New tools help hack into iPhone

By Robert McMillan

New tools help hack into iPhone

HD Moore, one of the developers of the Metasploit hacking software, is supporting the iPhone within the Metasploit framework and providing tools to run 'shellcode' prompts

iPhone hackers have some new tools now, thanks to HD Moore, one of the developers of the Metasploit hacking software.

On Tuesday, Moore announced that he was supporting the iPhone within his Metasploit framework and released software that would allow hackers to run "shellcode" command prompts on Apple's mobile device.

By integrating the iPhone into Metasploit, it will now be a little easier for hackers to gain access to someone else's iPhone, but they will also need a few other tools to succeed. First, they will need to create working exploit code, which takes advantage of bugs in Apple's software, to trick the device into running the shellcode. They will also need to create more sophisticated "payload" applications that can do things like remotely connect with the hacker. "It's a first step," Moore said of his hack.

With iPhone prices dropping and noticeable improvements in the quality of iPhone hacking tools, Apple's phone has become a more interesting target of late, Moore said.

And the iPhone has obviously hit a nerve in the security community. Moore said that about a quarter of the attendees at the recent Black Hat conference in Las Vegas had the devices. "It's trendy," he said. "It kind of creeped me out when I saw how many people had iPhones when I went to Vegas."

In fact, hackers have already developed a number of exploits that they claim could be used on the iPhone's Safari browser.

And security researchers have even demonstrated how the iPhone can be compromised. In July, a Baltimore, Maryland, company called Independent Security Evaluators showed how it could run unauthorized software on an iPhone by taking advantage of a Safari bug.

Moore believes that the iPhone's browser and mail client will be the best sources of bugs and he said that because of the components and information stored on the phone, it may end up being a more attractive target than the PC.

For example, the phone could be used to track someone's location based on information from cell phone towers. Throw in the iPhone's microphone, camera, and an Internet connection, and you suddenly have a device that could be used to secretly keep tabs on people, Moore said. "If you look at what you get by exploiting someone's iPhone, you actually get a lot more than you do from someone's PC a lot of the time," he said.

Read More

Hacks let the iPhone roam

George Hotz, a 17-year-old resident of Glen Rock, NJ, announced on his blog on Thursday that he had found a way -- with the judicious use of a soldering iron and tools to erase and rewrite the firmware -- to unlock the iPhone. Hotz outlined the steps on his blog and is selling the phone on eBay.

"I'm sorry about how hard they are to follow, but someone will get them to work, and simplify them, and simplify them more," he said of the ten steps his method requires to unlock the phone. "Hopefully a software unlock will be found in the near future."

Unknown to Hotz, that's exactly what has happened. A group calling itself IPhoneSimFree has claimed to have unlocked the iPhone just via software -- a claim that has been verified by mobile-device news site Engadget. By unlocking the phone, the group claims that any provider can be used in any country.

Read More

Video - Strom Site

F-secure was make nice video about Strom Site.

The Zhelatin/Storm Gang has been very busy lately. Their spamming tactics have changed from sending an attachment to sending a link that directs recipients to an IP Address. The HTML used by their sites is variable, and also differs depending on the browser.

The video is available via F-secure YouTube Channel.

Read More

Tips to Unlock iPhone

Sassha (senior member at Hackintosh forums from Croatia) claims have successfully managed to "unlock" the iPhone by using a variety of detailed steps to trick the iPhone into using a non-AT&T SIM card.

You will need :

1. iPhone
2. SIM Reader/Writer
3. SilverCard
4. V1 SIM card
5. Download - http://simemu.gsmhosting.net/SIM_EMU_6.01_CFG_v2.1.zip
6. Download - http://www.kinforce.com/down/kinforc...rsim/ws109.zip

Warning! Proceed at your own risk! Your provider can block your subscription!

For detail tips you can read here

Read More

FBI tracked 'teen bomber' using spyware

FBI agents trying to track down an anonymous MySpace user who was threatening to blow up a school used spyware to trap him.

Fifteen year-old student Josh Glazebrook had the surveillance software sent to him by government agents after he threatened Timberline High School near Seattle.

According to an affidavit obtained by Wired News, FBI agent Norman Sanders described the software as a "computer and internet protocol address verifier".

