Jump to content

cooper

Dedicated Members
  • Posts

    6,071
  • Joined

  • Last visited

  • Days Won

    139

Everything posted by cooper

  1. There are USB monitors which might be useful. No recording though. The device you actually want is a KVM over IP switch. The last thing you want to manage a machine is to go down to the rack, find the unit, plug in a monitor, mouse, etc and work it from there. Unless you're in charge of the cables, hardware operation (as opposed to the software running on there) and/or the on/off switch, stay out of the server room as much as you can.
  2. cooper

    survival

    If you live someplace where it's not uncommon to go home and find the floor wet due to flooding, MOVE. This situation can't be good for anything, including your computer(s).
  3. Exactly this. You'll want to (also) go to small(er) cons, 2600 meetups, OWASP meetups, BSides events, learn what you can from others there and teach yourself when you're not there. Gain an understanding of stuff that interests you - not because work in that area pays better but because you love doing it. It's what keeps you motivated. When you feel you understand something well that others might not (just ask people: "would it make sense for me to do a talk on this?"), do a presentation on that topic at one of those smaller events. You'll build communication skills, people will learn from you (which will get you noticed, which does help with getting work) and others might approach you with cool questions you never thought of asking. It's good to keep in mind that the goal of security work isn't to find problems but to explain to whomever is running some kit/software what the consequence of this issue can be, how it can be mitigated and how it can be fixed. Sometimes a problem can't be fixed or patched for some reason and you need to give them useful, actionable advice on how to best handle that risk. Being able to communicate well helps a lot here. Being able to put on your resume that you've presented on (preferably relevant to the work you're applying for) topics at %EVENT% gives you a leg-up on the competition.
  4. In dutch it's called "een piep-systeem" - a beeping-system. In dutch, when you say someone 'starts to beep' ("begint te piepen") it has a slang meaning of someone being childish and/or making noise about being sorry for themselves. The use of that phrase is usually reserved for kids who are being annoying because they want something they cannot have (candy/toy/their way/whatever). In this case, it's beautifully suitable to both viewpoints to the situation - an alarm going off because something has gone awry vs someone being prissy because they discovered you made it impossible for them to have their way.
  5. I can't find the image anymore, but there was this HILARIOUS pic of the default error page for when IE couldn't find a URL. Someone made an exact copy buy changed the text in an ingenious way so the sentences are roughly as long, the references to elements in the IE setup are where they would normally be ("Did you check under [Internet Tools] because I'm sure you'll find a picture of yourself there").
  6. Actually, you should get the school to drop/rename their wireless. Otherwise people will just use their wifi without looking at the SSID list at all. Not doing that this idea would become more of an easter egg that you only discover when you actively go out and hunt for it.
  7. Laten we eens beginnen bij het begin: Wat probeer je te doen? Het doel van de configuratie waar is in zat was om van de Pineapple een eigen, draadloos netwerk te maken. Zodra je de configuratie hebt aangeleverd sluit de Pineapple al zijn draadloze netwerk verbindingen af en start hij een nieuw access point met de ingegeven configuratie. Dat is de reden van het verbreken van de verbinding. Je moet hierna dus opnieuw de verbinding maken met het Pineapple netwerk wat op je wacht op het gegeven SSID en beschermd middels het gegeven wachtwoord. Die regel tekst die je trachtte uit te voeren... Snap je wat dat doet, waar het voor nodig is en wat het als eindresultaat zou moeten hebben? Begrijp je wat er mis ging en snapte je eventuele foutmeldingen? De Wifi Pineapple is een aanvals tool, te gebruiken voor netwerk penetratie tests. Zoals jij het beschrijft gebruik je 'm slechts als draadloze netwerk adapter. Dat kan en daar is op zich niks mis mee, maar het is alsof je een iPhone gebruikt als viltje om een tafel mee stabiel te krijgen - het zal vast kunnen werken, maar een beetje zonde van het geld...
