==Phrack Inc.== Volume 0x0c, Issue 0x41, Phile #0x01 of 0x0f |=-----------------------------------------------------------------------=| |=--------------------------=[ Introduction ]=---------------------------=| |=-----------------------------------------------------------------------=| |=-------------------=[ By The Circle of Lost Hackers ]=-----------------=| |=-----------------------------------------------------------------------=| Welcome back. Another year has passed, another PHRACK issue is out, PHRACK65. Every time somebody gives me a present I end up thinking to the story of that gift. Where did it come from ? Who worked on it ? Did who worked on it ever thought that his work would have end up in my hands ? What about a PHRACK issue ? PHRACK comes from the underground, the underground worked on it, submitting papers, sending feedback, commenting, spending long night chatting, reading, BREATHING. Does the underground still breath ? Things change, panta rei. As hackers, we have fun. We want fun. Hacking is fun. You know it because you did it, because you spent nights and nights on this fucking fun, going to sleep at 6 a.m. and waking up three hours later to present your face at school or work, with your brain still back home on your encrypted work. Are you still having fun ? Please, don't take it personally, don't over-react. It's just a question. A question that everybody should pose to themselves every single day, no matter what he is doing. FUN is not only PAYBACK. We are human, we love receiving congrats, who doesn't ? We LOVE seeing our little work spread around. We love the clap-clap-clap sound. But does it really boil down only to that ? When you lose fun and start doing things only for the payback, you're dead. Everyone of you who experienced a bad job or a bad exam topic knows the feeling of "wasting time on useless things" that pops out in those moments. But, most of the time, you _HAVE TO_ do it. Well, nobody _HAS TO DO_ hacking. Nobody. If you are only doing that for a payback, than you are a DEAD hacker. If you are only doing that to present a paper to a conference, to see your name somewhere, than you are a DEAD hacker. It will work. You don't need fun to be skilled, you don't even need to be skilled to post or to go to a conference, there are so many around that everybody has some hole to fix. But your touch with the underground is gone. Your responsibility towards friends, ideas, codes will slowly fade away. HACKING is also responsibility and FUN is the only way to not feel its pressure You might disagree, just post on your idea. Maybe it is a too dark scenario, maybe it is just a spring blues, maybe I am just pessimistic, but this is the feeling. This is money taking over everywhere, this is seeing more and more things done only for the payback. This is seeing the underground heart beating slower and slower. PHRACK is just an example of what the underground has been able to do. Of what we can do. But so many hackers out there are capable of disrupting the system without having to read or write a magazine like we do. We are entering into a period where Government and Politics are trying to control technology with supposed-anti-terrorism laws. And they don't lack money or good congrats. So please, please, help this fucking heart beating faster, pushing blood around. Please HAVE FUN. This is the 65th edition of Phrack and we are still alive. Despite that some people say they don't learn anything when reading phrack we still think that Phrack is one of the best underground communication methods. Oh well, for sure, there are other and even better ways. But Phrack is one way and probably not the worse. We have tried to release this issue earlier but editing a magazine (and especially Phrack) is not easy. We have received a lot of positive comments after Phrack release #64 and a lot of people said they will contribute. However we did not see anything coming. Almost all articles from this release are coming from our first circle of friends. Again. This release, despite that it is not the perfect one, tries to bring a good mix between technical articles and what we call spirit articles. Our introducing and concluding articles (Phrack Prophile and The Underground Myth) bring