Hulu and the BBC iPlayer everywhere with a little VPN action to bypass Geo IP filters. We’ll be setting up Network Manager in BackTrack5. Plus, Linux inside of Windows, graphing trace-routes in terminal and a whole lot more this time on Hak5!

Download HD Download MP4 Download WMV

VPN in BackTrack 5 with Network Manager

BackTrack 5 is rocking my world as of late. I’ve been running the gnome 32bit version as my primary os on one of my laptops since release and I so far it has been fantastic out of the box.

That is until I wanted to easily connect to a PPTP VPN. While BackTrack5 includes Wicd — the Wireless (and wired) Interface Connection Daemon I’m more familiar with Network Manager, which includes a VPN client. Two birds, one stone!

In this segment I setup Network Manager in BackTrack 5.

apt-get install network-manager-gnome

cp /etc/network/interfaces{,.backup}

echo “”auto lo”" > /etc/network/interfaces

echo “”iface lo inet loopback”" >> /etc/network/interfaces

service network-manager start

nm-applet&

reboot

Run Linux apps in Windows with AndLinux

If you want to run Ubuntu seamlessly inside a Windows box, perhaps you’ll be interested in this tool called andLinux. AndLinux is a complete Ubuntu system that runs in Windows (all except 64-bit 7) and uses a program called coLinux as it’s core. CoLinux is a port of the Linux kernel to Windows. It’s kind of like running linux in a VM, except with coLinux, andLinux merges itself with Windows and the Linux kernel instead of running through an emulated PC. andLinux is for fun and development and it can run almost any Linux applications without having to do any modifications.
So, with andLinux you get a fully functional Linux system, with no desktop interface. It gives you a second panel or start menu where you can load Linux apps. The apps can be run simultaneously with Windows apps and you can cut and paste text between them.

AndLinux comes in a couple of different versions- KDE version (which is a full version) or XFCE (minimal). When you go through the andLinux installation on Windows, there are a few important steps to keep in mind.
Choosing your start up type: I chose run andLinux automatically as a NT service because it is the most convenient choice. You don’t have to do any kind of configurations if you choose this option.
You’ll be asked to create a username and password for andLinux login.
For Windows file access, I chose COFS as it gives you easier configuration compared to Samba. Samba will, though, let you share files with special characters.
Also, if Windows starts freakin because it’s not Microsoft certified, just click continue anyway.

Once the installation has finished, just restart your computer and unblock any windows firewall settings that may occur from the installation. To start using andLinux, first run the NT console. This will open a command prompt that’ll ask you for your username and password. You can then close that window and start using any of the programs and applications that are available in the boot menu. It’s kind of like downloading all the Linux programs straight into Windows without using a Linux OS.

So I’m just going to try some of these programs out, and they all seem to work just fine. So andLinux looks to be a very handy way to use Linux applications indeed! If you like it, tell me so! feedback@hak5.org.

Nibble: MTR isn’t your fathers traceroute

MTR isn’t your father’s Traceroute. It’s the ultimate command line tool for finding out where those tasty little packets are getting lost. From bash issue mtr –report-wide –curses and your destination of choice.

mtr –report-wide –curses 8.8.8.8

MTR will bring up a curses terminal interface with a constantly updating report on hops and pings, complete with hostname, best and average latency, and percentage of packets lost at each link.

Thanks to Brian for sending this in and scoring some complimentary hak5 swag. Submit your 4-bits at hak5.org/nibble

If you’re into Hak5 you’ll love our new show by hosts Darren Kitchen and Shannon Morse. Check out HakTip!

Whether you’re a beginner or a pro, HakTip is essential viewing for current and aspiring hackers, computer enthusiasts, and IT professionals. With a how-to approach to all things Information Technology, HakTip breaks down the core concepts, tools, and techniques of Linux, Wireless Networks, Systems Administration, and more

And let’s not forget to mention that you can follow us on Twitter and Facebook, Subscribe to the show and get all your Hak5 goodies, including the infamous WiFi Pineapple over at HakShop.com. If you have any questions or suggestions please feel free to contact us at feedback@hak5.org.

