we have a user name, for example: admin ... then we try each of character combinations as a password using automated script (program).
for example:
user: admin password: 1 -- login fail
user: admin password: 2 -- login fail
... (many login attempts) ...
user: admin password: Z -- login fail
user: admin password: Z1 -- login fail
user: admin password: Z2 -- login fail
... (many login attempts) ...
user: admin password: T3h_s3cr3t -- login success.
Dictionary Attack on Password.
we have a user name, we have a dictionary of 'words' (character combinations), then we try each of the 'words' alone or concatenated (joined, glued together) into a longer password. again we use automation tool as script for example.
opinions vary whether a dictionary attack helps to crack passwords truly, but it has uses nevertheless.
often it's better to start with a dictionary, before trying brute force or other methods later.
all information we have about an individual we are trying to compromise is useful here, for forming a proper dictionary.
for a simplified example:
username: admin,
dictionary: 007, bond, eye, gold, golden, pistol, gun, beach, surf, cat, icecream, shake, martini, lemon, stir, _.
after using script we'd have following dictionary attack:
user: admin, password: 007 -- login fail
user: admin, password: bond -- login fail
... (many login attempts) ...
user: admin, password: 007007 -- login fail
user: admin, password: 007bond -- login fail
user: admin, password: 007eye -- login fail
... (many login attempts) ...
user: admin, password: 007_007 -- login fail
user: admin, password: 007_bond -- login success.
Hacking Router.
... tried this with my router (TL WR740N), with a success.
 |  |
Attack on Router's Password with Brutus Software.
Words List,
a 'Dictionary' file.
Attack on Router's Password with THC-Hydra Software.
 |  |
Login Success.
Other Use Cases.
perhaps this can be used with web applications as well, didn't have time to check this properly as of yet - but my Computer Sciences knowledge tells me that this can be done, not sure if with this versions of software ... if protections such as 'Captcha' won't interfere.
i read that THC-Hydra at least can be used to attack other protocols/software as the SSH for example.
there are protections as well,
there are other similar tools as well.
Hacking Tools' writing urge.
... something tells me i should learn HTTP, Telnet, SSL/TLS & SSH protocols properly, then write a tool similar to Brutus & Hydra.
it's best to know Your hacking tools, to write them from scratch, i think.
Router Firmware Upgrade.
The Router's Firmware Upgrade is possible.
this can be done as is seen on a image above,
there's the danger of turning a router into a spy-tool.
... a lot of low-level programming knowledge & effort is neccessary, i think ...
... probably certain hackers did that already, however, i think.
Tuesday, November 24, 2015
Denial of Service Hack.
Introduction: Infrastructure.
Web Pages & the Internet Applications are services generated by the Hardware-Software infrastructure.
There's a Computer connected to the Internet, that runs a web page server or an application server software, client browsers connect to it.
Hardware-software infrastructure 'serves' or in other words: 'sends' pages to users, where these are displayed in browser windows or tabs.
That's how users communicate with application in the other parts of the Internet.
What if there are too many users for an hardware-software infrastructure to handle the service efficiently ?
There are delays in a service, or even an application crash can occur disabling the service for longer.
In practice it's rare for an application service provider to face too many users challenge, more often delays & crashes are because of an attack, a Denial of Service Hack.
A Web Application Service.
A Web Application Server Software with a Sample Application it runs.
A Web Application Software in itself is not enough, there must be application that it can run,
That is ... a Web App Server + a Web Application + Computer Hardware & the Internet: it's what's needed to run a Internet Application Service.
Denial of Service Hack.
Let's examine a common attack route on the Internet Application, a Denial of Service Hack.
Tor's Hammer & it's usage.
(click on image to enlarge it).
TOR (The Onion Router) is a software tool that increases users' anonymity in the internet.
TOR's Hammer is a software script (a program) that attacks the software parts of the Internet Application Service, by creating a very many of the Internet Connections at once, delaying or preventing connections with legitimate users of the Internet Application Service.
TOR's Hammer can work with or without TOR infrastructure, with increased anonymity or without that an advantage.
... waiting,
... forever ?
an Internet Application Service during a DoS attack.
IP address spoofing.
