Hotspotter – Automatic wireless client penetration

Dizzel — Thu, 07 Jan 2010 15:48:06 +0000

About:
Hotspotter passively monitors the network for probe request frames to identify the preferred networks of Windows XP clients, and will compare it to a supplied list of common hotspot network names. If the probed network name matches a common hotspot name, Hotspotter will act as an access point to allow the client to authenticate and associate. Once associated, Hotspotter can be configured to run a command, possibly a script to kick off a DHCP daemon and other scanning against the new victim.

History:
During a wireless assessment some time ago, I discovered a strange characteristic of the Microsoft Windows XP wireless client. It was possible to bring the client from a secure EAP/TLS network to an insecure one without any warnings from the operating system.

I discovered this was due to the configuration of multiple wireless profiles. One profile was established for the EAP/TLS network, and a second for the “ANY” network, using an empty network name (SSID). To evaluate this configuration, I established my own access point using the same SSID as the EAP/TLS network, without the privacy bit set (no encryption). Due to the configuration of the Windows XP client, I was able to force the client to switch to my network with a single deauthenticate frame; at which point the client reconnected to my “rogue” access point.

The victim station did not receive a warning from the operating system to indicate they left their production network, only a small indicator for temporary wireless signal. With this attack, I was able to force a client to leave their secure wireless network and reconnect to my rogue network, albeit at a loss of network connectivity. This allowed me to evaluate the host-based security of the victim host, without the protection of the EAP/TLS network. This behaviour seems to be fixed in Windows XP Service Pack 1.

I was unable to locate any documentation in the Microsoft Knowledge Base that indicated the resolution of this flaw, but there is a remaining vulnerability that can also be exploited based configured wireless profiles. A Windows XP client will probe for all the preferred network names listed in the wireless client configuration during startup, powersave-wakeup and when the driver reports signal loss for the current network name. Many coporate wireless users configure Windows XP with a business profile (secure network profile) and several other network names including commercial hotspots and home networks (insecure network profiles). Due to this configuration, it is possible to force a client to disclose the list of configured profiles, and then establish a connection to a rogue network using one of the preferred network names.

Depending on the configuration of the wireless client, the client will display a bubble message indicating it has joined a different wireless network name. Once the target associates to the rogue network, it is possible to interact with the client directly. This may include port scanning the victim, exploiting Windows-based vulnerabilities or simulating an otherwise “real” network using faked services and intercepted DNS queries. Note that the Apple OS X client exhibits similar behaviour, although it has not been thoroughly tested at this time.

CLICK “READ MORE” TO REGISTER FREE & DOWNLOAD FREE (you CAN put FAKE info in the registration feilds other then your EMAIL) ———–>

Please Login or Register to see the link.

Tune Up Utilities 2009 8.0.3300.1

Dizzel — Fri, 30 Oct 2009 04:19:06 +0000

The complete tuning solution for your PCWith TuneUp Utilities, your system will be faster, more comfortable and more secure. All important aspects of system configuration, security, cleanup and maintenance can be accessed through a modern graphical interfaceTuneUp Utilities will optimize the performance of your PC, solve problems and help you easily customize your computer to suit your needs.TuneUp Utilities helps both beginners and experts to make Windows meet their needs in a way that is better, easier and safer. All important system options are explained in an easy way and can be turned on or off at the click of your mouse. TuneUp Utilities will then make the necessary changes in the registry or boot files automatically. We place a high value on system stability, so that Windows won’t stop working reliably. And most changes that you make can be undone in TuneUp Rescue Center – easily and safely.

TuneUp Utilities also gives you many more options. In addition to helping you make Windows “better looking”, you can also clean up and optimize your system at the click of a mouse. TuneUp Utilities 2008 will clean up unnecessary data from your hard disk and remove unnecessary entries from your registry. It can defragment your hard disk and registry and optimize your system settings to make Windows run substantially faster. Most of this maintenance is performed automatically every week by TuneUp 1-Click Maintenance

When making these changes, TuneUp Utilities reaches deep into the Windows system. However, Windows has changed a great deal from version to version. Because of this, the software automatically recognizes and adapts to each supported version of Windows. This is done automatically so that you, the user, won’t have to re-learn the software for each operating system version.

Here are some key features of “TuneUp Utilities 2009″:

TuneUp Start page:

· Intuitive Layout, Easy to Use
· Provides quick and easy access to the most critical optimization functions
· A single yet comprehensive appraisal of your PC’s current performance and overall system health

TuneUp Speed Optimizer:

· Intelligent, Powerful Utility for any User Skill Level
· Easy optimization in just a few clicks
· Identifies unused programs and resource-draining functions
· Recommends tools for optimal PC performance

TuneUp 1-Click Maintenance:

· Automatic, Fast Optimization
· Enables one-click maintenance of the most important functions of your PC
· Cleans the Windows registry
· Deletes temporary files and folders
· Increases the system performance through integrated defragmentation
· Streamlines your desktop and simplifies folder shortcuts with one click

TuneUp Drive Defrag:

· Intelligent defragmentation with new progress display

TuneUp System Control:

· Supports Opera

Tune Up Uninstall Manager:
· Intuitive uninstall options

Tune Up Startup Manager:

· Increases the speed at the start-up of your PC

Tune Up Registry Cleaner:
· More powerful tool with in-depth view of your PC registry

CLICK “READ MORE” TO REGISTER & DOWNLOAD (you dont need to put your real info other then your email on the registration form) ———–>

http://hotfile.com/dl/15218031/b03cb67/TuneUp_Utilities_2009_8.0.3300.1.rar.html

Welcome to DizzeL DOT Org » Automatic

Hotspotter – Automatic wireless client penetration

Tune Up Utilities 2009 8.0.3300.1