Format string $20 challenge

At the last meeting I showed everyone how to use a format string vulnerability in a password storage app to bypass the master password and pull data out of memory. That is just one way to exploit this type of vulnerability so I challanged everyone at the meeting to get the app I used “code below” to execute their supplied input. The first person to let me know they got it and do a demo get $20! So it pays to be a little early.

#include < stdio.h >
#include < string.h >

int main (int argc, char *argv[])
{
char** spw = "dc414 pwnz";
char text[1025];
strcpy(text, argv[1]);
if (strcmp(text, "asd123")==0) {
printf("Correct the password is %s \n",spw);
return 0;
}
printf(text);
printf(" is wrong\n");
return 0;
}

Tips for dc414 members (and everyone else) at DEFCON21

Here are a few tips and guidelines to follow while in Vegas:

  • Keep an eye on dc414’s twitter, Facebook, and G+ feeds to keep up to date on what we are doing so you can join in on the fun.
  • If you have access to dc414’s VPN be sure to use it at all times on your tablet, phone, and laptop. If you do not have access to the VPN but have a server you can access “like one on your home connection”, set up a ssh tunnel and use it at all times.
  • Do not use USB “or CDs/DVDs” sticks from anyone, other then ones you brought your self, including ones you find on the floor or parking lot.
  • Do not leave USB sticks laying out that you intend to use later.
  • Do not let anyone connect their phone to your system for charging or any other reason.
  • Do not connect your phone/tablet to anyones computer other then yours.
  • When using the local WIFI “hotel, convention center, etc” Do not visit any site you intend to login to with the HTTP protocol “ie http://mail.dc414.org” only connect using HTTPS “ie https://mail.dc414.org”
  • Do not scan any QR codes with apps that do not verify the content before displaying it or opening other programs.
  • Do not ever leave your computer, phone, or tablet unattended

July meeting recap

Let me start by saying many thanks to Milwaukee Makerspace for hosting our meeting and to Klaiviel for hooking us up. Ulic got us rolling and gave a awesome presentation on PRISM and other government spying programs. dw5304 was up next and did his cable modem magic for us. Then Klaiviel showed us how to crash RC planes and quad-copters. After words he gave us the grand tour of Makerspace. The rest of the night everyone socialized while vlad, darkwind, and Klaiviel crashed a quad-copter.

UPDATE:
You can get a copy of Ulic’s slides HERE enjoy 🙂

June Meeting Recap

Thanks to all that attended the June meeting.  Lot’s of interesting discussion and demos as usual.

Some highlights were Klaiviel giving an in-depth look at the state of 3D printing with a focus on weapons and some of the issues surrounding it.

We later headed for the roof of Bucketworks to learn about DirectTV hardware installations and some of the tools the pros use.  We got to learn about different satellites  and had some really good discussions while the ISS zipped past brightly in the night sky.  Thanks Darkwind.

dw5304 took over next and showed off some 40Gb Ethernet gear along with a demo.  We also had fun exploiting some really awful security of a customer management portal that dw5304 stumbled upon.

edgewalker was one of the lucky contestants to win the Free Junk Giveaway.  Enjoy the LetterPerfect software on your IBM/DOS compatible PC! 

Some pictures courtesy of our beloved overlord, AnarchyAngel.

A Question to Milwaukee, a Bucketworks Emergency

Bucketworks is a co-working, meetup, and practice space for creative professionals.  They’ve been gracious enough to host DC414 monthly meetings and many other events for hackers.

We’re all at risk of losing this space due to some recent financial problems they’re encountering.  I encourage anyone to give back to this awesome space and help them continue to help us.

DC414 as an organization is helping, you can too by donating to Bucketworks by following this link.

Please read Tim Syth’s (Director of Bucketworks) question to Milwaukee:

After being born and raised in rural Wisconsin, and spending nearly 5 years wandering the planet as a photographer and student, I came to Milwaukee about 18 months ago because the city intrigued me. It was gritty, blue-collar and raw. It did not offer the apparition of a polished facade. Its issues were displayed prominently on its sleeve. It felt real.

