For those who are unaware: We have moved!
Come find us at Insecurety Research!
No, really. We did move :)
~infodox
Saturday 29 December 2012
Thursday 15 March 2012
Updates to Insecurety Research - PHP Command Injection!
So, we have written an article about PHP Command Injection (Applies to other platforms too, we just covered PHP).
Read it here! PHP Command Injection - Insecurety Research
More to come...
~Insecurety Research Team.
Read it here! PHP Command Injection - Insecurety Research
More to come...
~Insecurety Research Team.
Wednesday 14 March 2012
[802.11] Wireless Jamming
Ok. Infodox BRIEFLY touched upon 802.11 jamming in his talk at CampusCon (their site seems to be down at the moment).
For those interested, the talk can be downloaded here: Insecurety Research
Anyways, onward to "The Good Stuff". I (x41) am simply posting the parts he wrote so far, and when he comes back he says he will finish the job.
Wireless Jamming. Sometimes one wants to disable all 802.11 stuff within range (i.e. WiFi) for some reason (perhaps deauth everyone so a KARMA style attack will work better?) and often this can be a bit of a challenge.
Challenge accepted.
First off, let's get to grips with some software called "mdk3".
MDK3 is a 802.11 flooding tool, and comes preinstalled on BackTrack and several other Pentest distros.
However, let's assume you are running a standard Ubuntu box and have not got it installed... So start by installing aircrack.
apt-get install aircrack-ng (ubuntu)
yum install aircrack-ng (fedora)
...Or, compile from sauce...
http://www.aircrack-ng.org/
Now. MDK3.
http://homepages.tu-darmstadt.de/~p_larbig/wlan/
Grab the source from here, untar, ./configure, make && make install (as root).
Then to run (as root):
PUT CARD INTO MONITOR MODE BEFORE CONTINUING!
sudo airmon-ng start wlan0 (where wlan0 is your wifi card)
mdk3 (arguements)
Some samples... (assumes mon0 is your monitor mode interface)
1. mdk3 mon0 x 1 -c (target client MAC) -t (target AP MAC)
This one simply deauths the victim client. Good for targetted jamming.
2. mdk3 mon0 d -b /root/blacklist
assuming you have a list of MAC addresses you DONT wish to have online, you put em in a list and blacklist em. This jams them.
3. mdk3 mon0" d -w (and the path to your whitelist file)
This kills everyones WiFi EXCEPT the devices in the whitelist.
Now. On to more fun things... Killing AP's.
Introducing "ap fucker".
AP Fucker is a python script that automates these DoS attacks. My preferred mode is "Destruction Mode". For obvious reasons.
Grab AP fucker here.. ApFucker - Pastebin
Running this is very simple. Just sudo bash (must be root), start the interface in monitor mode, and run it.
More to come - this was just an introduction!
For those interested, the talk can be downloaded here: Insecurety Research
Anyways, onward to "The Good Stuff". I (x41) am simply posting the parts he wrote so far, and when he comes back he says he will finish the job.
Wireless Jamming. Sometimes one wants to disable all 802.11 stuff within range (i.e. WiFi) for some reason (perhaps deauth everyone so a KARMA style attack will work better?) and often this can be a bit of a challenge.
Challenge accepted.
First off, let's get to grips with some software called "mdk3".
MDK3 is a 802.11 flooding tool, and comes preinstalled on BackTrack and several other Pentest distros.
However, let's assume you are running a standard Ubuntu box and have not got it installed... So start by installing aircrack.
apt-get install aircrack-ng (ubuntu)
yum install aircrack-ng (fedora)
...Or, compile from sauce...
http://www.aircrack-ng.org/
Now. MDK3.
http://homepages.tu-darmstadt.de/~p_larbig/wlan/
Grab the source from here, untar, ./configure, make && make install (as root).
Then to run (as root):
PUT CARD INTO MONITOR MODE BEFORE CONTINUING!
sudo airmon-ng start wlan0 (where wlan0 is your wifi card)
mdk3 (arguements)
Some samples... (assumes mon0 is your monitor mode interface)
1. mdk3 mon0 x 1 -c (target client MAC) -t (target AP MAC)
This one simply deauths the victim client. Good for targetted jamming.
2. mdk3 mon0 d -b /root/blacklist
assuming you have a list of MAC addresses you DONT wish to have online, you put em in a list and blacklist em. This jams them.
3. mdk3 mon0" d -w (and the path to your whitelist file)
This kills everyones WiFi EXCEPT the devices in the whitelist.
Now. On to more fun things... Killing AP's.
Introducing "ap fucker".
AP Fucker is a python script that automates these DoS attacks. My preferred mode is "Destruction Mode". For obvious reasons.
Grab AP fucker here.. ApFucker - Pastebin
Running this is very simple. Just sudo bash (must be root), start the interface in monitor mode, and run it.
More to come - this was just an introduction!
Monday 12 March 2012
Infodox is AFK (x41)
x41 here, minding Infodox's accounts for him.
He is AFK. Indefinately. He will eventually come back. We hope...
The loss of such an enthusiastic researcher would be a blow to us at Insecurety Research, as he was the guy who got it going and came up with all kinds of crazy ideas - from mixing SQLi/LFI to the possibility of distributed vuln scanning via XSS.
If he goes, those ideas may well vanish with him as they are located in his "internal hard drive".
Anyways, seein as I have his blog and admin on the site and we have such a lovely audience, I may as well start posting things for him, etc.
He is AFK. Indefinately. He will eventually come back. We hope...
The loss of such an enthusiastic researcher would be a blow to us at Insecurety Research, as he was the guy who got it going and came up with all kinds of crazy ideas - from mixing SQLi/LFI to the possibility of distributed vuln scanning via XSS.
If he goes, those ideas may well vanish with him as they are located in his "internal hard drive".
Anyways, seein as I have his blog and admin on the site and we have such a lovely audience, I may as well start posting things for him, etc.
Wednesday 7 March 2012
[Article] Reverse shells...
Ok. So I wrote a short article yesterday showing off a few reverse shell tricks and demoing them on a vulnerable web app using a Command Injection vulnerability.
Some people were asking "why it so basic?" and here is why: The idea of the article is not to provide script kids/blackhats with new info - it is well known - but to demonstrate how one can go from a small PHP bug to a full blown reverse shell.
I will be working up SNORT IDS Signatures for them all based on how they throw a shell back, just have to get some nice .pcaps of it first. I plan to also find a way to "signature" the IDS evading shellcode I wrote - and so kind of have an "arms race" with myself...
Article on Insecurety.net
Some people were asking "why it so basic?" and here is why: The idea of the article is not to provide script kids/blackhats with new info - it is well known - but to demonstrate how one can go from a small PHP bug to a full blown reverse shell.
I will be working up SNORT IDS Signatures for them all based on how they throw a shell back, just have to get some nice .pcaps of it first. I plan to also find a way to "signature" the IDS evading shellcode I wrote - and so kind of have an "arms race" with myself...
Article on Insecurety.net
Monday 5 March 2012
For Fuck Sake
So. Due to our bitcoin app it seems we have been blacklisted, our .co.cc domain has been nullrouted.
I have lodged a complaint about this, and suspect someone has been spamming their abuse dept in order to get my attention. I have a suspect, however I will do NOTHING about it until I get some proof.
For now we will be using THIS domain: theinfodox.blogspot.com
Until the situation resolves we will be working to let people know...
I have lodged a complaint about this, and suspect someone has been spamming their abuse dept in order to get my attention. I have a suspect, however I will do NOTHING about it until I get some proof.
For now we will be using THIS domain: theinfodox.blogspot.com
Until the situation resolves we will be working to let people know...
Friday 2 March 2012
OWASP Galway Begins!
Ok, this is a very short post as I am a tad busy, but, as of today (Friday, March Second, 2012), Galway (Ireland) has its own OWASP chapter setup by infodox!
Meetings are being prepared, as are workshops, talks and such, so watch this space for updates!
I will post links to its wiki/blog/etc later on today :)
check out OWASP stuff at OWASP.ORG
Meetings are being prepared, as are workshops, talks and such, so watch this space for updates!
I will post links to its wiki/blog/etc later on today :)
check out OWASP stuff at OWASP.ORG
Subscribe to:
Posts (Atom)