Jump to content

beakmyn

Active Members
  • Posts

    422
  • Joined

  • Last visited

Posts posted by beakmyn

  1. um simple well I like... 10101010101010101010101010101010101010101010101010101010101010101010101010101010

    10101010101010101010101010101010101010101010101010101010101010101010101010101010

    1

    01010101010101010101010101010101010101010101010101010101010101010101010101010101

    0

    10101010101010101010101010101010101010101010101010101010101010101010101010101010

    1

    01010101010101010101010101010101010101010101010101010101010101010101010101010101

    0

    10101010101010101010101010101010101010101010101010101010101010101010101010101010

    1

    01010101010101010101010101010101010101010101010101010101010101010101010101010101

    0

    10101010101010101010101010101010101010101010101010101010101010101010101010101010

    1

    01010101010101010101010101010101010101010101010101010101010101010101010101010101

    0

    10101010101010101010101010101010101010101010101010101010101010101010101010101010

    1

    01010101010101010101010101010101010101010101010101010101010101010101010101010101

    0

    10101010101010101010101010101010101010101010101010101010101010101010101010101010

    1

    01010101010101010101010101010101010101010101010101010101010101010101010101010101

    0

    10101010101010101010101010101010101010101010101010101010101010101010101010101010

    1

    01010101010101010101010101010101010101010101010101010101010101010101010101010101

    0

    10101010101010101010101010101010101010101010101010101010101010101010101010101010

    1

    01010101010101010101010101010101010101010101010101010101010101010101010101010101

    0

    1010

    oh and that snake language ;) (I'm talking about python fyi)

    RLL is the simplest. BTW, your code won't compile that 1 there should be a 0.

  2. hi beakmyn!

    your concept sounds interessting!

    if you got it working could you describe the exact way "how" to accomplish that?

    would be really cool as I would love to do the same thing to my jasager ;-).

    (its not about making it more easier, but a lot more comfortable in that way - and easy capturing under backtrack ^.~).

    greetings,

    xeno

    Once I get it working I'll post details. I got a brief amount of time with it today and it looks like the Lan are wifi are on the same subnet however it looks like they are isolated from each other somehow. That's as far as I got, haven't investigated it yet....

  3. The way the Interceptor works it can have the bridge between eth0 and 1 where the bridge has an IP address as well so you can talk to it. So you can do this with the setup you are talking about, I think, and things should work.

    Thanks Robin. After finally getting some time to do some testing I found that I forgotten that the Fon+ is bridged differently then the regular Fon. I was running into all kinds of issues with my Sager with a Realtek wireless and then switched over to a Dell with Atheros wireless and that's when I discovered the Jasager wasn't set up properly. It would connect but never get an IP. I had forgotten about all the uci commands that were needed . So, as it stands now with just the Jasager firmware and the rest of the items on that link, the LAN is part of the wireless. It gets karma bitch slapped when I plug in or connect wirelessly. Alas, it won't be until Sunday until I get some time to test out strategies.

  4. I had a thought. What if you were to install this as the captive portal on a Fonera+ and place it in-line with the Kiosk's ethernet connection kiosk --Pwnera--internets ? I've found that many kiosks while "locked down" expose the ethernet jack. Granted you'd have to either slim down the package or put on external storage.

  5. Back to this idea as my first try failed miserably and I got away from it for a bit (busy with Amatuer radio and licensing). Here's the scenarios.

    In essence I'd like to do the following as an exercise in futility or splendid ??. This is somewhat a re-hash of what I was trying to accomplish previously but also to get my thought process back on track and open for comment and ideas.

    Hardware: Fonera +

    Starting Softwaere: Jasager, OpenWrt Kamikaze 8.09, X-wrt

    Scenario 1:

    Using the Fonera+ install Jasager and get it working - done

    Connect laptop to WAN to serve as ICS connection - done

    Sniff the ICS traffic - done

    Scenario 2:

    Connect WAN to network jack in the wall - should work just the same as above however but now I don't have a direct way to monitor traffic going from WLAN to WAN

    So, now I would like to be able to do two things:

    1. Have DHCP on the LAN port so that I can connect to the Jasager webpage and manage the Jasager

    2. Be able sniff on the LAN and see the wireless traffic passing through to the WAN

    I don't think I can do both or can I ? From past postings and reading your details it appears that I might be able to do something similar to what you did.

