Hak.5 Season 6, Episode 21: MiTM Javascript Keylogger, Social Engineering Toolkit and More

1

New Digs

Engineering a mid size office network from the ground up. Matt shares with us tips on switch stacking and more. Palm centro security? Shannon shows us how to bypass SIM lockout. And Darren’s getting his grub2 on without borking his ubuntu box. All that and more on this episode of Hak5.

2

Grub2 and VM-fu

Managing ESX(i) with a cross platform adobe air application. Matt reviews BlueBear’s Kodiak. Want to boot ISO files directly from USB? Darren explores the options with Grub Legacy and Grub2, plus tweaks for Persistent installations, nested menus, notes and more.

3

Network Planning, Kindle Tricks and a Linux Network Install Tool

This week Matt continues his series on IT Infrastructure planning. Shannon has a bundle of Kindle tricks, and Darren’s amped about a USB boot key that network insalls popular Linux distros.

4

WiFi Network Scanners and Windows VPN services

This week Matt reviews an open source WiFi network scanner for Windows while Darren convinces a Windows server into treating a VPN connection as a service.

5

Three VPN Servers and a Kindle Console

This week Shannon taps into a hidden Kindle serial port using a inty bitsy ribbon cable, a USB to Serial TTL cable and some jumpers in an attempt to hack root and finds herself upon the bootloader and nearly at a bash prompt. Darren guides you through the installation of VPN servers on Windows XP, Windows Server and Linux so you can keep your traffic secure in an encrypted tunnel while on untrusted networks.

6

Virtual LANs, Google Maps GPS Mashups and Unicorns

This week we're joined by Bill from AtlasRider.com to talk about a clever mashup of motorcycle helmet cam youtube videos and the corresponding GPS data updaing live in Google maps. Then Matt has the ins and outs of Virtual LANs.

7

Build a free SSL VPN on Linux or Windows

This time on the show, bypass restrictive firewalls with a free and open source virtual private network server for Windows and Linux that will have you connecting back to the home or office with just a web browser!

8

Automatic Packet Reporting System

This time on the show Tray Murphey, N4PAT, joins to to introduce the Automatic Packet Reporting System, radio licensing, hardware and building a kit on the cheap.

9

Touchscreen Mod and VirtualBox vs VMware

This time on the show Jason Appelbaum joins with a touchscreen LCD mod that's a lot easier than one might think. Then Darren and Matt pit their desktop virtualization platforms, Virtual Box and VMware Workstation, against eachother over a game of Halo.

10

Man in the Middle Fun with SSL Strip

This time on the show Darren's having a little man-in-the-middle fun with a demonstration os SSLStrip, an epic tool for removing that pesky encryption from your victims browsing session.

11

Metasploit 101 with Mubix

After much request we've dedicated an episode to Metasploit. Room362.com's very own Rob Fuller, aka Mubix, joins us in studio to show us the basics of exploiting and the power of auxiliary modules.

12

Hacking PPTP VPNs with ASLEAP

Continuing with the VPN Series, Darren discusses the inherent weaknesses in Microsoft's PPTP authentication protocol, MS-CHAPv2, and demos a Linux tool that exploits these weaknesses.

13

Virginia Tech Live

This week we take the show on the road and perform live in Blacksburg, VA at Virginia Tech! Go Hokies and special thanks to Tim Tutt and John Ryding.

14

Firewall evasion, SSH and virtual appliances!

Got a restrictive firewall blocking sites at school or work? Evade ‘em easily with your own private web proxy. Want to securely tunnel any port through an SSH session? Darren’s got just the trick. Wondering how to properly use Asleap to crack MS-CHAPv2 PPTP VPN handshakes & LM Hashes? Interested in trying out neat free enterprise applications but don’t feel like spending hours in a terminal? Try deploying a virtual appliance in minutes, the free and open source way.

15

Linux Hacking the Zipit, SMS Scripting Google Voice, and Chrome OS

Nothing makes us happier than hacking an inexpensive gadget to run just about any Linux app — and that’s exactly what Shannon Morse is doing this week on Hak5. We’re also joined by Jason Appelbaum for a little Google Voice SMS scripting with Java or PHP libraries, and Darren Kitchen has gone googly for Chrome OS. Prepare the popcorn it’s technolust time!

16

Make your own Nintendo DS Games for free! Tunneling on a Mac and Virtual Routers.

Cheap mod chips plus free dev tools equals hello world on the Nintendo DS! Jason Appelbaum joins us to geek out about code up the dual screen’d programmers playground that is NDS homebrew. Matt has answers to your questions about Virtual Routers, Paul comes out from behind the camera to school us on SSH Tunneling for the Mac, and Darren’s featuring some pretty Python & PHP to tunnel cross platform.

17

Certificate Authentication, Persistent Live Linux

Forget typing your password to SSH, Certificate based Authentication is where it’s at. Darren demonstrates with an Interceptor, Dropbear and Ngrep. Want a Linux Live USB key with persistent storage? Shannon has just the tool. Plus your picks on SSH tools and answers to your Wordpress questions.

18

Rooting the Droid, Zipit Doom and USB Live Chrome OS

Hacking the Motorola Droid: Root Access! A Linux Doom source port on the Zipit, Booting and installing Chrome OS from USB, your Wordpress picks and much more.

19

Hospitalized Hacking: Droid Tether, Theme Generation & More

Proof that Hak5 can be produced under heavy medication, Darren & Shannon go over some nifty tips for tethering your Droid in Ubuntu without root access, generating themes for popular CMS like Wordpress or Joomla, and more.

20

IP Spoofing, World of Goo Mods, Linux Drive Encryption

On this episode of Hak5 Darren joins Jenn Cutter in Toronto to talk IP Spoofing, Tethering Terms of Service, World of Goo mods, Linux Drive Encryption, 13" Ultralight notebooks and more.

21

MiTM Javascript Keylogger, Social Engineering Toolkit and More

This week Darren is joined by Rob Ruller.

22

CES 2010 Part 1: Gaming Gadgets, ebooks, smartphones & set-top boxes

At the Consumer Electronics Show in 2010, Darren and Shannon bring you their first impressions of the hottest gadgets to tickle their technolust. Stay tuned for gaming netbooks, open source set-top boxes, low-end and high-end ebook readers, hybrid gaming controllers / musical instruments and Linux lovin' smartphones.

23

CES 2010 Part 2: Drones, Smartbooks, Pocket HD Cams, Gaming Gloves & Lego

Part 2 of our favorite things from the 2010 Consumer Electronics Show. Tune in for our first impressions of the latest in Smartbooks, Pocket HD cameras, and Drones? Plus gamer gloves with keybindings and a Lego MMORPG.

24

Homebrew Multitouch

This week we are joined by Aaron Bitler and Brady Simpson from LCDMultiTouch.com to check out the custom built x19 multi-touch table and get advice on construction and software.

25

Create a BackTrack 4 Persistent USB Drive and a ZipIt Userland Image for the Average User

Darren is playing with the latest version of BackTrack linux, setting up a persistant USB boot drive that'll keep your files and settings consistent after a restart. Shannon is back at the ZipIt checking out the "Average User" userland image and connecting to WPA protected wireless networks.

26

Shmoocon 2010

We head out to DC for Shmoocon, our favorite hacker conference on the east coast, to talk to some of the brightest minds in security. We talk to Tom Eston about social media security, TheX1le about his new tool airdrop-ng, Jason Scott about preserving our digital heritage, Chris Paget about man-in-the-middle attacks against GSM networks, and much more.