jetlib.sec

16 items tagged "channel"

Related tags: hacks [+], timing [+], side [+], sebastian schinzel [+], realplayer [+], penetration testers [+], networked environments [+], code execution [+], chaos communication congress [+], aac files [+], aac file [+], aac [+], wpa wpa2 [+], wpa [+], wlan [+], tool [+], quot [+], nbsp nbsp nbsp nbsp nbsp [+], nbsp [+], logic [+], jobby [+], ghz [+], controller [+], channel logic analyzer [+], channel 11 [+], blah blah [+], analyzer [+], airodump [+], Newbie [+], Area [+], ronald de bruijn [+], project controller [+], project [+], playstation [+], pcb artwork [+], outlet boxes [+], monitor [+], joshua [+], irc channel [+], irc [+], home [+], hobby electronics [+], extension cords [+], ds18b20 [+], dmx controller [+], dmx [+], digital thermometers [+], dan julio [+], couple handfuls [+], cool project [+], character lcd [+], channel controller [+], arduino [+], Support [+], Idiots [+], General [+], Corner [+], BackTrack [+]

May 15, 2012
15:01
Universal 20 channel project controller from a Ps2 controller
» ‎ Hack a Day

So you’ve got a really cool project that requires a wireless controller and a ton of different channels. What are you going to do? Are you going to go pick up an expensive RC controller? Nah, you’re going to build your own. This project makes a generic 20 channel controller for your projects by stuffing [...]
Tags: channel controller project project-controller channel-controller cool-project playstation hacks

March 17, 2012
22:30
[Video] Time is on my Side
» ‎ SecDocs

Authors: Sebastian Schinzel
Tags: vulnerability
Event: Chaos Communication Congress 28th (28C3) 2011
Abstract: Timing side channel attacks are non-intrusive attacks that are still widely ignored in day-to-day penetration testing, although they allow attackers to breach the confidentiality of sensitive information. The reason for this is, that timing attacks are still widely considered to be theoretical. In this talk, I present a toolkit for performing practical timing side channel attacks and showcase several timing attacks against real-world systems. Timing side channels are vulnerabilities in software applications that leak sensitive information about secret values such as cryptographic keys. They differ from common intrusive vulnerabilities such as Buffer Overflows or SQL-Injection because the attacker sends normally looking requests to the server and infers secret information just from the time it took to process the request. In academia, timing side channel attacks are well researched, especially against cryptographic hardware, but in day-to-day penetration testing, they are still widely ignored. One reason for this is that the timing differences are often small compared to the jitter introduced in networked environments. This makes practical timing side channel attacks challenging, because the actual timing differences blend with the jitter. In this talk, I will present methods and tools to accurately measure response times despite the jitter in networked environments. I will introduce a programming library that enables penetration testers to measure accurate response times of requests send over networks. Furthermore, I will describe algorithms and statistical filters to reduce the jitter from measurements. For this, I will introduce a reporting tool that takes a dataset with network measurements as input, automatically applies the algorithms and filters, and produces a report with the results. This report enables even novice penetration testers to analyze a response time dataset for timing side channel vulnerabilities. In the end, I will show that timing side channels are practical by showing several attacks. First, I show how to determine if a given user name is an administrative user in a productive installation of the popular CMS Typo3. Second, I show how to determine how many pictures are hidden in a private album of an online gallery. Third, I show how to perform an adaptive chosen cipher text attack against implementations of the XML Encryption standard. This attack allows to decrypt any Web Service message whose body was encrypted using XML Encryption only by measuring the response time of the Web Service.
Tags: channel side timing sebastian-schinzel chaos-communication-congress networked-environments penetration-testers
22:30
[Slides] Time is on my Side
» ‎ SecDocs

Authors: Sebastian Schinzel
Tags: vulnerability
Event: Chaos Communication Congress 28th (28C3) 2011
Abstract: Timing side channel attacks are non-intrusive attacks that are still widely ignored in day-to-day penetration testing, although they allow attackers to breach the confidentiality of sensitive information. The reason for this is, that timing attacks are still widely considered to be theoretical. In this talk, I present a toolkit for performing practical timing side channel attacks and showcase several timing attacks against real-world systems. Timing side channels are vulnerabilities in software applications that leak sensitive information about secret values such as cryptographic keys. They differ from common intrusive vulnerabilities such as Buffer Overflows or SQL-Injection because the attacker sends normally looking requests to the server and infers secret information just from the time it took to process the request. In academia, timing side channel attacks are well researched, especially against cryptographic hardware, but in day-to-day penetration testing, they are still widely ignored. One reason for this is that the timing differences are often small compared to the jitter introduced in networked environments. This makes practical timing side channel attacks challenging, because the actual timing differences blend with the jitter. In this talk, I will present methods and tools to accurately measure response times despite the jitter in networked environments. I will introduce a programming library that enables penetration testers to measure accurate response times of requests send over networks. Furthermore, I will describe algorithms and statistical filters to reduce the jitter from measurements. For this, I will introduce a reporting tool that takes a dataset with network measurements as input, automatically applies the algorithms and filters, and produces a report with the results. This report enables even novice penetration testers to analyze a response time dataset for timing side channel vulnerabilities. In the end, I will show that timing side channels are practical by showing several attacks. First, I show how to determine if a given user name is an administrative user in a productive installation of the popular CMS Typo3. Second, I show how to determine how many pictures are hidden in a private album of an online gallery. Third, I show how to perform an adaptive chosen cipher text attack against implementations of the XML Encryption standard. This attack allows to decrypt any Web Service message whose body was encrypted using XML Encryption only by measuring the response time of the Web Service.
Tags: channel side timing sebastian-schinzel chaos-communication-congress networked-environments penetration-testers
March 16, 2012
22:40
[Audio] Time is on my Side
» ‎ SecDocs

Authors: Sebastian Schinzel
Tags: vulnerability
Event: Chaos Communication Congress 28th (28C3) 2011
Abstract: Timing side channel attacks are non-intrusive attacks that are still widely ignored in day-to-day penetration testing, although they allow attackers to breach the confidentiality of sensitive information. The reason for this is, that timing attacks are still widely considered to be theoretical. In this talk, I present a toolkit for performing practical timing side channel attacks and showcase several timing attacks against real-world systems. Timing side channels are vulnerabilities in software applications that leak sensitive information about secret values such as cryptographic keys. They differ from common intrusive vulnerabilities such as Buffer Overflows or SQL-Injection because the attacker sends normally looking requests to the server and infers secret information just from the time it took to process the request. In academia, timing side channel attacks are well researched, especially against cryptographic hardware, but in day-to-day penetration testing, they are still widely ignored. One reason for this is that the timing differences are often small compared to the jitter introduced in networked environments. This makes practical timing side channel attacks challenging, because the actual timing differences blend with the jitter. In this talk, I will present methods and tools to accurately measure response times despite the jitter in networked environments. I will introduce a programming library that enables penetration testers to measure accurate response times of requests send over networks. Furthermore, I will describe algorithms and statistical filters to reduce the jitter from measurements. For this, I will introduce a reporting tool that takes a dataset with network measurements as input, automatically applies the algorithms and filters, and produces a report with the results. This report enables even novice penetration testers to analyze a response time dataset for timing side channel vulnerabilities. In the end, I will show that timing side channels are practical by showing several attacks. First, I show how to determine if a given user name is an administrative user in a productive installation of the popular CMS Typo3. Second, I show how to determine how many pictures are hidden in a private album of an online gallery. Third, I show how to perform an adaptive chosen cipher text attack against implementations of the XML Encryption standard. This attack allows to decrypt any Web Service message whose body was encrypted using XML Encryption only by measuring the response time of the Web Service.
Tags: channel side timing sebastian-schinzel chaos-communication-congress networked-environments penetration-testers