    The Plan

    Create a VPN client on the FON and attach it to the LAN. Use Daemonlogger to clone traffic from the WAN to the VPN interface. Then have a VPN server on the laptop that is connected to the LAN and sniff the VPN traffic.

    My concern is being able to also use the LAN as a normal connection at the same time. I'm not concerned so much with TTL and creating a transparent/passive ethernet tap since this isn't really an interceptor anymore.

    Granted If this works I'll end up having to do some manual filtering in my logs of "local" traffic that sneaks out on the WAN. But not a big deal.

    If this works as intended I've got to 2 ways to interact with traffic. I could have a laptop on the WAN with ICS doing "stuff" (rogue image injection, etc) and I could also be capturing traffic through the VPN on the LAN.

    What I'm afraid of happening is that I completely knock out the LAN port setting this up and then I have to re-flash and start all over. So, I'm not sure what the safest "plan of attack is".

    In the end if it all works we'll of course need some kind of hybrid Pirate Monkey Armored Pineapple sticker :)

  6. Multi dimensional arrays are exactly what they sound like.

    A standard array, MyArray[], has one dimension. It is a line of variables.

    A two-dimensional array, MyArray[][] is an array of arrays. Each element in the array is in turn another array. It's a grid of variables.

    A three-dimensional array, MyArray[][][], is a two-dimensional array of arrays. Each element in the 2-dimensional array is another array. It's essentially a cube of variables.

    What's gets really interesting is when you define a multiple dimesion array as part of a structure which itself is then defined in an array.

    Then if you're really screwed in the head mix in some mixed Little Endian/Big Endian DWORDS, of course you're working with the whole word but the individual bits! Yeah it's great when you finally realize "Bit 0" is the middle.

  7. I did something similar to this with Smoothwall sometime ago to monitor wifi leechers with its transperant proxy server. It works a treat I must say but the wireless support in smoothwall was a lil funky hence I went with an access point running in client mode to attach to wireless network and redistributed that connection via another access point (you could do the same thing with a switch and use a wired connection).

    One issue I did find however was torrenting under a dual NATed network. I tried a few things but couldn't resolve the issue.

    Here is a diagram I did some time ago explaining the setup on the ausphreak forums.

    1smoothWALL.jpg

    I've got the WAPs coming in through Squid and the built-in captive portal. Makes it nice since I can limit who gets on and what they can do.

    Yes, torrenting can be a little tricky it took 3 steps for me. Port forward on ISP router to pfsense, create firewall rule to allow incoming torrent port(s) and then create NAT forward rule on pfsense to torrent box.

    Hmm, I do have another network open maybe I should have some fun.

  8. Yeah there is a downloaded version, but its a lil useless when a kiosk has no usb or cd drives that can be accessed. However if it is a part of a school network you can always setup a file share on a work station through a VM or rooting the box with kon boot and //ipaddress to it from the kiosk. but to do that you have to access the o.s behind it and once you have that its kind of pointless.

    In some environments I have seen kiosks that have intranet access only and can not access the internet.

    It's not so much that it's portable for a usb drive as that it's packaged so that you can deploy it on your own webserver that most likely won't be blacklisted by the kiosk.

  9. I'm on the side that a firewall should be firewall and not much else. Why does it need to have some flashy web interface? I run Pfsense here at home and I rarely hit the web interface unless I need to change something. It gives me what I need. Four zones, web, firewall, squidguard, portal and vpn. Add all the flash you want if the core is solid it doesn' t matter to me.

  10. I take my work laptop to all different clients where it's nice to be able to one-click switch. I've got about a dozen or so different addresses. There is another ipswitcher that will also change your computer name if you needed to for some reason but stay away from it if you're on a domain. It completely screwed up my domain membership since it changed the name in the registry and left it in other places.