two opposite visions of the hacking underground. Contradiction? No. Freedom of speech. We have kept with our regular columns Phrack World News and International Scenes. We also have decided to publish less exploit articles. However, low-level hackers should find their way easily into this new release. [-]=====================================================================[-] For this issue, we are bringing you the following : 0x01 Introduction TCLH 0x02 Phrack Prophile of The UNIX Terrorist TCLH 0x03 Phrack World News TCLH 0x04 Stealth Hooking: another way to subvert the Windows kernel mxatone ivanlefou 0x05 Clawing holes in NAT with UPnP felinemenace 0x06 The only laws on Internet are assembly and RFCs Julia 0x07 Hacking the System Management Mode BSDaemon, coideloko, d0nand0n 0x08 Mystifying the debugger for ultimate stealthness halfdead 0x09 Australian Restricted Defense Networks and FISSO The Finn 0x0a Phook - The PEB Hooker shearer & dreg 0x0b Hacking the $49 Wifi Finder openschemes 0x0c The art of exploitation: Samba WINS stack overflow max_packetz 0x0d The Underground Myth anonymous 0x0e Hacking your brain: Artificial Conciousness -C 0x0f International scenes various Windows stealth hooking article brings a deep analysis of the XP kernel internals by presenting two sophisticated backdooring techniques. It is generally hard to find valuable reverse engineering articles covering *new* topics and satisfying our standards, but these guys have made a great job. Make sure also to check out the PEB Hooker and the full published source code if M$ software reversing is your thing. Both of those articles will bring you a very good read. Felinemenace is featured again and brings you one of their latest hacks on more recent network protocols. Our second network article digs into FISSO by introducing not-so-public information about australian restricted networks. As we continue to care about cryptography, Phrack #65 includes a useful cryptographic concept of deniable encryption, a particulary relevant topic for hackers. Check out Julia's article for all details. As mentioned, we have tried to bring you the best low-level hacking around. Articles such as Hacking the System Management Mode, Hacking the $49 Wifi Finder, Mystifying the debugger, are not really 0day for those of you already in the underground, but aim to bring you sufficiently material to develop your creativity on that matter. Finally, we could not release Phrack without at least one exploitation article. Max Packets has done the job of describing step by step his Samba WINS exploit. The information contained herein will certainly be enough for those of you guys who want to develop their own. Scene Shoutz: ------------- Again, Phrack #65 could not have happened without so many people. Thanks to the admins, coders, hackers, scripterz. Shouts : mauro, sysk, leandro, assad, kiwicon for an amazing conference with a lot of original topics. As long as you stay a non profit event Phrack will support you! We are also looking forward to the next BACon in september 2008. Shouts to all south american hackers & expats. No shouts: All supposed "Underground people" who asked us million times when Phrack will be out but never contribute to the magazine. If you guys were a little more productive perhaps Phrack would be released more often. Also, we will -not- help poor indonesians bypassing government's p0rn websites filters. Sorry taufiks1428@gmail.com. Lames: * cucamonga (xt@docking.gaykansascity.com) has joined #phrack why hasnt phrack65 been leaked yet probably coz i don't have it probably cause nobody wants to read it Phrack has not been leaked this time...sorry for that... probably because shiftee needs to sharpen his hacking skills instead of posing on IRC. He could also read Phrack, we will not deny his IP address. Any questions, send us an email. Flames: vegas (insecure wannabe), HDM (pwnie coward) Enjoy the magazine! [-]=====================================================================[-] Nothing may be reproduced in whole or in part without the prior written permission from the editors. Phrack Magazine is made available to the public, as often as possible, free of charge. |=-----------=[ C O N T A C T P H R A C K M A G A Z I N E ]=---------=| Editors : circle[at]phrack{dot}org Submissions : circle[at]phrack{dot}org Commentary : loopback[@]phrack{dot}org Phrack World News : pwn[at]phrack{dot}org |=-----------------------------------------------------------------------=| Submissions may be encrypted with the following PGP key: (Hint: Always use the PGP key from the latest issue) -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.5 (GNU/Linux) mQGiBEYfRF0RBADcVdkdzGcuHTx/r3ymypC622BkkAa4tYEsVXkOBFwvGLy5+ILn M1nfwx1hfs1ZHQS53e8lxrs4j8qFSFuCTCQTCZuVFHaS9JDt+RfEyWwtmTTPfuhL TYj1RON33t7OGEuyAF9oIca0Uj0PSREyT0mwbAOBVTZfWEC2yBZao+c3iwCghHaQ fRShZoA5iTfRNP+qnUyyyJ0EAIxix1TB2ImygXn+mPoPFxIOYh71eXsi2LXPPYU5 Q2/snVork1wkGVjwB7Bn2cHEeyUVb8sHjXY18lGpXcx0jFjq7ZMFcBtevI4I1YJL kfFkxQvXb8jjA8UY0IJfvhQ86O7OCsg0LnuCpHtnQAX8bljxZA27RO8cHLWfwOBX 4HhnBACZS4YrTKf5yC6HEVfB4j822a3hbmvuwSC9FVqJZzuW6agfeQjUMSi3TLig SW721aMesY2ZWsGCmD3OhapqWoDssb4qN+udlqzDj3urrlxsU2BthYyZkPyECf8q q5CzBOa7CZVj46XuNr0NebfKt8zJUahXUwXJ8WUG9Mq02IpCzrQxbG1iZHdyIChQ aHJhY2sgcGVyc29ubmFsIGtleSkgPGxtYmR3ckBwaHJhY2sub3JnPoheBBMRAgAe BQJGH0RdAhsDBgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJEMA5IJciKhVsCjEAmwTY y0PGxRDutAz4AAidWnXLVTfwAJ9z0lNQtQNSVs6/NVR7QlYPA8b5RLkBDQRGH0Rd EAQAvTWMbq05s05rQNPOGKngGbGnNunicDIPg4OfTieXXOa3HFDb3sGTCYpAUv4H 7IPnei7jGCdsdrco1xmtQmQ+xVWoklb44G0wmmjVvnuIZ2DGhf6d3ijxGKZfL0oi eBia/X68IIc+prAypwm7URlOAHVJnoHKCZG8MNcbD+5AyOsAAwUD/1JkpKjSXR48 SzW+G6GVxh2N0bmDAFBTaNzVPn4Hpv0MQgdU5EAYc+Py+E3ehFVPdaoasTUA+Bzx x4qXeFGaQI0xvkBfHART3ai6k3boY6e29OMdprBNyRlCGvFmhYT98bKK1hyoD9km m5zcHoyzr26RSEG1CcJhlp+i5E6o42qgiEkEGBECAAkFAkYfRF0CGwwACgkQwDkg lyIqFWxBXQCfbL9co8kDl32Ri0iNcoQi+HF5YC0An16AqMNGoNZ0zOkN8avUCWe3 zAAYmQGiBEZtVVQRBADK+AnxFD0Qg/kHQxo8ieAcypqBvSxl+O0YPwGTHhoxz7Sa pCKi68Tm9Dpe62RXgMqi72+JbzYXQW5SXrziE4cO4bIHv1oG+SVM5EnCj6N9gcH5 xf+3ljE5URjIvuaOzwq+hp4o1736WVTzykJ/plItRx/91kciFLNdGfVjho109wCg z4OAjOFg66jw3iuaWlf1xyYhH+8D/R4gCTHwoHxhR5ndg/oBH5umPZ/o8r3YFKbm 1DHTBKIipnq6Sisu6vYr80zR3MNYqT7//u27bDPXCtGaO68qHgZNYJ+Pl0g7mYTr 7htFE+t0O+sn26P7Za/yKHzQpUMJi4EfRv1/7CW0JAG18DbWQDSZo0bcr95MuVVQ Q+x2QYPkA/9/VrKDFjBWSPuHbowvyKCFOZ+rtlqQZBiV1vYx1cZX6uZCPiI9njfs vn1G+GNswTfruzngee/hPRimYayz4O6HmT7LBygz1MVMX0ViKrz4JHJzrH0EKm/+ 5+EvrdWYZfmYHj5RJp+E5vrbGfkqxrpRwWK2wE5hs8vVBSozBjScqbRhUGhyYWNr IHN0YWZmIDIwMDcgKFlldCBhbm90aGVyIGtleSwgdGhhdCBkb2VzbnQgZXhwaXJl IGFmdGVyIDEgZGF5IHRoaXMgdGltZSkgPGNpcmNsZUBwaHJhY2sub3JnPoheBBMR AgAeBQJGbVVUAhsDBgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJEDAEn2IWRoZwbQkA oIYvSaNwugFczTyUqpGiCHzb6KUZAKDAWIr2t7xSbQJnf/z80tvKmw88MIheBBMR AgAeBQJGbVVUAhsDBgsJCAcDAgMVAgMDFgIBAh4BAheAAAoJEDAEn2IWRoZwbQkA n35TYBcJaUISdIV1iiFgoGYihlN9AKCzUmK7ynXAhta7GhOJpzkQdKDmabkBDQRG bVVUEAQAiNT5dMH5g6Yf+CSBjSnqb+B4sxDsb+kn2RezHGsq6JKpwQl3S5yBgPnW 8h2G6VOU/u8OVINBmGNzBnv4EabAwTIoKnVrOI0yu4F1n0ZZt35Jk2omh9h1JzpE Q96gG4TSx2QJ4tf7qfP7By0brOiVtGKJ1CLaQAX27M9NqwH43M8AAwUD/RoIKIdj gfTAabtd4CdvnvAeLBmsZzGKGpzSqcwPyWhvj3ElCvkLL5JAK3dnIgTbmrpv2ep5 KGeqkm/cbSNeHU8l9IaCX5Hd8QXWOKnf+zrbpJ90L3ZxSDZ1ZkSjMD4Ls6QxnRsJ 4jqzt6GSAOPD5urYjpErjZDkvYZ4S4ynB6G9iEkEGBECAAkFAkZtVVQCGwwACgkQ MASfYhZGhnAGQACdGlRjo7TYmHm7XMUOwhwSZ0hN43kAoIkhgLBdHfaOnskxc5YZ X8CVYa2m =yjXZ -----END PGP PUBLIC KEY BLOCK----- phrack:~# head -22 /usr/include/std-disclaimer.h /* * All information in Phrack Magazine is, to the best of the ability of * the editors and contributors, truthful and accurate. When possible, * all facts are checked, all code is compiled. However, we are not * omniscient (hell, we don't even get paid). It is entirely possible * something contained within this publication is incorrect in some way. * If this is the case, please drop us some email so that we can correct * it in a future issue. * * * Also, keep in mind that Phrack Magazine accepts no responsibility for * the entirely stupid (or illegal) things people may do with the * information contained herein. Phrack is a compendium of knowledge, * wisdom, wit, and sass. We neither advocate, condone nor participate * in any sort of illicit behavior. But we will sit back and watch. * * * Lastly, it bears mentioning that the opinions that may be expressed in * the articles of Phrack Magazine are intellectual property of their * authors. * These opinions do not necessarily represent those of the Phrack Staff. */ -EOF-