View by:

Wi-Fi Pineapples

Sunday, September 7th, 2008 – running time 35:33
In this season premiere episode of Hak5 Mubix joins us to talk about what's new in Maltego, an open source forensics and intelligence gathering tool. Shannon rocks out with Audio surf, and Darren heads downtown to the coffee shop to own a wireless network with a pineapple. Grab some hax0rflakes 'cause the bricks are gone and we're back!

Wi-Fi Pineapple

Why target individuals on a wireless network when you could have them come to you. Darren talks about the Jasager project, a small portable honey pot with a hunger for clients based on the La Fonera router. http://www.fon.com

Maltego

Mubix from http://room362.com heads down to show us some fun new features in the open source forensics and intelligence gathering tool Maltego. Download at http://www.paterva.com or find in the latest version of BackTrack at http://www.remote-exploit.org

Audio-Surf

Shannon reviews the IGF award winning music game by Invisible Handlebar. Audio-Surf is like the result of F-Zero and Guitar Hero hooking up with the ability to import your own music. Single, 2-player and co-op modes make this highly addictive game one of our favorites. Available through steam at www.audio-surf.com

LAN Party

We'll be hosting our first LAN Party this season all day Saturday, September 20th at game.hak5.org. Join in for some Counter-Strike: Source action. We'll be shooting two episodes back to back that day so feel free to hit up the setcam at http://hak5.org and watch as we fumble lines and try not to team-kill.

Highlights
Social Security ( 11:36, 21:28, 21:29, 11:36, 21:28, 21:29 ) open source ( 1:50, 8:58, 1:50, 8:58 ) Guitar Hero ( 26:09, 26:09 ) Middle East ( 24:08, 24:08 ) Social Security ( 11:36, 21:28, 21:29, 11:36, 21:28, 21:29 ) open source ( 1:50, 8:58, 1:50, 8:58 ) Guitar Hero ( 26:09, 26:09 ) Middle East ( 24:08, 24:08 )

Automatically Generated Transcript(may not be 100% accurate) ( more )

" War."

" This week's episode of tax side is brought to you by godaddy.com. Netflix dot com. That beer in twin -- harnessing the power of your twitter account for viral links are."

" Hey everybody welcome this episode Hak5 I'm your -- met last night and Darren Kitchen for those of you who haven't seen the show before we are shall focus on everything from systems administration. To white hat and black hat hacking and all the way and it was out of spectrum we also cover art or gaming."

" You can eat you -- blueprint there you know you can handsome but I do. First episode or season is still about etiquette and with the -- and let -- with four years for years in our first show on Revision 3 want to thank everybody read three for a having his record awesome have been so great to us in -- like -- so. We've got a show coming up this Monday they'll be watching on showtime on September -- We're also have a show on September 10. That Wednesday so yeah Wednesday that he doesn't -- more tech analysts and then we will be coming to you guys every Wednesday. At act I've got a word revision3.com. And finally that'll joke in the prayer. There's like a third or fourth episode of the first season we're like -- I don't pretend thoughtful on the every Wednesday yet. An anathema to the ten bucks but here we are. Finally it you know every week. Every week so what -- what we got going on this. Well Lucas has joined us and he's gonna be talking about open source tool that you can use to do a little bit forensic and a lot of intelligence gathering. Can you really fun and and you do it again. Yeah I'm gonna tell you guys all about this thing called audience there it's awesome you can put your own music into thinking outside all about it. Here's some of those. Boxes CDs and -- to give away Austin. And I'm going to be patent on pineapple. Yeah that some monstrosity. --"

" Aren't well without further -- guys. Thanks to check out Hak5 and -- yeah."

" with the guys I'm done in colonial Williamsburg. In front of my favorite coffee shop with a laptop and pineapple. I'm totally running wireless network. So let me tell you about it. Right last time we're down here is that Harrison and per season and we were doing smart cache poisoning man in the middle attacks on wireless. Victims ago than in any time you put. Coffee and why -- together becomes the target rich environment. That the problem with that is we're zoning use on an individual basis and that's kind of -- war. So what's happened is in conjunction with Netflix and and and Robin -- put together awesome tool analyzes to cull the herd. And make and come to us so poorly and in political. Aspect now. What we did was is I mentioned. You know this idea -- same idea put something very similar together he says that's totally possible. And you can do with this thing called karma that and -- the right. It's so it. Getting it on on not so easy that's Robin comes in place I met this guy Robin Hood that's new comments here. Totally elite hacker and I am not being sarcastic. Such -- to not a fond of in the UK. And he's gotten bad Wi-Fi and thing running and and it's beautiful. So. What we don't think this pineapple here to show you what we have here. Is. We have battery pack and we have on routers and we have some. Okay so what this thing does is basically exploits the way that is typical Mac windows PC's worked with a wireless access. So. -- They like you've got a windows laptop and a home you have like -- your wireless access point and say you work from microshaft so you're off if you have Microsoft corporate wireless right. The thing is when you turn your computer on it like this. The person it's gonna do is say oh in my home is -- to your -- so it's kinda probe requests right what this guy. Pick that up and says -- yeah yep that's me. Are you looking for the microshaft corporate network. That's me as well and just let -- join this networking of course we're in the middle schools I'm. And the beautiful thing about that's that's that's karma. Thing about this jasager. That's -- code named project gassed Kurds Germany means -- yes -- is that what this guy doesn't just said yes all day. Is that he's got -- Ajax interface. So I can -- here with my laptop and see the news is they joined for the Mac addresses and it'll drop down the let's review. Really cool thing to okay so right now it's pretty basic you know just eats CP get a associated with the access point all funny games and then they get this in between and fire up wire charred corps or maybe I'll take -- step further. That's the fun thing about this hack is that we can build on it completely. So we can take that somebody who can -- upside down tree and turn every graphic -- web -- upside down all the news on the supplement -- English isn't. You know fire up Metasploit and see if maybe they don't have all the latest windows -- that would really be a shame because in number no one mean these in the corporate laptops here. And they've all said yes. Yes that's my access point I'd like to join it so. On so you know big thanks to Robin -- for help in this together and Mubix definitely. And we will actually be breaking this guy apart next week we're gonna open up an Apple and actually had to put together your own on louder. With this code and hopefully you know released this -- that we connect. And it's and -- make it to you. Much more cooler things and then later this month. We're going to be at -- and no please be with Robin what about the development of this thing I'm really excited about all the possibilities for the pineapple and I have because stick around for next week when we open it up and talk about what an Apple part two. Installing massacre."

