The DMZ - 2013-07-23 (page 1 of 3)

« first day (950 days earlier) ← previous day next day → last day (3935 days later) »

12:08 AM

@Adnan less than 10ms. That's pretty sweet

12:43 AM

Could one of you ssl nerds weigh in on this? I'm leaning towards reject.

security.stackexchange.com/review/suggested-edits/11464

@ScottPack My opinion probably doesn't count, since I've already rejected it. It changes the question too much, and I have a low tolerance for anonymous edits.

That was pretty much my opinion as well. I was willing to allow for convergent answers.

3 hours later…

4:17 AM

I JUST NEED A LOW QUALITY POST TO REVIEW, AND I COULD OWN THEM ALL!!!!!!!!

user image

4:44 AM

user image

@tylerl Bugger!

Guys how would you theoretically steal passwords from a Linux machine with chrome browsers? Like extensions or applications

?

@Griffin unclear what you're asking

I want to record the passwords I enter on my machine

And put them in a text file

For shits and giggles.

@tylerl

@Griffin Turn on the checkbox next to "Offer to save passwords I enter on the web."

It will do it for you.

4:59 AM

But it has to offer it

I don't want it to offer it

I want to to do it instantly without my knowledge

Download chromium sources, modify the source code accordingly, recompile, profit.

@tylerl c-c-c-c-c-combo breaker

@tylerl Was hoping someone had already done that

And not really profit

@Griffin knowledge == profit

Laziness == profit

And where are password options for Firefox?

5:04 AM

user image

nvrm

@tylerl @Griffin got crotchpunched?

Naw. Combo breaker.

Griffin had bad timing ;)

It happens a lot

Presumably he's trying to pwn his roomates facebook account. Or something equally entertaining.

5:08 AM

Na

sure......

They'd get lost in linux

I'd do that on a windows machine

Trying to pwn french girl

I hear French girls are easy to pwn

Depends on which kind of pwn you're talking about

5:58 AM

user image

3

@Adnan :'(

1 hour later…

7:06 AM

@ThomasPornin Fair enough. Debian is slooooooow with releasing stable packages

@HamZa I'm stalking you :)

@Griffin Write a simple extension that logs all POST requests that contain password data

@PeeHaa that's why it's so stable

7:50 AM

@LucasKauffman It is stable, but also ancient software ;)

8:04 AM

Hello

-1

Q: Best tool for windows ARP poisoning / spoofing

I've recently been learning about MITM attacks and session hijacking and have had success with both on my own PC from one browser to the other. I'm looking for a good tool that will run under Windows 7 and allow me to spoof ARP packets on the network so I can push the WiFi traffic from my Andro...

man-in-the-middle arp-spoofing session

@PeeHaa I prefer debian over ubuntu any day, I've been in a situation where canonical upgraded packages to quickly and it resulted in failed upgrades for my Xen machine

@LucasKauffman Oh no! What's wrong? Give me names! NAMES!

@Adnan I'm going to ask my hotel to switch me from room so I can be closer to the access point

@HamZa I disagree that executing a pentest from a windows machine is a big no

@HamZa I've used more windows machines than backtrack when testing in windows environments, we even have a custom image containing tons of tools to perform pentests

8:24 AM

@LucasKauffman Well there is a difference. I and the OP uses windows for other purposes. While you have a specific windows environment to perform only pentests

@LucasKauffman +1

right time for my coffee!

Hmmmm well I suffered a lot for searching and using windows pentesting tools. After each try I had to nuke my OS and install it again

@HamZa Forgive me for saying that, but that sounds like a PEBKAC

I don't see how that's Windows' fault.

@HamZa the solution for that problem is called a virtual machine :P

8:29 AM

@Adnan I didn't say it's windows fault, I just couldn't find tools to perform pentest properly like on linux. For example how would you crack a WEP ~~secured~~ network ?

