November 2009

Wireless DoS Attacks Presentation

Attached is a presentation which goes into a large overview of various 802.11 DoS attack conditions. This is not a step-by-step guide, and is merely to inspire discussion into the attack vectors. Please note the original sources from this presentation which will provide you very detailed information about the attacks. This is especially true for the RTS/CTS attacks, for an excellent step-by-step guide, this book is definitely worth it. Wireless Hacking Exposed

802.11 DoS Attacks Presentation

Network Penetration

Comments (0)

Permalink

Free Ringtones on Droid (Android 2.0)

There are many applications out there to help you create the perfect ring tone from mp3’s already on your phone but that takes a little too much effort. In addition, you can use free tools to clip your sounds and simply copy them to your Android phone via USB cable. All these alternatives are easy but can take too much time.

Mabilo Ringtone is a free application on the marketplace that is very quick to download. You can download all the ring tones you want. The good part is the files on the application are updated daily by a user base of over 30,000 users. You can download the tones, set them specifically to certain callers. However, If you phone crashes for some reason or you feel you need to uninstall the application, all the ringers go with it.

Follow these easy steps to take those downloaded ringtones and place them in a more secure location.

  1. Plug in your usb cable to the phone and computer.
  2. On your phone, initiate the USB connection
  3. On the computer, navigate to your phone’s SD card drive and find the folder named ” com -> mabilo”
  4. Copy your ring tones in that folder to the directory “media -> audio -> ringtones” (NOTE: be sure to leave the tmp_preview file in the mabilo directory”

That is it! Now you can stream and download new ringtones as they are released and back them up so you never lose them. You can also download a free file explorer utility and do all this from your phone, instead of hooking it up to the usb cable.

Android
HowTos

Comments (1)

Permalink

Restrict AD users from Certain Domain Machines in Server 2003

This guide is mainly helpful for when you need to lock down a computer using GPO’s and Active Directory. The situation here is a group of users which need to be locked down to the bare minimum usability features. In addition, the computers in which these users sign on are in highly sensitive areas, requiring only certain user’s access to log in.  For example: You have 10 computers in an area in which you only want certain lucked down accounts access to log in. If an account is compromised that has greater privileges such as a more powerful user, they will not be able to log into the restricted machines.

  • Create an Organizational Unit which holds all of the machines that need to be restricted. Mine is named ‘Lockdown Computers’
  • Create a GPO and link it to the ‘Lockdown Computers’ OU.  This can be done by right clicking OU in Group Policy Management and selecting “Create and Link a GPO Here….”
  • Right click on the newly created GPO and select “Edit…..”
  • Under Computer Configuration, navigate to  Windows Settings –> Security Settings –> Local Policies –>User Rights Assignment
  • In the Right Pane, find the policy that says “Allow Log on Locally” and “Allow Log on Through Terminal Services”
  • In each Policy, under the “Security Policy Setting” tab, click on Add User or Group.
  • The easiest method is to create a user group in Active Directory which contains the users you want to be able to log into the given machine. It usually is best to only select the accounts which will be working on the computer in the future, as well as the limited user log in. In addition, for both the policies, the Administrators group for the Domain Controller must be selected. Be careful which users  you select, you do not want to lock yourself out of a machine completely.
  • Close out the Group Policy Editor, and navigate to the GPO which was just edited.
  • Right click the GPO, and select “Enable”
  • Next, open a command prompt on the server and enter “gpupdate /force”

HowTos
Operating Systems
Windows

Comments (1)

Permalink