tag:blogger.com,1999:blog-12186912566582255382011-11-29T16:21:33.433-08:00Hacking with iPhoneAimed at providing an HQ so to speak for iPhone talk with pen-testing intent. Yes it does exist, yes we are making it happen.BooCockyhttp://www.blogger.com/profile/17985517293564534423noreply@blogger.comBlogger21100tag:blogger.com,1999:blog-1218691256658225538.post-16489792309668985242011-05-04T06:42:00.000-07:002011-05-04T06:42:12.166-07:00iPwN How-To<b style="color: red;"><span style="font-size: x-large;">What is iPwN</span></b><br /><br /><br />"Own the network" iPwN's motto so to speak lol. The idea is, you already carry your iPhone around everywhere you go anyway. My goal is to sort transform your iPhone into a hacking machine. That can be used by a monkey. iPwN is not intimidating at all. <br /><br /><br /><br /><br /><u><span style="color: red; font-size: large;">Text Bombing!</span></u> <br /><br />Well, im sure by now everyone knows how to sms bomb. All you need is a gmail account. Here's the catch though, gmail will disable your account after 500 texts for 24 hours. This is a nuisance and could be avoided if I implemented a paid text service. They do exist, but like I say they are paid. If you need to send someone more than the daily 500, than get a few friends on the internet together and organize a mass attack ;) <br /><br /><span style="color: red;"><u><span style="font-size: large;">Packet Sniffing!</span></u></span><br /><br />So what I did here, initially, was I made a Pirni and Derv implementation. I get alot of emails saying that it doesn't work. Well, it does work, its just not finding anything useful. The log.pcap file gets deleted as it is read by derv. Most likely the user-names and passwords are encrypted and are dropped. However, I recently added fr0gger, which is a *modified* version of dsniff fr0g. This will provide a real live feed, even let you target a specific machine on the network. If you cant get that to show anything, well then my friend, "victim" is not using the internet. Try again. <br /><br /><span style="color: red;"><u><span style="font-size: large;">Exp0its!?!!?</span></u></span><br /><br /><br />Yep, well, these are written in python. Have a very simple code base but as I search through exploit-db.com or shodanhq.com I find exploits compatible with iPwN's intentions of easy interaction. I cant really describe them as they are all different, and I add new ones quite instantaneously. Will add documentation on each individual exploit in the README file of each iPwN update.<br /><br /><br /><span style="font-size: large;"><u><span style="color: red;">Metasploit Attack Vectors</span></u></span><br /><span style="font-size: large;"><u><span style="color: red;"> </span></u></span><br /><span style="font-size: large;"><u><span style="color: red;"> </span></u></span><br /><span style="font-size: large;"><u><span style="color: red;"> </span></u></span>This is very early stages, but is what I really wanted iPwN to be in the first place. <div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1218691256658225538-1648979230966898524?l=pwntalk.blogspot.com' alt='' /></div>BooCockyhttp://www.blogger.com/profile/17985517293564534423noreply@blogger.com0tag:blogger.com,1999:blog-1218691256658225538.post-71981278575431386472011-05-04T05:23:00.000-07:002011-05-04T05:36:26.619-07:00What are the best cydia repos for pentesting tools?<div style="color: white;">#1, the original and the best</div><span style="font-size: large;"><b><br /></b></span><br /><span style="font-size: large;"><b><span style="color: blue;">http://cydia.theworm.tw</span></b></span><br /><br /><div style="color: white;">This repository contains the network-cmds package, that includes a modified ifconfig binary. This ifconfig, thanks to Wim Verreyckedn and TheWorm, will allow for promiscuous mode. Very important for dnsspoof attacks.</div><span style="font-size: large;"><b><br /></b></span><br /><span style="font-size: large;"><b><span style="color: blue;">http://boococky.hostei.com/cydia</span></b></span><br /><br /><div style="color: white;">This is my repository, yes it has errors. Yes it still works. I still update it regularly. Trying to keep up with all the latest tools that are of use on an iDevice, and ofcoarse iPwN ;) I even took a shot at developing a native iOS X11 desktop. Got as far as FVWM and Xterm. Pretty cool, but this repository</div><br /><span style="font-size: large;"><b> <span style="color: blue;">http://fenyx.x10.mx/</span></b></span><br /><br /><span style="color: blue;"><span style="color: black;"><span style="color: white;">Fenyx's repository. She has managed to build things such as window maker, GTK, cairo, even Ettercap GUI, that actually works on an iDevice under X11. She even compiled the newest Ruby 1.9.2, which is now recommended over the version I have on my repository. Especially if your using Metasploit on an older device. As it allocates memory better than the 1.8.6 version I have. </span> </span><span style="color: black;"><br /></span></span><br /><br /><span style="font-size: large;"><b><span style="color: blue;">http://trcx.site50.net/cydia</span></b></span><br /><br /><div style="color: white;">TRCX is a devoted developer and a friend. Grab this repository for opendns, adds an important resolv.conf to your /etc path. He also has iAHT which has some automated attack scripts and makes using most tools alot easier. You might also want to grab iForum for great support.</div><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1218691256658225538-7198127857543138647?l=pwntalk.blogspot.com' alt='' /></div>BooCockyhttp://www.blogger.com/profile/17985517293564534423noreply@blogger.com5