Madkat

I was mostly planning on doing this on windows. As far as I know, linux password stealing is still a thing of dreams, and the only mac I currently own is a G3 iMac. Maybe some day I'll attempt it, but for right now, it's just a dream of mine.

I'll have some code in a week or so.

The biggest problem is I want to try to utilize the processor for cracking (at least try and see how slow it is). And I plan on using a VM to test it, I'm mostly looking for someone with a ducky. (due to the economy I can't afford to buy a ducky, Hell I can't afford to feed myself on a regular basis)

Ok, I guess 4 people sofar isn't a bad start, so I'll go into a little more detail (This is still pre planning, I'm going off my old project that I'm sure I can copy over to the Ducky) Features I've written and know work Antivirus Disable (and re-enabler) (My favorite part) - Although I don't remember if it required Admin privileges or not (probably did) The actual password dump (worked 95% of the time when I wrote it, until 64 bit came out), (Although I just found the solution to that problem) The actual password crack (worked every time, automatically when run off of USB). Inability to be detected by an antivirus (really simple way to do it, although I never got word back if I was able to bundle the program with it) Stuff I never got to work: Admin exploit, although I was just made aware in the video that someone did it... Coding it in anything other than batch I've come up with a project name (probably going to change for the Final/beta release): Black Duck If you guys have any suggestions on what else you want it to do, let me know, I'm sure I can try and add to it :)

On a client's server, their root password was their company name (three letters), their sql server password was 123, and all their mail account passwords were sales. They wondered why they got pwnt so hard...

if no one is watching: 1. Pop cover off Side (if not locked (none of the ones I've dealt with in school were) 2. Reset bios 3. ? 4. Profit!

Hi guys, I was originally here helping on the USB Switchblade, also helping to do the Rainbow Tables that actually did the password cracking (helped more with this part) Anyway, I was working on trying to do an ultimate switchblade with an automatic payload and decryption without needing admin access for pwdump. When I checked my Sub box on youtube today, I saw the USB Rubber Ducky. AND the fact someone found a way to run escalated privileges. AND the fact it has an onboard processor (abit slow). Anyway. If I can pull the $90 out of my ass for a rubber ducky for testing, is anyone interested in a password tool that would run automatically and decrypt your password automatically all from your rubber ducky (I don't know so much about the decrypt automatically, but I can send the hash off to a remote server, and have it Cracked there, then either displayed online (you'd match your hash to the cracked password), or E-mailed back to you? Let me know guys, if so I'll start coding as soon as my plate isn't overflowing with stuff I have to do (hopefully about a week!) If anyone wants to help, let me know. If I can't get my hands on a ducky, I might need a few test subjects running different OS's. There's no windows boxes in this house. I can sorta test in a VM, but Until someone releases a ducky emulator, I can't fully test it (or learn how to access the CPU, if at all possible)

ok so dyndns updater is running on my computer, is that all I need to know?

for the person I connect to? wouldn't that require more programs for me to know the IP of the person I'm connecting to?

I followed Hak.5's instructions on one click vnc, it works great (good idea!) but how do you know what the IP is for the program? Thanks!

I remember in the first hak.5 ep when they talked about being able to run solitare or telnet, so I tested it out today, I was doing a "leave files intact" on my linux hard drive because my main rig died and I don't have a spare hd for my backup machine.. Anyway, I figured I try to see what happens when I go to C:program files. Sure enough, all my regular files are there, so I loaded up firefox (which is what I'm in now during windows setup!), and it works operfectally, but its all that seems to run, X-chat or Icechat doesn't load, and I haven't tried WoW yet... but this is kinda cool.. anyone know of anything else that you can do with xp setup?

