Hak.5 Season 5, Episode 18: Hacking WPA, ESXi and iSCSI, Bypass Windows Passwords

Won’t you be my neighbor?

Getting to know your neighbors — Darren takes a trip around your network with nmap, THE open source network security scanner. Want to obscure your OS fingerprint? Make a Windows Box show up as a printer? Shannon’s got just the thing. And Matt takes a first look at the Napera N24 smart network switch / security appliance. All that and more on this Hak5 Season 5 Premiere!

Linux RC Rovers, PHP Compiled and Napera

Darren’s got a soldering iron and knows how to use it. In this episode we kick off the HakHouse Rover project and web enable an inexpensive RC Tank using a Phidget USB Interface Kit. Then Jody Franklin joins us to talk about compiling PHP and using Netsh to renumber IP addresses in Windows. And Matt has a follow up to your questions about Napera. Plus our weekly trivia, LAN Party and a ton of fun.

Build a free VoIP PBX in under 10 minutes – Start programming a USB Dev Board for less than $20

Building a free voice over IP phone system was never easier. Matt shows us how to setup a 3CX PBX in under 10 minutes. Ever wanted to program a development board? Darren’s gets started with a USB based kit for under 20 bucks. And Ron Gula, CEO and CTO of Tenable Network Security joins us to talk about Nessus, PVS and more.

Get Free WiFi by tunneling through DNS and gaming optimized on Linux

Tired of paying $9.95 an hour for WiFi at the airport? Can you resolve DNS? We head down to Mubix’ lair and build a SSH SOCKS proxy over a DNS tunnel. Then we speak with Tyler McAdams from LinuxDNA about kernel optimizations and the future of gaming on Linux.

Introducing Interceptor: The network tap and rogue wireless access point

The perfect primate for pen testers is none other than network monkey. Introducing Robin Wood’s Interceptor — on this episode we hack the Fon+ and turn it into a network tap and rogue wireless access point. Sniff the LAN from across the street or hack the network from the inside out! Learn how Network Monkey Pirates your Packets today!

Wii Homebrew, 3CX meets PSTN and Interceptor Linux client

In this episode Shannon hacks the Wii and shares her favorite homebrew with us. Matt connects 3CX to the PSTN and Darren sets up a network monkey client in Linux.

The Bad 90s Show

This April 1st we bring you a gem* from the archives. Recently dig’d from a super VHS tape it’s Hak5 episode 507 from 1995. We take a peak at a Windows 95 “chicago” beta build, get our phone phreaking on, and review one of the latest SNES games.

Build a Free Instant Messaging Server in 10 Mins, Wii Homebrew, Doom2 returns!

Matt builds a free XMPP/Jabber server in under 10 minutes. Shannon has the low down on Wii Homebrew in regards to Nintendo’s new Wii System Menu 4.0 and Darren just can’t stop playing Doom2.

Wii in HD, Portable Ubuntu, SheevaPlug, Fon 2.0, Facial Recognition, Doom and More

Backing up Wii games to SD so you can play them in HD with the Dolphin Emulator. Ubuntu inside Windows, the SheevaPlug and Fon 2.0 embedded Linux devices. Face.com’s photo finder for facebook. The best Doom source ports and much more.

Virtualization and Emulation

Matt kicks off a series on Virtualization and invites us to see the 10 Gigabit beast at his office while Shannon and Darren wrap up their series on Wii Homebrew with the easiest way to backup and load Wii games and the Dolphin emulator.

Netcat, Brute Force, Virtualization and Pimping Wordpress

Darren shows off some nifty tricks for Netcat and a targeted brute force attack dictionary generator. Matt continues his series on Virtualization with redundancy and Shannon pimps the blog with her Wordpress plugin picks. Plus the results of our Monkey Contest, the Code Challenge and this weeks easter egg hunt

Break through the university firewall Internet Redirection, Hide data in photos with Steganography and answers to your Virtualization questions!

Want to bypass those nasty restrictions imposed by your corporate or university firewalls? Darren has just the trick with Internet Redirection. Ever wanted to hide secret data inside a photo? Shannon’s show us a neat steganography app. Plus Matt answers your virtualization questions!

Extract Windows Executables from Packet Captures, PHP Gmail Badges, Winning the Easter Egg Hunt, and special guest Eighty of DualCore

Eighty of Dual Core comes down to the HakHouse to share with us a technique for extracting Windows executables from packet captures. Darren’s featuring some of the Gmail badge submissions and a walkthrough of the Easter Egg hunt. Plus be sure to stick around as Eighty treats us to a live performance off his upcoming album.

Network Tap Analyzers, Streaming Music with Netcat and Wii Homebrew on System Menu 4.0

Mubix of Room362 comes down to the HakHouse to share his favorite tools for analyzing packet captures and network taps. Darren’s toying around with netcat and music streaming while Shannon’s got the skinny on the latest hacks for Wii Homebrew with system menu 4.0.

Build your own SAN, PSP Hacking, Net Grep

Jenn Cutter of Open Alpha fame joins us to talk about recent developments in PSP hacking and homebrew. Matt’s got answers to your questions about rolling your own Storage Area Network for all your virtualization needs, and Darren’s filtering packets in the console with ngrep.

Roll your own VMware ESXi Server and more

Building your own VMware ESXi Server in under an hour with parts you may have lying under your bed. Extreme sports cameras and mounts and mounts can be expensive. Why not build your own for about 5 bucks. And light video editing that’s both easy and free? Avidemux may be the answer.

Packet Injection, WPA Attacks, Virtualization

The gang gathers at a dive in Hoboken, NJ during their trip to NYC for the live diggnation and discuss wireless packet injection with airpwn, advancements in WPA-PSK attacks and of course, virtualization.

Building the Ultimate White Box for under $2000

Building the ultimate white box ESXi server for under $2000! Can it be done? Darren and Matt grab the company credit card and answer that question.

Encrypt your entire hard drive!

What’s your best defense against a boot CD that breaks Windows passwords in two keystrokes? Encrypting your entire hard disk. Shannon’s got the details on truecrypt drive encryption while Darren brings up plausible deniability with hidden volumes.

The Cold Boot Attack

When it comes to recovering encryption keys from memory nobody has a more intriguing method than Princeton University researchers. We explore a method known as the “Cold Boot Attack”. Plus, a clever DirectX injecting UI widget for your PC games that means the end of ALT+Tab.

Whats in your RAM?

Rob Fuler, aka Mubix, of Room362.com joins us to expand on last week’s discussion about the Cold Boot attacks. We cover retrieving memory from live systems, analysis with tools like volatility, and file recovery with foremost. Mubix calls it forensics for the gray hat.

Return of the Matt: Physical to Virtual and Apache Tomcat3

Matt Lestock returns and brings us the skinny on converting physical servers into virtual servers and piping ‘em right into your ESXi box while Darren takes the scenic route on a Linux Apache Tomcat install with some Java and bash lovin’.

USB Multipass

Why carry around a dozen bootable USB drives when you could merge ‘em all into one? On his episode we buld a USB Multipass complete with customized boot menu ready to launch any of favorite tools–including Backtrack, Ophcrack, Kon-boot, dban, freedos, and more. Plus Shannon reviews the Trinity Rescue Kit, the boot disc dubbed CPR for your computer.

Salty Hashes

Nerdcore Vacation