Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - lucid

Pages: 1 [2] 3 4 ... 6
16
Tutorials / Mac Spoofing with systemd
« on: January 22, 2013, 02:16:45 am »
                               Mac Spoofing with systemd

// This tutorial created by lucid

::In this tutorial
- Creating custom systemd scripts(Arch Linux)
- Mac spoofing at startup



::What you will need
- Arch Linux switched to systemd. If you do not know what this means visit the Arch Wiki.
- The ability to read.
- A text editor. (nano, vi, emacs, gedit)
- A penis or vagina. (but not both)
- Macchanger


::Let's Get Started!


For those of you that do not know what systemd is and are interested in switching over to it should visit the Arch Wiki here https://wiki.archlinux.org/index.php/Systemd and read through it carefully.

Now. What I'm going to be showing you today is how to write a custom startup script or .service file in systemd. It actually took me a long time to figure out how to write a script and have it run at startup in systemd. It is true that if you are running some WM like openbox/fluxbox you can put your script in an autostart file and that shoud normally do the trick. I should be specific. In particular I'm going to teach you to write a .service file that will spoof your Mac address at startup.

Here's the basic format of a .service file in Arch Linux:

Code: [Select]
[Unit]
Description=
Before=

[Service]
ExecStart=

[Install]
WantedBy=

These are usually located in /etc/systemd/system. Take a look at a few of them if you like. As I said before I just showed you the basic format of one of these files. If you're already sick of reading I assure you this tutorial will be short and to the point. These are very simple.



Description=

This is pretty straightforward. All this is, is what you will see in the startup messages you will see when you boot up your system if you have systemd. So for example.

Code: [Select]
[Unit]
Description=Mac Spoof
Before=

[Service]
ExecStart=

[Install]
WantedBy=

Notice what it says in Description. When you start up systemd you will see a bunch of messages on the screen looking like this:

[   OK   ]Started Network Manager
[   OK   ]Started Mac Spoof << This is what ours will look like

Pretty simple.



Before=

This is basically where you put a service you want your custom service to start before. You could also change it to After=. For our example we will use this:

Code: [Select]
[Unit]
Description=Mac Spoof
Before=dhcpcd.service

[Service]
ExecStart=

[Install]
WantedBy=

The reason we put this in the Before= area is so that your Mac will be spoofed before dhcpcd. That way, you don't have to reconfigure the network after you start up. Lets move on.



ExecStart=

This is where you will put whatever script it is that you want to run. In our case we will be using our macchanger script.

Code: [Select]
[Unit]
Description=Mac Spoof
Before=dhcpcd.service

[Service]
ExecStart=/bin/bash /home/lucid/code/sh/macchanger.sh

[Install]
WantedBy=

The /bin/bash before the path to the script is to make sure it knows that you want to run a bash script. Otherwise this won't work. Also, you have to make sure that you use the full path. In case you aren't sure about this part I will show you my script that I called here:

Code: [Select]
#! /bin/sh
sudo macchanger -r wlan0

If you can't understand what I did here you should read up on macchanger. All this does is set you interface(wireless in my case)mac address to a random one(-r).


WantedBy=

This creates a symlink in the .wants/ directory. Doing this enables whatever service you put here along with your custom service.

Code: [Select]
[Unit]
Description=Mac Spoof
Before=dhcpcd.service

[Service]
ExecStart=/bin/bash /home/lucid/code/sh/macchanger.sh

[Install]
WantedBy=network.target

This way, the network service is started along with our macchanger service. That's about all you need to do to write a very simple .service file. For a more detailed and harder to read documentation you can refer to man systemd.unit. Also, don't forget to put this in /etc/systemd/system and name it something like macspoof@wlan0.service. or macchanger@wlan0.service. Make sure that after you create this file you run systemctl start macspoof@wlan0.service to enable your new service. Oh, and one more thing. Before you do this you can run this command:

ifconfig wlan0 | grep -o -E '([[:xdigit:]]{1,2}:){5}[[:xdigit:]]{1,2}'

To see what your mac address is. After you have done this, run it again to verify the change of mac so that you know it worked. I hope this helped someone who is either looking to create their own system service files and/or spoof your mac address on startup in Arch linux. Thanks for reading.



-lucid

17
General discussion / Started some online schooling today.
« on: January 15, 2013, 01:47:17 am »
And wow is this going to be boring. The only classes I'm taking right now are Intro to windows  :( and Computer Ethics  :-\ . The very, very end of the Windows book is about running disk cleanup  >:( >:( .

This should be fun. Had I had the money I would of tested out of all of these instead of just Computer Literacy. I can't wait to get to some interesting classes.

18
Operating System / Macchanger in obmenu
« on: January 02, 2013, 03:03:36 am »
I've been trying to create a macchanger option in obmenu similar to being able to go to the menu in backtrack and select macchanger and have it show the macchanger help menu. The problem is that when I put:

Code: [Select]
urxvt -e macchanger -h
It shows it and exits urxvt. I want to do this and have it leave the terminal open. So far I've tried the read and sleep commands but it doesn't achieve what I want. Any ideas?

19
General discussion / Can someone make sense of this error for me?
« on: December 19, 2012, 07:43:45 am »
I got this when trying to mount my external truecrypted device:

Code: [Select]
mount: wrong fs type, bad option, bad superblock on /dev/mapper/truecrypt1,
       missing codepage or helper program, or other error
       In some cases useful info is found in syslog - try
       dmesg | tail or so

So I ran dmesg | tail and got this:

Code: [Select]
[  157.832141] sd 9:0:0:0: [sdc] Attached SCSI removable disk
[  181.324341] device-mapper: uevent: version 1.0.3
[  181.324426] device-mapper: ioctl: 4.23.0-ioctl (2012-07-25) initialised: dm-devel@redhat.com
[  181.923021] EXT4-fs (dm-0): mounting ext3 file system using the ext4 subsystem
[  181.967791] EXT4-fs (dm-0): ext4_check_descriptors: Block bitmap for group 512 not in group (block 105682011)!
[  181.967798] EXT4-fs (dm-0): group descriptors corrupted!
[  369.387981] warning: `VirtualBox' uses 32-bit capabilities (legacy support in use)
[  427.638613] EXT4-fs (dm-0): mounting ext3 file system using the ext4 subsystem
[  427.684393] EXT4-fs (dm-0): ext4_check_descriptors: Block bitmap for group 512 not in group (block 105682011)!
[  427.684401] EXT4-fs (dm-0): group descriptors corrupted!

So what I want to know is how to fix it if I even can. If I can't I'll probably commit painful suicide because this container was VERY full of VERY important things and ALOT of them. I've downloaded/found this stuff over the course of a LONG time and it fucking sucks that this happened. Fuck

Thanks.

20
General discussion / Computer Literacy
« on: December 13, 2012, 10:50:13 pm »
Went to the college to take a proficiency test for computer literacy(CIS 110) because I don't want to take that dumb shit. Pretty sure I passed because I passed every test except Microsoft Excel and Microsoft Access.

Almost passed Microsoft Access even though I've never used it in my life.

Other tests I took were:

Computer Information Systems test(something like that)
Computer Information Systems test multiple choice
WindowsXP/Vista(because I know what the place where deleted files go is called)
Microsoft Word
Microsoft Powerpoint

Failed the shit out of Microsoft Excel  :P . Fuck you I never use any microsoft programs. To me it seems a little unfair to judge someones computer literacy based on Microsoft office programs.

For example I failed Excel but using something like netcat or wireshark would probably be considered advanced for a computer class. Although I've never been to college before so I don't know. Anyway I'm happy about testing out of that class I'd probably kill myself with a blunt object if I had to learn how to use Word in school.

