Tuesday, December 29, 2009

Free C++ Video Tutorials

Following are couple of video tutorials that are free and good for those starting C++.

1. XoaX Tutorials
URL: http://xoax.net/comp/cpp/console/index.php
Series of 44 Tutorials/Lessons
Video + Code + Explanation
(All C++ related videos - Console, VC++, Win32) http://xoax.net/comp/cpp/index.php

2. Strelok - C++ Tutorial
URL: http://www.youtube.com/watch?v=Ad0wuvnMUSg
Series of 11 Tutorials (with 3+ parts in each)
Only Video

Thursday, June 4, 2009

Tool for auditing telephone systems

WarVOX is a suite of tools for exploring, classifying, and auditing telephone systems. Unlike normal wardialing tools, WarVOX works with the actual audio from each call and does not use a modem directly. This model allows WarVOX to find and classify a wide range of interesting lines, including modems, faxes, voice mail boxes, PBXs, loops, dial tones, IVRs, and forwarders. WarVOX provides the unique ability to classify all telephone lines in a given range, not just those connected to modems, allowing for a comprehensive audit of a telephone system.

WarVOX requires no telephony hardware and is massively scalable by leveraging Internet-based VoIP providers. A single instance of WarVOX on a residential broadband connection, with a typical VoIP account, can scan over 1,000 numbers per hour. The speed of WarVOX is limited only by downstream bandwidth and the limitations of the VoIP service. Using two providers with over 40 concurrent lines we have been able to scan entire 10,000 number prefixes within 3 hours.

The resulting call audio can be used to extract a list of modems that can be fed into a standard modem-based wardialing application for fingerprinting and banner collection. One of the great things about the WarVOX model is that once the data has been gathered, it is archived and available for re-analysis as new signatures, plugins, and tools are developed. The current release of WarVOX (1.0.0) is able to automatically detect modems, faxes, silence, voice mail boxes, dial tones, and voices.

URL: http://warvox.org/

Monday, April 27, 2009

MD6 Hash Algorithm

Professor Ronald L. Rivest from MIT lead a team of engineers to develop MD6 Hash Algorithm.
It is developed in C. The program/code, documentation and all presentation materials are available at the below URL. It is submitted for the NIST SHA-3 call for proposals.

URL: http://groups.csail.mit.edu/cis/md6/

Friday, April 3, 2009

Open Source Virtualization Software

Sun xVM VirtualBox

Turn your PC into an easy-to-use virtualization platform with Sun xVM VirtualBox, the enterprise-class open source software that runs on all major operating systems and eliminates the need for tradeoffs or multiple hardware systems.

Features & Benefits
Enterprise-class open source desktop and laptop virtualization
Runs multiple operating systems concurrently on the same computer
Open APIs and modular design enable customization
High performance virtual machines
Rich host/guest integration
Comprehensive hardware and device support
Remote access to guest virtual machines
Snapshots provide state views
High security architecture
Enterprise features

Advantages:
Very light on the system resources. VMWare is very heavy on resources.
Very simple GUI interface.

Disadvantages:
Team concept not available yet.
Main software gets corrupt few times, if it not closed properly. But, a reinstall of the software will bring back the software without problem.


Size: 35-45 MB
URL: http://www.sun.com/software/products/virtualbox/index.jsp

Microsoft Office ODF Plugin

Microsoft Office users can now import and export to Open Document Format (ODF).

The Sun ODF Plugin for Microsoft Office gives users of Microsoft Office Word, Excel and PowerPoint the ability to read, edit and save to the ISO-standard Open Document Format (ODF).

The plugin works with Microsoft Office 2007 (Service Pack 1 or higher), Microsoft Office 2003, XP and Microsoft Office 2000.

The plugin is based on StarOffice technology and is easy to setup and use, the conversion happens transparently and the additional memory footprint is minimal.

Size: 70 MB
URL: http://www.sun.com/software/star/odf_plugin/

Friday, December 19, 2008

Information Warfare Classification according to Schwartau

"Information Warfare: Cyberterrorism: Protecting Your Personal Security in the Electronic Age" by Schwartau

According to Schwartau, information warfare can be divided into three areas:

>> Class 1: Personal Information Warfare, where the individual is the target. It is also called Identity Theft.

>> Class 2: Corporate Information Warfare, or “the rough equivalent of what we used to call industrial espionage". It involves “patents, copyrights, business deals—that is, the real value of companies”.

>> Class 3: Government Information Warfare. The Russia-Georgia conflict is an example of this. Another example is a similar situation that developed in Estonia last year, where that former Soviet satellite’s cyber infrastructure was compromised by DoS attacks over several days after Estonian officials removed a Russian war memorial from the center of the capitol.

