This time on the show, we’re cracking the code: EXIF Data tools, Windows login hash cracking, Extracting passwords from Firefox and other browsers, what’s in that P-CAP file and special report form Maker Faire 2011. All that and more, this time on Hak5.

Download HD Download MP4 Download WMV

FirePassword

You know how you can store and save all you login credentials in Firefox, Chrome, as well as other browsers? Well, maybe that’s not such a great idea. There are several portable (yes, portable!) tools that can instantly recover login credentials stored by Firefox, Chrome and others. Broswers store your username and password for every website you visit as long as you give them consent in the settings. The credentials are saved by Firefox, Chrome and others in a sign-on database that is securely encrypted. Today I’m focusing on Firefox.

FirePassword, the tool in question today, can instantly decrypt and recover the data even if there’s a master password protecting it.
Not only this, but FirePassword can even recover sign-on passwords for other profiles (on the same system) and info from other OS’s like Linux and Mac. This can obviously be used for malicious intent, or can be used for the greater good of forensic investigators who need to transmit data from the target PC to another machine without disrupting the original target machine.

FirePassword portable works from XP-7, and loads DLLs from the firefox executable location automatically. DLLs aren’t packaged with the tool, and the newest version presents an easy to use color based display so you can clearly view password details.

Lets get started on cracking my Firefox passwords!

To install, follow the on screen instructions from securityxploded.com. They have nice detailed instructions on how to use the program so you shouldn’t have a problem.

Once installed, open your command prompt and change directory to your FirePassword.exe folder, probably in your program files.
Mine is c:\ Program Files (x86)\SecurityXploded\FirePassword\. Once there, type in FirePassword.exe and hit enter. You should see a screen kind of like the one on my monitor.

It will list every website, username, and password you have saved into FireFox.
It’ll also show you any OLD passwords that you never deleted out of the FireFox settings.

If you have a master password set on FireFox, you will need that password to be able to see your other passwords. For example, I will go into the FireFox options, choose Master Password and set it.

Over in my CMD, I’ll type FirePassword.exe -m kerby and click enter. Now it’ll give me my other passwords. If you do this wrong, you’ll get this error code.

You can also copy the Firefox profile files from different operating system such as Linux or Mac to the Windows system locally and then specify that path with FirePassword to recover data from the offline profiles.

It’s pretty surprising how easy this really is for anyone to discover. To protect yourself, do what I do and DON’T save your passwords in FireFox! Make your machine log off every time you close it or leave it idle for more than a minute. Anything, but really, just don’t save your passwords.

It’s also worth mentioning the WebBrowserPassView tool from NirSoft. It’s a password recovery tool for Internet Explorer, Firefox, Chrome and Opera.

Now, if you’ve got another tool for me to check out, email feedback@hak5.org

If you’re into Hak5 you’ll love our new show by hosts Darren Kitchen and Shannon Morse. Check out HakTip!

Whether you’re a beginner or a pro, HakTip is essential viewing for current and aspiring hackers, computer enthusiasts, and IT professionals. With a how-to approach to all things Information Technology, HakTip breaks down the core concepts, tools, and techniques of Linux, Wireless Networks, Systems Administration, and more

And let’s not forget to mention that you can follow us on Twitter and Facebook, Subscribe to the show and get all your Hak5 goodies, including the infamous WiFi Pineapple over at HakShop.com. If you have any questions or suggestions please feel free to contact us at feedback@hak5.org.

This time on the show, NetBIOS Name Service spoofing in Metasplot with our friend Mubix, Playing Doom on a Dingoo Digital with the Dingux Linux distro and an alternative disc space reporter.
All that and more, this time on Hak5.

Download HD Download MP4 Download WMV

Hacker Headlines

I was going to report on how Android devices prior to version 2.3.4 were vulnerable to a sidejacking attack due to the fact that they authenticated via HTTP instead of HTTPS. Similar to a cookie, the AuthToken of the Calendar and Contacts syncing service is good for up to two weeks and is device agnostic. But just a day after security researchers broke the story Google plugged the hole. A Google spokeman said in a statement “This fix requires no action from users and will roll out globally over the next few days.” Poor unencrypted HTTP — the protocol isn’t getting as much love since Firesheep…

There’s been a bit of trouble brewing in the Android marketplace. 11 apps that were in the Android marketplace were embedded with some malicious code that triggered a text message to be sent to three premium-rate numbers in China. Those text messages sign up the mobile user for a paid subscription service without their knowledge or approval. Google has since taken down those apps but there could be more. Malware like this has been growing on the Android platform, 400% since last summer, and this is just another hiccup in the security of Android Apps.