I suppose I could have studied beforehand  ::) . (There needs to be an emoticon for hysterical laughter)

21
Video Tutorials / milw0rm Hacking Videos
« on: December 07, 2012, 04:42:25 pm »
Hey guys. Here's a bigass package of hacking related videos created by milw0rm. Set aside from time for this one  ;D

The archive contains :

Simple SQL Injection
Advanced Mysql Injection in Joomla
Aircrack-ptw 
Anonymous Voice Vlan Hack
A Small Rooting Video
Attack on Windows Systems based on the ActiveX Vulnerability
CA BrightStor ARCserve Backup Remote Heap Overflow Vulnerability
Classical Basic Local Buffer Overflow
Clientless WEP Cracking (fragmentation attack using the air crack suite)
Cracking the Bluetooth Pin and Link key
Cracking WEP in 10 Minutes (whoppix)
CRLF (Carriage Return and Line Feed) Injection Demonstration
Cross Site Scripting HQ 0 Day
Demonstrating Exploration of Simple Buffer Overflows
Demonstration of Blind MySQL Injection (bsqlbf)
Dns Spoofing
Ettercap Video
Exploiting Microsoft RPC DCOM using Metasploit Framework
Exploiting SW Vulnerabilities
Faking wep using linux wifislax
Find, Exploit & Cure XSS w0rms
Hacking Mac OS X - A Case Study
Hacking SQL in Linux using the SecureState Swiss Army Knife
Hacking up Bluetooth with his WIDCOMM Code
Heap Overflow Basics
How to Exploit Stack Base Buffer Overrun Under Windows XP SP2
How To Founding Win32 Stack Overflow Exploit
How to Make File Undetected
Howto using aircrack-ptw WEP cracking
ICQ 6 HTML EXECUTION AND CRASH
Intruders D-Link Wireless Access Point Configuration Disclosure
JPortal CMS SQL Injection Exploit in Action
JSP 1 or 1 SQL Injection Demonstration
Learn Stack Overflow Exploitation
Local JPG shell Inclusion (LFI using php injected JPG)
LSO MSFweb 3.0 part 2
Metasploit 3 Video (msfconsole with db_autopwn)
MSF-eXploit Builder in Action
MS-SQL Exploitation Video
Multiple Websites Embedded SWF File Vulnerability Demonstration
Packet sniffing with Ettercap (arp spoofing basics)
Patching KeyGenMe with OllyDbg
phpBB Session Handling Authentication Bypass Demonstration
PHP Remote File Inclusion  Windows Backdoor
Quicktime Media 0day Exploit Video
RealVNC 4.1 Authentication Bypass using Metasploit Framework
RealVNC V4.. Bypass Authentication Exploit Video
Reverse Engineering with LD_PRELOAD
Rooting SQL Server via SQL Injection
Simple ASP Administrator SQL Injection
Terminal Server  RDP Cracking
The dangers of Ad-Hoc networks in Windows XP SP2
Tunneling Exploits Through SSH (whoppix)
vBulletin XSS Demonstration with Session Hijacking
VNC Authentication Bypass Vulnerability Video
(WBB Portal) Cross-Site Scripting Using Unsanitized jpg File
Webmin File Disclosure Demo
Windows Server Rooting (Remote Desktop Connection)
Windows Shellcode
WMF + SWF Exploit
XSS injection in image formats  Taking advantages on it

http://upload.evilzone.org/download.php?id=8809729&type=rar

22
Anonymity / Securing my disk
« on: December 06, 2012, 05:25:11 am »
Perhaps there is another section for this, if that is so then feel free to move it.

Ok, so I have a few questions. Linux answers only please.

1 - Is there a good way to perform full system encryption without formatting the whole damn computer, or reinstalling?

2 - If no, is there a way to encrypt directories such as:

/tmp
/var/tmp
/var/logs
/var/cache/apt

without damaging them or damaging my system?

