SAPO Codebits 2009 [Portugal]
Wednesday, September 16th, 2009
SAPO Codebits is a programming contest for the Web targeted at talented programmers. The goal is to promote creativity and innovation in a very relaxed and informal environment. 3 days non-stop with presentations, lightning talks, workshops, quizzes, rockband contests, electronics and hacks, for those who love the Internet and have a passion for code.
MySQLi Dumper V.3.0 has just been released!
Tuesday, September 15th, 2009Tool Description:
MySQLi Dumper is the best GUI tool dedicated to SQL injection attacks on MySQL.
Is possible load all data (Databases, Tables, Columns and Rows!) with Injection.
Supports Fully autoamtion blind dumper, schema dump, file dump, MySQL brute forcing, site scanner, hashes online crack, online scanner with search engine by Google/Bing/Yahoo/Sapo/Altavista/Terravista to scann for vulns.. faster to get results.. and much more!
**Automation MySQL Injection Hacks In-a-box**
Changes 2.8 to 3.0:
* Add fully automation blind dumper (for MySQL V.5.x);
* Updated HTTP Debug form, docked form with new features;
* Fix some bugs on dumper form;
* New/improved for version 3.0
Screen Shots
http://img33.imageshack.us/img33/699/50340836.png
http://img29.imageshack.us/img29/5118/28536958.png
http://img34.imageshack.us/img34/6836/90275056.png
http://img3.imageshack.us/img3/307/11146867.png
http://img34.imageshack.us/img34/9154/96617676.png
http://img222.imageshack.us/img222/7677/35459368.png
http://img10.imageshack.us/img10/8080/96390630.png
http://img3.imageshack.us/img3/7370/23711047.png
http://img3.imageshack.us/img3/5596/86510607.png
Price and Payment method:
-Binary: 40 USD
-Source Code: 200 USD
-Method: libertyreserve.com or wmtransfer.com
PS: users from v.2.8 get 60% of discount!
For more info.. mail to:
c4rl0s.pt [at] gmail [dot] com
[UPDATED] PPC STKeys 1.4 - Get default key algorithm in Thomson (most popular DSL router in PT [Meo] and UK)!
Saturday, September 12th, 2009The Thomson Speedtouch default WEP/WPA algorithm
Unlike james67, Kevin’s strategy to crack default WEP/WPA algorithms involve debugging setup wizards shipped by some ISPs, as opposed to debugging the router which uses the default key algorithm. Kevin obtained a copy of such wizard (”stInstall.exe”) provided by Orange in Spain – which can be found on broadband customers’ installation CDs. Such setup utility allowed him to figure out the default key algorithm.
In short we have: S/N -> hash -> default SSID and encryption key which can be read as: a hashed version of the router’s serial number is generated which is then used to derive both, the default SSID and the default encryption key. This is just a high-level overview of the algorithm.
Take as example: “CP0615JT109 (53)”
Remove the CC and PP values: CP0615109
Convert the “XXX” values to hexadecimal: CP0615313039
Process with SHA-1: 742da831d2b657fa53d347301ec610e1ebf8a3d0
The last 3 bytes are converted to 6 byte string, and appended to the word “SpeedTouch” which becomes the default SSID: SpeedTouchF8A3D0
The first 5 bytes are converted to a 10 byte string which becomes the default WEP/WPA key: 742DA831D2
I decided to create a tool for Windows Mobile (Pocket PC)!
Note that the process is a little slow, the tool works as background thread, and check about
1000 keys per 5 secund..
Tested with my HTC Touch Viva, processor @ 201 MHz.
Screen Shots: 
System requirements: Windows Mobile 5 or 6
Microsoft .Net Compact Framework 2.0 (get here)
V.1.4
Changes:
[+] Add Listview to show all possible keys;
[+] Reorganized UI;
[+] Add ScrollBars to support all resolutions;
[+] Minor bugs fix.
Download CAB: http://rapidshare.com/files/280780531/PPC_STKeys_v.1.4.CAB
Download Source Code (VB.NET 2008): http://rapidshare.com/files/280340150/PPC_STKeys_V.1.4_Source.rar
V.1.2
Changes:
[+] Fix bug on hash checker, now after found possible key the thread will stop..
[+] Add new tab Advanced to set the weeks range..
[+] Fix some small bugs.
Download BIN + SRC: http://rapidshare.com/files/279243269/PPC_STKeys_V.1.2_BIN_SRC.rar
V.1.0
Download BIN + SRC: http://rapidshare.com/files/278680391/PPC_STKeys.rar
Enjoy and give your comment!
