Comments for SourceSec Security Research Group http://www.sourcesec.com Security research and vulnerability assesment Tue, 06 Jan 2009 21:30:40 +0000 http://wordpress.org/?v=2.6.5 Comment on Hacking the Routers: SOHO Router Security by Interconnecting Worlds » Blog Archive » Analyzing SOHO Router Security http://www.sourcesec.com/2008/11/09/hacking-the-routers-soho-router-security/#comment-10 Interconnecting Worlds » Blog Archive » Analyzing SOHO Router Security Wed, 17 Dec 2008 09:29:47 +0000 http://www.sourcesec.com/?p=43#comment-10 [...] http://www.sourcesec.com/2008/11/09/hacking-the-routers-soho-router-security/ [...] [...] http://www.sourcesec.com/2008/11/09/hacking-the-routers-soho-router-security/ [...]

]]> Comment on Miranda UPNP Administration Tool by Miranda - UPNP Administration and Audit Tool » IHackedThisBox Blog http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/#comment-9 Miranda - UPNP Administration and Audit Tool » IHackedThisBox Blog Mon, 08 Dec 2008 02:07:44 +0000 http://www.sourcesec.com/?p=25#comment-9 [...] To keep updated with the tool visit the project’s homepage at: http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/ [...] [...] To keep updated with the tool visit the project’s homepage at: http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/ [...]

]]> Comment on Miranda UPNP Administration Tool by craig http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/#comment-8 craig Fri, 05 Dec 2008 21:39:40 +0000 http://www.sourcesec.com/?p=25#comment-8 Thanks a lot for the suggestions sm; the readline from UNC tools that you linked to seems to work better than the one that I initially tried, but still not 100%. It tab completes properly on some commands but not others, and it still seems to hang when you run the msearch or pcap commands. This likely is a readline issue as well, since the cmdCompleter class is updated with new info when new hosts are discovered. I'll have to look into it a little deeper... Thanks a lot for the suggestions sm; the readline from UNC tools that you linked to seems to work better than the one that I initially tried, but still not 100%. It tab completes properly on some commands but not others, and it still seems to hang when you run the msearch or pcap commands. This likely is a readline issue as well, since the cmdCompleter class is updated with new info when new hosts are discovered. I’ll have to look into it a little deeper…

]]> Comment on Miranda UPNP Administration Tool by sm http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/#comment-7 sm Fri, 05 Dec 2008 11:39:48 +0000 http://www.sourcesec.com/?p=25#comment-7 Just used the tool in Windows XP. For readline installed module from here: http://sourceforge.net/project/showfiles.php?group_id=82407&package_id=84552&release_id=302776 Then it needed win32con, and I installed module form here: http://sourceforge.net/project/platformdownload.php?group_id=78018 Now testing ... Just used the tool in Windows XP.

For readline installed module from here:
http://sourceforge.net/project/showfiles.php?group_id=82407&package_id=84552&release_id=302776

Then it needed win32con, and I installed module form here:
http://sourceforge.net/project/platformdownload.php?group_id=78018

Now testing …

]]> Comment on Miranda UPNP Administration Tool by cheffner http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/#comment-6 cheffner Mon, 17 Nov 2008 18:28:22 +0000 http://www.sourcesec.com/?p=25#comment-6 hake, OK, so this took a little longer than expected. Your particular error can be resolved by removing the IN module from the imports, but it appears that Windows also does not have a readline module (which is used to do the tab completion and get user input). I tried a readline Windows alternative (http://newcenturycomputers.net/projects/readline.html), but tab completion does not work and it seems to hang when performing the msearch/pcap commands. You can try it out if you want, but until we find a decent readline alternative, you might want to use one of the shareware UPNP tools available for Windows. I haven't used any of them, so I can't vouch for them personally. FYI, we have had reports that Miranda works fine in Mac OSX 10. hake,

OK, so this took a little longer than expected. Your particular error can be resolved by removing the IN module from the imports, but it appears that Windows also does not have a readline module (which is used to do the tab completion and get user input). I tried a readline Windows alternative (http://newcenturycomputers.net/projects/readline.html), but tab completion does not work and it seems to hang when performing the msearch/pcap commands. You can try it out if you want, but until we find a decent readline alternative, you might want to use one of the shareware UPNP tools available for Windows. I haven’t used any of them, so I can’t vouch for them personally.