3 - If no, is there a way to mount them as tmpfs or something. I edited my /etc/fstab and mounted all of these as tmpfs and when I rebooted my system wouldn't start up. How do I avoid this?

4 - Is there any other directories where temporary/partial/sensitive info would be stored besides the aforementioned directories?

Thanks a bunch.

23
eBooks / A tiny pdf on aliens and the NSA
« on: December 04, 2012, 02:17:45 am »
A small but very interesting snippet about NSA and aliens. I skimmed over it very breifly but it looked highly interesting.


http://upload.evilzone.org/download.php?id=1424185&type=rar

25
eBooks / From SQL Injection to Shell
« on: November 29, 2012, 06:07:00 am »
Quote
This course details the exploitation of SQL injection in a PHP based website and how
an attacker can use it to gain access to the administration pages. Then, using this
access, the attacker will be able to gain code execution on the server.
The attack is divided into 3 steps:
1. Fingerprinting: to gather information on the web application and
technologies in use.
2. Detection and exploitation of SQL injection: in this part, you will learn
how SQL injections work and how to exploit them in order to retrieve
information.
3. Access to the administration pages and code execution: the last step
in which you will access the operating system and run commands

A good walkthrough from starting SQLi to gaining administrator access imo.

http://upload.evilzone.org/download.php?id=8562562&type=rar

26
eBooks / Nuclear Matters Handbook
« on: November 29, 2012, 02:54:19 am »
Quote
The Nuclear Matters Handbook is an expanded and revised version of the
earlier Nuclear Matters: A Practical Guide.  Originally published in 1991 for the
use of Action Officers associated with the Nuclear Weapons Council, previous
editions have been modified over time to meet the needs of the larger U.S.
nuclear community as well as those outside the community who seek a better
understanding of the subject area.  Since the early 1990s, the U.S. nuclear
program has evolved significantly as a result of unilateral and bilateral arms
reductions, the end of underground nuclear testing in the United States, and in
response to the growing threats of nuclear proliferation and nuclear terrorism.
This revised and expanded handbook can be read cover to cover for those
who seek to understand the U.S. nuclear program in its entirety, and can
also be used as a reference source to look up useful facts and information
concerning specific areas.  The book is divided into chapters and appendices;
the chapters present an overview of the U.S. nuclear program as a whole, while
the appendices provide supplementary information on related topics for those
less familiar with the subject matter.  An Executive Edition of this handbook
includes only the chapters without the appendices, for those preferring a more
concise overview


http://upload.evilzone.org/download.php?id=7126507&type=rar
For those who are interested.

28
Web Oriented Programming / File permissions in php
« on: November 20, 2012, 05:54:36 am »
Sorry for such an uninteresting question. But, here goes. For some reason fopen doesn't seem to work for me. Here's the relevant part:

Code: PHP
  1. $fileName = "file.txt";
  2. $fileHandle = fopen($fileName, 'w') or die("can't open file");
  3. fclose($fileHandle);
  4.  

When I run it, it simply returns "can't open file". I've made sure to chmod the file to give it write permissions but it still simply won't work.

29
eBooks / The Hacker's Dictionary
« on: November 20, 2012, 02:49:45 am »
Quote
This document is a collection of slang terms used by various subcultures of
computer hackers. Though some technical material is included for
background and flavor, it is not a technical dictionary; what we describe
here is the language hackers use among themselves for fun, social
communication, and technical debate

http://upload.evilzone.org/download.php?id=8372739&type=rar

Woohoo

30
Found it on the Webs / Custom homepage
« on: November 12, 2012, 08:50:33 am »
Thought this was kinda cool.. All you do is pick a background(or upload your own) and click the option to set as your homepage. It uses google.

http://www.shinysearch.com/

Pages: 1 [2] 3 4 ... 6


Intern0t SoldierX py1337 SecurityOverride programisiai iExploit
Want to be here? Contact Ande, Bluechill or Kulverstukas on the forum or at IRC.