Hak5 - Technolust since 2005 » admin

Episode 402 — Spicy Reverse Engineering

Darren — Wed, 10 Sep 2008 14:20:49 +0000

In this episode of Hak5 Matt shows us how to map our networks with Spiceworks, an open source infrastructure mapping tool. Chris Gerling breaks down reverse engineering, Shannon talks about OpenDNS, and Christine has a Windows utility for everyone running multiple monitors.
[ MP4 | XviD | WMV ]

Production Note

This episode was plagued by the cabling mistake that made episode 4×01 dark and fuzzy. On a brighter note I’m happy to say episodes 4×03 and on look sharp and prettier.

Watch

Show Notes

Matt reviews SpiceWorks, a full featured open source infrastructure mapping suite. Grab a copy at spiceworks.com or check out Matt’s full review at MattLestock.com.

Chris Gerling dives into Reverse Engineering basics

In part 1 of Reverse Engineering I go over some basic theory and demo some tools associated with the Crackme scene of reverse engineering. This is not hardcore reverse engineering that will get you on the RELOADED team, but it’s a nice peek into things.

Tools of the trade (there are MANY MANY more):

WINDASM (W32DASM): I cannot link you to anything official as it’s no longer obtainable from the original vendor, so you’ll have to google for it. Be wary of any copy you download, virus scan it, and run it in a VM or on an isolated machine first. No guarantees.

IDA Pro: Industry standard. Extremely useful for almost any kind of file. We demo the older free version for lack of $500.
OllyDbg: Debugger similar to IDA Pro
PEiD: Detects packers, cryptors, and compilers.
.NET Reflector: Typically used for disassembling .NET applications.

Big Endian is akin to SONAR being sent as SON AR
Little Endian is akin to SONAR being sent as AR SON

Registers = Variables
32 bit = e
16 bit = different size, ax, bx, cx, dx, di, si, sp, bp
8 bit: al, ah, bl, bh, cl, ch, dl, dh. l means lower 8 bits of 16 bit reg, h means higher
Flags = boolean values, 1 or 0. Zero flag can get 0 or non zero (1) values.

The idea is to debug and disassemble to find out exactly how a program works, thereby enabling you to modify characteristics of that program to suit your needs.

In Part 2 we finish these notes and actually show you how to navigate through code.

Shannon talks about OpenDNS, a more secure and featureful alternative to your ISP provided DNS available at OpenDNS.com

Christine’s software pick this week is Calibrize, a nifty tool for simple color calibration.

Season 3 Episode 9

Darren — Sat, 05 Apr 2008 21:12:46 +0000

In this episode Matt uses PowerGUI to command the new Windows PowerShell, Chris Gerling demonstrates Helix, an open source forensics toolkit and Darren builds a simple web mashup using Yahoo Pipes. Plus haksnacks including router passwords, uninterrupted file copying, password strength auditing, and Firefox keyword shortcuts.

Oh yeah and some bloopers. A lot of bloopers. Actually, pretty much most of the episode is one ongoing blooper. We’re kicking it oldschool Hak5 style. Call it senioritis if you will .

PS: Hak5 and trust your technolust stickers available for a limited time.

Download

Running time: 40:00

Production Notes

The new scan converter (device that takes the VGA output from our computers and inputs them into the video mixer) had great resolution and clarity however that isn’t seen in this episode. Unfortunately the video signal was a bit borked and everything captured was slightly pink. I’ve done my best to balance the color in post. Better luck next time I guess

Sponsors

It used to cost a fortune to protect your site with an SSL Cert. Thankfully, GoDaddy.com changed all that. You can get a standard SSL cert from Go Daddy for just $29.99 a year. They have the same basic specs you’d find on other certs � 256-bit encryption, 99% browser recognition, all that � but for about 80% less than the competition. Now you’ve got no reason to leave your data exposed. Grab an SSL cert from GoDaddy.com now for just $29.99. And save 10% on Domains and SSL certs with coupon code HAK.

Get awesome web hosting from the pros at Dreamhost and receive $25 off your order when you enter coupon code HAK5! Plans start at $7.95/mo including 500 GB storage, 5 TB bandwidth, and one-click installs of popular software like Wordpress, phpBB, and MediaWiki.

Season 2 Episode 9 — Shmoocon Special

Darren — Sun, 08 Apr 2007 03:02:54 +0000

In this special episode of Hak5 the crew heads to Washington DC for ShmooCon, the only annual security conference with complementary foam balls. We start by talk to Bruce Potter, one of the conferences organizers, about all things Shmoo. We also speak to Billy Hoffman about Jikto, JavaScript and XSS. Eoin Miller and Adair Collins tell us all about Cachedump and the dangers of cached domain credentials. Ken Caruso gives us a tour of the Shmoocon NOC and we see how network security is done at a hacker con. Jordan and Wes give us the details on the Hack or Halo competition while Paul tries his luck with the sniper rifle. Scott Moulton talks to us about recovering dead hard drives and Babak tells us about lock picking and the TOOOL organization. We even run into some Hak5 fans, Ryan and David, who built a rockin� Wii duck hunt box at the Hacker Arcade. Plus all of the usual fixings including the details on this months trivia, poll, LAN party, and a special web 1.0 contest sure to bring back the blink tag.

Download

Sponsors

Keep your personal information away from spammers, hackers and your crazy ex-evilserver. Private Domain Registration from GoDaddy.com protects your privacy by keeping your address, phone number and more out of the public database. Get an additional 10% on your order when you enter coupon code HAK.

Season 2 Episode 8

Darren — Thu, 08 Mar 2007 01:07:22 +0000

In this “breakin’ in the new place” edition of Hak5 we take a look at some spiffy open-source goodies for your data and network. Paul checks out DD-WRT, a free & open firmware replacement for the oh so hackable Linksys WRT54G. Mubix teaches us why we should all be using TrueCrypt for our sensitive data. Darren gets packets flowing with Smoothwall Express, a firewall distribution of Linux. And Paul demos a sweet burning app for OS X.Plus all the deets on this month’s LAN party, Poll, Trivia, upcoming events, and plenty of Technolust with Wess, Alli & Nikki.

Download

Sponsors

Season 1 Episode 7

Darren — Sun, 05 Feb 2006 03:11:04 +0000

In this episode of Hak.5 the gang hacks the CVS disposable digital camera, secure VNC traffic using SSH tunneling, take viewer questions and even check out some video submissions. Plus some special announcements and more commercials worth watching. Guest intro by Kevin Mitnick and music by Ashley Witt.

Download

Running time: 39:12

Sponsors

Season 1 Episode 6

Darren — Thu, 05 Jan 2006 19:22:16 +0000

In this episode of Hak.5 Jon brings us a coding challenge, Wess builds a laser audio transmitter for his iPod, Harrison shows us why we should get to know our network neighbors better, and Darren remotely installs VNC with a command line gem. Plus the conclusion to last month’s chilling cliff-hanger and guest appearances by Leo Laporte, Amber MacArthur, Mike Lazazzera, and Frank Linhares.