Jump to content

thefatmoop

Active Members
 View Profile  See their activity

  • Posts

    79

  • Joined

  • Last visited

 Content Type 

Posts posted by thefatmoop

    Mouse recording/playback program

    in Questions

    Posted

    Is there a program to record whatever a mouse does and then the user can play it back? I was about to make one in VB, but i REAAALLLY dun wanna.

    I was lookin around a little bit. It could be for linux or windows...doesn't matter

    anyone know off the top of their head? Thanks

    White house hacked

    in Security

    Posted

    So today fox announced that the white house was hacked... there's like nuttin on the hack online, and it sounds like they're keeping it on the low.

    Tracing shows it was from china... Good for I.T. security majors like me

    PWNT... not much online about it... yet? (but it happened in the past few days)

    "Posted on Fri 07 Nov 2008 12:18:13 AM CST by Jet Jaguar

    Chinese hackers have penetrated the White House computer network on multiple occasions, and obtained e-mails between government officials, a senior US official told the FT.

    The cyber attackers managed to penetrate the White House system for brief periods that allowed them to steal information before US government experts each time patched the system.

    US government cyber experts suspect the attacks were sponsored by the Chinese government, although they cannot say for definite.

    “We are getting very targeted Chinese attacks so its stretches credulity that these are not directed by government-related organisations,” said the official.

    The National Cyber Investigative Joint Task Force, a unit established in 2007 to tackle security, detected the attacks. The official stressed the hackers had accessed only the unclassified computer network, and not the more secure classified network.

    “For a short period of time, they successfully breach a wall, and then you rebuild the wall . . . it is not as if they have continued access,” said the official. “It is constant cat and mouse on this stuff.”

    The US has increased efforts to tackle cyber security in the past year, especially since Chinese hackers penetrated the Pentagon last year, in an attack that obtained e-mails from the system serving Robert Gates, the defence secretary.

    Separately, US government cyber investigations have determined that an attack this summer on the Obama and McCain campaign computer networks originated in China. Details of the attack were first reported by Newsweek. The secret service told the Obama and McCain campaigns that their networks had been comprised by foreign hackers.

    The cyber attackers successfully downloaded large quantities of information from the campaign networks, which security agencies believed was an attempt to learn more about the contenders’ policy positions.

    A second US official said government cyber experts had determined that the attacks originated from China, but he cautioned that they could not determine whether they were related to the government.

    “There is no doubt that foreign governments are actively targeting cyber space not only for sensitive information but to influence our most sensitive processes such as the US presidential election,” said Sami Saydjari, head of the Cyber Defence Agency, a private company that advises government. “This underscores the need for president-elect Obama to take leadership in the cyber space race that is well under way.”

    While the US has raised concerns about cyber attacks, many foreign governments believe the US is also engaged in electronic spying. Bob Woodward, the veteran Washington Post reporter, this year revealed that the US had been spying on the Iraqi government.

    "

    website bots

    in Security

    Posted

    Well I think the best way to do it would be a standalone app. Not an addon to IE...

    Have it read a list of urls from a text file... It will download and read each page individually...

    for example when it finds a form:

    <form action="/path/to/script.php" method="post">
<input name="fname" type="text" size="24" maxlength="15">
<input name="pass" type="text" size="24" maxlength="15">
<input name="postform" type="submit" value="Submit!">
</form>

    Get the input names and then post your data to them...

    It will be kind of difficult to make it dynamic (where as it will work for any page) You'd have to read the different input types and know the name's of the fields, and know what to put in them...

    How will you know what to put in the fields is the biggest problem? because not all fields are named the same on different sites, and they all need different values. For example, how will you know your not putting a name in a zipcode field?

    You called it "auto-fill" it should be called "auto-post"... What have you normally done? What do you "fill" in the boxes? just random stuff or what?

    Another benefit of downloading the html with winsock and then posting to the page is that you bypass any javascript/clientsided form-field validation... (however where your submitting the form to most likely has checks there which can't be bypassed since they are server sided!)

    I would suggest looking up HTTP protocol, particularly HTTP POST...

    This can also help you out too:

    http://hak5.org/forums/index.php?showtopic=10535

    It's a recent thing I made which does what you want, it auto-posts form data to a server sided script...

