Hak.5 Season 4, Episode 12: Session Hijacking and Virtualizing Servers

1

Wi-Fi Pineapples

In this season premiere episode of Hak5 Mubix joins us to talk about what’s new in Maltego, an open source forensics and intelligence gathering tool. Shannon rocks out with Audio surf, and Darren heads downtown to the coffee shop to own a wireless network with a pineapple. Grab some hax0rflakes ’cause the bricks are gone and we’re back!

2

Spicy Reverse Engineering

In this episode of Hak5 Matt shows us how to map our networks with Spiceworks, an open source infrastructure mapping tool. Chris Gerling breaks down reverse engineering, Shannon talks about OpenDNS, and Christine has a Windows utility for everyone running multiple monitors.

3

Reverse Engineering, Graphical Firewall Configuration, Inside the pineapple: Jasager demo, and Remember the BBS?

Reverse Engineering in practice. Configuring Cisco, IPTables and other firewalls with a sweet graphical utility. A little nostalgia with the Hak5 BBS and cracking open the Pineapple, a demo of Jasager.

4

Not Found: Multi-Touch Mini, Virus Infection Analysis, Photosynth and Chrome

Building a mini multi-touch table. Analysis of a Virus Infection in Windows. Photo stitching to the extreme with Photosynth, and Google Chrome memory manager.

5

Windows USB Booting, Fon Hacking Illustrated, DimDim, DeskSpace and Portals

Booting Windows from a USB key using the Windows Automated Installation Kit. Unlocking the Fon and Installing Jasager — Illustrated. Desktop and meeting collaboration using DimDim, the free open source online collaboration software. Turn your Windows desktop into a 3D spaces cube, and more!

6

Packet Sniffing 101, Social Media with Boxee, and multiple Gordon Freemans with Synergy

Chris Gerling begins a three part series on Packet Sniffing starting with the fundamentals of packet structure, the OSI model, tools and terminology. Matt harnesses the social power of media with Boxee, a social media center based on XMBC. Shannon demos out Synergy, the Half-Life 2 co-op mod, and Darren check out Cron for Windows.

7

Toorcon 2008: Robin Wood, Dan Griffin, and Jacob Appelbaum

Darren and Shannon head to San Diego for Toorcon and meet up with Robin Wood, Dan Griffin, and Jacob Appelbaum to talk about Jasager, Sharepoint Hacking, and the Cold Boot Attack. Plus Darren’s travel tips and “name that aircraft”.

8

Dissect TCP/IP, Dos Box, Alice, Day-Con, and Fon Batteries

Chris Gerling breaks down IP and TCP headers with Wireshark and building blocks. Shannon Morse shows us DosBox, a free IBM PC DOS emulator. Christine Bourquin talks about Alice, a teaching programming language for beginners. Darren Kitchen summarises his experience at Day-Con and answers some questions about Fon batteries.

9

HappyHakoween: Password Cracking Clusters, Remote Control Services, Wireshark Packet Filtering

att shows us how to turn anything into a service and provide a web frontend to manage them windows server, great for game server administration. Chris Gerling wraps up his three part series on Packet Sniffing with Wireshark techniques for packet filtering. Darren harnesses the CPU power of the HakHouse for good or evil to demonstrate cluster computing. Plus details on our Hak5 Halloween LAN Party!

10

Phreaknic 2008

The gang heads to Phreaknic in Nashville Tennessee and in Hak5 tradition brings you a sampling including interviews with Russell Butturini about his U3 Incident Response Tool, Adrian Crenshaw, aka Irongeek, about Keyloggers and other embedded hacking, Daniel Hooper about Software Defined Radio and GNU Radio, Eighty of Dual Core, Droops from Hacker Media, and more. Yeehaw!

11

Paul’s Flamingo

Darren demos optical character regocnition and bar code lookups with GOCR. Shannon talks about a new way to organize your desktop with Microsoft Scalable Fabrics. Matt protects a public workstation with Windows Steady State. Plus USB Protocol Analyzers and Paul’s pink flamingo. Yeah.

12

Session Hijacking and Virtualizing Servers

Session Hijacking with a Pineapple, Hamster and Ferret and cell phone? A free and easy way to virtualize physical servers! And is WPA Broken? Ikea clusters, screencasting, and canvas technolust.

13

First Responder Forensicss, SNES ROM Hackery, Tailing Logs and Unicorns

First Responder Forensics with Helix/Live View. Editing Super Mario World levels with Lunar Magic. Following logs with Bare Tail. Unicorns, and a lot more.

14

Build a web enabled Linux based USB missile launcher and defend your hacker space! Plus smart phone emulators, custom Linux command GUIs and more.

Take physical security to the next step by building a web enabled, linux powered USB missile launcher and defend your hacker space (or use the laser to remotely annoy your cat). Plus smart phone emulators, custom Linux command GUIs using Usermin, USB booting and more.