" Okay at pine Apple. Sounds scary you know I'm really excited about -- kind in San Diego what candidates for that and we can be there September 26 through the 28."

" In San Diego at work on formula."

" Yes so. Since we're going to be there -- on eBay is follow us on twitter it will give -- hacked vice flat we'll tell you guys where we're at during the tour toward an end."

" I'm definitely really excited to meet this Robin white guy who's this guide to anonymous Yukon last year and we've just been conversing mean talent like has had to send him on matter and Catholic. Seriously elite hacker is -- by. Well and he's he's down with the Linux kernel instead I'll -- yeah very cool stuff cool composed of about that. So our trivia this month this week we get --"

" This week -- trivia is sponsored I'd godaddy.com."

" GoDaddy offers 99 point 9% of time. 247 support and free access to hosting connection which is deep place to install over thirty free applications. Should help you get the most from your hosting plan and let's. Plus if you enter -- hacked and that's HAK. 1. When you check out you save an additional 10% off entire order some restrictions apply see site for details. Get your piece of the Internet -- godaddy.com. And this week's trivia it is. What does the name of the graffiti established to it doesn't you -- feature on and chopped in public places that signifies the presence of Wi-Fi. And senate doing our usual email -- is likely to do and stop that there."

" so basically we've still got people emailing us from like season one and -- into trivia question and that means you Bryan and mindless but -- forums."

" I must have like at least 500. Different. It's a bridge was machine. Okay yeah enough is enough."

" So did the first one on the forums of and then everybody you know part of an answer exactly though it's free stuff and you get props in public yet. Yet that's exactly what we're doing. Will actually let out a brand -- threat it's going to be the trivia threat so the first person that answers the question correctly for that we. We'll send you piano asking for -- address for your name and we'll send you some -- that's what -- possibly some sticker means something else knows of my change up. We'll figure that out. Next and next you nude -- he's gonna talk to us about Montego. It's a source intelligence open source intelligence in forensics tool. But first we're gonna give you -- quick though."

" Like if your username and passwords sites that -- had fortunately to the crippled service that has become twitter when you could sign up for twitter fishing today. What are -- hottest new -- to put a service that harnesses the social networking power of your twitter account and mash it up with a crowd sourced but generate of -- army. And the bulletin opening day. -- the first annual social circle join to feature is easy all you have to do is go to twitter -- dot com and sign up with your twitter username and password. Exciting you'll be given shiny red to put a bad for your blog reforms in nature it's that simple to -- and implement them on an alliance is responsible for your device."

" It was a round storm. An awesome -- come down from the Christian liberal I'm excited so I would into a multimedia. Yeah so we talked about Nokia wasn't even named male ego knows evolution -- so organic of the people that are new to this completely what's Nokia. So multi who has an information gathering -- And what it does is correlate that data just like. It's it's nothing more than really -- searches at this point. But a lot more powerful okay. Is Google searching on crack -- wonder what he really uses for and the and it doesn't just ego searching and this is information gathering to every level to. To military into a decision you're like on penetration test or if you just trying to find out weird stuff you never knew about your girlfriend. Or your Social Security number online okay. This other examples like. Checking out not -- possible employees you know username and ordered him like -- this guy. Right into his own presence through loyalty and then go. So he thought of that there's there's new versions of -- since we last talked right wherever you -- right now okay and there's different editions -- he got the full. Bloom addition and then you have the community is. Communities and has a lot of constraints to wear. As 152 wait time on slash trained a couple of things that kind of constrict how to use it. But still quite easily and very nice. Industry pretty well of what are we are we in rivers -- here -- the full blown version of crippled launderers and and you can find this built into it backtrack now community edition is the ultimate. We sort of the -- really nifty new features. So certain that. Those other missing features is. Transforms are now. No longer just Hilton's. The applications so they can add transforms a little framework he had to -- that what is that transformed and people generally -- with of that sort transformer is basically an API calls aims. This can be an in depth they've got a call. So something macros form. Nine different guys on nine different sites like the social networking. Okay. So so okay and it kind an application programming interface right so for example the the way of understanding this is that the social network transform. Quarries different social networking sites like FaceBook MySpace linkedin all of which have open API is that you can use to do searching. And this integrates the CPI's into the transformed so you can titans woman's name. And then do a transform. Social networks and find out where they. Exist all around the different Internet tubes. In their differences and so say say I want to look at appearing onerous and see what other social networks you're on. Let's --"

" Okay so we start with a group and a lot of people. Just a one thing in but when you're doing intelligence information -- you want to put as much information as you already know in their pockets we're looking we're trying to he's reconnaissance on the -- I acts are federal unhappy ipodder -- with math so we have facility in August is that we now and here's some in the -- we know we have new exact I don't know are there had -- call Nat all always packed crowd or right okay. -- there and more selections we also liked -- and this is one thing that community version does not have as we can sort them on dude. To transfer you have to you wanted to do you anticipate what version you can do as many transforms and many new ads as you want but. When it comes of the community edition it's one thing at a time right so even if I had 15000. And these are a lot more legwork. Okay. So. Leo in the Iranians. -- either early militarist who wouldn't it's great to do transformed from email works to Susan -- school. This is actually using correctly which is a social networking search and and now what we found is that. You and I have -- presences. It's looking -- and we are there -- or dentists in on FaceBook USB okay. And then Flickr -- And then also on links in Arlington. Kind of sorted them incorrectly. And real or rename which comes and press person. -- as a person and continue on from there. Also has me on Flickr Arlington. MySpace and --"

" So now that we have these what other kind of queries can we -- cookies. So you told me loaded up heaps of time PHP PGP ports right what is that. So Nokia GP keys are signed emails and we -- like public keys I host my public PG -- under its neck. How does that as and use these societies super sleuth the penetration testing -- trying to hack -- that org."

