/* www.w00zl3.net */

Blind acceptance is a sign of stupid fools who stand in line

GCS d--(---) s: !a C+++ UL++>+++ P- L+++>$ E--- W++ N o? K+ w$ O-- M- V? PS+++ PE- Y+>++ PGP++ t+@ 5 X++@ R* tv+>- b+>++ DI-- D- G++ e+>+++ h--- r+++ z+

 print.css

Jul 2008. A special print.css is now available for this site. The navigation links, the download and link sections as well as the contact section will not be displayed in the print version of this site, nor will be images.

More information about the CSS Print Profile can be found here

 iwl3945

Jun 2008. At last I found some time and will to pay attention to the wireless problem I was having running Fedora 8. It took some research and dedication but finally wireless is now working on Fedora 8 as well. As I found out others were facing similar problems, so I thought it might be a good idea to document my findings for future use.

First of all, the driver I am using is the iwl3945-firmware-2.14.1.5-2, second, my Netgear Router runs WPA-PSK [TKIP] and using NetworkManger was not an option as it does not show my wireless connection (this will need further investigation though).So the challenge was to configure the iwl3945 driver and setup and use the wpa_supplicant-0.5.10-4 daemon to connect to the router.

Configure wpa_supplicant: /etc/wpa_supplicant/wpa_supplicant.conf (you will need root access to edit this file)

ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=wheel

eapol_version=1
ap_scan=1
fast_reauth=1

# WPA network block
network={
 ssid="[NETWORK NAME]"
 bssid=[ROUTER MAC]
 mode=0
 key_mgmt=WPA-PSK
 proto=WPA
 auth_alg=OPEN
 pairwise=TKIP
 psk="[PASSPHRASE]"
}


Configure iwl3945: /etc/sysconfig/network-scripts/ifcfg-wlan0 (you will need root access to edit this file)

# Intel Corporation PRO/Wireless 3945ABG Network Connection
DEVICE=wlan0
BOOTPROTO=dhcp
ONBOOT=no
HWADDR=[WIRELESS DEVICE MAC]
TYPE=Wireless
USERCTL=no
PEERDNS=yes
IPV6INIT=no
NM_CONTROLLED=no
ESSID=[NETWORK NAME]
CHANNEL=6
MODE=Managed
RATE=auto
# Other settings are blank


Finally: in order to connect to the router I use the following script:

#!/bin/sh

# NOTE: you will have to run this script as root

progname=$(basename "$0")

/usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wpa_supplicant.conf -Bw -Dwext -iwlan0
if [ $? -ne 0 ]
then
 echo "$progname: unable to start wpa_supplicant, exit."
 exit 1
fi

echo "$progname: started wpa_supplicant successfully."

/sbin/ifup wlan0
if [ $? -ne 0 ]
then
 echo "$progname: unable to start wireless device, exit."
 exit 1
fi

echo "$progname: started wireless device successfully."


Well, that was all that needed to be done and I am now happily surfing wirless! Here some sites I found particularly helpful for my research:

• Getting wireless to work in F7 (and F8) with both the iwl3945 and ipw2200 in-kernel wireless drivers
• Einrichtung eines Funknetzwerks unter Fedora
• Wpa supplicant

 OCW

May 2008. An OpenCourseWare is a free and open digital publication of high quality educational materials, organized as courses.

So for all of you who still have some time left and are looking for some brain food it might be a good idea to have a look at the OCW Consortium website. There you can find a wide range of online lectures of selected universities such as MIT or UC Berkeley.

For a list of universities and lectures go to The OpenCourseWare Consortium Website

 1984

May 2008. Protecting computers against malicious software and attacks has become quite a natural thing to do for any decent computer user. People install Anit-This and Anti-That tools and are dangerously happy with the world out there.

The truth is that the world out there is a predominantly evil place. Nothing is quite what it seems, and absolutely nobody can be trusted. Anti-This and Anti-That tools do not change this at all, they only make it a little bit more difficult for inexperienced attackers.

How can you make sure that sensitive data stored on your computer will not be revealed to others?

The most disturbing argument I hear from people is, "I have nothing to hide, I am not a terrorist". Hahaha, ever got the feeling you have been cheated?

To those who do care about their right of privacy there are at least some friends you should know of. Friends you should use on a regular base, because privacy does matter!

• TrueCrypt - Free Open-Source Disk Encryption Software
• Tor Project - Anonymity online
• GnuPG - The GNU Privacy Guard
• 1984.exe - essays about techincal surveillance in our society (German)

 HTS

Update: (2008-05-09) HTS is back online!

Update: (2008-05-05) HTS is currently down but you can go the HellBound Hackers website which offers a similar service

Apr 2008. Hack This Site is a website which provides hacking missions for registerd users. Difficulty levels range from basic html hacking to more advanced things like rce or stego missions. There is also lots of other stuff like articles and lectures on the site.