If you’re an IT or software consultant, you’re always looking to compete with the big guys. Problem is you may be a one man show! You need a remote support tool – and the best is Go To Assist Express. The faster you can connect to a customer, the faster you can move on to the next challenge! Reduce your travel time and increase revenue by handling more support requests. Brought to you by Citrix, you KNOW Go To Assist Express is easy and secure. Try GoToAssist Express FREE for 30 Days. For this special offer visit GoToAssist.com/Hak5.

If you want to build a video site or if your website has a play button, I recommend getting a dot TV domain. A dot TV website lets you showcase your original content and create a unique site, not just another YouTube channel.
Just go to domain.com and search for the perfect dot TV domain for your new idea. Then use coupon code Hak5 at checkout to save an extra 15%.
If you need to host your dot TV website, don’t forget about Domain.com’s web hosting plans. They’re less than six bucks a month and have everything you need to build, maintain, and promote your site.
Remember – when you think domain names, think domain.com.
Got a great idea? It all starts with a great domain. domain.com

Audible.com is the leading provider of downloadable digital audiobooks and spoken word entertainment. Audible has over 75,000 titles to choose from, to be downloaded to your iPod/MP3 player and played back anywhere, anytime. Choose from books in every genre, science fiction, thrillers, drama, comedy, business, history and more. Go to audiblepodcast.com/ hak5 to get a FREE audiobook-download of your choice when you sign up today. Again go to Audiblepodcast.com/hak5 for your Free Audiobook!

This time on the show I’m creating a virtual machine inside VirtualBox.

Download HD Download MP4 Download WMV

Now, way back on episode 4 of HakTip, I introduced a program called YUMI (aka Your Universal Multiboot Installer), and I demoed it inside a program called VirtualBox. I got tons of questions about VirtualBox, so I decided to dive in and show you guys how to use it. I’ve been a Windows fangirl ever since I was a kid and my dad was building computers in our living room, but I’ve toyed around with Ophcrack and Puppy Linux a few times. Being somewhat new to the Linux operating system, you may not be ready to dual boot your PC or switch over completely to a new OS, so you might want to just test it out in a Virtual Machine that runs inside your Windows machine.

Today we’ll be setting up our very own VirtualBox Machine, but first it’s time for a few terms.

A virtual machine (VM) is a software implementation of a machine (i.e. a computer) that executes programs like a physical machine. It can be used as an operating system that you can open and boot into on your normal computer. So, for example, I am currently running Windows 7 on my laptop, but I am also running this Linux Virtual Machine inside VirtualBox, a program installed in Windows 7. Using a Virtual Machine means I don’t need any hardware. I don’t have to build a second computer just for Linux, and I don’t have to reboot my laptop every time I want to dual boot into my Linux Operating System. All I have to do is open VirtualBox, choose my Linux VM, and start the OS.

VirtualBox is a handy open source program that you can install on your host computer (the one that is going to be running the VM’s), whether it be Windows, MAC, Linux, or Solaris. Inside VirtualBox, you can boot into a second operating system, whether that means you boot into Linux while still being logged into Windows, or you boot into a MAC while still being logged in on a Linux machine, etc; and it will run as if it’s just another application on your regular operating system. You can run as many virtual operating systems inside VirtualBox as you want, the only limit is your computers disk space and memory. All of these operating systems that you can boot into are called the Virtual Machines.

VirtualBox will interpret any operating system you install as a VMDK, which is a Virtual Disk Image. This image file is considered a hard drive by VirtualBox, which is why it can boot into the operating systems.

So lets get started in the program. When you first boot up, you won’t see any VM’s listed, because you haven’t created any yet. Click on the New button at the top. From here, you will go through a setup wizard. First you’ll need to choose a name for your first Virtual Machine. I’ll call this one Ubuntu 32 bit. Then choose your OS Type that you will install in a few minutes. This will be Linux Ubuntu for myself. Next you will choose how much memory you want to allocate. I would suggest anything higher than 512 MB. I chose 1 GB for mine.

Next you will need to create a new hard disk. Since I’ve never run Ubuntu on my machine in a VM, I’ll need to create a new hard disk, enabling VirtualBox to see and use the operating system I’ve downloaded as a .iso file. Next you need to choose whether you want to store data dynamically or fixed size. I recommend dynamic data storage because it takes up less space and will only use up more space as needed.

