Cerberus Antivirus Lite CD V2.00

I had been very busy with some Wifi auditing projects so I might not be able to catch up on the win32 version yet if anyone is still using it...
It came to me as a point I wonder whether its worth going on or not since the batch file now primary works and mine seems like a duplicated work.

However, I had continued on with the Lite version which I now I had renamed Cerberus Antivirus Lite (I hope you guys dun mind). The new ISO (14MB ZIP) based ius ready and contains both Mcafee and f-prot as the DOS scanning software.

I had also modded some of the core system files and boot image in order to make changes to the selection to choose which scanner to use. Because of the difficulty in using hte previous updater (believe me I know) I am going to revamped it into a single EXE files which automatically unpacks the necessary files and do all the work with just 1 request to the ISO file. The Updater will be ready soon.

Meanwhile here is the ISO for Cerberus AV Lite 2.0

Bit Torrent
cavlite.torrent

Emule
ed2k://filecavlite.zip14854757F971F36D55A63038451054900D9327AE/

Https
cavlite.zip

Well that all I have so far until I can find more bandwidth.

Writing Report for Audit

As you know Cerberus Network has its first project and the report is really kinda killing me. Escpecially since I broke my leg nowand I probably has nowhere to go but to sit right here and write the report. Hopefully it will be over soon... Show me the money man! :)

童话

Here is the song I had promised to sing. Firstly, for Angel and also for J as well since she is the person who had introduced me to this nice song. Hope you love it.

Tong Hua V3

IE and Netscape can read your clipboard

Ever had to enter a password that is like 16 characters or your credit card number or even something like a serial number? The most common way is to copy it into your clipboard and paste it on the webpage. Well, you are in for a shock.

Copy this into a file and save it.

<script language="JavaScript">
var content = clipboardData.getData("Text");
if (content!=null) {document.write(content);}
else {document.write('Clipboard is empty');}
</script>

Copy some text into your clipboard. Execute it. You might get a toobar block, but there are ways to work around it just that I only meant to demostrate this. Just allow it.

See what I mean? You still feel safe about your clipboard?

Ubuntu Grub Recovery

Another mini disaster stuck. I had to reinstall WinXP on my dual boot machine and the problem was I forgot to backup the boot sectors. Result was that the boot sector was overwritten during WinXP installation and I cannot go back to my Ubuntu now...

But fear not there must be plenty of help on the internet... Ok, let see.. Redhat, Debian, SuSE... Well, there are help for everything else except Ubuntu. And obviously this method don't quite work the same way, especially linux rescue doesn't work in Ubuntu bootup disc.

OK, so here I am going to post the solution. Bootup as per normal. Break the install procedure and get to the menu. You may shortcut to here but using expert as well. Anyway, you will need to go to the partition part and edit your mount point / in. BUT DO NOT FORMAT THE PARTITION!!! Ubuntu will doube check I think and warn about formating a previous installation, which IMHO is cool. OK, now you can skip the rest of the steps and go to the Install-GRUB option. btw, you may want to try and run install-grub from a shell in ubuntu... You will be shock to only find the *.deb there with nothing you can do. OK, back to the menu. It will try to install. If it did, good for you. For me, the instruction is not quite right. My first HDD turns out to be hd0 install of hda or whatever. Its pays off to check it while your ubuntu was working.

In any case, after sucessfully install grub, you can skip the rest of the step and reboot. TADA. IT works. And guess what the boot menu for me has changed. It even detected that I had upgrade from WinXP Home to WinXP Pro. Cool.

童话 ~光良~童话

I came across this MTV and I must say it touches me in a very unique way. Its not just the song, but the story. If you know my story with Angel, you will know what this means to me. I know its not such a new song and I know someone who also sang it. I wanted to sing this again. Someday.

