All started Sunday, around 6AM GMT, our 4-year old dedicated server wasn't responding anymore and even a hardware reboot didn't bring it up. So, I opened a ticket and the technicians noticed the power supply died and quickly replaced it.
Everything worked fine until Monday morning, 9AM GMT, the server started to be unstable. I first thought it was Apache because during my tests, the process used several times 100% CPU when it crashed.
Then I tried stopping Apache and MySQL, the 2 most consuming processes (the CPU usage was on average at 6% without these 2 processes) and even with that, it was crashing after 15 minutes.
I thought that our kernel might be corrupted due to the crash of the server, so I tried using one of their netboot kernel (as well as the hardware testing mode) and it kept crashing.
So, I just opened another ticket for this issue. I really wonder what's going on.
Also, the migration of the forum and trac to the new server was planned at the end of this month but it might happen sooner than expected (I'll try to do it this week-end).
I'll keep you updated.
Wednesday, May 19, 2010
Tuesday, May 4, 2010
Monthly news (May 2010)
Project:
- Aircrack-ng 1.1 was released a bit more than a week ago. A lot of bug fixes (including the buffer overflow in different tools) and improvements have been done. The most noticeable changes are the addition of airdrop-ng by TheX1le and the interaction in airodump-ng.
The following screenshot shows some of the possibilities of the interaction (more details in the wiki and in the manpage). In this case, when you color an AP, its clients are automatically colored the same:
Forum:
- criser released v0.8 of his C# (Mono) GUI, wepcrack. He uses git for his source control and if you want to use the latest source and don't know much git, read the following. He is looking for someone who can design an icon for his software.
- Zermolo released permutator beta 1.3. It generates incremental wordlists/dictionaries based on your needs. The package by Jano contains the source code and an Ubuntu package.
Other:
- ShamanVirtuel released a GUI to capture WPA handshakes called Autohs-GUI. His project is hosted on Google Code along with a few other programs.
- Aircrack-ng 1.1 was released a bit more than a week ago. A lot of bug fixes (including the buffer overflow in different tools) and improvements have been done. The most noticeable changes are the addition of airdrop-ng by TheX1le and the interaction in airodump-ng.
The following screenshot shows some of the possibilities of the interaction (more details in the wiki and in the manpage). In this case, when you color an AP, its clients are automatically colored the same:
Forum:
- criser released v0.8 of his C# (Mono) GUI, wepcrack. He uses git for his source control and if you want to use the latest source and don't know much git, read the following. He is looking for someone who can design an icon for his software.
- Zermolo released permutator beta 1.3. It generates incremental wordlists/dictionaries based on your needs. The package by Jano contains the source code and an Ubuntu package.
Other:
- ShamanVirtuel released a GUI to capture WPA handshakes called Autohs-GUI. His project is hosted on Google Code along with a few other programs.
Saturday, April 24, 2010
Aircrack-ng 1.1
Aircrack-ng 1.1 is released ;)
A lot of bug fixes (including the buffer overflow in different tools) and improvements have been done. The most noticeable changes are the addition of airdrop-ng by TheX1le and the interaction in airodump-ng.
Here is the changelog:
- airdrop-ng: New tool by TheX1le.
- airodump-ng, aircrack-ng, airdecap-ng, airbase-ng: Fixed buffer overflow in airodump-ng due to forged eapol frame.
- aircrack-ng: Fixed multicast detection (WPA handshake detection).
- airodump-ng: Added interaction (see wiki for the commands).
- airodump-ng: Fixed client time in netxml file.
- airtun-ng: Add WDS and bridge support.
- airbase-ng: automatically set privacy bit to 1 if WPA or WPA2 is used (-Z or -z option).
- airmon-ng: Updated iw URL for v0.9.19.
- airdriver-ng: Fixed link for madwifi-ng.
- aireplay-ng: Chopchop enhancement to not stop but wait on deauth packets.
- tkiptun-ng: Fixed segfault.
- wesside-ng: Fixed compilation bug with recent version of gcc.
- cygwin: Compiling sqlite isn't necessary anymore, libsqlite3-devel package can be used.
- osdep: Strict aliasing and x86_64 fix.
- osdep: Add tap support for Darwin/OS X. Still require tuntaposx from sourceforge to work.
- All: Fixed compilation on cygwin 1.7.
- All: Fixed compilation on recent version of OSX.
- manpages: Fixed aireplay-ng manpage for attack 0: not disassociation packets, deauth packets.
- manpages: Added the keys for interaction in airodump-ng.
- patches: Added regulatory domains override patches for atheros drivers (ath5k, ath9k and ar9170).
- patches: Added 2.6.32 patch for r8187 driver (ieee80211).
- Makefiles: Fixed make uninstall.
Download: aircrack-ng-1.1.tar.gz
A lot of bug fixes (including the buffer overflow in different tools) and improvements have been done. The most noticeable changes are the addition of airdrop-ng by TheX1le and the interaction in airodump-ng.