" How is that -- tell you. So say I wanna come January your users or people that are part of that organization. I want to go and I've seen if you signed any other keys so if I didn't initially in my you know search on the domain didn't find or do a search and whatever other and so I'm doing. Find email addresses I can easier PG PCs to find out who you -- as well suffice client. That. Darren sign -- scheme I never had -- And you know that we must be either coincidences or -- because you know that they're the proof and then it says accent or pretty bright. Now what about netted. Dozens -- searches on five website and you pounds and things we could -- metadata hurt that also minute greatest things that are stored in the additional to file like experience. And Yzerman museums and host names for word -- for instance really good for especially war like word documents and you know or sorry. Takes over and it's like is questionable word document just standard Microsoft office word PowerPoint and a and a on my website and -- McCain guys take a look at this stuff. What's that manages you can find it and so. Using policy is transform -- this specific competitive as a force user names and so now I have. My own blog and your -- you weren't as large -- and sometimes it's. Even you can figure further and go okay this is fair. Naming conventions so you can. I think in usual mind to say this is probably his using this -- is usually aren't you know that."

" Okay and that would maybe help you -- like you already know what the person's kids' names are you with their name is there their home address and phone number you've got all this welcome. Nation that is an -- docking now you have there username so they called IT department you know like. You've -- locked down needed to do some real social networks and social engineering."

" And with FaceBook they have here from birthday kind of public now are they used to with -- actually. And you birthdays and I have there. Birth all of Israel's and I can call credit card applications things like birthday what about dean asked him indeed it reports -- pulled -- Right so just brute -- is nothing there. What it is is basically guessing. Your -- things that -- there. Web sites with -- or so doing you have potential of bad WWW guy -- question Peta or other forms an Arab which he PBS. Do whatever. Right and that will give you. Others. Other sites tactics or other information on Etsy and continue on down those roads were."

" And also with as he said that you could find an IP address and then. From just that IP address undoubtedly -- here web hosting service and what other you know like -- dream estrogen -- dot -- but there's also -- bunch of others that are aware that -- and I and I. In any pregnancy that a mouse like my neighbors from them just continue on from there okay. Cool so what -- some of these things that are coming in and LT two point one."

" So to what was coming out. In the near future hopefully it's. Still in development. But. Local transforms. And right now your all cancers that you're doing are through the API keys that. Well Technorati ones are part of your own all the other transfer usually catch is that they're rooms -- because it takes a while the register -- developer and all these those things the only guy he -- president he's he's getting -- Google maps he Yankee Regis China with a valid email address and wait some time had it right. So in two point one you'll have local transforms which means you can be completely off the Internet and uses transforms. So once I've used before. Are. Active directory cheerfully. These are active directory founder of sanitation system inside the networks are now and I do. Actor director calls with north indications -- crawl somebody's SharePoint server and active directory. You know household mine and right information especially considering data all the metadata in fact I hear you."

" Others agree pieces -- or for anybody -- looking to view. You know and that's the penetration testing and if you want to take -- social aspect. It's just you know treasure trove of information prohibited Chinese -- network definitely. How can use this maybe you know it has to step up apparently felt a little bit. And and little concerned about privacy maybe I'm concerned the iPod myself -- might get you know leak or something how to lie. You know used this tool to protect myself rather than you know go. Right so your systems so. Prices are no I would never turned movie clot what do I look. I know that I could never get your."

" I would never are so. -- reminds us for an example offering a line. I showed him emotionally so called revolution name and we looked at his you know addresses but then he. Can process some interesting data on Craig's list he's never posted great success in an account. But he found a friend of his has used his him as a reference. With his Social Security full Social Security numbers and Andy's do birth and you know address. In his Craig's list goes to get a job. You know obviously contact pregnant content editors got yeah. Scary stuff so. I can never know who who so if outline your friends listen. To your home I -- right. What grade friend you Humphrey and I thought so. Yeah so where am I gonna download this thing -- phone number and -- and so backtrack three actually has commuters and built into it engine remote exploit I had ordered monitoring. See him. If you are to have backtrack just find it it's in the interest in gathering many options and then. If you want it on windows X or Mac OS is download off of -- or her dot org."

" And of course you have an excellent article your own website it talks about a lot of more in depth stuff that we couldn't drill down into. This something that you are very interested in definitely check and the good site. Room -- room 360 dot com and this company has -- really interest in and let us know we can drill deeper into this and and take just. Little chunks of it and go into that her pulling segment in the future -- thing I forgot to mention was that it -- you. There's a new set of transfer called peace pacts and -- has penetration. Oh so it took him when he's coming out. Those -- coming also in development for -- what great about America folders. Can -- come back and show us this penetration testing transformed definitely iPod units thanks so much. Coming on and -- we're gonna check in with an announced -- on on the Lan party Shannon."

" Thank you -- Setup this month we're having a lamp party units get sponsored by Netflix and Netflix. I suggest that anybody. Netflix is sponsoring the show as most of you know Netflix. And Netflix you can read over 90000 titles online including lots and lots of Blu-ray titles with free shipping both ways to your home impact. They have over forty shipping centers so almost all deliveries happen in one business day the Netflix plans started -- four dollars and 99 cents. In as a new member in Hak5 feet and you can get and no -- two week free trial membership. So check it out at www. Netflix dot com slash -- and please don't forget the WWW. So this month's. Lan party is counterstrike source. And I am super excited I don't know about you guys and it kind of -- counterstrike so I'll probably be making a new about it."

" I don't know -- acting in the 1990. I'm just gonna walk right readable and entered its ninetieth. Our -- Middle East we do would you -- Jeff ma yeah."

" Honestly right LL AK 47. All over the place to pray and pray and you have whatever --"

" Hall -- my son we will judge we won't judge."

" Yes that's okay so when the dates on that. That's going to be September 20 and we're filming the next episodes all that so will probably be streaming this online Hak5 dot org. And you can join up faster I game dot hack. As well. So I'm going to be. Doing this really cool gaming segment about audience there that worst first I'm gonna have daring do that's really cool utility for. How."

" Wanted to talk to guys about this really utility -- recently when a cabinet. Fix what it might. Users PCs. And it's one of the games and having people run as administrator in the negative crap and and trying to. Yeah cleanup of PC and click trying to clean up a spare really mother uses it turned it -- anyway long story short. I like a laundry list of all of these things need to do an aside from the regulars like CC cleaner and should be using. There's this neat utility that island -- utilities. And as you can see here it's really simple to set up you just install it and and then you. -- good to -- and the utilities in here the one that I find it the most useful is this -- uninstall utility. So here again it's just like add remove programs except you can just go ahead and check all these little punks they don't want to ever see again. And -- gone. So that is my pick for the week let's take some time you can find that in the show notes I don't."

