Someone let Darren at the power tools again! Forget the case window, his latest creation includes a set of shadow box photo frames modded into a computer case perfect for showing off that sexy hardware. Shannon has rounded up your picks for webcam motion detection and iOS jailbroken apps. Plus answers to your questions regarding multi-monitor PC setups and much more!

Download HD Download MP4 Download WMV

Hacker Headlines
04:30

Watch out Ruby and Django, you may not be the only scripting languages in town to sport your own web server. This week Moriyoshi Koizumi of PHP.net posted an RFC for a built-in web server in the PHP binary. While this wouldn’t replace Apache as the web server of choice for major deployments, coders wanting to get a development environment up and running quickly would benefit from not having to write an HTTPD conf file.

Be careful what you download. 21 popular free apps in the market have been injected with root-kits and republished, AndroidPolice.com reports. “Guitar Solo Lite”, for example, was republished as “Super Guitar Solo” with the added functionality of secretly publishing your IMEI and userID, among other data, to a server in Fremont. Google has pulled the publisher from the marketplace and used its remote kill switch on the apps, but that doesn’t cover additional payloads which may have been downloaded from the 200,000-some zombie’d phones.

TorrentFreak reports that 70 percent of respondants to a Danish poll, say that they find piracy socially acceptable. 7 out of 10 said it’s acceptable, about 20 percent saying it’s completely acceptable, and 30 percent replied that it’s completely NOT acceptable. Although most that took the poll said piracy is ok, they mostly agreed that selling those downloaded goods for profit are completely not ok. I’m a little surprised to see how so many people think it’s alright.

Is Asus a fan of the Hak5 motherboard box case mods from weeks back? Possibly. The Taiwanese manufacturer showed off a concept shipping box that doubles as case for Mini-ATX motherboards. The box holds the motherboard and allows for additional components including hard disk and optical drives to be installed. I’ll go ahead and predict wall-mounted computer cases from Thermaltake next.

Thanks Lifehacker for the shoutout on our recent motherboard box case mod. Insert In-Soviet-Russia joke here.

Last year a 40-year-old computer specialist hacked into an advertising server and made a large plasma screen off a highway in Moscow play 20 minutes of porn (video). He faces up to 5 years in jail. This week the man plead guilty, to hacking into an advertising server and having a large plasma screen in Moscow to play 20 minutes of porn.

HakTip: Webcam motion detection round-up
7:04

I love those little tools that help out with everyday tasks. I have talked about motion detecting webcams in the past, but here are a few user picks:

Gary writes: If you want something sophisticated that runs in Linux try Zoneminder. Zoneminder is a professional quality, free, motion detection program for webcams and other cameras. It does everything Yawcam does plus more. In Ubuntu there are install instructions, and everything is in the repositories. Note, to prevent false triggers due to clouds passing the sun during daylight set up an exclusion zone. Another note, this program uses Mysql, Apache, Php and may be difficult to set up initially but is well worth the effort.

Ubuntu install guides and Zoneminder.com

Another viewer writes: Thought I’d let you know that Vitamin D is THE best webcam-software that there is. The ability to recognise motion between humans and animals, seriously!

What little gems are rocking your world? Hit us up, we’ll share ‘em! tips@hak5.org

User picks- Top Jailbroken Iphone Apps
10:14

Lots of new apps for me to check out. Here’s a quick overview of my favorites that you sent in:

Max Gamer uses JavaScript Anywhere when he needs something to do on his Iphone. This lets you hone HTML skills and play with web design. It’s a simple application for Web Development and Programming that lets you work on programming JavaScript, HTML, or CSS whenever you want. It’s free and downloadable from the iphone app store.

PkgBackup- backs up repo sources and Cydia apps and saves them as an info file in contacts. Have to restore? No problem. Go to Cydia, download the app again, sync contacts from ITunes, and press restore in the PkgBackup App. This redownloads all your sources and apps. Its good if you have a lot of apps installed and no time to keep track of them. It’s $4.99, available through Cydia.

Mike- VNC’s- Veency- Little faster, quick toggle in SBSettings. Free in Cydia.

MCleaner- Lets you annonomously block calls and create a blacklist or whitelist. You have choice to have phone keep ringing, go straight to voicemail, hang up or accept. You phone wont ring while blocking call. There’s a 15-day trial or it’s around $12 total through Cydia.
iFile is a very useful file manager and viewer. It gives you fast navigation through the iphone system to view files. You can view movies, sound, text, html, pdf’s, even ZIP files. Files can be sent as email attachments straight from your phone or edited and bookmarked as well as uploaded straight from the iFile built in web server. $4 plus free trial.

