Today I was tasked with doing some passive OS detection on a network where I actually had to be somewhat stealthy. I had gotten into the gateway, but I actually needed one of the other boxes on the network in order to get to the file server due to firewalling/routing. I knew they were running [...]
Archive for June, 2010
p0f and (mostly) Passive Finger Printing
Posted: 30th June 2010 by Matt in code, hacks, securityTags: access, ACK, detection, dns, file, file server, fingerprint, firewall, gateway, IDS, interface, network, nmap, os detection, p0f, packet, perl, ports, raw, RawIP, root, routing, RST, sniff, source port, spoof, SQL, steal, syn packet, traffic
4
The Benefit of a Strong Password
Posted: 30th June 2010 by Matt in hacks, news, securityTags: character combinations, crack, daniel dantas, dictionary attack, encryption software, fbi, file, hard drives, open source, partition, password, security, software, strong, truecrypt
So, in my post, “How Your Passwords Get Hacked“, I pasted a table that showed how long, on average, it would take to crack a password. Well, here’s a real life example of the benefit of a strong password The FBI has admitted defeat in attempts to break the open source encryption used to secure [...]
Get Fined For Not Password Protecting Your Wireless Network.
Posted: 30th June 2010 by Matt in hacks, news, securityTags: accountability, anonymity, attack, criminal court, Fined, hydra, internet crimes, ip block, password, Protecting, proxies, secure, sharing music, WiFi, wireless, wireless networks, wpa
Internet users in Germany, whose wireless networks are left password unprotected, can be fined up to 100 euros, according to a recent ruling by Germany’s top criminal court. The ruling is in response to a musician’s lawsuit against a user whose unprotected wireless network was used for downloading and sharing music over P2P. (Source: ZDNet) [...]
How your passwords get hacked.
Posted: 28th June 2010 by Matt in code, hacks, securityTags: cracking passwords, encrypted passwords, hack, john the ripper, password crackers, password list, passwords, perl, Ripper, usernames, Weak
I realize that this is about as close to plagerism as I can get without literally scraping his website, but I’m essentially reposting it because I think people really, honestly, need to pay attention to this. I hear a lot of whining from people when I tell them that their password is weak, or they [...]
Botnet Command and Control Methods
Posted: 25th June 2010 by Matt in code, hacks, securityTags: AIM, al qaeda, botnet, Conficker, control man, Craigslist, digininja, discovery, dns, facebook, fingerprint, google, icmp, ICQ, IDS, infection, Internet, irc, linkedin, MSN, myspace, network, networking platform, payload, port, propagate, robin wood, security, Skype, synflood, traffic, tweets, worm, yahoo
So, I was going through my backlog of Hak5 podcasts and came across an episode titled “Botnet Command and Control & Man in the Middle Detection”. In the episode, they interview Robin Wood from DigiNinja and discuss his PoC “KreiosC2“, which is a C&C method that uses Twitter. Here’s the video: