IrishFavor

Well i have no problem replacing all the parts myself i tend to do that all day on laptops but if it has a warranty i would def send it out and have them do it so as to not void it. and once warranty is up i would do any repairs myself.

Hey all, it’s that time again. Time to find a new machine however i do have a few requirements that have to be met. It needs to be lightweight and about 13"-14" I do not care about optical drive necessarily. However I do plan on using this for pen testing ect. I will probably use BT5 as my main os and Win7 as a secondary. As such I will most likely be using external antennas or other usb powered devices. However im looking for something that will allow me to creatively connect the devices to it. Most likely they will Velcro to the top of the screen when in use and not attached when not in use. When in use I will be mobile so I would not like to have any docking stations ect. Now i will need a solution whether it be a usb hub etc. that I can plug in 2-3 usb devices as mentioned above that can be easily attached, though it would be ideal to have rear usb ports. Computers I have considered are 13" MacBook pro, Lenovo ThinkPad X220, Dell XPS13 ultrabook, ASUS Zenbook. If anyone has any incites as to a solution regarding machine or antenna solution it would be greatly appreciated. Also if anyone has any photos of similar setups that works for them I would love to check them out. Thank you and happy hacking.

Depending on your clients level of understanding or point of view you may also want to relate this to how they use the network. For example if they are in using for back-office work and the only place they keep file is on a server it would be very feasible for an intruder to get into the network to change records such as who has paid rent for the month ect. I find that when explaining to the client showing them how it can affect their business but most importantly income they usually are very receptive to the solution.

As int0x80 expressed is there something that you feel may limit you? what do you already know? and what do you hope to learn? One of the best things about going to the hacker cons is the talks amongst many of the other goings on. Is there a specific field of interest you have within pen testing (i.e. wireless exploitation, permission escalation, ect)? You may find that sitting in on a talk would be very beneficial for you. On the other hand if your one who just wants to learn many aspects or are not sure yet, you may find it beneficial being around like minded people who can give you a few pointers. The biggest thing about a con is that its a social event, show what you know and want to learn and you will find many who will help you lean what you want to know.

me as well ill probably order 3-4 just incase i screw a few up beyond repair lol.

Imagine a full backtrack install, plus the alfa wireless adapter as a small disposable or hidden box that can run off a battery pack. it could easily hidden in server racks with the network tap. You could even use it build in wall computing systems to control house hold objects ect.

I dont understand how this takes advantage of them? Im sure they can say no they dont want to. I mean if they dont have a job this gives them the ability to at least get some form of honest income. Then again this is the first i am hearing about the subject and have not had a chance to see what its all about.

Also those Sams Teach yourself books are pretty good. They are one of the easiest to understand and follow as well great for finding things for reference.

ok, wasn't sure it had looked promising. I will look into hamster and ferret.

thanks for the info, i ended up going with chrome as i like the interface better than opera. and indeed it does work without having to have any add-ons. now if only i can figure out how to get firesheep, if anyone has any experience plz let me know.

Opera? who uses that lol :P i will def try that tho, i do prefer to use firefox if there is a way to get it to work i would prefer to use that. also do you know of a good place to get the core codecs? i just got vlc to work properly does that include the proper codecs? it should for local playback but i am not sure on its integration to the web browser. thanks for the response.

why not just make an entry on the usb to boot to the first drive? then when booted launches grub on that drive and gives your dual boot options. then all you have to do is boot from usb.

have you checked out http://hak5.org/episodes/episode-626? there's a segment on gsm security, using a usrp you are essentially the phones tower and have control of the phone. what type of phone are you looking to hack? is it gsm or cdma? is it android or ios? those questions will help you find the right tools and right way to implement the botnet should you want to test that.

Hey there everyone, i just recently made the switch to backtrack from windows. Please excuse my novice questions as i explore this os. so far most things seem strait forward. (ie. installing tar.gz files) however i have come into problems when watching youtube clips as well as videos here hon hak5. I have installed the adobe plugin so i do get few videos, but when the videos are in html5 i just get a screen telling me to install the plugin but i do not see a link. I believe that it uses the .h264 codec, i may be wrong. Any help would be Greatly appreciated.

hey guys had an idea for another little payload goes along with the wallpaper switching, how about one that disables all mouse activity cursor and clicking im sure that would make some people very happy ;) let me know your thoughts.

Hey guys as a Dedicated HAK5 viewer after signing up for Google plus I cam across this http://thenewtech.tv/ for those of you who remember Wess and Matt. This is their new project thought this would be of some interest to fellow HAK5 viewers. Thought I would drop the link.