Click next and choose the location you want to store data. I’ve created a new folder called Ubuntu and chose 8 GB allotted space.

After this, you’ll see a summary of your choices; click finish.

Now you’re ready to start up your new VM for the first time! Click on your new VM and choose Start. First you’ll need to select your installation media. This is where the Ubuntu .iso we downloaded earlier takes place. Click on the folder icon and find your .iso, then click next and finish. If all goes well, you’ll see a little first-time popup about how your mouse will be captured inside the VM and you’ll have to press a host key to use it in your Host PC again, and the new Virtual Machine operating system should start. After waiting a few minutes it looks like mine worked! Now, you can see I’m running Ubuntu inside my Windows 7 laptop. It’s automatically connected to the internet, and I can tinker to my heart’s desire.

In addition to being able to use VirtualBox like I did previously, you can also choose to add Guest Additions. These are addons that enable you to use the mouse without the need for a host key to uncapture it, share folders and files between the host PC and the guest VM, give you better video support, and plenty of other features.

What program or command is giving you warm fuzzies? Hit me up — tips@hak5.org

And be sure to check out our sister show, Hak5 for more great stuff just like this.

This time on the show, Shannon demonstrates a novel password management technique. Darren’s explains Time Memory Trade-off and Rainbow Tables. Jason gets started programming for Windows Azure and it’s Linux in your web browser time! A PC Emulator in Javascript.

Download HD Download MP4 Download WMV

A novel approach to password management

I have about a million websites that I have to log onto day-to-day. Seriously. And with all the hype about website infiltration and stolen data, it makes me worry a bit about my own usernames and passwords. I have recently upgraded my Google Mail account to use 2-step verification, which I explained a few weeks ago in a Snubs Report, but what about my facebook? Twitter? My online banking?

These sites all say things like, ‘Password must be so-and-so characters long with at least one letter and number’, but some aren’t so secure. How will I know what sites will have a data breach? I don’t. So I use somewhat different passwords for all sites. But honestly, if someone had the balls and the time to figure out my pattern, they could probably do it. But I don’t want to download a password protection program to use on my home computer because I use several different computers and may not have access to the software or my saved encrypted passwords when I’m using a public PC.

Well, there are other options out there if you don’t want to use more software, you could use something a little less technical.

This is PasswordCard from passwordcard.org. It’s a card the size of a credit card that I can stick in my wallet and carry with me. What makes this unique is the series of random digits and letters that are included on it. The rows are different colors and the columns have a different symbol at the top. You can use this card to think up a very strong and tough password and use the colors and symbols to remember it.

Better yet, each code card is randomly generated and there are Android and iPhone apps.

So here is an example of how to use this tool:

First off, go to the website and print out your unique card. I have a laser black and white printer, but if you have a color printer I’d suggest printing in color to give you more options for remembering passwords.

You can then cut out your card and laminate it if needed. Keep the rest of the page, because it has your unique card number on it. More on that in just a bit.

Then you can choose your password. Choose a symbol and a color or row number and use the letters and numbers that are seen in that row or column.

All you have to do after that is go to your website and change your password. If you lost your PasswordCard, you can go back to the website, type in your unique card number and hit print, or pull it up on your mobile phone.
So for example, I printed out my card and I’m going to choose something I would remember. I’ll go with the music note, and number 7. So my password would be HAg8kgntQUG.

This tool is super simple to use and completely free. The website can be visited safely via HTTPS and the algorithm used to create the codes is available in case the website goes down and you need to reprint your card.

If you don’t feel safe printing a card, just download the free app off the Android Marketplace or the Apple App Store. This app will let you generate a random card or pull up your own card. It’ll also let you generate your own personal PasswordCard based on a series of random hexidecimal digits. For example, I can hit enter number, and type in a number that I have memorized. That number will always pull up my card for me to use.

If you’re worried that someone can get ahold of your unique card number, not to worry! They still wouldn’t have your actual passwords because those were created from the numbers and letters found on the card, and they could be thousands of different password combinations.

I think this is a pretty cool idea, and it’s easy enough that I could probably show my mom how to use this. So, enough of using crappy passwords!

This is just one of the tools available out there for password generation. Do you have one? Email it to me: feedback@hak5.org. Now for the haktip.”