@LucasKauffman Well at that time I was running on P2 with 333Mhz, noway I could run a VM (ps: to be honest I didn't even know that you could fire a VM :P)

@HamZa using aircrack-ng? Which also has windows binaries :)

@HamZa I don't know, cygwin?

I mean the sources are there

download.aircrack-ng.org/aircrack-ng-1.2-beta1-win.zip

@Adnan hey hey, but now you're emulating. Then why would you not directly use linux ?

@HamZa because Linux in general sucks at being user friendly

8:31 AM

and the sniffing part ? (in a free way)
INB4 asking for tools lol

the GUI is less than perfect

@LucasKauffman Yeah I know ...

@HamZa Emulating.. please!

Anyway, there seems to be Windows tuts for that

zero-security.org/Thread-Cracking-WEP-in-Windows

@HamZa sniffing? aircrack does sniffing, if you mean network sniffing there is windump and wireshark

@Adnan thanks.

8:33 AM

deceptive-room.com/2013/06/…

@LucasKauffman To be fair, the Windows version of many tools suck when compared to their Linux counterparts.

@Adnan commview isn't free

@TerryChia RDP

But hey, don't get me wrong. Now I'm on Linux, it's my primary operating system. I have two Linux boxes at home.

@TerryChia and most tools I use are perfectly cross platform available like burp, sqlmap, nmap, wireshark, metasploit,...

8:34 AM

@LucasKauffman Aircrack does only crack AFAIK

Can anyone suggest a tool that is capable of ARP spoofing on windows then?

@LucasKauffman You shall give us a good list :P

@HamZa also does sniffing

@LucasKauffman isn't that airmon-ng ?

@HamZa that's part of the aircrack-ng suite

no?

8:36 AM

@ScottHelme Oxidit's Cain and Able.

@LucasKauffman sigh guess I couldn't get it to work

I've tried that, and search endlessly about the fact that it only tried to add clients on the IP address range 192.168.1.x

@HamZa Oh noes!

When you try to edit the values they won't accept the range I need to use.

Don't get me wrong, I'm a windows user and I rarely even use linux. And if I use it, I have to search for the commands first lol
But i'm planning to step over :p

8:37 AM

@ScottHelme Dude, I don't know. It worked for me gazzilions of times. I've used it with hamster and other stuff. You're doing something wrong

@HamZa Yup, do it. Go with Ubuntu.

Did you use it on an IP address range other than 192.168.1.x ?

@Adnan I hate that new interface with the sidebar. Guess I will have to remove it :p

No, the administrator access here is granted by the creator of the application (He himself is also admin and wrote the code). The admin has full access to the app, he can add or remove users and navigate freely. — Optimus Prime 5 mins ago

^ now I'm a little confused lol

@ScottHelme Yup.

@Adnan do you have it to hand?

@ScottHelme Currently I don't have Windows.

@ScottH I have used it with 10.0.0.x

Well basically 10.0.0.0/8

@ScottHelme Unless, of course, you're attempting to ARP spoof The Internet. In that case, read a book.

8:42 AM

@Adnan 10.0.0.0/24 ?

@HamZa I don't know, aren't class A 10.0.0.0/8 ?

@LucasKauffman I thought nmap on Windows had an annoying limitation of not being able to manipulate raw packets so many scans won't work?

@Adnan I was reffering to 10.0.0.X

Strange, just installed on my laptop and it's detecting the correct IP address range.

On my desktop it seemed to be defaulting to 192.168.1.x

@HamZa Ahaa. I was just going with ScottH. He used x, I didn't want to confuse him. Honestly, he seems to be pretty confused already.

8:46 AM

I just confirmed it http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing
So you were saying 10.x.x.x :p

@TerryChia you can just use a socket

@Adnan we all start learning somewhere.

@HamZa Christ! Dude, even 192.168.1.x aren't really 192.168.1.x, they're 192.168.x.x. I was just humouring the guy.

@ScottHelme True.

@Adnan and 192.168.x.x is 192.x.x.x ?

