View by:

Session Hijacking and Virtualizing Servers

Wednesday, November 19th, 2008 – running time 54:53
Session Hijacking with a Pineapple, Hamster and Ferret and cell phone? A free and easy way to virtualize physical servers! And is WPA Broken? Ikea clusters, screencasting, and canvas technolust.

Is WPA Broken? Interesting stuff coming out of PacSec this year. Ars has a great writeup about it our check out Martin Beck and Erik Tews' paper Practical attacks against WEP and WPA (PDF). There is a proof of concept tool available from the Aircrack-NG folks. Take a look at Tkiptun-ng. At time of writing the tool is not fully functional. Something to keep an eye on.

Steve P. writes to us about the Helmer beowulf cluster. This 6xCore2Quad is sure to make any geek smile. Kitty approved too! While stuffing a personal cluster into an Ikea cabinet is novel in and of itself the mad scientist behind it has thought some insane cluster designs including the 50 tflop Helmer 2 and the 4 pflop Helmer 3. All I can say is I want one. Thanks for the links Steve.

Darren enjoys a Bondages' No Problem while Matt and Shannon stick with the margaritas.

More importantly Darren talks about Session Hijacking and demos a tool from Errata Security called Hamster and Ferret that, in conjunction with the latest 2.0 build of Jasager, an ICS'd EVDO connection and Tftpd32 we're able to "sidejack" with our little man-in-the-middle setup. Lesson learned? Be suspicious of any wifi. Check for signatures of trusted networks and tunnel your traffic. We'll come back to this topic with a more indepth segment on Jasager detection and traffic encryption soon.

A note on trivia. Please answer trivia questions on the Hak5 forums from now on. We would love to continue doing dual winners but with growing prize costs we cannot. Also, if you're interested in volunteering to help with trivia code challenges lend a hand in the Dev5 board.

Matt shows us how to convert a physical server into a virtual server locally using the free VMware converter tool and talks about some of the concerns you must consider when preparing to virtualize. If you have virtualization questions hit up Matt and we'll cover 'em on future segments. Matt at Hak5 d0t org.

Alex W. writes with a question about screen recording. We highly recommend the open source Camstudio as well as FRAPS and Techsmith's Camtasia Studio (warning: sticker shock may occur at techsmith.com). Paul (our "camera guy") suggests checking out the new screen capturing functionality of the latest verison of VLC, especially if you're on the Linux or Mac side.

As always we'd love to hear your feedback. Your questions, comments or concerns can be directed to HakHouse.com. It's a crazy interactive project we're working on. Just wait 'till we get the web-enabled robots up in there. ;)

Trust your Technolust

Highlights
Microsoft Windows ( 36:13 ) open source ( 46:07 ) operating system ( 37:31, 40:58 ) local art ( 24:39 )

Automatically Generated Transcript(may not be 100% accurate) ( more )

" Wow. This episode of -- five is brought to you by -- start to GoDaddy Netflix. And -- it because in this economy it's hard to -- and you."

" And this someone -- five is WPA broken IQ clusters session hijacking. Fertilizing servers screen casting. And -- technolust. Gays just once you really want to. Three rocks that. Okay today. I'll show you. Hello and welcome to hack part of this is your weekly does technolust and we are -- I teenagers I'm an engineer and I'm -- I'm pirates in. Austin of them obviously great you were getting some VMware's."

" You wanted to do is -- multi are on -- virtual infrastructure. So basically start the process stop by converting physical machines virtual machines. -- and all of that and at a final stage X show you guys centralized storage. Using some free tools so that you know it's not caution light."

" Virtualization is lot of it is the other day I was trying to put together and you set him blocks and as a matter and I'm like -- and he used to build -- thing. He's like I don't know it. Cracking windows box altered to web cams on it -- downstairs and in addition the -- downstairs to be awesome right atom and -- opened up for VMware server. -- to build machines or realist science and -- machine here yeah I was a very sad continue to some virtualization that the physical server from."

" On. Well you can pretty much do what I'm gonna show you and transfer the image over time remotely. You want me to basically create a -- Mike you know Mike. And exactly I."

" is like three -- you please take me user. -- Where advanced when -- cool well maybe on episode. Twenty X twelve. You know -- the -- In addition it lately too much on and on its. -- Let me get. Cool well you're doing what you've got I've got. I have to do not just one true -- is a deadly -- and a the other ones."

" Now -- you're gonna be -- in -- people. People -- said that they wonder -- and -- come up with something new. Besides. Jasager now will what you're actually doing is it like -- re -- you."

" Utilizing Oscar and isn't emergency -- but it. The whole idea of the Oscar quality was it was area oh my god that his -- and yeah build on. For future presentations hacks whatever and so on going to be talking about session hijacking. And to -- that of course. He he's way I can think can't get a -- man it'll go would be with a -- but but I mean that that's just -- Right so on and -- session hijacking cookies. To steal them and plug in coach but -- injury. Column -- no problem it's about two runs in triple -- and reduce penalties. Well granting -- credit -- support and he it's just last so you hear about the Adobe said he didn't scared. So for those have been."

" Live and really real target rich environment. L player and it's an important thing is that the first time that that he has cracked -- so all new WEP. -- able from the very beginning. There are beginning did you are so skeptical wireless you're like oh my god you knew you where are gonna like oh guzzling praising god that -- like it."

" Yeah okay. -- interesting stuff coming out packs -- in Tokyo and there's actually proof of concept tool they can get -- air package deal hobbling. -- and -- it's not fully functional the moment but there's actually proof of concept -- that you can play around with. Few up together your own little you know it's it's basically taking stuff doesn't resist his idea practical. Practical attack against WPA WP. And turning and it hasn't that you can play with it's not. Super. Eight have things ready for prime time so went one."

" Don't want to talk about what -- all of these -- everything's going and I mean they've got one way it works."

" Right and this is only on WPA using TK IP. So you're using a guest totally not sell the UPS two --"

" And that -- to show people how to because wireless range you know anymore and you remember when a came out. Like oh it's gonna be to complete corporate enterprise solutions -- gigahertz and it didn't work for (%expletive) yeah and you couldn't use it through like thick walls concrete or whatever. I think we should person and it is engine. Show people how to link wireless routers together and."

" Yes it is because we get something similar don't wanna hear another. Another 68 through here turned out to -- in our access point it was the drivers and now I'm getting like six negative -- that stuff."

" He has been bugging me for the last. Month. And a half ever since I put in the new wireless route around indeed WRT which is scrutinized by."

" Drew ericsson's point so Oxnard and -- speeds meanwhile there's no problem. From the driver later but who would become true which doesn't somebody else utensils and drivers. It's."

" Opening my neighbor. Yesterday. And think about everything you -- work. Actually I. Mean their apps and and the -- part. Is my what did you call."

" That it's the Malibu laptop. The party. It's that are on board the bar hardware -- this -- toys than president and I'll tell me -- yet."

" Failure to meet viciousness we've got walnut is Fisher price is the not a news. And then that is. Yeah its pocket toys. -- Rule -- you mean. Like they're like it I don't understand it if I needed one if I had like seventeen inch. But if fifteen I can reliably put on a plane and no space issues even if I mean coach which were never happen. -- Tip the last I type that -- grasslands. But I mean it is clear room for me do my stuff even coach I don't need in you know it's like I don't go to -- its ups. And I like called -- and I don't like pretentious. Crack it obvious."

" As we can digress from here. And -- report regalia and note from. Whenever you're talking about. The clustering is pointed out to us the story of homer if they limit I don't know Nike cabinet. And it's it's very interesting read. That the first homer was done. I think with like he works six I was six boards quiet hours and 48 gigs Aaland. It's gore Kerry and 86 to flops if you see homer to like this the potentially the idea and then home Mercury and it just hurts me you don't want to elementary. I don't I don't know I don't have it take down."

" I mean you know its its good because. Thinking outside the box -- clusters and I found him yet. But I don't know."

" Currently there's -- racks and shelves -- line. I don't think about cooling them so -- close it would probably. Her. You should do if you start Indonesians of people's old -- now don't don't don't know it don't know we should. Know. And you know I fixed now I don't know -- know yeah very yeah -- we are. We're gonna search -- the Lan parties. Here. And it's gonna again."

" I don't want to mention though."

" My birthday was gets it. Right. --"

" Oh yeah that's right don't luckily. Talking about here -- in June. 8 and eleventh Nat."

" I have no idea what your -- in the past eight. At twelve."

" Kennedy -- to get on in the Lan party okay."

" You add this. Next week we have a Lan party coming up its November 20 ninth that Saturday. At games dot tax I've got -- of course you guys probably know that website right now that there. We're playing a real turning classic. And what I hear Darren pretty good thinking back I don't know I've owned a couple of times so. Can't -- right around that it anyway if you -- playing against him in this game second up complaint was that."

" It is good to read up on Warren's under the gaming session -- good sign up from one you want it. My -- you did you know come on hope hopefully."