" Yeah what's up with."

" When -- and a I need anything that needed to thank you Darren and you need to what walk over there -- not mean this view -- just this is the -- just. So what are we got a chance to. We have audio surf it's basically this musical game where you're running down the threats of a Guitar Hero guitar okay that's pretty much what it is. That's collecting Block's easy I. I'd like that yet it's very easy it's a really really casual game for like if you're coming home from school and then you're going to work in a couple of minutes and you want to sit down and play -- for a few minutes. You have ideas there. I think the best thing about this game is that you can upload your own songs. From your own collection and whether it's. You know iTunes. Rather it's -- MP3. Whatever you -- and it creates the track yeah -- exactly it creates the -- to the read them -- that song all the beats go along the court alleged correlate with the different Braxton and you have to pick up the bricks that are at the same color and the song. That gives you a bonus and if you run into the wrong however it slightly gray brick and this version right. Then -- negative points and that's not yet we don't want that."

" Now -- excerpt that. Com so we can -- music thinking plays really simplistic it's very like that on and is there a demo or anything we can now yes there is."

" I actually downloaded the demos from steam steam of course everybody -- is there any other -- distributed bite bite out right now. And and this the demo -- you can only play about five different songs until it tells you that you need to by the full version. But since the full versions only ten dollars. Why not I mean it's addictive enough you're gonna play enough technology can't be that where we go again again you can find this at ideas that -- dot com are you can download it straight from seeing."

" All right well. I let's give back to your game since you seem obviously assessment signing a business plan and company and over on there and have fun thanks."

" I -- that just about wraps up the cents a pack before Dick on a couple of things need to talk about. First of all got to thank Mubix over room 362 dot -- to come down and talking to us about all that on forensic investigation software. We need to remind you guys that we will be airing against this Wednesday September 10 that you watch on Monday two days later it's more technolust. You and that's because we're gonna have Chris -- here talking about. One. That are essentially reverse engineering thank you -- product it's you know it's written product people whatever exact. And also. So you can back. I can't stress this enough this is new season as a new set. -- distances cast. And running your network so obviously we're very excited to hear what you guys have to think about the show the format. This segment he'd like to see all that fun stuff don't be shy just go -- email. Feedback act on dot org because all of us and we really looks see that. So if there's something undermine or check this if you've got an idea for segment something you think that we should cover. Totally let us now because I mean public safety chief executives. -- possesses nearly -- 160 someone segment fit. So you know. Let let us know who'd love to you know bringing guys what you went C. The fee you can subscribe to us on iTunes did not follow us on twitter. So -- election and I wouldn't be it four on you can follow us you can just. -- And you can see who it policy Paulus all of us and then you can see what's going on with the passing when we're doomed to lives cancer treatment constantly. So what else it's the feedback. And the forums of course we I think and -- CRC. -- Happily hosted by an entire season Iraq. And we've been drinking -- all week. Because there are new -- sponsor and we are. Very thankful because we've been you know growing fond of it all week Iraq and the light version which is like 65 calories."

" Yes 64 calories actually be -- site is good these through number yeah. Specs is the number one German export beer no. There is this this key here business symbolic -- yet -- and I kind of graphic bomb basically it's from the coat of arms of the founding city. -- in Germany and -- as -- on the label though that's actually help me a lot. But dump the one great thing is that is launching a new campaigns called next key club. On that it's open to all -- drinkers. I'm in you can go there he -- special events exclusive content and freed next year when you sign up next key club dot com."

" Up next here come and on the way so we can we -- see what's in there hopefully get here. And next it says it's been in power but that except that after that we'll see yeah. So again thanks to backs and out to him in her very first day on the show orbit round out -- The great and they'll look for more things."

" There's one thing one more thing that we want to mention that is Hak5 stickers and commercial flag on -- Go to Hak5 dot org slash stickers were also going to be putting together on a bunch of different package."

" Is the ultimate. -- posh Baghdad but it's so basically -- related donated for the stickers between like. When house flooded and now has really helped us rebuild and and build the season -- studio. So we want to thank you all and we want to put together a big way back. -- like a limited thing like him like a hundred. Problem that -- you know science now and hopefully get us to the next level which is I -- notice the quality of standard Def. Not so much anymore we're gonna show you get what you put together special dvd that's a little behind the scenes of how this crazy rat's nest works it's it's mainly just. Splinters and adapters and add public cables and then Soviet."

" So help us help you are basically when we go ahead and sell through. The hundred alt -- bags. What we can actually do we can actually purchase our -- help all the donations. That go to the stickers into this rag bag and go directly toward the purchase of RH if you already."

" Purchased our cameras they were some awesome inexpensive. Panasonic. Consumer grade stuff to get that component how many we're doing this on hacker level but. Turns out that. Speaking -- are still in this image super expensive. But we need to get here because the screen captures need to be a lot better we know that we want it to be. And you know on the go ahead and Austin what you guys know and if you if you get us there. -- little little meter show you how our progress is that if they're I want him to make up you can watch him on their chips cut. --"

" I appreciate it. I -- I should probably also go to the purchase of a racer yeah even before the next episode if you use an -- yeah all right. We'll without further do we really -- you guys you in on Wednesday for a forum to."

" And that's an example -- test different. And what. That's great yeah. Grandma like yeah. Heavy grandmas yeah. -- an agreement yeah."

" Everybody welcomed the -- of -- live on. I have no idea we're going to think it's -- but because the -- example on this and that's. Hey welcome to Hak5 on the host Darren Kitchen that I met last night and today we're -- a whole bunch -- are being done. It's -- warm hundreds of digital. Hello and welcome pack five on your post your kitchen on LSI's and five is great. Let me try this again and we'll come back from -- swallows at the moment."

" Yeah. -- just I don't want the clinical coming out of my head so it's on lots."

" And now it's got drivers that we can you sound. Seriously. There's at least. Ports and let you didn't do. A little -- white and black attacking -- in the spectrum. Both of these this is. -- yeah or if the default when the average download it. Look at. That please -- the -- There Jennifer you're it's. Okay. -- Yeah I have something going and yeah. Why not because there's like. A good yeah yeah you're -- don't wanna model zero fans."

" War."

" This week's episode of tax side is brought to you by godaddy.com. Netflix dot com. That beer in twin -- harnessing the power of your twitter account for viral links are."