Start programming in Windows Azure

Jason. begins a three-part mini-series on programming for Windows Azure. In this part Jason demonstrates how to get started. In coming parts Jason will develop an cloud-based application that maps Kismet KML data to a Bing map.

If you’re into Hak5 you’ll love our new show by hosts Darren Kitchen and Shannon Morse. Check out HakTip!

Whether you’re a beginner or a pro, HakTip is essential viewing for current and aspiring hackers, computer enthusiasts, and IT professionals. With a how-to approach to all things Information Technology, HakTip breaks down the core concepts, tools, and techniques of Linux, Wireless Networks, Systems Administration, and more

And let’s not forget to mention that you can follow us on Twitter and Facebook, Subscribe to the show and get all your Hak5 goodies, including the infamous WiFi Pineapple over at HakShop.com. If you have any questions or suggestions please feel free to contact us at feedback@hak5.org.

Season 9 continues with the results from last weekend’s Crack the Code Challenge as well as a walkthrough on how participants were able to complete the challenge using packet analysis, file reconstruction, stenagrophy and brute force. Plus encrypted USB drives with centralized management and more from the RSA 2011 conference.

Download HD Download MP4 Download WMV

Hacker Headlines

Bummed you didn’t get your hands on one of Google’s CR-48 Chrome notebooks? The alternative Instant-On OS Splashtop Linux is now available for download. Splashtop has been previously available as a pre-installed second OS on notebooks from Acer, ASUS, Dell and others. This 1.0 release makes the trim down Linux 2.6 and X11 based OS available to the public.

Samsung has made a ROM based on Android 2.3.2 Gingerbread for the i9000 that just leaked to the net. All of the changes haven’t yet been determined, and if you don’t have an i9000 model, you still have to wait for the update on your Galaxy S devices. I’m looking forward to seeing what the users can do with the ROM now that it’s available.

Sony isn’t taking recent PlayStation3 hacks lightly, as German hacker Graf Chokolo found out when authorities raided his house earlier in the week. In a post on his Hypervisor reverse engineering blog Chokolo wrote “Sony was today at my home with police and got all my stuff and accounts.” Hours later the “Hypervisor Bible” as Chokolo puts it was released. Links have been removed to comply with legal notices, but you know nothing is ever erased from the web.

The Nintendo 3DS has been out for a day in Japan… and it’s already been hacked. The Tech-On! Group has already gotten their hands on the 3DS and torn it apart to look at all the delicious insides, including the 3D display. Along with the hardware, Ayasuke2 on Youtube has already hacked the 3DS to run R4 Cards and play unauthorized Nintendo DS games.

Getting encased in carbonite isn’t exclusive to Han Solo anymore. Attendees at the Tangible, Embedded and Embodied Interactive Conference got to scan themselves in 3D with a hacked Microsoft Kinect and print the resulting STL file using a Stratasys 3D printer.

Crack the Code Challenge

Did you have what it took to compete in our Crack The Code Challenge, brought to you by GoToAssist Express? 6 Hak5 viewers did this Sunday. Mad props go to Netshroud for being the first to crack the code, as well as Jellyfish, Jon, Alex, Leo and Tristan.

A big thanks go out to all that participated, joined the live stream and chat, and of course GoToAssist Express for sponsoring our Hak5 Lab Network. We’ll have details on the next challenge on next weeks show so be sure to tune in.

Cracking the code: PCAP file recovery and stenography

Shannon demonstrates techniques for completing the Crack the Code Challenge using Network Miner and steghide.

HakTip: Command line packet captures using Tshark

Last week we were asked about command-line packet sniffers and I recommended tcpdump and ngrep for filtering. Steve Z was quick to point out TShark, the command-line counterpart to Wireshark. With rules and filtering built in, it is quickly becoming a favorite for my packet sniffing needs. For example, issuing:

tshark -R “!(udp.port==53) and udp and ip.addr==10.73.31.55″ -i eth0

will show me just UDP packets that aren’t on port 53 to or from the address specified.

What little gems are rocking your world? Hit us up, we’ll share ‘em on the show. tips@hak5.org

Encrypted USB drives with centralized management

Darren meets with Kingston and Blockmaster to talk about their new USB management security applications.