Poor Sony, they’ve consistently topped out hacker headlines and while I’m happy to report that they’ve reopened the PlayStation Network it hasn’t been without setbacks. Just two days after the service reopened attackers went after the password reset function, which supposedly only required email and date of birth. While far from a full blown remote exploit the bug has caused Sony to disable the function on PlayStation.com and Qriocity.com. In the meantime you can still sign into the PSN via your PSP or PlayStation 3 devices.

In awesome sauce news, a twitter vigilante found a guy’s stolen laptop using a program we had discussed many episodes back called Prey. Sean Power’s laptop was stolen and after just a few days, he was able to score a webcam photo of the thief using the free tool. Cops wouldn’t help him, so he went to Twitter. A follower of Sean’s, and also a stranger, went to the bar where the laptop was last seen and confronted the thief. He got the laptop back and now all is good. Hooray for social networking and free programs!

This video just started making its round and I’m going to take the liberty of directly quoting Teravolt.org:

Electrolytic capacitors are constructed using an electrolyte-soaked piece of paper between two strips of aluminum foil. One piece of foil is oxidized and this ultra-thin coating of aluminum oxide becomes the capacitor’s dielectric. Because this layer is so thin and has a high dielectric constant a large amount of capacitance can be squeezed inside of a small space, even more so when the foil is rolled up tightly.

Electrolytics have one flaw though; they are polarized. When a reverse voltage greater than 1.5V hits the capacitor the aluminum oxide starts to reduce and its insulating properties are lost. This destroys the capacitive effect of the device and essentially the capacitor short circuits which allows a lot of current to flow. A lot of heat is generated, heat which boils the electrolyte and causes pressure to build inside the capacitor.

Then it goes boom!

Kerby’s Internet Protocol Star Trek Captain of the Week
Picard, duh

HakTip: JDiskReport

As an alternative to WinDerStat which I explained a few weeks ago, you can try out JDiskReport. This freeware tool enables you to understand what files on your drive take up what amount of space. This tool can help you figure out what files or folders are just sitting on your hard drive taking up space. JDiskReport features a Size Perspective pie chart for easy viewing, a size distribution tool, modified size distribution view, file extension type size distrubution, and a top 100 list of your largest files.

To use, go to jgoodies.com and download the tool. Java must be installed for this to work and it will run on Windows or Mac. Open JDiskReport and choose ‘Scan A File Tree’. This will scan all the files inside a chosen drive. After a few moments, JDiskReport will display an easy to navigate pie chart, showing you which files take up so much room on your computer. You can right click to open explorer and browse to those files to edit or delete them. You can also choose things such as excluding a directory for the scan under the preferences menu on the filter tab.

For more info on JDiskReport check out jgoodies.com, and tell me what you think!

Got an idea for a tip? Share them with us at tips@hak5.org. And now for our sponsor.

NetBIOS Name Service spoofing in Metasploit
Segment Descirption (HTML):

This week our friend Mubix returns to demonstrate an awesome Metaspoit module for spoofing NetBIOS Name Service.

Trivia!

Last weeks trivia: This popular project was a light installation in Berlin that transformed a building front into a giant low-resolution monochrome computer screen. What’s the projects name?

The Answer was: Project Blinkenlights

This week’s question is: Including icons for snow men, octopuses and alien faces, this specification is the Japanese term for emoticons.
Answer at hak5.org/trivia to win some sweet swag. And now a word from our sponsor.

Doom on the Dingo

Last week I showed you how to install Dingux, a version of Linux, onto your Dingoo Digital. Today, I’m digging a bit deeper into the world of the Dingoo by setting up a game and an emulator. Lets get started!

First, check out nongnu.org/freedom and download the Complete Iwad from the download page. Extract the file to your PC. Copy the doom2.wad file to your mini SD card that has Dingux on it. You’ll need to copy it to the local\games\prboom\ folder and make sure it is called Doom2.wad. Once copied, you can plug the SD card into your Dingoo Digital. Make sure it’s turned off any time you remove or put the SD card in the slot because it’ll freeze if you take it out while cut on.

