Showing posts with label hack. Show all posts
Showing posts with label hack. Show all posts

Tuesday, March 27, 2012

Advanced SSH tricks Linux

Today i will show you some SSH tricks that could be usefull! Well ssh is more powerfull than you thoght maybe - so check out the following little helpers to get your ssh life easier!


  • Have you ever tried to mount an filesystem securely over the world wide internetwork :)
    install the small tool SSHFS (apt-get install sshfs)
    You can now mount any remote filesystems DIR you have access to:
    $ sshfs user@remote2:/home/user/documents /mnt
  • Send an Command directly via SSH without login in and have to log out again after execution: this command will simply power off an remote machine!
    $ ssh user@remotehost sudo poweroff
  • If you have any long command you like to execute on an remote system you can also save it to any file as simple text and then run it remotly using:
    $ ssh user@remotehost "`cat filename.txt`"
  • The ssh-copy-id command is not as well-known as it should be, which is a shame because it is a great time-saver. This nifty command copies your public key to a remote host in the correct format, and to the correct directory. It even has a safety check that won't let you copy a private key by mistake. Specify which key you want to copy, like this:
    $ ssh-copy-id -i .ssh/id_rsa.pub user@remote
  • Use ssh-keygen to remove host keys from the ~/.ssh/known_hosts file to save some time. When the remote machine gets new SSH keys you'll get a warning, when you try to log in, that the key has changed. Using this is much faster than manually editing the file and counting down to the correct line to delete:
    $ ssh-keygen -R remote-hostname
  • When you're at the mercy of hotel and coffee shop Internet, a nice secure SSH tunnel makes your online adventures safer. To make this work you need a server that you control to act as a central node for escaping from hotspot follies. I have a server set up at home to accept remote SSH logins, and then use an SSH tunnel to route traffic through it. This is useful for a lot of different tasks. For example I can use my normal email client to send email, instead of hassling with Web mail or changing SMTP server configuration, and all traffic between my laptop and home server is encrypted. First create the tunnel to your personal server:
    $ ssh -f carla@homeserver.com -L 9999:homeserver.com:25 -N

    "this command will open locally port 9999 to static connect to
    port 25 on your remote machine, though that port needs to be
    opened up there, you can now use your mail client or for
    sending mails (port 25 smtp) via your home pc without trouble
    of getting spyed just set your SMTP port in your client to port 9999!
  • Bypass untrusted networks the easy way, lets say you want to browse the web and you have restrictions in your actual network just forward your traffic over ssh:
    $ ssh -D 9999 -C user@homeserver.com

    "now set ip/hostname and port in your Internet Browser eg.
    Firefox and keep on browsing the web securely :)"

Sunday, July 3, 2011

Apply credit card, loans, bad credit, is it safe?


Apply credit card is risky in these days, low interest credit cards shouldnt be given, hackers were always aware of the benefits of the global credit cards suppliers as also the attractive cash back credit cards got into points to be a easy to use cash out service.

Credit card hacking, stealing, selling and frauding is around since ages, as i know its been around since credit cards offers are around. Loans are aspecially developed systems to enslave humans and why shouldnt human missuse this. Someone thought someone got used to it.

As the web presence creditcards.com presents the statistics for the last months most used payments and usements for credit cards.
Credit Card Rate Report

Updated: 06-30-2011
National Average 14.75%
Low Interest 10.73%
Balance Transfer 12.78%
Business 13.07%
Student 13.77%
Cash Back 13.90%
Reward 14.28%
Airline 14.31%
Instant Approval 15.99%
Bad Credit 24.96%

On bottom you can see BAD CREDIT is the main usement of credit cards. These are loans that are payed by fees and are so called throw away credit cards for single use or till the fee amount is reached. These prepayed credit cards opened a new door for cyber crime as they can be used and thrown away as also take place anonymously when only used prepayed. Like Prepayed cell phone cards where used to not get tracked along.
Last day the credit card supplier mastercard.com again got ddosed by the collective anonymouse cause they shut down again the donation account of the wistleblowing platform wikileaks powered by julian assange. In fact the Attack really doesnt damage this huge company - only a few hours customers werent able to get on their page caused by the massive ddos that was running. So long the attacks stopped all the way and the site is accessable again.

