Switched to Openbox

Since some weeks i run parallel to Unity the lightwight window manager Openbox
( Homepage ).
Now i switched completely to Openbox. I have to say that i still love Unity but i prefer a lightwhight window manager without any unneeded stuff. The theme i current use looks great with my blog theme.

Current Setup:

Openbox theme: Laza
GTK theme: Laza

Panel / taskbar: tint2
Terminal emulator: Terminator
File manager: Thunar

2012-05-01-135953_1680x1050_scrot.png

Some Tools i prefer with Openbox apart from the 3 tools mentioned above:

obmenu: to edit the openbox menu with a simple gui.
LXAppearance: for changing the GTK Theme.
hsetroot: to set a wallpaper.

Ubuntu 12.04 LTS ( Precise Pengolin )

Today i upgraded my Ubuntu from 11.10 to 12.04 with Long Term Support using the Update Manager of Ubuntu. It took me around 2 hours to download and install everything. As far as i can see it was problem-free. Some people said upgrading Ubuntu works 99 times out of 100.

I hope they fixed some bugs i had with the old version.

As i read they improved the Unity-Desktop and removed Gnome-2 totally.
I don`t care i`m one of the people who love the new Unity-Desktop.
At the moment i don`t understand the new Head-Up Display ( HUD ) which should improve the Menu. I`m sure that i never ever use it.

Want to write some experiences later. ;)

After some hours usage of Ubuntu 12.04:

- the “system boot fail” error, i got every time i powered off my computer is fixed.
- the boot time is a little bit long in my eyes. ( didn`t stopped the time )
- the Launcher handling differs.
- i don`t use the HUD. ;)

Hide your Virtual Machine

Since i moved to Linux completely, i have to run the most of all Windows programs, i want to debug / reverse or look at, in a Virtual Machine. I prefer VMware. www.vmware.com

The half of the programs use techniques to detect Virtual Machines and stop working on it.

Here some settings, which “hide” you VM, simply write these to your .vmx file of your Virtual Machine.:

monitor_control.virtual_rdtsc = "false"
monitor_control.restrict_backdoor = "true"
isolation.tools.getPtrLocation.disable = "true"
isolation.tools.setPtrLocation.disable = "true"
isolation.tools.setVersion.disable = "true"
isolation.tools.getVersion.disable = "true"
monitor_control.disable_directexec = "true"

This runs great with Windows XP and works with the most of all techniques which come across.
The only thing i know is the current version of Themida created by Oreans Technology, where this tricks doesnt work.

Cracking passwords on Linux using GPU Bruteforce!

I know it is a known subject for the most of you, but i want show it to everyone.

As tool i prefer the Cryptohaze Multiforcer ( http://www.cryptohaz … .com/multiforcer.php ) which supports Windows, Linux, and MAC OS X as platforms. And is still under development, the latest version is 1.30.

Here is a result with the old 0.72 version and my 4 years old System.

eddie@Winston:~/CUDA-Multiforcer-Linux-0.72$ 
./CUDA-Multiforcer-32 --min 1 --max 6 
-h FASTMD5 -f test_hashes/Hashes-MD5-Full.txt 
-c charsets/charsetfile
Cryptohaze.com CUDA Multiforcer (multiple hash brute forcer)
by Bitweasil
Version 0.72, length 0-14
Currently supported hash types: MD5 FASTMD5 MD4 FASTMD4 NTLM 
FASTNTLM SHA1 FASTSHA1 
Hash type: FASTMD5
CUDA Device Information:
Device 0: "GeForce 9800 GTX/9800 GTX+"
  Number of cores:                               128
  Clock rate:                                    1.84 GHz
  Performance Number:                            29376
  Note: Performance number is clock in mhz * core count,
 for comparing devices.
Single charset loaded.
Loading & sorting hashes.  This may take a while.
Hashes loaded (14 hashes)
You may want to consider the FAST[hash] option if it exists.
Launching kernel for password length 1

------------------------------------------

Compute done: Reference time 0.0 seconds
Stepping rate: 0.0M MD4/s
Search rate: 0.5M NTLM/s

Launching kernel for password length 2

------------------------------------------

Compute done: Reference time 0.0 seconds
Stepping rate: 0.7M MD4/s
Search rate: 9.3M NTLM/s

Launching kernel for password length 3

FASTMD5:900150983CD24FB0D6963F7D28E17F72:abc:0x616263
FASTMD5:BAE60998FFE4923B131E3D6E4C19993E:bad:0x626164

------------------------------------------

Compute done: Reference time 0.0 seconds
Stepping rate: 34.6M MD4/s
Search rate: 484.7M NTLM/s

Launching kernel for password length 4

FASTMD5:07ABD0332476B39CB052C2A190FEAC5E:Bwah:0x42776168

------------------------------------------

Compute done: Reference time 0.0 seconds
Stepping rate: 293.3M MD4/s
Search rate: 4106.3M NTLM/s

Launching kernel for password length 5
Done: 4.09%  Step rate: 271.3M/s Search rate: 3798.9M/sec 
FASTMD5:03AA7BDDFE8612B37F2B122DA2843903:GPGPU:0x4750475055
Done: 75.45%  Step rate: 326.0M/s Search rate: 4564.0M/sec 

------------------------------------------

Compute done: Reference time 1.2 seconds
Stepping rate: 319.1M MD4/s
Search rate: 4467.8M NTLM/s

Launching kernel for password length 6
Done: 84.67%  Step rate: 297.1M/s Search rate: 4159.1M/sec 
FASTMD5:BB80167A30B8941FFA55B3C3B86BD2CE:nVidia:0x6e5669646961
Done: 99.26%  Step rate: 297.2M/s Search rate: 4160.9M/sec 

------------------------------------------

Compute done: Reference time 66.7 seconds
Stepping rate: 296.5M MD4/s
Search rate: 4150.5M NTLM/s

ELFcrypter - The first steps!

The first useful results, produced of my elfcrypter. ;)

Here the Codesection of my test Binary before the decryption routine of my Loader does his work.
encrypt.jpg

And here the result at runtime, after the decryption. Without Code Obfuscation.
decrypt.jpg

The non encrypted first byte, was my fault. But fixed. :p