'hex' Category

• NSM-Console version 0.4 release

  January 16, 2008

  Well, it has barely been any length of time and there’s already a new release of NSM-Console, there are so many features that I’ve been coding like crazy to get them all done. First, let’s start with the downloading: http://writequit.org/projects/nsm-console/files/nsm-console-0.4.tar.gz And, for anyone interested, here’s a rundown of the most notable new features: Additional encoding/decoding […]

  posted in framework, hex, monitoring, monkey, network, nsm, nsm console, packet, ruby, script, security, tcpick, tcptrace by Lee

• Decoding the SANS Christmas packet challenge using only NSM-Console

  January 11, 2008

  In my never-ending quest to find justification for writing NSM-Console, I hereby present the following tutorial on how to decode the SANS Christmas packet challenge using nothing but NSM-Console: I’m going to be using NSM-Console version 0.4-DEVEL, which adds the features that allow this analysis to be performed without external tools. You can get the […]

  posted in challenge, christmas, console, decode, encode, fun, geek00l, geekery, hex, nsm, nsm console, packet, ruby, sans, terminal, urlescape by Lee

• Hex and NSM-Console source now browsable

  January 11, 2008

  You can now directly browse the source code for both the Hex liveCD and the source code for NSM-Console directly from the Rawpacket Hex trac. If you’re interested in upcoming features in NSM-Console, you can check out the latest TODO file here. Thanks go to spoonfork who switched us over from CVS to SVN without […]

  posted in cvs, hex, nsm, nsm console, rawpacket, source, svn, trac by Lee

• NSM-Console version 0.3 release

  January 8, 2008

  Yep, I’ve just been cranking out code lately, so I am proud to present the 0.3 release of nsm-console! You can download NSM-Console here: http://writequit.org/projects/nsm-console/files/nsm-console-0.3.tar.gz This release was focused a bit more on usability, features and bugfixes rather than the addition of new modules, however, there were still a couple that were added. Since this […]

  posted in argus, console, decode, development, encode, fl0p, framework, hex, iploc, lgpl, monitoring, network, nsm, nsm console, opensource, ruby, script, security by Lee

• Security blog roundup

  January 4, 2008

  Talking with enhanced in IRC, I realized that I should really do a post listing some of the security blogs that I read, so without further ado, I present you with the list (in no particular order) My awesome wife’s food blog, Eatables Hex people Geek00l – http://geek00l.blogspot.com/ Enhanced – http://global-security.blogspot.com/ Giovani – http://www.cblume.com/ Chflags […]

  posted in eatables, hex, links, roundup, security by Lee

• Development version of nsm-console (0.3-DEVEL)

  January 1, 2008

  I just pushed out a newer development version of nsm-console out to navi.eight7.org, here are some of the new features: Snort module with community rules self-contained snort module will all the community rules and configuration file, this’ll generate alerts into a file after reading the pcap file. I wasn’t sure whether to use community or […]

  posted in automation, development, hex, logfile, nsm, nsm console, programming, ruby, script, snort by Lee

• NSM-console version 0.2 release

  December 21, 2007

  I found out there is internet here, so I’m finally able to post some code changes I was working on while on the airplane. Firstly, download the files here. The static page for nsm-console is here. I finally got around to releasing the next version of the nsm-console. This version incorporates a large amount of […]

  posted in automation, framework, freebsd, hacking, hex, network, networking, nsm, nsm console, pcap, ruby, script, security by Lee

• DNS poisoning FUD

  December 12, 2007

  In response to one of today’s articles on Ars Technica titled “DNS poisoning used to redirect unwitting surfers“. I highly respect Ars and read their articles regularly, however, in this case, I believe this article may be causing more FUD, which is not especially helpful in this case. In the article they discuss DNS servers […]

  posted in dns, fud, gmail, hex, malware, nsm console, poisoning by Lee

• Packages to get svn working on Hex 1.0.*

  December 3, 2007

  Trying to run svn on Hex 1.0.* you get the following error: /libexec/ld-elf.so.1: Shared object “libaprutil-1.so.2″ not found, required by “svn” As geek00l pointed out, this can be fixed by issuing the following command: cd /usr/ports/devel/apr-svn/ && make install clean Assuming you have a ports tree downloaded into hex, but what if you don’t have […]

  posted in db42, freebsd, hex, packages, svn by Lee

• NSM Console – A framework for running things

  November 27, 2007

  Well, I’ve been hard at work for the last couple of days working on a (hopefully) useful tool for aiding in NSM file analysis (for pcap files, live analysis doesn’t work). Behold! I present NSM-Console! (read more about it here, watch a screencast here) Download the framework here. Keep in mind this framework only includes […]

  posted in aimsnarf, console, framework, hex, module, nsm, pcap, plugin, ruby, script, security by Lee