Wednesday, June 22, 2011

On line data storage solution dropbox code fails, logins messed!

The on line data storage data backup service DROPBOX got in serious security trouble this week.
on line data storage backup service
Dropbox op posted on their blog that a massive security hole because of trouble with dropbox codes occured - every user of the storage service was able to log in with any password in any account - the security of the storage service totally failed and let every user in and take a look at any data provided on the internet backup service.

For over 4 hours the error was present and the backup service provider claims that around 1% of users logged in in this time to their drop box account. So maybe there happened no violation or abuses.
everythings alright
In fact be care when uploading data any where to the net or any online storage provider! As long they are not encrypted your data can seriusly be harmed or abused!

Thursday, June 9, 2011

GVU accident , DDOS started site down , a few hours after Kino.to got busted!

GVU webpresence is accidentially not reachable anymore, the reason is it got DDOSD obviously by fans of Kino.to cause the site got down a few hours after the message made it around the globe that 13 people where looked up in jail, including the operator of kino.to
404

The servers seem up now again but the DDOS remained the whole night until 8am in the morning, some statements are also readable around the net saying "We will be back" obviously posted by members of the platform kino.to.
ddos tux

by the way check out g-stream.in you would probably like the site if you where a kino.to fan.

Tuesday, June 7, 2011

Graphic cards gpu technology breaks passwords faster than every cpu!

I got around the progtram IGHASHGPU  and rapidly found that graphic cards gpus shouldnt be underrated these days! 
ighashgpu

An AMD Radeon 5770 can crack an standard password with 5 characters in under one second, a normal cpu with about 3GHz would need to spend about 24 seconds on thsi operation.
Another password with about 6 characters uses an normal CPU about 1 and a half hour, while the GPU of the Radeon 5770 manages to crack this word in ~4 seconds.
With an passwort with 7 chars where one is an space, an normal CPU would need about 75 days for this operation, our GPU fucks the password up in about ~7 hours! 
multiple gpu


So in future if we think of an SLI moded Graphiccard with more power than this mid-range card we used here, passwords could be breaked really fast in no time, what took as about 50 years for now can be done i about 5 weeks or less depending on the GPU powers...


so long here is an crack report of multiple GPUS with IGHASHGPU:
for example, result for HD5770+HD4770+8600GT looks like:

****************************************************************
***      MD4/MD5/SHA1 GPU Password Recovery v0.70.48.4       ***
***    For ATI RV 7X0 cards and nVidia 'CUDA' ones (G80+)    ***
***      (c) 2009-2010 Ivan Golubev, http://golubev.com      ***
***             see "readme.htm" for more details            ***
****************************************************************
*** Any commercial use of this program is strictly forbidden ***
****************************************************************

Found 2 CAL device(s)
Found 1 CUDA device(s)
Starting brute-force attack, Charset Len = 36, Min passlen = 4, 
Max passlen = 7
Charset (unicode -> 0) [abcdefghijklmnopqrstuvwxyz0123456789]
Charset in HEX: 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 
70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39
Starting from [aaaa]
Hash type: MD5, Hash: cbe1d6d5800ec1e03a5f2a64882a0d41
We're running at ATI and NVIDIA GPUs simultaneously.
Device #0: [RV830] 850.00 Mhz 800 SP
Device #1: [RV7x0] 750.00 Mhz 640 SP
Device #2: [GeForce 8600 GT] 1188.00 Mhz 32 SP
Hardware monitoring disabled.
CURPWD: 66owsnc DONE: 51.02% 
ETA: 13s CURSPD: 2756.0M=1646.0M+1017.4M+92.6M
Found password: [roger15], HEX: 72 6f 67 65 72 31 35
Processed 42 228 252 672 passwords in 16s.
Thus, 2 731 452 307 password(s) per second in average. 
Gert some GPUS get yourself an lawyer, an insurance, some passwords and crack the hell out of em! CHEERS
Tramadol
 As my picture above describes, i will get me a bunch of tramadol or zolpidem and chill out till my 12 char pw got cracked =P cheers folks!