" I'm pretty sure weakly against each other -- percent of it yet it out I only hours -- to St."

" Put that out about it and you know. I'm not mind that she's had Jesus on a picture of my own personal use this on my side. Little spring to me -- Jesus. Well it's -- Yes."

" Yeah. TOS. If you look at that right now. Tell you but as our sponsor for the Lan party. It's GoDaddy think so much good ready for sponsoring our episode. Keep your personal information only from spammers hackers into crazy -- remain private domain registration from -- dot com protect your privacy by keeping your address phone number and more out of the public database plus good that he recently started registering dot Diego. In if you use code HEK to you can get five dollars off a thirty dollar order. Some restrictions applied to the site for details and get your piece of the Internet and godaddy.com. -- my Margarita and it back to you guys."

" Has your dreams and -- and -- a two day countless new. And struggling to find yeah. And print news. -- Credit checks and look -- Starting at 99 months. Yeah -- difference in the news. And you'll find -- yeah. Yeah. And dot com."

" Our guys well in the comments of that -- Portland and username. On it asked us. -- you've created this UN Robin. But he. So what are we gonna do."

" Well I mean. The idea was to build on this throughout -- season as a platform talking about a lot of stuff and the thing is a lot of fun stuff really relies on being -- and the medal right we talked about that first season we've shown how to do things like our cache poisoning. To get man in the middle using windows tools like -- whenever. It's nice because it's a simple -- His apartment and he quit -- adventures."

" And everybody's kind of it's our patents and it does its -- thing so there's no real setup required on your hands yeah to go ahead and you know become okay I gotta run this will this'll -- in the -- and we can just have people connect and."

" And then the rest -- and that just takes. The whole leg work out of it analysis. Come -- you might precious right and we can start having some fun so. It's. Talking about fun let's talk about session hijacking let's talk about stealing those assume important cookies. So you know when you blog and web sites they keep your session throughout you know as you can you audiences in the -- that page that page that page here still in this system you log in -- it's fashionable --"

" I'm only doing it speaking of even the most secure web sites on earth and use sections. And include what we're gonna show what you're gonna show is how to look at your cookies are okay."

" Yeah because check this out right this cookies that -- and -- is okay when you've got this cookie -- you working you can -- right right. I'm sniffing and everything in between you're connected to me. Too much on an in between you and you know the Internet so I can see that -- so -- Take a cookie and I can liquid fire fox plug in life. Like cookie edit you can. Injecting manually in the news and web site Alexa and their one wranglers shark or with another tool. You can actually make this a little bit more easy little bit more automated. To hijack this puts cookies hijack sessions and so the idea is. You go to web site you log in I noticed it I -- the same website. And -- you employ the same test."

" More importantly everything that we've done has shown the font ads. You know hooking up to a wired you know computer war you know wireless network that you know it's already you know next two or something like that. And you actually got it set up so that. And this is running car got secure version two yes so that is actually connected through your phone."

" Correct and good to see what's going on here -- India and they've got severe versions you definitely check out. It was just recently released -- platforms. A couple of nice features like for example the W and play like -- Hartman activated and some some under the -- stuff that makes it pretty. So if you take a look at screen here. This national access robbed in this this guy here this actually my. This my connection with consultancy edits on packets gone on. Through here that's totally cool because people are using. Openness and -- here. It's just -- simple direct connection USB cable to my Blackberry and I get online. I can do this through blue cute but I -- bandwidth with the and I'm just doing this in windows this example. And amusing yes in and sharing which on mine. On my Blackberry in your -- it might even you -- them. Is here our connection to. My wire connection can do the same thing with wireless. You do it is the Bluetooth wireless then on you one pocket and a cell -- and another pocket a laptop here people let. Look at you -- me so happy I branded Oscar. Thing that little. Definitely and immediately here. Bandelier what we need. So the biggest issue. Will with a lot of people getting Fed up with this is okay great people suits it too. -- on here tonight -- pineapple if you will. And it's. But then they need IP address and the need and connect to the units for me on windows and I CS myself down they go through that and then. Here's the trick. That but the HCP server not set up on TCP knows that he's in the web interface and that there. It's totally -- and -- it nothing really complicated and networking. In -- not. But I've got it physically connected with you -- Q -- here. Over to my laptop and -- that this interface -- as the HCP server in windows I mean. When users who three this would be it's not just built it. Cameron and XP -- nothing special -- terror. And one of the best ones and I think it's an overlooked is actually. He he TV yes he indeed -- for. The he stands world and blinking. Is that what is -- disease it would only cool I had written the re use TTP. Way and we want to use things like PC news network hears a click or. Winners act. Actually this the cute little partner here when is. AT TP server built in a scene that's as part of the -- Right. And I'm using that in conjunction with yes."

" You you know leopard. People money sucked into the -- An IP address here. And it opens them up. And then. It here. Whitmore IP addresses a fine. Then our our test environments. Now. -- Soul. And comfort in. Plain -- in the here is the one quality. Access in external. So -- is. And ID that's. Interesting in its X. Is. Here. The one with 6. X. One X one one. My eyes on. One 250. So wireless news. And some other society and -- 11. Were rumors. Once you. War. Regardless."

" You're now connected to the Internet. Through the -- Fungus my computer computers on your DH CP. And gives you the Gateway myself found it's just a matter of telling. Telling that T and that he FT PD program in the DH CP configuration. What IP address used as the default routers right. Thank you you do and I can take."

" Over the years. You're here victim on -- more we'll just please mark on the mark is mark. On the anger IT so I'm connected to. While I'm connected to the excesses external. Yeah just like -- you know fifty miles away yes which is my offices external yeah arts connection. But I've got an IP address here."

" And it's in this one -- you like -- and and he continued on Gateway is the 111. Which is my ethernet interface here so. I don't got packets offline. It's time to start. Sniffing okay not do something as easy as just firing up wires are here and we talked about this annex in. You know access with Chris. And it ago and you that you like rats and some web page. Capture. Interfaces. She's -- Wired. And start that -- aren't -- it. And there -- you know I can I can actually. It's it's way too much as you can see here places go. Is gone and gone and gone and policies and history and I can hear. And quality constraint. And I can actually watch you know as the human concern -- and CSS right now to come down here it's mainly just assess. -- the hack platforms is that platform yeah I'm watching RC SS. Yeah and nothing too exciting I think we're missing a cynical on there now what. Lookin' for the lady in the address even as we've talked with Chris in the past about setting up filters and -- setting up colors and whatnot. Nothing easier than twelve it is equally odd couple of sessions stealing cookies and they're constantly that. So that don't you ever so we restart the pineapple and now the next few tools. Our spirits and the answer. And you could search on YouTube these few things -- end -- with hacking is no you're not now know magical land use or January it is a fuzzy and cute. The one on the piano with popcorn is often us yes. And again that wire story here in Andy's T tools. Or what we have our first okay so the first thing we're gonna wear a command prompt. Yeah Mario. Guy I've got an -- to see how he's the first one and a so these are from. These tools. Or from a -- security okay you can go ahead and get these at the epilogue I've got everything in the show and it's forest and the technique. This is something that they demonstrated at Defcon and technique is called hijacking. -- So we go ahead and -- this will -- this tool. And first thing you want to do is going to fire up there it. With the command line option dash capital W. Okay that's going to list all of -- or interfaces and I got a bunch of six interfaces on this machine VMware might dial up connection up. But if -- look closely here connection number five. Is my real -- 10100 Gigabit ethernet that your wired. That's my -- that's the one -- one years so then I just run it with dash luckiest guy. And number five to tell me I'm when he's in her -- in -- got it running here she looks like this is it okay. So this is fair I know its its its just. Right it's. It's really just a it's a specialized. Kind of and Pakistan for the just looking for one thing it's looking for. Some. Cookies so we can clone them and we can. Session next. That there in this next part of the parent is. It never -- should restore -- okay so we're on -- answer thank you. Yes it does mean. -- An ongoing really fast on this and promised. It's -- gonna and fire camps -- here right. Hacking tool. What this guy does is it it's a beautiful little fees for me so that I can partner partner. And the trick is. On there got you connected through -- looking out just good. And then hands it was he answered well I can't we hear. And secondly tools and options and fire fox and under advanced network. Settings and I -- changes that it. Use a proxy. And want to use my local proxy because it's not -- local art on him in wonder local. On port 31 when he. Good news for everything and and once you do that you can head over to. Sweet little -- over at HTTP -- eyes hints there. There we go -- one point us hijacking tool. And look at this. 191681. That -- three that's me yeah exactly -- looking gossip here I get the -- internal I've got your Mac address here. All that looks -- a look at TT BD and it looks in Mac address 113. And hire wire shark -- higher up can -- Mac address -- I can you know see. You know everybody appears so here you war and and so you are the mark on my EPC yes. Okay sonnet -- shout yes he gets an extra keys there with the Apple's doing."

" Yeah about that so what I'm doing is I'm here caught up. And you know because. That's. Awesome. MySpace and where it might for a I'm getting them from. US. But I don't know that."

