Re: [MLUG] hacking contest

[Phillip Kelchen <EMAIL:PROTECTED>]

I've not actually *tried* Airsnort due to a lack of encrypted wireless 
networks to crack (all around me are unencrypted!) but I do have a 
Lucent Orinoco 802.11b card that could use the hostap_cs drivers to do 
so. Ethereal is also pretty handy for non-hacking situations such as 
finding out IPs of things on the network you're on so you can use Samba 
to connect to them if there is no server. I do this on my little network 
in my apartment as I have seen only typing in smb:/<ip address>  works 
to connect. Of course, the Windows computer can see my machine in their 
Network Places, but I can't just type in the Windows computer's share 
name and connect. If you know any way to help with this, I'd like to know.

Phillip

Nathan Odle wrote:

> Nessus would without a doubt be a highly recommended addition to the 
> toolset.  On the wireless side, I'd add aircrack and be sure you have 
> either a Prism or Lucent card on hand.  Ethereal and Snort would also 
> be handy to keep an eye on what attacks seem to be succeeding.  
> Ettercap also comes in handy for both monitoring and crafting packets 
> in addition to various pre-wired attacks.  There's also a Linux boot 
> CD out there that allows you to reset the password of Windows 2000/XP 
> machines.  Hardware and software-based keyloggers could find a use if 
> physical security is lax, as could a CD, floppy, or USB flash drive 
> carrying a "special payload".  Access to the bugtraq list can help 
> find vulnerabilities/exploits for various software and hardware 
> devices.  All these items have proven themselves valuable while 
> auditing my own networks.
>
> It goes without saying that one should make sure the host machine 
> they're working from is fully patched and firewalled :)
>
> -N
>
> Phillip Kelchen wrote:
>
> > I'd assemble a bunch of script-kiddie stuff, password-cracker utils, 
> > and Airsnort. You gotta come prepared!
> >
> > Phillip
> >
> > Jonathan King wrote:
> >
> > > On 7/7/05, Mike Miller <EMAIL:PROTECTED> wrote:
> > >  
> > >
> > > > On Thu, 7 Jul 2005, Jerry Gamblin wrote:
> > > >
> > > >  
> > > >
> > > > > Can I show up and just start hacking? I don't work at the 
> > > > > university but
> > > > > I never pass up an opportunity to try to break someones network!
> > > > >     
> > > >
> > > >
> > > > http://iatservices.missouri.edu/safe-computing/vulnerabilityhunt05
> > > >
> > > > Registration
> > > >
> > > > The event is open to all MU faculty, staff and students, but 
> > > > registration
> > > > is required. Participation is limited to 40 users, so register now 
> > > > before
> > > > it's too late.
> > > >
> > > >
> > > > Too bad.  That limits MLUG's chances of victory!
> > > >   
> > >
> > >
> > >
> > > Well, we could have Team MLUG headed by either me or Stephen or
> > > whomever that could take advice/suggestions via email...
> > >
> > > jking
> > >
> > > _______________________________________________
> > > members mailing list
> > > EMAIL:PROTECTED
> > > http://mlug.missouri.edu/mailman/listinfo/members
> > >
> > >  
> > _______________________________________________
> > members mailing list
> > EMAIL:PROTECTED
> > http://mlug.missouri.edu/mailman/listinfo/members
>
>
>
> _______________________________________________
> members mailing list
> EMAIL:PROTECTED
> http://mlug.missouri.edu/mailman/listinfo/members
_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members