Hak5 - Circumvent Windows Login Security with a USB boot-drive, Phishing with a Pineapple and ...

[Simon66noob911]

laser triggered water bra? 5:44

[DjAdam16]

fuckin amazing

[Zestypanda]

Or you could have it redirect to the correct website after you got your login info.

[givitallawy]

why do they look like they just got done fuckin eachother?

[garfield736]

@givitallawy Because, they probably did

[hiimjoe720]

bitches.txt



[Dfrey360]

@hiimjoe720 bitches.log

[spatel11uk]

@hiimjoe720 mine is suck my dick ass holes.txt

[sheeerox]

but otherwise, great vid, thanks for the info.. great stuff.. i subscribed

[sheeerox]

you gotta do something about the audio guys.. in two videos now i'm hearing each of u in one ear.. it's.. disorienting

[dirtdogg123]

make me a sammich!

[uckid4ever]

LOL FAILWHALE at 30:19 !!!!!!

[uckid4ever]

bitches.txt excellent



[KrK6EST9]

23:18 Kon-Boot

[stickyrice999]

where did u guys get the pineapple and how much was it? i cant find it anywhere!! lol

[MsDjMAC]

i have backtrack5 /trinty rescue kit/ katana tool kit/ and the famous Konboot and not a 1 of them will boot from my notebook they all work fine on my toshiba satellite apart from KONBOOT wich i manged to get booted up on the both but it just dint work any way can any 1 help or is the bios just crappy on my notebook the notebooks a packard bell dot se if it helps

[UnifiedTheory45]

@MsDjMAC Is it a netbook? Yeah, I think it is. You need a distro built for your architecture. That would be my guess.

[TheMountainYou]

I personally like the bitches.txt lol

[W00tW00tful]

i have no idea what hes talking about....

[CamC0nn]

Who else heard the ambulance at 3:43?

[n00bcr3w]

ok, the police sirens seriously scared the shit out of me at 3:48 HAHA, keep in mind I was watching this at 4 am :b

[xXlolxtechXx]

hahaha 20:28 you can see where smart people inputted "bullshit - fuckoff" and "stupid - password123"

[xXlolxtechXx]

hahaha 3:20 "bitches.log" and "bitches.txt"

[dynacker]

Couldn't you just make the handler for .html PHP?

[socksleever]

When I try to go to 192.168.1.1/test.php, chrome says no data was sent to the server,An I doing something wrong?

[trapper1204]

LOL.. Install a Paki...LMAO

[fallenspirit123]

Lol fail whale in background at 30:19

[ForRealStudios]

@WingChroniam Same here, It sounded so real!



[tonyisgrendel]

NANO SUCKS!

[dj44jorjor]

I have always the problem on android that it only let me hear the left part of the sound at te left and the right, can someone help please??

[H4x0r18]

Excellent episode! Is the next episode going to be about Backtrack 5?

[cespinkm6]

30:19 look at the middle screans

[flahr1]

5:45 "water bra"...yes

[BobbyBoebsel]

what is about Konboot on MacOS? What is about Linux 64 Bit?

[deanwill]

these guys are fucking annoying.

[josangel555]

mic panning to lil too much....... please reduce that.....

[Kronesin]

how did you get the CMD looking thing on your phone?

[hackerssemlimites]

Kon-Bot only have 62.65 KB? we put 62.65 KB on a CD?

[SquirrelFromGradLife]

Shannon has to stop being so hot and über delicious because I dint hear anything after hello...

[AnalogX64]

Good episode..subed.

The stereo separation can be tightened a bit and it wont be so jaunting.

[badbradmx]

@hak5Darren i just found the episode of scam school you were on, was wondering if you've used this trick yourself and how successful you were at it.

Ps love the show, learn so much from it, thank you

[CreativeHippie]

Hey Darren, how about trying "ln -s ./index.php ./index.html" ? That could probably redirect just fine. ^_^

[aidenscool09]

Install Apaki? XD

[LeonDuhaney]

Won't the pineapple show up as wifi .....no dude.

[Synith]

Won't the Pineapple show up as a new wifi connection on someone's computer?

[skulspike92]

@Synith

it deauthenticates there connection and then it says, "hey yo I'm you home router connect to me," or work router or whatever. idk how it works, but I remember darren saying that once lol

[67576856666478964567]

lab top

[67576856666478964567]

zx81

[youwantohya]

I recommend proXPN

[b0park]

I haven't seen this asked and/or answered anywhere, so forgive me if I'm repeating myself. What's scrolling on the idle screens on the monitor array. I've been looking for something interesting to "trail" on my HTPC/Server on idle for some hak eye candy but can't find anything!

