Reverse Engineering in practice. Configuring Cisco, IPTables and other firewalls with a sweet graphical utility. A little nostalgia with the Hak5 BBS and cracking open the Pineapple, a demo of Jasager.
[ MP4 | XviD | WMV ]

Watch

Production Note

With this episode and onwards we fixed the issue that was mudding up the sad standard-def video signals from our cameras. We’re still working on going HD and hope to be there by the end of the year. More details.

Show Notes

Chris Gerling shows us how to do a little reverse engineering with an educational tool called a CrackMe. These aptly named CrackMe files are great for practicing reverse engineering skills. Chris walks us through the steps involved in unlocking the Crackme’s code using .NET Reflector, some Python code, and a little a hex calculator. More detail in Chris’ blog post and more Crackmes at LearnSecurityOnline.com.

Matt demonstrates a killer app for anyone who manages firewalls. Firewall Builder creates, validates and deploys configurations to popular firewalls from your standard Linksys WRT54G using Sveasoft, to iptables, to Cisco using an intuitive graphical interface. Can we say access-list inside_access_out permit tcp any eq www host hak5.org eq www? Check out Matt’s full review at MattLestock.com

Remember the good ol’ days before the Internet? Ever access a BBS? How about 1200 baud bliss with an xmodem transfer of the latest leet ezine from across the country via a toll-free PBX or some magical tones? If not that’s cool too, we’ve got just the thing for you. How about a multiplayer text adventure, the predecessor to modern day MMORPGs? That’s right, the Hak5 BBS is up and running so telnet on over to bbs.hak5.org, port 23 of course, and check out the door games. We’re running an active game of Legend of the Red Dragon as well as dopewars, pimpwars, food fight, and more.

Darren cracks open the pineapple and demos Jasager. He even pronounces it correctly this episode. In our controlled environment we go into how the system works, the interface, setting it up, and the future of the project. We’ll be building one from scratch on 405, then stay tuned for an interview with developer Robin Wood from this years Toorcon in San Diego. You can read up on Jasager and get yourself a fresh tarball at Robin’s site.

Speaking of Toorcon, if you’re going and wanna meetup for a drink or say hi and grab some stickers be sure to follow one of us on Twitter. You can find us all at @hak5

In this episode of Hak5 Matt shows us how to map our networks with Spiceworks, an open source infrastructure mapping tool. Chris Gerling breaks down reverse engineering, Shannon talks about OpenDNS, and Christine has a Windows utility for everyone running multiple monitors.
[ MP4 | XviD | WMV ]

Production Note

This episode was plagued by the cabling mistake that made episode 4×01 dark and fuzzy. On a brighter note I’m happy to say episodes 4×03 and on look sharp and prettier.

Watch

Show Notes

Matt reviews SpiceWorks, a full featured open source infrastructure mapping suite. Grab a copy at spiceworks.com or check out Matt’s full review at MattLestock.com.

Chris Gerling dives into Reverse Engineering basics

In part 1 of Reverse Engineering I go over some basic theory and demo some tools associated with the Crackme scene of reverse engineering. This is not hardcore reverse engineering that will get you on the RELOADED team, but it’s a nice peek into things.

Tools of the trade (there are MANY MANY more):

WINDASM (W32DASM): I cannot link you to anything official as it’s no longer obtainable from the original vendor, so you’ll have to google for it. Be wary of any copy you download, virus scan it, and run it in a VM or on an isolated machine first. No guarantees.

IDA Pro: Industry standard. Extremely useful for almost any kind of file. We demo the older free version for lack of $500.
OllyDbg: Debugger similar to IDA Pro
PEiD: Detects packers, cryptors, and compilers.
.NET Reflector: Typically used for disassembling .NET applications.

Big Endian is akin to SONAR being sent as SON AR
Little Endian is akin to SONAR being sent as AR SON

Registers = Variables
32 bit = e
16 bit = different size, ax, bx, cx, dx, di, si, sp, bp
8 bit: al, ah, bl, bh, cl, ch, dl, dh. l means lower 8 bits of 16 bit reg, h means higher
Flags = boolean values, 1 or 0. Zero flag can get 0 or non zero (1) values.

The idea is to debug and disassemble to find out exactly how a program works, thereby enabling you to modify characteristics of that program to suit your needs.

In Part 2 we finish these notes and actually show you how to navigate through code.

Shannon talks about OpenDNS, a more secure and featureful alternative to your ISP provided DNS available at OpenDNS.com

Christine‘s software pick this week is Calibrize, a nifty tool for simple color calibration.

In this episode Chris Gerling shows us a little reverse engineering with Crackmes, Darren unlocks OpenWRT on the Fon router, Will Coppola demonstrates inprotect, a nessus/nmap web frontent, and Matt fixes the Rock Band guitar once and for all. Plus HakSnacks including installation package building with Iexpress, a Rock Band drum kit for your PC, converting flash videos to mobile media formats, and browsing the Internets with calculator. Grab some pwnj00z, the next hour is designated for technolust!

Production Notes

The white balance on our scan converter (little boxy thing that converts our laptop’s display into something the video mixer can use) was a bit off making some of the full screen video difficult to read. Thankfully (and thanks for MassiveH) we’ve got a new scan converter that should make everything look a lot more clear for next episode. Everything has been detailed in the Show Notes and feel free to post in the forums if you have questions.

Sponsors

Get awesome web hosting from the pros at Dreamhost and receive $25 off your order when you enter coupon code HAK5! Plans start at $7.95/mo including 500 GB storage, 5 TB bandwidth, and one-click installs of popular software like WordPress, phpBB, and MediaWiki.

Keep your personal information away from spammers, hackers and your crazy ex-evilserver. Private Domain Registration from GoDaddy.com protects your privacy by keeping your address, phone number and more out of the public database. Get an additional 10% on your order when you enter coupon code HAK.