" Course because using your your work that point why you'd be on your access point. Shop is beyond me. I mean people are. -- Ultimately there's a good -- there's actually it's either they unplugged you might see it. Here my hands and when that. Include go. And I get these beautiful list of all these places that -- with easier read here. And -- Hey -- this. Platform arms -- myspace.com. And click my. And look at that. Now logged in as -- you log into my account but right. But it's because I it because. -- found it. -- And then on Firefox using and you can you check whatever you want from -- going to edit your profile and be like you know."

" It's. About all of your home page and be like you occasion like this --"

" Personally I love this is but you know what that's just me now look at that being said we've had comments and questions about how do we protect ourselves against Yasser. How do we protect ourselves against this."

" I can give you much longer and neighbors and my second birds and if you work access point that night you were attacked -- you. If you know network like this one you know IP address of one to. Expect it. That's not here you know you might be suspicious. You -- so theaters and the other devices on the network so. I know about ten and 31 I see a computer upstairs war you know -- We have certain characteristics so we'll talk about this in more detail but there's something you can view. Even if you connected. -- And and welcome to -- point. Not do that need to be just. Pretty much what it comes with that and it's just in the us secure and -- deserves much longer and it's always the consent appears alone. Hong -- system whether it's using C check me out. Even if you log in com. You log into your home computing and browsing -- there and think you. Mean."

" It take a lawn probably longer than they're considered drink and I can't I liked it as."

" So what does a lot of stuff but. That gives you kind of an idea of what is capable ones people are blowing three years -- weeks -- that the proof of concept is the awesome and we actually. I -- real world situation and show you okay. Here's what you outwit it now here's what we can do and that's that's what you need to watch out boards because he's on the axis and see why people. Cookies because once you once I'm logged in. Password it could -- I think yeah. And scary are necessary mean MySpace you put this little government and belittle. You get into and it's yeah. And -- technology I think about it -- mean X. Wire transfers from. Acts scare cell. That being said. Bull you oh yeah some ideas. They're cancer. -- these. Trivia. -- area."

" It's cool. Last week trivialized. Biden in 1940 what -- littered London in the hundreds with the task of defending against dive bombers and occasional V one flying -- This correctly answered I'm -- well on the hat platforms. So we're gonna sentence -- I'd stick in a permanent residency. This week evident from threats orient not only -- we have stickers but we asked Apple with a -- Volume one called freak by and his. I love that really incumbent. I think you'll get out. This trip yet. What German aircraft was so large that require passengers to -- side of the few slides in order to -- turns. If -- the first one answer this right in the act by forums. Well you know the -- ready and we'll send you off and you out of PM. Or your address. And all things that. NASA wanted to mention the -- five group. We need some volunteers for this to -- coding challenges you can check this out Hak5 dot org slash four. And last but not believe that wanted to mention spots for the trivia thank you so much snacks Netflix for sponsoring this show. Which Netflix you can -- and 90000 titles online including lots of great titles. With free shipping both ways to your home. They now have over forty cities and so almost all deliveries happen in just one does Wednesday Netflix plans start from fort dollars and 99 cents. And as a new memory you can get and no risk two week free trial membership. Check out at Netflix dot com slash Hak5 and please remember to type the WWW. Wing. Using the so -- certain that it waited."

" Helped start. I was so enthralled in the was buoyed. I knew it we actually got to silent these and I read it -- through so lot. That's this doesn't variable into coming up -- the first when it's free and it talks about a lot of the yes ultimately in free. He day here and I can -- stuff keep -- here it is basically history of this play it's Wozniak and jobs and the blue box and it's though. Very cool its history and a comic book and volunteers and now and super excited to -- the next one. Wow yeah inexpensive."

" do we fail. Themselves -- I'm sure you guys a cool that VMware distributes for free now the reason I say VMware's because he's VMware infrastructure going to be doing virtualization."

" Yeah close except actually -- VMware has better hardware virtualization so -- And servers and make them run and happy note on a single service we've got one machine human double duty triple duty whatever."

" It might aid in calculations and you know research has been done that stating you know if you had a physical machine in -- structure and it's probably only being utilized to about 30% of -- potential -- X 30% use an exchange -- well I mean exchange and active directory things like that but -- see if you've got you know. Backing up 30% utilization there obviously hold green movement so on and so forth. And -- reducing her room cost cooling cost all that goes into calculations. For reasons to virtual virtual lies. So we use -- VMware in our infrastructure is bombs we use. VMware. Yes X server which is the corporate. Yes server I'll largely -- things like storage the motion which you can actually if you've got multiple boxes you've got -- controller. It allows you to shut up machine and turn it back on in like. Happened milliseconds. Finals against -- milliseconds happened since pretty fast download. And its products and that is VMware and elders talked about bucks a virtual PC in the -- well virtual PC has now been replaced by well for. Virtual PCs desktop picture we're gonna talk about as the server versions of these virtualization products like up in 2008 product line server actually has virtualization built it. And if you're worried about virtualization licensing costs we have. Microsoft products and -- you can run five copies. Personalized copies. -- single license from Microsoft. You can buy one server 2000 licence and -- five virtual copies and -- but that's very -- exactly -- so what we're gonna do is we're gonna -- your environment for virtualization we're gonna do -- to take all your existing physical servers and we're going to convert them to virtual servers. Now there's two ways to do this -- set up like a multi homed ghost solution. Where you kick off the end the install and it pushes it out to another. Here were willing to. Basically convert the machines on the local machine. Who were to do is -- to download the VMware converter which freely available to everybody. We're going to install it. That's not insults off or by Google and -- click convert machine."

" So this is like a wizard that it to then walks you through exactly. And then this is going to take. A physical piece of iron right here and turn into a couple bits that we can run on another machine because relate he would not enough for the iron."

" Exactly what we're gonna do is this this segment we're gonna show you how to dump a physical machine to a virtual. Sorry clicked next congress today we want to convert -- computer click next okay because we're gonna do it on a local machine were less like local machine. Next it would mean. Hand you say is we're gonna do it on a local gym what are we gonna do one below or to do -- to take all the configuration on the machine okay. Basically make an image of it all right instead of making an image -- we're going to create a virtual machine based on. That image okay and that -- will be saved to wear to who."

" This to the local machine correct too okay so how does this differ. From something like Microsoft. Windows. NT backup we're -- assistance the image. I -- that that content and back up stuff where I can just -- what this is gonna do not this is."

" Going to create the virtual machine container. As well as the desk okay so what we can do is we can then take this image. Put it on a flash drive are at throw it into our brand new server all right. Automatically. Import that machine started up as."

" Just as it. So do you take a machine and ongoing committee basically copy of it and see that copy in a single or couple miles on it. That own machine yes what kind of considerations you have to -- to take into account here as far as the disc is concerned now."

" I mean as far as the -- is is concerned if you've got a -- if your disk is pretty much full you've had and you run -- before I had deleted mine he. You don't accidentally thirty gigs yes transactional if you don't have enough room on your drive to actually store the image and we have to set up a multiple copies. Multiple installed VMware converter to actually source. This out isn't impeded over the network exact okay."

" But we're gonna do it locally so given that you know on our 160 gig -- here we've got like you know over -- it sorry we can make a file that is. Right exactly and we can do this all the operating system is running yes okay so we don't have to redo or anything crazy like that no boot disks now and."

" Well I mean as far as the -- turn it basically takes this and it says okay I'm going to take this and I'm gonna restore machine's gonna do its thing it's gonna do like a ghost session and it's going to push out an utterly -- yes cool so what we're gonna do is grant type of virtual machine name and in this case is going to be issue. And location is. You know."

" But on the will put it on the C drive and this -- since it won't load up you will issue is also incited this he's right -- you and -- sand lake arrowhead."

" Now basically basically what it's gonna use that -- is gonna create a file then cell after that it after it's done creating its image. And you copy it off site of this machine you can delete a technical and then I have this -- is seen in a file yes. I have -- shell script that's trying to look that's however aren't. So it gives us so it gives us a warning saying it's like that's nations is the source machine do we have enough space to do this. Well actually -- your transaction log there might. Sort of say yes. And we can split it into geek files if we want to -- and answer out of factored into our restrictions so and so forth. We're gonna a lot of virtual disks to expand which instead of creating a massive thirty gig drive then obviously have room to do that so we will go -- and we will allow it to expanded only used in exactly of that soul and click next. And we go ahead we set the networks. So soon -- he sees that the networks out in movies like in in VMware there's difference between bridge Nat -- okay so. Obviously for -- you know dedicated -- environment running server you're probably going to want to -- rated. From one and so if our physical machine only actually had one. Before we can now -- attitude and a three whatever exactly. Whatever you want a sports networks customers -- now we can automatically installed VMware tools VMware tools satellite guys utilized the mouse you know -- a bit odd video settings. And all that good stuff that goes along with every -- bodies are meant to control -- you know thing -- customize it Kennedy machine to change the name change that you ID beautiful rule out Digg -- here and and while okay so and we can also and the free product yes. And we can also removed which is critical and all system restore checkpoints because all system restore checkpoint are gonna be based on old hardware right that is now not."