Help a brother out?

[scottp45]

@b0park It's the #hak5 irc.

[adamus2red]

ZOMBIES ARE REAL

[TheYettiHunta]

great episode. The best episodes are the ones full of hacking

[theavatar210]

ounce a gen its "khon" boot like a traffic cone

[theavatar210]

i wonder what people think when he walks by and hes talking to him self.

[barnmaster98]

i use peerblock to keep from getting emails from torrenting

[mociinurbo]

nice tight shirt thumbs up Shannon.

[djayuh]

cant wait for the arcade machine!

[ovidiugr]

this show was fun

[TheMorbiousStone]

i want the mp3 of the sick into tune man!

[badbradmx]

access granted. lol and kon-boot, so gonna use that

[djayuh]

love love love the real world example of Darren at UC Berkeley! Great to see examples working in the field :)

[jamb027]

@AlExXx8410 All you need is the OS X DVD. It has tools in it to change user passwords.

[101orbitaldefence]

zombies i like it

[LordHardcoreChicken]

I've been booting backtrack linux from a usb for a while now to get past windows login at my school

[Schyzofrenic87]

this isnt 910 ? is it 911? if so when will it be open for downloading from youre site? /salute from holland

[Hak5Darren]

@Schyzofrenic87 it should be available for download on hak5 pretty soon -- but it's always available from revision3 first

[sayrith]

@Schyzofrenic87 *your

[Schyzofrenic87]

@sayrith jawhol herr oberst of the grammar brigade :P

[klaboem0]

hahaha 'packet zipping' i lolled

[x321y123]

Vi



[ypaul123]

Shannon, you've got the most beautiful smile...

[TheCustomBG]

nerdgasm

[EyesOnMeStudios]

LOL 'bitches.txt'

[kalfreak3]

that's why i dont use PS!!!>.<

[mrsestherhouse]

Shannon has perfectly sculpted eyebrows

[moneycrab]

Shannon is soo cute !1

[fujilives]

as far as the redirects, make sure you have a(n) .htaccess file in the root directory and the proper Apache modules installed to take advantage of htacess files. LOL @ bitches.txt btw

[fujilives]

as far as the redirects, make sure you have a(n) .htaccess file in the root directory and the proper Apache modules installed to take advantage of htacess files.

[adolphbot]

I have to say that giving you an audio channel each (one of you en each speaker) is pretty damn annoying.

[Hak5Darren]

@adolphbot sorry about that! We'll have it fixed on the next episode for sure :)

[l1f3l3555]

@adolphbot I agree....

[DackIsBack]

"Packet Sipping"...

That could catch on, I think you just coined something Darren...

[fvlad18]

oooh snubs... where's the crotch shot :)))))))?

[DackIsBack]

@Hak5Darren YO, Couldn't you tunnel them onto the web then create Redirects /DNS poisoning to your fake logins from the real facebook?

[Hak5Darren]

@DackIsBack sure, but the idea here is that the WiFi Pineapple is self-contained and doesn't actually have real Internet access.

[DackIsBack]

Fucking Nice...

I need to mock up some fake login pages...

Facebook, Twitter, Youtube, Paypal? ^_^

[AminaFilms]

I love how no one is paying attention to you

[DackIsBack]

Ophcrack is pretty good for cracking windows passwords... You need some epic "rainbow tables" tho.

Took like 15 minutes to crack 3 passwords on my moms computer, Pretty decent passwords too, letters, caps, and numbers... Couldn't care less what was on the system, Facebook cookies, music and porn lol... But it was fun, Didn't get caught by any of the 3 people, It's funny when people don't know you haz their passwords.

I did it like 3 years ago =/

[Eggeman32]

NANO > VI ALL THE WAY

[taz069]

Anything similar to Konboot for Mac?

[win2008workstation]

Piotr is pronounced "pee" "yacht".

[mmmPaxil]

im a lil 1 gig guy

[WowNimm]

What samsung phone @ around 9.00

[Hak5Darren]

@WowNimm Epic 4G on Sprint

[nanoz301]

Did you see that!?!?! 19:56

[AlExXx8410]

@nanoz301 ahahahahahah

[rainstar517]

hmmm

[pakiplayer421]

This girl is beautiful!