February 07, 2012
11:01
Build your own 4-channel logic analyzer
» ‎ Hack a Day

If you’re just getting into hobby electronics chances are there are lots of tools you’d like to get you hands on but can’t yet justify the purchases. Why not build some of the simpler ones? Here’s a great example of a 4-channel logic analyzer that can be your next project and will add to your [...]
Tags: logic channel analyzer channel-logic-analyzer hobby-electronics tool hacks

November 28, 2011
15:38
Zero Day Initiative Advisory 11-332
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-332 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Realplayer. AUser interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way RealPLayer handles AAC files. When parsing an AAC file, Realplayer will create buffers based on the type of Channel it finds in the first frame. When the AAC starts with a Single channel in the first frame, and then changes to a channel pair in the following frame, Realplayer fails to update the buffer size for the channel data. The buffer overwrite that follows could result in remote code execution under the context of the current user.
Tags: aac realplayer channel aac-file code-execution aac-files

15:38
Zero Day Initiative Advisory 11-332
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-332 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Realplayer. AUser interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way RealPLayer handles AAC files. When parsing an AAC file, Realplayer will create buffers based on the type of Channel it finds in the first frame. When the AAC starts with a Single channel in the first frame, and then changes to a channel pair in the following frame, Realplayer fails to update the buffer size for the channel data. The buffer overwrite that follows could result in remote code execution under the context of the current user.
Tags: aac realplayer channel aac-file code-execution aac-files

15:38
Zero Day Initiative Advisory 11-332
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-332 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of RealNetworks Realplayer. AUser interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way RealPLayer handles AAC files. When parsing an AAC file, Realplayer will create buffers based on the type of Channel it finds in the first frame. When the AAC starts with a Single channel in the first frame, and then changes to a channel pair in the following frame, Realplayer fails to update the buffer size for the channel data. The buffer overwrite that follows could result in remote code execution under the context of the current user.
Tags: aac realplayer channel aac-file code-execution aac-files

May 23, 2011
6:11
Wireless 4 Channel Temperature Monitor From Arduino Libraries
» ‎ Hack a Day

Say what you will about the Arduino platform but there certainly are a ton of libraries one can choose from. That is precisely what [Dan Julio] set out to do when building his slick looking 4 channel temperature monitor. The monitor consists of an Arduino RBBB, 2×16 character LCD and four DS18B20 1-wire digital thermometers. [...]
Tags: arduino monitor channel dan-julio digital-thermometers ds18b20 character-lcd hacks
July 23, 2010
2:00
20-channel DMX controller
» ‎ Hack a Day

[Joshua] shares his details on building this 20-channel DMX controller. He’s sourced some extension cords to cut up for the complicated wiring project. He plans to drive 120V lights with the system so he’s also using the extension cords to connect a bunch of outlet boxes to the main controller. Inside you’ll find a set [...]
Tags: channel controller dmx joshua dmx-controller outlet-boxes extension-cords home hacks
April 17, 2010
12:30
Four channel logic analyzer
» ‎ Hack a Day

If you’ve got a graphic LCD lying around you can build this four-channel logic analyzer with a couple handfuls of cheap components. [Ronald de Bruijn's] design uses a PIC18F4580 to sample up to four logic inputs at a maximum resolution of 2 MHz. He’s included the PCB artwork so that you can etch your own [...]
Tags: logic channel analyzer ronald-de-bruijn channel-logic-analyzer couple-handfuls pcb-artwork tool hacks