Friday, June 3, 2011

Sony got hacked again and again and again...

Yesterday a new sony hack came up, the company got hacked again and around 20.000 free music coupons and user data has been released on the web. Another massive leak and it seems that sony really doesnt care about security nor their users and payers...

_____|\                    
              _.--| LOL |:                    
             <____|.----||                    
                    .---''---,                
   The               ;..__..'    _...         
    Lulz           ,'/  ;|/..--''    \        
     Boat        ,'_/.-/':            :       
            _..-'''/  /  |  \    \   _|/|     
           \      /-./_ \;   \    \,;'   \    
           ,\    / \:  `:\    \   //    `:`.  
         ,'  \  /-._;   | :    : ::    ,.   . 
       ,'     ::   /`-._| |    | || ' :  `.`.)
    _,'       |;._:: |  | |    | `|   :    `' 
  ,'   `.     /   |`-:_ ; |    |  |  : \      
  `--.   )   /|-._:    :          |   \ \     
     /  /   :_|   ;`-._;   __..--';    : :    
    /  (    ;|;-./_  _/.-:'o |   /     ' |    
   /  , \._/_/_./--''/_|:|___|_,'        |    
  :  /   `'-'--'----'---------'          |    
  | :     O ._O   O_. O ._O   O_.      ; ;    
  : `.      //    //    //    //     ,' /     
~~~`.______//____//____//____//_______,'~     
          //    //~   //    //                
   ~~   _//   _//   _// ~ _//     ~           
 ~     / /   / /   / /   / /  ~      ~~       
      ~~~   ~~~   ~~~   ~~~ 
 
The LULZSEC crew has broken into
„Sony Pictures International“ 
„Sony Music Netherland“ 
„Sony Music Belgium“ 
 
 
Actual news about the leak can be found here: 
http://twitter.com/#!/lulzsec
 
LULZSEC announced that the are waiting for some donations 
via bit coins yesterday evenening.
Today at 10:00 am they posted: "We will take a break and 
then the hacks will continue, thnaks for donation"
Really another bad sad day for the sony entertainment 
system and their workers
especially the security advisors ;) 

Mac Defender kills Apples Security!

The well known scareware mac defender that has been around the last few days, was to be killed by Mac OSX Security Update 2011-003 but the scareware developer team killed the security suite within 8 hours! Apples Security suite isn't able to track MAC Defender anymore and the app looks legit again.
A new race has began between Mac OSX Developers and the on the come scareware team. Windows users now can look at apple mac osx with an smile ;) the malware future has begun and there are more to come!

Wednesday, June 1, 2011

Next level Cyberwar is coming up!

Cold war is approaching again,
this time the war starts on another level, on the world wide web overall the planet. Nations begin to recruit and train personal especially for cyber war bzw counter cyber war. I think many big Companys are involved cause the most well trained computer experts on our planet rule the security in such companies. Training new people is definatly impossible if you want em to learn security technics @ computing without relaying knowledge.
So this is the point where the recruiting jumps in.
2 Countries are rapidly starting to recruit computer experts in security especially for cyber fights and domination on the internet.

Today we have KOREA vs BRITAIN


KOREA

BRITAIN

 Im still wondering what this will be in the end but im sure - cyber is on the come - and we are in the middle of it ;) maybe an MITN should be globally done.

WE are watching you the globe is fully wired, the forces are able to get everywhere, no mountain, no hill, no sea, no river can stop us - the globe is wired.

Go Britain !
Im acting patriotic here, tell me what you think.

Cheers folks

Monday, May 23, 2011

Sony got hacked again!

Two weeks after the big Playstation Network hack Sony s Greek music homepage got hacked!



Username, maill addys and real names got stolen from all customers that were registred on their site, this could be another big leak in sony s never ending hack story!
Another funny point here, someone has realeased the hole data that got stolen from sony s music page on pastebin.org

All data has been posted, but the hacker deleted the phone number and also the users passwords before posting, seems to be great statement to scare them but not kill them right now!