@ScottHelme true, 4 years ago I couldn't even use a basic terminal or write a simple program

8:49 AM

@Adnan what would be the proper way of indicating the address range like that then?

@HamZa watch out because 192.x is also valid WAN

not only LAN

@ScottHelme google "CIDR notation"

I see

@HamZa Nope

@Adnan Then I don't get you, care to give a link ?

@HamZa en.wikipedia.org/wiki/Private_network

8:51 AM

OK I think I get it, so it would be 192.168.1.0/24

meaning the first 3 segments are the subnet?

@Adnan hehee~ makes sense !

@ScottHelme It depends on the network's setup. But in most home and small office networks, you're right. The network's address is 192.168.1.0.

That's a class C address then, right?

@ScottHelme Correct

Is there any reason class C became the standard?

I realise it's unlikely that you will need more than 256 addresses, but still, why limit it?

8:54 AM

@ScottHelme Is it ?

@ScottHelme heh, that's why we have ipv6 now :p

On a private network though behind NAT.

@ScottHelme @HamZa Incorrect. Class C has 65,536 addresses

@Adnan 256*256 :p

In total, but not per network? Or did I misundertsand?

so for 192.168.1.0/24

you can only have 256 addresses?

@ScottHelme per router, since a home network may be 192.168.0.0/16

8:56 AM

@ScottHelme Cuorrect. That's one of the subnet masks.

The largest subnet mask for Class C is 192.168.0.0/16

@ScottHelme think of it as 192.168.y.x

y = 255, x = 255

Hmm ok I missed something somewhere.

@Adnan ladies first ! 192.168.x.y :p

@HamZa Neat one.

@ScottHelme Please have a look at this en.wikipedia.org/wiki/Private_network

I see, that helped, thanks.

@Lucas Apparently, that's what the OP meant.

I'm not sure how to edit the question to convey that more clearly, though.

9:05 AM

@Adnan yea just added a comment :p

I know that in wordpress you can alter PHP code from the webinterface

@Adnan @LucasKauffman Yeah, even in Joomla you could install a component to browse the files (thus read config.php)

Also the question is very filosofical. Even if there is a custom website, if the admin himself is a hacker and could find a way to upload a shell then there is no way stopping him

@Lucas @HamZa Thanks, guys. Corrected the wrong parts in my answer.

@Adnan Not to mention, in Joomla there are different users. You have super users who could install plugins/components, you have users who could only write articles for example and so on

@Adnan upvoted

@LucasKauffman You only get that badge once you know.

9:14 AM

@Adnan will you participate in EBCTF ?

@HamZa I suck so bad, like REALLY.

@Adnan me too, just trying :P

The customs here are crazy! I ordered a large-gauge hypodermic needle for more accurate application of oil. Now I got an email saying they seized it.

Apparently it's illegal to own a fucking needle!

I mean come on! Would a drug addict order one needle?

One big-ass needle that can tear your veins if used for that.

I'm moving to Canada.

@Adnan seriously ?

@HamZa I think about it at least twice a week. My only concern is finding a job there.

I'm sure @Simon would let me crash with him for some time.

9:24 AM

@Adnan heh, why would you like to go there ?

@HamZa Yes. The creator of the application is the person who wrote the code (and has access to it), he can give himself admin (=administrator) access in the application to add more users and navigate. — Optimus Prime 1 min ago

^ lol

@HamZa I'm not a big fan of the social life here.

People are so closed

@Adnan heh racism ?

@HamZa Oh no, not at all.

But I guess that's the case everywhere, east or west, north or south.

@Adnan not sure what's the problem you're talking about ...

@HamZa Not sure how to describe it. My upbringing has been in an environment that promotes and encourages extraversion.

People here are more introverted.

9:34 AM

@Adnan I ordered some needles as well, came through

@Adnan wanted to order the marauder in the US, customs do no allow it

@Adnan hmm that you care that much about your environment ?