Yes it is possible to run both, you can write the batch scrip and then in the u3 menu you can choose a program to start when the u3 menu is launched and because the u3 is launched when you insert the drive the batch will also run. otherwise if you have an autorun.ini in your root and list the batch script listed in the autorun.ini file it should autorun provided that you have autorun enabled.

Looks interesting, i will defiantly give it a try once i get home. I assume this is to boot from USB as a full install, not a p.e. or VM correct? I will give a review on this solution once i have downloaded this ad had a chance to take a look at it. Other than the clicking 10 times to allow non signed devices on boot. Have you experienced any other errors blue screens, errors to reading and writing to the drive, incompatible flash drives, ect?

Yes that is part of the point, that and also the fact that this would allow you to work on machines that have been corrupted. as well as work on machines without a CD/ DVD drive. weather it be old computers, kiosks, netbooks, ect, as well as being a great debugging/security tool it would be a great tool for students as well.

Well i guess this is kinda and update. i have downloaded VMware suite it has what they call ACE portable. basically it is a VMware player and it will let you take your VM's with you. i have created a Windows XP VM, the only problem that i currently have is that i can get it to boot but after it does i get one of 2 problems. 1) it cant find the VM and wont boot, or 2) i get it too boot and it gets to the windows XP loading screen and then it fails. On another note, i have been looking at other solutions. I have found something similar. it is a partnership with the people of IronKey and Lockheed Martin. It is called the IronClad http://www.lockheedmartin.com/products/ironclad/index.html, it takes your entire OS installation and copies it to a USB Flash Drive. When booted from USB your computer will bypass your HDD. basically exactly what Multipass does except your not using live cd's. I may look at getting one of these to see how their implementation works. As always any input or suggestions are appreciated.

i currently am using a 16GB ultra. i haven't even thought about using the backup as a payload delivery option. if anyone has any code they would like me to try out i would me more than happy to.

so far looks great. thank you for all the work on this project.

Hi Everyone, this is a project i am working on that is basically an expanded version of the USB Multiboot. First off i am using the USB Multiboot .ISO method as in all of the software is packaged into an .ISO file and then run as a virtual CD within grub for DOS. I used the pre-compiled software from http://www.pendrivelinux.com/boot-multiple...-multiboot-usb/ then i have added acronis true image, konboot, Knoppix STD, and Ultimate Boot CD for Windows. That takes care of the DOS side of booting into different O.S. Next what i have done is download several programs from http://portableapps.com/ and used a program to add them to the U3 Menu. The Program i used can be found at http://usb.smithtech.us/projects/shortcut_creator.php Now we have a drive that can boot in DOS and Windows, the next item that i am trying to figure out is how to boot a virtual machine of windows XP, Vista, or 7 from the device in windows, and boot a full copy of Windows XP from grub. as far as booting in grub i took a look at this article, http://www.ngine.de/article/id/8. It looks promising but i was unable to get it to work. Next as far as being able to boot from within windows, the purpose of this is so that when at public terminals you can carry all of your software with you (i.e. Microsoft office, adobe photoshop, ect.) so that you never have to touch the public terminal. It would be ideal to leave nothing behind on the computer. I have tried Mojopac http://www.mojopac.com/ which shows promise, but sadly is not quite there as it does not support x64 bit windows as well as vista or 7. Also i have tried MokaFive http://www.mokafive.com/, this seams to work on a number of different Virtual O.S. but i have found it to be to buggy when trying to get a virtual windows to run. If there is anyone here who has had any luck with any of these or knows a simple solution for this i would appreciate any help that could be given thank you.

Well TeamViewer sounds to be the best solution. I don't have much experience with it, tho after hearing the benefits i looked into it and i have to say that it is something i am going to check out. Thanks for passing along the info.

In my opinion they are only as secure as you are. By that i mean if you don't have another layer of security be it physical or digital. Then its as simple as understanding the algorithm that they use to encrypt them. most smart cards being magnetic strips you can get a card reader and writer for like $300. Then all you need is to understand what data is on each of the magnetic layers. yes its time consuming but if someone had enough time or new the algorithm the could just clone the card or make a master card. the problem goes with physical security, such as having to type a password on a keypad once the card has been swiped, or having a physical key that you have to turn. its the same case with say a gift card to a store, sure you can clone a gift card but the problem comes up as one of the layers of data is an temporary account that the money put on the card resides in. Once the card is used it take that money and moves it to another account and closes the one that it was in. So now the cloned card is useless because that account no longer exists.