In fact its not possible to run a website 100% secure so it cant be hacked, but what sony does here is horrible, their security got broken in such simple ways that everyone can just wonder around why havent i tried to =P

Everyone that is registred on sonymusic.gr should change his password right now, dont know what the hacker is planning with the data that got leaked so long...

Friday, May 20, 2011

Sony playstation network hacked again!

Not so much time has passed and the PSN (Sony Playstation Network) got hacked again, only 48 hours after the playstation etwork got relaunched and was up again a new security hole was found and missused.



Maybe the same hackers are involved as on playstation networks first take down.
The new security hole is described as follows:

You can use the forget your password button on the PSN to retrieve a new password, the clue is to get a new passwort you only have to enter 2 criterias, your Name and your date of birth. So long if the crew that hacked it before is after this security hole again they already got all datas from every user of the PSN so they know their name and also their date of birth.



In most parts of the world sony has now taken down the feature to change your users password to get rid of this failure, but it seems they handle this real filthy :) i think if sony gets another hit in its face it has to capitulate!

Though the hackers have not been captured at all, also the FBI is after them - it seems they handle this quite smart :)

Thursday, May 19, 2011

OtherOS++ Boot linux on PS3

 Rebug Team has brought 2 new realeases for the Sony s playstation 3:
Boot OtherOS++ & OtherOS Prep Tool
These are essential for installing an new OS on your playstation 3 

Note: Below are excerpt from rebug.me
Requirements:
  • 16MB NOR PS3 (Model CECHH or Higher)
  • 3.55 OtherOS++ enabled firmware installed
(If you want to use REBUG 3.55.1 grab PS3MFW Builder 0.2 Portable
from here with the tasks pre-selected to add OtherOS++ support)
Features:
  • One Step Prep if installing OtherOS to USB Hard Disk
  • Two Step Prep if installing OtherOS to PS3 Hard Disk
  • Resize vflash to 6 different sizes
  • (Original, 11GB, 22,GB, 43GB, 65GB and 83GB)
  • Create or Delete vflash region 5, 6 and 7 separately
  • Create or Delete ALL vflash regions at once
  • dtbImage.ps3.bin included in pkg (no need to have it ready on USB)
  • Install different dtbImage.ps3.bin from USB
  • Checks that vflash region 7 create matches vflash size
  • Detects and displays current vflash size on start up
  • Auto matches new size to current size on start up
IMPORTANT NOTE: THE BLACK SCREEN IS NORMAL
In most cases when the PS3 auto reboots you will get a black screen telling you to plug in your controller and press the PS button. THIS IS NORMAL. Press the PS button and on the next screen press the PS button again. The PS3 will continue to reboot.


*****************
IF INSTALLING LINUX TO USB HARD DRIVE:
STEP 1: COMPLETE VFLASH AND PETITBOOT INSTALLATION
(PS3 Hard Drive WILL NOT be Formatted)
Run OtherOS Prep Tool
Press START+SELECT.. You’re done!!
(PS3 will beep when it starts and again when it finishes)
(System will auto reboot)
Run Boot OtherOS++ to launch Petitboot

 We are done folks, happy booting, and btw.:

If any body know the series breaking bad would know this already - i wanted to share ;) have fun

Wednesday, May 18, 2011

Austria launches new cyber crime force!

Johanna Mikl-Leitner austrias minister of the interior has launched the new project "fight cybercrime" 

The so called "Cyber-Crime-Competence-Center" consists of 300 new retrained police officers / it-experts.
They 300 users are going to get trained at an Academy launched by the BKA and will be trained specially on a point that makes me curious - ENCRYPTION and ANONYMIZING.

That sounds like they are going to establish a force that will detect people in austria who will use privacy and anonymous services... I dont know what i should think about this, isnt there enough crime out there than should be stopped? instead of some heads working on their privacy :) 


police academy head on!


Have nice day my beloved Followers

Monday, May 9, 2011

XBOX 360, and some wasted brute disks!