Email: USB Passthrough

Toby writes in:

Now that I’m adhering to the “Trust Your Technolust” way of life, I figure your my best chance for a quality fix… I have an issue that I would love to see how you would resolve. I work at a non-profit food producer that provides millions of servings to feeding programs world wide every year. Were running as much open source goodness as we possibly can so that we can direct as much revenue to the feeding programs as possible. I have a VM “When-doze” terminal server running a software package that requires a usb software key. I need a (cheap or free) way (hak or bypass) to overcome the lack of ability to have non-storage USB passthrough

Darren recommends USB Redirector, a product he learned about when researching Proxmox VE.

Keep up with the latest on Hak5 by following us on Twitter or Facebook. Subscribe and get your weekly technolust delivered automatically. Or show your support and grab some swag from the HakShop – including the new airport friendly WiFi Pineapple and hoodie. Finally if you’d like to suggest a topic
for ask a question feel free to hit up feedback@hak5.org.

Building a virtualization clusters with proxmox on the cheap and demonstrating how to migrate virtual machine.

Virtio drivers and paravirtualization explained while building a live Proxmox cluster migrating virtual machines using the Virtio drivers.

Darren checks out Ampache, a powerful open source streaming media solution perfect for your Linux home server. Jason answers your Boxee questions and Shannon joins the round table for a discussion on jailbreaking and USB wireless adapters for virtual machines.

Download HD Download MP4 Download XviD Download WMV

Ampache – for the love of music
Darren walks you though setting up Ampache on Ubuntu and is pleased with the results.

Jason answers your Boxee questions
Jason answers some of the questions he has received regarding his homebrew boxee box and software development.

Domain.com – Freeze Pop Diet Hijacking!
Our friend Evil Server hijacks Darren’s FreezePopDiet.com domain, and, well, you’ll see…

GoToMeeting Roundtable – USB Wireless Virtual Machines
Darren is joined by Shannon and Jason to discuss iPhone jailbreaking and USB Wireless adapters for virtual machines

If you want to know the latest on Hak5 be sure to follow us on Twitter or Facebook.

Also, now is also a great time to grab some swag from the HakShop – including the new airport friendly WiFi Pineapple with free world-wide shipping.

And finally if you’d like to suggest a topic for a future show feel free to hit up feedback@hak5.org

The Hack Across America series concludes after 6 weeks and the first order of business at the new place in the San Francisco bay area is to build an inexpensive home server to host virtual machines. Then Shannon has a Windows power tools two-fer and Jason joins us for some Android application development — can you way wardriving app?

Download HD Download MP4 Download XviD Download WMV

Hack Across America concludes in the SF Bay

First and foremost I apologize for the audio. I’m working on getting something resembling a set together and I’m still making due with my field equipment (read: shotgun mic). The 12′ ceilings aren’t helping. I promise to have it cleaned up by next episode when I get the rest of the Hak5 gear shipped out.

Speaking of next week, quick programming note: We’ll be at E3 with Jenn Cutter. That means follow us on twitter for the latest.

Another reason to keep up on the social nets is for the upcoming SF Bay Hak5 meetup. Venue and other details TBD.

Trivia

First appearing in MS-DOS 6, this command line program was a staple of Windows systems until being replaced by RD with the Windows NT line.

Enter for your chance to win a super sweet new Hak5 sticker pack set by submitting your answer at hak5.org/trivia

United States Air Force
A Special thanks to the sponsor of today’s episode, The United States Air Force.

Android App Development: WiFi War Driving

This week Jason joins us for a little wardriving on Android. Check out the source code or download the project.

package org.Hak5.WifiScanner;

import java.util.List;

import android.app.Activity;
import android.content.BroadcastReceiver;
import android.content.Context;
import android.content.Intent;
import android.content.IntentFilter;
import android.net.wifi.ScanResult;
import android.net.wifi.WifiManager;
import android.os.Bundle;
import android.util.Log;
import android.widget.TextView;

public class WiFiScanner extends Activity {

    TextView textView;
    WifiManager wifi;
	BroadcastReceiver receiver;

	@Override
    public void onCreate(Bundle savedInstanceState) {
        super.onCreate(savedInstanceState);

        setContentView(R.layout.main);

        textView = (TextView) this.findViewById(R.id.wifitext);

        wifi = (WifiManager) this.getSystemService(WIFI_SERVICE);

        if (receiver == null)
			receiver = new WiFiScanReceiver(this);

		registerReceiver(receiver, new IntentFilter(WifiManager.SCAN_RESULTS_AVAILABLE_ACTION));

        populate();