7:05: started first can of Vault 7:06 10 Grams of caffeine will most likely kill you... Damn, 10 cans = .75 grams caffeine Not enough to kill me, but supposdily enough to make me buzzed (extremely) Feel like shit and be dehydrated.. (side note. I did this once before by accident with 2 16oz cans of Rockstar: Juiced (if you haven't tried this stuff your missing out!) and I was up for 48 hours straight....) I just realized this is Vault Zero (the low calorie stuff) so I'll only be ingesting 50 Calories in this attempt vs the 1170 in a regular cans of Vault.. (for 10 cans).. According to the "Death by Caffeine" calculator, I'll need to drink 175 cans of Vault to die.. 7:15 First can empty. 2nd can opened 7:16.. Called stupid by four people, 2nd can half way empty. 7:30 2nd can empty. 3rd can opened, Loaded up Halo PC 7:40 3rd can empty, 4th can opened. 36 oz finished, slight stomach ache developed 7:45 First pee (If you remember the first Austin Powers Movie, when he was unfrozen when he had his long pee (stage 4 I believe).. yeah I had one of those.) 7:46 Realized this new video card gets me frame rates from 90-110 FPS in Halo PC (and to think I was only getting 25 with the old one!) 7:58 Halo level one finished, 4th can half empty.. I can feel the buzz already! 8:05 4th can finished 5th can opened (Half way done in an hour) 8:07 so hyper I'm shaking like mad... and I'm going to do a Podcast with TechCentric-Nick and Underground 5..... This is going to be interesting.. 8:10 Ignite is gay, he posted a link to guys jacking off.... That made me want to loose those 5 cans of Vault 8:23 5th can done. 6th can opened 8:28 This is the 3rd time I peed sofar and I gotta go again.. This sucks! 8:37 Getting sick of the taste of Vault.. I wish I had a few bottles of Bawls around.. or RipIT, but no I don't guess I'm stuck.. Atleast I have a nice tower of empty Vault Cans behind me... 8:45 6th can finished.. I'm slowing down.. 7th can opened and AGAIN I have to pee! 9:07 7th can halfway finished, mom went to bed and the last 2 hours have flew by... Need to pee for the 6th time already and were talking about alohol in the IRC channel.. 9:15 Shaking is getting uncontrollable and its hindering my typing.. I can't walk in a straight line.. Is this Vault or is it beer? 7th can finished. 8th can opened and stomach ache pops up again 9:43 8th can finished, 9th can opened 9:47 Shaking continues, getting harder to type.. again and I need to pee AGAIN! 10:01 I am sick of this, the stomach ache is back again and my whole body is shaking, and I'm developing a headache.. 10:07 Decided this is my last can of Vault.. I still have to force another half a can down, and I need to pee again. 10:10 Finally start the podcast, and stomach ache is gone.. Mabye I will finish all 10 cans and live in glory saying I'm a fat bastard! 10:26 9th can finished 10th opened 10:52 I am never going to try this test again as long as I live... 11:00 10th can finished.. yay! 11:08 The buzz has worn down already, and I stopped shaking, the stomach ache and headache are gone... Mabye I will sleep tonight. 11:10 the podcast.... finally started 2 hours late but I guess..

I just got an e-mail saying the e-mails don't exist .. Oh Well.. I was reading about Milw0rm in "Art of Deception" while I was sendingthis e-mail.. Otherwise, think it would work?

I'm Jason Millworth, owner of Custom Geek Computer Security. While looking up different forklift companies for a client, I happened to have found your site, a website my client was looking for. They asked me to do a penetrationtest on your server to get a "Cross Reference" from your company. They statedthat you must be a distributor for Intrupa, and they are not. I have a twenty-eight page list of all the vulnerablilties on your server. If I recieve a copy of your Cross Reference I will gladly give you the list of vulnerablilties, or fix the vulnerablilties on your server. Thank you, Jason Millworm Custom Geek Computer Security Milwaukee, WI The above sent was sent to a company my mom needed a cross reference from, and Didn't feel like hacking.. Heh.

In reply to the lunch line post: I'm 16, and this was over a yahoo conversation (word for word, except for fixing my misspells) to Wallis's Post. I don't own a laptop, and if shes over I dont touch my computer unless it is to put another movie on. I just realized this post had 1500 views and 52 replies... I thought I would MABYE get 10... Damn!