Every IP datagram sent in the Internet contains a source and destination IP address in its header. The source is the original sender of the datagram and the destination is the intended recipient. So, ignoring the role of NAT, when your computer contacts a server on the Internet, that server knows your IP address as it is included in the source field of the IP datagram. In some cases you may want to change the source IP address included in the IP datagram (without changing your actual computer IP address). For example, this can be useful for network testing and diagnostics, security penetration testing and performing security attacks (for learning purposes only, of course). Setting the IP source address of datagrams to be a fake address is called address spoofing. In Linux it is very easy to do using iptables.
Address spoofing can be performed with a single command using iptables.
For example, to change the source address included in IP datagrams that one's computer sends to 1.1.1.1, one can use a following command:
$ sudo iptables -t nat -A POSTROUTING -j SNAT --to-source 1.1.1.1
Source: Address Spoofing with iptables in Linux.
(i've not tested this part of this hack as of yet).
Web Pages & the Internet Applications are services generated by the Hardware-Software infrastructure.
There's a Computer connected to the Internet, that runs a web page server or an application server software, client browsers connect to it.
Hardware-software infrastructure 'serves' or in other words: 'sends' pages to users, where these are displayed in browser windows or tabs.
That's how users communicate with application in the other parts of the Internet.
What if there are too many users for an hardware-software infrastructure to handle the service efficiently ?
There are delays in a service, or even an application crash can occur disabling the service for longer.
In practice it's rare for an application service provider to face too many users challenge, more often delays & crashes are because of an attack, a Denial of Service Hack.
A Web Application Service.
A Web Application Server Software with a Sample Application it runs.
A Web Application Software in itself is not enough, there must be application that it can run,
That is ... a Web App Server + a Web Application + Computer Hardware & the Internet: it's what's needed to run a Internet Application Service.
Denial of Service Hack.
Let's examine a common attack route on the Internet Application, a Denial of Service Hack.
 |
 |
Tor's Hammer & it's usage.
(click on image to enlarge it).
TOR (The Onion Router) is a software tool that increases users' anonymity in the internet.
TOR's Hammer is a software script (a program) that attacks the software parts of the Internet Application Service, by creating a very many of the Internet Connections at once, delaying or preventing connections with legitimate users of the Internet Application Service.
TOR's Hammer can work with or without TOR infrastructure, with increased anonymity or without that an advantage.
... waiting,
... forever ?
an Internet Application Service during a DoS attack.
IP address spoofing.
Every IP datagram sent in the Internet contains a source and destination IP address in its header. The source is the original sender of the datagram and the destination is the intended recipient. So, ignoring the role of NAT, when your computer contacts a server on the Internet, that server knows your IP address as it is included in the source field of the IP datagram. In some cases you may want to change the source IP address included in the IP datagram (without changing your actual computer IP address). For example, this can be useful for network testing and diagnostics, security penetration testing and performing security attacks (for learning purposes only, of course). Setting the IP source address of datagrams to be a fake address is called address spoofing. In Linux it is very easy to do using iptables.
Address spoofing can be performed with a single command using iptables.
For example, to change the source address included in IP datagrams that one's computer sends to 1.1.1.1, one can use a following command:
$ sudo iptables -t nat -A POSTROUTING -j SNAT --to-source 1.1.1.1
Source: Address Spoofing with iptables in Linux.
(i've not tested this part of this hack as of yet).
Thursday, November 19, 2015
The Ghost Hack.
The 'Ghost in the Shell' film,
The 'Ghost Hack / Puppet Master' scene.
... 'the Ghost Hack', is it possible with the Modern Science ?
... perhaps it is, for an Electromagnetic Field of the Brain & other parts of the Human Nervous System can interact with other Electromagnetic Fields, affecting each other.
in 'Mage: the Ascension' terms, this would be:
- Correspondence Sphere - for affecting Energy at a Distance,
- Mind Sphere - For affecting Mind via Electromagnetic Energy through Brain & Nervous System,
- Forces Sphere - for Electromagnetism,
- Life Sphere - for exact information about Neuroscience of the Human Brain & Nervous System.
is it possible to move a program into Cyborg's Body?
i think it is, for object can be loaded into computer memory, executed there without restarting whole application.
i read articles about 'the Mind / Machine Interface', of interactions between machine & human brain.
... a computer program however could be cloned, copied instead of being moved, i think.
see also, if You wish or need, ... : Hackers could get inside your BRAIN: Experts warn of growing threat from monitoring and controlling neural signals.
Saturday, November 14, 2015
About Computer Sciences & Hacking.
Computer Sciences.