  8. Vanuit de VS moet je rekenen op zo'n $50 extra, met een grote kans dat er daarna nog 21% BTW overheen komt omdat de waarde van hetgeen je koopt boven de 25 euro zit. Mijn advies zou zijn om de europese shop in de gaten te houden. Forum lid @Rkiver is de eigenaar hiervan en hij zou al druk bezig zijn met het regelen van de import rechten en zo. Zodra hij ze heeft is verzending een wassen neus, zowel qua geld (vrij verkeer van goederen binnen europa - hij zit in Ierland) als tijdsduur. Een pakje uit Amerika is in de regel een goeie week onderweg met een koeriers dienst. Wanneer je de reguliere post gebruikt is het aanzienlijk goedkoper (pak 'm beet $10-20) maar die BTW komt er nog steeds overheen. Als je haast hebt kan je ook het Trading Post deel van het forum gebruiken om te kijken of iemand in de buurt er eentje heeft waar hij vanaf wil. Zo ben ik aan m'n eerste gekomen dus echt, geen gek idee hoor.
  9. Er is een quotum op dit forum van slechts 1 MB voor al jouw plaatjes dus mijn advies zou zijn om niet eens te proberen plaatjes naar dit forum toe te uploaden. In plaats daarvan kan je een account maken op bijvoorbeeld Photobucket en je plaatje(s) daar achterlaten, of zelfs het betreffende plaatje plaatsen op je Facebook/Twitter/Google+/zie maar en vervolgens hier naar dat plaatje linken middels de "insert image from URL" optie van de "insert other media" knop. Als ik het goed begrijp ben je je Pineapple nu aan het opnieuw instellen en probeer je hem een access point te laten zijn (ik heb m'n Pineapple alweer een tijdje niet meer gebruikt). Hiervoor moet een SSID voor deze access point opgeven/verzinnen en twee keer het wachtwoord voor toegang via dit access point specificeren. Druk vervolgens op de "finish setup" knop en de Pineapple zal zich hiermee configureren. Vervolgens kan je vanuit andere apparanten (Kali/Windows/Telefoon/...) je verbinden met de Pineapple door dat access point te benaderen en het wachtwoord in te vullen. Merk op dat het weinig zin heeft om het wachtwoord te laten onthouden door de browser omdat dit niet het wachtwoord is wat je nodig hebt voor het instellen van de services op de Pineapple. Als je browser het al onthouden had en voor jou vooraf ingevuld heeft met iets wat je niet (meer) weet, maar slechts voor 1 van de 2 invoer velden, simpelweg leegmaken en beide velden vullen met dezelfde waarde en deze zelf onthouden/opschrijven voor later.
  10. People make money with Open Source all the time. I'll name 2 obvious ones: Liferay - a java-based portal service. Open source but the license (which gets you support and updates on released versions) will cost you a modest car per year. Redhat - a Linux distro that has a paid counterpart. You can berate them for doing this, or just be happy that they can make this work because the people who pay for the product help fund the free version.
  11. Then the FCC is going to have a mighty fierce fight with nature which, by providing all sorts of reflecting surfaces like that annoying "ground" and other blocking structures like those pesky "trees" blocks/jams/interferes with signals on a regular basis. I'm quite confident you'll find that you're not allowed to jam/block a radio signal in the public space. If you want to make your building a full-on, Gene Hackman in Enemy Of The State-approved faraday box, you can.
  12. The Orange Pi is by far the cheapest of the lot. The problem with the orange pi 2 range is that the just assumed the sunxi Linux devs who currently support the AllWinner CPU-based devices in a decidedly admirable way would 'just' support the H3 CPU too. The Orange Pi folks did some local mods to a kernel to make the thing work in at least 1 configuration but by the time I stopped looking still hadn't bothered to get any of that work into the sunxi official kernel. Their wiki entry is kind of telling with quotes such as "works quite well on 3.4 kernel [...] but without support for onboard Wi-Fi module", "On kernel 4.x it is possible to boot a Linux, but drivers are not working" and "The 1.6GHz seem to be specified mainly for marketing reasons. Expect problems when trying to run the device at this frequency under constant load, e.g. overheating. ~1.2GHz is probably a more realistic figure." If you're looking for a device that Just Works (tm), go for one based on the AllWinner A20 instead. The PcDuino 3 range is quite allright, but you need to keep an eye on the network abilities. The ones with Wifi might be limited to 100MBit and their wifi will be fixed to the board with a fairly meagre antenna by what I expect to be your standards. It's probably best to just grab a small board and have the wifi be provided via a USB device.
