Tech Remedy

#!/bin/bash

Archive for the ‘ Network Security ’ Category

Free is an amazing word! I decided to compile a list of 100+ of the very best free applications for Windows, Mac, and Linux. Not all of the apps listed work on all platforms…so make sure to look into it on your own. This list is broken down into 11 pages. Each page accounts for a software category. Feel free to leave additional free programs that you like in the comments!

Categories:

[del.icio.us] [Digg] [Facebook] [LinkedIn] [Reddit] [Slashdot] [StumbleUpon] [Technorati] [Twitter]

The Helpful Hacker…

By admin on March 16, 2010

by Tom Duffy

Has this ever happened to you? You go into your favorite cafe (with free wifi of course) and order your coffee. Then, after paying for the coffee and maybe a muffin, you sit down and open up your laptop. To your total disappointment, the wifi connection doesn’t seem to have ANY internet connectivity! BLAST! What a waste of 5 bucks, right? Well, not necessarily…

At this point, you should ask yourself a few questions.

  • Am I connected to the Access Point?
  • Have I been assigned a private IP address?
  • Can I reach the Access Point via web browser?

So, let’s assume the answer to question number 1 is YES…I am connected to the access point with a good signal! Now I need to know if I have an IP address.

In Windows, open a command prompt and type:

?View Code WINDOWS
ipconfig /a

…In Linux or Mac, open a Terminal and type:

?View Code MACNIX
ifconfig

There are other ways to find your IP, but these work just fine. The private IP address will likely look something like 192.168.1.xxx.

Next, take that IP and change the last part (xxx) to 1. For example, if it was 192.168.1.193, change it to 192.168.1.1. This is the gateway address. Now, let’s try entering that gateway address into a web browser. If you are prompted for a username/password that’s good news! That means that the Access Point has port 80 open and is running a web server to allow web based configuration. Look for a model number or company name in the window asking for a password. If it’s something like WRT54G, that is a Linksys and the default username and password are both: admin.

If you can’t get in with a default username/password, you should probably just move on…unless you want to try something more advanced of course. :)

Once you ARE logged in though, you can do some things to get the free wifi working again. Release and renew the public IP…reboot the Access Point. That combination will fix a lot of connectivity issues!

Have Fun!

[del.icio.us] [Digg] [Facebook] [LinkedIn] [Reddit] [Slashdot] [StumbleUpon] [Technorati] [Twitter]

Why I love Programmers

By admin on February 11, 2010

I was checking out the LaunchPad of nUbuntu (a network security variant of Ubuntu) and I came across the funniest bug I’ve ever read. Make sure to read the comments as well! Here you go:

https://bugs.launchpad.net/nubuntu/+source/apt/+bug/56125

[del.icio.us] [Digg] [Facebook] [LinkedIn] [Reddit] [Slashdot] [StumbleUpon] [Technorati] [Twitter]

Code 2600: An Upcoming Documentary

By admin on December 1, 2009

This looks awesome! Most “hacking” documentaries tend to bore me a bit. This one looks both informative and exciting! Here’s the teaser:

More info can be found at code2600.com

[del.icio.us] [Digg] [Facebook] [LinkedIn] [Reddit] [Slashdot] [StumbleUpon] [Technorati] [Twitter]

Hi Everone! I have been visiting a coffee shop a lot lately that offers free WiFi. I have been using the connection to work on various things. I wanted to make sure that my browsing had some encryption to avoid sending out plain text data, so I figured out how to route my browser traffic through an SSH connection! The method basically uses an SSH connection as a proxy for the browser.

You will need:

  • An SSH server that you can log into.
  • An SSH Client on the computer you are using.
  • A web browser.

The first thing we will need to do is connect to the SSH server. We will be using a special command flag when logging in in order to set a port and to avoid opening up an interactive shell. The command you will run is:

1
ssh -ND 9999 you@example.com

Replace “you” with your login name for the server and “example.com” with the address of the server. You will notice that after you enter your password, nothing will happen. It will just sit there. That is exactly what we want. Now, minimize the SSH client or Terminal window. Next, open your browser. I will show you the settings for Firefox, but the setup is more or less the same for other browsers.

In Firefox

Open your Firefox settings. In Windows, it’s in the “Tools” menu. In Linux, it’s in the “Edit” menu. In Apple, it’s in the “Firefox” menu. Once you have the settings window open, click on the “Advanced” section and then the “Network” tab. Next, click the “Settings” button next to where it says, “Configure how Firefox connects to the internet”. Select the option that says “Manual Proxy Configuration”. The only thing we change here is the SOCKS Host and the Port. For the SOCKS Host, enter “localhost” and 9999 for the port number. It should look like this:

socksfirefoxconnection

This is a very old method for setting up a SOCKS Proxy, but it works quite well. Please feel free to comment!

