background preloader

Kill the Password: Why a String of Characters Can't Protect Us Anymore

Kill the Password: Why a String of Characters Can't Protect Us Anymore
First thing I do? Search for the word "bank" to figure out where you do your online banking. I go there and click on the Forgot Password? link. I get the password reset and log in to your account, which I control. This summer I learned how to get into, well, everything. The common weakness in these hacks is the password. Passwords are as old as civilization. In 413 BC, at the height of the Peloponnesian War, the Athenian general Demosthenes landed in Sicily with 5,000 soldiers to assist in the attack on Syracusae. But during a chaotic nighttime battle at Epipole, Demosthenes' forces were scattered, and while attempting to regroup they began calling out their watchword, a prearranged term that would identify soldiers as friendly. The first computers to use passwords were likely those in MIT's Compatible Time-Sharing System, developed in 1961. During the formative years of the web, as we all went online, passwords worked pretty well.

How to Encrypt Your Internet Traffic This is the coolest trick I learned while working at Blinkx. At the time, our management really hated when we go on any type of instant messaging applications. I also suspected that our messenger conversations and other internet activities were being monitored. Open an SSH Tunnel to a Remote Machine There are a couple ways you can do this (one through Putty and one through Cygwin). Download and install Cygwin. That’s it! There are two ways to get this done. If you want to pay to do it the easy way, you can use programs like ProxyCap to handle all of your traffic routing. Configuring Firefox to Use Your Tunnel Go to Tools > Options > Advanced (button) > Network (tab) > Connection > SettingsConfigure your Proxy settings like the image below: Click “OK” and you are set! Testing Firefox Proxy In the web browser, check that your IP is different from before you tunneled your traffic by using cmyip. Configuring AIM to Use Your Tunnel Open AIM connection preferencesSet the Proxy settings Conclusion

Hacking Techniques in Wireless Networks Prabhaker Mateti Department of Computer Science and EngineeringWright State UniversityDayton, Ohio 45435-0001 This article is scheduled to appear in “The Handbook of Information Security”, Hossein Bidgoli (Editor-in-Chief), John Wiley & Sons, Inc., 2005. 1. Introduction. 2 2. 2.1 Stations and Access Points. 3 2.2 Channels. 4 2.4 Infrastructure and Ad Hoc Modes. 4 2.5 Frames. 4 2.6 Authentication. 5 2.7 Association. 6 3. 3.1 Passive Scanning. 7 3.2 Detection of SSID.. 8 3.3 Collecting the MAC Addresses. 8 3.4 Collecting the Frames for Cracking WEP. 8 3.5 Detection of the Sniffers. 9 4. 4.1 MAC Address Spoofing. 10 4.2 IP spoofing. 10 4.3 Frame Spoofing. 11 5. 5.1 Detection of SSID.. 12 5.2 Detection of APs and stations. 12 5.3 Detection of Probing. 12 6. 6.1 Configuration. 12 6.2 Defeating MAC Filtering. 13 6.3 Rogue AP. 13 6.4 Trojan AP. 13 6.5 Equipment Flaws. 13 7. 7.1 Jamming the Air Waves. 14 7.2 Flooding with Associations. 14 7.3 Forged Dissociation. 14 7.4 Forged Deauthentication. 15 7.5 Power Saving. 15 8.

Hacking Wi-Fi Password (with good intentions) Using Ubuntu Linux Hacking Wi-Fi Password Using Ubuntu Linux - I know a lot of you out there would love to know how to hack or crack Wi-Fi passwords from coffee shops or just about any place with managed or secured network. Note: We do not encourage hacking on Wi-Fi networks without permission. Do it only for testing or for securing your own network. I've already featured several hacking software (and more hacking tools) before, and some of which can help you crack Wi-Fi passwords be it WEP or WPA protected. This time, I'm going to share with you some of my favorite wireless tools that can be used to hack Wi-Fi password using Ubuntu or any other Linux distribution: Aircrack-ngAircrack-ng (a fork of aircrack) is my main tool for cracking Wi-Fi passwords. Kismet Kismet is a really good network detector, packet sniffer, and intrusion detection system for 802.11 wireless LANs. SWScannerSWScanner is specifically designed to make the whole wardriving process a lot easier. Happy WiFi hacking.

Related: