one more thing

I need to write a script that will make me a daily/weekly schedule. It needs to generate the weather, stuff from my google calander, parse the facebook birthday page, put important rss feeds on there, etc. There are scripts that do some of this, I just need to modify them.

I lied

Had to write these down. These are the embedded electronics modules that I want to play with:

-XBee wireless
-arduino (lillypad, duamelavente or however you spell it)
-MAKE controller
-phidget
-vex controller
-ATMega

work

There won't be any posts for the next couple weeks because of finals. I will literally be studying 24/7 for the next 3 weeks. I promise I have lots of cool projects planned for the summer, and I will update that as soon as I can. Until then...

What are the odds?

Recently, my friend's dad got 5 of the 6 lottery numbers and won a bunch of money.

according to Wikipedia, the odds of winning the florida lottery is 1:22,957,480

(the odds of what her dad won are 1:81,409)

according to the national safety council website, you are:

4 times more likely to die from legal execution than win the lottery

3 times more likely to die from being hit by lightning

about as likely to die from excessive heat or cold from a man made origin

about as likely to die from being confined to or trapped in a low oxygen environment

2 times more likely to die from being struck by another person or from the explosion of a pressurized device

11 times more likely to be killed from an accident when you are an passenger in an animal drawn vehicle.


That is why I will never buy a lottery ticket.

small hack link dump

http://hack0wn.com/forum/index.php?topic=963.0

build this:
http://www.ladyada.net/make/wavebubble/powersupply.html

use this:
http://ikat.ha.cked.net/

watch this:
http://video.google.com/videoplay?docid=-2160824376898701015

go to this:
http://dc404.kaos.to/index.html

buy one of these:
http://www.fon.com/en/

Fun with physical access to public computers

There is a common source of hacking that many people overlook. It is well known that physical access is total access. That is, if an attacker has physical access to a computer, it is not your computer anymore. Usually this involves a live CD to do things like grab the SAM file or replace it, etc. I want to concentrate on a situation where you have physical access, but have limited time and privlidges. We are also assuming that you can't boot to anything else. And we are going to say that you are not allowed to use a hardware keylogger. What can you do? Well, the objective is to get admin privlidges. Then, we will own the box. So. First, lets see about a shell. In my experience, I just write a batch file. This is the common source of hackery that is overlooked sometimes. Batch files and VBS scripts don't need to be compiled and the language is simple. As long as you have notepad, you are good. Batch files are just a collection of commands to be executed by cmd.exe. It also supports if and switch statements, and several other basic programming features. VBS scripts are just visual basic scripts. Most people use visual studio to make stuff with visual basic, but you can actually get away with only notepad. There won't be a GUI, but that can be a good thing. The only way to tell that either a batch or vbs script is running is the task manager. This is only one reason why disabling the task manager for users is a bad idea. Anyway, here is the batch script that I used to get a shell whenever I needed one.
[code]
@echo off
cmd.exe
[/code]
Yes really, thats it. Even if the admin disables the ability to execute cmd.exe if you navigate to it, this will work. You can google for all kinds of interesting batch and vbs scripts. Or you can be less lame and write your own. Once you get a shell, you can add yourself as administrator. You can also kill applications that you don't want running. In my situation, you could see the processes running but could not end any of them. So if I don't want VNC or other remote control software or access restriction stuff running, you can force kill them.

Or, use this:
This is a bloody brilliant site written by paul craig. He presented it at DefCon last year. It is designed to let you exploit internet kiosks. It basically automates the process of trying every possible way to get a shell. And it works great. Be aware that the site may be nsfw because of the giant picture of a girls naked butt on the front. That is the one thing that I do not understand, because you would think that you wouldn't want to draw attention to yourself. Anyway, I am working on getting a version of his site up without the picture on it. Until then, he has released a zip file with all the code for the site in it, so you can use that. Here's the site:

http://ikat.ha.cked.net/


I also recommend watching the talk he gave at defcon here. Its almost 100Mb, but its worth it. It gives a great explanation of what exactly is going on behind the scenes.

Enjoy!

quick hack idea

Get a pineapple (fon router hack, hak5.org for more details) and bring it on a airplane with you. Set up a network called United Airlines Courtesy Wireless or something and see how many people connect. For bonus points, use your cell phone (if you can get a signal) to actually connect them to the internet. While deliberately setting up lots of wireless communication on an airplane may not be the best idea, I'd be willing to bet that everything on the plane is shielded and you probably won't crash the thing. I'd also be willing to be that the first thing people will connect to is their email. More bonus points for convincing the captain or flight attendants that the plane is already equipped with wireless via social engineering so that they announce over the intercom that free wireless is available. You could set up a captive portal that had them download a small file that allowed them to join the 'special airplane kind of wifi' and pack a little dummy program that displays a window with a bogus speed graph and the word "Connected!". Then using the iexpress packing method, also include an exe created from metasploit that executes after the dummy program does. Then it doesn't matter that the internet suddenly doesn't work and the captive portal redirects to a page that explains how, unfortunately, the connection to the ground is currently unavailable due to wind currents or something. By that time, the exe is already running and you have a meterpreter session on every computer that connected. Of course, the classic, easier hack for this situation is just the pineapple asking clients with wifi on for their autoconnect SSID and then silently connecting with them.