February 12, 2010
21:00
irc channel
» ‎ darkc0de

irc channel
Tags: channel irc irc-channel

January 31, 2010
10:38
need help
» ‎ remote-exploit & backtrack

hi all .. i was trying to crack security for some routers .. i tried to crack web, and i done it ,, also wpa/wpa2 and i cracked it (because the password was in the dictionary as all know)

but the question is ,, that there is a router has web security,and its channel is 123 ,, and when i start the monitor mode in on its channel ,, and start airodump again i see that its channel channged to another

first
Code: CH 5 ][ Elapsed: 4 s ][ 2010-01-31 19:33 BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID 00:C0:CA:1D:DA:3E -1 0 7 1 123 -1 WEP WEP <length: 0> 00:1F:9F:D3:1F:EB -47 10 0 0 3 54 WPA2 CCMP PSK test BSSID STATION PWR Rate Lost Packets Probes 00:C0:CA:1D:DA:3E 00:60:B3:35:FB:E1 -86 0 - 1 0 9 00:C0:CA:1D:DA:3E 00:19:E0:79:EB:D0 -84 0 - 1 13 24 after typing airodump again .. i see that its channel changed to another

second
Code: CH 2 ][ Elapsed: 4 s ][ 2010-01-31 19:39 BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID 00:C0:CA:1D:DA:3E -1 0 7 3 118 -1 WEP WEP <length: 0> 00:1F:9F:D3:1F:EB -51 8 0 0 3 54 WPA2 CCMP PSK test BSSID STATION PWR Rate Lost Packets Probes 00:C0:CA:1D:DA:3E 00:60:B3:35:FB:E1 -86 0 - 1 0 10 00:C0:CA:1D:DA:3E 00:19:E0:79:EB:D0 -81 0 - 1 5 4 it had changed to 118 :S .. i cant crack it ..
if some one can give help or solution .. i thank him lot ...
Tags: nbsp channel wpa wpa-wpa2 nbsp-nbsp-nbsp-nbsp-nbsp airodump Newbie Area
10:38
need help
» ‎ remote-exploit & backtrack

hi all .. i was trying to crack security for some routers .. i tried to crack web, and i done it ,, also wpa/wpa2 and i cracked it (because the password was in the dictionary as all know)

but the question is ,, that there is a router has web security,and its channel is 123 ,, and when i start the monitor mode in on its channel ,, and start airodump again i see that its channel channged to another

first
Code: CH 5 ][ Elapsed: 4 s ][ 2010-01-31 19:33 BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID 00:C0:CA:1D:DA:3E -1 0 7 1 123 -1 WEP WEP <length: 0> 00:1F:9F:D3:1F:EB -47 10 0 0 3 54 WPA2 CCMP PSK test BSSID STATION PWR Rate Lost Packets Probes 00:C0:CA:1D:DA:3E 00:60:B3:35:FB:E1 -86 0 - 1 0 9 00:C0:CA:1D:DA:3E 00:19:E0:79:EB:D0 -84 0 - 1 13 24 after typing airodump again .. i see that its channel changed to another

second
Code: CH 2 ][ Elapsed: 4 s ][ 2010-01-31 19:39 BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID 00:C0:CA:1D:DA:3E -1 0 7 3 118 -1 WEP WEP <length: 0> 00:1F:9F:D3:1F:EB -51 8 0 0 3 54 WPA2 CCMP PSK test BSSID STATION PWR Rate Lost Packets Probes 00:C0:CA:1D:DA:3E 00:60:B3:35:FB:E1 -86 0 - 1 0 10 00:C0:CA:1D:DA:3E 00:19:E0:79:EB:D0 -81 0 - 1 5 4 it had changed to 118 :S .. i cant crack it ..
if some one can give help or solution .. i thank him lot ...
Tags: nbsp channel wpa wpa-wpa2 nbsp-nbsp-nbsp-nbsp-nbsp airodump Idiots Corner
January 28, 2010

Permalink for 'making my drivers see channels 12-14 ??'

14:34

making my drivers see channels 12-14 ??

» ‎ remote-exploit & backtrack

14:34

making my drivers see channels 12-14 ??