My Xbox 360 an very old Model of it, i bought it in July 2006, it was the first Model with an Heat Pipe and also the new Hitachi DVD Drive, this version doesnt tend to get overheated and destroy itself :D so it runs and runs and runs till now.


The only Problem im facing right now is, my console needs around 15 Minutes to get warm before i can play any game. This means i insert an DVD and then i sit and press the A-Button on my wireless controller to let the drive eject and close again, yeah around 50 Times then it starts Reading the DVD and voila game is up and running.
After this treatment every game runs within the first 3 Tries the whole day, till i let my XBOX cool down around an hour or so.

Yesterday i thought PORTAL II is available for 360 and i thought, i must have it! Go and Buy!
But the Problem, Sunday no store got opened for me, so a called a friend of mine and i knew he bought it alredy ;) so i started over to him and asked if i can borrow the game.
Answer was no, cause he told me i never take care of this game and he newly bought it and dont want it to get wasted to fast by a person like mine. Uhm alright i said. Lets ->

So i flushed out of my pants an fresh Verbatim Dual DVD Layer brute and told hmi okay let me do a Backup and i take both games with me at home but i only will play the backup so your game will not be harmed! 
about an hour later i got a fresh Backup and an Original of Portal II 

Back home i tried to play the Backup - but then - my XBOX told me DVD Video ready to play.

I clicked Play a thousand times but it wasnt able to play that game, so i backed the original Up again and again and an fourth time again. And i wasnt able to figure out why it wouldnt work...

I backup the game using IMGBURN in Windows, but no Luck.
growisofs -speed=2 -dvd-compat -Z -use-the-force-luke=dao -use-the-force-luke=break:1913760 /dev/{{laufwerksname}}={{isoname}}.iso

I Used the Force of Luke with Linux but nothing else happened.
My last try was an APPLE Mac with OSX 10.3, no way to get an DUAL LAYER BREAK at the Point given for XBOX 360 games, so an OSX user would never have the chance to burn an 360 game in any way. I loughed myself a bit in this sad situation when the apple users began to talk about VDPC with WIN and DARWIN :)


Long Story short.
I lastly figured out why the game would not work on my console... So i have to tell you if you got the same Problem... Download this file here Activate_iso.rar and burn it like you would burn any game for Microsoft X360 i prefered IMG BURN on windows, cause there are some Special settings that should be done ...
After burning this 250 MB Image to an dual layer dvd you can insert it into your Xbox 360 and let it loud about 1 Minute after that put your Backupped game into your DVD Drive and voila :D it would load the game, no need of burning it 4 or 5 times ;)

use this settings for IMGBURN:

if you didnt got it right now and need further infos, i please you continue reading here -> WELL DONE
very well written article and some additional infos more than are written here, for trouble shooting you can also ask.


GOOD LUCK

Sunday, May 8, 2011

Hack a PS3, with the best mobile Phone!

So i bought mysel an Nokia N900 about an year ago :)
I think it's the best phone on this Planet! It barely never died und the Software Repository for it is great and free for all, no buying anywhere, cause it is an 100% open source Software running on this Piece of fantastic Technique!
Here just take a look at this!

HAH an too one of the greatest videos ever be done for an Phone :) nice try from Nokia!

Now to hack a and free an Play Station 3 from Sony entertainment system you obnly have to install some Open source apps on your Phone! 


Disclaimers:
- Use at your own risk. (Although I can't think of anything bad that might happen)
- No Piracy tolerated. This should be used to Backup your precious bought games only.
- It is unknown what short term or long term effects this will have on online play, if at all.

This guide covers the matter in extensive detail. So even if you’ve never ventured with your N900 before, you’ll still be able to follow.

This guide will cause Pro users to bleed from their eyes

This guide will cover Jailbreaking your PS3 with the N900 using PSFreedom and installing and running the PSJailbreak Backup Manager(Working!!).

PSFreedom WAS NOT MADE BY ME.

