Upcoming July Meeting

0
Filed under md2600

Due to the upcoming holiday we have decided to move the meeting to Sunday, July 5th, 2009 at 5:00PM at the Barnes & Noble.

B&N is open until 9PM so that should give us plenty of time to share information and talk.

Meetings are open to everyone to attend whether you know something about “hacking” or not. No matter how little or how much computer knowledge you have there is something to be learned. We certainly don’t know everything and are more than willing to explain things and we’re more than willing to learn things ourselves.

Show up, have a good time with like-minded geeks.

Meeting Friday, June 5th, 2009

0
Filed under md2600

Hello Everyone,

A-KO will be unable to attend the meeting this Friday. I am available Saturday afternoon if anyone wishes to get together downtown for some wireless hacking/information gathering.

Let me know if you’d like to meet up.

Meeting Friday, May 1st

0
Filed under md2600

Hey everyone,

Just a reminder that there is a scheduled meet tomorrow night Friday, May 1st.

Unable to attend the meet? Not many people showed up? A-KO’s throwing a Maryland 2600 Wolverine meet up Saturday Night. RSVP by e-mailing, contacting on IRC, or responding to this post.

Movie theater will be chosen based on availability of tickets and location.

Plan to get some food also beforehand.

Updates

0
Filed under md2600

So I went ahead and updated the site a bit to a new layout which I like a lot better. I also went ahead and added some RSS feeds to the left. If you think there should be more information or can think of some other RSS feeds, feel free to drop me an e-mail.

I am looking for some links for virus example downloads, preferably uncompiled, though compiled would suffice so people can play with them and analyze them in VMs.

Upcoming Meeting

0
Filed under md2600
Tagged as

Upcoming Meeting May 1st, 2009 at Barnes & Noble cafe.

Meet #2

0
Filed under md2600

Hello all,

So we had meet #2 last night which looks like it could be the long awaited reboot of Maryland 2600. New attendees Laughing Man and 7r0uble showed up along with MD2600 veterans daten, A-KO, and Pyr0man. A bit of introductions went on as well as discussions about various products and wireless hacking.

A-KO was successfully able to get an encrypted VPN session over a public (exposed) wifi access point in the Inner Harbor, however the connection was quickly sealed off. Unsure as to what happened there.

Next Meet will be Friday, May 8th, 2009. Be there!

For those interested in chatting with MD2600 you may click the IRC Chat link to the right or you may download your flavor of IRC Client. For Windows, mIRC is a good client. If you want to use Linux, try IRSSI or BitchX. We can be found at irc.2600.net channel #md2600.

SSL Strip Utility

0
Filed under security

I’m sure you all know by now that there exists a utility on the internet for MITM attacks on SSL connections. This was presented by Moxie Marlinspike at the Blackhat DC 09 convention. Download and a slide video as well as audio from the conference available here

Distributed WPA/WPA2 Cracking

0
Filed under security

In another post regarding the raw power of Nvidia’s graphics chips for password cracking, Russian software developer Elcomsoft has developed software that uses CUDA to break WPA and WPA2 encryption.

Press release here.

Obfuscated TCP

0
Filed under security

An interesting project that someone is working on is how to make encryption cheap enough and easy enough to use in a more widespread scenario. If you’ve read earlier regarding my SNI support, you would see that I’m a big fan of this goal.

I haven’t worked out the specific details but might try configuring this for the Maryland2600.org domain to see how it works.

More info here, if you’re interested.

Password Cracking & CUDA

0
Filed under security

Further reducing my faith in any password-based authentication mechanisms, comes along a password cracking program that uses CUDA and Nvidia graphics cards to crack password hashes.

The Extreme GPU Bruteforcer currently has support for cracking NTLM, SHA-1, MD5, and various derivatives of MD5 and salting mechanisms.

In simple tests that I ran on a dummy password of “ako123″ hashed with MD5, the CUDA-based cracker was able to find it in less than 30 seconds. It took a bit longer, but it was able to find it within the 3 minute demo timelimit of the application hashed as SHA-1 as well.

The CPU password cracker the company puts out is not multi-threaded, so you can double or quadruple the CPU performance numbers to get an estimate on how well the test would do if it were threaded across all of your available cores.

Performance Figures:

8600GTS 256MB PCI-E graphics card
Intel Core 2 Duo E6550 2.33Ghz

GPU MD5/A-Za-z0-9/3-8 characters: 80M passwords/second
CPU MD5/A-Za-z0-9/3-8 characters: 5.3M passwords/second
GPU SHA1/A-Za-z0-9/3-8 characters: 16.5M passwords/second
CPU SHA1/A-Za-z0-9/3-8 characters:2.7M passwords/second

Download here. Note Vendor website is down at the moment.