" Hey everybody welcome this episode Hak5 I'm your -- met last night and Darren Kitchen for those of you who haven't seen the show before we are shall focus on everything from systems administration. To white hat and black hat hacking and all the way and it was out of spectrum we also cover art or gaming."

" You can eat you -- blueprint there you know you can handsome but I do. First episode or season is still about etiquette and with the -- and let -- with four years for years in our first show on Revision 3 want to thank everybody read three for a having his record awesome have been so great to us in -- like -- so. We've got a show coming up this Monday they'll be watching on showtime on September -- We're also have a show on September 10. That Wednesday so yeah Wednesday that he doesn't -- more tech analysts and then we will be coming to you guys every Wednesday. At act I've got a word revision3.com. And finally that'll joke in the prayer. There's like a third or fourth episode of the first season we're like -- I don't pretend thoughtful on the every Wednesday yet. An anathema to the ten bucks but here we are. Finally it you know every week. Every week so what -- what we got going on this. Well Lucas has joined us and he's gonna be talking about open source tool that you can use to do a little bit forensic and a lot of intelligence gathering. Can you really fun and and you do it again. Yeah I'm gonna tell you guys all about this thing called audience there it's awesome you can put your own music into thinking outside all about it. Here's some of those. Boxes CDs and -- to give away Austin. And I'm going to be patent on pineapple. Yeah that some monstrosity. --"

" Aren't well without further -- guys. Thanks to check out Hak5 and -- yeah."

" with the guys I'm done in colonial Williamsburg. In front of my favorite coffee shop with a laptop and pineapple. I'm totally running wireless network. So let me tell you about it. Right last time we're down here is that Harrison and per season and we were doing smart cache poisoning man in the middle attacks on wireless. Victims ago than in any time you put. Coffee and why -- together becomes the target rich environment. That the problem with that is we're zoning use on an individual basis and that's kind of -- war. So what's happened is in conjunction with Netflix and and and Robin -- put together awesome tool analyzes to cull the herd. And make and come to us so poorly and in political. Aspect now. What we did was is I mentioned. You know this idea -- same idea put something very similar together he says that's totally possible. And you can do with this thing called karma that and -- the right. It's so it. Getting it on on not so easy that's Robin comes in place I met this guy Robin Hood that's new comments here. Totally elite hacker and I am not being sarcastic. Such -- to not a fond of in the UK. And he's gotten bad Wi-Fi and thing running and and it's beautiful. So. What we don't think this pineapple here to show you what we have here. Is. We have battery pack and we have on routers and we have some. Okay so what this thing does is basically exploits the way that is typical Mac windows PC's worked with a wireless access. So. -- They like you've got a windows laptop and a home you have like -- your wireless access point and say you work from microshaft so you're off if you have Microsoft corporate wireless right. The thing is when you turn your computer on it like this. The person it's gonna do is say oh in my home is -- to your -- so it's kinda probe requests right what this guy. Pick that up and says -- yeah yep that's me. Are you looking for the microshaft corporate network. That's me as well and just let -- join this networking of course we're in the middle schools I'm. And the beautiful thing about that's that's that's karma. Thing about this jasager. That's -- code named project gassed Kurds Germany means -- yes -- is that what this guy doesn't just said yes all day. Is that he's got -- Ajax interface. So I can -- here with my laptop and see the news is they joined for the Mac addresses and it'll drop down the let's review. Really cool thing to okay so right now it's pretty basic you know just eats CP get a associated with the access point all funny games and then they get this in between and fire up wire charred corps or maybe I'll take -- step further. That's the fun thing about this hack is that we can build on it completely. So we can take that somebody who can -- upside down tree and turn every graphic -- web -- upside down all the news on the supplement -- English isn't. You know fire up Metasploit and see if maybe they don't have all the latest windows -- that would really be a shame because in number no one mean these in the corporate laptops here. And they've all said yes. Yes that's my access point I'd like to join it so. On so you know big thanks to Robin -- for help in this together and Mubix definitely. And we will actually be breaking this guy apart next week we're gonna open up an Apple and actually had to put together your own on louder. With this code and hopefully you know released this -- that we connect. And it's and -- make it to you. Much more cooler things and then later this month. We're going to be at -- and no please be with Robin what about the development of this thing I'm really excited about all the possibilities for the pineapple and I have because stick around for next week when we open it up and talk about what an Apple part two. Installing massacre."

" Okay at pine Apple. Sounds scary you know I'm really excited about -- kind in San Diego what candidates for that and we can be there September 26 through the 28."

" In San Diego at work on formula."

" Yes so. Since we're going to be there -- on eBay is follow us on twitter it will give -- hacked vice flat we'll tell you guys where we're at during the tour toward an end."

" I'm definitely really excited to meet this Robin white guy who's this guide to anonymous Yukon last year and we've just been conversing mean talent like has had to send him on matter and Catholic. Seriously elite hacker is -- by. Well and he's he's down with the Linux kernel instead I'll -- yeah very cool stuff cool composed of about that. So our trivia this month this week we get --"

" This week -- trivia is sponsored I'd godaddy.com."

" GoDaddy offers 99 point 9% of time. 247 support and free access to hosting connection which is deep place to install over thirty free applications. Should help you get the most from your hosting plan and let's. Plus if you enter -- hacked and that's HAK. 1. When you check out you save an additional 10% off entire order some restrictions apply see site for details. Get your piece of the Internet -- godaddy.com. And this week's trivia it is. What does the name of the graffiti established to it doesn't you -- feature on and chopped in public places that signifies the presence of Wi-Fi. And senate doing our usual email -- is likely to do and stop that there."

" so basically we've still got people emailing us from like season one and -- into trivia question and that means you Bryan and mindless but -- forums."

" I must have like at least 500. Different. It's a bridge was machine. Okay yeah enough is enough."

" So did the first one on the forums of and then everybody you know part of an answer exactly though it's free stuff and you get props in public yet. Yet that's exactly what we're doing. Will actually let out a brand -- threat it's going to be the trivia threat so the first person that answers the question correctly for that we. We'll send you piano asking for -- address for your name and we'll send you some -- that's what -- possibly some sticker means something else knows of my change up. We'll figure that out. Next and next you nude -- he's gonna talk to us about Montego. It's a source intelligence open source intelligence in forensics tool. But first we're gonna give you -- quick though."

