Download HD Download MP4 Download XviD Download WMV

Moxie Marlinspike’s SSLStrip, released at Blackhat/DEFCON this year, is a tool that transparently hijacks HTTP traffic and redirects HTTPS links to look-alike HTTP links. While this description barely scratches the surface, Darren’s segment takes a closer look including a pracitcal demonstration of a man-in-the-middle attack using arpspoof and a little luck with remote-exploit’s BackTrack 4 penetration testing distribution.

Watch

Show Notes

Is WPA Broken? Interesting stuff coming out of PacSec this year. Ars has a great writeup about it our check out Martin Beck and Erik Tews’ paper Practical attacks against WEP and WPA (PDF). There is a proof of concept tool available from the Aircrack-NG folks. Take a look at Tkiptun-ng. At time of writing the tool is not fully functional. Something to keep an eye on.

Steve P. writes to us about the Helmer beowulf cluster. This 6xCore2Quad is sure to make any geek smile. Kitty approved too! While stuffing a personal cluster into an Ikea cabinet is novel in and of itself the mad scientist behind it has thought some insane cluster designs including the 50 tflop Helmer 2 and the 4 pflop Helmer 3. All I can say is I want one. Thanks for the links Steve.

Darren enjoys a Bondages’ No Problem while Matt and Shannon stick with the margaritas.

More importantly Darren talks about Session Hijacking and demos a tool from Errata Security called Hamster and Ferret that, in conjunction with the latest 2.0 build of Jasager, an ICS’d EVDO connection and Tftpd32 we’re able to “sidejack” with our little man-in-the-middle setup. Lesson learned? Be suspicious of any wifi. Check for signatures of trusted networks and tunnel your traffic. We’ll come back to this topic with a more indepth segment on Jasager detection and traffic encryption soon.

A note on trivia. Please answer trivia questions on the Hak5 forums from now on. We would love to continue doing dual winners but with growing prize costs we cannot. Also, if you’re interested in volunteering to help with trivia code challenges lend a hand in the Dev5 board.

Matt shows us how to convert a physical server into a virtual server locally using the free VMware converter tool and talks about some of the concerns you must consider when preparing to virtualize. If you have virtualization questions hit up Matt and we’ll cover ‘em on future segments. Matt at Hak5 d0t org.

Alex W. writes with a question about screen recording. We highly recommend the open source Camstudio as well as FRAPS and Techsmith’s Camtasia Studio (warning: sticker shock may occur at techsmith.com). Paul (our “camera guy”) suggests checking out the new screen capturing functionality of the latest verison of VLC, especially if you’re on the Linux or Mac side.

As always we’d love to hear your feedback. Your questions, comments or concerns can be directed to HakHouse.com. It’s a crazy interactive project we’re working on. Just wait ’till we get the web-enabled robots up in there.

Trust your Technolust

Watch

Show Notes

Chris Gerling dives into the structure of IP and TCP headers in part two of his three part series on packet sniffing. He covers everything from source ports to checksums and everything inbetween offering insight into TCP packets in plain English. Then in part three he covers basic Wireshark usage and advanced techniques. Read more on packet sniffing on his blog at ChrisGerling.com

Shannon Morse shares with us DosBox, the free and open source IBM PC emulator that allows you to break out those old floppies and play your DOS games once again. While we wait for DNF, anyone for a Duke Nukem 3D deathmatch?

Christine Bourquin demos Alice, an innovative 3D programming language that makes it easy to teach programming using a simple drag-and-drop interface. Perfect for the next generation of computer scientists.

Darren Kitchen brings us his review of Day-Con with photos courtesy of the security twits. He also talks about Jasager batteries both big and small.

And on a production note: We’ve switched over from a standard-def composite based video mixing solution to a high-def HDMI based system. We’re not ready to release the full 720p quite yet as we’re ironing out (read: developing on the fly) the post production process but in the mean time we’ve got damn good looking 480p and we’re looking for your feedback. Thanks a million to everyone who has donated and helped make this happen!

Watch

Show Notes

Robin Wood describes the development and future of Jasager

Dan Griffin talks to us about his latest research into hacking sharepoint.

Jacob Appelbaum talks to us about the Cold Boot Attack

Interview with David Hulton (h1kari) and George Spillman (Geo) can be found at hak5.org.

Special thanks to Dual Core for providing music for this episode.

Supplemental Interview

Watch

Production Note

We’re very close to going HD now. We have most of the equipment we need. Hopefully by the end of October More details.