Pirni Pro- Network sniffer, native ARP spoofer. This can be used to sniff usernames, passwords and data traffic running over your wireless network. This new version with a graphical interface is very user friendly. $1.99 in Cydia.
Wifi Sync- Wirelessly sync with iTunes from wherever whenever. Wi-Fi Sync enables wireless syncing with iTunes at the touch of a button. Never go looking for that USB cable again. It’s $9.99 and available in the Cydia store.
From Ed-

iBluever- iBluever is an iOS application which enables Bluetooth Dial-up networking support (client mode) for your iPad, iPhone and iPod Touch. iBluever has its own Bluetooth and network stacks, you can connect your iPad/iPod Touch/iPhone to a Bluetooth Dial-up networking enabled phone, and then access the mobile network via the phone’s connection. So you can share your phone’s data plan to your iPad/iPod Touch/iPad, and save your money to buy an iPad 3G, make your iPod Touch to be more like an iPhone. $5.00 in Cydia.
iNet- non jailbroken app- $3.99, a network scanner. Great tool to find out what devices are connected to your network… or the hotels open wi-fi network…

Nick-
Just following up to your jailbroken iPhone apps segment. I found this site called CodeThemed which makes it really easy to make your own WinterBoard themes.. you should check it out.

Send em in! We got plenty more, I just dont have time to review all of them!
feedback@hak5.org

Crack The Code Challenge
17:16

Do you have what it takes to compete in our Crack The Code Challenge — brought to you by GoToAssist Express? Test your skills in our private lab network and bid for the title supreme leet hax0r. Winners will be featured on a future episode of Hak5!

Our next event will be this Sunday, March 13th at 3pm Pacific. Visit Hak5.org/challenge for all of the details. We’ll be live streaming at hak5.org/live throughout the day. See you there!

Modding a photo frame into a computer case
18:50

It’s time to break out the power tools and start building again. This week I’m pleased to bring you the first part of the photo frame case mod build. I’m using two Ikea RIBBA series shadow-box photo frames to display a mounted and lighted motherboard for your admiration. Technology is a beautiful thing.

Trivia!
38:29

Last Week: In Tron, characters that are depicted battling in the digital world are called what?

Answer: Programs

This Week: In WarGames, this character gives his name to the first computer game Lightman finds.

Answer at hak5.org/trivia for your chance to win some hak5 swag!

Email: Email: Multi-monitor PC setups
40:55

Gehric writes:

Hiya Darren and the team, Can you do a segment on how you did the multiple
screen setup, i would like to do a 4 monitor setup and show a snake or cube
scrolling, so that i can show it off at my next house party

Darren recommends multiple PCI-e graphics cards in a compatible motherboard from the same manufacturer. He has had plug-and-play experience in Windows and Debian variants of Linux.

There are also plenty of USB VGA adapters available.

Email: Email: Packet sniffing with tcpick
42:47

MyssT writes:

Good show, can’t wait to see what you do with the cluster! Anyway reason I’m mailing is…
This is a cool packet sniffer.. tcpick
For example, sniff irc on your network:
tcpick -i eth0 ‘port 6667′ -e 1000 -yR
Lots of other cool stuff too and has curses support on linux, I’m using it on debian 6.0

Thanks MyssT! Always good to have another packet sniffer in our arsenal.

Keep up with the latest on Hak5 by following us on Twitter or Facebook. Subscribe and get your weekly technolust delivered automatically. Or show your support and grab some swag from the HakShop – including the new airport friendly WiFi Pineapple and hoodie. Finally if you’d like to suggest a topic
for ask a question feel free to hit up feedback@hak5.org.

Jenn Cutter of Open Alpha fame joins us to talk about recent developments in PSP hacking and homebrew. Matt’s got answers to your questions about rolling your own Storage Area Network for all your virtualization needs, and Darren’s filtering packets in the console with ngrep.

Download HD Download MP4 Download XviD Download WMV

While Shannon’s on vacation our friend Jenn Cutter from Open Alpha joins us to talk about the recent developments in PSP hacking and homebrew.

The PSP homebrew scene has grown more interesting over the past little while since the user base has been sectioned off into different camps based on the particular unit they purchased and whatever firmware they are using. Thanks to the efforts of Team Typhoon, ChickHEN (homebrew enabler) permits owners of all models to run the unofficial apps and games they’ve grown to love without touching the flash of the PSP, so there’s no worrying about turning it into a brick. No one likes expensive bricks. Keep in mind that ChickHEN is not a piracy tool so don’t expect to run any type of backups though it. Davee has the lowdown on the latest release which can be downloaded here. If you are curious or sceptical, feel free to check out video proof that it works on PSP 3000s.

–Jenn Cutter

Matt answers your questions about storage area networks and recommends QNAP. If you’re feeling hands on rolling your own is a great option too. Matt points out his favorite hardware like 3Ware RAID cards, Transcend IDE Flash Modules, and the Intel Storage Server SSR212MC2. Software wise it’s worth investigating Freenas, and SAN Melody.

Continuing on with Eighty‘s segment on extracting windows executables from packet captures and Mubix‘s segment on network tap analizers, Darren’s taking a look at the open source tool ngrep. If you’re familiar with grep you’ll be at home with this tool. Darren demonstrates using the tool to filter packets from a live capture using a Network Monkey. Alternatively it can be used with pcap files.