» ‎ remote-exploit & backtrack

Hello im having trouble with some wifi cracking im trying the target networks are all on channel 13 i have 2 wifi cards on my laptop a IPW3945 built in jobby and a USB f5d7050b both are working fine on wlano and wlan1. However they wont go to a channel above 11 in airmon or airodump etc.. even using the channel flags i dont get an error but it just uses channel 11.
when i get to using aireplay-ng i get the error " WLAN0 is on channel 11, but the AP uses channel 13"

ive traced this error back to a driver issue the drivers built into bt4 are the US version and they only have 11 wifi channels here in the UK we use channel 13 all the time for some reason ( mainly as BT defaults to that on their equipment they give free with the broadband)
anyway i thought i had found the fix to this Quote:

The key piece to sorting this out was adding this line to my /etc/modprobe.d/options and then re-starting my system (simple - brute force!):
options cfg80211 ieee80211_regdom="EU"
"iwlist wlan0 channel" previously only reported channels 1 to 11, but now shows all of them. No problems connecting to the AP now on channel 13:
steve@steve-laptop:~$ iwlist wlan0 channel
wlan0 13 channels in total; available frequencies :
Channel 01 : 2.412 GHz
Channel 02 : 2.417 GHz
( blah blah blah blah )
Channel 11 : 2.462 GHz
Channel 12 : 2.467 GHz
Channel 13 : 2.472 GHz
Current Frequency=2.472 GHz (Channel 13)

i did all the above and besides the fact i have 32 channels available none of them are 12 13 and 14

what am i doing wrong does anyone know ?? has anyone done this before to get to use channel 13 ?

thanks for your replies please keep them simple i am a total noob

oh forgot to add in windows both these cards work fine in the EU channel bands ..

thought i spotted a mistake as the "EU" is in quotes in his text and i found the same instructions elsewhere without the quotes round the EU and you can also use JP but no its still only does 1-11

jetlib.sec » Tags » channel

Feeds

16 items tagged "channel"

Universal 20 channel project controller from a Ps2 controller

Tags: channel controller project project-controller channel-controller cool-project playstation hacks

[Video] Time is on my Side

Tags: channel side timing sebastian-schinzel chaos-communication-congress networked-environments penetration-testers

[Slides] Time is on my Side

Tags: channel side timing sebastian-schinzel chaos-communication-congress networked-environments penetration-testers

[Audio] Time is on my Side

Tags: channel side timing sebastian-schinzel chaos-communication-congress networked-environments penetration-testers

Build your own 4-channel logic analyzer

Tags: logic channel analyzer channel-logic-analyzer hobby-electronics tool hacks

Zero Day Initiative Advisory 11-332

Tags: aac realplayer channel aac-file code-execution aac-files

Zero Day Initiative Advisory 11-332

Tags: aac realplayer channel aac-file code-execution aac-files

Zero Day Initiative Advisory 11-332

Tags: aac realplayer channel aac-file code-execution aac-files

Wireless 4 Channel Temperature Monitor From Arduino Libraries

Tags: arduino monitor channel dan-julio digital-thermometers ds18b20 character-lcd hacks

20-channel DMX controller

Tags: channel controller dmx joshua dmx-controller outlet-boxes extension-cords home hacks

Four channel logic analyzer

Tags: logic channel analyzer ronald-de-bruijn channel-logic-analyzer couple-handfuls pcb-artwork tool hacks

irc channel

Tags: channel irc irc-channel

need help

Tags: nbsp channel wpa wpa-wpa2 nbsp-nbsp-nbsp-nbsp-nbsp airodump Newbie Area

need help

Tags: nbsp channel wpa wpa-wpa2 nbsp-nbsp-nbsp-nbsp-nbsp airodump Idiots Corner

making my drivers see channels 12-14 ??

Tags: quot channel wlan ghz jobby blah-blah channel-11 BackTrack General Support

making my drivers see channels 12-14 ??

Tags: quot channel wlan ghz jobby blah-blah channel-11 Newbie Area