Hak.5 Season 7, Episode 16: PDF Exploits

1

Botnet Command & Control and Man-in-the-Middle detection

Following our 2010 Shmoocon special we're joined in studio by security expert and programmer extraordinaire Robin Wood to talk about his proof of concept botnet command and control tool KreiosC2. We also discuss tools for detecting traditional Man-in-the-Middle attacks. And stay tuned for a special season seven announcement.

2

DHCP Exhaustion and DNS Man-in-the-Middle Attacks

With a mixture of in-studio and on location in Dublin this week we're talking to Robin Wood about DHCP Exhaustion and DNS Man-in-the-Middle attacks, talking Metasploit modules and a Pineapple Monkey half-breed.

3

Free Application Sandbox Challenge and Top

Back from Britain and bouncing off the walls Darren pits three ancient Internet Explorers against each other to see which free application sandbox can save you from yourself. Shannon joins us from Missouri for her take on the top "ultra" Windows software, and Paul... Well, Paul's tearing down the set.

4

Malware Analyzis Sandbox and PC Remote Control over Twitter

Following up with last week's desktop sandboxing challenge Darren's taking a look at another kind of sandbox -- one for malware analysis. Shannon thinks your VNC and SSH servers are pretty spiffy, but how about controlling your computer over twitter? Free text messaging to your PC anyone?

5

Airport WiFi Challenge and Your Ultra Software Picks

While meeting up with family in Florida this week Darren takes on a WiFi Challenge using the airport friendly Pineapple Mark II and Airdrop-ng. Plus, Shannon has a follow-up to the Ultra Software including your picks.

6

Deauth Detection and Cloud Data Backups

Back in studio with Shannon this week. Darren has answers to your WiFi deauthorization attack questions and a demo of a nifty deuth watching script. Shannon's all about free and open source alternatives to online backup services like Backupify. Can these tools keep your cloud data secure?

7

Teh Pure Pwnage Special

Back in Canada again eh? It's another Hak5 field trip. This time the crew is in Toronto for the Pure Pwnage Teh TV Series premiere at the Bloor Street theatre. We're talking to creators and cast Geoff Lapaire (Kyle), Jarett Cale (Jeremy) and Joel Gardiner (fps_doug).

8

PAX East 2010

Jason Appelbaum and Jenn Cutter bring us sights from the show floor at the Penny Arcade Expo East 2010. Table top dungeons & dragons on a multi-touch surface! A mod to turn any guitar into a game controller and killer gaming headphones. Plus, Shannon investigates secure delete utilities in this week's Snusb Report. All that and more this time on Hak5.

9

USB Rubber Ducky Part 1

This time on the show Shannon has a tool that'll make that spring cleaning Windows reinstall a breeze in the Snubs Report. Then Mubix is unboxing the Nano Note, a pocket sized OpenWRT based bundle of Linux Lovin'. And finally Darren has the scoop on a new open source pen testing tool, the USB Rubber Ducky! Tune in and find out about special dev kits.

10

Unsynchronized

In this wacky episode of Hak5 Darren and Paul follow up on some USB Rubber Ducky related topics, a cheaper version of the mini camera from last week, pelican cases, USB LCD monitors and flying zebras. Meanwhile Shannon is investigating a freeware tool that'll keep your folders in sync over just about any protocol.

11

Android SDK, CoolIris and Puzzle Quest 2!

This week Shannon is investigating alternative ways to view web media with CoolIris. Jason is diving into some mobile application development with the Android SDK, and Jenn brings us the latest about Puzzle Quest 2.

12

Disk Cloning and Offline Maps

Week 1 of the Hack Across America series begins with a look at a bare metal disaster recovery plan. Darren talks Hard Disk cloning the free and open source way, while Shannon investigates a number of tools for offline Google Maps usage.

13

Android Abso-defilutely

The Hack Across America series continues in week 2 with Jason Appelbaum and Android user interface development, Shannon Morse and Windows file transfer utilities, and an exclusive interview with nerdcore sensation Dale Chase. Plus, Hackers on Ice!

