Sunday, January 18, 2009

Book: Hacking Exposed Windows


Hacking Exposed Windows: Microsoft Windows Security Secrets and Solutions, Third Edition (Hacking Exposed)






http://www.amazon.com/exec/obidos/tg.../-/007149426X/
  • Publisher: McGraw-Hill Osborne Media
  • Publication Date: December 4, 2007
  • Author: Joel Scambray
  • Language: English
  • Number of pages: 451
  • ISBN-10: 007149426X
  • ISBN-13: 978-0071494267

Saturday, January 17, 2009

KernelEx


source
: http://www.msfn.org/board/KernelEx-v...ed-t71476.html
current version: 0.3.6 (October 21, 2008)
by: Xeno86/Tihiy

Description:

What is KernelEx? KernelEx is a compatibility layer to allow running Windows XP-only applications on Windows 98 and Windows Millennium. KernelEx is an open source project and is not distributing any copyrighted files. This project neither requires nor includes files from newer OSes, like Windows 2000 or Windows XP.

The aim of the project is to implement functions (not present on Windows 98 / ME) to kernel32.dll and other system libraries so that recent Windows XP programs and games work on Windows 98 / ME.


Requirements:* Windows 98 FE or Windows 98 SE or Windows ME (any language version and kernel version)
* Microsoft Layer for Unicode (MSLU) [Unicows.dll], version 1.1.3790.0


Latest changes:
KernelEx v0.3.6 by Xeno86/Tihiy
10/21/2008
* added custom MSIMG32 library
* rewritten non-working TryEnterCriticalSection implementation
* PeekMessageW, DispatchMessageW, IsDialogMessageW, TranslateAcceleratorW, CopyAcceleratorTableW, CreateAcceleratorTableW, CallMsgFilterW call their ANSI counterparts directly
* in unicode to codepage translations for file apis, "_" is now default character instead of "?"
* Fixed SetFilePointerEx to preserve LastError
* Fixed GetVersion apis ignoring Skip Modules list in some cases
* Fixed RegQueryValueExW bug that could lead to crash in kexulay
* Fixes and workarounds for various MSLU wndproc-related issues:
* Changed: CallWindowProcA, GetWindowLongA, RegisterClassW/Ex
* Patch to remove KERNEL32.DLL resource checking ("program is invalid format or appears corrupted")
* Implemented:
- LockFileEx
- GetCharWidthI
- LockWorkstation
- IsHungAppWindow
- RealGetWindowClassW
- MoveFileWithProgressA/W
- CommandLineToArgvW
- HeapSetInformation
* Stubs:
- RegOverridePredefKey
- ReplaceFileA/W
- CreateJobObjectA/W,TerminateJobObject,OpenJobObjec tA/W,QueryInformationJobObject,SetInformationJobOb ject,AssignProcessToJobObject
- RegisterWaitForSingleObject/Ex,UnregisterWait/Ex
- RegDisablePredefinedCache,IsWellKnownSid,SecurityS ecurityDescriptorDescriptorblahblah
- IsValidLanguageGroup
- more stubs in psapi.dll

Supported by this release:
* OpenOffice.org 3.0
* Macromedia Flash 8 Professional
* Winamp (5.35)
* Media Player Classic Unicode [HomeCinema]
* Windows XP Paint and Charmap
* Adobe Acrobat Reader 7 (with minor problems)
* Google Picasa 3 beta

DOWNLOAD:


http://x86.neostrada.pl/KernelEx/

kX-Ray unhooker



kX-Ray unhooker

kX-Ray General Discussion

current version: 1.0.0.56 XP Only Beta
(kX-Ray v1.0.0.56 XP-Only Beta Build Public)

It's a Freeware ring-0 rootkit detection tool with functions such as a disassembler, module and thread information on a per-process basis as well as a complete NTFS Alternate Data Streams (ADS) scanner. Hidden process detection, hidden module detection and kernel mode hook scanning are implemented in a way that's generic and hard to beat. This is the ultimate tool when you think you may have issues with rootkits and hidden process trojans/keyloggers/spyware.
source: What Is kX-Ray?

FireCat: Turning Firefox to an Ethical Hacking Platform


source: http://www.security-database.com/toolswatch/+-FireCAT-+.html

current version: 1.5 (January 9, 2009)
downloads: FreeMind MindMap | Browsable HTML | PDF
FireCAT (Firefox Catalog of Auditing exTension) is a mindmap collection of the most efficient and useful firefox extensions oriented application security auditing and assessment
FireCAT 1.5 will be the last release of this 1.x branch. In fact, we are working on a new improved version 2.0 (management of plugins, instant download from security-database, ability to add new extension, extension version checker, Firefox 3.X compatible extensions..)