Perhaps naively, I also came to Milwaukee hoping I could make a difference. Here was a place I could come and actually have a name and face as I tried to leave a positive mark as the director of a project called Bucketworks. I still believe this.

Bucketworks, for those who don’t know, just celebrated its eleventh birthday. Eleven years ago this May it was started by James Carlson and a cadre of accomplices who wanted nothing more than to explore creatively in a way that only art in warehouses can provide. There was little method to the madness, but it was one of the first collaborative spaces in the country, and in Milwaukee of all places. It was a place all about making it happen (whatever “it” was) and giving people a reason to gather and work together. It was the spot in the city for the curious and motivated to gather and create art, businesses, theater, events and products.

Bucketworks has had its issues, much like its home city, but through thick and thin and two floods Bucketworks has managed to persevere, and in that time, Milwaukee has started to blossom. We now have the Milwaukee Makerspace, ArtMKE, the Hudson, VETransfer, Gener8tor, MARN, the Creative Alliance, Open MiKE, just to name a few. As a relatively new transplant, the vibrancy of the creative culture in Milwaukee is a sorely told story—we are lucky to be in this time and place. But as each of these great efforts filled a niche, and as each of these efforts has been born, Bucketworks has adjusted and pushed ahead because it has always been the job of Bucketworks to be on the edge—to be that hard-to-explain place “where things start.”

Fast forward 18 months from my arrival in Milwaukee to today and some of that gritty, blue-collar and raw is weighing on me. Those of you I have had the pleasure of meeting know that I have been very open about the situation at Bucketworks. It has its issues and it wears its dirt on its sleeve. Specifically, we have not been been paying rent for 4 months. For the year I have been here prior to those four months, we paid $7000/mo for 6 months and $2500/mo for 6 months before that. We are not paying rent because we spent $2500 on a broken heating system we don’t own, but because we could not afford to fix the system completely, we still paid $2500/mo to heat the space in the winter. We patched a roof we don’t own with the gracious donation of time from a Milwaukee startup that helps veterans develop job skills. We repaired air conditioners. We spent $2000 on a sprinkler system we don’t own to get the building up to code. We replaced toilets that were broken, patched floors, and fixed lights, all while running the organization.

But why not just raise the prices to cover the bills? We don’t raise the prices because we feel it is important for there to be a place in our city where a person can explore projects without breaking the bank. We believe a lack of money should not stop people from trying. Bucketworks is home to 15+ businesses on any given month who pay on average less than $200 a month to operate. If you can get past the Commons, bang for your bucket it is the lowest-cost place in the city to start a business. Bucketworks is a place where teenagers from the city come to make art while learning important things like punctuality and responsibility. Bucketworks is a place where people gather to learn English and to learn about citizenship. Bucketworks is a place where people meet to talk about open data and to teach each other about technology and mysticism and financial planning. Bucketworks is a place to sword fight, practice aerial silks and to dance. Bucketworks is where people voluntarily work together on improving healthcare. Bucketworks is the place where bees are nurtured and celebrated. In short, Bucketworks is a living and breathing demonstration of functional, diverse community in a city that is known for its silos and segregation.

Please note this isn’t a blame game that falls on our landlord or others who are currently interested in the space. I have a good relationship with our landlord—we agree with a shake of our hands and then do the best we can. We operate like much of Milwaukee operates, and I think this is to be celebrated. Also note that this text represents solely my words and perspectives.

In closing, I want to say that Bucketworks is cleaning out its closets and washing the dirt from its sleeves. I will meet with anyone who is interested and let them know where we stand, what we need to do better and what our plan is to get there. We already have great partnerships that are interested in supporting and bringing stability to this wonderful project, but right now we need time, and in order to get that time, we need money. $18,000 would get us six months of runway on rent, $36,000 would get us twelve, and anything in between would be awesome.

As a recent transplant to this city who has seen Berlin, Tokyo, Hong Kong, Venice, New York, Mexico City, Riga, Paris and many others, I believe Milwaukee is a place to be right now. We have a city that can hide little and is full of people who want to do more. I am committed to making this a place where people have a real option when they want to try an idea. I am willing to do what it takes to bring long term stability to an awesome project in a city that is just rediscovering itself.

So the question I have is this:

Does Milwaukee want Bucketworks?

If it does, please donate what you can. If all you can do is forward this on, please do so. We have an opportunity to show that Milwaukee is a community together. We are not asking for much and we never have asked for much, but I am asking for Bucketworks now. If we reach our goal, the funds will be used for to cover rent. If we do not reach our goal, the funds will be used to find a new home. Our goal is to raise $18,000+ by the end of the business day today—please help.

Thank you,

Tim Syth
Director of Bucketworks

May meeting recap

The May meeting was another great one. Both Ngharo and my self were late because of traffic and junk so darkwind got things started with his popular demo of sniffing pager messages from the air. I Showed up at the tail end and when he was done I started the introductions. It was good to see all the new faces. After everyone talked for about 15 minutes I gave a live demo on using actionscript “flash” to inject a XSS exploit into a other wise secure website. Then Noize took over and gave a interesting live demo of getting IP addresses from contacts on Skype. Then dw5304 showed some of the features in the untangled firewall software. Congrats to ALee for winning the dc414 free junk giveaway!! Here are some pictures I took of the meeting.

ALee and his winnings!

April meeting recap

Aprils meeting was awesome! Ngharo started us off with room introductions, which was helpful considering all the new faces at this meeting. Next I gave a quick demo of my new tool Upnp Exploiter. Which lead to me disclosing two 0day vulnerabilities in the Cisco DDR2200 ADSL2 Residential Gateway Router “expect more on all this later”! Then dw5304 gave his SNMP demo again and showed all the n00bs how to pwn Cisco routers using SNMP to upload a your own config to them. Then we all started messing around with trying to draw words on an oscilloscope with my arduino. Because of a late start that is all we had time for. Congrats to BigStarHero for winning a Emerson switch board in the free junk giveaway! Here is some pictures from the meeting.

Free junk giveaway big winner!

March meeting madness!

The March meeting was no let down, we had lots of people and as always great demos. Ngharo got it started with a make your own pringles can cantenna. 9 luck attendees got to make and take home their own cantenna!  Then he kept it going with a quick demo of radio Mobile and how to use it to make a long range wireless mesh network. Then the professor gave a demo on metasploit using a java exploit to root a windows box. dw5304 took over and gave a little demo of a hacked xbox360 and using a laptop to control everything the console does. Here are some pictures from the meeting. Congrats to uberushaximus for winning 100 free hours to AOL high speed!!

December meeting recap

Ngharo got this started with going around the room and asking everyone what they have been hacking and what they plan on hacking on next, then talking about some improvements to the dc414 server, such as how it is now fully IPv6 friendly and some improvements to the VPN. Then I gave a demo of how BeEF when used with Metasploit can pwn browsers from the inside out. dw5304 stepped in and showed us how to use the windows 7 UI on windows 8 with out having to worry about updates messing things up. Then Noize stepped up and gave us all a great introduction to Subterfuge, a MITM framework that utilizes arp attacks. Then I attempted to give another demo but failed, more on that later 😉 We spent the rest of the night drinking, eating cupcakes “thanx darkwinds wife” and loling at horror pics of server rooms and wiring closets. Congrats to Castor, Tony, and Peppergomez for winning the dc414 free junk giveaway!! Enjoy your junk guys 😛

We got $42 in donations which paid for the pizza and some of the beer with nothing left over for the server :/ which cost about $71 a month. Remember your donations are what keeps dc414 running smoothly for YOU!!!!