    }

	private void populate() {
		String text = "";
		List access_points = wifi.getScanResults();
		for(int i = 0 ; i < access_points.size() ; i++){
			ScanResult ap = access_points.get(i);
			text += "#SSID: " + ap.SSID + "/Security: " + ap.capabilities + "/Frequency: " + ap.frequency + "/DB: " + ap.level +"\n\n";
		}
		textView.setText(text);
		Log.d("Wifi Display", text);
		wifi.startScan();
	}

	class WiFiScanReceiver extends BroadcastReceiver {

		WiFiScanner wifiScanner;

		public WiFiScanReceiver(WiFiScanner wifiDemo) {
		super();
		this.wifiScanner = wifiDemo;
		}

		@Override
		public void onReceive(Context c, Intent intent) {
			wifiScanner.populate();
		}
	}

}

Snubs Report: A Windows Power Tool Two-fer

Do you ever feel paranoid of someone casually 'fixing' your computer with a handy flashdrive, thinking they are actually tossing on a keylogger? There is a useful tool called USB Write Protector for just that. It's a small windows utility that turns on or off USB write protection. USB Write Protector will secure you computer against would-be physical USB attacks like that of the USB Switchblade / USB Rubber Ducky by making USB thumb drives non-writable.

And second, have you ever run into the problem on Windows where you can't delete a file because it's being used by another program or person? Now we have Unlocker, a portable app that unlocks files so you can delete them.

USB Write Protector can be downloaded from here. By using USB Write Protector, you can protect your Windows computer from harmful rays from the USB Switchblade of death! Easily run the program from a .rar file, and just run the exe. You can also use this as a portable app. Double click, and choose USB Write Protection on or off. If you cant read Dutch, change this to English or whatever your language is. When ON, no files or data can be written onto a USB thumb drive.

Unlocker can be downloaded from here. Problems occur while attempting to delete a file such as:
*Cannot delete file: Access is denied.
*The file is in use by another program or user.
*Make sure the disk is not full or write-protected and that the file is not currently in use, etc.

Trying to find the problem is a pain! So we have Unlocker. It's a free downloadable tool for Windows and it comes for installation or as a portable version. Just install and you're set. Now, try to delete a file and if you get a popup, right click on the file and choose Unlocker. Lockers will appear in a list. Choose unlock all and the file becomes available for use. If file is not locked, you still have the option to delete, rename, or move the file straight from unlocker.

You like? Tell me! Email!

And a big thanks to Go To Assist Express for sponsoring this week's Snubs Report.

GoToAssist Express
Anyone expecting a long wait for your technical expertise is in for a BIG surprise. With Go To Assist Express brought to you by Citrix, you can provide immediate support by easily viewing and controlling your customers’ computers online! Provide instant remote one-to-one support to clients located ANYWHERE in the world. Handle more requests in less time. Assist up to 8 customers at once. Support both Mac and PC users! Try Go To Assist Express FREE for 30 days! For this special offer, you must visit GoToAssist.com/Hak5 for a FREE trial.

A Cheap Home Virtual Machine Server

The first order of business after moving to the SF Bay has been to build a cheap wall-mounted virtual machine server for the home.

Ok, I'll be honest I had a spare CPU and made the mistake of going to Fry's with a few bucks. But it's totally justifyable as I've needed a place to house a plethora of virtual machines for all sorts of mischevious testing.

Of course I cheaped out when it came to buying a case. Who needs a case? Wall mounted to a piece of black acrylic is so much cooler. Trust me, your spouce will love it.

This rig is running the latest version of Ubuntu and my favorite virtualization technology - VirtualBox.

What makes this project really special is the use of a Virtualbox web front end. There's a really nifty project over at code.google.com/p/vboxweb called VirtualBox Web Console -- and it does just that.

Simply using the VirtualBox API, Python, jQuery and flash (for the RDP client) it is able to provide a pretty slick web front-end to your virtual machines. Simply put, if you can get access to your home web server you can have access to all of your machines.