@HamZa Being raised like that, makes it difficult to live in a society where most people are closed. It creates a huge inner conflict.

@LucasKauffman Are they okay with other EU countries?

@Adnan Well are you sure that people in canada are extravert ?

@HamZa No. But I'd like to think that the percentage is better than here.

@Adnan if you live in the 1980s, then 192.168.1.x is class C, so it's 192.168.1.x and not 192.168.x.x. If you live in the 2010s, then 192.168.1.x is 192.168.1.x (normally spelled 192.168.1.0/24) if you set your netmask to 255.255.255.0

@Adnan no, by definition, if the address is class C then the mask is /24. But I don't think there's much equipment that's still running that uses classes as anything other than the default netmask if you don't enter one

9:40 AM

Anything that starts with 192 or higher was class C iirc

@Adnan for values of 65536 being 256, or alternatively for values of C being B

@Adnan that's the BS part, every other EU country is ok

@LucasKauffman So you can receive it from another EU country?

@Gilles doesn't RIPv1 use classful notation

@Adnan yea

@lynks look at the position of the highest-order 0 bit. If the address starts with 0 then it's class A, if it starts with 10 then it's class B, if it's 110 then it's class C

9:42 AM

@LucasKauffman Well no problem then.

@LucasKauffman is it still in use?

@Gilles Ahh yes, that was it.

@Gilles I know cisco supports it, but anyone in his right mind shouldn't be using it anymore

@Adnan how do you mean :p?

@LucasKauffman Can you link me to the exact product we're talking about?

@Adnan marauder

9:51 AM

@LucasKauffman Yes, but give me a link.

@Adnan need to look it up did that on my home pc

one moment pls :3

@Adnan pyramydair.com/s/m/Benjamin_Marauder_Air_Rifle/1774/3621

ah wait

but I will also need a pump

meh

it's not for anytime soon anyway :(

@Lucas So why did the customs refuse?

@Adnan it's legal to own one but you can't import them...

logic

1,100 fps would make it illegal in the UK

@lynks You tell the seller abroad to pierce the chamber, it lowers the power to about 10J, making it legal in the UK.

@lynks Or get a FAC licence.

10:04 AM

@Adnan ah thats helpful

@Adnan Sure, but you gotta have a reason.

@lynks Get a club membership and visit the range a couple of times. Ask them to write you a paper talking about your general attitude and your willingness to compete.

Or if you have a relative who has a house in the countryside.

@Adnan yeah it's not too difficult, you do need two gun rooms though

Why would a human eat gremlins?!?!? Because you forgot to use a hyphen. Grammar: It Saves (Gremlin) Lives™. — Paul D. Waite 28 mins ago

@lynks In the UK you just need a gun safe/closet

a movie about “human eating gremlins”? Ah, no, it's about “human-eating gremlins”. Pah. (@ScottPack)

10:07 AM

@Adnan really? most of my friends store ammunition separately and a the gun box is in a locked 'gun room'

@lynks a gun or an air rifle?

@LucasKauffman Air rifles above 10J are treated the same as normal guns, in the UK

@LucasKauffman the law is the same

@lynks AFAIK, this condition doesn't apply if you use a gun safe.

@Adnan yeah you might be right

10:09 AM

I just store mine under my bed in a locked gun case

@Lucas Here's the thing, though. In the UK, they can hunt rabbits and squirrels with a 10J air rifle.

@lynks Arrggggh!

@Adnan yeah, and we do pretty regularly

@lynks Here's it's legal to own a 200J air rifle, you can easily kill a person with it from a decent distance. But you're not allowed to hunt with it.

GET /logic

404

@Adnan heh, laws are weird.

@Adnan in the UK, if you can own it, you can hunt with it. the only laws to watch out for are poaching/seasonal hunts etc. Also ofcourse you have to have the land-owners permission.

So you can hunt rabbits with a shotgun, or a 7.62 rifle if that's your thing.

@lynks Jesus Christ! 7.62 for a rabbit!