15

Public Key Encryption, Backing Up Drivers, Hackers are People Too Documentary, and Organize Your Music Collection

In this power packed episode Chris explores ways to securely communicate using public key authentication. Matt gives us a healthy helping of Drive Backup utilities. Darren interviews Ashley Schwartau about the documentary Hackers Are People Too. Shannon brings you a few tools for organizing that mismatched MP3 collection of yours.

16

SSH Tunneling, Independent Games, Updating Multiple Blogs At Once, and Password Protecting Applications

In this extensive episode Matt shows us how to setup SSH tunneling to securely transmit HTTP traffic and more while on the go. Shannon checks out some student entries to the 2009 Independent Games Festival, including City Rain, Glitch, Froggle, Blazar, and Akrasia. Darren puts together a PHP script that, in conjunction with Ping.fm, allows you to update multiple blogs at once including your own hosted Wordpress. Plus this weeks LAN Party, revamped Trivia and viewer questions.

17

VMware Server, Electric Sheep, InkScape, and TreePie

In this Holiday Special Hak5 the cast delivers a smathering of thier choices in freeware/shareware, open source applicatons. Matt sings praise of the free Vmware Server product for virutual goodies. Jason Applebaum discovers his once lost joy in having hard drive space with TreePie. Shannon show her affection for our mechanical friends with ElectricSheep. Darren wish peace for the whole graphics art world with InkScape. Finally Paul decks the halls with a few of his applications for OSX.

18

Laser Range Finding and File Recovery

In this new years eve episode Jason Appelbaum joins us to talk about Laser Range Finding using the USB Missile Launcher and some custom code. Chris Gerling is in the house doing file recovery the down and dirty way. Trust your Technolust and thanks for a great ‘08!

19

GPU accelerated MD5 Brute Forcing, Easy Windows Password Recovery with Ophcrack live USB and Dave Randolph

In this first episode of '09 Dave Randolph joins us to geek out about all things video. Darren whips up a Password Cracking Cocktail and shows off a wicked fast MD5 brute force tool that harnesses the power of your Nvidia graphics card. Shannon saves the day by recovering her sisters Windows password with Ophcrack Live. And Evil Server gets his evil on while we were away on holiday.

20

CES Day 1: Magnetic Card Reader Encryption, LCD eyewear, USB over ethernet, 3D printing and more

We show off some of the neatest toys found at CES 2009

21

CES Day 2: Netbook Tablets, Ultra Portables, USB3, PVRs, and Scuba Gear?

After scouring the show floor for the second day we reconvene at the NBC Universal stage to bring you guys some tecnolust. Netbooks, USB3, PVRs Oh My!

22

CES 2009 Wrap Up. A bundle of bling sure to tickle your technolust!

In our post CES Wrap Up show we take only the best of the wonderful toys and gizmos, interviews and demos that didn’t make it to the NBC Universal booth for our live broadcasts and wrap them up in a fast paced techno-treat along side a count down of our top favorite CES moments. After reviewing and editing over 4 hours of footage we present to you a 22 minute bundle of bling sure to tickle your technolust.

23

Securing Remote Desktop, Online Brute Forcing and Terminal Service Alternatives

Darren’s back in the kitchen with an illustrated scenario of online brute forcing every systems administrators beloved remote desktop. He whips up some home made chicken noodle soup and tosses on the ol’ white hat for a talk about countermeasures and security best practices. Then Matt brings you a full featured and aggressively priced alternative to Microsoft’s own Terminal Service. Do I hear cheap thin clients around the corner?

24

PHP Twitter Tamagotchi and ROFLcon

Hot off the heels of ROFLcon in NYC the crew kicks some in studio technolust. Darren shares with you his custom twitter tamagotchi bot written in PHP with some sweet RSS parsing, VLC controlling, curl loving nested goodness. Plus guest Jim Louderback, gadget lover and Revision3 stage hand, joins us to talk about all things new media.

25

USB Device Tracking and PFsense

In this episode Peter Giannoulis joins us from TheAcademyPro.com. Chris Gerling is back in studio talking about USB Device Tracking. And Matt is building the new HakHouse firewall/router with PFsense. Plus a ton of haksnax to get your grub on.

26

Shmoocon 2009

We head out to DC for Shmoocon, our favorite hacker conference on the east coast, to talk to some of the brightest minds in security. Dave Kenedy on his project FastTrack. Michael Ossmann about sniffing bluetooth. Joshua Abraham on his software

27

Won’t you be my neighbor?

Getting to know your neighbors — Darren takes a trip around your network with nmap, THE open source network security scanner. Want to obscure your OS fingerprint? Make a Windows Box show up as a printer? Shannon’s got just the thing. And Matt takes a first look at the Napera N24 smart network switch / security appliance. All that and more on this Hak5 Season 5 Premiere!