FYI, we have had reports that Miranda works fine in Mac OSX 10.

]]> Comment on Hacking the Routers: SOHO Router Security by clay http://www.sourcesec.com/2008/11/09/hacking-the-routers-soho-router-security/#comment-5 clay Fri, 14 Nov 2008 15:02:05 +0000 http://www.sourcesec.com/?p=43#comment-5 Great paper. I linked to it on my blog ( http://blog.techscrawl.com ). Keep up the good work. Great paper. I linked to it on my blog ( http://blog.techscrawl.com ). Keep up the good work.

]]> Comment on Miranda UPNP Administration Tool by hake http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/#comment-4 hake Fri, 14 Nov 2008 10:27:48 +0000 http://www.sourcesec.com/?p=25#comment-4 Thanks Craig. I will look out for your mods. Miranda looks like a most useful tool. The subject of UPNP security in routers is almost completely elusive. Hardly anyone knows anything about it. Raise the issue in forums and the result is silence. It will be fascinating to test my preferred router boxes (BT Voyager 2100 and Viking chipped Solwise SAR110 and SmartAX MT882) with your software. My present defence is based on blocking the IP address of the router (using Agnitum Outpost Firewall Pro and the associated BlockPost plugin) and extremely strong password. Thanks Craig. I will look out for your mods. Miranda looks like a most useful tool. The subject of UPNP security in routers is almost completely elusive. Hardly anyone knows anything about it. Raise the issue in forums and the result is silence.

It will be fascinating to test my preferred router boxes (BT Voyager 2100 and Viking chipped Solwise SAR110 and SmartAX MT882) with your software.

My present defence is based on blocking the IP address of the router (using Agnitum Outpost Firewall Pro and the associated BlockPost plugin) and extremely strong password.

]]> Comment on Miranda UPNP Administration Tool by craig http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/#comment-3 craig Fri, 14 Nov 2008 03:45:28 +0000 http://www.sourcesec.com/?p=25#comment-3 hake, I just tested Miranda out on a WinXP box. The IN module is not needed for Windows, so you could change the 'import IN,urllib,urllib2' line to read 'import urllib,urllib2'. However, Windows apparently doesn't have a readline module either (gah!), which Miranda uses for its command shell. I tried a "windows alternative" readline module, but it doesn't support tab completion correctly and seems to hang. We'll keep working on this and hopefully have something working in Windows by tomorrow; stay posted. hake,

I just tested Miranda out on a WinXP box. The IN module is not needed for Windows, so you could change the ‘import IN,urllib,urllib2′ line to read ‘import urllib,urllib2′. However, Windows apparently doesn’t have a readline module either (gah!), which Miranda uses for its command shell. I tried a “windows alternative” readline module, but it doesn’t support tab completion correctly and seems to hang.

We’ll keep working on this and hopefully have something working in Windows by tomorrow; stay posted.

]]> Comment on Miranda UPNP Administration Tool by hake http://www.sourcesec.com/2008/11/07/miranda-upnp-administration-tool/#comment-2 hake Thu, 13 Nov 2008 10:04:48 +0000 http://www.sourcesec.com/?p=25#comment-2 Anyone using Miranda under Windows XP? Miranda.py won't run because of unresolved references, e.g. IN. I installed ActivePython-2.5.2.2-win32-x86. Is there something in the Linux implementation that is missing in Windows? I'm not Python literate so perhaps I'm missing something. Miranda would be most useful to check router security for me and my friends who need UPNP enabled router operation for Live Messenger use. Anyone using Miranda under Windows XP? Miranda.py won’t run because of unresolved references, e.g. IN.

I installed ActivePython-2.5.2.2-win32-x86. Is there something in the Linux implementation that is missing in Windows? I’m not Python literate so perhaps I’m missing something.

Miranda would be most useful to check router security for me and my friends who need UPNP enabled router operation for Live Messenger use.

]]>