" Like if your username and passwords sites that -- had fortunately to the crippled service that has become twitter when you could sign up for twitter fishing today. What are -- hottest new -- to put a service that harnesses the social networking power of your twitter account and mash it up with a crowd sourced but generate of -- army. And the bulletin opening day. -- the first annual social circle join to feature is easy all you have to do is go to twitter -- dot com and sign up with your twitter username and password. Exciting you'll be given shiny red to put a bad for your blog reforms in nature it's that simple to -- and implement them on an alliance is responsible for your device."

" It was a round storm. An awesome -- come down from the Christian liberal I'm excited so I would into a multimedia. Yeah so we talked about Nokia wasn't even named male ego knows evolution -- so organic of the people that are new to this completely what's Nokia. So multi who has an information gathering -- And what it does is correlate that data just like. It's it's nothing more than really -- searches at this point. But a lot more powerful okay. Is Google searching on crack -- wonder what he really uses for and the and it doesn't just ego searching and this is information gathering to every level to. To military into a decision you're like on penetration test or if you just trying to find out weird stuff you never knew about your girlfriend. Or your Social Security number online okay. This other examples like. Checking out not -- possible employees you know username and ordered him like -- this guy. Right into his own presence through loyalty and then go. So he thought of that there's there's new versions of -- since we last talked right wherever you -- right now okay and there's different editions -- he got the full. Bloom addition and then you have the community is. Communities and has a lot of constraints to wear. As 152 wait time on slash trained a couple of things that kind of constrict how to use it. But still quite easily and very nice. Industry pretty well of what are we are we in rivers -- here -- the full blown version of crippled launderers and and you can find this built into it backtrack now community edition is the ultimate. We sort of the -- really nifty new features. So certain that. Those other missing features is. Transforms are now. No longer just Hilton's. The applications so they can add transforms a little framework he had to -- that what is that transformed and people generally -- with of that sort transformer is basically an API calls aims. This can be an in depth they've got a call. So something macros form. Nine different guys on nine different sites like the social networking. Okay. So so okay and it kind an application programming interface right so for example the the way of understanding this is that the social network transform. Quarries different social networking sites like FaceBook MySpace linkedin all of which have open API is that you can use to do searching. And this integrates the CPI's into the transformed so you can titans woman's name. And then do a transform. Social networks and find out where they. Exist all around the different Internet tubes. In their differences and so say say I want to look at appearing onerous and see what other social networks you're on. Let's --"

" Okay so we start with a group and a lot of people. Just a one thing in but when you're doing intelligence information -- you want to put as much information as you already know in their pockets we're looking we're trying to he's reconnaissance on the -- I acts are federal unhappy ipodder -- with math so we have facility in August is that we now and here's some in the -- we know we have new exact I don't know are there had -- call Nat all always packed crowd or right okay. -- there and more selections we also liked -- and this is one thing that community version does not have as we can sort them on dude. To transfer you have to you wanted to do you anticipate what version you can do as many transforms and many new ads as you want but. When it comes of the community edition it's one thing at a time right so even if I had 15000. And these are a lot more legwork. Okay. So. Leo in the Iranians. -- either early militarist who wouldn't it's great to do transformed from email works to Susan -- school. This is actually using correctly which is a social networking search and and now what we found is that. You and I have -- presences. It's looking -- and we are there -- or dentists in on FaceBook USB okay. And then Flickr -- And then also on links in Arlington. Kind of sorted them incorrectly. And real or rename which comes and press person. -- as a person and continue on from there. Also has me on Flickr Arlington. MySpace and --"

" So now that we have these what other kind of queries can we -- cookies. So you told me loaded up heaps of time PHP PGP ports right what is that. So Nokia GP keys are signed emails and we -- like public keys I host my public PG -- under its neck. How does that as and use these societies super sleuth the penetration testing -- trying to hack -- that org."

" How is that -- tell you. So say I wanna come January your users or people that are part of that organization. I want to go and I've seen if you signed any other keys so if I didn't initially in my you know search on the domain didn't find or do a search and whatever other and so I'm doing. Find email addresses I can easier PG PCs to find out who you -- as well suffice client. That. Darren sign -- scheme I never had -- And you know that we must be either coincidences or -- because you know that they're the proof and then it says accent or pretty bright. Now what about netted. Dozens -- searches on five website and you pounds and things we could -- metadata hurt that also minute greatest things that are stored in the additional to file like experience. And Yzerman museums and host names for word -- for instance really good for especially war like word documents and you know or sorry. Takes over and it's like is questionable word document just standard Microsoft office word PowerPoint and a and a on my website and -- McCain guys take a look at this stuff. What's that manages you can find it and so. Using policy is transform -- this specific competitive as a force user names and so now I have. My own blog and your -- you weren't as large -- and sometimes it's. Even you can figure further and go okay this is fair. Naming conventions so you can. I think in usual mind to say this is probably his using this -- is usually aren't you know that."

" Okay and that would maybe help you -- like you already know what the person's kids' names are you with their name is there their home address and phone number you've got all this welcome. Nation that is an -- docking now you have there username so they called IT department you know like. You've -- locked down needed to do some real social networks and social engineering."

" And with FaceBook they have here from birthday kind of public now are they used to with -- actually. And you birthdays and I have there. Birth all of Israel's and I can call credit card applications things like birthday what about dean asked him indeed it reports -- pulled -- Right so just brute -- is nothing there. What it is is basically guessing. Your -- things that -- there. Web sites with -- or so doing you have potential of bad WWW guy -- question Peta or other forms an Arab which he PBS. Do whatever. Right and that will give you. Others. Other sites tactics or other information on Etsy and continue on down those roads were."

" And also with as he said that you could find an IP address and then. From just that IP address undoubtedly -- here web hosting service and what other you know like -- dream estrogen -- dot -- but there's also -- bunch of others that are aware that -- and I and I. In any pregnancy that a mouse like my neighbors from them just continue on from there okay. Cool so what -- some of these things that are coming in and LT two point one."

" So to what was coming out. In the near future hopefully it's. Still in development. But. Local transforms. And right now your all cancers that you're doing are through the API keys that. Well Technorati ones are part of your own all the other transfer usually catch is that they're rooms -- because it takes a while the register -- developer and all these those things the only guy he -- president he's he's getting -- Google maps he Yankee Regis China with a valid email address and wait some time had it right. So in two point one you'll have local transforms which means you can be completely off the Internet and uses transforms. So once I've used before. Are. Active directory cheerfully. These are active directory founder of sanitation system inside the networks are now and I do. Actor director calls with north indications -- crawl somebody's SharePoint server and active directory. You know household mine and right information especially considering data all the metadata in fact I hear you."

