Wednesday, April 12, 2006

I really need one of these!




Convert any baseball cap into a piece of protective headgear offering a mild form of head protection. The North SC01 Convert-A-Cap insert coverts your favorite personal baseball-style caps into comfortable and convenient light duty head protection against bumps and lacerations for applications...


Wednesday, March 01, 2006

ifsh: interactive fuzzing shell

Well my replay tool is now morphing into an interactive network fuzzing shell!

mdfranz@franz-d610:~/dev/realtcpreplay$ ./clientplay.py 172.16.126.132 102 follo
w.pickle pause
0>

Sending:22 bytes

Received: 14 bytes
1>

Sending:191 bytes

Received: 147 bytes
2> help


> rb filename - read binary file and use for next message
> ra filename - read ascii file (00 ff 00 ff) for next message
> testcase directory - specify a directory of testcases (binary file to use)
> fuzzload [min,max]
> fuzzcount n - how many fuzzloads to generate
> fuzzheader n - how deep in payloads to overloay fuzzloads
> send
> continue
> setpoint
> sh[ow] exchange - dump all messages sent/received so far
> sh[how] last-sent
> sh[how] last-rec


2>

Sending:36 bytes

Received: 32 bytes
3> fuzzcount 100
FUZZCOUNT now set to 100
3> fuzzload
Generating fuzzloads: Generating fuzzloads: . . . . .
3> go

*** Reset by peer ***

Monday, February 20, 2006

Beyond FreeMind: Check out CMAP Tools!

For those folks addicted to FreeMind, you should definitely check out Cmap

The CmapTools program empowers users to construct, navigate, share and criticize knowledge models represented as concept maps. It allows users to, among many other features, construct their Cmaps in their personal computer, share them on servers (CmapServers) anywhere on the Internet, link their Cmaps to other Cmaps on servers, automatically create web pages of their concept maps on servers, edit their maps synchronously (at the same time) with other users on the Internet, and search the web for information relevant to a concept map.

The CmapTools client is free for use by anybody, whether its use is commercial or non-commercial. In particular, schools and universities are encouraged to download it and install it in as many computers as desired, and students and teachers may make copies of it and install it at home. (Commercial companies that install their own CmapServer do need to get a separate license for a CmapTools client that will talk to the commercial version of the CmapServer).

Wednesday, February 01, 2006

Why I left Cisco Last Year

Death By Risk Aversion has some good lines that capture life in a big product vendor. The 2nd paragraph below nails it!

But whose fear? The metaphor Liz used (she got from someone else) was that many of the "leaf nodes" (what Microsoft and Sun and others refer to as "individual contributors") tend to be innovative and brave, but many of the "branches" (i.e. layers of management) can't stomach the risks. In their (admirable) desire to be strong and stable, the "branches" put safety above all else.

Riskaverse

What kind of safety? Sometimes managers are putting the best interests of the company first. That's great--they're often more experienced and have a better grasp of the bigger context. But (and it's a really big but) sometimes they're just worried about their own damn job. In other words, the leaf node/individual contributors often think about the effect of their work on users, while the mid-level managers often think about the effect of their work on their job. And whose fault is that? All those layers of bosses. Even one risk-averse boss in the chain-of-command can do major damage to innovation, spirt, motivation, etc.

Tuesday, January 31, 2006

Now I'm even sicker of Fuzzing!

Someone does a slashdot post on muSecurity (actually they call them a "cracker attack emulator"-which, I must say sounds very cool), and along down in the thread, somebody mentions my Fuzzing page and I end up getting close to 4000 hits today.

What is the world coming to?

Thursday, January 19, 2006

How to get a job on a pen-testing team

"Wow!" as we used to say in in CIAG

How to get a job on a pen-testing team has a great line that shows that 2006 is the year SCADA goes mainstream:
I was just working on my project for that Death Ray auto-pen-testing machine and wondered if you had any feedback regarding how we would handle shellcode delivery across SCADA or process control networks.


Sunday, January 15, 2006

I finally "switched!"

This week my new 12" previous G4 came. I couldn't resist the discounted prices (sub $1300) that CompUSA, Mac Connection, and Mac Mall (and probably others) were on offering models with a smaller HD (60gig) and no DVD burner. Oh, and I'll eat my words for criticizing some former Cisco colleagues who switched years ago.

Monday, January 02, 2006

Ruby in 2006

It had been quite some time since I looked at Ruby. I went through a brief phase back in 2002, but it was still rough around the edges. There was/is however a very nice interface to libpcap that I started writing some protocol characterization tools which never did get completed or released. With all the hype around AJAX and Ruby on Rails I had to give it another look. Also the new version of Metasploit Framework is written in Ruby.

Among the improvements I've noticed:

  • Easy installation on windows
  • Ruby GEMS - a package adminstration tool simuliar to Gentoo Emerge, Debian Apt -- or yum if it actually worked right.

Thursday, December 15, 2005

Freemind and Attack Trees?

Anybody else tried/trying to use Freemind for building threat models or attack trees?

Obviously not ideal, but it is the only decent starting point. To me the Microsoft Tool is too restrictive and Trike is too clumsy.

Several weeks ago, end I created Threatmind on Sourceforge to explore the possibility of making modifications to Freemind to make it more useful for representing threat models.

Any takers? If so, subscribe to threatmind-talk lets throw out some ideas!