The spyware program, which is known as CIPAV, logs the following:

• The computer's IP address
  
• The MAC address
  
• The person's username
  
• The last URL visited
  
• A list of open ports
  
• Computer programs that are running
  
• The operating system
  
• The internet browser and version
  
• The computer's registered owner
  
• The IP address of every other computer to which the PC connects for up to 60 days

"We have not seen any evidence that this practice is becoming commonplace, but there have been occasions when the crime-fighting authorities have used malware to their advantage," Cluley told vnunet.com.

"Way back in 2001 we wrote of our concerns about the FBI running a project called Magic Lantern which was designed to do just this."

Cluley explained that people supporting the use of spyware to monitor possible criminal behaviour often compared it to tapping a suspect's phone line.

"However, there is a difference between tapping a phone line and installing malicious code on a user's computer," he said.

"Malicious code on a user's computer can be copied, archived, adapted and potentially used by people who do not work for the authorities to spy on completely innocent victims."

Glazebrook pleaded guilty to felony harassment, making bomb threats and identity theft earlier this week.

Source

Read More

Iphone Hacking with Command

The iPhone is a multimedia and Internet-enabled quad-band GSM EDGE-supported mobile phone designed and sold by Apple Inc.

The iPhone's functions include those of a camera phone and a multimedia player. It also offers Internet services including e-mail, text messaging, web browsing, Visual Voicemail, and local Wi-Fi connectivity. User input is accomplished via a multi-touch screen with virtual keyboard and buttons. Apple has filed more than 200 patents related to the technology behind the iPhone.

but last info from Hackint0sh.org forum some clever hacker can hack this iPhone with they enable the serial debugging/shell mode on the device. Click here to see what kind command can using it.

Read More

Windows Media DRM Cracked, Again

The cat-and-mouse game continues between Microsoft and a group of hackers intent on breaking the copy protection technology on its Windows Media files. This time, an individual has cracked the latest DRM scheme employed by Microsoft.


The back and forth began last August when a Doom9 forum user by the name of "viodentia" released a program called FairUse4WM. The application was able to strip the copyright protection from both audio and video files, removing restrictions of where and when they could be played. Windows Media files could also then be converted into other formats as well.

Read the Full story here

Read More

How To Hack Yahoo mail

Beberapa waktu yang lalu pihak Websense® Security LabsTM menerima laporan adanya serangan hacker terhadap pelanggan Yahoo! (phishing attack ) dimana users menerima pesan dari Yahoo! Instant Messenger(YM), yang mengajak users untuk mengclik website mereka.

Setelah di click , users akan di alihkan ke website lain yang hostingnya berada di United State (USA). Website ini menampilkan tampilan sharing photo di Yahoo yang membutuhkan nama user dan password untuk mengakses website itu. Sekali diisi nama dan password , maka user akan mendapat pesan error bahwa alamat email yang dimasukin tidak cocok. Disaat yang bersamaan informasi account user sudah terkirim ke websitenya hacker ini. berhati-hatilah terhadap trik ini. Jangan mudah percaya dengan informasi yang meminta login email anda dan perhatikan alamat url dari website yang di akses

Tampilan gambar website hacker itu :

Read More

Server HP ML-350 tidak support Novell Netware ???

Selama seminggu belakangan ini gue berkutat dengan trouble instalasi server baru dengan merk HP type ML-350 G4P , dimana server merk baru ini tidak mensupport OS Novell Netware 5.1 lagi. Waktu beli server baru ini diwebsitenya emang menyatakan support novell netware tanpa menyatakan versi mana yang di supportnya karena gue pikir pengalaman sebelumnya install di server type ML-370 yang lebih tinggi speknya aja masih mendukung Novell Netware 5.1 jadi ngga kuatir ga support lah ( * sok pede aja *)

Setelah server tiba langsung aku coba install dengan CD Smart Start versi 7.40 untuk create partisi DOS dan dilanjutin dengan pemilihan OS yang mau di pakai. Begitu di klik ... alamakkkkk ... sudah tidak ada pilihan untuk Novell versi 5.1 , 6.0 , atau 6.5 melainkan versi Overlay CD yang diijinkan untuk di install itupun harus dengan upgrade tertentu ke websitenya. Bingung juga jadinya ... aku coba akalin dengan bypass smartstart CD dan langsung insert CD Novell 5.1
dan coba di install langsung dari CD. Hasilnya ... gatot kaca ( Gagal Total Kacau balau ) ... baru install aja udah ada warning Auto Restart Abbend has selected alias server akan otomatis restart dalam 2 menit ... wah masa server baru aja udah penyakitan gini pikirku ... begitu dicoba lagi setelah restart installasi kembali gagal dan load ke modul temporary ... pusing deh jadinya.