童话~光良

忘了有多久
再没听到你
对我说你最爱的故事
我想了很久
我开始慌了
是不是我又做错了什么
你哭着对我说
童话里都是骗人的
我不可能是你的王子
也许你不会懂
从你说爱我以后
我的天空星星都亮了

我愿变成童话里
你爱的那个天使
张开双手变成翅膀守护你
你要相信
相信我们会像童话故事里
幸福和快乐是结局

你哭着对我说
童话里都是骗人的
我不可能是你的王子
也许你不会懂
从你说爱我以后
我的天空星星都亮了

我愿变成童话里
你爱的那个天使
张开双手变成翅膀守护你
你要相信
相信我们会像童话故事里
幸福和快乐是结局

我要变成童话里
你爱的那个天使
张开双手变成翅膀守护你
你要相信
相信我们会像童话故事里
幸福和快乐是结局

我会变成童话里
你爱的那个天使
张开双手变成翅膀守护你
你要相信
相信我们会像童话故事里
幸福和快乐是结局

一起写我们的结局

Kismet + HostAP + AirCrack on Ubuntu Part 2

Ok, now we that we got hostap up, make sure you can on it in monitor mode. What you dun have a card that card do that? Em.. Then I dun know why you should be using hostap in the first place :P Anyway, to test run iwconfig wlan mode monitor. Or whatever your interface is. No error? Good. We are in business.

You will need to install Kismet now. Yes, I know. No package as well. There is kismet for Debian though under unstable branch. But I guess its a pretty good idea to recompile since you probably want the latest stable version of kismet. Get it here http://www.kismetwireless.net/download.shtml.

It may require some additional package, so grab them as you come along. I believe using default all of them should be installed. So, its make andmake install. At least try running kismet now. With erro, but make sure its there. Next you need to find the kismet.conf which is in /etc/kismet/kismet.conf if I am not mistaken. Edit the user to the user you wish to run as (not root). And edit the source=hostap,wlan0,kismet. Change whatever as needed. Then go to the user (you entered) directory and run kismet. Kismet need to write the log. You can change that in the conf as well, but I will leave that out for now. Dos it run? Hope so, Mine didn't.A weird FATAL: channelget ioctl failed 22:Invalid argument came up. Search the whole internet and could find the problem. But luckily I found out in the end how to fix it. Just run ifconfig wlan0 up. Well yes, people makes very stupid mistake and program also return very gabble errors.

Now you probably want a few other good stuff out there. That will be aircrack, airodump, aireply, airsnort etc.. Basically you can use apt-get for most of them. The package I suggest are :
driftnet dsnif aircrack airsnort.

For now that will be it. I will cover soon another tutorial how to use al lthese in your warring session.

Kismet + HostAP + AirCrack on Ubuntu Part 1

Ok, this one may end up as a long long one...
Firstly, if anyone ask. For now, there is NO working HostAP for Ubuntu for apt packaging.

Ok, lets start with HostAP. Assuming you have Ubuntu installed now, you will need to get the source file from http://packages.debian.org/testing/net/hostap-source. This seems to be the newer place I can find so far and yes I know you want to ask me why Debian. Ubuntu is deried from Debian and the *deb is also part of the legacy. You can go quick and unpack it and try to compile it. I can tel lyou a lot of fatal errors. So be patience. There is one more step.

You need to download Module Assistant from http://packages.debian.org/stable/devel/module-assistant. This by right can help you build the module, but anyway we do not need to do that. We just need ot run it through 1 pass and even if it did not build any module, it has prepare and download the kernel source headers etc for module building. Now you can make, make install on your hostap. It will build. Trust me.

Now that you have that. Ensure you have iwconfig too. If not then apt-get install wireless-tools. Run a check and see if you have the wlan0 usually for the hostap. If not, try /etc/init.d/pcmcia restart. Still cannot? Just reboot the system. You can also check by lsmod grep hostap. If not you simply do a depmod, insmod hostap. Anyway, I would think you can get it running by now.
I will leave the other stuff in the next post.

Kismet on Fedora Core 4

I was very very busy afte the conference trying to setup my laptop for the Wifi Pen Test and Wardrive. Its back to the Linux OS again. And of cos, I realized I had forgotten quite some bits of it and learn some more new stuff along the way. One of the important things encountered and I felt is better to document was the installation of Kismet on FC4. So here is it.

1. Before you start, you will need to get Fedora Core 4 installed, preferable with as much Programming and Administration tools installed as possible. I am running low on space and as such had no choice but to partial install.

2. Next, is to get Kismet. I had download it from the source and compiled it. But actually I later found out there is a RPM release for FC4. You can find it at :
http://dag.wieers.com/packages/kismet/
But I don't know how it is with other people, I could not install it because the Kernel version did not really match. I had to download the kernerl-source package using yum as well as doing all my Fedora updates before I got the version to match.

