The slides from the conference presentations haven’t been posted on the Toorcon site yet, but I’ll be linking as soon as they come in.
TC7 Day 1 – The Fragmentation Attack In Practice
UPDATE: Slides, paper and code
Andrea Bittau (not blurry in real life) gave a demo of the WEP fragmentation attack. The attack only requires one sniffed packet from the WEPed network unlike replay attacks which usually require you to get an ARP packet. He built a simple tool to sniff a packet and then build packets to create a legitimate connection to the access point. At this point a server on the internet is contacted to flood the network with packets at up to 1400 packets per second. This generates a ton of unique IVs and aircrack is called every 100000 packets till the WEP key is cracked. In the demo it took under 5 minutes for the automated process to complete.
Continue reading “TC7 Day 1 – The Fragmentation Attack In Practice”
TC7 Day 1 – Bastille Hardening Assessment Tool
UPDATE: Slides
Bastille is an OS hardening tool for Linux. Jay Beale gave a presentation on how to “lock down” a system using it. Bastille can analyze your current setup and give you a rating based on how secure your system is. The program asks you questions based on your configuration (“Do you want to turn off ### service?”). It explains the possible consequences of taking the suggested actions. The process can be very educational. The system is modular so you can add your own modules by writing a few lines of Perl. Bastille can also generate configurations that can be deployed across multiple machines.
Continue reading “TC7 Day 1 – Bastille Hardening Assessment Tool”
Toorcon Day 0 – Brain Trust
TC7 Day 1 – How Hackers Get Caught
Individual Throttle Body Setup
Homemadeturbo.com is dedicated to scratch building turbo systems using salvaged parts. That’s pretty cool, but this project really caught my eye: building an individual throttle body manifold for a Honda engine. Jeff picked up a set of throttle bodies from a 2001 gixxer on eBay for $50. He then cut down the stock manifold and added extensions to attach the throttle bodies using silicon couplers. The velocity stacks also came from eBay for $35. The only really difficult part seems to be attaching the throttle position sensor. It is definitely a great looking set up and much cheaper than it would ever be off the shelf.
[thanks bodiby]
Mac MAME Cabinets
[calhoun] has been scratch building some great mac based MAME cabinets. His first one was a cocktail (pictured above) built from a Powerbook and using an I-PAC to interface with the arcade controls. The motherboard and hard drive are mounted to a fold down plexiglass tray. The speakers come from the Apple “globe” speakers. This is just the first model, he’s built several bar-top cabinets and is constantly trying to improve the design.