  11. Right i was round a clients house and i plugged my usb stick (16gb cruzer U3) in the laptop running Vista, when i went to the drive to see all the files vista froze on me and i had to end explorer.exe (as i know that it would restart explorer.exe) but in doing so it made my usb stick unformatted so at this moment in time the stick is currently unformatted and there is 14gb's of data that i would like so im asking is there some freeware/open source software that can recover or remake the usb format (FAT32) im running Win XP SP3 Home?

    getdataback - http://www.runtime.org/

    Recuva - http://www.piriform.com/recuva

  12. Your school's sysadmin should have been fired then. Short of a zero day exploit, no managed system should get a virus.

    I don't know, when I was doing work in China for a Fortune 500 company a managed PC on a managed network got infected. Then again this was in China.

  13. If you're measuring under 1-24V DC and under say 1-5 amps then a cheap $12.00 multimeter will probably work for you. It's definitely not a precision device and if you use it too much you'll find that the probes will break or the dial will just fall off. Most of the cheap models do not have removable probes. You can get a decent multimeter from Sears for $20.00. It's good for the basic stuff.

    I wouldn't trust a $12 for checking current on a stereo system or other automobile since to measure current you need to put the meter in series with the circuit. Most amplifiers will draw more then 10 amps which near or over the limit of these types of meters. Measuring an amplifier's output power is a bit a crap shoot with these meters.

    Say you've got a 4-ohm speaker and your amplifier is 100 watts (RMS) that would give you an equivalent DC current of ~5 amps (I = sqrt(100/4)). This is the DC equivalent since the signal going to the speaker is AC and we're using the RMS voltage, current and resistance so this doesn't take into account the reactance/impedance of the speaker's coil and other items but it's close enough.

    For a computer it'll probably work fine since you'll be measuring 3.3-12V DC or checking the that a switch is being made, etc.

    Would I trust a $12.00 meter to measure 120VAC only if it was my last option. No way am I going to measure 480 with it. I don't even use my $20.00 model for 480. For that I get out my Fluke.

    As far as multi-tools go all you really need is a screwdriver with multiple bits (slotted, phillips, torx), a pair of small needle nose pliers and a pair of side cutters. Sure a full size leatherman is nice (and heavy) but home many times are you in a server room and find yourself having to cut wood or open a can of tuna? Put the tools in a small. The reason I don't carry mine is because I'd forget it's in my bag and then TSA would have it. It's real fun traveling with tools, especially out of the country.

    Here's some urls for starters

    http://www.southord.com/Lock-Picking-Tools...es-MPXS-08.html

    http://www.sears.com/shc/s/p_10153_12605_0...word=multimeter

    http://www.makershed.com/ProductDetails.as...ductCode=MKBDE4

    http://www.duluthtrading.com/store/departm...ature=product_1

  14. I liked this show, well done. I got my licence a few years back, you should really check out some of the digital modes and maybe stuff like bouncing signals of satellites, bouncing a signal of the ionosphere or even bouncing a data signal off the surface of the Moon. You could also check out, contacting the international space station, radio BBS and the many, many other interesting things you can do in amateur radio.

    If you want an interesting "hacker" style project you can use a TI-83 calculator as a serial terminal and then use that with a TNC and radio to contact other people, or you could hook a second radio into a computer and forward data to IRC. Although using telnet for IRC, over a radio link with a TI-83 calculator is not practical.

    If people want a nice little handheld radio, they should check out used Kenwood TH-D7A as they have a built in TNC and save you some money. You may want more Tx power but its a nice radio. I use a Kenwood TH-D7A with a Nokia N810 running Maemo Mapper for APRS.

    I'm working on getting my upgrade to General right now, once the test time rolls around I'll have it. Was playing around with a free program called PocketDigi. It'll decode PSK, CW, MFSK31, RTTY using the microphone as input. I found a Youtube Video of a guy demoing another program that does something similar and I held my PDA up to computer speaker and was able to decode most of the PSK in the background. Pretty Cool.

    Warning if you click past the first page there are NSFW images!!!!!

    As for APRS enabled handhelds word is Kenwood is releasing a new one in 2010 (most likely as Dayton Hamfest if not before). It's supposedly going to be a two-way APRS not just a tracker.

×
×
  • Create New...