Give thanks to the Maker KaKaRoto:
kakaroto.homelinux.net

Hardware you will need:

N900 (Should now work on Power and Regular Kernel)
PS3 with firmware 3.41 (I haven't tested on older)

PSFreedom Application Method - GUI:

Enable Extras-Devel Repository on your N900:

Application manager –> Application catalogs –> New
Catalog name: Maemo Extras-devel
Web address: http://repository.maemo.org/extras-devel/
Distribution: fremantle
Components: free non-free

Let it update the catalogues. Then choose Download and find PSFreedom. Install it.

PSFreedom-GUI Creator Thread:
http://talk.maemo.org/showthread.php?t=61988

Proceed to the very bottom of this post for getting Backup Manager.


PSFreedom Manual Method - No GUI:


First we need to root your N900
Via N900 Download Manager, obtain and install rootsh:
http://maemo.org/downloads/product/Maemo5/rootsh/

Now we need to get SSH working on the n900:

Via N900 Download Manager, obtain and install OpenSSH:
http://maemo.org/downloads/product/Maemo5/openssh/
It’ll prompt you to enter a password during install, use any password of your liking.

Connecting to your N900 via WinSCP:
Get WinSCP from:
http://winscp.net/download/winscp428setup.exe
Install it. And Launch it.

Make sure your N900 is connected to same WiFi as your PC.
Identify your N900s IP address . (You can find a nice widget for this HERE )

Launch WinSCP:

Hostname: IP of the N900 (Example: 192.168.1.5)
Port: 22
Click login.
You’ll be promted for username and password. The username is root and the password is what you’ve entered earlier.

WinSCP will take you to the browsing panes.
Left Pane is your PC. Right Pane is your N900.

Identify which Kernel do you have on your N900:
In N900 Terminal Type:
Code:
uname -r
If it says something with "power" in it. It's Power.
2.6.28-omap1 is Regular

Back to WinSCP:

Browse to and Copy (F5) the 3 PSFreedom files from your PC to your N900s /root folder

psfreedom.ko, psfreedom-enable.sh, psfreedom-disable.sh

You can get these files by extracting the following archieves for each Kernel:

PSFreedom For Stock Kernel: (Patched For Backup Manager)
http://talk.maemo.org/attachment.php...7&d=1283539537

PSFreedom for Power Kernel: (Patched For Backup Manager)
http://talk.maemo.org/attachment.php?attachmentid=13527

Now close WinSCP

On your N900, Launch Terminal.
Type:
Code:
root
Then change the scripts into executables:

Code:
chmod +x psfreedom-enable.sh
chmod +x psfreedom-disable.sh
(You will get no output for these commands)
Now run the script:

Code:
./psfreedom-enable.sh
(Nothing should happen, if you get an error: unable to insert “-”, you are running power kernel, you need to be running stock kernel or use the Power Kernel Driver)

Using PSFreedom on Your PS3:


Now. Unplug your ps3 from Power.
Connect then N900.
Plug back your PS3s power.
Click the Power button then quickly click and hold the Eject button (for maybe 7 seconds, if you hear 1 beep, let go).

How do you know you did it fast enough?

You won’t hear 2 beeps when you first hit the eject button. I prefer using both my hands

Nothing will seem to be happening. That’s fine. The n900 will show the Storage or PC Suite window. Then a warning about insufficient power.

How do you know it worked?

On the ps3, there should be a new option, under Game called: Install Packages.

Backup Manager:

You can get the Original Backup Manager from here:
http://www.pandawillforum.com/redire...&goto=lastpost

There is also a "Stealth" Backup Manager if you'd like to Try. (Although its effectiveness is questionable) (Read about it Here):
http://www.ps3-hacks.com/file/86

Put the manager.pkg into the root of a separate storage media (USB Drive or HDD) other than N900. Plug that USB in the PS3. After that, you will see the package manager under *install packages files* on your PS3. Choose to install it.

Launch the Backup Manager which is now under Game. Preferably with a game inside your PS3

Note: You have to have an original game (Any) inserted to load a backup at all times.

Various Games Compatibility Charts:

PSX-Scene Chart
PS3-News Chart


Kudos to the Creater of PSFreedom. KaKaRoto
Kudos to MohammadAG for guidance
Kudos to Hopbeat and ps3n900 for Backup Manager Patch
Kudos to the N900


Good luck guys :D  
asuce: http://talk.maemo.org/showthread.php?t=61669