Episode 1x03
From Hak5
Synopsis
In this episode of Hak5 the crew explores ways to hack RSS into your morning routine with a custom alarm clock and newspaper. Harrison makes us all a little more paranoid about network security with an ARP Cache Poisoning overview, then takes it to the streets. Wess gives the case a break and takes on the IBM Model M beast-keyboard while Alli goes retro with a classic arcade game review. All this plus a flaming-case-mod and a flame-proof blueberry hefeweizen.
Modding the IBM Model M Keyboard
Information on the Model M: http://www.shoppalstores.com/ibmmodelm/ http://en.wikipedia.org/wiki/IBM_Model_M_Keyboard
Creating an RSS Speaking Alarm Clock
- Install Additional Voices (optional)
- First install Microsoft Reader[1]
- Then install the Reader TTS package[2]
- Install Perl[3]
- Download nmake[4]
- Install XML-RSS perl module[5]
- Download the following perl script (rss2html5.pl), which is a modification of rss2html.pl[6]
|
|
7. Download the following TextToWave.vbs
|
8. Create the following batch script:
(Replace RSS feeds as you so desire) 8. Create the alarm.m3u playlist file pointing to your wake-up-song and alarm.wav using the following example:
|
9. Schedule the batch script using the AT command[7].
Links:
- http://www.microsoft.com/reader/downloads/default.asp
- http://www.microsoft.com/reader/developers/downloads/tts.asp
- http://activestate.com/
- http://support.microsoft.com/default.aspx?scid=kb;en-us;Q132084
- http://search.cpan.org/dist/XML-RSS/
- http://www.webreference.com/perl/tutorial/8/index.html
- http://www.ss64.com/nt/at.html
Festival: http://cstr.ed.ac.uk/projects/festival Linux Distors: http://linux.org/dist
ARP Cache Poisoning Attack Overview
Arp Cache Poisoning
I. Tools
- Nmap (win/unix) - http://www.insecure.org/nmap
- Security scanner for network enumeration.
- Great for scanning ports and finding server apps
- Cain&Abel (win) - http://www.oxid.it/cain.html
- ARP attack tool.
- "Password recovery tool" for sniffing passwords
- Ettercap (unix) - http://ettercap.sourceforge.net/
- Arp attack tool for unix
- Supports active and passive disection of many protocols
- Ethereal (win/unix)- http://www.ethereal.com/
- Network protocol analyzer
- Creates excellent capture files
II. Procedure
- Scan the network and choose a target.
- Nmap allows you do get detailed information on the host.
- Cain&Abel also has a built in network scanner if time is an issue.
- Perform the Arp Attack.
- Spoof mac address.
- Start poisining.
- Intercept network traffic with ethereal
- Select the appropriate ethernet device.
- Filter traffic by typing in the protocol.
III. Further Reading
- Check out a tool called Taranis.
- ARPoison (unix) - http://arpoison.sourceforge.net/
- Parasite - http://www.securityfocus.com/data/tools/parasite-0.5.tar.gz
- Dsniff - http://www.monkey.org/~dugsong/dsniff/
- Snort - http://www.snort.org
- Arpwatch - http://www.redhat.com/swr/i386/arpwatch-2.1a4-29.i386.html
IV. Countermeasures
- Certain firewalls will store ARP tables and not accept new entries
- Insecure.org - http://seclists.org/lists/pen-test/2001/May/0106.html
Creating an RSS Newspaper
- Download cURL[1]
- Download html2pdf[2]
- Download nircmd[3]
- Download the following css_2.css
|
|
5. Download the following news.php
|
|
6. Download the following index.php
|
|
7. Create the following newspaper.bat batch script:
8. Schedule the batch script with the AT command Example: AT 07:00 /EVERY:m,t,w,th,f c:\news\newspaper.bat
Links:
- http://curl.haxx.se/
- http://www.colorpilot.com/download.html
- http://www.nirsoft.net/utils/nircmd.html