If you don’t want the freedoom version of Doom, you can also try original Doom. To do so, go to doomarchive.com and download the Doom1.wad. Extract this zip file anywhere on your PC. Now, copy the doom1.wad to the local\games\prboom\ folder. Rename doom2.wad from the freedoom.com website. If you decide not to rename doom2.wad, when you boot up Doom on Dingux, it’ll default to the freedoom doom2.wad instead of doom1.wad.

Now that you have your two versions of doom installed and have chosen which one you want to boot, put the SD card into your Dingoo Digital and hold down select while pressing up on the power button. When Dingux boots, choose Doom. This will be the topmost game under the games icon.

Ok, now after defeating one of the best games of all time, shut off your Dingoo and take the SD card out to install an emulator.

I’ve chosen Super Mario World… because it’s awesomely epic.

Get a super mario world ROM from anywhere online. It should be called SuperMarioWorld.smc. Copy this file to the local\emulators\snes\9x folder. Now, plug the SD card back in the Dingoo Digital and boot up Dingux again, this time choose the Emulators Icon, scroll down to SNES, and choose Super Mario World. Tada! You now have Awesome games at your fingertips to play on your next subway ride.

For questions or comments, email me at feedback@hak5.org.

Emails

Conner writes:

Hey Hak5,
I know you get a lot of emails so i will keep this to the point. I am new to the computer / technology world and find it hard to follow parts of your show. I’m not asking you to change the script, but I’m simply asking where are the best resources or really the best way to break into this and get caught up. I have an interest in technology and I know that it might take some work but really any general direction would be much appreciated.
Thank you in advance.

Darren recommends picking up a programming language. He isn’t going to get into a religious debate about which is best but learning any moden language will give you a fundamental understanding of how programs operate. There is a fantastic forum thread at forums.hak5.org called Hacking: Where to begin which is a great resource for those new to hacking.

Aaron writes:

Dear Hak5
What is the best, free, open source, virtualization system for Linux?
Love Hak5!
Thanks

Darren’s current squeeze for servers is Proxmox VE, which is a wonderful open source implementation of OpenVZ and KVM — two of the most popular virtualization technologies on Linux. He also still loves VirtualBox for desktop virtualization.

If you’re into Hak5 you’ll love our new show by hosts Darren Kitchen and Shannon Morse. Check out HakTip!

Whether you’re a beginner or a pro, HakTip is essential viewing for current and aspiring hackers, computer enthusiasts, and IT professionals. With a how-to approach to all things Information Technology, HakTip breaks down the core concepts, tools, and techniques of Linux, Wireless Networks, Systems Administration, and more

And let’s not forget to mention that you can follow us on Twitter and Facebook, Subscribe to the show and get all your Hak5 goodies, including the infamous WiFi Pineapple over at HakShop.com. If you have any questions or suggestions please feel free to contact us at feedback@hak5.org.

It was only a matter of time before we put Doom on The Zipit Z2. The recently unlocked linux-based wireless device is a prime candidate for fragging, what with it’s QVGA color display, WiFi and all. After unlocking, installing Doom is simply a matter or launching Fluxbox with startx and downloading PrBoom, a cross-platform Doom Source Port, with apt-get install prboom. The trick in launching PrBoom from /usr/games/ is to add the -width 320 -height 240 parameters. While PrBoom comes included with Freedoom, a free and open source Doom compatible IWAD, you may provide your own doom or Doom2-iwad parameter.

It is also worth noting that PrBoom comes with it’s own tcp game server for deathmatch. If anyone wants to try a little Zipit Z2 deathmatching hit us up. Or if you’re looking for some Doom goodness on the PC check out my favorite port, Skulltag.

Hacking the Motorola Droid: Root Access! A Linux Doom source port on the Zipit, Booting and installing Chrome OS from USB, your WordPress picks and much more.

Download HD Download MP4 Download XviD Download WMV

Hacking the Motorola Droid: Root Access!

As expected the Motorola Droid has been rooted. That is to say there’s a hack that’ll unlock SU, or super user privileges on the phone. The hack is essentially su bundled in an unsigned update that can be run from the SD card. The unlocking process, which has changed since introduction, is outlined at this AllDroid.org forum thread.

At time of writing the process is to download this zip, rename it to update.zip and copy it to the root of your Droid’s SD card. Shutdown the Droid and start it by holding Power and X. Once greeted by an exclamation point on your screen hold the camera and volume+ buttons. From the menu choose the update.zip with the D-Pad, and once updated choose reboot.