" Had a preview what -- let me ask you about is the case of VMware you can pretty much identify a virtual machine based on the characteristics of the hardware because hardware -- real it's being emulated right -- whatever you say. So if we take like I don't know like a -- old. Power aged 2900. Right. And turn that into virtual machine it's gonna happen -- and tell -- that we're gonna have the same Nvidia graphics card had before. What is is gonna -- to the operating system in order to make it like the new hardware and are there any other concerns as far as drives and and and aids and stuff like that it's."

" drives and stuff like that basically VMware is looking inside the machine and it's saying okay. I've got a C drive of sixty gigs a bad idea 120 someone and so forth. You can actually select each one that you want and each one that you dealt. To actually be ported over into this virtual machine now what what converters going to -- it's actually going to re install all the drivers that required. So that when you boot this thing up it's not a blue screen like he got angry now we're in the hardware exactly machines that put -- read another computer and the motherboard is like. The reason windows blue screen is because it sees something that it doesn't know. You -- the drivers you can totally exactly. And that's what this is gonna do that that another segment exactly so -- here we've got our. Conversion summary grade the site that disk options the volume to destinations -- and so forth. We click finish and we'll look there videos so now it's creating. A snapshot of the volume that it's creating a virtual machine based off that snapshot and it's actually dumping it. --"

" is that a machine from. System to dual core system and wouldn't it be great because we've done a whole life did you treat it Firefox bookmarks picture you've got here you know your profiles -- all that stuff right. Austin -- Amber's her physical machine right before you rebuild it and then. Nokia want to go back old school VMware server is important. To supporting this view files you -- with next time how to bring this into the infrastructure brilliant --"

" First we're we're -- show you is how to actually practice system. Four. The importation process and actually installing SX on all all that up so you."

" That realization -- so I try ports announce -- this money and and give power bill down because I've got -- since or is that just sit there. Looking for somebody to get an IP address and then assign them one and then it's it's they're thinking to get a good job."

" So real quick finishing up. We can actually go into the directory and Z and it's not a locked file that it's got the VMX which is the virtual machine and it's got to be in the case of the indicators are all two gigs yes so basically it's create all the the indicates that's created everything else that's all you have to do it's not done yet and it creates files. All you have to do -- and copy this to like gymnast. And then once you've got your virtual server set up. Copy it back over and."

" This works for more than just so if you're not in VMware environment that is converter we'll do. Walking for your virtual machines other sports file containers if you."

" There there is an open standard for virtual containers. I'm. It's not a 100% but it doesn't work so if you want you can use on the citric client not like that and it almost."

" It's interesting that VMware would release a free tool like this that would be you know work with their competitors so do they have like is there an enterprise version of this is there's some sort of like money."

" There is that allows you to create a bootable CD boot into it and then just copy out machine without having me on these cells and I mean that brackets that hold a mass unemployment system thousand dollars licensing here."

" Stuff this sounds really cool it has additives displayed a snapshot -- Okay cool very cool awesome so he -- have virtualization questions definitely had a -- because he's the master that's definitely. Anderson you going to be doing some more this on the show."

" Yeah -- the next one is going to be do you need virtualization and I've got some calculations for BTU output wattage -- rating as far as air conditioning goes all kind of calculations that go into your monthly usage in your server room. And we can actually go ahead and convert that into do you need virtualization so. Much."

" Rock on the -- okay well then I think at this point it's gonna wrap up the show so if there aren't any other. Questions he's gonna NASA --"

" This week question comes from pirates 1337. I XY rights. What is your recommendation for a monitor recording program. Or a PC -- or something I wanted to make YouTube video but nothing seems a great but you're looks incredible."

" That's -- ways to view this namely the hardware solutions you don't really want to use the ones in. The end. Game converter which essentially takes VGA. And then turned in. Something from an analog you don't do that we've got some more digital -- and we. And out using scale. My son and acts. If you're looking for something more readily available -- or three that's where. We recommend in the deal Hartmann. So first up looking for free and open source way. The first season's. Was using this program called cam studio. -- org it is SourceForge project it is open source and awesome. -- know that it's in your system captures screen to flash files or your favorite. And quality but it will rule you know. It can be a little processors that. You may appear in -- 3-D gaming. Only thing people wanting something that the source and free. -- like to move screen -- this great idea and it went the first two years."

" Yet the -- one solution and I've used in the past is called wraps up our APS dot com. The nice thing about this is it takes direct X video both nine and ten. And dumps it into a file that you could then upload to your YouTube during your time lines here editing software. If memory serves me correctly. It's only about thirty bucks to buy. 37 attack. But the great thing about it is is Darren mentioned that can't studio about was not the best for gaining that this is really designed for your 3-D gaming -- can run in the background you can dump it to -- size full size and -- kind of hot -- for recording and stuff like that and -- really nice small file sizes and it is going to chew up here -- processors."

" And then of the wanna do want to recommend because I have been playing with a two bit copy it's pretty old but I've been taken up new version and it's called him he's in studio. The guys in our hands lab rats -- Sampras turned me onto this basically. It is like him studio. Only way more built out this is it's -- landing -- generations. -- sizes. He can do the whole screen you can scale it and then it -- ways exported -- several. File containers compliment one night. So or directly upload to other sites are you doing something like a screen cast we -- program do real action. It's a little pricey. But it is. Probably the hope it pollution oh my god yeah."

" That does solutions that we mentioned here guys are all windows Paul made mention of PLC in the most recent version now instituting. Where you can down footage. He says that it's a little hard to get -- correctly but if you wanna check it out -- on the Mac early next and check out the -- video land."

" As for hardware solution here's the most beautiful and all going to talk now are software ways to capture what's on the screen and in a file which is gonna. You know -- your video pretty hard drive -- processor. So beautifully you just click on your desktop -- a little VGA who are or he's got me -- Can video card supports slick and positive in this video out. And you have a camera or some other -- sort of recording device. That can take that footage and we used in the first season when we needed to record the game footage stuff like that it's beautiful because. It's not gonna -- PC what's RC client or desktop if you have a camera that can accept those something they can send it out whether it's you know HDMI. On the high end or even if it's just composite video. It's rate for games stuff because and you don't need to worry about processor. -- out hope that answers your questions and her. Your question and answer on the show feedback Hak5 dot org gorgeous man used to contact form. On --"

" If one thing we do want to let you guys know about is we finally got all of our iTunes that she's fixed. With now RSS feeds and so -- and so forth so you guys are not currently subscribe to show. I'd go ahead and over revision3.com. Slash Hak5. Or you can find links at Hak5 out of work -- upper right hand corner of the page. So go ahead subscribe to iTunes and always make sure that your on the latest analysts."

" Yeah especially to keep up with us. And we got a big that are big big picture thing. Yeah all things -- about the first don't tell you. The rough start and that we talked about last week is still going. So you head over to our -- that left star dot com that is publicity if you are interested in winning. Hak5 -- when a guy we got here Hak5 teacher. We get shot glasses. Gets inspired is thicker wrist from Israel in the front page there's the Hak5 -- bundle. And autographed copy of Superman issue six where we -- so possibly featured and so this. I understand that it is not eligible for. Our global audiences will defer our US viewers. For a global ones tune in next week or we'll do something little. Our own and similar that I have something similar for you guys since we we feel that you've been left out on this but. I do if you are in the US check out rap star -- the left star dot com and it's basically you don't have to the pain he'd bang it's not one of these like you would free iPod gimmick things it's. It's really site that draws interest to you a lot of charities are charity of choice is the electronic frontier foundation media that -- that you. Awesome hackers like ourselves. And and and in addition to bringing light to do is charities they raffle off Austen equals topsy you get stuff like you know in addition to -- Austin prize bundle. They get things like Xbox 360 coach bag -- gift certificates now ulcers from places. So. You know you don't have to pay anything sign up for free account you can you get in and tickets on alternative ones sign up problems you want. And basically just when dig -- find out about awesome charities that you know. YouTube and eleven yes."

" So we want to -- graphs are and -- guys entry check out the website and get a ticket ten days left yeah there will not an -- but -- clever many guys but yet the last thing that we want to do is we want to -- Nikki Cox. -- yes. I know her Sheila is yet tactical point -- We -- on the on the wall there's a three -- Campaign machine that she did in binary and cheating and shadowing. Five logo so. We met Nikki in Tennessee. And we have absolutely thinkers said that you know want to do some especially guys we'll show talk. -- and yeah I mean it's it's prominently displayed right in her living room and -- gonna do."

" You know it was one of those things where it to the case then independently. And and I keep seeing. You like whoa. You. It's not like it better be partly. It's lies it's. -- listen -- this -- either. And through quality you know here technolust witnessed this and."