    EDIT: I just came up with an idea actually but what are you going to be inputting into the fields? random numbers and letters or what?

    an app similar to that except it lets you specify the field names and values, something like this:

    lets say the app is called "formsubmit"

    formsubmit -h www.peoriabloomingtoncarloans.com -s /scripts/App.dll :fname="Bob" :lname="0x539" :WPhone="123-456-7890" :Addr="123 Burning Tree Lane" :city="Somecity" :State="somestate" :zip="zipcode" :comments="I'm interested in getting pre-approved for a vehicle"

    etc... * I only did the required fields on that form ;)

    where -h is the host, -s is the path to the script which its probably not a real Win32 "DLL" file , its probably some sort of scripting language like php disguised, maybe CGI, or ASP...

    then the fields are identified by some kind of marker, here I chose : marks the start of a field name, and = marks the end of it, then between the quotes is what to put in that field... make sense?

    It would take quite some time manually writing things to put into the fields, so I don't really get it... So are you wanting random values in the fields ? or ones that make sense?

    Anyway what would this do for you? I don't see what your getting out of it spamming junk to auto-loan forms? It doesn't seem like theres any benefit...

    thanks for the in-depth reply. let met look into this, and I would like to show the owners of the site this.

    website bots

    in Security

    Posted

    Sites that are just basic html forms. Someone can spam them to death.

    What i mean by writing a program to auto fill it out... i haven't done it in a while, but using integrated IE in vb one can look at the html and search for variables. make the variable = a value and then action click the submit button.

    I originally did this back in highschool to the verizon wireless website to send text messages to people. Once a program was filling it out it was easy to really spam it.

    There are plenty of times when a website is totally insecure and open to possibilities

    for example:

    http://www.peoriabloomingtoncarloans.com/creditapp.html

    I'm looking for a program designed for this... don't want to remake all the programs

    website bots

    in Security

    Posted

    I work for a pc/server security consulting company. it's normal for us to have legal permission to 'test' security on business networks.

    We're finding more and more clients are getting their makeshift sites exploited. Normally I just write a small program to go through and auto fill out sites for displaying... is there a good program for doing this instead of me writing something for every site?

    Does it have to be AirPcap?

    in Security

    Posted

    from my understanding the company airpcap posts its drivers in a friendly version for programs like cain... although it's not mass produced...y it costs like 500$. i wanted to crack wifi and ended up going with backtrack 3. Atheros works great for backtrack

    Power Supply Mod

    in Questions

    Posted

    LOL resistors yeah dude if you were to do that you would def need power converters. if you want to run a computer off of a 12 volt battery go buy a power converter

    if you want....get a mini itx board. most of the cases for those boards use like a 12 volt laptop psu that plugs into case then the case changes voltages.

    (if u do that be sure to put a huge 12 volt power converter on your comp)

    pop3 based keylogger with ssl for gmail can be u3

    in Questions

    Posted

    i currently have a keylogger thats built to be installed using a u3 flashdrive. well im having some problems with it and i have no time to work on it. i dont use vb6 in my class and i just dont have the time to fix it

    the keylogger grabs the keys saves them to a text doc and emails them every around 20 minutes using blat and stunnel like hacksaw. well something is going wrong and i really dont have any need for this keylogger saying my ftp one works like a charm

    if anyone wants the source to the keylogger plz email me (u must email me back the sources of what u fixed =P)

    reipoom@gmail.com

    im not amazing with vb6 so it will be easy to read

    i have only tested it on winxp sp2 on one computer and it all works except a little batch file problem that would be easy to fix and i think it will work. i havent tested it much... one build it would only send the logs the first time and wouldnt continue after that. i fixed that but a tester tried it on a few comps and he said it didnt work on any?

    anyway dont use this in an non legal way. =] i just wanted to see how hard it would be to make one that used pop3 with ssl encryption

    help with blat and stunnel?

    in USB Hacks

    Posted

    Umm check the nmap payload (and others) in the switchblade

    yeah i have been but its attaching the file wrong and im getting error messages in the blat prompt

    the text file gets to gmail and info inside goes in the gmail like a message instead of getting attached in a file. i would rather it be like it is now but i dont like the error messages. s

    help with blat and stunnel?

    in USB Hacks

    Posted

    im working on a program that needs to send 1 file that will be in the same location (just in root of main drive)

    i cant get blat and stunnel to work >< i worked on it for a while then i moved to vista and then i get so much trouble working with vb and anything

    anyway im starting to work on it again, the best i have ever done with them is have blat send the message to my gmail but it will have errors when uploading the file

    can someone help me? i just need an example of blat, stunnel and a batch file that will upload a file (c:dump.txt) to a gmail account

    do i need to use the rar to compress and send? i would rather it was just a .txt

    Flash Drive RAM For PC

    in Questions

    Posted

    i dont know if someone said this but in

    vista u can use external storage as virtual ram and it will by higher priority than the virtual ram (vr) that the vista is installed on.