[CiphersSon]

ha! i seen the tittle of the vid in my sub list and thought konboot lulz then hit the video description and low and behold :-)

[nanoz301]

Darren is on the left sound channel and Shannon is on the right sound channel =D

[dankbot420]

why is he on the Berkeley Campus?

[Hak5Darren]

@dankbot420 Why not? UC Berkeley is a target rich environment. Sure beats Emeryville ;)

[dankbot420]

@Hak5Darren awesome...if you want more targets go to the Unit dorms....i lived in unit 1 ....or go to like Soda Hall or outside Moffit Library in front.....

[pjtechy]

love your videos.... :) ..

[L2DragonHunter]

You can maybe do some packet sniffing but i can do some cookie sniffing -_^

[baq100]

can i use the pineapple firmware on any router or should be there specific hardware specifications?

[Hak5Darren]

@baq100 any router with an Atheros chipset that supports OpenWRT

[robiniroven]

lol owned console freaks!

[martijnpc]

31:36 Your happy that you are using a insecure OS?

[scampisan]

@martijnpc You now that Konboot works with Linux too, right ?

And I won't call Mac OS secure either, because it's often the first hacked OS at the PWN2OWN contest, so...

Every OS has it's share of security holes.

By the way, I'm a Linux user, so no hate. Just don't make pointless X is superior to Y comments when you don't know what you're talking about. :)

[martijnpc]

@scampisan I didn't know that :S I always tought Linux (or osX) was a bit more secure than windows.

[scampisan]

@martijnpc No problem ;)

Actually, they are somewhat more secure, in the sense that less users are using them, so less hackers are trying to find out the security holes.

As I mentionned, Mac OS X was mainly hacked in contests. (Even if only 2 minutes is pretty scary, when windows took some hours.) but i think there was one or two viruses.

But there isn't any point in hacking a 4% market share, right ?

[Hak5Darren]

@martijnpc more like happy that the demo worked. Kon-boot is tricky with 64bit.

[sgBT182]

pft konboot, hirens dose the job much better

[CRAKIZGOOD]

tried kon boot 10 times on different computers it never worked

NEVER

[Hak5Darren]

@CRAKIZGOOD We've had great success with the 1.1 version from Kryptos Logic. Windows XP, Vista, 7 in 32 and 64 bit flavors.

[CRAKIZGOOD]

@Hak5Darren

maybe something wrong on my behalf ill try again

[WingChroniam]

I started ducking and looking out my windows for police when I heard the siren on 3:45

[RDJ134]

@WingChroniam i had the same reaction *LOL*

[RDJ134]

I am looking forward for the Arcade cabin ( i want to build one my self too) and the episode whas very interesting as usual :D

[distortednetworks]

@WingChroniam SO glad im not the only one. that sounded real as hell. i poo'd myself.

[WingChroniam]

Only $6000?... please I lost my jaw when I saw it.

[AshrafSpore]

What is the Internet?! :O

[97273998]

pacman says >>>

[denno021]

Did anyone connect to your 'latte' while you were in the cafe? Or did you not allow it or something? That was a very cool segment :).

[TheAustinHowell]

Kon-Boot is just further proof that password-protected profiles are pointless. If it's not full-disk encryption it's not secured.

[Hak5Darren]

@TheAustinHowell absolutely. My laptops Windows password is just a few characters. Why even bother? Everything important is encrypted.

[jerfguy]

Only true geeks are up?

[llollercoaster]

I pass by that cafe every day and think of Hak5 and packet sniffing.

And now you guys are there doing shit rofl....

[Hak5Darren]

@llollercoaster It's a target rich environment -- as is most of UC Berkeley.

[llollercoaster]

@Hak5Darren lol seriously...

[ElmokillaXDK]

lol guys its in stereo ;)

[97273998]

shannon morse code XD

[lightz1919]

when darren talks i hear in my left ear then wen shanon does it goes high pitch on my right ...Im not drunk lol

[lightz1919]

just me or the sound is messd up?

[zomgl0l]

@lightz1919 Their sound is always really bad lol. They need an audio man.

[lightz1919]

@zomgl0l lol I ducked at 37:22

[Hak5Darren]

@lightz1919 we're getting it sorted. We just moved to a new recording format and are in the process of working out the bugs. Also, the echo of the garage should be solved soon :)

[JoshuaMayer09]

Second!

[TheFreeze101]

First!!!!

240p Rocks!!!