Don’t forget to check out our latest contest at Hak5.org/yourlan where the most creative network will win cozy Hak5 gear from our newly opened HakShop

Getting to know your neighbors — Darren takes a trip around your network with nmap, THE open source network security scanner. Want to obscure your OS fingerprint? Make a Windows Box show up as a printer? Shannon’s got just the thing. And Matt takes a first look at the Napera N24 smart network switch / security appliance. All that and more on this Hak5 Season 5 Premiere!

Download HD Download MP4 Download XviD Download WMV

Watch

Show Notes

Taking a trip around your network with Nmap

This week I talk about network scanning with the difinitive open source security scanner Nmap.

Scanning ones own network is ideal whether simply to know your neighbors or keep inventory of your assets. As a black hat it can be the first step in enumerating a target environment and looking for weaknesses.

In order to perform our scan we’ll simply need a copy of Nmap. It’s available for Windows, Mac, and just about every flavor of Linux, BSD and more. If you’re on a debian based system like Ubuntu a simple apt-get install nmap should do you good. If you’re looking for a security distribution with nmap (and a ton of other great tools) built in can’t speak highly enough of BackTrack. Version 4 beta was just recently released.

The underlying workings of Nmap are better explained in this guide but suffice it to say it takes advantage of TCP’s 3-way-handshake and other fancy raw packet tricks to find hosts and open ports. In this segment I set out to introduce the concept and get you started with a few basic examples. If you’re interested I recommend Nmap Network Scanning and the official man pages as further reading.

The segment details some commands and their usage in a searching for open MS terminal servers scenario. I highly encourage you to provide feedback either by way of email (darren AT hak5 d0t org) or on our forums. I enjoy doing segments like these but if you have any corrections (more than one way to skin a cat), suggestions for future topics or hacks of your own please let me know.

–Darren Kitchen

Obscure your OS Fingerprint

OSfuscate 0.3 by Irongeek is used to camaflouge or obscure your Windows OS. With this tool, it’ll show up like another OS of your choice, nothing at all, or even a printer. OSFuscate could be used if you are on a hostile network and need some sort of cloak while going along in your daily routine. It is important to note that this is not a fool proof method for hiding yourself on a network and should not be relied upon for security. however, as a layer of obscurity in addition to your regular security practices you may want to consider it.

It’s a simple process to set up OSFuscate on your machine. Go to Start->Run->Regedit. Back up your Parameters folder, found under System->CurrentControlSet->Services->Tcpip->Parameters. You can do this by simply right clicking on the folder, and choosing export. This is basically just to keep yourself form messing up your OS in the process and having no way to return it to normal. You’ll notice on Irongeek’s website that certain Parameter Registry keys will be subtly changed. You could do this by hand, but OSFuscate makes this task super simple. Open OSFuscate, and choose an OS that you want to pretend to be. Restart your computer and the differences should be in place! Now if someone running NMap snoops your computer, they’ll see some other OS other than what you actually have.

You can find more information at Irongeek’s Website. And as always, you can email me with any comments or suggestions.

as it really helps us out.

–Shannon Morse

Matt’s full review of the Napera N24 can be found on his blog at MattLestock.com.

Thanks for tuning into our season premiere episode. We’re very excited about all of the exciting new projects coming up in Season 5. We appreciate and encourage your feedback — especially on this episode’s fresh format, pace, and presentation. We strive to make this show better and better for you every week so let us know how we’re doing!

And a big thanks to those who’ve contributed to the success of Hak5. Your donations are greatly appreciated!

Chris Gerling begins a three part series on Packet Sniffing starting with the fundamentals of packet structure, the OSI model, tools and terminology. Matt harnesses the social power of media with Boxee, a social media center based on XMBC. Shannon demos out Synergy, the Half-Life 2 co-op mod, and Darren check out Cron for Windows.
[ MP4 | XviD | WMV ]

Watch

Show Notes

Matt Lestock harnesses the social power of media with Boxee, a social media center based on XBMC.

Chris Gerling starts a 3 part series on packet sniffing, this time starting with the fundamental structure of a packet, the OSI levels, the tools and terminology.

Darren Kitchen demos Cron for Windows, a tool from Tom Bell that brings the powerful task scheduling service Cron to Windows!

Shannon Morse checks out Synergy, the Half-Life 2 mod that allows you and your friends to play as multiple Gordon Freemans through Half-Life 2 campaigns in co-op mode. w00t!

We’ll be at Day-Con in Dayton Ohio this weekend. Come meet us at the con or hit up the after party if you’re in the area (I think it’s 21 and up). Then on the 25th we’ll be heading down to Nashville, TN for Phreaknic so be sure to stay tuned to Hak5.org for all the details and announcements or follow @hak5 on the twitter.

Oh yes, and we’ve ordered nearly all the equipment necessary to go HD! Woohoo! Thanks so much for all the donations. We’ll be high-res in no time now