Keep in mind that when it comes to unlocking moving targets like this it’s best to check with droid forums beforehand.

A Linux Doom Source Port

It was only a matter of time before we put Doom on The Zipit Z2. The recently unlocked linux-based wireless device is a prime candidate for fragging, what with it’s QVGA color display, WiFi and all. After unlocking, installing Doom is simply a matter or launching Fluxbox with startx and downloading PrBoom, a cross-platform Doom Source Port, with apt-get install prboom. The trick in launching PrBoom from /usr/games/ is to add the -width 320 -height 240 parameters. While PrBoom comes included with Freedoom, a free and open source Doom compatible IWAD, you may provide your own doom or Doom2-iwad parameter.

It is also worth noting that PrBoom comes with it’s own tcp game server for deathmatch. If anyone wants to try a little Zipit Z2 deathmatching hit us up. Or if you’re looking for some Doom goodness on the PC check out my favorite port, Skulltag.

Boot Chromium OS from USB

While still early in it’s development stages, Google’s upcoming Chrome OS is a neat OS to play with — especially on a netbook. While the Virtual Machine images floating around are nice for a glimpse, if you really want to immerse yourself in the Chrome OS experience it’s best to boot it from the metal. This can be achieved by “burning” this Chromium OS image to 3GB or greater USB or SD media. Here’s a torrent.

If you’re familiar with dd it’s simply a matter of downloading the torrent, unzipping and imaging the included chrome_os.img to your media. For example, dd if=’chrome_os.img’ of=/dev/sdb where /dev/sdb is the path of your removable media.

If you’re in Windows you’ll be delighted to find that the linked zip contains a copy of WinDD, as well as writing instructions. More information can be found at this makeuseof.com article. Important tidbits include the fact that the default user and password are chronos / password and that a terminal can be accessed by CTRL+ALT+T. Oh, and the xrandr command is available if your desired resolution isn’t detected automatically. The syntax is typically xrandr -s 1024×768 or similar.

Backing up Wii games to SD so you can play them in HD with the Dolphin Emulator. Ubuntu inside Windows, the SheevaPlug and Fon 2.0 embedded Linux devices. Face.com’s photo finder for facebook. The best Doom source ports and much more.

Download HD Download MP4 Download XviD Download WMV

Watch

Show Notes

• Darren opens the show with the “Stalker Wall” from hakstalkers.com
• Shannon is excited about the Dolphin Wii Emulator and its 720p HD capabilities as seen on youtube
• Shannon and Darren discuss backing up Wii games with special hardware
• And the Dolphin Emulator’s compatability list
• Then Shannon details how to backup Wii games to SD card using some homebrew apps including a wad manager, ios5.wad, and nitrotux’s Wii disc dumper. All the important detials are up on Shannon’s blog Snubsie.com
• Darren is happy to be running Ubuntu inside Windows with Portable Ubuntu for Windows
• Darren explains that its using Cooperative Linux for virtualization.
• A full write-up can be found at DarrenKitchen.net/Portable-Ubuntu-For-Windows
• Darren just got his SheevaPlug and can’t wait to play with it.
• LinuxDevices.com has a great review of the SheevaPlug
• It’s already being used in consumer electronics. For example, the PogoPlug, the CloudPlug, and the Hip Serv.
• The developers kit can be had for about $100 from GlobalScaleTechnologies.com
• Shannon has been playing with the facial recognition technology in Face.com’s Photo Finder Facebook application. Word is she’s got some invites. Hit her up or see all the details on her blog at Snubsie.com
• Darren wraps up the book on Doom with a chapter on his favorite source ports. The roundup includes Legacy, Doomsday, Classic Doom 3, and Eternity Engine.
• Finally we answer a bunch of your questions. Remember to send your thoughts to feedback@hak5.org or questions@hak5.org.

And don’t forget, this month our LAN Party is Skulltag — an epic port of the original Doom and Doom II. It brings the classic first person shooter into the 21st century while maintaining the essence of what made Doom great for so many years. I highly recommend you check it out and get involved in this all-month-long LAN Party at doom.hak5.org.

If you don’t already have a copy of doom.wad or doom2.wad grab a legit copy from steam for $10 or grab the open source iWad FreeDoom!

