Willie Stehm
From WLCS
Today is May 18, 2024. Welcome to my page!
Contents
Topics of focus
Networking and Network Security
- Basic concepts
- Building test lab
- Intercepting packets
- Password hashes
- IM information (buddy info, messages, sign-on data, sign-off data, etc.)
- Middle man attacks
- Encryption
RFID
- RFID Basics
- Assembling RFID reader
- Reading and writing information on RFID card
- RF-dump
- Editing information stored on card
- RFID security
Magnetic Stripe
- DIY reader/writer
- Writing and editing information on card
Ten Goals for the Quarter
1) Set up test lab using a minimum of three computers connect to a hub or switch
2) Research and use packet sniffers to intercept packets sent by other computers through the network
3) Research and document findings on how to crack password hashes
4) Research email security
- Gmail Chat
- Normal Email
Goal Documentation
1 Setting up the test lab
- After doing a bit of research we settled on using the Xubuntu operating system. Xubuntu is a streamlined version of the Ubuntu operating system that is less memory intensive and thus better for older computers such as the ones used in our test lab. It also cuts out some of the unneeded bundled applications that come with Ubuntu, allowing us to add on only what is useful to us. While comparing hubs and switches we decided to use a hub. Hubs unlike switches broadcast packets out to all ports. This enables us to easily intercept packets, learn to analyze packet data, and learn about network security as a whole.
2 Packet Sniffers
- Under the recommendation of Mr.Bui we started using a program called wireshark (formally known as ethereal) to start capturing packets sent over our test lab network. Using the im client Pidgin, we set up test accounts and started talking to each other over the network. These packets were relayed to the Pidgin server and then sent to the other account. Using our hub and concurrently running wireshark, we were able to filter the captured packets to only view those related to Pidgin and the AIM protocol. The results were amazing. We intercepted packets containing everything from log-on info to message contents, buddy info, updates on when the person was away or idle, and even password hashes being sent at the log-in.
3 Password Hashes
- When signing onto AIM through Pidgin, we captured the password hash 51e3ed91700bee528a11e333ab25e6d2 with wireshark. The password algorithm used in the aim protocol is MD5. MD5 turns the password into a one way 128-bit hash before sending it AOL for verification. Since MD5 is designed to be a one way algorithm it makes it very difficult to reverse and thus recover the password from the hash. Two ways we found that this could be done are through the use of a Rainbow table or through a password cracker such as Cain and Abel. Password crackers use vast word lists and compare individual words to the password hash hoping to find a match.