Show Notes

Chris Gerling describes how we can use the Windows Automated Installation Kit, a free download from Microsoft, to build our own bootable Windows USB key. This tool is great for repairing borked PCs, more securely accessing a public computer, or installing Windows on optical drive-less ultra portables. Submitted by Moonlit – Show Notes.

Darren Kitchen brings La Fonera hacking with a geek friendly cartoon. This simple 20 step guide will have your Fon unlocked and running Jasager in no time! (Pineapples and battle armor optional) Step by Step guide

Christine Bourquin demos a nifty little Windows app that turns your desktop into four independent spaces on a 3D cube. Kinda like Compiz for Windows. Check out DeskSpace and it’s free alternative.

Matt Lestock demos DimDim, a web-based collaboration platform that offers media-rich features. It’s a open source “WebEx” alternative that’ll blow your mind. Run it either hosted or install it on your own servers. SysAdmins look out, this little gem will be wowing your boss so sneak a little OSS in the corporation and save a little green too

We’ll be at Day-Con on the 11th, VA Tech on the 17th, Phreaknic on the 25th and finally back in studio and probably HD the very next week. Stay tuned to Hak5.org for all the details and announcements or follow @hak5 on the twitter.

Oh yes, and thanks for all the help with the donating for Hak5 stickers! We’re getting close to our goals.

Watch

Production Note

With this episode and onwards we fixed the issue that was mudding up the sad standard-def video signals from our cameras. We’re still working on going HD and hope to be there by the end of the year. More details.

Show Notes

Chris Gerling shows us how to do a little reverse engineering with an educational tool called a CrackMe. These aptly named CrackMe files are great for practicing reverse engineering skills. Chris walks us through the steps involved in unlocking the Crackme’s code using .NET Reflector, some Python code, and a little a hex calculator. More detail in Chris’ blog post and more Crackmes at LearnSecurityOnline.com.

Matt demonstrates a killer app for anyone who manages firewalls. Firewall Builder creates, validates and deploys configurations to popular firewalls from your standard Linksys WRT54G using Sveasoft, to iptables, to Cisco using an intuitive graphical interface. Can we say access-list inside_access_out permit tcp any eq www host hak5.org eq www? Check out Matt’s full review at MattLestock.com

Remember the good ol’ days before the Internet? Ever access a BBS? How about 1200 baud bliss with an xmodem transfer of the latest leet ezine from across the country via a toll-free PBX or some magical tones? If not that’s cool too, we’ve got just the thing for you. How about a multiplayer text adventure, the predecessor to modern day MMORPGs? That’s right, the Hak5 BBS is up and running so telnet on over to bbs.hak5.org, port 23 of course, and check out the door games. We’re running an active game of Legend of the Red Dragon as well as dopewars, pimpwars, food fight, and more.

Darren cracks open the pineapple and demos Jasager. He even pronounces it correctly this episode. In our controlled environment we go into how the system works, the interface, setting it up, and the future of the project. We’ll be building one from scratch on 405, then stay tuned for an interview with developer Robin Wood from this years Toorcon in San Diego. You can read up on Jasager and get yourself a fresh tarball at Robin’s site.

Speaking of Toorcon, if you’re going and wanna meetup for a drink or say hi and grab some stickers be sure to follow one of us on Twitter. You can find us all at @hak5

Production Note

Video issues will be resolved by 403. We’re using new equipment and didn’t catch a nasty bug in our system until after the second shoot

Watch

Show Notes

Wi-Fi Pineapple

Why target individuals on a wireless network when you could have them come to you. Darren talks about the Jasager project, a small portable honey pot with a hunger for clients based on the La Fonera router. http://www.fon.com. Download Jasager.

Maltego

Mubix heads down to show us some fun new features in the open source forensics and intelligence gathering tool Maltego. Download at http://www.paterva.com or find in the latest version of BackTrack at http://www.remote-exploit.org. Read more in Mubix’s Maltego article at room362.

Audio-Surf

Shannon reviews the IGF award winning music game by Invisible Handlebar. Audio-Surf is like the result of F-Zero and Guitar Hero hooking up with the ability to import your own music. Single, 2-player and co-op modes make this highly addictive game one of our favorites. Available through steam at www.audio-surf.com

LAN Party

We’ll be hosting our first LAN Party this season all day Saturday, September 20th at game.hak5.org. Join in for some Counter-Strike: Source action. We’ll be shooting two episodes back to back that day so feel free to hit up the setcam at http://hak5.org and watch as we fumble lines and try not to team-kill.