Computer Sciences are a vast field of knowledge, it's more than one person can learn during a lifetime. Large projects last for years, many employees work on them at the same time. In case of programming, it's not only knowing a single programming language, but also mathematics, software production methodologies & a lot of theoretical background. Programmers are people who understand how computers work, are able to make them work in a certain way, as ordered by customers.
Technology Race.
Once a while new technologies, new solutions appear, competing to float above others as far as sales go. These can be compared to a toolbox of a programmer, different hammers, drills, nails, etc ... Part of these technologies are open source & freely available, as for example emerging Dragonfly Algorithm is, others are patented trade secrets. Because of competition & a fast work pace, security errors are a part of the race.
Hacking.
Hackers are Information Technology personnel who specialize in Software Security. Once they are aware of a problem in application's security they can break it, gaining access & control over a machine it's run on, or disable the Service’s Internet access, for a while at least.
Common hacking Methods.
Most known of hacks is the Buffer Overflow Hack, where computer memory is overwritten with specificially prepared data, known as shellcode ... in the end shellcode is run instead of original application, doing hackers' will. Other important parts of hackers' toolbox are: Heap Overflow Hacks, Format String Hacks, Rootkits, Backdoors, Social Engineering Hacks, SQL Injection Hacks, Denial of Service Hacks, probably more as well ...
Service Security.
It's not uncommon for Corporations to hire hackers as Security Personnel to 'patch the holes', as well as to use other means of increasing security of Corporate Systems. Antivirus software also helps, often it's best to use a combination of Firewall Software, Antivirus Software, Intrusion Detection System Software & Security Personnel.
Computer Sciences are a vast field of knowledge, it's more than one person can learn during a lifetime. Large projects last for years, many employees work on them at the same time. In case of programming, it's not only knowing a single programming language, but also mathematics, software production methodologies & a lot of theoretical background. Programmers are people who understand how computers work, are able to make them work in a certain way, as ordered by customers.
Technology Race.
Once a while new technologies, new solutions appear, competing to float above others as far as sales go. These can be compared to a toolbox of a programmer, different hammers, drills, nails, etc ... Part of these technologies are open source & freely available, as for example emerging Dragonfly Algorithm is, others are patented trade secrets. Because of competition & a fast work pace, security errors are a part of the race.
Hacking.
Hackers are Information Technology personnel who specialize in Software Security. Once they are aware of a problem in application's security they can break it, gaining access & control over a machine it's run on, or disable the Service’s Internet access, for a while at least.
Common hacking Methods.
Most known of hacks is the Buffer Overflow Hack, where computer memory is overwritten with specificially prepared data, known as shellcode ... in the end shellcode is run instead of original application, doing hackers' will. Other important parts of hackers' toolbox are: Heap Overflow Hacks, Format String Hacks, Rootkits, Backdoors, Social Engineering Hacks, SQL Injection Hacks, Denial of Service Hacks, probably more as well ...
Service Security.
It's not uncommon for Corporations to hire hackers as Security Personnel to 'patch the holes', as well as to use other means of increasing security of Corporate Systems. Antivirus software also helps, often it's best to use a combination of Firewall Software, Antivirus Software, Intrusion Detection System Software & Security Personnel.
Friday, November 13, 2015
... Character's Life, is it worth ?
a short trip with Frances to Kuo-Toa cave, lost one cure moderate wounds potion, as well as one cure light wounds potion.
game-coin-wise probably was slightly not worth, but i had my own real life reasons for going there again.
The Kuo-Toa Caves & Oscura's Entrance.
Frances has about 10k gold coins in Peltarch's Bank anyway, her equipment is worth even more. lost potions are worth under 100 gold pieces if i remember well, if game patch didn't change this.
... since beginning of the blog, i've put real life reasons above in-game ones,
... if this helps, i can kill any or all of the characters or fund something 'illogical', as for example a scene for a tale.
> [ cheajournal.blogspot.com ];
---
* had an insight telling me that 1gp is worth 10 USD if taken from Frances Darkhavens' purse,
* had an insight agreeing that her life should be worth about 8k gp, the cost of Resurrection spell that used to return character from death without suffering experience loss. not sure if that service is available still, perhaps not,
* existence of 'pricing' does not mean that there's an offer available, at all.
Frances' coins in Peltarch's Bank.
game-coin-wise probably was slightly not worth, but i had my own real life reasons for going there again.
The Kuo-Toa Caves & Oscura's Entrance.