14

Pronobozo, Metasploit and Ninite

The Hack Across America series continues in week 3 with a phenomenal episode featuring an exclusive interview with Pronobozo. Then mubix joins us for Metasploit 101 part 2, pwning a domain controller via SQL injection an token passing on a fully patched enterprise network. Plus Shannon has a tool that will save tons of time on your next PC build in this week's Snubs Report. Get comfortable, you won't wanna miss this.

15

The LateHak Show, HFS and DSiXL Mods

The Hack Across America series continues in week 4 with what can only be described as the LateHak Show thanks to the enthusiastic folks at the i3Detroit hackerspace. Jenn Cutter joins us from Toronto for a little Nintendo DSiXL homebrew and Shannon has the cure for HTTP file transfer woes in this weeks Snubs Report. Hang on to your plush primate, it's time for technolust!

16

PDF Exploits

The Hack Across America series continues in week 5 with Eighty of DualCore and PDF Exploits and malware analysis. Darren and Shannon take your questions at the Hak5 Springfield MO Meetup, and the perfect screenshot utility in this week's Snubs Report.

17

Home VM Servers and Android WiFi Development

The Hack Across America series concludes after 6 weeks and the first order of business at the new place in the San Francisco bay area is to build an inexpensive home server to host virtual machines. Then Shannon has a Windows power tools two-fer and Jason joins us for some Android application development -- can you way wardriving app?

18

Building a high performance home router

Make your home network scream with a high performance router and firewall. Darren builds a custom network appliance using cheap parts, free and open source software and more power tools than he's typically allowed to touch. Plus, need an online backup solution? Fancy 50 gigs in the cloud for free? Shannon's got the hookup.

19

E3 Expo 2010

This week Darren is joined by Jenn Cutter of OpenAlpha.tv in LA for the E3 Expo. We're taking a look at our favorite picks from the show floor including the latest from Alienware, Valve and Nintendo, plus linux gaming handhelds, wireless PC controllers, latest addition to the rock music gaming scene and much more.

20

Stolen Laptop Recovery and Homebrew Router Part 2

This week Darren is joined in San Francisco by his wonderful co-host Shannon! I know, right? We're talking about open source software that will save the day if your laptop is ever stolen, following up on your password tips, and finishing up the homebrew router build with Untangle!

21

Water Cooling, EXIF data mining and 25GB free cloud storage

This week Darren heads to the Department of Spontaneous Combustion to meet with PC guru Colleen Kelly and get learned up on the arts of water cooling. Then we're joined by Mubix (aka Rob Fuller) for a discussion on EXIF data, geo location, and twitpic privacy. Plus, Shannon has the hookup on 25 gigs of free cloud storage!

22

Virtual Private Networks using your Google account and chipset woes

This week Shannon has a great Snubs Report on setting up a Virtual Private Network using your Google account, and Darren shares some lessons learned in Linux wireless chipset compatibility and motherboard selection in a segment that can only be dubbed "How I walked in for a USB dongle and left with an i7 rig"

23

Fun with Android Root and Monitoring your PC with Dropbox

On this better late then never episode of Hak5 Darren is joined by Hak5 IRC's very own Rkiver to talk Android Root. Then Shannon has just the tool to get a peak at your desktop using Dropbox. Plus, Evil Server and a boat.

24

Bypassing NSFW filters and Android Packet Sniffing

This week Shannon is bypassing NSFW filters while Darren goes sniffing for packets in all the wrong places.

25

DEFCON 18

This week Darren & crew take on DEFCON, the nations largest annual hacker convention and check out pentesting UAV platforms, badge viruses, lock picking, metasploit, capture the flag and so much more.

26

Jailbreaking, VirtualBox PHP GUIs, bandwidth throttles and python streaming scripts

Rounding out season 7 Darren and Shannon meetup to take on iOS 4 jailbreaking, followed by a roundabout way to stream media anywhere online using some open source python scripts. Toss in a little VirtualBox PHP front-ends and Untangle tweaks for good measure. Then Shannon has just the tools to detect network throttling. All that and more on this episode of Hak5!