Here is the changelog:
- airdrop-ng: New tool by TheX1le.
- airodump-ng, aircrack-ng, airdecap-ng, airbase-ng: Fixed buffer overflow in airodump-ng due to forged eapol frame.
- aircrack-ng: Fixed multicast detection (WPA handshake detection).
- airodump-ng: Added interaction (see wiki for the commands).
- airodump-ng: Fixed client time in netxml file.
- airtun-ng: Add WDS and bridge support.
- airbase-ng: automatically set privacy bit to 1 if WPA or WPA2 is used (-Z or -z option).
- airmon-ng: Updated iw URL for v0.9.19.
- airdriver-ng: Fixed link for madwifi-ng.
- aireplay-ng: Chopchop enhancement to not stop but wait on deauth packets.
- tkiptun-ng: Fixed segfault.
- wesside-ng: Fixed compilation bug with recent version of gcc.
- cygwin: Compiling sqlite isn't necessary anymore, libsqlite3-devel package can be used.
- osdep: Strict aliasing and x86_64 fix.
- osdep: Add tap support for Darwin/OS X. Still require tuntaposx from sourceforge to work.
- All: Fixed compilation on cygwin 1.7.
- All: Fixed compilation on recent version of OSX.
- manpages: Fixed aireplay-ng manpage for attack 0: not disassociation packets, deauth packets.
- manpages: Added the keys for interaction in airodump-ng.
- patches: Added regulatory domains override patches for atheros drivers (ath5k, ath9k and ar9170).
- patches: Added 2.6.32 patch for r8187 driver (ieee80211).
- Makefiles: Fixed make uninstall.
Download: aircrack-ng-1.1.tar.gz
Monday, April 5, 2010
Monthly news (April 2010)
Project news:
- ebfe, who created airolib-ng, released an exploit for airodump-ng, aircrack-ng, airdecap-ng. You can find more information in his blog (Post 1, Post 2) but it just makes the tools crash, no real exploit released. It will be fixed in the next few days before the release (v1.1).
- Nearly everything has been moved to the new server, only forum, trac and buildbot needs to be moved :).
- Do you remember I wrote that trac didn't display svn commits for some unknown reason? That's now fixed, I just had to comment out a line in trac.ini.
- For those who can't open the website due to URL filtering, use whydoyoublock.me. It's not a mirror, it points to the exact same content as www.aircrack-ng.org.
Forum news:
- Patches to override the regulatory domain for ath5k, ath9k and ar9170.
- The work on the C# GUI for aircrack-ng, WepCrackGUI, continues. And here is a blog post in italian about it.
- Beini now has its own website. Here is the forum thread.
- Wordlist generation:
* Here and there
* Here is a script by Zermolo to generate wordlist with only numbers, called permutate and another post in the same thread about the same subject with JTR.
* Creating custom rules for John.
* Word field is an incremental word list generator.
Other news:
- I'll speak at Sharkfest. It will take place in the main campus of the Standford University, June 14-17.
- Ever heard about NeoPwn? Version 2 will be based on the Nokia N900 and will be Backtrack Mobile.
- Remember spoonwep and spoonwep 2? Shamanvirtuel is working on spoonwep 3. Public beta release is planned between 15th-30th April.
- If you're using SliTaz, you might be interested to know that they released v3.0 a week ago.
- ebfe, who created airolib-ng, released an exploit for airodump-ng, aircrack-ng, airdecap-ng. You can find more information in his blog (Post 1, Post 2) but it just makes the tools crash, no real exploit released. It will be fixed in the next few days before the release (v1.1).
- Nearly everything has been moved to the new server, only forum, trac and buildbot needs to be moved :).
- Do you remember I wrote that trac didn't display svn commits for some unknown reason? That's now fixed, I just had to comment out a line in trac.ini.
- For those who can't open the website due to URL filtering, use whydoyoublock.me. It's not a mirror, it points to the exact same content as www.aircrack-ng.org.
Forum news:
- Patches to override the regulatory domain for ath5k, ath9k and ar9170.
- The work on the C# GUI for aircrack-ng, WepCrackGUI, continues. And here is a blog post in italian about it.
- Beini now has its own website. Here is the forum thread.
- Wordlist generation:
* Here and there
* Here is a script by Zermolo to generate wordlist with only numbers, called permutate and another post in the same thread about the same subject with JTR.
* Creating custom rules for John.
* Word field is an incremental word list generator.
Other news:
- I'll speak at Sharkfest. It will take place in the main campus of the Standford University, June 14-17.
- Ever heard about NeoPwn? Version 2 will be based on the Nokia N900 and will be Backtrack Mobile.
- Remember spoonwep and spoonwep 2? Shamanvirtuel is working on spoonwep 3. Public beta release is planned between 15th-30th April.
- If you're using SliTaz, you might be interested to know that they released v3.0 a week ago.