[del.icio.us] [Digg] [Facebook] [LinkedIn] [Reddit] [Slashdot] [StumbleUpon] [Technorati] [Twitter]

Stumbling around the internet today and I came across this awesome little comic strip! It made me laugh, so I felt like sharing it here. Enjoy!

priorities

Source: http://www.linuxhaxor.net/2009/03/29/lh-strip-2-getting-priorities-right/

[del.icio.us] [Digg] [Facebook] [LinkedIn] [Reddit] [Slashdot] [StumbleUpon] [Technorati] [Twitter]

by Tom Duffy

Okay, this is a subject that gets me going! I am a bit obsessive about my network security and when WEP first became popular I began using it right away. Then, as soon as I started hearing rumors about wireless sniffing, packet injection, and WEP cracking I immediately changed the way I look at wireless security. Obviously, it is important to keep your network secure. But at what cost? Some of the security options out there are seriously more effort than they are worth! Even setting up WPA on my home network was a hassle because I have 5 computers on the network. Three are various Linux distros, 1 Mac PowerBook, and 1 Windows XP laptop. I also have an Xbox 360 with a wireless adapter. In order to get all of these devices connected with WPA, I had to jump through several hoops. So what is a simple and safe way to secure my wireless network? Well, in order to answer this, I decided to learn how to crack a WEP key and try to hack my network in various states with different security features. Here are the results:

1. 64 Bit WEP Without MAC Filtering

This was scary…took me about 3 or 4 minutes to collect enough IV’s to crack the wep key. If you don’t know what IV’s are, please read about cracking wep here.

2. 128 Bit WEP Without MAC Filtering

This one took a little bit more time, but once there was ARP requests from the router to my wireless adapter, the IV’s started pouring in. Total crack time was 12 minutes.

3. WPA Personal TKIP with a 6 character passphrase

Had to relearn the process a little for WPA, but once I got the hang of it this took me about 15 to 20 minutes.

4. WPA Personal TKIP with a 20 character passphrase

I know that there are people who can crack this…but I simply couldn’t.

5. WPA AES/TKIP With RADIUS

Couldn’t crack this either.

Okay, so my findings are that WEP is useless right? Well, not entirely. I found that by not broadcasting the ESSID and filtering MAC addresses, 128 Bit WEP was enough to make me feel kinda safe. WPA Personal with a long passphrase was the best option for me. This is because of the combination of ease of setup and good security. The reason for the long passphrase is to avoid rainbow table cracking.

So what is the truth about WEP cracking? Well, the truth is that there aren’t a whole lot of people out there who are any good at it. A lot of people download BackTrack or another liveCD linux distro with wep cracking tools and they assume that the tools just crack wep for them. The reality is that the tools that are used for WEP cracking are quite complex. I personally am not concerned about someone trying to crack my wireless network. However, I am concerned about my client’s networks. Business networks should be as secure as possible. Always.

So, if you just bought a new wireless router and are thinking that you’ve done the right thing by securing it with WEP, please reconsider, but let’s not get paranoid…there isn’t an army of hackers trying to crack your wep key. I hope that this helps someone!

[del.icio.us] [Digg] [Facebook] [LinkedIn] [Reddit] [Slashdot] [StumbleUpon] [Technorati] [Twitter]

by Tom Duffy

I have had a lot of experience trying to get clients to use secure passwords and the common problem that comes up is that secure passwords are often difficult to remember. So, I came up with a simple solution to this. Let’s get started:

First, we should pick our favorite song. For the sake of this tutorial, I will use Stairway To Heaven by Led Zeppelin. Now, pick a line from the song that is 7 or more words long. I will use the line “And she’s buying a stairway to heaven”.

Next, take the first letter of each word in that line of the song. Mine would be:

ASBASTH

Now, alternate between lower case and upper case:

aSbAsTh

Next we will choose a letter in this that can also be represented by a number. Some examples of this would be to use a 5 instead of an S or a 1 instead of an I. So, I will use a 5 instead of the capital S:

a5bAsTh

Next, we will add a character that is not alpha-numeric such as a $ or a # and add it to the beginning and end of the string. I will use a $:

$a5bAsTh$

“$a5bAsTh$” is a very secure password. A brute-force attack would take a LONG time to break this and a dictionary attack would simply fail. The best part is that even though this password is very secure, all I have to remember is that line from the song with a “$” on either side of it and a “5″ instead of an “S”. I recommend this to all of my clients now and it has convinced a lot of computer novices that they can have secure passwords without the worry of forgetting what they are! I sure hope that this helps some people!

[del.icio.us] [Digg] [Facebook] [LinkedIn] [Reddit] [Slashdot] [StumbleUpon] [Technorati] [Twitter]