It's great fun, so give it a hack!

Here some tools/plugins which I found useful:

• Paros Proxy - Security tool for web application vulnerability assessment
• Tamper Data - Firefox plugin which allows you to easily modify web-requests
• Firebug - Firefox plugin which assits whith analysing websites
• Edit Cookies - Firefox plugin which lets you edit cookies on the fly
• John The Ripper - Password recovery tool
• Cain & Able - Password recovery tool for MS Operating Systems

Warning: HTS is highly addictive and not recommended for people which have other things to do!

 nasdk-0.1.0

Mar 2008. nasdk is lightweight and easy to use framework for Linux and Windows which allows you to call the majority of C-Library functions from within nasm.

I thought it might be a useful tool which allows you to focus more on assembler language itself instead of finding ways to interact with OS specific tasks (e.g. File I/O or string manipulation). Please note that nasdk does neither porduce compact nor fast running code, it is mainly targeted for people who are as lazy as I am.

All components povided are licensed under the GPLv3 (GNU PUBLIC LICENSE VERSION 3) and come with NO WARRENTY whatsoever. A copy of the GPLv3 can be found here.

Feel free to enhance, modify or fix bugs as you like. However, it would be nice if you could inform me about any changes, so that I can ensure to provide an up-to date version of nasdk on this site.

Please note that nasdk-0.1.0 is still an early beta, but it should at least be good dog food!

Download nasdk-0.1.0.tgz

 RSS 

Feb 2008. RSS feed now available. It was Henrik's suggestion to introduce a RSS feed for this site. Well Henrik, here we go, stay up-to-date.

• RSS Advisory Board - Specification, tutorials and discussion
• Feed Validator - For ATOM, RSS and KML
• Validate RSS of this site

 R61

Feb 2008. From time to time hackers should invest a bit of money in hardware, so I bought a new Lenovo ThinkPad R61 8943DNG. Cool thing. It originally came with a pre-installed version of Windows Vista Business but I got rid of the Vista crap immediately - well, I backed up the hidden recovery partition mainly because this is considerd good practice.

It is now running a dual boot of Fedora 8 (75 GB) and Windows XP Professional (75 GB) using the Grub (v0.97) boot loader. As I needed some version of Windows for reversing I downloaded all the XP drivers provided by Lenovo using my old laptop. To my surprise it took me quite a while to get audio working. But after some research and a little help from Tom everything worked out fine. The problem was due to a MS bug (KB888111).

However, with Fedora 8 I had no audio problems. Most things worked out of the box. The only thing I still have not managed to get working is wireless lan, but I am sure I will fix the issue once wireless is really needed - hopefully that will be rather sooner than later.

Original description: T7500(2.2GHz), 2GB RAM, 160GB 5400rpm HD, 15in 1400x1050 LCD, Intel X3100, CDRW/DVDRW, Intel 802.11abg wireless, Bluetooth, Modem, 1Gb Ethernet, UltraNav, Secure chip, Fingerprint reader, 6c Li-Ion, WinVista Business 32

• Lenovo ThinkPad R61 8943DNG drivers
• ThinkWiki - Wiki Web for IBM/Lenovo ThinkPad users
• Linux on laptops - Reports on running Linux on laptops

 24C3

Jan 2008. Back from Berlin. Still in trance and overwhelmed from all the creativity and wonderful people I met, here some links:

• 24C3 - Official Website - Gerneral information
• 24C3 - Official Recordings - Video and audio in various formats

 RCE

Nov 2007. As I am just doing a bit of Win32 RCE at the moment (yeah, once again), I was searching the web for some tutorials and useful sites. Here are some which I find particularly helpful:

• Lena151's video tutorials - Great video tutorials for newbies.
• http://www.reverse-engineering.net - General RCE forum.
• Olly Debugger - Olly Debugger Official Homepage.
• OllyDbg Plugins - Just what the link indicates.
• Woodman - Great famous RCE site, It hosts the official support forums for Olly Debugger.
• Tuts4you - Another great tutorials site be sure to check it out!
• Exetools - One of the oldest sites about RCE.
• Reversing Labs - Tools, tutorials and a little bit of everything for reversers.
• www.crackmes.de - Large community website for crackmes and reversemes.
• www.reverse-engineering.info - Reversing site from R. Yates

 CCC et al.

• Chaos Computer Club - Official website
• Chaosradio - Video and audio podcasts form the CCC
• Blinkenlight - CCC's 20th anniversary project
• FoeBuD - Verein zur Förderung des öffentlichen bewegten und unbewegten Datenverkehrs e. V.
• ChaosSeminar - A lot of very interesting video/audio potcasts from the CCC Ulm