FireCAT 1.5 : Firefox Catalog of Auditing exTensions

OSWA: Wireless Auditing LiveCD/LiveUSB


[Auditing of WiFi (802.11), Bluetooth and RFID]

source: http://oswa-assistant.securitystartshere.org/

Description

The OSWA-Assistant™ is a self-contained, freely downloadable, wireless-auditing toolkit for both IT-security professionals and End-users alike.

This toolkit is our contribution to the wireless security/auditing community and, as the "Assistant" moniker implies, and is designed for the following groups of people:
  • IT-security auditors and professionals who need to execute technical wireless security testing against wireless infrastructure and clients;
  • IT professionals who have responsibility for ensuring the secure operation and administration of their organization's wireless networks;
  • SME (Small & Medium Enterprise) and SOHO (SmallOffice-HomeOffice) businesses who do not have either the technical expertise or the resources to employ such expertise to audit their wireless networks;
  • Non-technical-users who run wireless networks at home and who would like to audit the security of their wireless home networks and laptops but don't know how.
Features

The OSWA™-Assistant is a no-Operating-System-required standalone toolkit which is solely focused on wireless auditing. As a result, in addition to the usual WiFi (802.11) auditing tools, it also covers Bluetooth and RFID auditing. Using the toolkit is as easy as popping it into your computer's CDROM and making your computer boot from it!

Technical professionals will easily be able to use the traditional menu-driven approach right off the bat as the arrangement of the menus is much more organized and logical than many other LiveCDs, as well as the presence of tools which don't just help with 802.11 (WiFi) auditing but also Bluetooth and RFID auditing as well.

Non-technical Home-owners and SOHO users are also catered to via the ActivityMap™ help system. Via a web interface, the ActivityMap™ helps non-technical or non-IT-security professionals to conduct basic security testing of their own wireless networks in a methodical and consistent manner. Using ThinkSECURE's 5E Methodology as a framework, the ActivityMap™ guides the user through the process of determining and proving if his/her network is secure or not.

By providing the ActivityMap, we hope to help end-users by providing them with a means to audit and prove if their networks are vulnerable and thus take the appropriate countermeasures to reduce their vulnerability exposure. By empowering the man-on-the-street to secure his/her own wireless network, our intention is that there will be less vulnerable networks around for evil-intentioned people to take advantage of, thus raising the overall national wireless security defence posture.

Tools

802.11 Tools

  • Aircrack-ng 1.0-beta2 suite
  • Airfart
  • Airsnort
  • Airsnarf
  • AP-Hopper
  • AP-Radar
  • AP-Utils
  • Asleap
  • ChopChop
  • CoWPAtty
  • HostAPD
  • Hotspotter
  • Karma
  • Kismet
  • Leapcracker
  • MDK3-v4
  • MoocherHunter
  • Probemapper
  • SSIDsniff
  • Wardrive
  • Wavemon
  • WEPlab
  • Wi-Find
  • Wi-Spy Tools
  • WifiTap
  • WifiZoo
  • WPA-attack (Attacker)
  • WPA Supplicant
  • Wireless Extensions & Wireless Tools package (iwconfig/iwpriv, etc)


Bluetooth Tools


  • Bluebugger
  • Bluediving
  • Blueprint
  • Bluescanner
  • Bluesnarfer
  • BT-Audit
  • Btfs
  • Btscanner
  • Carwhisperer
  • Ghettotooth
  • Obexpush-dos
  • HIDattack
  • Redfang
  • T-Bear
  • Ussp-push
  • Bluez Bluetooth package with hcitool/hciconfig


RFID Tools


  • Rfdump
  • Rfidtool

Current Version: 0.9.0.5e (August 8, 2008)
Download: http://securitystartshere.org/page-t...t-download.htm

Hacking Hard Drives For Data Recovery

This is a video-tutorial about Data Recovery:

author: Scott Moulton
conference: ToorCoon
url: http://video.google.it/videoplay?docid=-396122032591841175

Data Recovery: Freeware software

source: http://www.thefreecountry.com/utilities/datarecovery.shtml

  • NTFS Undelete
    NTFS Undelete is a Windows 2000/2003/XP/Vista program that allows you to locate and undelete files that you have accidentally deleted from an NTFS file system (which is the format of your hard disk for modern Windows systems).


  • PCInspector File Recovery
    PCInspector File Recovery is able to find and unerase deleted partitions on your hard disk even if the boot sector or file allocation table (FAT) has been deleted or damaged. It can also recover files that have been deleted; the files are recovered with the original date and time stamps. You can also recover the unerased files to a network drive. It has specially written routines to recover deleted a variety of file formats including document files from popular programs, like Word's DOC and RTF files, Excel's XLS, database files (DBF), Adobe Reader's PDF files, as well as multimedia files like MP3, WAV, MID, AVI (video file), MOV (video file), picture files (BMP, JPG, PNG, GIF, TIF), archive files (ZIP, ARJ, TAR, LZH), executable files (EXE), help files (HLP), web pages (HTML, HTM), etc, so that even if the headers of these files are missing, the program is able to reconstruct them. This is a Windows program.

  • TestDisk and PhotoRec
    TestDisk is designed to recover lost partitions and make non-bootable disks bootable again. PhotoRec is a data recovery software that recovers lost files such as videos, documents and archives from your hard disks and CDROM, as well as pictures from your digital camera memory (the photo recovery function, as its name implies). PhotoRec ignores the file systems it works on, and is thus able to recover from a variety of file systems including NTFS, FAT, ext2/ext3 and HFS+. It specially recognizes certain file formats like ZIP, Office files, PDF, HTML, JPEG and other graphic file formats. Its photo recovery function is able to retrieve lost or deleted files from hard disks, CDROMs, Compact Flash memory (CF cards), Memory Sticks, SecureDigital cards (SD cards), SmartMedia, Microdrives, MMC, USB memory drives, etc. The program works under a variety of operating systems, including Windows 9x, NT, 2000, XP, 2003, DOS, Linux, Mac OS X, Sun Solaris, FreeBSD, NetBSD, OpenBSD, etc.

  • ISOBuster
    ISOBuster is a CD and DVD data recovery tool that allows you to recover from media failure by extracting your data / files / video / audio / photos / pictures / documents (etc) from a badly damaged or scratched CD or DVD. Unlike Windows, which gives up trying to read a scratched or damaged DVD/CD after a while, this optical media data recovery tool tries repeatedly to access the data. It is also able to access a variety of file systems and multiple sessions. Use of the basic features of this utility is free.

  • Recuva - Undelete, Unerase, File Recovery
    Recuva is a freeware Windows tool that you can use to restore files that you have deleted from your computer, or emptied from your Recycle Bin. It can also recover files deleted from digital camera memory cards or MP3 players. The software works in Windows Vista, XP, 2003 and 2000.

  • DATA Unerase Personal Edition
    This unerase utility may be used to recover deleted files found on drives visible to Windows. It can recover files from FAT12, FAT16, FAT32 and NTFS hard disk, memory sticks, USB flash drives, memory cards, removal media, etc. It works under Windows ME, NT, 2000, XP and 2003. This program is for non-commercial use only. Note that it is NOT able to recover any type of graphic image or picture.


  • SoftPerfect File Recovery
    SoftPerfect File Recovery can restore deleted files from NTFS, NTFS5, FAT32, FAT16 and FAT12 disks, floppy disks, USB flash drives, CF and SD cards and other storage media. It also supports compressed and encrypted volumes. No installation is required. The program works under Windows 95, 98, NT, 2000 and XP.

  • Undelete Plus
    Undelete Plus allows you to retrieve accidentally deleted files from your hard disk (FAT12, FAT16, FAT32, NTFS, NTFS5), network drive, and floppy disk. It is also able to perform a recovery of deleted images from your CompactFlash, SmartMedia, MultiMedia and Secure Digital cards. It runs under Windows 98, ME, NT, 2000, XP and 2003.

  • FreeUndelete
    FreeUndelete recovers accidentally deleted files from your hard disk, whether your hard disk has a NTFS, FAT32 or FAT16 file system. This is a Windows program.

  • Avira Unerase Personal
    Avira Unerase Personal recovers deleted files or data from your hard drive. It is for personal, non-commercial use only. This is a Windows program.


  • RoadKil's Undelete and Unstoppable Copier
    RoadKil's Undelete is a Windows program that undeletes files from FAT12, FAT16, FAT32 and NTFS file systems. The Unstoppable Copier attempts to recover files from damaged disks (eg disks with bad sectors or scratches). It does this by copying available pieces of the file and assemble them.