" Very cool yeah I mean -- my first and out of you know is like look and act that's an ancient native to this. Images that we wanted and she did all subsidies like -- we'll colors you want -- these ones you like to check your your -- has like. But obviously -- and everybody else who loved ones since. I love that. So. Through there yeah I think that's pretty much -- and it's free and -- it'll actually. Until next time and a."

" Well in the this. We figured let's start to go see it and that it."

" I was thinking."

" Com. While. Yonkers yeah. Hey that the settlement confidential."

" Wow. This episode of -- five is brought to you by -- start to GoDaddy Netflix. And -- it because in this economy it's hard to -- and you."

" And this someone -- five is WPA broken IQ clusters session hijacking. Fertilizing servers screen casting. And -- technolust. Gays just once you really want to. Three rocks that. Okay today. I'll show you. Hello and welcome to hack part of this is your weekly does technolust and we are -- I teenagers I'm an engineer and I'm -- I'm pirates in. Austin of them obviously great you were getting some VMware's."

" You wanted to do is -- multi are on -- virtual infrastructure. So basically start the process stop by converting physical machines virtual machines. -- and all of that and at a final stage X show you guys centralized storage. Using some free tools so that you know it's not caution light."

" Virtualization is lot of it is the other day I was trying to put together and you set him blocks and as a matter and I'm like -- and he used to build -- thing. He's like I don't know it. Cracking windows box altered to web cams on it -- downstairs and in addition the -- downstairs to be awesome right atom and -- opened up for VMware server. -- to build machines or realist science and -- machine here yeah I was a very sad continue to some virtualization that the physical server from."

" On. Well you can pretty much do what I'm gonna show you and transfer the image over time remotely. You want me to basically create a -- Mike you know Mike. And exactly I."

" is like three -- you please take me user. -- Where advanced when -- cool well maybe on episode. Twenty X twelve. You know -- the -- In addition it lately too much on and on its. -- Let me get. Cool well you're doing what you've got I've got. I have to do not just one true -- is a deadly -- and a the other ones."

" Now -- you're gonna be -- in -- people. People -- said that they wonder -- and -- come up with something new. Besides. Jasager now will what you're actually doing is it like -- re -- you."

" Utilizing Oscar and isn't emergency -- but it. The whole idea of the Oscar quality was it was area oh my god that his -- and yeah build on. For future presentations hacks whatever and so on going to be talking about session hijacking. And to -- that of course. He he's way I can think can't get a -- man it'll go would be with a -- but but I mean that that's just -- Right so on and -- session hijacking cookies. To steal them and plug in coach but -- injury. Column -- no problem it's about two runs in triple -- and reduce penalties. Well granting -- credit -- support and he it's just last so you hear about the Adobe said he didn't scared. So for those have been."

" Live and really real target rich environment. L player and it's an important thing is that the first time that that he has cracked -- so all new WEP. -- able from the very beginning. There are beginning did you are so skeptical wireless you're like oh my god you knew you where are gonna like oh guzzling praising god that -- like it."

" Yeah okay. -- interesting stuff coming out packs -- in Tokyo and there's actually proof of concept tool they can get -- air package deal hobbling. -- and -- it's not fully functional the moment but there's actually proof of concept -- that you can play around with. Few up together your own little you know it's it's basically taking stuff doesn't resist his idea practical. Practical attack against WPA WP. And turning and it hasn't that you can play with it's not. Super. Eight have things ready for prime time so went one."

" Don't want to talk about what -- all of these -- everything's going and I mean they've got one way it works."

" Right and this is only on WPA using TK IP. So you're using a guest totally not sell the UPS two --"

" And that -- to show people how to because wireless range you know anymore and you remember when a came out. Like oh it's gonna be to complete corporate enterprise solutions -- gigahertz and it didn't work for (%expletive) yeah and you couldn't use it through like thick walls concrete or whatever. I think we should person and it is engine. Show people how to link wireless routers together and."

" Yes it is because we get something similar don't wanna hear another. Another 68 through here turned out to -- in our access point it was the drivers and now I'm getting like six negative -- that stuff."

" He has been bugging me for the last. Month. And a half ever since I put in the new wireless route around indeed WRT which is scrutinized by."

" Drew ericsson's point so Oxnard and -- speeds meanwhile there's no problem. From the driver later but who would become true which doesn't somebody else utensils and drivers. It's."

" Opening my neighbor. Yesterday. And think about everything you -- work. Actually I. Mean their apps and and the -- part. Is my what did you call."

" That it's the Malibu laptop. The party. It's that are on board the bar hardware -- this -- toys than president and I'll tell me -- yet."

" Failure to meet viciousness we've got walnut is Fisher price is the not a news. And then that is. Yeah its pocket toys. -- Rule -- you mean. Like they're like it I don't understand it if I needed one if I had like seventeen inch. But if fifteen I can reliably put on a plane and no space issues even if I mean coach which were never happen. -- Tip the last I type that -- grasslands. But I mean it is clear room for me do my stuff even coach I don't need in you know it's like I don't go to -- its ups. And I like called -- and I don't like pretentious. Crack it obvious."

" As we can digress from here. And -- report regalia and note from. Whenever you're talking about. The clustering is pointed out to us the story of homer if they limit I don't know Nike cabinet. And it's it's very interesting read. That the first homer was done. I think with like he works six I was six boards quiet hours and 48 gigs Aaland. It's gore Kerry and 86 to flops if you see homer to like this the potentially the idea and then home Mercury and it just hurts me you don't want to elementary. I don't I don't know I don't have it take down."

" I mean you know its its good because. Thinking outside the box -- clusters and I found him yet. But I don't know."

" Currently there's -- racks and shelves -- line. I don't think about cooling them so -- close it would probably. Her. You should do if you start Indonesians of people's old -- now don't don't don't know it don't know we should. Know. And you know I fixed now I don't know -- know yeah very yeah -- we are. We're gonna search -- the Lan parties. Here. And it's gonna again."

" I don't want to mention though."

" My birthday was gets it. Right. --"

" Oh yeah that's right don't luckily. Talking about here -- in June. 8 and eleventh Nat."

" I have no idea what your -- in the past eight. At twelve."

" Kennedy -- to get on in the Lan party okay."

" You add this. Next week we have a Lan party coming up its November 20 ninth that Saturday. At games dot tax I've got -- of course you guys probably know that website right now that there. We're playing a real turning classic. And what I hear Darren pretty good thinking back I don't know I've owned a couple of times so. Can't -- right around that it anyway if you -- playing against him in this game second up complaint was that."

" It is good to read up on Warren's under the gaming session -- good sign up from one you want it. My -- you did you know come on hope hopefully."

" I'm pretty sure weakly against each other -- percent of it yet it out I only hours -- to St."

" Put that out about it and you know. I'm not mind that she's had Jesus on a picture of my own personal use this on my side. Little spring to me -- Jesus. Well it's -- Yes."

" Yeah. TOS. If you look at that right now. Tell you but as our sponsor for the Lan party. It's GoDaddy think so much good ready for sponsoring our episode. Keep your personal information only from spammers hackers into crazy -- remain private domain registration from -- dot com protect your privacy by keeping your address phone number and more out of the public database plus good that he recently started registering dot Diego. In if you use code HEK to you can get five dollars off a thirty dollar order. Some restrictions applied to the site for details and get your piece of the Internet and godaddy.com. -- my Margarita and it back to you guys."

" Has your dreams and -- and -- a two day countless new. And struggling to find yeah. And print news. -- Credit checks and look -- Starting at 99 months. Yeah -- difference in the news. And you'll find -- yeah. Yeah. And dot com."

" Our guys well in the comments of that -- Portland and username. On it asked us. -- you've created this UN Robin. But he. So what are we gonna do."

" Well I mean. The idea was to build on this throughout -- season as a platform talking about a lot of stuff and the thing is a lot of fun stuff really relies on being -- and the medal right we talked about that first season we've shown how to do things like our cache poisoning. To get man in the middle using windows tools like -- whenever. It's nice because it's a simple -- His apartment and he quit -- adventures."

" And everybody's kind of it's our patents and it does its -- thing so there's no real setup required on your hands yeah to go ahead and you know become okay I gotta run this will this'll -- in the -- and we can just have people connect and."

" And then the rest -- and that just takes. The whole leg work out of it analysis. Come -- you might precious right and we can start having some fun so. It's. Talking about fun let's talk about session hijacking let's talk about stealing those assume important cookies. So you know when you blog and web sites they keep your session throughout you know as you can you audiences in the -- that page that page that page here still in this system you log in -- it's fashionable --"

" I'm only doing it speaking of even the most secure web sites on earth and use sections. And include what we're gonna show what you're gonna show is how to look at your cookies are okay."

" Yeah because check this out right this cookies that -- and -- is okay when you've got this cookie -- you working you can -- right right. I'm sniffing and everything in between you're connected to me. Too much on an in between you and you know the Internet so I can see that -- so -- Take a cookie and I can liquid fire fox plug in life. Like cookie edit you can. Injecting manually in the news and web site Alexa and their one wranglers shark or with another tool. You can actually make this a little bit more easy little bit more automated. To hijack this puts cookies hijack sessions and so the idea is. You go to web site you log in I noticed it I -- the same website. And -- you employ the same test."