Thursday, December 11, 2008

Worm Classification
























Copyright - Aman Hardikar .M

World Fastest MD5 cracker BarsWF

System Requirements:
• CUDA version only:nVidia GeForce 8xxx and up, at least 256mb of video memory.
• LATEST nVidia-driver with CUDA support.Standard drivers might be a bit older (as CUDA 2.0 is still beta)
• CPU with SSE2 support (P4, Core2Duo, Athlon64, Sempron64, Phenom).
• Recommended 64-bit OS (WinXP 64 or Vista64). 32-bit version is also available.

Speed:
nVidia 9600GT/C2D 3Ghz CUDA version -- 350 M keys/sec
SSE2 version -- 108 M keys/sec

Comparison: http://3.14.by/en/read/md5_benchmark

Version: 0.8

URL: http://3.14.by/en/md5

UI: Text Based (Command Line)

Usage:
-? Prints this help
-r Continue previous work from barswf.save BarsWF updates it every 5 minutes or on exit
-h 1b0e9fd3086d90a159a1d6cb86f11b4c Set hash to attack
-c 0aA~ Set charset. 0 - digits, a - small chars, A - capitals, ~ - special symbols
-C "abc23#" Add custom characters to charset.
-X "0D0A00" Add custom characters in hex to charset.
-min_len 3 Minimal password length. Default 0. MAX 15!!! :-]
-thread_n 128 | Might increase speed on GTX260 and later.
-grid_n 128 | Try 192, 256 e.t.c. for both
-gpu_time 1500 How long GPU kernel allowed to work, in milliseconds. 1500 - a bit faster, 50 - a bit slower, but windows is more responsive. Default - 500.

Download Links:
CUDA:
BarsWF CUDA x64 - http://3.14.by/files/BarsWF_CUDA_x64.zip
BarsWF CUDA x32 - http://3.14.by/files/BarsWF_CUDA_x32.zip

SSE2:
BarsWF SSE x64 - http://3.14.by/files/BarsWF_SSE2_x64.zip
BarsWF SSE x32 - http://3.14.by/files/BarsWF_SSE2_x32.zip

Monday, October 6, 2008

Configuring Network in Linux

1. DHCP Environment:

Using DHCP Client Daemon
# dhcpcd

Eg: # dhcpcd eth0
where interface is eth0, default Ethernet (LAN) Card interface.

2. Static IP Assigning:

# ifconfig netmask
# route add default gw dev
# echo "nameserver " > /etc/resolv.conf

Eg: Static ip = 192.168.0.12; subnet = 255.255.255.0
gateway = 192.168.0.1; primary dns server = 192.168.0.2

# ifconfig eth0 192.168.0.12 netmask 255.255.255.0
# route add default gw 192.168.0.1 dev eth0
# echo "nameserver 192.168.0.2" > /etc/resolv.conf


The first command assigns an IP address to the interface.

The second command adds the route information, so the system can reach other machines. It adds the default gateway for the packets to get routed to a gateway system. This command can be replaced by a more specific command
# route add -net 192.168.0.0 netmask 255.255.255.0 gw 192.168.0.1 dev eth0
This adds a route to all packets to network 192.168.0.0 to go through interface eth0 to gateway 192.168.0.1 for gettting routed to their destination.

The third command adds the DNS server IP to resolv.conf. Whenever a request comes for any DNS name resolution, resolv.conf is checked for the DNS servers to query the information.

3. Verification:

# ifconfig | grep inet
# ping -c 2 www.google.com

The first command gives the IP address assigned.

The second command can be used to verify the route and dns working.
If there is positive response from the ping, then the network settings are complete.
Else try to ping to another system in the same network. If this is positive, then there might be a problem reaching DNS server and need to be checked. If this is negative, then routing information needs to be checked. "route -v" gives the routing information required.

BackTrack3 Installation on Hard disk

Assumptions: Hard disk = IDE(hdX); Primary Master (hda); No pre-existing partitions

fdisk /dev/hda

make:
/dev/hda1 -> / 83
/dev/hda2 -> swap 82

mkswap /dev/hda2
swapon /dev/hda2
mkfs.ext3 /dev/hda1

mkdir /mnt/bt3
mount /dev/hda3 /mnt/bt3

cp --preserve -R /{bin,dev,home,pentest,root,usr,etc,lib,opt,sbin,var} /mnt/bt3/
mkdir /mnt/bt3/{mnt,proc,sys,tmp}
mount --bind /dev/ /mnt/bt3/dev/
mount -t proc proc /mnt/bt3/proc/

chroot /mnt/bt3
vi /etc/lilo.conf

change boot = /dev/hda
change vga = normal
change image = /boot/vmlinuz
change root = current
change label = "BackTrack3"

save and quit

lilo -v