I'll be the first to admit that it's a little rough arond the edges, but I think this project holds a lot of promise. I'll continue using it and let you know how I really feel in the weeks to come.

What do you think? Found a better solution? Using VMware or another virtualization technology? Figure the wall-mounted server would be leeter with some laser beams? Email feedback@hak5.org.

Domain.com

I like Domain.com’s Deluxe web hosting plan that’s only $8.75/mo. One click install of all the popular open source programs like WordPress, Joomla, and Drupal, and more! Unlimited traffic

Free website builder with unlimited pages, Easy and affordable to get your sites online with Domain.com. Domain.com offers blistering fast DNS and hosting infrastructure, the lowest prices on the web AND the highest quality. Thanks to Hak5 fans, Domain.com is one of the fastest growing domain and hosting companies in the world. Got a great idea? It all starts with a great domain. Domain.com! Don’t forget to use coupon code HAK5 at checkout to get 15% off your order.

If you want to know the latest on Hak5 be sure to follow us on Twitter or Facebook.

Also, now is also a great time to grab some swag from the HakShop - including the new airport friendly WiFi Pineapple with free world-wide shipping.

And finally if you'd like to suggest a topic for a future show feel free to hit up feedback@hak5.org

While meeting up with family in Florida this week Darren takes on a WiFi Challenge using the airport friendly Pineapple Mark II and Airdrop-ng. Plus, Shannon has a follow-up to the Ultra Software including your picks.

Download HD Download MP4 Download XviD Download WMV

Airport WiFi Challenge – Jasager and Deauths

Once again my travels take me to a wonderful and target rich environment — the airport.

And while I typically don’t take on challenges, this one tickled my technolust. I was asked how many clients I could harness with a WiFi Pineapple during a typical hour long layover at the airport. I figured this was a great opportunity to test out Airdrop-ng.

Your Ultra Software Picks

In a follow-up from episode 703, Shannon counts down your Ultra software picks, including:

• Total Commander
• JkDefrag
• Ultimate Boot CD
• Super Anti-Spyware
• Process Explorer

Following up with last week’s desktop sandboxing challenge Darren’s taking a look at another kind of sandbox — one for malware analysis. Shannon thinks your VNC and SSH servers are pretty spiffy, but how about controlling your computer over twitter? Free text messaging to your PC anyone?

Download HD Download MP4 Download XviD Download WMV

Malware Analysis Sandbox

CWSandbox is an automated malware analysis sandbox. It works by running suspected malware samples in a simulated Windows OS. So as opposed to trying to break into the malware code to see what it does, we simply run it in a live environment. That way we can monitor all the network traffic that the malware generates. All of the processes that are created, the DLLs that are loaded, any changes to the Windows registry and even what it’s doing to the file system.

This is achieved by using a technique called API hooking. That basically means that when the malware calls the Windows application programmers’ interface to say something like “connect to this IP address” or “modify this file” it’s actually going to CWSandbox’s monitoring software, which logs the action and goes ahead and makes the change.

It’s kind of like an operating system man-in-the-middle. For malware.
So once a suspected malware sample is run through the tool you get a computer generated report of what the executable is actually doing. And this can be fed into anti-virus and intrusion detection systems to monitor for similar behavior.

PC Remote Control over Twitter

While there is no denying the power of running your own SSH, VNC server at home for remote access, wouldn’t it be nice if you could simply text message your computer something simple like “Hey, what’s your external IP address” or “Send me a screenshot” or “Go download this file”

And if Robin Wood has taught us anything with KreiosC2 – commanding your computer, or even a large botnet for that matter, over social networks is quite possible.

But now it’s time for something a lot more user friendly. This week Snubs investigates TweetMyPC

A Virtual Appliance can be though of as a software image containing a supporting stack designed to run inside a virtual machine. A quick look at vmware’s virtual appliance directory shows that there are hundreds of applications that can be quickly and easily deployed. In this segment I take the Dimdim open source virtual appliance, designed for vmware, and deploy it with VirtualBox (just becasue I can).

Last week the news was a buzz about Google’s Chrome OS, and while we typically don’t cover tech news on the show I freaked out in my usual open source, cloud lovin’ Linux-y sorta way. So this week we’re taking a first look at Chromium OS — the FOSS project that Chrome is built on.