" More importantly everything that we've done has shown the font ads. You know hooking up to a wired you know computer war you know wireless network that you know it's already you know next two or something like that. And you actually got it set up so that. And this is running car got secure version two yes so that is actually connected through your phone."

" Correct and good to see what's going on here -- India and they've got severe versions you definitely check out. It was just recently released -- platforms. A couple of nice features like for example the W and play like -- Hartman activated and some some under the -- stuff that makes it pretty. So if you take a look at screen here. This national access robbed in this this guy here this actually my. This my connection with consultancy edits on packets gone on. Through here that's totally cool because people are using. Openness and -- here. It's just -- simple direct connection USB cable to my Blackberry and I get online. I can do this through blue cute but I -- bandwidth with the and I'm just doing this in windows this example. And amusing yes in and sharing which on mine. On my Blackberry in your -- it might even you -- them. Is here our connection to. My wire connection can do the same thing with wireless. You do it is the Bluetooth wireless then on you one pocket and a cell -- and another pocket a laptop here people let. Look at you -- me so happy I branded Oscar. Thing that little. Definitely and immediately here. Bandelier what we need. So the biggest issue. Will with a lot of people getting Fed up with this is okay great people suits it too. -- on here tonight -- pineapple if you will. And it's. But then they need IP address and the need and connect to the units for me on windows and I CS myself down they go through that and then. Here's the trick. That but the HCP server not set up on TCP knows that he's in the web interface and that there. It's totally -- and -- it nothing really complicated and networking. In -- not. But I've got it physically connected with you -- Q -- here. Over to my laptop and -- that this interface -- as the HCP server in windows I mean. When users who three this would be it's not just built it. Cameron and XP -- nothing special -- terror. And one of the best ones and I think it's an overlooked is actually. He he TV yes he indeed -- for. The he stands world and blinking. Is that what is -- disease it would only cool I had written the re use TTP. Way and we want to use things like PC news network hears a click or. Winners act. Actually this the cute little partner here when is. AT TP server built in a scene that's as part of the -- Right. And I'm using that in conjunction with yes."

" You you know leopard. People money sucked into the -- An IP address here. And it opens them up. And then. It here. Whitmore IP addresses a fine. Then our our test environments. Now. -- Soul. And comfort in. Plain -- in the here is the one quality. Access in external. So -- is. And ID that's. Interesting in its X. Is. Here. The one with 6. X. One X one one. My eyes on. One 250. So wireless news. And some other society and -- 11. Were rumors. Once you. War. Regardless."

" You're now connected to the Internet. Through the -- Fungus my computer computers on your DH CP. And gives you the Gateway myself found it's just a matter of telling. Telling that T and that he FT PD program in the DH CP configuration. What IP address used as the default routers right. Thank you you do and I can take."

" Over the years. You're here victim on -- more we'll just please mark on the mark is mark. On the anger IT so I'm connected to. While I'm connected to the excesses external. Yeah just like -- you know fifty miles away yes which is my offices external yeah arts connection. But I've got an IP address here."

" And it's in this one -- you like -- and and he continued on Gateway is the 111. Which is my ethernet interface here so. I don't got packets offline. It's time to start. Sniffing okay not do something as easy as just firing up wires are here and we talked about this annex in. You know access with Chris. And it ago and you that you like rats and some web page. Capture. Interfaces. She's -- Wired. And start that -- aren't -- it. And there -- you know I can I can actually. It's it's way too much as you can see here places go. Is gone and gone and gone and policies and history and I can hear. And quality constraint. And I can actually watch you know as the human concern -- and CSS right now to come down here it's mainly just assess. -- the hack platforms is that platform yeah I'm watching RC SS. Yeah and nothing too exciting I think we're missing a cynical on there now what. Lookin' for the lady in the address even as we've talked with Chris in the past about setting up filters and -- setting up colors and whatnot. Nothing easier than twelve it is equally odd couple of sessions stealing cookies and they're constantly that. So that don't you ever so we restart the pineapple and now the next few tools. Our spirits and the answer. And you could search on YouTube these few things -- end -- with hacking is no you're not now know magical land use or January it is a fuzzy and cute. The one on the piano with popcorn is often us yes. And again that wire story here in Andy's T tools. Or what we have our first okay so the first thing we're gonna wear a command prompt. Yeah Mario. Guy I've got an -- to see how he's the first one and a so these are from. These tools. Or from a -- security okay you can go ahead and get these at the epilogue I've got everything in the show and it's forest and the technique. This is something that they demonstrated at Defcon and technique is called hijacking. -- So we go ahead and -- this will -- this tool. And first thing you want to do is going to fire up there it. With the command line option dash capital W. Okay that's going to list all of -- or interfaces and I got a bunch of six interfaces on this machine VMware might dial up connection up. But if -- look closely here connection number five. Is my real -- 10100 Gigabit ethernet that your wired. That's my -- that's the one -- one years so then I just run it with dash luckiest guy. And number five to tell me I'm when he's in her -- in -- got it running here she looks like this is it okay. So this is fair I know its its its just. Right it's. It's really just a it's a specialized. Kind of and Pakistan for the just looking for one thing it's looking for. Some. Cookies so we can clone them and we can. Session next. That there in this next part of the parent is. It never -- should restore -- okay so we're on -- answer thank you. Yes it does mean. -- An ongoing really fast on this and promised. It's -- gonna and fire camps -- here right. Hacking tool. What this guy does is it it's a beautiful little fees for me so that I can partner partner. And the trick is. On there got you connected through -- looking out just good. And then hands it was he answered well I can't we hear. And secondly tools and options and fire fox and under advanced network. Settings and I -- changes that it. Use a proxy. And want to use my local proxy because it's not -- local art on him in wonder local. On port 31 when he. Good news for everything and and once you do that you can head over to. Sweet little -- over at HTTP -- eyes hints there. There we go -- one point us hijacking tool. And look at this. 191681. That -- three that's me yeah exactly -- looking gossip here I get the -- internal I've got your Mac address here. All that looks -- a look at TT BD and it looks in Mac address 113. And hire wire shark -- higher up can -- Mac address -- I can you know see. You know everybody appears so here you war and and so you are the mark on my EPC yes. Okay sonnet -- shout yes he gets an extra keys there with the Apple's doing."

" Yeah about that so what I'm doing is I'm here caught up. And you know because. That's. Awesome. MySpace and where it might for a I'm getting them from. US. But I don't know that."

" Course because using your your work that point why you'd be on your access point. Shop is beyond me. I mean people are. -- Ultimately there's a good -- there's actually it's either they unplugged you might see it. Here my hands and when that. Include go. And I get these beautiful list of all these places that -- with easier read here. And -- Hey -- this. Platform arms -- myspace.com. And click my. And look at that. Now logged in as -- you log into my account but right. But it's because I it because. -- found it. -- And then on Firefox using and you can you check whatever you want from -- going to edit your profile and be like you know."

" It's. About all of your home page and be like you occasion like this --"

" Personally I love this is but you know what that's just me now look at that being said we've had comments and questions about how do we protect ourselves against Yasser. How do we protect ourselves against this."

" I can give you much longer and neighbors and my second birds and if you work access point that night you were attacked -- you. If you know network like this one you know IP address of one to. Expect it. That's not here you know you might be suspicious. You -- so theaters and the other devices on the network so. I know about ten and 31 I see a computer upstairs war you know -- We have certain characteristics so we'll talk about this in more detail but there's something you can view. Even if you connected. -- And and welcome to -- point. Not do that need to be just. Pretty much what it comes with that and it's just in the us secure and -- deserves much longer and it's always the consent appears alone. Hong -- system whether it's using C check me out. Even if you log in com. You log into your home computing and browsing -- there and think you. Mean."

" It take a lawn probably longer than they're considered drink and I can't I liked it as."

" So what does a lot of stuff but. That gives you kind of an idea of what is capable ones people are blowing three years -- weeks -- that the proof of concept is the awesome and we actually. I -- real world situation and show you okay. Here's what you outwit it now here's what we can do and that's that's what you need to watch out boards because he's on the axis and see why people. Cookies because once you once I'm logged in. Password it could -- I think yeah. And scary are necessary mean MySpace you put this little government and belittle. You get into and it's yeah. And -- technology I think about it -- mean X. Wire transfers from. Acts scare cell. That being said. Bull you oh yeah some ideas. They're cancer. -- these. Trivia. -- area."

