Wideband GSM Sniffing 2011

http://bb.osmocom.org/trac/

GSM hack Proof Of Concept

Failed to load plugin from /opt/metasploit3/msf3/plugins/db_mysql: Deprecated plugin

errors selepas update msf,

versi msf
framework : 3.4.2-dev.10130
Console : 3.4.2-dev.10119

problem terjadi masa nak connect ke mysql

# msf > load db_mysql

[-]
[-] The functionality previously provided by this plugin has been
[-] integrated into the core command set. Use the new 'db_driver'
[-] command to use a database driver other than sqlite3 (which
[-] is now the default). All of the old commands are the same.
[-]
[-] Failed to load plugin from /opt/metasploit3/msf3/plugins/db_mysql: Deprecated plugin


# msf > msfupdate

# msf > gem install mysql

update apa - apa yang patut berpandukan error yang dipaparkan semasa menjalani msf. (copy - paste error message kat google untuk resolusi ) pastikan runing msf menggunakan root dan msql server running-up.

guna arahan db_create menggantikan db_connect.. so db_connect tak digunakan lagi dalam versi ni...

# msf > db_driver mysql

# db_create user:password@localhost

# db_nmap localhost

# db_autopwn -x -p -b -R excellent -e

reveal asteriks pada browser

berfungsi macam password revealer tapi tok untuk browser yang boleh tukar simbol asterik "****" kepada ACSII

bermanfaat apabila terlupa apa password ditype dan disave untuk sekian lama.

1. pergi ke site login, masukkan password atau password yang dah di"saved" di password box

2. masukkan javascript dibawah ini kat url / address box

3. tekan enter pada url /address box

4. pop up box akan terpapar

alternatively, boleh check kat browser preferences untuk "show password" sekiranya telah di"saved" pada browser.

sumber : www.webtlk.com/2010/09/02/an-incredible-way-to-reveal-passwords-behind-asterisks/

What and Who is hacker?

From Wikipedia, the free encyclopedia

Hacker may refer to:

• Hack (disambiguation): a hacker is one who hacks.

Innovation

• Hacker (computing), a contentious term used for several types of person:
  • Hacker (computer security) or cracker, who accesses a computer system by circumventing its security system
  • Hacker (programmer subculture), who shares an anti-authoritarian approach to software development now associated with the free software movement
  • Hacker (hobbyist), who makes innovative customizations or combinations of retail electronic and computer equipment

Analogous meanings in other fields are:

• Media hacker, innovative user of digital media
• Wetware hacker, who experiments with biological materials
• Reality hacking, activism through legally dubious disruption of digital media

Some Definition on POC.

Some darkside definition,

lfi - local file inclusion; works only on local

rfi - remote file inclusion; works remotely

shellcode - code that spawn shell or has shell code to spawn shell

DOS - Denial of Service

DDOS - A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers

PDOS - Permanent denial of service is the technique of physically damaging a computer from a remote point to render it useless

SEH - Structured Exception Handling

BOF - Buffer over flow buffer overrun, is an anomaly where a process stores data in a buffer outside the memory the programmer set aside for it.