" Others agree pieces -- or for anybody -- looking to view. You know and that's the penetration testing and if you want to take -- social aspect. It's just you know treasure trove of information prohibited Chinese -- network definitely. How can use this maybe you know it has to step up apparently felt a little bit. And and little concerned about privacy maybe I'm concerned the iPod myself -- might get you know leak or something how to lie. You know used this tool to protect myself rather than you know go. Right so your systems so. Prices are no I would never turned movie clot what do I look. I know that I could never get your."

" I would never are so. -- reminds us for an example offering a line. I showed him emotionally so called revolution name and we looked at his you know addresses but then he. Can process some interesting data on Craig's list he's never posted great success in an account. But he found a friend of his has used his him as a reference. With his Social Security full Social Security numbers and Andy's do birth and you know address. In his Craig's list goes to get a job. You know obviously contact pregnant content editors got yeah. Scary stuff so. I can never know who who so if outline your friends listen. To your home I -- right. What grade friend you Humphrey and I thought so. Yeah so where am I gonna download this thing -- phone number and -- and so backtrack three actually has commuters and built into it engine remote exploit I had ordered monitoring. See him. If you are to have backtrack just find it it's in the interest in gathering many options and then. If you want it on windows X or Mac OS is download off of -- or her dot org."

" And of course you have an excellent article your own website it talks about a lot of more in depth stuff that we couldn't drill down into. This something that you are very interested in definitely check and the good site. Room -- room 360 dot com and this company has -- really interest in and let us know we can drill deeper into this and and take just. Little chunks of it and go into that her pulling segment in the future -- thing I forgot to mention was that it -- you. There's a new set of transfer called peace pacts and -- has penetration. Oh so it took him when he's coming out. Those -- coming also in development for -- what great about America folders. Can -- come back and show us this penetration testing transformed definitely iPod units thanks so much. Coming on and -- we're gonna check in with an announced -- on on the Lan party Shannon."

" Thank you -- Setup this month we're having a lamp party units get sponsored by Netflix and Netflix. I suggest that anybody. Netflix is sponsoring the show as most of you know Netflix. And Netflix you can read over 90000 titles online including lots and lots of Blu-ray titles with free shipping both ways to your home impact. They have over forty shipping centers so almost all deliveries happen in one business day the Netflix plans started -- four dollars and 99 cents. In as a new member in Hak5 feet and you can get and no -- two week free trial membership. So check it out at www. Netflix dot com slash -- and please don't forget the WWW. So this month's. Lan party is counterstrike source. And I am super excited I don't know about you guys and it kind of -- counterstrike so I'll probably be making a new about it."

" I don't know -- acting in the 1990. I'm just gonna walk right readable and entered its ninetieth. Our -- Middle East we do would you -- Jeff ma yeah."

" Honestly right LL AK 47. All over the place to pray and pray and you have whatever --"

" Hall -- my son we will judge we won't judge."

" Yes that's okay so when the dates on that. That's going to be September 20 and we're filming the next episodes all that so will probably be streaming this online Hak5 dot org. And you can join up faster I game dot hack. As well. So I'm going to be. Doing this really cool gaming segment about audience there that worst first I'm gonna have daring do that's really cool utility for. How."

" Wanted to talk to guys about this really utility -- recently when a cabinet. Fix what it might. Users PCs. And it's one of the games and having people run as administrator in the negative crap and and trying to. Yeah cleanup of PC and click trying to clean up a spare really mother uses it turned it -- anyway long story short. I like a laundry list of all of these things need to do an aside from the regulars like CC cleaner and should be using. There's this neat utility that island -- utilities. And as you can see here it's really simple to set up you just install it and and then you. -- good to -- and the utilities in here the one that I find it the most useful is this -- uninstall utility. So here again it's just like add remove programs except you can just go ahead and check all these little punks they don't want to ever see again. And -- gone. So that is my pick for the week let's take some time you can find that in the show notes I don't."

" Yeah what's up with."

" When -- and a I need anything that needed to thank you Darren and you need to what walk over there -- not mean this view -- just this is the -- just. So what are we got a chance to. We have audio surf it's basically this musical game where you're running down the threats of a Guitar Hero guitar okay that's pretty much what it is. That's collecting Block's easy I. I'd like that yet it's very easy it's a really really casual game for like if you're coming home from school and then you're going to work in a couple of minutes and you want to sit down and play -- for a few minutes. You have ideas there. I think the best thing about this game is that you can upload your own songs. From your own collection and whether it's. You know iTunes. Rather it's -- MP3. Whatever you -- and it creates the track yeah -- exactly it creates the -- to the read them -- that song all the beats go along the court alleged correlate with the different Braxton and you have to pick up the bricks that are at the same color and the song. That gives you a bonus and if you run into the wrong however it slightly gray brick and this version right. Then -- negative points and that's not yet we don't want that."

" Now -- excerpt that. Com so we can -- music thinking plays really simplistic it's very like that on and is there a demo or anything we can now yes there is."

" I actually downloaded the demos from steam steam of course everybody -- is there any other -- distributed bite bite out right now. And and this the demo -- you can only play about five different songs until it tells you that you need to by the full version. But since the full versions only ten dollars. Why not I mean it's addictive enough you're gonna play enough technology can't be that where we go again again you can find this at ideas that -- dot com are you can download it straight from seeing."

" All right well. I let's give back to your game since you seem obviously assessment signing a business plan and company and over on there and have fun thanks."