" It's cool. Last week trivialized. Biden in 1940 what -- littered London in the hundreds with the task of defending against dive bombers and occasional V one flying -- This correctly answered I'm -- well on the hat platforms. So we're gonna sentence -- I'd stick in a permanent residency. This week evident from threats orient not only -- we have stickers but we asked Apple with a -- Volume one called freak by and his. I love that really incumbent. I think you'll get out. This trip yet. What German aircraft was so large that require passengers to -- side of the few slides in order to -- turns. If -- the first one answer this right in the act by forums. Well you know the -- ready and we'll send you off and you out of PM. Or your address. And all things that. NASA wanted to mention the -- five group. We need some volunteers for this to -- coding challenges you can check this out Hak5 dot org slash four. And last but not believe that wanted to mention spots for the trivia thank you so much snacks Netflix for sponsoring this show. Which Netflix you can -- and 90000 titles online including lots of great titles. With free shipping both ways to your home. They now have over forty cities and so almost all deliveries happen in just one does Wednesday Netflix plans start from fort dollars and 99 cents. And as a new memory you can get and no risk two week free trial membership. Check out at Netflix dot com slash Hak5 and please remember to type the WWW. Wing. Using the so -- certain that it waited."

" Helped start. I was so enthralled in the was buoyed. I knew it we actually got to silent these and I read it -- through so lot. That's this doesn't variable into coming up -- the first when it's free and it talks about a lot of the yes ultimately in free. He day here and I can -- stuff keep -- here it is basically history of this play it's Wozniak and jobs and the blue box and it's though. Very cool its history and a comic book and volunteers and now and super excited to -- the next one. Wow yeah inexpensive."

" do we fail. Themselves -- I'm sure you guys a cool that VMware distributes for free now the reason I say VMware's because he's VMware infrastructure going to be doing virtualization."

" Yeah close except actually -- VMware has better hardware virtualization so -- And servers and make them run and happy note on a single service we've got one machine human double duty triple duty whatever."

" It might aid in calculations and you know research has been done that stating you know if you had a physical machine in -- structure and it's probably only being utilized to about 30% of -- potential -- X 30% use an exchange -- well I mean exchange and active directory things like that but -- see if you've got you know. Backing up 30% utilization there obviously hold green movement so on and so forth. And -- reducing her room cost cooling cost all that goes into calculations. For reasons to virtual virtual lies. So we use -- VMware in our infrastructure is bombs we use. VMware. Yes X server which is the corporate. Yes server I'll largely -- things like storage the motion which you can actually if you've got multiple boxes you've got -- controller. It allows you to shut up machine and turn it back on in like. Happened milliseconds. Finals against -- milliseconds happened since pretty fast download. And its products and that is VMware and elders talked about bucks a virtual PC in the -- well virtual PC has now been replaced by well for. Virtual PCs desktop picture we're gonna talk about as the server versions of these virtualization products like up in 2008 product line server actually has virtualization built it. And if you're worried about virtualization licensing costs we have. Microsoft products and -- you can run five copies. Personalized copies. -- single license from Microsoft. You can buy one server 2000 licence and -- five virtual copies and -- but that's very -- exactly -- so what we're gonna do is we're gonna -- your environment for virtualization we're gonna do -- to take all your existing physical servers and we're going to convert them to virtual servers. Now there's two ways to do this -- set up like a multi homed ghost solution. Where you kick off the end the install and it pushes it out to another. Here were willing to. Basically convert the machines on the local machine. Who were to do is -- to download the VMware converter which freely available to everybody. We're going to install it. That's not insults off or by Google and -- click convert machine."

" So this is like a wizard that it to then walks you through exactly. And then this is going to take. A physical piece of iron right here and turn into a couple bits that we can run on another machine because relate he would not enough for the iron."

" Exactly what we're gonna do is this this segment we're gonna show you how to dump a physical machine to a virtual. Sorry clicked next congress today we want to convert -- computer click next okay because we're gonna do it on a local machine were less like local machine. Next it would mean. Hand you say is we're gonna do it on a local gym what are we gonna do one below or to do -- to take all the configuration on the machine okay. Basically make an image of it all right instead of making an image -- we're going to create a virtual machine based on. That image okay and that -- will be saved to wear to who."

" This to the local machine correct too okay so how does this differ. From something like Microsoft. Windows. NT backup we're -- assistance the image. I -- that that content and back up stuff where I can just -- what this is gonna do not this is."

" Going to create the virtual machine container. As well as the desk okay so what we can do is we can then take this image. Put it on a flash drive are at throw it into our brand new server all right. Automatically. Import that machine started up as."

" Just as it. So do you take a machine and ongoing committee basically copy of it and see that copy in a single or couple miles on it. That own machine yes what kind of considerations you have to -- to take into account here as far as the disc is concerned now."

" I mean as far as the -- is is concerned if you've got a -- if your disk is pretty much full you've had and you run -- before I had deleted mine he. You don't accidentally thirty gigs yes transactional if you don't have enough room on your drive to actually store the image and we have to set up a multiple copies. Multiple installed VMware converter to actually source. This out isn't impeded over the network exact okay."

" But we're gonna do it locally so given that you know on our 160 gig -- here we've got like you know over -- it sorry we can make a file that is. Right exactly and we can do this all the operating system is running yes okay so we don't have to redo or anything crazy like that no boot disks now and."

" Well I mean as far as the -- turn it basically takes this and it says okay I'm going to take this and I'm gonna restore machine's gonna do its thing it's gonna do like a ghost session and it's going to push out an utterly -- yes cool so what we're gonna do is grant type of virtual machine name and in this case is going to be issue. And location is. You know."

" But on the will put it on the C drive and this -- since it won't load up you will issue is also incited this he's right -- you and -- sand lake arrowhead."

" Now basically basically what it's gonna use that -- is gonna create a file then cell after that it after it's done creating its image. And you copy it off site of this machine you can delete a technical and then I have this -- is seen in a file yes. I have -- shell script that's trying to look that's however aren't. So it gives us so it gives us a warning saying it's like that's nations is the source machine do we have enough space to do this. Well actually -- your transaction log there might. Sort of say yes. And we can split it into geek files if we want to -- and answer out of factored into our restrictions so and so forth. We're gonna a lot of virtual disks to expand which instead of creating a massive thirty gig drive then obviously have room to do that so we will go -- and we will allow it to expanded only used in exactly of that soul and click next. And we go ahead we set the networks. So soon -- he sees that the networks out in movies like in in VMware there's difference between bridge Nat -- okay so. Obviously for -- you know dedicated -- environment running server you're probably going to want to -- rated. From one and so if our physical machine only actually had one. Before we can now -- attitude and a three whatever exactly. Whatever you want a sports networks customers -- now we can automatically installed VMware tools VMware tools satellite guys utilized the mouse you know -- a bit odd video settings. And all that good stuff that goes along with every -- bodies are meant to control -- you know thing -- customize it Kennedy machine to change the name change that you ID beautiful rule out Digg -- here and and while okay so and we can also and the free product yes. And we can also removed which is critical and all system restore checkpoints because all system restore checkpoint are gonna be based on old hardware right that is now not."

" Had a preview what -- let me ask you about is the case of VMware you can pretty much identify a virtual machine based on the characteristics of the hardware because hardware -- real it's being emulated right -- whatever you say. So if we take like I don't know like a -- old. Power aged 2900. Right. And turn that into virtual machine it's gonna happen -- and tell -- that we're gonna have the same Nvidia graphics card had before. What is is gonna -- to the operating system in order to make it like the new hardware and are there any other concerns as far as drives and and and aids and stuff like that it's."

" drives and stuff like that basically VMware is looking inside the machine and it's saying okay. I've got a C drive of sixty gigs a bad idea 120 someone and so forth. You can actually select each one that you want and each one that you dealt. To actually be ported over into this virtual machine now what what converters going to -- it's actually going to re install all the drivers that required. So that when you boot this thing up it's not a blue screen like he got angry now we're in the hardware exactly machines that put -- read another computer and the motherboard is like. The reason windows blue screen is because it sees something that it doesn't know. You -- the drivers you can totally exactly. And that's what this is gonna do that that another segment exactly so -- here we've got our. Conversion summary grade the site that disk options the volume to destinations -- and so forth. We click finish and we'll look there videos so now it's creating. A snapshot of the volume that it's creating a virtual machine based off that snapshot and it's actually dumping it. --"

" is that a machine from. System to dual core system and wouldn't it be great because we've done a whole life did you treat it Firefox bookmarks picture you've got here you know your profiles -- all that stuff right. Austin -- Amber's her physical machine right before you rebuild it and then. Nokia want to go back old school VMware server is important. To supporting this view files you -- with next time how to bring this into the infrastructure brilliant --"

" First we're we're -- show you is how to actually practice system. Four. The importation process and actually installing SX on all all that up so you."

" That realization -- so I try ports announce -- this money and and give power bill down because I've got -- since or is that just sit there. Looking for somebody to get an IP address and then assign them one and then it's it's they're thinking to get a good job."

" So real quick finishing up. We can actually go into the directory and Z and it's not a locked file that it's got the VMX which is the virtual machine and it's got to be in the case of the indicators are all two gigs yes so basically it's create all the the indicates that's created everything else that's all you have to do it's not done yet and it creates files. All you have to do -- and copy this to like gymnast. And then once you've got your virtual server set up. Copy it back over and."