Thursday, April 1, 2010
<AprilFool>Backcrack-ng v1.1</AprilFool>
EDIT: This is an April Fool
The BackTrack team is happy to announce the acquisition of the Aircrack-NG project, as well as a new, long awaited update to v 1.1. The acquisition will mark a turning point to the Aircrack-NG project in more than once sense, and we are looking forward to see the project grow.
The new version of Aircrack-ng (to be renamed "backcrack-ng") is available in the SVN repositories for your testing:
The BackTrack team is happy to announce the acquisition of the Aircrack-NG project, as well as a new, long awaited update to v 1.1. The acquisition will mark a turning point to the Aircrack-NG project in more than once sense, and we are looking forward to see the project grow.
The new version of Aircrack-ng (to be renamed "backcrack-ng") is available in the SVN repositories for your testing:
Saturday, March 20, 2010
Mailing list and monthly newsletter
The poll in the forum convinced me to create the mailing list for the newsletter.
If you want to receive the newsletter, just send an empty email (no subject or body needed) to newsletter-subscribe@aircrack-ng.org.
I also took the time to create a public mailing list for Aircrack-ng. To be able to post messages, you need to subscribe to the mailing-list by sending en empty email to mailing-list-subscribe@aircrack-ng.org.
This is not moderated to avoid delay in moderation and thus the same rules as IRC apply here too. In order to avoid spam as much as possible, only subscribers can send posts to the mailing-list and registrations needs to be approved.
All posts should be sent to mailing-list@aircrack-ng.org
If you have any question or remark about them, do not hesitate :)
If you want to receive the newsletter, just send an empty email (no subject or body needed) to newsletter-subscribe@aircrack-ng.org.
I also took the time to create a public mailing list for Aircrack-ng. To be able to post messages, you need to subscribe to the mailing-list by sending en empty email to mailing-list-subscribe@aircrack-ng.org.
This is not moderated to avoid delay in moderation and thus the same rules as IRC apply here too. In order to avoid spam as much as possible, only subscribers can send posts to the mailing-list and registrations needs to be approved.
All posts should be sent to mailing-list@aircrack-ng.org
If you have any question or remark about them, do not hesitate :)
Tuesday, March 2, 2010
Monthly news (March 2010)
Forum news:
- Beini 1.0 final was released: Forum post.
- I'm happily surprised that the C# (Mono) script developement for aircrack-ng is still active :). By the way, here is the project on sourceforge: wepcrackgui. The current version is 0.6.3
- A new version of minidwep-gtk, developped in shell script, gtk-server, zenity, kdialog, was released. Here is a video of this script in action. It is included in Beini 1.0.
Trac news:
- Various small fixes (makefile, manpage, ...)
- A patch for the r8187 (ieee80211) driver on kernel 2.6.32 (and lower). Installation instructions are updated.
- Compilation is fixed when compiling unstable stuff (wesside-ng/easside-ng and tkiptun-ng) with a recent gcc version (v4.4)
General news:
- Aircrack-ng now has 4 years old. I checked when the first news was posted and it was the 25th February 2006. Surprisingly, the 2 following news happened the 25th February this year :)
- A new paper about TKIP attacks was released by hirte: Enhanced TKIP Micheal Attacks.
- Airdrop-ng from TheX1le is now available in our subversion repository. Here is the video of the talk at Shmoocon 2010.
If you haven't seen it yet, Shmoocon 2010 videos (and sometimes the slides too) are available.
Last but not least, here is a very funny video of a woman calling Leo Laporte's Tech Guy Show claiming her WI-FI access has "disappeared".
- Beini 1.0 final was released: Forum post.
- I'm happily surprised that the C# (Mono) script developement for aircrack-ng is still active :). By the way, here is the project on sourceforge: wepcrackgui. The current version is 0.6.3
- A new version of minidwep-gtk, developped in shell script, gtk-server, zenity, kdialog, was released. Here is a video of this script in action. It is included in Beini 1.0.
Trac news:
- Various small fixes (makefile, manpage, ...)
- A patch for the r8187 (ieee80211) driver on kernel 2.6.32 (and lower). Installation instructions are updated.
- Compilation is fixed when compiling unstable stuff (wesside-ng/easside-ng and tkiptun-ng) with a recent gcc version (v4.4)
General news:
- Aircrack-ng now has 4 years old. I checked when the first news was posted and it was the 25th February 2006. Surprisingly, the 2 following news happened the 25th February this year :)
- A new paper about TKIP attacks was released by hirte: Enhanced TKIP Micheal Attacks.
- Airdrop-ng from TheX1le is now available in our subversion repository. Here is the video of the talk at Shmoocon 2010.
If you haven't seen it yet, Shmoocon 2010 videos (and sometimes the slides too) are available.
Last but not least, here is a very funny video of a woman calling Leo Laporte's Tech Guy Show claiming her WI-FI access has "disappeared".
Subscribe to:
Posts (Atom)