bomber that works with ESMTP auth (gmail). This was a project for school and the idea was ultimately to be distributed but never finalized that portion. Though I share it.

New Full Java simulation - Barbershop

Posting this as a reminder for tools I might use later in coding. This application uses switches, time manipulation and LinkedList items. Also could server as example for anyone else stuying Java.
By the way the code is mess (but a good example at that).

BarberShop SRC code

Install THC-Hydra 6.2 on Ubuntu 10.10 (console only)

This is only for the none GUI Hydra, I don't have a GUI in my box did not care for it.
It should also work on older Ubuntu.


sudo apt-get update
sudo apt-get install libssh-dev libidn11-dev libpcre3-dev libsvn-dev libfbclient2
wget http://freeworld.thc.org/releases/hydra-6.2-src.tar.gz
tar -zxvf hydra-6.2-src.tar.gz
cd hydra-6.2-src
./configure
make 
make install

During the make install it will complain about GTK, this is a non GUI install so ignore the errors.

Your done! to run type:
hydra

Disk Encryption Useless?

Wondering for awhile about encrypting my HD with FileVault and came across this neat video:

Almost makes me feel like drive encryption is useless at this point, some googling shows this is about 2 years old wonder if encryption software developers have fixed the issue?

iBGPplay

Doing some staying with BGP and the vulnerability behind what runs what we  call today the internet. Came across a very neat tool that shows route changes from history. RIPE has the biggest library of changes logged with the tool:

http://labs.ripe.net/Members/csquarce/content-historical-bgplay

currently have not use for it, but this is the next level looking glass servers see the tool here:

 

http://www.ibgplay.org/

which gets me to mys studies, cyclops, a thing of beauty keeps track of route hijacks in the 

internet

http://cyclops.cs.ucla.edu/

Watchdog Scripts -don't let daemons die

If you would like to keep certain process/daemons running on a Debian system that you would like for it to be monitored and restarted if it ever stopped you can use supervisor. But I did not find such an application in the default Ubuntu repos hence I started doing some googling and found a simple way to make your own watchdog script for Ubuntu.

First create script that will watch the daemon:
http://www.josehelps.com.pastebin.com/RvXgQ7y1


#!/bin/bash
#Make sure process "YOURPROCESS" is running
pprocess=yourprocessname
runprocess=/user/bin/yourprocessname




if ps ax | grep -v grep | grep $pprocess > /dev/null
        then
                exit
        else
        $runprocess &
        fi
exit

make sure the script is executable:

$chmod 775 nameofscript

then make this script check your process is running every 10 mins, you can set it lower if you like:

$sudo crontab -e


copy and paste this into crontab:


10 * * * *      /home/username/nameofscriptabove


the 10 signifies the time cron should wait until running this job again. The 10 is min the minutes section. 

Hope this helps not letting your precious daemon die when you need them running.

The Art Of Social Engineering

I doing some website stumbling and ran across this : http://www.spoofcard.com/
wow can this lend it self to exploitation of it has not already.

Honeypot Project Coming Soon

Flytrap and Flyanalysis Project

Working on setting up a network of Honeypots for testing different variations of present malicious web activity. There will be two portions of the project one that consist of the actual honeypots and the other a reporting server which will poll from all the honeypots and report the malicious activity the honeypot caught. Also will open a donation page for anyone who would like to support the project. please refer to the new link for more details.

Kismac with an HWUG1 Wireless-G USB Adaptor

(mac only)

Recently purchased(from amazon) a Hawking Technology G adaptor to test with Kismac. Using this youtube video tutorial:
http://www.youtube.com/watch?v=lBGN5OGCPgI

What I learned from this exercise is that the only way to crack WPA and WPA2 is via bruteforce/wordlist. I have gather some over the internet and I believe that you can produce some with Cain and Able, more details coming in the next post.

Here are some basic word list:
http://rapidshare.com/files/429043935/500_most_used_pswd.txt.zip
http://rapidshare.com/files/429045186/Rockyou_list_original_.txt.zip
more from kismac: http://trac.kismac-ng.org/wiki/wordlists

Cracking WEP is much more easier specially with the HWUG1 card which can perform injection. You acn successfully retrive the key with these easy steps:
1. Select the RT73 device driver in preference, remove the airport drivers.
2. Scan/sniff the network
3. Then under preference select the channel which the SSID in interest sits on,
4. Click on reinject packets and wait until ~130,000 packets have been gathered.
5. After 130,000 or so have been gathered click on network-->crack-->Weak Scheduling Attack-->Both
6. The Key should be cracked in a matter of minutes (works for me if stuck email me)

Hope this quick guide helps, working on one for the WPA encryption.

dumb disclamer: This is not a toy dont break/crack networks that are not yours, im not responsible for anything done with this tutorial/tools

Distro Debian

Everyone,
Been installing servers lately to do a multitude of things and I had a certain application that I had to install which would just not play well with Ubuntu. I went ahead and install debian as a test and boy am I impress. I'm known to be a lover of centos and fedora but the debian package repos is incredible and the fact that they are strip of crap as possible makes them a very very very good server distro. I highly recommend if you dont want to go with ubuntu and all its extra stuff.

http://www.debian.org/