Linux Penetration Testing Laptop Setup v4 (Ubuntu 11.4 Natty Narwhal)
I’m now providing an updated Linux Penetration Testing Laptop Setup document to help install popular and useful vulnerability assessment tools for the Linux operating system. You can go and obtain...
View ArticleCompiling Nmap for Android
Compile Nmap for Android This tutorial will show you how to compile the latest version of Nmap for your Android device starting with a standard Ubuntu install. I will offer instructions on how to...
View ArticleParse Kismet NETXML for Aireplay-ng
This post deals with gathering the information you need to use aircrack-ng to capture a WPA/WPA2 handshake for offline bruteforce attacks. When running aireplay-ng to send out de-authentication...
View ArticleCompiling Wireless Tools for Nokia N810
This tutorial will help you configure the Scratchbox environment to compile the latest svn of aircrack-ng, latest stable kismet, and reaver 1.4 for the Nokia n810. A lot of love is getting sent to the...
View ArticleWRT54GL is Not Dead
Well the WRT54GL is not dead for me. Due to it’s popularity this venerable wireless router has been documented across the Internet on how to software and hardware hack it. Tinkering with this devices...
View ArticleJohn the Ripper w/ Jumbo Patch – now with GPU support
JtR 1.7.9 with Jumbo 6 now offers GPU support for computationally intensive (slow-hash) password encryptions like WPA-PSK. This POST will detail compiling JtR with OpenCL support. I have an really...
View ArticleMaemo – Diablo – PHP5 – mime-support error
I receive this error when trying to install PHP on my Nokia n810 device. php5-cli: Depends: mime-support but it is not installable. This is with a fresh flash and I only add the Diable Extras-Devel...
View ArticleMy Custom Power Pwn
See the Security Bsides Atlanta talk (when it gets posted) at http://www.securitybsides.com/w/page/58266249/BSidesATL-2012. Powerpoint slides can be found here. The people over at PwnieExpress are...
View ArticleMobile Devices and Airbase-ng Attacks
I don’t feel that this issue gets enough coverage so I am adding my voice to the mix in the hopes that someday the makers of our popular mobile operating systems will FIX THE ISSUE! What I’m going to...
View ArticleTP-Link WR703N Custom Pwn Plug
I was wandering the aisles of Fry’s Electronics and spotted a display of Westinghouse Outlet Valet’s for under $10. The second I saw this I knew I my TP-Link wr703n was destined to be stuffed into it....
View ArticleTP-Link WR703N Serial Port Pads
The TP_IN and TP_OUT connections on the TP-LINK WR703N are pretty touchy. One wrong tug on the soldered wire and the pad will rip off. Just a guess but I think they are held on by silly putty. So what...
View ArticleSecurity Bsides Rhode Island 2013
From the site: “Each BSides is a community-driven framework for building events for and by information security community members. The goal is to expand the spectrum of conversation beyond the...
View ArticleUpdate to ProjectRF – version 12.11.2013
So Tenable has made a bunch of changes and additions to the XML (.nessus) file and I’ve tried my best to incorporate them into the project. First off they did something awesome which is alphabetize...
View ArticleFreerainbowtables.com: Rcracki_mt and HALFLMCHALL
Download the Rcracki_mt Linux binary from http://sourceforge.net/projects/rcracki/files/rcracki_mt/rcracki_mt_0.7.0/ $ sudo apt-get install p7zip links $ cd ~/tools ~/tools$ links...
View ArticleCompiling and Installing Ettercap v0.8.0
The latest version of Kali Linux comes with the most current version of Ettercap. But some people are gluttons for punishment and still like to compile stuff themselves so see below. Installed on...
View ArticleoclHashcat, HalfLM (netlm), and Bruteforcing the Second Half
When you obtain a NetLM password hash with the known challenge of 1122334455667788 you are able to utilize the HALFLMCHALL rainbowtable to identify the first seven (7) characters of the password. The...
View ArticleBsides Atlanta 2012
From the site: “Each BSides is a community-driven framework for building events for and by information security community members. The goal is to expand the spectrum of conversation beyond the...
View ArticleISACA Atlanta Chapter – GEEK WEEK 2013
ISACA Atlanta Geek Week The 6th annual Atlanta Chapter of ISACA GEEK WEEK conference was held the week of August 19 – 23, 2013. GEEK WEEK is a track-oriented, full week Conference focusing on providing...
View ArticlePassword Pwn Stew – Ettercap, Metasploit, Rcrack, HashCat, and Your Mom
You can probably get by with leaving off that last part of the title and still succeed with this attack. Today we will be making a Password Pwn Stew. Add a little Ettercap (link), with a dash of...
View ArticleInstall or Update CUDA to the latest version (5.5)
We are going to install / update CUDA to the latest version (5.5). For this tutorial we will be running Ubuntu 13.10 and install the latest Nvidia driver from a repository. We will not have the CUDA...
View Article