" I -- that just about wraps up the cents a pack before Dick on a couple of things need to talk about. First of all got to thank Mubix over room 362 dot -- to come down and talking to us about all that on forensic investigation software. We need to remind you guys that we will be airing against this Wednesday September 10 that you watch on Monday two days later it's more technolust. You and that's because we're gonna have Chris -- here talking about. One. That are essentially reverse engineering thank you -- product it's you know it's written product people whatever exact. And also. So you can back. I can't stress this enough this is new season as a new set. -- distances cast. And running your network so obviously we're very excited to hear what you guys have to think about the show the format. This segment he'd like to see all that fun stuff don't be shy just go -- email. Feedback act on dot org because all of us and we really looks see that. So if there's something undermine or check this if you've got an idea for segment something you think that we should cover. Totally let us now because I mean public safety chief executives. -- possesses nearly -- 160 someone segment fit. So you know. Let let us know who'd love to you know bringing guys what you went C. The fee you can subscribe to us on iTunes did not follow us on twitter. So -- election and I wouldn't be it four on you can follow us you can just. -- And you can see who it policy Paulus all of us and then you can see what's going on with the passing when we're doomed to lives cancer treatment constantly. So what else it's the feedback. And the forums of course we I think and -- CRC. -- Happily hosted by an entire season Iraq. And we've been drinking -- all week. Because there are new -- sponsor and we are. Very thankful because we've been you know growing fond of it all week Iraq and the light version which is like 65 calories."

" Yes 64 calories actually be -- site is good these through number yeah. Specs is the number one German export beer no. There is this this key here business symbolic -- yet -- and I kind of graphic bomb basically it's from the coat of arms of the founding city. -- in Germany and -- as -- on the label though that's actually help me a lot. But dump the one great thing is that is launching a new campaigns called next key club. On that it's open to all -- drinkers. I'm in you can go there he -- special events exclusive content and freed next year when you sign up next key club dot com."

" Up next here come and on the way so we can we -- see what's in there hopefully get here. And next it says it's been in power but that except that after that we'll see yeah. So again thanks to backs and out to him in her very first day on the show orbit round out -- The great and they'll look for more things."

" There's one thing one more thing that we want to mention that is Hak5 stickers and commercial flag on -- Go to Hak5 dot org slash stickers were also going to be putting together on a bunch of different package."

" Is the ultimate. -- posh Baghdad but it's so basically -- related donated for the stickers between like. When house flooded and now has really helped us rebuild and and build the season -- studio. So we want to thank you all and we want to put together a big way back. -- like a limited thing like him like a hundred. Problem that -- you know science now and hopefully get us to the next level which is I -- notice the quality of standard Def. Not so much anymore we're gonna show you get what you put together special dvd that's a little behind the scenes of how this crazy rat's nest works it's it's mainly just. Splinters and adapters and add public cables and then Soviet."

" So help us help you are basically when we go ahead and sell through. The hundred alt -- bags. What we can actually do we can actually purchase our -- help all the donations. That go to the stickers into this rag bag and go directly toward the purchase of RH if you already."

" Purchased our cameras they were some awesome inexpensive. Panasonic. Consumer grade stuff to get that component how many we're doing this on hacker level but. Turns out that. Speaking -- are still in this image super expensive. But we need to get here because the screen captures need to be a lot better we know that we want it to be. And you know on the go ahead and Austin what you guys know and if you if you get us there. -- little little meter show you how our progress is that if they're I want him to make up you can watch him on their chips cut. --"

" I appreciate it. I -- I should probably also go to the purchase of a racer yeah even before the next episode if you use an -- yeah all right. We'll without further do we really -- you guys you in on Wednesday for a forum to."

" And that's an example -- test different. And what. That's great yeah. Grandma like yeah. Heavy grandmas yeah. -- an agreement yeah."

" Everybody welcomed the -- of -- live on. I have no idea we're going to think it's -- but because the -- example on this and that's. Hey welcome to Hak5 on the host Darren Kitchen that I met last night and today we're -- a whole bunch -- are being done. It's -- warm hundreds of digital. Hello and welcome pack five on your post your kitchen on LSI's and five is great. Let me try this again and we'll come back from -- swallows at the moment."

" Yeah. -- just I don't want the clinical coming out of my head so it's on lots."

" And now it's got drivers that we can you sound. Seriously. There's at least. Ports and let you didn't do. A little -- white and black attacking -- in the spectrum. Both of these this is. -- yeah or if the default when the average download it. Look at. That please -- the -- There Jennifer you're it's. Okay. -- Yeah I have something going and yeah. Why not because there's like. A good yeah yeah you're -- don't wanna model zero fans."

chuckles

Started discussion: September 7, 2008 @ 9:04pm GMT

Episode 401 - Wi-Fi Pineapples

In this season premiere episode of Hak5 Mubix joins us to talk about what's new in Maltego, an open source forensics and intelligence gathering tool. Shannon rocks out with Audio surf, and Darren heads downtown to the coffee shop to own a wireless network with a pineapple. Grab some hax0rflakes 'cause the bricks are gone and we're back!

Watch or download here.

Chaserman55
about 1 year ago
ahhh about time these nubs(j/k) got on rev3!
vst_kills
about 1 year ago

!!!!!

Good to see you guys on Rev3!!
hak5darren
about 1 year ago
About the video quality....


I know this is going to come up so I should probably explain. Episodes 401 and 402 are going to look a little muddier than you're typical Hak5 episode. Unfortunately we're using some new equipment and shooting two episodes at a time and by the time we figured out we had some problems with our composite cables it was too late.

Episodes 403+ the issue is resolved. The screen captures look normal, the episodes aren't overly dark and blurry, and the audio sounds a bit better.

Ahh the joys of homebrew video production.


Paul and Kerby at our homebrew video switching console :)
samureye
about 1 year ago
Nice, what's used for the setup? Is it the same thing Leo uses for TWiT? I forget what it's called, Scoble did a video on it, but it looks like a great setup.
Snubs
about 1 year ago
Woo! This is my first show on camera, so let my know what you guys think :D
Shinku
about 1 year ago
In reply to samureye:
Nice, what's used for the setup? Is it the same thing Leo uses for TWiT? I forget what it's called, Scoble did a video on it, but it looks like a great setup.


That would be the Tricaster, but no, Hak5 don't use one.
nextgenxbox
about 1 year ago
So are you guys only going to do a season's worth of shows, as opposed to 52 weeks a year? Is that why the show is titled Episode 401 (Season 4, Ep 1)?
Snubs
about 1 year ago
In reply to nextgenxbox:
So are you guys only going to do a season's worth of shows, as opposed to 52 weeks a year? Is that why the show is titled Episode 401 (Season 4, Ep 1)?


We're going completely weekly. For 52 weeks straight. Every Wednesday, methinks.
nextgenxbox
about 1 year ago
I see. The numbering is bugging me for some reason. :) Should have just counted all the eps and continued from there... so this would be episode #32
View all 48 comments