Berbagai cara di coba untuk bisa menginstall server baru ini mulai dari dari cari keterangan di website , cek versi BIOS yang beredar di website supportnya HP , kontek ke teknikal support toko penjual dan ke agen resmi sampai keliling ke mall THR ( mall khusus penjualan software dan hardware komputer terbesar di surabaya ) untuk menanyai setiap teknisi dan semuanya tidak ada yang sanggup menghandle kasus seperti ini sampai akhirnya oleh salah satu teknisi resmi ( partner nya HP ) di sarankan agar menurunkan versi BIOS kembali ke versi sebelumnya dan itu pun gagal juga .. duh buntu deh .. kontek ke jakarta minta bantuan teman untuk hubungi service centre HP di jakarta pun hasilnya sia-sia karena dijawab memang type Server ML-350 G4P ini tidak support dengan novell netware lagi ... nah loh ... kok bisa ???

Setelah putus asa dengan Novell 5.1 aku coba akalin dengan novell versi 6.0 dan 6.5 dan hasilnya tetap tidak bisa di install juga. Kepala udah mulai nyut-nyutan apalagi setelah di hubungi ke pihak penjual mereka tidak bersedia menukar server dengan alasan berbagai macam. Untung saja itu server masih kita pending pembayarannya karena di janjikan akan bayar dalam 1 minggu.

Setelah waktu yang di janjikan sudah lewat, dengan gampangnya pihak penjual menagih pembayaran dan tidak memberikan pelayanan support seperti menanyakan apakah sudah berhasil di install atau belum ? apakah ada kesulitan teknis atau apa ... eh malah langsung menodong pembayaran ... sekalian aja gue kerjain ... mundurin pembayaran 16 jutaan dengan ancaman kalo ga bisa juga di install akan tetap kita tukar server type lain kalo ga mau angkut saja itu server kembali ... wakakaka ... gelo juga tuh kalo di inget-inget ( galakan gue dibanding yang jual ... hehehe )

Kendala baru pun Menghadang setelah di cek semua versi Server HP ternyata sudah tidak ada satupun lagi yang support novell netware 5.1 ... wah abis sudah harapan untuk tukar server ...

Setelah kontek ke teman untuk datang membantu install server bandel ini , kita pun berlembur ria dari pagi sampai ketemu pagi lagi tanpa istirahat ... saking penasarannya dan ngga percaya kok bisa terjadi hal seperti ini ... tetapi selalu saja ada kendala yang menhadang mulai dari error aneh-aneh yang tidak pernah di jumpai sebelumnya sampai kasus sudah di format data tetapi data tetap ada tanpa terformat .. nah aneh khan ... ( loe orang pasti bingung ... apalagi gue .. wakaakaka ... hidup bingung ... )

Singkat cerita kita menggunakan system kanibal yaitu mencoba mencopykan CD installer ke server lokal dan di coba trik dengan mencampur file-file yang ada di novell 5.0 , 5.1 , 6.0 dan 6.5 bahkan Service pack versi 8 untuk novell 5 ... komplit deh berbagai rumusan di trik sepanjang malam itu ... akhirnya setelah subuh , gue sarapan dulu ke warung depan dan ngopi dulu sejenak sambil melepas kepenatan tubuh ini. Selepas 2 batang rokok aku lanjutkan kembali dengan mencoba mempelajarin system bagaimana caranya installer bekerja di dalam Autorun CD dan membongkar source nya ... akhirnya beberapa file aku kanibal dari versi 6.5 dan 6.0 selebihnya aku memakai data installer 5.1 + SP 8 ... dan sim salabim ... server udah mau di install.


Seakan ga percaya ... gue kucek-kucek mata apa ini bukan mimpi ??? tetapi nyata emang bahwa serverku udah selesai dan sudah siap di pakai .


senyum kemenangan pun muncul di bibir dan setelah itu jepret sana jepret sini untuk dokumentasi akhirnya aku hanya bisa berteriak 'aku menang lagi' ... 'aku berhasil lagi' ...

Sungguh suatu kebanggaan tersendiri berhasil membuktikan bahwa tiada yang mustahil di dunia IT ini.

Read More