3. Now, you need to get your PCMCIA card working. The card I was working on was the D-Link DWL-G650 so my choice of driver will be madwifi. I got it working in Linux with some driver. And I happy ran my Kismet. Got a ioctl error. Was stuck there for a few days since before the conference with no idea what when wrong. Anyway, I had changed to a Linksys WPC11 v3 card and still the same problem. Then I found out something. You CANT use the linux NORMAL driver to get Kismet working. You need a special driver for that. There are several out there including Project Evil, NDISWrapper etc. But for real rfmon action, I would suggest you go for HostAP. This you will need to get from Atrpms:
http://atrpms.net/dist/fc4/hostap-driver/
And since you are there, you can also grab hostap-utils :
http://atrpms.net/dist/fc4/hostap-utils/
And hostapd :
http://atrpms.net/dist/fc4/hostapd/
A note I want to say was that there are a few mode in hostap. You will only need to worry about hostap_cs.

4. Along the way, I found out that I needed some more of the modules one way or another. Among them were Perl-Net library, Pcap library and some libray, but yum handled it nicely. And if not either ATrpms or DAG has. Thanks to these 2 great site. Anyway, after installing all these. You should be able to do a ifconfig and see some weird stuff with you card now. You will get a NORMAL interface with a 6 pair hardware MAC and another one with insane among of pairs ID. That btw is the rfmon mode. You got the driver working now.

5. Kick in Kismet and I know so much about murphy law. The driver I installed from the RPM did not work. Invalid Module Format. Damn. So back to the hostap source. I rebuilded it and yes, I mean you NEED to know how to build from source. Basically, make, make install (under root). Weird that the path of the install is not the same as the RPM, hell, I just copied all the hostap*.ko into that directory. My installation is probably very dirty now. But I only needed to get it working.

6. One last shot. Another error. I can't believe it, the conf file it was looking for was somewhere inside .../updates/net/wireless... or watever. I didn't know what happened, but just copy kismet.conf there. Oh, I forgot to say something about editing the kismet.conf I guess... Even though many places will tell you WPC11 v3 is a Prism2 card, and some places will tell you to use orinoco mode in kismet. But you now got the driver working, so it will be hostap_cs instead. :)

7. Break for lunch at 3pm because I had forgotten to eat totally. And when I came back. I kick in Kismet. TA-DA. Working and capturing all my neighbours packets now. It did not capture my packets from my router. Why? I am not going to tell you. Think about it why.
Hint : WPC v3
IF you think you know, post the answer in the comments. :)

Leaving for Hack in the Box Conference 2005

After much preparation and all the rushing here and there to get Cerberus setup, I am finally getting ready to go for the conference tomorrow in KL I must say all the rush should be worth it, especially when I gotten my namecards just now. I still have many letters and email to reply andsend, but I guess those will have to wait. Much will have to be put down until I get back I suppose.

So wish me luck and I will try ob log there if I can. BTW, there is a hidden aganda in this trip. Perhaps I will talk about it once I come back. There is nothing like a real site testing.

(正宗)重慶火鍋 Nightmare

Another restaurant just got blacklisted by me again. There are hundreds if not thousands of so call 重慶火鍋 or Chong Qin Steamboat. But of course we know there is no such thing as the REAL thing since we are in the southern tip of the asia continent.

This was one of the newer restaurant which came up near the rest of the so call 正宗 ones around it opposite Shaw Center. A big red sign saying its for $10 per head attracted my attention. I am always attracted to (CHEAP) good food. There were a lot of waiter running around and around and no space, so I approached the counter and ask for a table for 2. Well he say upstairs also full, but will arrange a table for me downstair inside, which I saw a few. Then there was no fan and etc.. so I approached a waiter to help. Boy, I have never seen worse attitude from someone since my SAF days. He kind pushes here and there then say you need to queue up again behind some people outside (where the queue did not exist when I entered the place). I took a quick look at the 2 miserable stands with well not really a lot of food and I walked straight out pass the waiter and pass the stall and almost across the street to eat Subway which I loved but of course my gf hated it and I had to knock that off. I wont be able to tell you if the food is food, but the bad attitude and the bad manners the waiter (served) really knock off any appetide I had. I didn't need to taste their food to know I will not had enjoyed it at all. I know people always say you pay for the food and not the service (tell me about gSt) but I simply refused to eat especially when I am not happy cos anything would had tasted like shit anyway.