10:14 AM

@Adnan I'm not suggesting anyone would, but it wouldnt be illegal :P

Most people want something left over to eat afterwards.

@lynks Actually, here it's illegal to shoot rabbits with anything below 7.62 :(

@Adnan So I guess you don't get to eat rabbit often :P

@lynks Well, let's just say it's not a crime if you don't get caught.

@Adnan that's so weird. I guess it's a cruelty law? A 10J .22 pellet to the heat will kill a rabbit instantly. A 7.62 to the leg will not.

@Adnan what

so let me get this straight, I can have a gun with maybe 100J legally, but I can't hunt with it

10:19 AM

@LucasKauffman An air gun.

yea

@LucasKauffman Yup. You can't hunt with it.

my gammo is already 24 joules

@ThomasPornin are you in Toronto?

@lynks Profile says " Quebec City, Canada"

@LucasKauffman A muzzle energy like that can crack a rabbit's skull from about 40 meters.

Pretty neat

10:24 AM

@Adnan it's too bad I can't test it :(

@Adnan what would that do to a human skull?

@LucasKauffman I don't think it would crack a human skull.

AFAIK, you need 32J for penetrate a human skull.

Let's Google it..

@Lucas Damn it! I couldn't find anything to confirm that number. So I could be wrong.

11:04 AM

@lynks if a 7.62 hits a rabbit, I doubt there will be much rabbit left :P

11:27 AM

20

Q: Is it a Best Industry practice to restart web servers periodically?

We have a web application (developed by a third party) that runs on Tomcat. We have been getting very bad performance from the application. The application developer is claiming that it is an Industry Best Practice to restart web servers every night, to free up all memory usage and start over. ...

that made my day

11:40 AM

@LucasKauffman lol

hey @Adnan ...

0

A: How to know if mail is for tracking our IP

For alternatives, you may check http://alternativeto.net/software/readnotify/

I flagged it as not an answer, you should have it in the review queueueue... :P

flagged it as spam

@TildalWave Get to 10k dammit!

@TerryChia why? I mean, why are you in a hurry when I'm not?

@TildalWave Then you can mock @Simon even more!

11:52 AM

@TerryChia that's as good incentive as any, OK point me to some rep train :)

@TildalWave I can point you to...the crazy train

Damn, indiegogo.com/projects/ubuntu-edge

$32 million crowdfunding goal.

12:11 PM

@LucasKauffman that'd be any train I get on :P

@TildalWave Agreed with it.

@TerryChia Have you ever wondered how it would look like if Mark Shuttleworth entered the Black Books shop? Can't explain why I thought of this, but I can clearly imagine that fun moment :))

@Lucas Wow! In almost every store I checked (across 10 EU countries), all Crosman are double the US price.

I didn't know it's that bad.

@Adnan Taxes? They'd be included for EU in the end price, but not for US stores... I think

@TildalWave What exactly is a Black Books shop?

12:17 PM

@TerryChia the shop from Black Books :)

@TildalWave Again, what is that? :P

@TildalWave I understand VAT and other costs, but double the price. That's too much

should get you started ;)

@TildalWave Ahhh...

I like the Ubuntu Edge concept though.

@TerryChia when did the campaign start? I only see it has 30 days left...

12:23 PM

@Adnan yea it's that bad

@TildalWave Today apparently.

@Adnan any idea for other brands which produce something similar (PCP with several shots) and which is affordable?

I was thinking the walther dominator

@LucasKauffman Looking at sub 500€?

@Adnan not sub 500 let's say sub 650 or something

1250 Dominator is only 500 without accessoires

@LucasKauffman That sounds like something @Adnan will buy.

12:27 PM

@LucasKauffman Ahaa, I thought you're looking for .22 cal

@Adnan ah yea you're right that's only .177

I'd prefer .22

I don't know, does it matter a lot if you are just target shooting?

@LucasKauffman You'll find .177 even more fun for target shooting

@Adnan that one also comes in .22 for an additional 100 euro

@LucasKauffman Well, a .177 usually has a higher range which translates to a much flatter trajectory for target shooting.

One thing, though. I don't recommend getting anything higher than 1000 fps for .177

Too unstable

@TerryChia Bloody hell, and all the $600 bundles sold out already? I wonder if they check for money laundry schemes LOL

12:34 PM

@TildalWave Well, there's still that nice little $80k bundle. :D

@RoryA should get one for his team. :P

But I really don't get how they expect people to use that as a desktop. The task I do on my desktop will probably melt that phone.

@TerryChia yes ... you get a nice discount on quantity there: -33.33% (where the sign is quite literal LOL)

so instead of getting one unit for $600... you can get a 100 units for 80,000 :))

@TildalWave Well, the $600 ones are sold out, so it's a discount compared to the available $830 bundles. :P

@TerryChia 3.66% discount on a quantity of 100 ... and you have to look at the listing for the sold out $600 bundles all the time :)

@TildalWave Hey, you get workshops! Those don't come free you know.. :P

@Lucas You know what, my advice is : If you really want something good, then give it some time until double your budget. A nice rifle with a good secondhand scope.

12:44 PM

@TerryChia hehe yes that's well worth it then, let me call my broker...

@Adnan you're right

@Adnan Lulz, it would be awesome to try to explain it to my gf.

You could definitely find a good in Montreal.

Why Canada though?

@Adnan I might get a Gamo Spinner Deluxe though :P

@Simon Oh come on! Why not? I know you're really looking forward to that threesome.

just for having fun with friends

12:46 PM

@Adnan ô_ô

@LucasKauffman That rack is actually pretty fun. The guys have it at the range.

@Simon Okay okay, foursome? I can bring a girl with me

@Adnan your right hand isn't a girl.

@LucasKauffman God damn it! You have to ruin everything!

ew

You can bring @ScottPack, that'll do.

@Simon Okay, so you're into that.

12:49 PM

No, into him.

Mrr?

NOTHING.

@ScottPack I wouldn't accept any drinks @Simon offers you.

I would.

@LucasKauffman Does this smell like chloroform to you?

12:52 PM

Well, I guess I'll just have to be homeless in Canada.

THANK YOU, @Simon.

I didn't say no!

@Adnan you couldn't have had your airrifle with you, it wouldn't have been legal in canada

Anyway, Canada is quite big. You'd have to move to Montreal.

Or QC city if you wanna hang out with The Bear.

@Adnan lolz

@Simon Eww! Montreal.

12:54 PM

@Adnan Eww @ QC city?

@Simon Nope, just Montreal.

@Simon It's just the bear's natural smell, he can't help it, that's how bears smell.

Boo. What's wrong with Mtl?

@LucasKauffman Ah I get it.

@TerryChia Wait aren't you now an intern of Red Hat? What business have you posting links for Ubuntu?!? :P

@Simon montreal is full of french :/

@TildalWave I bet he's spying on them.

trying to steal their source code.

ow wait

12:57 PM

@LucasKauffman Hehehehehe

@LucasKauffman Full of people like me? Awesome.

@LucasKauffman that'd only mean we trained him well :)

Guys, any thoughts on this?

0

A: Is decryption using Java+JSF safer than using JavaScript?

I think you're approaching this from the wrong angle. If you're just looking for safe transfer, then SSL is enough. Looking at your question, it's obvious that you'll be sending the key for the secondary encryption anyway and the data will be decrypted on the client side using that key/password. ...

Am I missing something?

@Adnan balls.

What the fuck is wrong with PHP 5.5.0 by the way? You have to install it from the source.

y u no give pre-built package?

12:59 PM

@TildalWave :shifty eyes:

@LucasKauffman Yeah, they've shrunk a bit lately.

« first day (950 days earlier) ← previous day next day → last day (3935 days later) »

Transcript for

Jul '1323

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile