Secure Deletion of Data from Magnetic and Solid-State Memory
With the use of increasingly sophisticated encryption systems, an attacker wishing to gain access to sensitive data is forced to look elsewhere for information. One avenue of attack is the recovery of supposedly erased data from magnetic media or random-access memory. This paper covers some of the methods available to recover erased data and presents schemes to make this recovery significantly more difficult.
Monday, June 17, 2002
Incident Response and Digital Forensics Resource List
- Surveillance, Traps, and sandboxing:
- Evidence Capturing Software
- Evidence Capturing Hardware
- Evidence Examination
- Data/Evidence File Recovery
- Bootable CD-ROMs
- Certifications
- Training
- Professional Organizations
- Email Lists
- Web Resources
- Books
- On-Line Text
- Network Forensics
- IDS
CRYPTOREVERSING - On cryptosystems untrustworthiness The reasons of cryptosystems untrustworthiness can be divided into 4 main groups: application of weak algorithms, cryptalgorithms wrong implementation or application and human factor. There is clear parallel between these reasons and computer system security violation ones.
Because of pointed reasons there were and still there are security problems in all kinds of software, where cryptalgorithms are used, be it operating systems; cryptographic protocols; clients and servers supporting them; office programs; user encryption utilities or popular archivers.
To proper implement your own cryptosystem you should not only learn somebody’s mistakes and understand the reasons of their occurrence, but perhaps use sophisticated protection programming approaches and special design tools.
Because of pointed reasons there were and still there are security problems in all kinds of software, where cryptalgorithms are used, be it operating systems; cryptographic protocols; clients and servers supporting them; office programs; user encryption utilities or popular archivers.
To proper implement your own cryptosystem you should not only learn somebody’s mistakes and understand the reasons of their occurrence, but perhaps use sophisticated protection programming approaches and special design tools.
Sunday, June 16, 2002
Mind Games - Social Engineering
This small article is a brief overview on social engineering. It talks a bit about the psychology of social engineering, the security threat it imposes and about the methods used for it. Basically, this article is a summary that covers the important facts (from my point of view) about social engineering.
This small article is a brief overview on social engineering. It talks a bit about the psychology of social engineering, the security threat it imposes and about the methods used for it. Basically, this article is a summary that covers the important facts (from my point of view) about social engineering.
ICQ Security Exposed, a non-kiddie paper
Well, as I do not tend to write kiddie stuff, I decided to write this in order to proove that statement false :p. This ICQ security tutorial will not deal with whatever little scriptkiddie tools might be found out there. I will discuss some decent ICQ security, yet I will do it as simple as possible. I will offer information on general and abstract ICQ security issues, on flaws directly or indirectly related to ICQ. Informations will range from staying invisible to getting familiar with the ICQ protocol - have fun!
Well, as I do not tend to write kiddie stuff, I decided to write this in order to proove that statement false :p. This ICQ security tutorial will not deal with whatever little scriptkiddie tools might be found out there. I will discuss some decent ICQ security, yet I will do it as simple as possible. I will offer information on general and abstract ICQ security issues, on flaws directly or indirectly related to ICQ. Informations will range from staying invisible to getting familiar with the ICQ protocol - have fun!
IBM software aims to shut down "drive-by hacking"
International Business Machines Corp. on Monday announced technology designed to close some of the holes in corporate wireless networks and prevent outsiders from stealing data through "drive-by hacking." The IBM software sits on laptops and PCs, analyzing traffic on an internal 802.11 wireless network and sending data to a centralized server, said Dave Safford, manager of the global security analysis lab at IBM Research in Hawthorne, New York. "It turns machines into wireless auditing sniffers," he said. The server then "crunches" the data and "spits out" a report that can tell administrators if there are wireless access points that have been misconfigured, Safford said. Access points are physical connections to the computer network located throughout a site. Wireless networks are cheap, costing less than $100, and convenient to use, allowing workers to carry laptops from office to conference room to cafeteria. Because they are easy to misconfigure, they pose a significant security risk, easily exposing a computer network to attackers outside the building using specialized wireless sniffers
International Business Machines Corp. on Monday announced technology designed to close some of the holes in corporate wireless networks and prevent outsiders from stealing data through "drive-by hacking." The IBM software sits on laptops and PCs, analyzing traffic on an internal 802.11 wireless network and sending data to a centralized server, said Dave Safford, manager of the global security analysis lab at IBM Research in Hawthorne, New York. "It turns machines into wireless auditing sniffers," he said. The server then "crunches" the data and "spits out" a report that can tell administrators if there are wireless access points that have been misconfigured, Safford said. Access points are physical connections to the computer network located throughout a site. Wireless networks are cheap, costing less than $100, and convenient to use, allowing workers to carry laptops from office to conference room to cafeteria. Because they are easy to misconfigure, they pose a significant security risk, easily exposing a computer network to attackers outside the building using specialized wireless sniffers
Friday, June 14, 2002
The Computer Professional Reference
A lot of (online) penetration testing tools. Be sure to check out the tools section of this site!
A lot of (online) penetration testing tools. Be sure to check out the tools section of this site!
Security Search
The world's largest security industry yellow page directory. Over 35,000 users, and 15,000 listings covering 94 countries.
The world's largest security industry yellow page directory. Over 35,000 users, and 15,000 listings covering 94 countries.
DOE Custom Tools
Custom tools and documents are those developed by different sites as part of their daily operations, and that have applicability outside of their developing organizations. Custom tools and documents are expected to be not as polished or well documented as the DOE-developed tools, but having access to them will give another site a large head start in developing a similar capability of their own. DOE sites who have or are developing information security tools and documents are encouraged to make those materials available for inclusion on the server.
Custom tools and documents are those developed by different sites as part of their daily operations, and that have applicability outside of their developing organizations. Custom tools and documents are expected to be not as polished or well documented as the DOE-developed tools, but having access to them will give another site a large head start in developing a similar capability of their own. DOE sites who have or are developing information security tools and documents are encouraged to make those materials available for inclusion on the server.
Thursday, June 13, 2002
The latest rage: CSO
Before you ask--No, CSO isn't a new TV crime show. But you'd never know that from the hype. Over the last few weeks, the chief security officer--or CSO--job title has been generating enough buzz to make a Hollywood press agent envious.
Headhunters are waxing ecstatic over the six-figure salaries, the number of openings that companies say they have, and the fact that it's a growth area in an otherwise down market. And there's a lot of agreement that corporate security needs to be centralized, at least in some manner. But if it's so hot, why are so few companies actually hiring CSOs?
Before you ask--No, CSO isn't a new TV crime show. But you'd never know that from the hype. Over the last few weeks, the chief security officer--or CSO--job title has been generating enough buzz to make a Hollywood press agent envious.
Headhunters are waxing ecstatic over the six-figure salaries, the number of openings that companies say they have, and the fact that it's a growth area in an otherwise down market. And there's a lot of agreement that corporate security needs to be centralized, at least in some manner. But if it's so hot, why are so few companies actually hiring CSOs?
Internetwork Routing Protocol Attack Suite
Routing protocols are by definition protocols, which are used by routers to communicate with each other about ways to deliver routed protocols, such as IP.
While many improvements have been done to the host security since the early days of the Internet, the core of this network still uses unauthenticated services for critical communication. Because most of the routers you will see in todays environments are Cisco products, we focus our work on these, which does not mean that it dosn't apply to other router vendors.
The idea is to implement small tools which can be scripted for larger tests while using the protocols describd in standards or white papers. IRPAS is not a collection of exploits. While several circumstances can lead to a denail of service attack, the tools try to implement routing protocol functionality as described by the papers, therefore enabling the user of these tools (probably you) to design it's own customized attack.
Another nice side effect is that people used to point-and-click attack tools should have some difficulties to use a raw IGRP sender tool.
Routing protocols are by definition protocols, which are used by routers to communicate with each other about ways to deliver routed protocols, such as IP.
While many improvements have been done to the host security since the early days of the Internet, the core of this network still uses unauthenticated services for critical communication. Because most of the routers you will see in todays environments are Cisco products, we focus our work on these, which does not mean that it dosn't apply to other router vendors.
The idea is to implement small tools which can be scripted for larger tests while using the protocols describd in standards or white papers. IRPAS is not a collection of exploits. While several circumstances can lead to a denail of service attack, the tools try to implement routing protocol functionality as described by the papers, therefore enabling the user of these tools (probably you) to design it's own customized attack.
Another nice side effect is that people used to point-and-click attack tools should have some difficulties to use a raw IGRP sender tool.
Wednesday, June 12, 2002
Stalker tech
Do you know where your boyfriend is? If he attends the University of California at San Diego, finding him may be as easy as turning on a PDA.
The university is equipping hundreds of students with personal digital assistants that allow them to track each other's location from parking lot to lecture hall to cafeteria. The technology is sophisticated enough to pinpoint where a person is in a building -- say, a dorm -- within a margin of error of one floor.
The New C-Guard EXP
Cellular phones, seemingly innocent devices, are often used for carrying out illegal actions. Today, a major security threat is being acknowledged by more and more organizations worldwide - the use of cellular phones as bugging devices.
Cellular phone technology has dramatically changed eavesdropping techniques. While a decade ago performing illegal eavesdropping was a complicated task requiring professional expertise (involving the installation of concealed transmitters and receivers on-site), today cellular phones can be easily converted into bugs and placed anywhere.
Popular cell-phone models made by Nokia, Motorola and other market leaders, can transform into sophisticated, easily operated bugging devices through a small modification. By a simple press of a button, a seemingly standard cell-phone device switches into a mode in which it seems to be turned-off. However, in this deceitful mode the phone will automatically answer incoming calls, without any visual or audio indications whatsoever. In most cases, such 'spy' phones are concealed within the targeted area, for instance - inside a houseplant. A well placed bug-phone can be activated on?demand from any remote location (even out of another country).
Sun's Solaris operating environment takes first place in security certification
Sun Microsystems' "Trusted" Solaris 8 4/01 Operating Environment, considered the de facto standard for protecting classified and sensitive information, is the first and only operating system to receive the highest level of security certification under the Common Criteria Labelled Security Protection Profile (LSPP) at Evaluation Assurance Level 4 (EAL4).
Sun Microsystems' "Trusted" Solaris 8 4/01 Operating Environment, considered the de facto standard for protecting classified and sensitive information, is the first and only operating system to receive the highest level of security certification under the Common Criteria Labelled Security Protection Profile (LSPP) at Evaluation Assurance Level 4 (EAL4).
Tuesday, June 11, 2002
Site R (Raven Rock) - Alternate Joint Communications Center (AJCC)
This offers information on a hardened US military communications facility, Site R (Raven Rock) Alternate Joint Communications Center (AJCC), located beneath Raven Rock mountain, near Waynesboro, PA, reported to be the bunker used by Vice President Cheney during the months after 9/11.
This offers information on a hardened US military communications facility, Site R (Raven Rock) Alternate Joint Communications Center (AJCC), located beneath Raven Rock mountain, near Waynesboro, PA, reported to be the bunker used by Vice President Cheney during the months after 9/11.
Law Enforcement OnLine
The Federal Bureau of Investigation provides a national focal point for electronic communication, education, and information sharing through the development and operation of LEO -- Law Enforcement OnLine.
LEO is a national interactive computer communications system and information service, an Intranet exclusively for the law enforcement community. It is a user-friendly service which can be accessed by any approved employee of a duly constituted local, state, or federal law enforcement agency, or approved member of an authorized law enforcement special interest group. LEO is intended to provide a state-of-the-art communication mechanism to link all levels of law enforcement throughout the United States. LEO is also used as a vehicle to educate officers on
The Federal Bureau of Investigation provides a national focal point for electronic communication, education, and information sharing through the development and operation of LEO -- Law Enforcement OnLine.
LEO is a national interactive computer communications system and information service, an Intranet exclusively for the law enforcement community. It is a user-friendly service which can be accessed by any approved employee of a duly constituted local, state, or federal law enforcement agency, or approved member of an authorized law enforcement special interest group. LEO is intended to provide a state-of-the-art communication mechanism to link all levels of law enforcement throughout the United States. LEO is also used as a vehicle to educate officers on
Monday, June 10, 2002
Open Source Debate
This PDF article, written by Kenneth Brown of ADTI, attempts to explain that "Open source GPL use by government agencies could easily become a nation security concern. Government use of software in the public domain is exceptionally risky."
"... Another consideration for the U.S. government is that all source code developed under the GPL could have mirrored availability to the public. This poses unlimited security issues. Wheeler comments, There are many programs developed by the government which are THEMSELVES classified, and many - and probably most - of the various programs most important to national security are in this category (e.g., weapons systems). In that case, neither binaries nor source code of those particular applications are released to anyone else; besides being illegal, releasing the binary executables would give away far too much information." Rossz Vamos-Wentworth a programming expert, disagrees about the relevance of releasing code commenting, If the government uses GPL software, the government is to release their version(s). If the software is related to security, it really doesnt matter if the code is available or not. Security holes are eventually found, with or without open source code. If the security software is well done, having the source code will not make it easier to crack.
This PDF article, written by Kenneth Brown of ADTI, attempts to explain that "Open source GPL use by government agencies could easily become a nation security concern. Government use of software in the public domain is exceptionally risky."
"... Another consideration for the U.S. government is that all source code developed under the GPL could have mirrored availability to the public. This poses unlimited security issues. Wheeler comments, There are many programs developed by the government which are THEMSELVES classified, and many - and probably most - of the various programs most important to national security are in this category (e.g., weapons systems). In that case, neither binaries nor source code of those particular applications are released to anyone else; besides being illegal, releasing the binary executables would give away far too much information." Rossz Vamos-Wentworth a programming expert, disagrees about the relevance of releasing code commenting, If the government uses GPL software, the government is to release their version(s). If the software is related to security, it really doesnt matter if the code is available or not. Security holes are eventually found, with or without open source code. If the security software is well done, having the source code will not make it easier to crack.
Layered Insecurity
From the earliest stages of their careers, most IT security practitioners are taught about the practical benefits of "layered security" and "defense-in-depth"--and for good reason. Segregating public and private networks, deploying overlapping controls for access and asset protection, constructing DMZs and bastion hosts--these and other security techniques go a long way toward helping organizations secure their intellectual property and proprietary communications.
But creating a "living" layered security infrastructure is not a static, one-size-fits-all proposition. As network environments become more complex--involving partner extranets, VLANs, application portals, Web services, secure remote connectivity, Internet/POP mail, instant messaging and so on--architecting defense-in-depth into the network becomes more and more difficult. No one sets out to undermine security. But unless the security of the network evolves hand in hand with the ever-growing list of network services, the layers designed to secure it can actually introduce new and unforeseen vulnerabilities.
This article examines how security layers can break down, and how to architect the network to avoid these common pitfalls.
From the earliest stages of their careers, most IT security practitioners are taught about the practical benefits of "layered security" and "defense-in-depth"--and for good reason. Segregating public and private networks, deploying overlapping controls for access and asset protection, constructing DMZs and bastion hosts--these and other security techniques go a long way toward helping organizations secure their intellectual property and proprietary communications.
But creating a "living" layered security infrastructure is not a static, one-size-fits-all proposition. As network environments become more complex--involving partner extranets, VLANs, application portals, Web services, secure remote connectivity, Internet/POP mail, instant messaging and so on--architecting defense-in-depth into the network becomes more and more difficult. No one sets out to undermine security. But unless the security of the network evolves hand in hand with the ever-growing list of network services, the layers designed to secure it can actually introduce new and unforeseen vulnerabilities.
This article examines how security layers can break down, and how to architect the network to avoid these common pitfalls.
The SANS Security Policy Project
Welcome to the SANS Security Policy Resource page, a consensus research project of the SANS community. The ultimate goal of the project is to offer everything you need for rapid development and implementation of information security policies. You’ll find a great set of resources posted here already including policy templates for twenty-four important security requirements.
There is no cost for using these resources. They were compiled to help the people attending SANS training programs, but security of the Internet depends on vigilance by all participants, so we are making this resource available to the entire community.
Welcome to the SANS Security Policy Resource page, a consensus research project of the SANS community. The ultimate goal of the project is to offer everything you need for rapid development and implementation of information security policies. You’ll find a great set of resources posted here already including policy templates for twenty-four important security requirements.
There is no cost for using these resources. They were compiled to help the people attending SANS training programs, but security of the Internet depends on vigilance by all participants, so we are making this resource available to the entire community.
Directory Snoop
Directory Snoop is a low-level forensic utility that can recover erased files in an emergency, wipe sensitive data, and search for hidden data at the cluster level. Step through your File Allocation Table (FAT) and map individual clusters back to the file that owns them. Purge orphaned (and possibly sensitive) file names right out of the directory structure.
Directory Snoop is a low-level forensic utility that can recover erased files in an emergency, wipe sensitive data, and search for hidden data at the cluster level. Step through your File Allocation Table (FAT) and map individual clusters back to the file that owns them. Purge orphaned (and possibly sensitive) file names right out of the directory structure.
StegoArchive
In an ideal world we would all be able to openly send encrypted email or files to each other with no fear of reprisals. However there are often cases when this is not possible, either because you are working for a company that does not allow encrypted email or perhaps the local government does not approve of encrypted communication (a reality in some parts of the world). This is where steganography can come into play.
Steganography simply takes one piece of information and hides it within another. Computer files (images, sounds recordings, even disks) contain unused or insignificant areas of data. Steganography takes advantage of these areas, replacing them with information (encrypted mail, for instance). The files can then be exchanged without anyone knowing what really lies inside of them. An image of the space shuttle landing might contain a private letter to a friend. A recording of a short sentence might contain your company's plans for a secret new product. Steganography can also be used to place a hidden "trademark" in images, music, and software, a technique referred to as watermarking.
In an ideal world we would all be able to openly send encrypted email or files to each other with no fear of reprisals. However there are often cases when this is not possible, either because you are working for a company that does not allow encrypted email or perhaps the local government does not approve of encrypted communication (a reality in some parts of the world). This is where steganography can come into play.
Steganography simply takes one piece of information and hides it within another. Computer files (images, sounds recordings, even disks) contain unused or insignificant areas of data. Steganography takes advantage of these areas, replacing them with information (encrypted mail, for instance). The files can then be exchanged without anyone knowing what really lies inside of them. An image of the space shuttle landing might contain a private letter to a friend. A recording of a short sentence might contain your company's plans for a secret new product. Steganography can also be used to place a hidden "trademark" in images, music, and software, a technique referred to as watermarking.
The PalmPilot single-floppy backup system
PenguinBackup is a single, bootable 3.5" floppy disk which includes a complete operating system, utilities, and communication software for all kinds of Pilots (OS 1.x - 3.x), wrapped in a nice, easy-to-use menu system.
It is intended as an emergency backup system in case you're on the road with only your Pilot and need to do a full restore after a hard reset.
PenguinBackup is a single, bootable 3.5" floppy disk which includes a complete operating system, utilities, and communication software for all kinds of Pilots (OS 1.x - 3.x), wrapped in a nice, easy-to-use menu system.
It is intended as an emergency backup system in case you're on the road with only your Pilot and need to do a full restore after a hard reset.
PDS Seizure
As an examiner you know better than anyone that the difference between making a case and losing a case is hard evidence. And with more bad guys going high tech, obtaining that evidence is becoming more difficult than ever.
With paraben's pda seizure , you can retreive all the information that's on a PDA device.
Paraben's pda seizure is a comprehensive tool that allows PDA data to be acquired, viewed, and reported on, all within a Windows environment.tm
Snorting Next Generation Secure Remote Log Servers over TCP
A comprehensive guide to building encrypted, secure remote syslog-ng servers with the Snort IDS. In PDF format.
A comprehensive guide to building encrypted, secure remote syslog-ng servers with the Snort IDS. In PDF format.
Creating a Virtual HoneyNet
Creating a virtual honeynet is no more than configuring a number of virtual-networked-systems to log all activity heading to it, while looking as generic as possible. Don't worry if you feel you can't afford the resources needed to run the honeynet, virtual honeynets are cheap, powerful and easy to admin, plus thru this paper I'll be trying to put in as much of my experience as possible to make it easier for you, but before we start there are a few points we have to understand.
Creating a virtual honeynet is no more than configuring a number of virtual-networked-systems to log all activity heading to it, while looking as generic as possible. Don't worry if you feel you can't afford the resources needed to run the honeynet, virtual honeynets are cheap, powerful and easy to admin, plus thru this paper I'll be trying to put in as much of my experience as possible to make it easier for you, but before we start there are a few points we have to understand.
OS Scan
Which Operating System have more vulnerabilities out of the box? Are they more secure after the latest patches? Do the latest patches add vulnerabilities? We wanted to see how much the OS patches released really help and to see which OS is more secure “Out of the Box”. So we picked several of the more popular Operating Systems and put them to the test. In this study, we will use Nmap version 2.54BETA 22 and Nessus 1.0.9 to scan Operating Systems installed with default options and no additional patches or configurations. Then we will scan them with the latest Security Packs and Cluster Patches and compare the scans to learn what security means to the vendors of the Operating Systems and the security scanners we use today.
The Security Writers Guild
The Security Writers Guild (SWG) is focused on publishing quality papers and developing original & creative projects in an effort to promote IT security and simultaneously establish its own security oriented community.
Information on SWG has been gathered from personal experiences, SANS teachings, or real professionals in the field.
Forensic Acquisition Utilities
This is a collection of utilities and libraries intended for forensic or forensic-related investigative use in a modern Microsoft Windows environment. The components in this collection are intended to permit the investigator to sterilize media for forensic duplication, discover where logical volume information is located and to collect the evidence from a running system while at the same time guaranteeing data integrity (e.g. with a cryptographic checksum) and while minimizing changes to the subject system.
This is a collection of utilities and libraries intended for forensic or forensic-related investigative use in a modern Microsoft Windows environment. The components in this collection are intended to permit the investigator to sterilize media for forensic duplication, discover where logical volume information is located and to collect the evidence from a running system while at the same time guaranteeing data integrity (e.g. with a cryptographic checksum) and while minimizing changes to the subject system.
DMZS-Biatchux Bootable CD Forensics/Incident-Response/Recovery/Virus Scanning/Pen-Tester Platform
Biatchux is a portable bootable cdrom based distribution with the goal of providing an immediate environment to perform forensic analysis, incident response, data recovery, virus scanning and vulnerability assessment.
Also capable of providing necessary tools for live forensics/analysis, just mount the cdrom on your choice of OS win32, sparc solaris and x86 linux trusted static binaries are available in /statbins.
Biatchux is a portable bootable cdrom based distribution with the goal of providing an immediate environment to perform forensic analysis, incident response, data recovery, virus scanning and vulnerability assessment.
Also capable of providing necessary tools for live forensics/analysis, just mount the cdrom on your choice of OS win32, sparc solaris and x86 linux trusted static binaries are available in /statbins.
Native Win32 ports of some GNU utilities
Here are some ports of common GNU utilities to native Win32, including dd. In this context, native means the executables do only depend on the Microsoft C-runtime (msvcrt.dll) and not an emulation layer like that provided by Cygwin tools.
Here are some ports of common GNU utilities to native Win32, including dd. In this context, native means the executables do only depend on the Microsoft C-runtime (msvcrt.dll) and not an emulation layer like that provided by Cygwin tools.
Instant Messaging Privacy and Security Solutions
One version of IMpasse protects multiple networks simultaneously — including AIM (AOL), MSN (Microsoft), and Yahoo messengers.
One version of IMpasse protects multiple networks simultaneously — including AIM (AOL), MSN (Microsoft), and Yahoo messengers.
Review of various computer forensics tools
This article reports on the capabilities and limitations of various software tools available to the forensics practitioner to complete a forensically sound examination.
This article reports on the capabilities and limitations of various software tools available to the forensics practitioner to complete a forensically sound examination.
Wireless Phones To Be Made Secure, by Pentagon Standards
The lack of secure telephone communications between U.S. and allied military forces was an oft-heard complaint during the Persian Gulf War and subsequent operations involving multi-national coalitions.
Now, the Defense Information Systems Agency (DISA) is trying to get out the message that there is a relatively easy way to achieve secure voice communications among coalition partners. For about $4,000, U.S. government officials and selected military allies can purchase a wireless handset that meets National Security Agency encryption standards.
The lack of secure telephone communications between U.S. and allied military forces was an oft-heard complaint during the Persian Gulf War and subsequent operations involving multi-national coalitions.
Now, the Defense Information Systems Agency (DISA) is trying to get out the message that there is a relatively easy way to achieve secure voice communications among coalition partners. For about $4,000, U.S. government officials and selected military allies can purchase a wireless handset that meets National Security Agency encryption standards.
STUDENT CRACKS XBOX, OPENS GAME CONSOLE TO OTHER OSES
With three weeks of work and $50 in hardware, a graduate student at the Massachusetts Institute of Technology cracked the security protections of Microsoft's Xbox, making it possible to run competing software and operating systems on the popular video game console. In a paper posted on MIT's Web site last weekend, Andrew Huang described how he build hardware that read the Xbox's internal security system and crack the encrypted data exchanged between two chips that prevented the console from being exploited. Huang says he technique gives users the ability to turn the Xbox into a standalone computer that can run non-Microsoft software and OSes, including rival Linux. Huang says he also discovered a series of other vulnerabilities that could allow users to run the code of their choice on the box and identify users when the Xbox is connected to the Internet.
With three weeks of work and $50 in hardware, a graduate student at the Massachusetts Institute of Technology cracked the security protections of Microsoft's Xbox, making it possible to run competing software and operating systems on the popular video game console. In a paper posted on MIT's Web site last weekend, Andrew Huang described how he build hardware that read the Xbox's internal security system and crack the encrypted data exchanged between two chips that prevented the console from being exploited. Huang says he technique gives users the ability to turn the Xbox into a standalone computer that can run non-Microsoft software and OSes, including rival Linux. Huang says he also discovered a series of other vulnerabilities that could allow users to run the code of their choice on the box and identify users when the Xbox is connected to the Internet.
Top Secret Phone Debuts For Feds
General Dynamics today reveals its Type 1 Sectera Secure Wireless Phone for GSM systems, a handset it says can handle the stringent security expectations of the nation's top government officials. The Type 1 phone, which consists of a clip-in module designed for use with the Motorola Timeport, operates over commercial or private GSM systems in the 900, 1800 and 1900 MHz GSM bands.
General Dynamics today reveals its Type 1 Sectera Secure Wireless Phone for GSM systems, a handset it says can handle the stringent security expectations of the nation's top government officials. The Type 1 phone, which consists of a clip-in module designed for use with the Motorola Timeport, operates over commercial or private GSM systems in the 900, 1800 and 1900 MHz GSM bands.
Thursday, June 06, 2002
What is the Windows registry ?
I have always wondered on how the windows registry worked. The reason is that the Windows Registry is telling programs that it's registered or now, and the setting on your windows shell, personally information and security. The Windows Registry have been in windows since the beginning of windows 3.x I don't now about windows 286 but I guess that the Registry were there too....
I have always wondered on how the windows registry worked. The reason is that the Windows Registry is telling programs that it's registered or now, and the setting on your windows shell, personally information and security. The Windows Registry have been in windows since the beginning of windows 3.x I don't now about windows 286 but I guess that the Registry were there too....
XP Professional Security Features: An Introduction
I’m not sure if it was the uplifting backbeat of Madonna’s “Ray of Light” or the promise of the best security options yet in a Microsoft operating system that made the difference, but the overall development and marketing efforts of XP have paid off. With over 32 millions copies sold since it was released last October, Microsoft’s newest line of operating system products has caught the attention of both home and business users.
While XP Home has many new security features available for the home network, this article will focus on XP Professional (hereafter simply referred to as XP) and its use in the corporate LAN. This is not intended to be exhaustive dissertation of all the new features in XP; rather, the purpose is to highlight some of the new security features found in the product, and to provide those still considering an upgrade to XP with some insight into how doing so can help them administer their network. So let’s jump right in.
I’m not sure if it was the uplifting backbeat of Madonna’s “Ray of Light” or the promise of the best security options yet in a Microsoft operating system that made the difference, but the overall development and marketing efforts of XP have paid off. With over 32 millions copies sold since it was released last October, Microsoft’s newest line of operating system products has caught the attention of both home and business users.
While XP Home has many new security features available for the home network, this article will focus on XP Professional (hereafter simply referred to as XP) and its use in the corporate LAN. This is not intended to be exhaustive dissertation of all the new features in XP; rather, the purpose is to highlight some of the new security features found in the product, and to provide those still considering an upgrade to XP with some insight into how doing so can help them administer their network. So let’s jump right in.
Managing information security
Attacks on corporate information systems by hackers, viruses, worms and the occasional disgruntled employee are increasing dramatically--and costing companies a fortune. Last year, U.S. businesses reported 53,000 system break-ins--a 150 percent increase over 2000. Indeed, the true number of security breaches is likely to have been much higher because concerns about negative publicity mean that almost two-thirds of all incidents actually go unreported.
Attacks on corporate information systems by hackers, viruses, worms and the occasional disgruntled employee are increasing dramatically--and costing companies a fortune. Last year, U.S. businesses reported 53,000 system break-ins--a 150 percent increase over 2000. Indeed, the true number of security breaches is likely to have been much higher because concerns about negative publicity mean that almost two-thirds of all incidents actually go unreported.
Hacking and Security Strategies
A summary of all methods of attacking hosts on the internet, sorted by difficulty level. Short introduction to all known kinds of Internet attacks and an evaluation by difficulty.
A summary of all methods of attacking hosts on the internet, sorted by difficulty level. Short introduction to all known kinds of Internet attacks and an evaluation by difficulty.
Sniffer FAQ
This Sniffer FAQ will hopefully give administrators a clear understanding of sniffing problems and hopefully possible solutions to follow up with. Sniffers is one of the main causes of mass break-ins on the Internet today.
This Sniffer FAQ will hopefully give administrators a clear understanding of sniffing problems and hopefully possible solutions to follow up with. Sniffers is one of the main causes of mass break-ins on the Internet today.
FAQ and Guide to Cracking
Disclaimer:
This is a theoretical instruction to cracking and for informational purposes. It should be seen as an introduction to the methods and strategies used by crackers rather than a howto. The author is not suggesting to perform illegal actions and cannot be held liable for any actions of other individuals who perform any of the actions discussed in this paper and possible resulting damage.
Introduction:
I am going to describe the methods and strategies used to access various UNIX hosts among the internet unauthorizedly. This guide will not teach you how to hack, neither do you have to be a hacker to use the techniques described here. Hacking means finding your own way to do it, and finding new approaches to accomplishing something. I am only going to supply you with one possible approach to cracking.
Disclaimer:
This is a theoretical instruction to cracking and for informational purposes. It should be seen as an introduction to the methods and strategies used by crackers rather than a howto. The author is not suggesting to perform illegal actions and cannot be held liable for any actions of other individuals who perform any of the actions discussed in this paper and possible resulting damage.
Introduction:
I am going to describe the methods and strategies used to access various UNIX hosts among the internet unauthorizedly. This guide will not teach you how to hack, neither do you have to be a hacker to use the techniques described here. Hacking means finding your own way to do it, and finding new approaches to accomplishing something. I am only going to supply you with one possible approach to cracking.
Sensible Data Storage (in Windows)
This guide shows you where some popular programs store their data and how can you protect your privacy by deleting or modifying them. Also, these information can be useful if you want to back up your data.
This guide shows you where some popular programs store their data and how can you protect your privacy by deleting or modifying them. Also, these information can be useful if you want to back up your data.
EgoSurfer
EgoSurfer is a powerful tool that combine a few personal data you provide about yourself or someone else to look for information about it on the Internet through main search engines and directories.
EgoSurfer is a powerful tool that combine a few personal data you provide about yourself or someone else to look for information about it on the Internet through main search engines and directories.
BrowsInfo
This page shows all the information is possible to collect about the Browser, the System, the Document (and the User himself...) during an Internet session.
This page shows all the information is possible to collect about the Browser, the System, the Document (and the User himself...) during an Internet session.
Cloaking Your Movements in Cyberspace
MONITORED AND TRACKED. You might believe that no one cares about the harmless chatter in your messages. Yet whenever you browse the Web, it's likely that hundreds of marketers are tracking your every move using cookies -- tiny programs that hook onto your browser and track your surfing habits, reporting them back to the originating site.
MONITORED AND TRACKED. You might believe that no one cares about the harmless chatter in your messages. Yet whenever you browse the Web, it's likely that hundreds of marketers are tracking your every move using cookies -- tiny programs that hook onto your browser and track your surfing habits, reporting them back to the originating site.
The Visual, Step by Step netbios hack
This tutorial is intended for novice or intermediate computer users looking to exploit Microsoft printer and file sharing, also known as netbios (network basic input/output system). This tutorial will cover the steps in exploiting netbios if your using windows 9x or windows 2000/XP. To keep the interest of the reader and dumb people who cant understand text, screen shots will also be shown for every step in the procedure. Each step will show procedures in windows 9x and windows 2000. The assumption that you know basic DOS commands and the function of IP addresses and file sharing is recommended. You will not need any extra tools, they are all provided with a default windows installation.
This tutorial is intended for novice or intermediate computer users looking to exploit Microsoft printer and file sharing, also known as netbios (network basic input/output system). This tutorial will cover the steps in exploiting netbios if your using windows 9x or windows 2000/XP. To keep the interest of the reader and dumb people who cant understand text, screen shots will also be shown for every step in the procedure. Each step will show procedures in windows 9x and windows 2000. The assumption that you know basic DOS commands and the function of IP addresses and file sharing is recommended. You will not need any extra tools, they are all provided with a default windows installation.
Security through obsolescence
Here's an interesting way to secure an Internet-connected computer against intruders: Make sure the operating system and software it runs are so old that current hacking tools won't work on it. This was suggested by Brian Aker, one of the programmers who works on Linux.com, NewsForge, Slashdot, and other OSDN sites; he runs several servers of his own that host a number of small non-profit sites in the Seattle area. "I have one box still running a version of Solaris that's so old none of the script kiddies can figure it out," Brian says. "They tend to focus on the latest and greatest, and don't have the slightest idea how to handle my old Sun box."
Tuesday, May 28, 2002
Action Script Viewer
Action Script Viewer (ASV) is a Win32 application that lets you see the
actionscripts in SWF files (ASV is a SWF decompiler in other words)
while providing infomation about frames, instance names, symbols, movie clips etc. and a context sensitive preview. ASV has many features which are listed on this page and which you can experience by downloading the demo.
Action Script Viewer (ASV) is a Win32 application that lets you see the
actionscripts in SWF files (ASV is a SWF decompiler in other words)
while providing infomation about frames, instance names, symbols, movie clips etc. and a context sensitive preview. ASV has many features which are listed on this page and which you can experience by downloading the demo.
Sunday, May 26, 2002
So You've Been Hacked... Now What?
You've just discovered you've been hacked. How do you know? Because you are an unbelievably lucky person and you actually saw the hacker at work. You sat there, right at your screen and saw this guy (most hackers are guys) just waltz into your system and start to blatantly run programs and use your computer for purposes unknown.
What can you do? What help can you expect from law enforcement? You'll likely be shocked at the answers.
You've just discovered you've been hacked. How do you know? Because you are an unbelievably lucky person and you actually saw the hacker at work. You sat there, right at your screen and saw this guy (most hackers are guys) just waltz into your system and start to blatantly run programs and use your computer for purposes unknown.
What can you do? What help can you expect from law enforcement? You'll likely be shocked at the answers.
Friday, May 24, 2002
Hacking EFS
Learning how a product might be compromised is a good exercise. If we can learn how someone might get through our defenses, we can make our defenses better. Take Microsoft’s Encrypting File System (EFS). This free tool available with Windows 2000 and XP computers can be used to encrypt files. Can it be hacked? Should anything additional be done to harden it? Any security product can be compromised, what problems are there with EFS?
Learning how a product might be compromised is a good exercise. If we can learn how someone might get through our defenses, we can make our defenses better. Take Microsoft’s Encrypting File System (EFS). This free tool available with Windows 2000 and XP computers can be used to encrypt files. Can it be hacked? Should anything additional be done to harden it? Any security product can be compromised, what problems are there with EFS?
How-To Harden OpenBSD Using Packet Filter
Traditionally firewall software has run on computers with two or more network interfaces to control the flow of traffic between them. Increasingly firewall software is run on a single machine which it protects. I've tried to cover everything you need to know to use IP Filter or Packet Filter as a single host firewall on this page and discuss when such use may or may not be appropriate.
Traditionally firewall software has run on computers with two or more network interfaces to control the flow of traffic between them. Increasingly firewall software is run on a single machine which it protects. I've tried to cover everything you need to know to use IP Filter or Packet Filter as a single host firewall on this page and discuss when such use may or may not be appropriate.
The passphrase FAQ
This is The Passphrase FAQ for PGP. I tried to include everything I've seen asked on alt.security.pgp along with some extras to cover other things like passwords and different key lengths. Most people who have had college algebra or higher should be able to follow the math.
This is The Passphrase FAQ for PGP. I tried to include everything I've seen asked on alt.security.pgp along with some extras to cover other things like passwords and different key lengths. Most people who have had college algebra or higher should be able to follow the math.
Securing Web Based Corporate E-Mail Using Microsoft Exchange Outlook Web Access
In today’s hyper-connected environment, it is essential that the workforce remain in touch with their home office and clients. This is often at odds with the fact that a significant portion of the workforce is also a mobile one. To overcome this problem, a number of solutions have been employed such as cellular phones, personal digital assistants (PDA’s) such as Palm Pilots, Blackberry’s and iPaq devices. Each of these has restrictions on the amount of data that can be communicated. It is evident that the best system for communicating anything from brief "fyi’s" to long-term corporate strategy is still a reliable e-mail system. As such, many organizations have moved towards exposing their internal e-mail systems to the Internet in order to maintain those lines of communication and an immediate transmission of data. Of course, doing so unleashes a significant number of security risks that must be addressed before even the first e-mail is opened at any unsecured location. Failure to do so threatens the host organization’s mail server, network, corporate partners and even a corporation’s very existence.
One such solution is Microsoft’s Outlook Web Access (OWA), an extension of the Exchange 5.5 mail system, which allows a client access to basic e-mail features, public folders, and a personal calendar through a standard Web browser. As it is based on the notoriously insecure IIS web server, it may be supposed that this system cannot possibly be secured, bu
In today’s hyper-connected environment, it is essential that the workforce remain in touch with their home office and clients. This is often at odds with the fact that a significant portion of the workforce is also a mobile one. To overcome this problem, a number of solutions have been employed such as cellular phones, personal digital assistants (PDA’s) such as Palm Pilots, Blackberry’s and iPaq devices. Each of these has restrictions on the amount of data that can be communicated. It is evident that the best system for communicating anything from brief "fyi’s" to long-term corporate strategy is still a reliable e-mail system. As such, many organizations have moved towards exposing their internal e-mail systems to the Internet in order to maintain those lines of communication and an immediate transmission of data. Of course, doing so unleashes a significant number of security risks that must be addressed before even the first e-mail is opened at any unsecured location. Failure to do so threatens the host organization’s mail server, network, corporate partners and even a corporation’s very existence.
One such solution is Microsoft’s Outlook Web Access (OWA), an extension of the Exchange 5.5 mail system, which allows a client access to basic e-mail features, public folders, and a personal calendar through a standard Web browser. As it is based on the notoriously insecure IIS web server, it may be supposed that this system cannot possibly be secured, bu
Thursday, May 23, 2002
SerialSniffer
SerialSniffer is a tool to get more information about data, which is transmitted via a serial link.
You can either connect SerialSniffer to a single device, which transmits serial data and SerialSniffer will print out the data, which is received, in the ASCII an HEX-Display.
SerialSniffer is a tool to get more information about data, which is transmitted via a serial link.
You can either connect SerialSniffer to a single device, which transmits serial data and SerialSniffer will print out the data, which is received, in the ASCII an HEX-Display.
Securing a Win2K Webserver
This document serves as a checklist for securing a Windows 2000 webserver on the Internet. This document was created to help Sys Admins get started configuring security on their machines, and in no way should be considered the final word on Windows 2000 security. The alert reader will notice that securing a machine from hacking is an ongoing process.
This document serves as a checklist for securing a Windows 2000 webserver on the Internet. This document was created to help Sys Admins get started configuring security on their machines, and in no way should be considered the final word on Windows 2000 security. The alert reader will notice that securing a machine from hacking is an ongoing process.
Wednesday, May 22, 2002
Welcome to iJET Travel Intelligence
Welcome to iJET Travel Intelligence, the first "intelligence agency" specifically for the global travel industry. Our mission is to provide you with critical and up to the minute travel information specific to your needs. With our simple, customer-friendly services to assist you, worldwide travel has never been more worry-free.
The Cross Site Scripting FAQ
Websites today are more complex than ever, containing a lot of dynamic content making the experience for the user more enjoyable. Dynamic content is achieved through the use of web applications which can deliver different output to a user depending on their settings and needs. Dynamic websites have a threat that static websites don't, called "Cross Site Scripting" (or XSS dubbed by other security professionals). Currently small informational tidbits about Cross Site Scripting holes exist but none really explain them to an average person or administrator. This FAQ was written to provide a better understanding of this emerging threat, and to give guidance on detection and prevention.
Websites today are more complex than ever, containing a lot of dynamic content making the experience for the user more enjoyable. Dynamic content is achieved through the use of web applications which can deliver different output to a user depending on their settings and needs. Dynamic websites have a threat that static websites don't, called "Cross Site Scripting" (or XSS dubbed by other security professionals). Currently small informational tidbits about Cross Site Scripting holes exist but none really explain them to an average person or administrator. This FAQ was written to provide a better understanding of this emerging threat, and to give guidance on detection and prevention.
Tuesday, May 21, 2002
..ThinkPad TM supervisor password, hard drivepassword and power on password recovery or removal solutions
This site is dedicated to ThinkPad™ (TP) owners who find themselves locked out because for whatever reason, they don't know the Supervisor Password or Power On Password or Hard Drive Password.
This site is dedicated to ThinkPad™ (TP) owners who find themselves locked out because for whatever reason, they don't know the Supervisor Password or Power On Password or Hard Drive Password.
SpyFinder™
The SpyFinder™ is a small, lightweight, battery-powered device that allows the user to quickly identify and locate hidden cameras.
Since the SpyFinder™ works optically, no amount of electronic jamming or shielding can stop it from finding hidden cameras.
SpyFinder™ works against all types of cameras: Video cameras, Pinhole / spy cameras, Digital cameras, and Auto-focus cameras.
Anytime a camera can see you, the SpyFinder™ can see the camera. SpyFinder™ detects hidden cameras in a wide range of conditions -- inside covert packaging, in walls and ceilings, inside EM shielding -- even when camera is off.
Friday, May 17, 2002
Rooivalk secrets take wings
Thieves who broke into the closely guarded Denel complex in Kempton Park knew exactly what they wanted.
Only computer hard disks containing information of the Rooivalk attack helicopter were stolen in the burglary that shows signs of industrial espionage.
From evidence in the investigation thus far it appears the thieves knew exactly what they wanted and were not interested in computer equipment when they burgled the Denel aviation department.
The National Intelligence Agency (NIA) has joined police in the investigation, said NIA spokesperson Lorna Daniels on Wednesday.
Thieves who broke into the closely guarded Denel complex in Kempton Park knew exactly what they wanted.
Only computer hard disks containing information of the Rooivalk attack helicopter were stolen in the burglary that shows signs of industrial espionage.
From evidence in the investigation thus far it appears the thieves knew exactly what they wanted and were not interested in computer equipment when they burgled the Denel aviation department.
The National Intelligence Agency (NIA) has joined police in the investigation, said NIA spokesperson Lorna Daniels on Wednesday.
Thursday, May 16, 2002
Content-Based Image Retrieval from forensic Databases
The doctoral thesis "Content-Based Image Retrieval from forensic Databases", (public defense University Utrecht, 19 June, 10.30) in PDF format.
The doctoral thesis "Content-Based Image Retrieval from forensic Databases", (public defense University Utrecht, 19 June, 10.30) in PDF format.
PortSentry for Attack Detection, Part One
Portsentry by Psionic Technologies is a component of their TriSentry suite of attack detection tools: portsentry, hostsentry, and logsentry. This article is the first of a two-part series that will describe in detail how Portsentry works from both a theoretical and a technical point of view.The second article will discuss installing, configuring, and tailoring PortSentry for individual systems.
Portsentry by Psionic Technologies is a component of their TriSentry suite of attack detection tools: portsentry, hostsentry, and logsentry. This article is the first of a two-part series that will describe in detail how Portsentry works from both a theoretical and a technical point of view.The second article will discuss installing, configuring, and tailoring PortSentry for individual systems.
Tuesday, May 14, 2002
Feds Out-Hack Russian Hackers
"The Russians just sat down and entered their passwords. It couldn't have been any better than that." Richard Eaton, creator of WinWhatWhere Investigator program.
First Steps in Achieving Network Security
The security-aware manager will support hiring someone with specialized security expertise to work with the IT team to create a secure network.
The events of September 11th raised the public's awareness of the need for increased security in all aspects of life. Reports from the U.S. government that the next targets for terrorists might well be the country's information infrastructure have highlighted the need for improved network security .
At the same time, corporate end-users have been hit with viruses and worms that have disrupted and damaged computer systems. Words like "Code Red" and "Nimda" have become part of the corporate vernacular.
The heightened awareness within corporate America has led to the question, "What is network security?"
The security-aware manager will support hiring someone with specialized security expertise to work with the IT team to create a secure network.
The events of September 11th raised the public's awareness of the need for increased security in all aspects of life. Reports from the U.S. government that the next targets for terrorists might well be the country's information infrastructure have highlighted the need for improved network security .
At the same time, corporate end-users have been hit with viruses and worms that have disrupted and damaged computer systems. Words like "Code Red" and "Nimda" have become part of the corporate vernacular.
The heightened awareness within corporate America has led to the question, "What is network security?"
Monday, May 13, 2002
g4u - Harddisk Image Cloning for PCs
g4u ("ghost for unix") is a NetBSD-based bootfloppy that allows easy cloning of PC harddisks to deploy a common setup on a number of PCs using FTP. The floppy offers two functions. First is to upload the compressed image of a local harddisk to a FTP server. Other is to restore that image via FTP, uncompress it and write it back to disk; network configuration is fetched via DHCP. As the harddisk is processes as a image, any filesystem and operating system can be deployed using g4u.
g4u ("ghost for unix") is a NetBSD-based bootfloppy that allows easy cloning of PC harddisks to deploy a common setup on a number of PCs using FTP. The floppy offers two functions. First is to upload the compressed image of a local harddisk to a FTP server. Other is to restore that image via FTP, uncompress it and write it back to disk; network configuration is fetched via DHCP. As the harddisk is processes as a image, any filesystem and operating system can be deployed using g4u.
Top Secret Messenger (TSM)
Top Secret Messenger (TSM) is a powerful and secure public-encryption with fully and seamlessly integrated plugins for popular instant messengers and e-mail clients such as, ICQ (America Online), Outlook Express and Outlook (Microsoft), and Miranda MSN and ICQ clone (as well as many others currently in development)
Top Secret Messenger (TSM) is a powerful and secure public-encryption with fully and seamlessly integrated plugins for popular instant messengers and e-mail clients such as, ICQ (America Online), Outlook Express and Outlook (Microsoft), and Miranda MSN and ICQ clone (as well as many others currently in development)
Sunday, May 12, 2002
The art of gaining local access
Local hacking is, what I myself call, the way of gaining access to a computer while actually sitting at it. This article is a short listing of my experience in this area.
Local hacking is, what I myself call, the way of gaining access to a computer while actually sitting at it. This article is a short listing of my experience in this area.
An Indepth Guide in Hacking UNIX and the concept of Basic Networking
I believe that hacking into any system requires knowledge of the Operating system itself.Basically what I will try to do is make you more familiar with UNIX operation ,its usefull commands that will be advantageous to you as a hacker.This article contains in depth explainations.
I believe that hacking into any system requires knowledge of the Operating system itself.Basically what I will try to do is make you more familiar with UNIX operation ,its usefull commands that will be advantageous to you as a hacker.This article contains in depth explainations.
SSL Certificates HOWTO
A first hand approach on how to manage a certificate authority (CA), and issue or sign certificates to be used for secure web, secure e-mail, or signing code and other usages. This HOWTO will also deal with non-linux applications: there is no use to issue certificates if you can't use them... All applications won't be listed here, but please, send me additional paragraphs and corrections. As indicated in the introduction, this documents is an hand-on HOWTO, and it is therefore required that you consult the man pages of the OpenSSL software. You should as well read security books to learn how your security could be compromised. Certificates are meant to increase the security of your transactions, it is VERY important that you understand all the security implications of your actions and what security OpenSSL does not provide.
A first hand approach on how to manage a certificate authority (CA), and issue or sign certificates to be used for secure web, secure e-mail, or signing code and other usages. This HOWTO will also deal with non-linux applications: there is no use to issue certificates if you can't use them... All applications won't be listed here, but please, send me additional paragraphs and corrections. As indicated in the introduction, this documents is an hand-on HOWTO, and it is therefore required that you consult the man pages of the OpenSSL software. You should as well read security books to learn how your security could be compromised. Certificates are meant to increase the security of your transactions, it is VERY important that you understand all the security implications of your actions and what security OpenSSL does not provide.
Thursday, May 09, 2002
NFR BackOfficer Friendly
NFR is currently offering BackOfficer Friendly as a FREE download for personal use only.
NFR Security® BackOfficer Friendly is a useful little burglar alarm - simple, unobtrusive, and easy to install - which rings when someone rattles your doorknob. It identifies attacks from Back Orifice, one of the nastier hacking applications, as well as other sorts of scans.
BackOfficer Friendly Features
BackOfficer Friendly is a spoofing server application that runs on your Windows system, and actively notifies you whenever someone attempts to remotely control your system using Back Orifice. Basically, it pretends to be a Back Orifice server. BackOfficer Friendly gives the attacker false answers that look like they came from Back Orifice, while logging the attacker's IP address and the operations they attempted to perform.
Not only can BackOfficer Friendly pretend to be a Back Orifice server, it contains routines that allow it to selectively emulate a variety of other services, such as FTP (file transfer protocol), HTTP (used on the Web), and SMTP (used in transferring e-mail). When someone runs an automated probe such as a Ballista scan, ISS scan, or SATAN scan against your desktop, BackOfficer Friendly produces a string of alerts, making it quite obvious to you what occurred.
BackOfficer Friendly can interact with the hackers, pretending to be a Back Orifice server or server for other types of requests. Instead of silently discarding their commands, it sends them responses
NFR is currently offering BackOfficer Friendly as a FREE download for personal use only.
NFR Security® BackOfficer Friendly is a useful little burglar alarm - simple, unobtrusive, and easy to install - which rings when someone rattles your doorknob. It identifies attacks from Back Orifice, one of the nastier hacking applications, as well as other sorts of scans.
BackOfficer Friendly Features
BackOfficer Friendly is a spoofing server application that runs on your Windows system, and actively notifies you whenever someone attempts to remotely control your system using Back Orifice. Basically, it pretends to be a Back Orifice server. BackOfficer Friendly gives the attacker false answers that look like they came from Back Orifice, while logging the attacker's IP address and the operations they attempted to perform.
Not only can BackOfficer Friendly pretend to be a Back Orifice server, it contains routines that allow it to selectively emulate a variety of other services, such as FTP (file transfer protocol), HTTP (used on the Web), and SMTP (used in transferring e-mail). When someone runs an automated probe such as a Ballista scan, ISS scan, or SATAN scan against your desktop, BackOfficer Friendly produces a string of alerts, making it quite obvious to you what occurred.
BackOfficer Friendly can interact with the hackers, pretending to be a Back Orifice server or server for other types of requests. Instead of silently discarding their commands, it sends them responses
Applied Cryptography for Magnetic Stripe cards
The intention of this document is to provide a basic understanding of cryptography and techniques applied to magnetic stripe cards in the financial industry.
This subject is normally approached with some trepidation by the uninitiated, however it is reasonably straightforward once the basic principles are explained.
Cryptography is complex, but its practical application is less so. It is not necessary to understand the mathematics involved in order to successfully use and manage cryptography in a financial environment.
Because of the security implications of card cryptography, it is extremely hard to find information in any form explaining this application, which adds to the somewhat unnecessary shroud of mystery surrounding the topic. In early implementations, a measure of additional security was provided by ensuring that few people knew exactly how these mechanisms worked and this method of operation has permeated into today's implementations.
However, none of the information provided in this document will compromise security in any way.
Although other, more secure card tokens are becoming available, the magnetic stripe card is significantly cheaper than alternatives, and is by far the most common card type in use. Security techniques for magnetic cards have slowly but steadily improved, and properly implemented can provide perfectly adequate security for financial transactions in a very cost-effective manner.
The intention of this document is to provide a basic understanding of cryptography and techniques applied to magnetic stripe cards in the financial industry.
This subject is normally approached with some trepidation by the uninitiated, however it is reasonably straightforward once the basic principles are explained.
Cryptography is complex, but its practical application is less so. It is not necessary to understand the mathematics involved in order to successfully use and manage cryptography in a financial environment.
Because of the security implications of card cryptography, it is extremely hard to find information in any form explaining this application, which adds to the somewhat unnecessary shroud of mystery surrounding the topic. In early implementations, a measure of additional security was provided by ensuring that few people knew exactly how these mechanisms worked and this method of operation has permeated into today's implementations.
However, none of the information provided in this document will compromise security in any way.
Although other, more secure card tokens are becoming available, the magnetic stripe card is significantly cheaper than alternatives, and is by far the most common card type in use. Security techniques for magnetic cards have slowly but steadily improved, and properly implemented can provide perfectly adequate security for financial transactions in a very cost-effective manner.
Tuesday, May 07, 2002
Paris Labs
Knowledge is an unending adventure at the edge of uncertainty -- JacobBronowski
"Imagine a school with children that can read and write, but with teachers who cannot, and you have a metaphor of the Information Age in which we live." — Peter Cochrane.
Human Intelligence, or Lack Thereof? A Lesson in Social Engineering
It's been a while since I've written a decent article, mainly because there's a lot going on for me right now. But anywho, you've all heard about "social engineering" and how it can be done. Social engineering is my forte, most likely due to my curiosity in human beings. No matter the barrier, you'll always have a friend to get you what you want.
It's been a while since I've written a decent article, mainly because there's a lot going on for me right now. But anywho, you've all heard about "social engineering" and how it can be done. Social engineering is my forte, most likely due to my curiosity in human beings. No matter the barrier, you'll always have a friend to get you what you want.
Monday, May 06, 2002
Forensic Computing MSc/PgDip
Suitable for law enforcement officers, government staff, security consultants, corporate security personnel and members of associated agencies in the UK and elsewhere.
Takes you on to a new career or possible promotion. The majority of students are sponsored by their employers and will continue to work for them on completion of the MSc, perhaps at a more senior level. The course may also be used as a method of moving into these areas of work.
Course description
The student is helped to develop critical thinking and problem solving capabilities and material is included on criminal psychology and ethics. A business awareness is developed, providing accounting skills, exploring issues relating to corporate fraud and the preparation of evidence. Some training in courtroom skills is also provided.
The course is offered in part-time mode, with students attending a residential seven-day, full-time school, four times each year. Students have directed reading, research and coursework to complete between schools. Students must complete the equivalent of 12 modules and a dissertation in a relevant topic. Normally, students are required to take four modules each year for two years, and complete the individual dissertation during the third year.
Suitable for law enforcement officers, government staff, security consultants, corporate security personnel and members of associated agencies in the UK and elsewhere.
Takes you on to a new career or possible promotion. The majority of students are sponsored by their employers and will continue to work for them on completion of the MSc, perhaps at a more senior level. The course may also be used as a method of moving into these areas of work.
Course description
The student is helped to develop critical thinking and problem solving capabilities and material is included on criminal psychology and ethics. A business awareness is developed, providing accounting skills, exploring issues relating to corporate fraud and the preparation of evidence. Some training in courtroom skills is also provided.
The course is offered in part-time mode, with students attending a residential seven-day, full-time school, four times each year. Students have directed reading, research and coursework to complete between schools. Students must complete the equivalent of 12 modules and a dissertation in a relevant topic. Normally, students are required to take four modules each year for two years, and complete the individual dissertation during the third year.
Thursday, May 02, 2002
Ethernet Packet Sniffer "GreedyDog"
GreedyDog is the ethernet packet sniffer forLinux, FreeBSD, OpenBSD, NetBSD, Solaris, AIX, MacOSX, and Windows2000/Xp. GreedyDog keeps stream of each TCP session and writes to logfile. So, to make a session stream, it is not necessary to reconstruct the packets which are fragmented, logfile can be analysed very easily. This feature is useful to log the comparatively large session such as telnet. Administrator can watch the telnet session of remote user as one stream unit until the connection close, if cracker makes telnet session to other network by way of administrated network, gdd can log all activities of cracker as one stream that includes other network. Furthermore, gdd have IDS function based on "grep&action".gdd monitors session stream, if suspicious action is detected, gdd executes specified action.
GreedyDog is the ethernet packet sniffer forLinux, FreeBSD, OpenBSD, NetBSD, Solaris, AIX, MacOSX, and Windows2000/Xp. GreedyDog keeps stream of each TCP session and writes to logfile. So, to make a session stream, it is not necessary to reconstruct the packets which are fragmented, logfile can be analysed very easily. This feature is useful to log the comparatively large session such as telnet. Administrator can watch the telnet session of remote user as one stream unit until the connection close, if cracker makes telnet session to other network by way of administrated network, gdd can log all activities of cracker as one stream that includes other network. Furthermore, gdd have IDS function based on "grep&action".gdd monitors session stream, if suspicious action is detected, gdd executes specified action.
Step inside the world of hacking
The world of computer hackers is a constant cat-and-mouse game between “white hats” and “black hats.” Some white hats use “honeypots” to learn about their enemy. Honeypots look like normal Web servers to a black hat, but they are really traps with special software that allow white hats to track every step a computer vandal takes. Click above to see, step by step, a full-blown attack by a black hat aimed at a honeypot, through both the eyes of the hacker and the white hat stopping her.
The world of computer hackers is a constant cat-and-mouse game between “white hats” and “black hats.” Some white hats use “honeypots” to learn about their enemy. Honeypots look like normal Web servers to a black hat, but they are really traps with special software that allow white hats to track every step a computer vandal takes. Click above to see, step by step, a full-blown attack by a black hat aimed at a honeypot, through both the eyes of the hacker and the white hat stopping her.
Monday, April 29, 2002
Definitions and Value of Honeypots
Over the past several years there has been a growing interest in honeypots and honeypot related technologies. Honeypots are not a new technology, they were first explained by a couple of very good papers by several icons in computer security, Cliff Stoll's book the "Cuckoo's Egg", and Steve Bellovin and Bill Cheswick's paper "An Evening with Berferd." This paper attempts to take their work further and discuss what honeypots are, how they can add value to an organization, and several honeypot solutions. There are a variety of misconceptions on what a honeypot is, how it works, and how it adds value. It is hoped this paper helps clear up those issues. Also, few people realize the risk and issues involved with honeypots. Though honeypots made add value, the time and resources involved may best focused on greater priorities.
Over the past several years there has been a growing interest in honeypots and honeypot related technologies. Honeypots are not a new technology, they were first explained by a couple of very good papers by several icons in computer security, Cliff Stoll's book the "Cuckoo's Egg", and Steve Bellovin and Bill Cheswick's paper "An Evening with Berferd." This paper attempts to take their work further and discuss what honeypots are, how they can add value to an organization, and several honeypot solutions. There are a variety of misconceptions on what a honeypot is, how it works, and how it adds value. It is hoped this paper helps clear up those issues. Also, few people realize the risk and issues involved with honeypots. Though honeypots made add value, the time and resources involved may best focused on greater priorities.
Computer Forensics - by Ibas
Electronic evidence and information gathering have become central issues in an increasing number of conflicts and crimes. In situations ranging from the suspicion of disloyalty by staff and information theft, to other serious crimes, Ibas can assist in gathering and documenting electronic evidence.
Ibas offer services to the police, prosecuting authorities, lawyers and public and private companies in cases involving seizure and analysis of data. Results and findings can be presented in written reports or through verbal testimony e.g. in legal proceedings. In the information age the field of Computer Forensics is experiencing strong growth. Computer Forensics from Ibas will leverage the expertise and technology built through more than 20 years of experience with Data Recovery and Data Erasure.
Electronic evidence and information gathering have become central issues in an increasing number of conflicts and crimes. In situations ranging from the suspicion of disloyalty by staff and information theft, to other serious crimes, Ibas can assist in gathering and documenting electronic evidence.
Ibas offer services to the police, prosecuting authorities, lawyers and public and private companies in cases involving seizure and analysis of data. Results and findings can be presented in written reports or through verbal testimony e.g. in legal proceedings. In the information age the field of Computer Forensics is experiencing strong growth. Computer Forensics from Ibas will leverage the expertise and technology built through more than 20 years of experience with Data Recovery and Data Erasure.
Thursday, April 25, 2002
Security Toolbox
The Security Toolbox is a collection of freeware tools related to Windows security. The tools are not based on anybody elses source code, and we will not give away the code or give explainations of how the tools are built, so please don't send any mails asking for either - we will ignore all such mails. Also, please note that using some of these tools against systems without permission from the system owner(s) may be illegal in your country! Although some of these tools can be used by unethical attackers we hope that these tools will do more good than bad overall.
The Security Toolbox is a collection of freeware tools related to Windows security. The tools are not based on anybody elses source code, and we will not give away the code or give explainations of how the tools are built, so please don't send any mails asking for either - we will ignore all such mails. Also, please note that using some of these tools against systems without permission from the system owner(s) may be illegal in your country! Although some of these tools can be used by unethical attackers we hope that these tools will do more good than bad overall.
Wednesday, April 24, 2002
Technology Pathways=
Welcome to the Technology Pathways Resource Center. In this area you will find documents we feel are beneficial to the computer security community.
Welcome to the Technology Pathways Resource Center. In this area you will find documents we feel are beneficial to the computer security community.
Tuesday, April 23, 2002
Forensic Acquisition Utilities
This is a collection of utilities and libraries intended for forensic or
forensic-related investigative use in a modern Microsoft Windows
environment. The components in this collection are intended to permit
the investigator to sterilize media for forensic duplication, discover
where logical volume information is located and to collect the evidence
from a running system while at the same time guaranteeing data integrity (e.g. with a cryptographic checksum) and while minimizing changes to the subject system.
This is a collection of utilities and libraries intended for forensic or
forensic-related investigative use in a modern Microsoft Windows
environment. The components in this collection are intended to permit
the investigator to sterilize media for forensic duplication, discover
where logical volume information is located and to collect the evidence
from a running system while at the same time guaranteeing data integrity (e.g. with a cryptographic checksum) and while minimizing changes to the subject system.
wepcrack
WEPCrack is a tool that cracks 802.11 WEP encryption keys using the latest discovered weakness of RC4 key scheduling.
WEPCrack is a tool that cracks 802.11 WEP encryption keys using the latest discovered weakness of RC4 key scheduling.
AirSnort
AirSnort is a wireless LAN (WLAN) tool which recovers encryption keys. AirSnort operates by passively monitoring transmissions, computing the encryption key when enough packets have been gathered.
AirSnort is a wireless LAN (WLAN) tool which recovers encryption keys. AirSnort operates by passively monitoring transmissions, computing the encryption key when enough packets have been gathered.
ELZA
The ELZA is a scripting language aimed at automating requests on web pages. Scripts written in ELZA are capable of mimicing browser behavior almost perfectly, making it extremely difficult for remote servers to distinguish their activity from the activity generated by ordinary users and browsers. This gives those scripts the opportunity to act upon servers that will not respond to requests generated using netcat, rebol, telnet or similar tool.
The ELZA is a scripting language aimed at automating requests on web pages. Scripts written in ELZA are capable of mimicing browser behavior almost perfectly, making it extremely difficult for remote servers to distinguish their activity from the activity generated by ordinary users and browsers. This gives those scripts the opportunity to act upon servers that will not respond to requests generated using netcat, rebol, telnet or similar tool.
TMAP
We have developed a CAPI based telephone network mapper (wardialer + more), that is capable of detecting analog peers as well as digital peers. We have released a non-commercial version that is free for personal use.
We have developed a CAPI based telephone network mapper (wardialer + more), that is capable of detecting analog peers as well as digital peers. We have released a non-commercial version that is free for personal use.
Monday, April 22, 2002
RING
The Intranode Research Team presents a new operating system detection method, based on temporal response analysis. As a proof of concept, we release the open source tool called RING – for Remote Identification Next Generation.
The Intranode Research Team presents a new operating system detection method, based on temporal response analysis. As a proof of concept, we release the open source tool called RING – for Remote Identification Next Generation.
Basic Steps in Forensic Analysis of Unix Systems
Instead of being a "cookbook" that you follow, consider this a collection of techniques that a chef uses to construct a fabulous and unique gourmet meal. Once learned, you'll discover there are plenty more steps than just those listed here.
Instead of being a "cookbook" that you follow, consider this a collection of techniques that a chef uses to construct a fabulous and unique gourmet meal. Once learned, you'll discover there are plenty more steps than just those listed here.
Honeypots
Just released, Honeyd. Honeyd is a OpenSource solution that can emulate thousands of computers at the same time. It can also emulate different operating system types, at both the application and IP stack level.
Just released, Honeyd. Honeyd is a OpenSource solution that can emulate thousands of computers at the same time. It can also emulate different operating system types, at both the application and IP stack level.
BUILDING A JUMP KIT
This document describes how to make a 'jump kit' for investigating Linux systems that are potentially compromised.
This document describes how to make a 'jump kit' for investigating Linux systems that are potentially compromised.
Sunday, April 21, 2002
Free NT Security Tools
Fortunately there are a few third party utilities that we can use with NT to make our life easier and help answer some of the questions. I believe that it is very important for us NT Administrators to be aware of these programs. They can certainly make securing our networks easier and they have the added benefit of being free. That is right they are free. Now there is no excuse for any of us not to download these programs and learn how to use them.
Fortunately there are a few third party utilities that we can use with NT to make our life easier and help answer some of the questions. I believe that it is very important for us NT Administrators to be aware of these programs. They can certainly make securing our networks easier and they have the added benefit of being free. That is right they are free. Now there is no excuse for any of us not to download these programs and learn how to use them.
Subscribe to:
Posts (Atom)