  13. I don't have a ducky, but what's wrong with just "!"?
  14. If you read some of the replies already given in this thread 8 months ago you should know that what you describe isn't the solution. In fact "chmod 777" on anything is NEVER the solution.
  15. Sounds like a money issue. You can get MASSIVE diesel generators that can power shit trivially but you need a process to periodically test the system, have sufficient fuel on-site and of course all this comes at considerable cost so the question becomes what the cost is of not having these devices running. If the cost of all that kit and its upkeep is too much of a multiple of the cost of not being able to run your device for the expected duration of the catastrophic event, you just accept the risk and go back to work. Have processes in place to orderly, cleanly shut down everything in case of such a catastrophe and make sure that there are policies in place that ensure when new kit gets added to the mix, it's properly incorporated into the "end of the world" scenario.
  16. Make one for the one you want to use it with the most, they try it on the other one to see how far you get. If you have Kali on an external device like a USB stick or external harddisk that can attach to both devices I see no reason why that same hunk of storage wouldn't work in the same way on both machines. It's all x86 with some random chunks of hardware attached. You may need to keep 2 xorg configs around but even that I sincerely doubt. Bottom line: Just try it.
  17. Did you even bother to try it? If so, what went wrong?
  18. Employ a notification system: hard-block all MAC addresses that start with AF:A3:3F on the router and wait for the owner of the affected machine to come ask you why their internet is broken.
  19. The point of a DDoS is to flood your network cable with bullshit traffic to the point where your router can't get any relevant request request out or a response to that request back in. No amount of software on the router or within your network is going to help you deal with this because that's already beyond the point where the problem is. Contact your ISP.
  20. Fair enough. Since it says it can't download it, did you actually try to find it yourself? No, you didn't, because it took me all of 5 seconds to find it: http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/base/kmod-rt2800-usb_3.18.20+2015-03-09-3_ar71xx.ipk So it's in base, and it also shows the problem you have: The kernel you're running is too new. You run 3.18.23+2016-01-10-1 yet their supplied kernel module is for 3.18.20+2015-03-09-3 (as are all the other kernel modules, in fact). Conclusion is that somehow you ended up with a kernel that's newer than what OpenWRT comes with, and you need to either revert to their old(er) kernel or get your source for your newer kernel to also provide these kernel module files.
  21. I know nothing about the subject, but I'd say your best bet is to elaborate a bit on this and maybe bring this up with the OsmoComm folks.
  22. I think you're mostly limited to images. For big texts, I would suggest you use the spoiler tag.
  23. I've never looked at powershell and this syntax rather befuddles me.
  24. China is, in a way, just like any other place: You get what you pay for and people do end up making a profit on this shit so if it's dirt-cheap to you, imagine what the vendor is paying for it and, thus, how much actual value went into it. The other thing about products from China is that if they think it'll make you purchase something, they'll lie through their teeth about it. So when you go and purchase something from there and their thing, while being mostly identical, is only a tenth the local price, either you're getting royally shafted locally, or something there isn't up to snuff. Wonky included power supply (or simply missing), the cheapest cable money can buy, connectors that only last for 10 insertions, flashlights whose on/off buttons break after 20 presses, flashlights whose cover breaks at the first drop because it never fit right anyway, those kinds of problems. There are actual deals out there, but make sure you know what you're going to get and that the price you're paying for it still makes sense. I buy a *TON* of Chinese crap for my video rigs (I've got an A4 rating on AliExpress for instance) but I too fell for a few bad items. The trick is to hope you get something useful, but not be reliant on those products until you've actually used them for a while and they've proven themselves to be the quality you expect.
×
×
  • Create New...