Posted on 11-08-2009
Filed Under (security, wireless) by admin

These steps apply to both Linksys wireless access points (WAPs) and Linksys DD-WRT wireless routers. Of course, DD-WRT wireless routers have additional security precautions that need to be taken on the router and wireless side.

1-Change the password – With all Linksys routers and access points, it is extremely important to change the device’s default password. Login to your router and enter the default password. The version of the firmware or the router that you are using will determine where the Change Password button is located. Make sure you find it. This is the single most important step. Change the default password and choose a password that contains both numbers and letters. This will reduce the possibility of your password being guessed or hacked.
2-Change your SSID – The SSID is the shared network name that all devices run on a wireless network. The name is case sensitive and should be no longer than 32 characters. You can use any keyboard character you choose when renaming the SSID. The default SSID of the Linksys access point or wireless broadband router is set to Linksys. It is highly recommended that you change the SSID to a unique name other than the default. Read the rest of this entry »

Comments Off    Read More   

Ophcrack live cd is by far the best windows password recovering/cracking tool out there, because of its simplicity and how fast it cracks relative complex passwords, it cracked my 11 character password in less than 3 minutes, and if you are a Network Administrator or computer users in general, you could absolutely appreciate the usefulness of this tool. The tool is open source and free to download and use (at your own risk )… the technology it uses for breaking the windows password is “Rainbow Tables”  and is a Time-Memory trade off. An easy way of describing this would be that Tables of possible Hashes are precomputed so that you can iteratively compare the windows hashes to precomputed bits and piece together the hash and its value more quickly than brute-force guessing. Well in this article we will go over the process of cracking a Windows XP password. (The process is the same for Vista except you would download the Vista live cd). Read the rest of this entry »

Comments Off    Read More   

One way of detecting malware (virus, rootkits, etc) is by knowing what ports are open and what services and application are associated with those ports. A while back some of this malware would install on your computer with the intention of opening a backdoor for the attacker to connect leaving your PC to the mercy of an attacker, now with the use of NAT (Network Address Translation), this type of attack is less common, but as technology evolves, so are the new threats, now the malicious software will install on your PC and initiate a connection back to the attackers PC, which is listening for the connection. With that in mind you should turn off any services you don’t actually need so they will not become avenues of attacks for security threats. There’s no way to provide a comprehensive guide, of course different systems will have different services running by default, and new services are been invented from time to time, expanding the number of services that may possibly be running on a given computer. Read the rest of this entry »

Comments Off    Read More   
Posted on 07-10-2008
Filed Under (security) by admin

In this article we’ll go over the process of exporting your PGP (Pretty Good Privacy) keys from one computer to another, in this case we’ll be exporting the key from an Ubuntu machine to a windows machine there are several programs you’ll need, or I assume you already have, like: Gnupg for Linux and Windows, also in my case I use Enigmail which is a Thunderbird addon, and uses the OpenPGP standard for encryption and authentication, and yes you should already have created your original key. See the links at the end of this articles for important sites where you can get this applications. Read the rest of this entry »

Comments Off    Read More   
Posted on 25-09-2008
Filed Under (linux, security, ubuntu) by admin

After having to reset my Ubuntu box password, I decided to come up with this tutorial on how to reset linux password, in this case we will be taking two different methods…

Read the rest of this entry »

Comments Off    Read More   
Posted on 03-09-2008
Filed Under (security) by admin

An SSH tunnel (sometimes referred to as a VPN) is an encrypted network tunnel created through an SSH connection. SSH is frequently used to tunnel insecure traffic over the Internet in a secure way. For example, if you were to check your webmail over the internet your username and password would be send in clear text format, meaning that anyone with a sniffer and using ARP poisoning techniques could intercept your credentials. To browse the internet securely, one can establish an SSH tunnel that routes all HTTP traffic to the ssh server inside an SSH-encrypted connection. Even though the HTTP traffic itself is insecure, because it travels within an encrypted connection it becomes secure.

In order to create an SSH tunnel, the SSH client is configured to forward a specified remote port and IP address (that is accessible on the SSH server) to a port on the local machine. Once the SSH connection has been established, the user can connect to the specified local port to access the network services that would otherwise be available only at the remote IP address and port. For this tutorial I would be setting up SSH server in Ubuntu, and the client pc a windows xp using Internet Explorer as the browser, I know… not the best OS and browser, but I think that’s what most people use.

Read the rest of this entry »

Comments Off    Read More   
Posted on 03-09-2008
Filed Under (security) by admin

In this tutorual will go over the most useful netcat commands. Netcat is a tool that every IT professional should have in their tool box, if you’re responsible for network or systems security, it is essential that you understand the capabilities of netcat. The original version of netcat is a UNIX program. Its author is known as Hobbit. He released version 1.1 in March of 1996. Netcat is available for Unix and Windows OS.
Netcat is a featured networking utility which reads and writes data across network connections, using the TCP/IP protocol. It is designed to be a reliable “back-end” tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities, including: port scanner, backdoor, port redirector, port listener, and lots of other things….Let’s see what we can do with netcat.

Read the rest of this entry »

Comments Off    Read More