Hacking VMs with Masquerade - LIVE NOW - Hardware & Software

[url]http://www.ustream.tv/channel/masquerade-demo[/url] Tonight's challenge for viewers, is RootThisBox. A Debian 5 box has been setup with core services installed. Your challenge, is to gain root access and place a file in the /root directory to mark your victory. Good luck. Feel free to use the uStream chat to help each other and post information/discoveries that may help you. Rules: No DoS/DDoS attacks Preventing others from participating in any way is forbidden These rules may change as needed [B] Host: knox.masqueradenetworks.net[/B] Have fun! [B]THIS CHALLENGE HAS NOW ENDED.[/B]

I'm there.

Just finished the first run of the demo. I'll repeat for more people soon.

I'm also there. Edit: Disappointing, super old, patched exploits being demonstrated in VMs. Edit: cd /tmp/lolhack ./hack masquerade@192.168.2.150's password: "We're in!" Edit: [img]http://imgkk.com/i/nIy7DX.png[/img] Edit: When he was starting to do it right, VMWare failed. Yaay.

I'm there

There

[QUOTE=VladH;16657031]I'm also there. Edit: Disappointing, super old, patched exploits being demonstrated in VMs. Edit: cd /tmp/lolhack ./hack masquerade@192.168.2.150's password: "We're in!" Edit: [img]http://imgkk.com/i/nIy7DX.png[/img] Edit: When he was starting to do it right, VMWare failed. Yaay.[/QUOTE] VMWare failed me, yeah. And yep, demonstrating older exploits, so what? You'd prefer me to teach with current exploits...? [editline]02:40AM[/editline] Next stop, Vista.

He doesn't want to try SQL Injection on .gov site, I was disappointed.

Looks like we're pretty much done for tonight. Ideas for future shows include different, perhaps more recent exploits (maybe some high profile but patched ones) and maybe a DEFCON style CTF tournament where I rig a box up with vulnerable services and people get points when they submit reports on each. Or perhaps just a root this box contest, first one to gain access wins. Opinions?

rootthisbox sounds fun

Release the script, damnit

I'll be doing tonight's show in a few hours. [editline]08:24PM[/editline] Can anyone recommend a platform/piece of software that will let me stream an 800x600 area of my desktop? I was using Procaster/LiveStream last night but some people complained it was a bit low res (this is because LiveStream was raping it down to 640x480, nothing I can do about that).

[QUOTE=Masquerade;16673056]I'll be doing tonight's show in a few hours. [editline]08:24PM[/editline] Can anyone recommend a platform/piece of software that will let me stream an 800x600 area of my desktop? I was using Procaster/LiveStream last night but some people complained it was a bit low res (this is because LiveStream was raping it down to 640x480, nothing I can do about that).[/QUOTE] Theres options on procaster for hd, medium, low, high

[QUOTE=toxicweirdo;16674038]Theres options on procaster for hd, medium, low, high[/QUOTE] You have to pay for the HD options though, free broadcasters only have one option. I'm currently testing using Flash Media Encoder. [editline]10:21PM[/editline] We've live: [url]http://www.ustream.tv/channel/masquerade-demo[/url]

Whoooo

Interesting.... so when do you start?

I'll be starting once people have noticed the thread and a decent number joined. Not quite sure what I'll demo yet, open to suggestions. I can repeat last nights if there's demand for it.

Argh I don't want to sign up to use chat. What's with the audio?

[QUOTE=Masquerade;16676454]I'll be starting once people have noticed the thread and a decent number joined. Not quite sure what I'll demo yet, open to suggestions. I can repeat last nights if there's demand for it.[/QUOTE] I demand that you reshow me the xp one Now! I have to go soon :( Edit: nearly 10 viewers Edit2: Now can we start?

i'm on. [editline]10:13PM[/editline] I don't want to sign up though :P

You can type /nick Name to change your name without signing up. Also, beginning soon.

And it has begon!

Tonight's for viewers, is RootThisBox. A Debian 5 box has been setup with core services installed. Your challenge, is to gain root access and place a file in the /root directory to mark your victory. Good luck. Feel free to use the uStream chat to help each other and post information/discoveries that may help you. Rules: No DoS/DDoS attacks Preventing others from participating in any way is forbidden These rules may change as needed Edit: Box is located at knox.masqueradenetworks.net or 67.23.45.82. DNS A record has only just been added and will take a while to propagate. [editline]01:27AM[/editline] Edit2: FQDN is now resolving, have fun! :)

I'm off for the night, box will remain up until tomorrow. Tomorrow night's challenges will be cryptography based. Same time tomorrow, be there!

Nobody managed to root it. :( Anyway, can't do the live show tonight, but rest assured I'm working on challenges for you when I have time.