匿名遊戲 / Short Film "INTOXICANT" (ENG sub)

This is a short film about hacking, BBS etc... Probably meaningless to other people who do not know what is going on...

Hacked my HDB Lift

For most lift out there, there should be some way to cancel a command (floor button). Some of them uses double press, other just hold and it will cancel that button. But the current HDB Lift I have from EM (I think) took me a while to figure out. Basically, in the end, it is just a simple press and hold any 3 buttons and all commands are cancelled.

Well, some of you will tell me to go RTFM. IF only the manual is that easy to find. :)
Anyway, if your HDB Lift is the new generation one, this may also work for you. Don't need to endure those empty floors if you make a mistake and press the wrong one or some bloody kid press all the buttons.

Astalavista Security Toolbox DVD 2008 V5.0

From the site :
Astalavista's Security Toolbox DVD 2008 (v5.0) is considered to be the largest and most comprehensive Information Security archive. As always we are committed to provide you with a resource for all of your security and hacking interests, in an interactive way! The Information found on the Security Toolbox DVD has been carefully selected, so that you will only browse through quality information and tools. No matter if you are a computer enthusiast, a computer geek, a newbie looking for information on "how to hack", or an IT Security professional looking for quality and up to date information for offline use or just for convenience, we are sure that you will be satisfied, even delighted by the DVD!

Let me just say that I am not advertising for this product and in my opinion, most people should not need this product at all, especially some of the security professional who would not like to be associated with words like hackers, blackhat etc. The tools inside this DVD is pretty blackhat if you ask me. There are tons of exploit codes and source for you to see and play around with (your VM that is). If you are hardcore enough, this is a great buy especially at this rock bottom price.

Read more from :
http://astalavista.com/index.php?page=340

Back|Track 3 Release

Ya, this is old news. Its been about 1 whole week since its release. If you had not seen the power of Backtrack, see it online somewhere or one of my previous post. The Wifi Zoo kick ass. WEP cracking is not reduced to a 1-click script kiddies stunt.

In any case, here is the direct link :

Description: CD Image
Name:: bt3-final.iso
Size: 695 MB
MD5: f79cbfbcd25147df32f5f6dfa287c2d9
SHA1: 471f0e41931366517ea8bffe910fb09a815e42c7
Download: Click here

Description: USB Version (Extended)
Name:: bt3final_usb.iso
Size: 784 MB
MD5: 5d27c768e9c2fef61bbc208c78dadf22
SHA1: 3aceedea0e8e70fff2e7f7a7f3039704014e980f
Download: Click here

Description: VMware Image
Name: BACKTRACK3_VMWare.rar
Size: 689 MB
MD5: 94212d3c24cf439644f158d90094ed6a
SHA1: 21c9a3f9658133efff259adbe290723583b4fd82
Download: Click here

Yes, I know. It still doesn't play nice with Virtual PC. And BT3 , in my opinion, is really slow compare to BT2... You probably need to install Nessus 3 on this too...

Coke Gone Wild

For those of you who had watched and believe me that it can be done... and you should be doing it... My advice : Don't! Why? This is what cna happen :

http://www.youtube.com/watch?v=hPCBWObwhB8

And I am counting on people like this to pay coke back so that they can make a living... Hahaha. Seriously, its still possible to get all the change out form there if you know how to do it. No, I am not even going to talk about that.

Hacking a Coke Machine

There has been several ones out there long time ago. However, I recently came across one from Singapore really.

http://www.youtube.com/watch?v=ZSQlH_ujTuE&eurl=http%3A%2F%2Fdexxlovestopwn%2Eblogspot%2Ecom%2F

Well, its badly made and they never really explain how its done. And from the way they did it, I don't think they just PoC, they actually ripped Coke off. This I do not approve. They are not very clever apparently since there is a camera taking all this and their face down. I don't know about Singapore Law, but I believe it can be a crimnial offense.

Ok, about what I know of Coke hacking. The above basically is to block the exit so that the coke machine think no drinks come out. The rest you figure it out. What I want to say was there was better things to play with the machine. Back in ***, ok maybe I better not mention the place. Its even possible to get all the changes out of the machine, change the pricing, check how much bottle left etc. Also I want to mention that there is control jumper panel behind which you can enable more debug mode cheat just like the arche machine. Cool?

Tell you whats more cool. You do not even need to touch the coke machine to get money from them. Just social engineer them. Hint : There is a number on the coke machine to report failure. Supposely you put in a couple of dollars and nothing came up. So you call right? Ask for refund... Well, I am not going to reveal too much, but trust me, its possible to get a couple of dollars from them just be calling. And guess what's more? The refund comes in vouchers, which are not tracked. Just call them again to say you did not receive the refund and they refund you one more time!

Tell me about it... Next Hacking Pepsi Machines... :)

Back from HITB 2006 Conference

Was a tiring and rush trip. Not to mentioned -$ for hotel, -$ for shopping in KL, -$ for no-apy leave and finally -$ for the conference. :P

BUT its well worth it. You know why? Cos I learned so much this time. And also lots of new faces and technology there. To mention some, got SCAPY (throw away netcat), IPv6 Hack from THC and others and other stuff.

This time round, we get to really hack something loh... Yes, I know... The bloody hotel internet charging system. Was a big mess I tell you. Well, in any case, since we are not basically bad guys, we still honestly pay for what we use. YES, with money, what do you mean with what?

Well, also get to see Anthony again, he is one of my favorite speakers. Others include Joanne who wrote the Vista Blue Pill (Well, finally I get to see her in personal, but anyway I was too shy to introduce myself :P) and a very interesting individual, Window. Yes thats her name. Ok, she was from Microsoft, but anyway she is the Chief Security Something-Or-Other (hei, thats the REAL designation ok?) of Mozilla now.

Coming to that we had decided to make some changes to our company front as well as some logistic things such as fancy email. Well, I actually would want to propose we have company designation like "The Tech Guy", "The Sales Guy" etc... It doesn't sound so stone. But this is Singapore... I am not sure how the locals takes that.

Well, I will post more on the conference later. Meantime, its rest and to disgest these stuffs.