Frances has about 10k gold coins in Peltarch's Bank anyway, her equipment is worth even more. lost potions are worth under 100 gold pieces if i remember well, if game patch didn't change this.
... since beginning of the blog, i've put real life reasons above in-game ones,
... if this helps, i can kill any or all of the characters or fund something 'illogical', as for example a scene for a tale.
> [ cheajournal.blogspot.com ];
---
* had an insight telling me that 1gp is worth 10 USD if taken from Frances Darkhavens' purse,
* had an insight agreeing that her life should be worth about 8k gp, the cost of Resurrection spell that used to return character from death without suffering experience loss. not sure if that service is available still, perhaps not,
* existence of 'pricing' does not mean that there's an offer available, at all.
Frances' coins in Peltarch's Bank.
Thursday, November 12, 2015
Magical Place.
at my apartment,
... a place for Magic.
there's place in my apartment, a Magical Place,
it's where i keep things Magical, to build power, to affect Magics, to make them soak the 'Magical Aura'.
when it's inconvenient, i put other things there, however.
Cards on image above represent Virgo's 6-card serie:
- The Hermit,
- A Knight of Pentacles,
- 8, 9 & 10 of Wands,
- The Mage.
there are books related with Magic:
- 'The Weiser Field Guide to witches',
- 'TAROT for Beginners'.
there are weapons laying on the Books,
soaking in Magics of the place & things.
there's one a box with rest of the Cards, extra ammo for a Gas Pistol & a yellow Cigarette Lighter as well.
there's a Paint, the Nitescence, a Beautiful Eye with imaginary runes on iris as hell.
Ace of Swords, The Card.
Spiritual & Material, Absolute & Relative.
Spirit reaches it's Prime, reaches it's full potential once it's free of relativity, once it heads towards Absolute.
There's the risk of losing roots, of alienation from relatives, of alienation from one's past.
Once joined however, absolute & relative, spiritual & material ... fruits of spiritual pursuit are within reach.
Spritual Weapon & Awareness.
The Crown, The Prize of Spiritual Way is Awareness.
Sword is the double-edged weapon, it protects as well as harms, both our enemies & us, etc ...
Awareness is shown on the Card, as closed circle, as the Crown that holds double-edges of the Sword within, of the Spiritual Weapon.
Mastery is Awareness, of how every move Protects, as well as how it harms & who.
i think that skillful, wise & compassionate moves Protect powerfully, while Harming the least.
Spiritual Weapon.
What truly is Spiritual Weapon, represented by Swords of TAROT?
i think it's both Knowledge of Absolute Truth, as well as the ability to Express, the ability to Speak.
There's accomplishment & reputation as well.
As one Criticizes certain type of behavior, preferably not aimed at someone specific, certain beings gain in Meaning, others are losing Meaning however.
Consequences of using Spiritual Weapon are either better or worse Karma, not neccessarily seen immediately.
i read that seeing this the Card, one should prepare & increase hers or his awareness to benefit fully of it.
Increasing Awareness.
how to do this?
... perhaps by aiming to be closer to Absolute, to learn what's needed at the given moment & learn the Way.
Spiritual Growth.
... this is my opinion for now, can use constructive critics.
- what is Spirituality?
- this can be described as religious transformations one goes through during her or his life.
- how to Develop Spiritually?
- help others, but with Wisdom & Compassion. i do not think that helping terrorists to carry with their revenge helps anyone develop spiritually, contrary in fact - this leads to spiritual fall.
- is Spiritual Growth at cost of others?
- despite what i read (mixed opinions), i think that as one develops spiritually, one is able to help more, to help better, to help others develop spiritually as well.
- what are benefits of Spiritual Development?
- i think it's better karma - better thoughts & feelings as one progresses. thoughts & feelings become our speech & deeds with time, help to change our relations & life as well.
- what about so called 'Secret Practices'?
- i think that someone developed, wise is able to see deeper meaning of words & practices anyway, ... to see through secrecy as well. secrecy is important to hide dangerous practices - not everyone is ready to use advanced practice at once, there are practices that harm, perhaps useful for protecting however.
- is Open Mind important for spiritual development?
- i think of Open Mind as of 'Enabling Factor', if we are ready to question our paradigm, world-view, we can question 'what is good' in the search for the 'even better'.
this is also written in a Buddhist Blog.
- what is Spirituality?
- this can be described as religious transformations one goes through during her or his life.
- how to Develop Spiritually?
- help others, but with Wisdom & Compassion. i do not think that helping terrorists to carry with their revenge helps anyone develop spiritually, contrary in fact - this leads to spiritual fall.
- is Spiritual Growth at cost of others?
- despite what i read (mixed opinions), i think that as one develops spiritually, one is able to help more, to help better, to help others develop spiritually as well.
- what are benefits of Spiritual Development?
- i think it's better karma - better thoughts & feelings as one progresses. thoughts & feelings become our speech & deeds with time, help to change our relations & life as well.
- what about so called 'Secret Practices'?
- i think that someone developed, wise is able to see deeper meaning of words & practices anyway, ... to see through secrecy as well. secrecy is important to hide dangerous practices - not everyone is ready to use advanced practice at once, there are practices that harm, perhaps useful for protecting however.
- is Open Mind important for spiritual development?
- i think of Open Mind as of 'Enabling Factor', if we are ready to question our paradigm, world-view, we can question 'what is good' in the search for the 'even better'.
this is also written in a Buddhist Blog.
Wednesday, November 4, 2015
Correspondence Sphere.
ssh virus, a part of ...
'The Sphere of Correspondence involves an understanding of three-dimensional reality.
Mages who have gained understanding of Correspondence have come to the (almost) unanimous conclusion that space, as the human race knows it, is ultimately an illusion.'
-- Quoted from 'Mage: the Ascension' book, 'Correspondence' part of 'The Spheres' chapter.
... there's idea of the 'Correspondence Point', of 'All-Space' where all beings & phenomena coexist.
... is it 'Mind', perhaps?
'Sphere' of 'Correspondence' is also related with study of how information, energy & matter flows from a place to place, from a being to a being, of teleportation as well.
... i think that information, at a certain stage in time at least, is represented with energy in brain, or in a machine as well.
Tuesday, November 3, 2015
Forces Sphere.
Forces.
'Humans have long sought to control the energies of nature.
Toward this end they have employed techniques ranging from the rain dances of tribal cultures to billion-dollar fusion power experiments.
(...)
The description of the Forces Sphere given here predominantly uses terms of modern science, such as radiation, kinetic energy, chemical bonds and reactions, etc.
While some Traditions (such as the 'Sons of Ether' and 'Virtual Adepts') utilize these terms in their study of Forces, other Traditions use radically different terminology and symbolism to represent the forces of nature.
For example, Dreamspeakers see Forces as aspect dreamed into existence by Gaia. For them the act of using Forces is the process of enticing Gaia to dream a certain way, thereby causing the desired energy to manifest in physical reality.'
-- Quoted from 'Mage: the Ascension' book, 'Forces' part of 'The Spheres' chapter.
... image above is a part of the 'Mage: the Ascension' facebook group.
see also, if You wish or need, ... : Milarepa.
... Nanotech, is it worth ?
'Nanotechnologies' book,
... it's the Modern Technology,
translated to Polish Language.
'Nanotechnology' is a very difficult discipline of the Science, because it requires a lot of learning & a lot of caution & care.
it's at minimum a Lot of Physics (Quantum, probably other as well ... this requires Mathematics as well ... at least catching up with Integrals & Differential Calculus that i am not proficient with in this moment in life), Chemistry & Biology ...
to coordinate NEMS nanite clouds it's also significiant amount of Computer Sciences, Object Oriented Programming for Large Number of Objects Coordination, Software Optimization Methods & Software Concurrency.
i think this can be done in my lifetime, but requires serious involvement, not neccessarily in this moment.
i think it's still worth to consider if to invest my time in NEMS nanotech, because it's powerful protection & other benefits as well (Quantum Computing & Cryptography among these).
knowledge of Strategy & Tactics also helps with Security, but i can write almost-complete code with extension points & let people fill gaps with strategies & tactics.
see also, if You wish or need, ... : 'Ola AH' Programming Language for Nanotech ?
LinkedIn's NEMS Group.
---
beside Nanotechnology & NEMS there are other scales, for example: Microtechnology & MEMS, both of 1000 times larger scale (10-6 of meter instead of 10-9 of meter).
i think that Microtechnology-related Laws of Physics are more similar to Laws of Classical Physics than Nanotechnology-related Laws of Physics, but i am not very knowledgeable in that as of yet.
Subscribe to:
Posts (Atom)