    although if you look online you can get the benchmarks on transfer rates on flashdrives

    atm a good flashdrive only gets like 30read / 25write megs per sec

    some drives are faster than others (lexar makes fast ones i think)

    now if you at a single channel of ddr2 800 (6400) ram, it gets like 7-8 GIGs per second

    make that dual chanel u got 14+ gigs per sec data rate

    14 gigs per sec >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 20-30 megs per sec

    (if you dont know what virtual ram is, if your ram fills up it will start using storage for ram)

    for extra info umm harddrives have different rates like a WD raptor 10k rpm drive gets a much faster read/write speed then a 7400 rpm seagate standard drive

    im not sure but harddrives dont get over 100megs/sec and remember just because u have sata and u see the 3gigs/sec thats the transfer rate of the copmuter to harddrive components. thats not how fast the harddrive can read info from the disks.

    if anything above is wrong please someone correct me

    MODS READ THIS!!!! new areas

    in Hak5

    Posted

    >.> what if i cant get os support from microsoft and i bought my copy and some small stuck up overpriced computer mod store (but for some odd reason their copies of vista were extremly cheap)

    and i wouldnt care about if its legal or not looks like an official copy and its not my job to investigate and most of all it works and none of the case seals were damaged

    Vista ends u3

    in USB Hacks

    Posted

    im crossing my fingers in hope that microsoft will add the drivers cause vista doesnt even see the cd rom partition >< so i cant even get into my password protected drive on my main computer

    not to add i need to build all my programs on my tiny 15" screen laptop

    MODS READ THIS!!!! new areas

    in Hak5

    Posted

    i dont see how this is such a bad idea. i dont think that any of the usb hacks would work on vista and when people start building hacks for vista its going to get messy with all the xp ones

    that is if vista ever supports u3

    as for linux section go ask a mod

    Vista ends u3

    in USB Hacks

    Posted

    just read this and didnt try it yet'

    http://www.everythingusb.com/u3.html

    . Will U3 work on Windows Vista?

    The good news is that U3 launchpad version 1.4 and higher supports Vista. The bad news is that the update can only be obtained from the U3 drive manufacturers. If they are slow at adopting the new U3 core, then you will have wait longer or perhaps just get a new drive instead. There are more complications due to Vista compatibility with the mobile apps themselves and the legacy issues that prevent launchpad upgrade for some U3 drives. For example, Sandisk U3 drives with firmware 2.1.5 and 2.2.1 support Vista while firmware 2.1.6, 2.1.7, 2.1.8, 2.2.0 do not support Vista. - Ian Chiu

    Vista ends u3

    in USB Hacks

    Posted

    sorry english isnt my main language =/ but im getting good at it

    so i buy the new windows vista premium 64bit ed. finding out the hard way that vista cant run most programs before windows xp (nero 7, visual studio, api guide) etc etc etc.... also i love it how it will popup with messages saying basically"this program has known problems with vista and we wont allow you to run it".

    so then i think of my u3 drives with yummy keyloggers/computer locks/password dumpers i made n a million other fun programs that dont get detected by any antivirus.....

    vista will detect the flash drive partition but wont let the fake cd-rom install and it can tell its a fake cd rom. i couldnt access it no matter what.... so i looked online. numerous sites online are saying that vista wont use the cd rom on u3 drives/its too insecure.

    i tried my legit u3 drive with the launchpad and still nothing

    drives i tried:

    1gig sandisk microcruzer (black with horrid amber led)

    PNY 1gig u3 drive

    if anyone finds ways to fix this or sites that say otherwise(plz include url)

    or an update for the drives plz add it in ur reply.

    also whats the location of the user startup, general startup and can i still write programs to general startup on the registry?

    (havent had much time to look around saying im still trying to get my programs working)

    also how to get everything to run silently? vista has a lot of user questions when running programs

    MODS READ THIS!!!! new areas

    in Hak5

    Posted

    for the mods, can you PLEASE please plz plz plz make a new section on the main forum topic selection page

    have umm a vista thing and have forums like this:

    Windows vista 32/64bit ----------------

    windows vista software problems and fixes

    Windows vista hardware problems and fixes

    windows vista hacks

×
×
  • Create New...