" This works for more than just so if you're not in VMware environment that is converter we'll do. Walking for your virtual machines other sports file containers if you."

" There there is an open standard for virtual containers. I'm. It's not a 100% but it doesn't work so if you want you can use on the citric client not like that and it almost."

" It's interesting that VMware would release a free tool like this that would be you know work with their competitors so do they have like is there an enterprise version of this is there's some sort of like money."

" There is that allows you to create a bootable CD boot into it and then just copy out machine without having me on these cells and I mean that brackets that hold a mass unemployment system thousand dollars licensing here."

" Stuff this sounds really cool it has additives displayed a snapshot -- Okay cool very cool awesome so he -- have virtualization questions definitely had a -- because he's the master that's definitely. Anderson you going to be doing some more this on the show."

" Yeah -- the next one is going to be do you need virtualization and I've got some calculations for BTU output wattage -- rating as far as air conditioning goes all kind of calculations that go into your monthly usage in your server room. And we can actually go ahead and convert that into do you need virtualization so. Much."

" Rock on the -- okay well then I think at this point it's gonna wrap up the show so if there aren't any other. Questions he's gonna NASA --"

" This week question comes from pirates 1337. I XY rights. What is your recommendation for a monitor recording program. Or a PC -- or something I wanted to make YouTube video but nothing seems a great but you're looks incredible."

" That's -- ways to view this namely the hardware solutions you don't really want to use the ones in. The end. Game converter which essentially takes VGA. And then turned in. Something from an analog you don't do that we've got some more digital -- and we. And out using scale. My son and acts. If you're looking for something more readily available -- or three that's where. We recommend in the deal Hartmann. So first up looking for free and open source way. The first season's. Was using this program called cam studio. -- org it is SourceForge project it is open source and awesome. -- know that it's in your system captures screen to flash files or your favorite. And quality but it will rule you know. It can be a little processors that. You may appear in -- 3-D gaming. Only thing people wanting something that the source and free. -- like to move screen -- this great idea and it went the first two years."

" Yet the -- one solution and I've used in the past is called wraps up our APS dot com. The nice thing about this is it takes direct X video both nine and ten. And dumps it into a file that you could then upload to your YouTube during your time lines here editing software. If memory serves me correctly. It's only about thirty bucks to buy. 37 attack. But the great thing about it is is Darren mentioned that can't studio about was not the best for gaining that this is really designed for your 3-D gaming -- can run in the background you can dump it to -- size full size and -- kind of hot -- for recording and stuff like that and -- really nice small file sizes and it is going to chew up here -- processors."

" And then of the wanna do want to recommend because I have been playing with a two bit copy it's pretty old but I've been taken up new version and it's called him he's in studio. The guys in our hands lab rats -- Sampras turned me onto this basically. It is like him studio. Only way more built out this is it's -- landing -- generations. -- sizes. He can do the whole screen you can scale it and then it -- ways exported -- several. File containers compliment one night. So or directly upload to other sites are you doing something like a screen cast we -- program do real action. It's a little pricey. But it is. Probably the hope it pollution oh my god yeah."

" That does solutions that we mentioned here guys are all windows Paul made mention of PLC in the most recent version now instituting. Where you can down footage. He says that it's a little hard to get -- correctly but if you wanna check it out -- on the Mac early next and check out the -- video land."

" As for hardware solution here's the most beautiful and all going to talk now are software ways to capture what's on the screen and in a file which is gonna. You know -- your video pretty hard drive -- processor. So beautifully you just click on your desktop -- a little VGA who are or he's got me -- Can video card supports slick and positive in this video out. And you have a camera or some other -- sort of recording device. That can take that footage and we used in the first season when we needed to record the game footage stuff like that it's beautiful because. It's not gonna -- PC what's RC client or desktop if you have a camera that can accept those something they can send it out whether it's you know HDMI. On the high end or even if it's just composite video. It's rate for games stuff because and you don't need to worry about processor. -- out hope that answers your questions and her. Your question and answer on the show feedback Hak5 dot org gorgeous man used to contact form. On --"

" If one thing we do want to let you guys know about is we finally got all of our iTunes that she's fixed. With now RSS feeds and so -- and so forth so you guys are not currently subscribe to show. I'd go ahead and over revision3.com. Slash Hak5. Or you can find links at Hak5 out of work -- upper right hand corner of the page. So go ahead subscribe to iTunes and always make sure that your on the latest analysts."

" Yeah especially to keep up with us. And we got a big that are big big picture thing. Yeah all things -- about the first don't tell you. The rough start and that we talked about last week is still going. So you head over to our -- that left star dot com that is publicity if you are interested in winning. Hak5 -- when a guy we got here Hak5 teacher. We get shot glasses. Gets inspired is thicker wrist from Israel in the front page there's the Hak5 -- bundle. And autographed copy of Superman issue six where we -- so possibly featured and so this. I understand that it is not eligible for. Our global audiences will defer our US viewers. For a global ones tune in next week or we'll do something little. Our own and similar that I have something similar for you guys since we we feel that you've been left out on this but. I do if you are in the US check out rap star -- the left star dot com and it's basically you don't have to the pain he'd bang it's not one of these like you would free iPod gimmick things it's. It's really site that draws interest to you a lot of charities are charity of choice is the electronic frontier foundation media that -- that you. Awesome hackers like ourselves. And and and in addition to bringing light to do is charities they raffle off Austen equals topsy you get stuff like you know in addition to -- Austin prize bundle. They get things like Xbox 360 coach bag -- gift certificates now ulcers from places. So. You know you don't have to pay anything sign up for free account you can you get in and tickets on alternative ones sign up problems you want. And basically just when dig -- find out about awesome charities that you know. YouTube and eleven yes."

" So we want to -- graphs are and -- guys entry check out the website and get a ticket ten days left yeah there will not an -- but -- clever many guys but yet the last thing that we want to do is we want to -- Nikki Cox. -- yes. I know her Sheila is yet tactical point -- We -- on the on the wall there's a three -- Campaign machine that she did in binary and cheating and shadowing. Five logo so. We met Nikki in Tennessee. And we have absolutely thinkers said that you know want to do some especially guys we'll show talk. -- and yeah I mean it's it's prominently displayed right in her living room and -- gonna do."

" You know it was one of those things where it to the case then independently. And and I keep seeing. You like whoa. You. It's not like it better be partly. It's lies it's. -- listen -- this -- either. And through quality you know here technolust witnessed this and."

" Very cool yeah I mean -- my first and out of you know is like look and act that's an ancient native to this. Images that we wanted and she did all subsidies like -- we'll colors you want -- these ones you like to check your your -- has like. But obviously -- and everybody else who loved ones since. I love that. So. Through there yeah I think that's pretty much -- and it's free and -- it'll actually. Until next time and a."

" Well in the this. We figured let's start to go see it and that it."

" I was thinking."

" Com. While. Yonkers yeah. Hey that the settlement confidential."

mari1ee

Started discussion: November 19, 2008 @ 9:49am GMT

Episode 412 - Session Hijacking and Virtualizing Servers [Discussion]

Session Hijacking with a Pineapple, Hamster and Ferret and cell phone? A free and easy way to virtualize physical servers! And is WPA Broken? Ikea clusters, screencasting, and canvas technolust.

Watch or download the episode here.

davmoo
12 months ago
*Fantastic* episode!

And Snubsie said a potty word!
unn0129
12 months ago
They should cuss more. Soft words are boring.

Great episode guys.
AlaskaLoneWolf
12 months ago
I love this show. I really do.
Really liked the cluster too.
Although it would be waaaay
cooler to do one shaped liked
an igloo, a woodpile, or a doghouse...

y'know, maybe some Alaskastyle...

Give us a show on just encryption
and some of the better software
a guy can find out there, to counter it.
versions
12 months ago
Websites like banks can not be compromised by cookie snooping as long as the connection uses HTTPS.

VMware is cool, how does it compare with the open source VirtualBox?

Great show as always :)
fishtoprecords
12 months ago
I assume the rent-a-noob commerical is just a spoof, unsold time, so have fun.

What would you do with a noob? Have them put coffee cups on CD trays?

Ask about the "any" key and why its missing?
Snubs
12 months ago
so sorry i said a potty word!!!

gosh,
and i'm usually such a good girl, too ;)
davmoo
12 months ago
In reply to versions:
VMware is cool, how does it compare with the open source VirtualBox?


Having been around a lot longer, VMware is, in my opinion, a *lot* more polished and bug free than VirtualBox.
davmoo
12 months ago
In reply to Snubs:
and i'm usually such a good girl, too ;)


And when you're bad, I bet you're even better :D
computoman
12 months ago
In reply to davmoo:
Having been around a lot longer, VMware is, in my opinion, a *lot* more polished and bug free than VirtualBox.


virtual box v1 was real crappy. virtual box 2 is a lot better, but vmware is the most pro.
View all 9 comments