Happy Fragging

Special shout out to Tamara Hudson of SockMonkeyFun.net and SockMonkey.net for the awesome “D-Monkey”. We’re giving away one of her sock monkey kits as a prize for this week’s contest. Detials at Hak5.org/MonkeyContest.

Thanks for your contributions and support — we really appreciate it!

Matt builds a free XMPP/Jabber server in under 10 minutes. Shannon has the low down on Wii Homebrew in regards to Nintendo’s new Wii System Menu 4.0 and Darren just can’t stop playing Doom2.

Download HD Download MP4 Download XviD Download WMV

Watch

Show Notes

Free Instant Messaging Server

Openfire is by far the easiest Jabber implementation I’ve ever had the pleasure of installing, setting up and administering.

However, in utilizing open source licensing, and a great plugin API, Openfire is a lot more than just a Jabber server.

Another great use for Openfire is the ability to control corporate IM connectivity by setting it up as a gateway server between services like AIM & MSN and your users.

From a singular client, your users can have both their corporate and private contacts.

If you’re looking for a very powerful and easy to use corporate / public jabber implementation, you really should check out Openfire.

For more info on the setup of Openfire, check out my blog at MattLestock.com

–Matt

Wii Homebrew Update

As you may have noticed Nintendo released Wii System Menu 4.0 at GDC and with it comes a few changes to Wii homebrew.

First and foremost this means a sweet farewell to our friend the Twilight hack. It has served us well. If you update to 4.0 you won’t be able to use the Twilight hack to install the homebrew channel or other homebrew apps.

If you’re still a version behind your best to use the twilight hack now and install the homebrew channel and DVDX as they survive the update. After upgrading to 4.0 you’ll be able to continue using homebrew channel, download new homebrew from the homebrew browser, and add apps from SD.

New exploits are being researched by the homebrew community and we’ll keep you updated when a new process is developed for installing homebrew post 4.0.

Wii Homebrew picks this week are Snes9x GX — an awesome SNES emulator based on Snes9x. Brutal Mario — an excellent custom mario level with unique ASM hacks and bosses. And MTP Demo.

“Doom II” Skulltag

What can I say, I love Doom! One thing is for sure, I’m not the only one. The fine folks at Skulltag love Doom as well.

This month our LAN Party is Skulltag — an epic port of the original Doom and Doom II. It brings the classic first person shooter into the 21st century while maintaining the essence of what made Doom great for so many years. I highly recommend you check it out and get involved in this all-month-long LAN Party at doom.hak5.org.

If you don’t already have a copy of doom.wad or doom2.wad grab a legit copy from steam for $10 or grab the open source iWad FreeDoom!

Happy Fragging

Don’t forget to submit your questions@hak5.org and feedback@hak5.org and thanks for your contributions.

This April 1st we bring you a gem* from the archives. Recently dig’d from a super VHS tape it’s Hak5 episode 507 from 1995. We take a peak at a Windows 95 “chicago” beta build, get our phone phreaking on, and review one of the latest SNES games.

Download HD Download MP4 Download XviD Download WMV

Watch

Show Notes

Every geek should take a look at Windows Chicago Build 58 — it’s classic.

Special Information Tones can be used for all sorts of interesting things.

The Lion King for SNES is honestly one of the better Disney games of its time.

We’ll be back next week with an awesome episode from 2009!

Don’t forget to submit your questions@hak5.org and feedback@hak5.org and thanks for your contributions.

In this episode Darren builds a Network Attached Storage server for our home network using a spare PC, a compact flash card, and some BSD. Paul brings us Doom on the iPod using Linux and some geeky voodoo. Wess crafts a unique LED liquor cabinet for about a hundred bucks. And Darren puts on his slightly darker than gray hat with a USB key that owns Windows machines in a matter of seconds (with a little prevention thrown in for good measure). Plus this month’s trivia, poll, & LAN party details from the lovely and talented Alli.

Sponsors

Get awesome web hosting from the pros at Dreamhost and receive $25 off your order when you enter coupon code HAK5! Plans start at $7.95/mo including 500 GB storage, 5 TB bandwidth, and one-click installs of popular software like WordPress, phpBB, and MediaWiki.

Keep your personal information away from spammers, hackers and your crazy ex-evilserver. Private Domain Registration from GoDaddy.com protects your privacy by keeping your address, phone number and more out of the public database. Get an additional 10% on your order when you enter coupon code HAK.