So, want to know where I ate then? I walked pass the stall again, pass the waiter who either ignore me or give me that shitty face look which I believe mine wouldn't had been much better. The shops next door were like only $15 and cosy and air-conned and lots of space... Well, not a lot, but have space. But I just could eat then cos was too full (of anger) then. Walked past Pivador there which I dined many time and I highly recommend for a full course western at $15 and very good environment. I ended up at Terre in Bugis. ITs $10 for a full course western as well and you can even get Steak at $12.80 there. Heaven kind of service and I believe we were eve nbeing served by the boss lady. Anyway, the meal was great and happy in the end. Actually to think of it $10 is not so cheap even since I had taken $8.50 steamboar in AMK before too.

Just want to say, they lost 2 customer that day and I bet their closing down offer should be around the corner if they keep up that kind of f up attitude.

PAV Updater V1.5.0

With the released of updated batch file, the Win32 version has been updated as well and the bug patched as promised. No auto extraction available yet in this version though. It will be available in the next version.

Changes :
V1.5.0Changed the CDWriter software from SCDWriter to BurnCDCC
Changed the download of Sophos web_ides.exe to web_ides.zip
Patched the incorrect naming of bootiable.img to bootable.img
Changed final ISO name to pav.isoChanged download list name to pav.lst
Added XBlocker to Spyware section
Optimized and remove some unnecessary copying of unzip.exe and mkisofs.exe

Download :
http://rapidshare.de/files/5365455/PAV_Updater_1.5.0.zip.html

AA Uploader V1.1.0

Was digging through my archives and I found this nice small application that can work with Accellion Attachment Outlook/Notes without the email client. Basically this tiny appz takes your file and get it uploaded and return you back the link which you can paste anywhere you want. I wondered why this appz was never released while I was working in Accellion, but anyway since I am no longer working there and I am not even sure if this even works as well. Here is the tiny appz which I recompiled. If anyone out there is using AA and it works let me know.

http://rapidshare.de/files/5351150/AAUploader.exe.html


Again I must stress that this appz is not in anyway related to Accellion and of cos comes with no warranty whatsoever.

爱似神仙 ~ 王蓉 ~ 专辑：多爱

风中残花
飘落在眼前
它为谁不屑上青天
素女织锦
为谁守空颜
又为谁在铸金鞭
窗外的孤雁依然依然出现
相思中奉候泪满脸
只盼会梦中等待他出现
看见归来的铁骑踏白烟

爱情是什么神仙
让人哭让人笑
让人看不见
我愿化作一盏灯
永远守在他身边
与君畅饮再征战

曾为清贫
富贵笑中谈
月光中重影舞双剑
只因忠孝
自古难两全
无奈独对清冷渊
枝头上残月依然依然出现
路相隔千尺思万千
山若有情听见我呼唤
为君再奏那曲琵琶怨

爱情是什么神仙
让人哭让人笑
让人看不见
我愿化作一盏灯
永远守在他身边
与君畅饮再征战

爱情是什么神仙
让人哭让人笑
让人看不见
我愿化作一盏灯
永远守在他身边
与君畅饮再征战

我愿化作一盏灯
永远守在他身边
与君畅饮再征战

PAV Lite Updater V1.5.0 Mirrors

Added another mirror just in case. BTW, if there is anyone who would like to host these files for me, I will be more than happy.

http://www.megaupload.com/?d=NEWNS5ZB
http://www.megaupload.com/?d=FH2SQPMK

PAV Lite Updater V1.5.0

I noticed there was a bug in the previous version I released with the filename of the boot image. It was looking for bootiable.img instead of bootable.img. I will be releasing a patch and update with it soon in V1.5.0Meanwhile, here is PAV Lite V1.5.0Lite in short only contains the bootup DOS mode scanner and nothing else in order to cut down the size. You will need the following files. Read the readme.txt inside PAV Lite Updater.

http://rapidshare.de/files/5285933/PAV_Lite_Updater.zip.html
http://rapidshare.de/files/5286452/pavlitecd.zip.html

GWA Again

Just got back from holiday and tried to updated my Windows as usual. WTF? How come need to download the ActiceX for GWA again? This is really getting on my nerves. I just cant be bothered. Anyway, just found that they installed a new version of the LegitCheckControl.DLL dated 29 Aug 2005. Heck man, I am going to upgrade like a few machines and plus a few more virtual machines and you expect me to download and validate all that? No way man. Pick up the patcher, change the code for the new file and walla. Works again. Hell man, I hope I did not have to do this every month. Its a plain waste of time. Imagine poor people who can only download using 56K modem. Its terrible. Anyway, I figured they probably patched the BHO block as well as the Javascript? Ha, Yes? No? Emm... Let me know. I have better things to do.

Public AntiVirus Updater V1.50

I had made plans for a update for PAV Updater. Basically I found an excellent extractor which I can automate the extraction of the ISO before the patching. I will replace unrar and unzip with this as well I guess since it is a universal unpacker. Emm, I also wondered if I need to ask the author for permission for include it in the package.

Oh, ok I guess I forgotten totally to explain what this is. Basically in short, Public AntiVirus has stopped support in Apr 2005 and as such the virus definitions and its arrays of program has not been updated. Antivirus which is not updated is as good as none. Public AV uses freeware Antivirus which are available and creates a bootable CD which you can just pop in and bootup the system for scanning. It has its merits because this means it does not boot into your OS which can had been infected. Moreover if the infection involves some stealth viruses then its very unlikely you can even find them at all once you are in the OS.

Anyway someone came out with a Batch file updater which downloads some of the updates and programs. Along the way, more tools where added and it also includes some Antivirus installation and scanners as well now. However the size has grown and its became difficult to download the packages using the Batch file as it stopped or maulfunction sometimes. So I had came out with my own Win32 Updater which splitted the download phase out. You can simply download at your leisure time using any downloader you prefer and then you can run the patching after you had finished the download. Once patched it also helps you build the ISO and you can burn the CD image using any burner you like.

I strongly supported this project because I felt that everyone should have an antivirus and if you choose not to pay at all this is one of the choice. So you should have no excuse not to have an antivirus in your computer from now.

Anyway, I am still looking for support and if anyone had tested it, please leave your comments here and I will try and improve on it.

Public AntiVirus Updater V1.10

Just spend the date making this Win32 Updater for Public AntiVirus. PAV is a CDROM based bootCD which contains FREE antivirus programs for scanning system at bootup. I will talk about why I needed this, but anyway I found it interesting and created my own updater for this.

PAV Updater V1.10
http://rapidshare.de/files/4866976/PAV_Updater_1.0.zip.html

Original PAV Updater
http://www.aptv38.dsl.pipex.com/RescueME/UpdatePublicAV.htm

Download PAV
http://www.slashbomb.com/download/pafiledb.php?action=category&id=2

Support Support hor. If you test it let me know. BTW, the Docu sucks now and I figure 60% of the people who have a clue what this do anyway. But I am dead tired now. I will write some proper stuff tomorrow.

Nochnoy dozor 1 AKA Nightwatch 1

I had been a big fan of foreign movies I must say. I had watched quite some and some which I did not even know the name. Nightwatch is one of them. Until recently, I happened to see the trailer on a bus and I go "Ah-ha, haven't I watched this somewhere before?" Actually I did not even regconized the poster of the UK release with a pair of glasses showing the battles scenes.

Firstly, I must say I didn't I did not watched the trailer before the movie. I suppose if you did, you might be quite disappointed with the show as the trailer has probably the best part inside already. But then I felt, this is only the first in the trilogy, I would give it a chance. Basically, for this show, if I still remembered correctly, there are 2 main plots going on and they do not seems to link at all until almost the end of the show. Throughout you will wonder why they bothered to show this and that and such. The main characters are linked in one way or another. Well, not as good as it is in Magnolia or other shows, but its part of the story. The only thing they had fail to project was the idea of the prophecy of the Watcher who will walk from the light into darkness. I know why many people will want to compare this with Star Wars now.

Anyway, I am not here to write a full length review, but if you had watched and still are interested on how the story will go from here, look out for Nochnoy dozor 2: Mel sudby or Nightwatch 2 : Daywatch

http://www.canmag.com/viewwmv.php?clip=19
http://kino-express.ru:80/Video/ND2-teaser.avi