Jump to content

Micah C

Active Members
  • Posts

    102
  • Joined

  • Last visited

Posts posted by Micah C

  1. Yes, the rubber ducky works on all platforms including mac. To get started the best thing you can do is explorer the hak5 wikis, as well as the teensy website. I also suggest that you familiarize yourself with the Arduino IDE, and teensy example code. Search the forums, many have come up with tutorials and examples. maybe do a bit more research before asking?

    Use the ducky safely ;)

  2. I recently downloaded Gbridge, which unfortunately its a windows only program. I noticed that Gbridge supports VNC with a built in VNC server. Is it possible to access this VNC server using RealVNC on say a mac? Any thoughts or ideas are greatly appreciated.

  3. I have recently discovered that Gmail offers a way to read your emails with rss. (https://USER:PASS@mail.google.com/mail/feed/atom/index.xml) Im currently trying to find a way to read this feed and display it on a web page with PHP. I have tried various different "solutions", but have had no success. Does anyone know how I could accomplish this task?

    Things I have tried so far:

    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" dir="ltr" lang="en">
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
    <title>Loading directly an RSS feed and displaying it</title></head>
    
    
    <body bgcolor="#FFFFFF">
    <h1>RSS 2.0 Demo Direct</h1>
    <hr>
    <div id="zone" > Loads directly an RSS file and displays the list of recent articles. 
    </div>
    
    <br>
    <p>
    <?php
    	require_once("rsslib.php");
    	$url = "https://USER:PASS@mail.google.com/mail/feed/atom/index.xml";
    	echo RSS_Display($url, 15);
    ?>
    
    </p>
    </body>
    </html>
    

    Tried using this resource: http://www.scriptol.com/rss/atom-reader.php

    Maybe I'm doing something wrong. If anyone can help it would be GREATLY appreciated, thanks.

  4. I've been trying to test on window 7, but then I don't have my own payload. If it calls home with the computer information, isn't that already a payload??

    Yes. It just allows you to add an custom one if you wish. If you dont have a payload of your own you can just leave the website field blank in win_activate.exe. Im not sure if you looked at it too much but the info is really basic. It really needs to be added to, but its a start. Does it work on windows 7?

  5. Thx for this!! I'll be testing this on window 7 and reporting some results. however, is it possible to add the installation of vnc onto the victim's computer secretly? That would be awesome xD

    Edit: I just downloaded, but then there are some things I don't understand. Does this include the payload, or no?

    Its awesome to hear feedback! USB PowerSaw's "payload" is win_activate.exe. One of the main objectives of PowerSaw is to allow you to create your own payload. win_activate.exe download's the "install.exe" program from a user specified website. Does USB PowerSaw U3 work on windows 7? I wasn't sure if it would seeing how file locations are a bit different. As for the VNC server ill look into it.

  6. Say hello to the new USB PowerSaw U3.v1. USB PowerSaw is now for U3 Devices. The following updates have been included in USB PowerSaw U3 Version 1:

    U3.V1 Features:

    > Copy's its payload much faster. (up to 50% faster)

    > Sends more information about the victim. Includes: OS Service Pack, Drive Free Space, Drive Total Space, Drive Serial Number & it attaches cookies

    > Minor Bug Fixes.

    Planned Updates:

    > Im currently acquiring information on the GeoLocation API. The next version of PowerSaw (U3) would give the location of the victim as well as their external IP. - Done.

    > Remove error messages. Includes: "Error connecting to server" & "Attachment not found"...

    > Send sensitive data. ex Passwords. (VNC Passwords Attached - Done)

    > No more need to download updates. You can install update packages right from PowerSaw

    > Weew I have a lot on my plait!!

    Development on non U3 Versions are still continuing.

    Thanks for your interest in PowerSaw. If you would like to get involved please email me at usbpowersaw@gmail.com

    RECALL! If you have downloaded USB PowerSaw before August 12, 2009 at 4:20 PM YOU MUST download it again. The autorun file is missing. Please re download USB PowerSaw U3.v1 to aquire the autorun.inf file. OR download it below. Sorry for the inconvenience that I may have caused you.

    Download Link: (Public no password needed)

    Mirrior1 (Media Fire)

    Mirrior2 - (File Factory) Working

    AutoRun.inf (This file is not needed for those of you who have downloaded USB PowerSaw after 8/12/09 at 4:20 PM)

    micachonti.blogspot.com

  7. I just finished working on dumping the VNC password hex. When the USB stick is inserted to the victims PC or when PowerSaw check's for downloads it copies VNC details from the registry and email's them to you. VNC details include Ports, user names and encrypted hex passwords. (You can decrypt them with Cain). With this information one could simply connect and grab as much information as he or she wants. Im still looking for more useful registry keys to dump, so if you have any ideas just shout em out!

