Commondork - Part 4

Setting up Metasploit Framework 3.2 on Debian (Lenny)

Posted October 10, 2009 at 10:32 pm in Pen Testing

Setting up the Metasploit Framework to run on Debian is quite simple. The current stable version of the Metasploit Framework is version 3.2 and is written in the Ruby programming language. The previous version, 2.7, was implemented in Perl. The complete rewrite of the Framework with Ruby requires the following packages to be installed on your system prior to using Metasploit:

apt-get install ruby libruby rdoc
apt-get install libyaml-ruby
apt-get install libzlib-ruby
apt-get install libopenssl-ruby
apt-get install libdl-ruby
apt-get install libreadline-ruby
apt-get install libiconv-ruby
apt-get install rubygems

Wrong ELFCLASS?!?

Posted September 11, 2009 at 12:14 pm in Programming

In my programming class this semester which deals with ADTs and algorithms we had to implement our own ADT to handle strings. Normally I will work on my programming assignments in the campus computer lab to avoid any possible issues involving different architectures, versions, libraries, etc. than what I may have at home. (Yes, I realize I could open a session at home on the campus lab systems but I like knowing that it’ll work without any questions later and the lab offers me more space to spread out my materials.) Anyways, I decided that it’s the start of the semester and that the first lab wouldn’t be too difficult and that I could probably complete it at home.

I did a little research involving IDEs and decided to give NetBeans a shot. After the packages had been installed I fired up NetBeans and took it for a spin. Deciding that I liked NetBeans, I began to code my ADT lab assignment and had no issues compiling, linking, or running my code. About an hour later I finished the lab assignment and uploaded the required lab files to my account on the campus lab systems.

The next day, in lab, however, I noticed that the lab had new computers from the previous semester. After logging in and playing around a bit I tried to compile the code I had written the previous night at home. Lo and behold, g++ spit out an error:

ld: fatal: file lab1.o: wrong ELF class: ELFCLASS64

Temporal Key Integrity Protocol (TKIP)

Posted August 17, 2009 at 10:44 am in Networking

Recently my girlfriend and I moved into a new apartment on Milwaukee’s Lower East Side. We had been using an old Linksys router at our previous quarters but with the new apartment only having a single cable drop in the most inconvenient location possible, we decided to go wireless. I had never used a wireless router at home before so I had a lot of research ahead of me. We wanted speed, range, security, and as inexpensive as possible. We ended up purchasing the Linksys WRT54G2 router due to it being a middle-of-the-road wireless router. The WRT54G2 uses 802.11g, contains two internal antennas and has an output power rated at 18 dBm. These characteristics met our first two requirements but what was there for security? The router offers WPA2, WEP, Wireless MAC Filtering and can use security keys of 128 bits. This seemed like the standard suite and the router was within our price range.

Setting up the router was easy and once everything was in working order I decided to start tinkering with its configuration. Under the Wireless Security settings I noticed a few interesting options. The ‘Security Mode’ option allowed me to select Disabled, WPA Personal, WPA Enterprise, WPA2 Personal, WPA2 Enterprise, RADIUS, and WEP. If I selected WPA Personal I noticed that the ‘WPA Algorithm’ option would set itself to TKIP with no other option. If I chose to use WPA2 Personal I was given a choice of AES or “TKIP+AES”. Having only dabbled with cracking WEP networks before I was curious as to what TKIP was.