Future Developments

This is more of a question than anything else for you guys.

I'll probably be busy with PWB for the next few weeks until I get to college. In the mean time I'm interested in what you guys are interested in hearing from me.

Here are some of my ideas:

1. iOS Security (would have to be after PWB or around exam time due to time needed to setup and other things)
2. Daily Life and Thoughts
3. More fuzzing and exploitation info.
4. My life in colledge as I learn a hacking degree.
5. *Insert your item here*

Leave a comment below and let me know what you think :)

-tekwizz123

PWB Update

Hey guys,

So its been a while. I apologize for that but between traveling and trying to work on this course I haven't given this blog too much thought until now. So time to make up for all of that.

So the course is actually getting much harder now. At present I now have about 9 hosts left in the student labs, I have one on the IT labs and I have yet to get into the admin or dev networks. Oddly though I did find a host that was dual homed, but it doesn't seem to have a network-secret.txt file anywhere to be found, which is a bit odd; makes me wonder if I got into the Dev networks or not. I only have about 25 days left so its starting to get a bit tight. I always seemt o wonder if I will get into anymore hosts, and then I prove myself wrong.

That being said I have recently had a period where I just felt like giving up. I couldn't see any way of getting into these hosts at all. Again this is where enumeration comes in handy, because yesterday I found that I actually was able to get into one, through the sheer luck of testing a random exploit and finding that it worked. I had overlooked that the website was running a piece of software that was still using a default password and thus allowed me to gain top level privileges on the system.

Anyway I won't be touring as much now, this week i will mostly be in one place.

In other news, if any of you are going to the HOPE conference in New York, please, please leave a comment below. I would love to meet you guys in person and have a chat. I know most of you probably won't be in the area (or the country even) but if you are going it would be a pleasure. Details can be found on the website www.hope.net.

A Complete Agglomeration of Fail

Well I guess you could make that two fails now that I look back on this. First fail: I havn't been blogging nearly as much as I thought I would. Then again that might be a good thing considering how much time has been required for this lab and getting the info + hosts I have gotten so far.

But so far is now only a relative term. Because guess what? I deleted my stuff.

How?

Here's how:

rm -rf * (the directory I wanted to delete instead)

Guess what that equates to? This:

rm -rf *

So poor little me lost about a good 70% of his work in about 10 seconds. Yay. Shall I give a little overview?

Downsides:

• Lost all scans and most of my notes.
• Lost all my pictures.
• All files downloaded from machines are now gone.
• All dumped hashes are now gone.
• The notes on the actual exploits for each machine are now gone.
• Pretty much f***ing everything is now deleted or is not available to me.

Plus Sides:

• For some odd reason, shutter happens to save each photo that you take as a snapshot before you choose the save as button and save it elsewhere. So I still have all my photos, just in a different place.
• My memory for things is good, so I should be able to remember most of the exploits for the various hosts.
• Downloaded files are actually not that big of a problem. Most of them were just downloaded because I could, a few actually mattered though.
• The outline format for the notes still exists, so I know what information needs to go where, I just have to get the info first.

Yeah, so my 20-22 or so hosts that I exploited have to be redone again by hand. Double yay.

/end rant

In other news, I will be heading off to America soon to tour countries with my bro for colledge. Internet will be intermittent so if you have me on Skype just know that I won't be on very often. Because ontop of repairing all this damage I also have to try and wrap up the labs and exploit the last couple of hosts. To add to that I will also be traveling around quite a lot, and thus on those 6 hour car rides you can be sure as hell I won't have internet then.

Anyway, just giving an update on what happened and giving you your daily lolz.

-tekwiz123

The Day Before....

Okay so its the day before PWB starts and im super bored so I thought I would give ya all an update.

Anyway, today I'm officially graduating from school :) Ceromony starts at 2pm and as I write this right now its 10:30 am, though I was up at 8 am after by bro busted into my room to find a calculator for his SAT test (yep today is one of those days)

This also means that im going to spend the good part of an hour waiting for my diploma, since i go last as my last name starts with a "W"......yaaay....big woop.

Futhermore that also means my family can't see me either......


Anyway enough about me, and onto my thoughts about PWB. Yesterday I asked around to find what would be the best way to prepare on my last day before the exam and some people have recommended that you do some boot2roots. (A great list can be found on g0tmi1k's website. Search google for "vulnerable by design" and you should find it)

So naturally I downloaded some, specifically all of the Kioptrix ones. So far as of this morning I have managed to get through the first three, though I had to ask for help on one of them (the second level) because the exploit on exploit-db is out of date, and thus won't work, and on another one.

Specifially that second one was an interesting lesson. This is something you may want to keep in mind when pentesting:

• Don't upload php files to a server via wget without renaming them to .php.txt first.

Why? Well, if you don't rename the file, wget will automatically interpret that file for you on the server. Which is not good if all that results in is a shell on your own server rather than on the remote host hehe.

Yeah other than that i'm working on r00ting Kioptrix Level 4 atm, but it seems like one of the files is missing from the archive.....odd, but i'll figure it out soon.

Also have downloaded a few wordlists from g0tmi1k's site in case I need them for bruteforcing and went ahead and printed out his privledge escalation guide that will help me when I get stuck on getting r00t on the linux hosts.

That's pretty much all i have to say for now....lets see what tomorrow brings.

Upcoming Plans and Other Stuff....

So yeah sorry for the delay guys been busy getting stuff done for school (I do have a life outside of this you know :P )

Anyway as of yesterday I have been getting back to more security stuff and i'm happy to let you know that in a few weeks or so I'll be making a post on how to make your own fuzzer in Python and will be taking you step by step through the entire process. Expect this to take a little while as its going to take bit of time to try and explain everything and get it all down on paper.

Expect lots of programming, some internal windows fuction calls and other stuff that generally will make an average mind spin XD Hehe im just playing with ya. So long as you have strong grasp of some programming language, you should be fine. 

In the meantime, here is a video of the finished fuzzer running in action by downloading the video from here (apparently SWF files aren't supported by youtube or many popular video sites.... :(  :

http://www.filedropper.com/firstpythonfuzzerinaction

Hello there

Hey there people :) Welcome to my blog. Here I'll be posting thoughts, feelings, reflections and other stuff on security. Expect to see some of the following:

• Privacy
• Web Application Security
• Exploit Development
• Assembly Basics
• Whatever else comes to my mind....

Cya all around :)

-tekwizz123