  8. Has anyone had a chance to test it out yet? I'm working on a way to copy registry keys and then attach them in an e-mail. I'm running into problems doing so. If anyone has any suggestions, comments or questions just spit it out!

  9. I am working on my own USB hacksaw. I name it... USB PowerSaw. (Not very unique, whatever) I will be posting my development of the project here.

    Description of PowerSaw V.1.0: Powersaw copies it's payload onto the victims PC once inserted. It copies "copy.exe and "win_activate.exe" to the start up directory. "win_activate.exe" silently download's and installs your payload / program from a remote website. It then launches your payload. win_activate.exe check's for new download's every time the victims PC is stared OR when the same USB stick is inserted. "win_activate.exe" call's home and sends an e-mail to you informing you of the user's DNS Servers, Computer Name and OS version. (I would like to thank X3N for his e-mail script.) I am working on version 2 which has a self replicating feature. This allows the virus (whatever you want to call it) to spread faster. Upcoming releases would include "PCToDrive.exe" and "DriveToPC.exe".

    V1.0 Features

    > Call Home with information about the victims PC.

    > Automatically download's and installs your payload / .exe

    > Check's for new download's upon PC start up OR when the same USB stick is inserted

    V2.0 Features (Work in progress) (Non U3)

    > Self replicate. Copies itself to other USB sticks for faster spreading. (Almost finished)

    > Dump passwords.

    > Dump Cookies FF + IE

    > Call home every so may hours.

    > Dump Registry keys (Complete. Im trying to decide what keys might be useful.)

    I would like to be able to send commands to PowerSaw for execution. Ill have to work a bit on that, but if you are interested in downloading V1.0 you can visit my blog at www.micahconti.blogspot.com for more info. If you are interested in the development PM me and well work something out! You can also email me at usbpowersaw@gmail.com. Ill try to post download links to the forum, but for now just visit my blog. There will be a link on the right side.

    Edit:

    ZIP File Password: 8h7k2u4 (Requires 7-Zip)

    Download link: Here

    Downloads: 41 (8/11/09)

  10. Does anyone know where I could pick up a copy of Festoon. It allows you to hold skype conferences with multiple video. It seems that the development has stopped and the download sites are gone. Does anyone know any other solutions or where I might be able to pick up something similar?

  11. um.. WebOS that great

    what idea you want to create?

    umm mr. micah are you want to build website like windows or mac or linux??

    i'm try to create this one

    i want to build web OS like mac

    contain dock menu and another

    but i have problem when develop this

    i just use javascript (like jquery or mootools)

    i don't know how to create another aplication like music player or word processing

    maybe you can help me

    =======================================

    i'm sorry if my english poor

    Exactly what are you trying to ask me? You want me to help you make a webos? My webos is built with HTML, Java, CSS ( that's why the DHTML windows are styled like a windows machine, but could easily be styled like a mac or linux in a snap.), Very little XML, PHP (Some applications that i wrote require xml), and some DHTML. As you may have guessed building a website with this complexity takes time and patients. You could easily build a word processing application in PHP as i have that allows a user to save his/her document (.txt) to his/her desktop with little scripting. I actually didn't design the dock. I can't think of his name, but you could find a mac javascript dock by searching Google.

  12. You brought up the fact that applications contain of <script> tags. You got me thinking why the hell do I have those in the first place. As I browsed through the index searching for the answer I found that the <script> tags were necessary because of the DHTML window. Here is the link if it helps. The DHTML window is really just displaying an iframe. The icon is a dragable link with an image that points to the DHTML window script. Therefore the script tags are needed on both sides. the DHTML window and the link side. My question is what does this mean for me? Im still a bit confused on what to do. I really appreciate your help so far.

    Micah C

    Extra stuff that might help:

    The link code.

    		&lt;a ondblClick="Run(); return false"&gt;
    		&lt;p&gt;&lt;img src="Applications/Run/Run.png" border="0" style="float:left" 
    
    class="dragableElement"&gt;

    EDIT: Dragable Element .js (Original Source)

    Points to "Run"

    Here is "Run" basically a DHTML window iframe.

    &lt;script type="text/javascript"&gt;
    function Run(){ //Define arbitrary function to run desired DHTML Window widget codes
    ajaxwin=dhtmlwindow.open("Run", "iframe", 
    
    "http://www.micah.ath.cx/IronOS/System/Users/Micah/Applications/Run/index.html", "Run 
    
    Program", "width=350px,height=180px,left=400px,top=200px,resize=0,scrolling=0")
    }
    &lt;/script&gt;

  13. Ok ill try pasting the script in PHP. Can I use the PHP tags within the index.htm doc? Im pretty sure i can but just checking. So I examined OneTimePad's code in further detail and had a question. Since there is no .js files in the applications folder how could i modify his code to point to .html files instead. I was thinking something like:

    #get the list of applications

    my @apps = `ls -l Applications/ | sed -n /^-/s/\ \ */\ /gp | cut -d" " -f 9`;

    foreach $app (@apps)

    {

    print "<script src='Applications/$app' /index.html>";

    #...

    print "<a ondblClick='$app(); return false'>

    <p><img src='Applications/$app/$app.png' border='0' style='float:left' class='dragableElement'>";

    }

    I'm not sure if this will work. Ill have to try it out later. I just thought i would try to get some imput on it.

  14. Thanks for your response. I tried replacing the code as instructed, but unfortunately i still get an error. "Error parsing function call." the error seems to be located ($New + "\test.bmp"^ERROR. I have tried using the & and the + signs to concatenate, although still receive errors. I looked up concatenation symbols, and parsing functions on Google, but it looks as if you were right about the "+" sign. Any suggestions or help here?

  15. Sorry it's been so long since i have posted back, I have been bogged down with school. I took some time to look over your script, but to be honest I have no clue what to do with perl. Here is the problem i face with this code. There are actually no js files in the applications folder. (Diagram below). Second I don't know how to implement perl into my page? Any help?

    - Applications

    | + Calendar

    | | index.html

    | | icon.png

    | + Other program files

  16. Hello,

    I have an AutoIT script that detects usb drive insertion. I'm trying to figure out how to copy files to the flash drive from the computer without the script actually knowing the drive name. Below is the script. you can see where i have implemented the copy to function, but without the script knowing the drive its hard to tell it where to copy to.

    Copy Function:

    $b = True
    If $b = True Then FileInstall("C:\location\test.bmp", "FLASHDRIVE\test.bmp")

    USB detection with copy script:

    Dim $DBT_DEVICEARRIVAL = "0x00008000"
    Dim $DBT_DEVICECOMPLETEREMOVAL = "0x00008004"
    Dim $USB_ATTENTION = "0x00000007"
    Dim $WM_DEVICECHANGE = 0x0219
    Dim $Drives
    Dim $Drive_Type = "ALL"  ; Set to ALL because some USB Drives are detected as Fixed Disks, and we don't want to miss those
    Dim $WATCH = False
    Dim $MyDrive = "STUFF"
    
    ;Get Initial List of Drives to Check Against
    UpdateDrives()
    ;Setup The GUI to watch for the DeviceChange Event
    GUICreate("")
    GUIRegisterMsg($WM_DEVICECHANGE, "DeviceChange")
    Func DeviceChange($hWndGUI, $MsgID, $WParam, $LParam)
        Switch $WParam
            Case $USB_ATTENTION
            ; This only happens when USB drives are inserted, so I use it to tell the difference between these and CDROMs
                $WATCH = True
            Case $DBT_DEVICECOMPLETEREMOVAL
            ; Whenever a Drive is Removed, Update the Drive List
                UpdateDrives()
            Case $DBT_DEVICEARRIVAL
            ; A drive was inserted
            ; Use $WATCH to tell if this was a CDROM or USB
            ; $WATCH = True, USB
            ; $WATCH = False, CDROM
                If $WATCH = True Then
                ; New USB Drive Was Detected, Time to Find it's Letter
                    $New = FindNewDrive(); $New now has the Drive Letter of our New Drive, so USE IT!!!
                    $Label = DriveGetLabel($New)
    
    	$b = True
    	If $b = True Then FileInstall("C:\Location\test.bmp", ("$MyDrive\Destination\test.bmp")
    
    	EndIf
                ; Now Reset Drive List so more insertions can also be detected accurately
                    UpdateDrives()
        EndSwitch
    EndFunc  ;==&gt;DeviceChange
    
    ; This just jumps through the new Drive List, comparing them until it finds the entry that is in the new one that isn't in the old one
    Func FindNewDrive()
        $Temp = DriveGetDrive( "REMOVABLE" )
        For $i = 1 to $Temp[0]
            $Old = False
            For $j = 1 to $DRIVES[0]
                If $DRIVES[$j] == $Temp[$i] Then $Old = True
            Next
            If $Old == False Then Return $Temp[$i]     
        Next
    EndFunc  ;==&gt;FindNewDrive
    
    ; Just to keep things neat, and so if Variables Ever Change, this makes updating easier
    Func UpdateDrives()
        $Drives = DriveGetDrive( $Drive_Type )
    EndFunc     ;==&gt;UpdateDrives
    
    ; Main Loop to Keep the Program Open
    ; No Real Way of ending this program, except for just killing the process
    ; Which is what I want, an always on backup for my drive every time I insert it
    While 1
        $GuiMsg = GUIGetMsg()
    ; This is needed because the watch event above not only triggers before a USB Drive is inserted/removed,
    ; but also AFTER insertion too, and if not reset, a subsequent CD insertion will trigger it again.
    ; So, every second, we reset $WATCH, to keep things clean
        Sleep (1000)
        $WATCH = False
    WEnd

    Micah C

×
×
  • Create New...