For those that do not know, there exists two handy programs, Dynamips and Dynagen, that allow you to emulate certain Cisco routers using just the IOS file. Since the emulation is as the MIPS processor level, these programs are very useful for testing attacks against the routers themselves.

To install on Dynamips/Dynagen on Ubuntu, execute the following:
>sudo apt-get install dynamips

>sudo apt-get install dynagen

Next create the test.net file needed for dynagen:

[localhost]

[[7200]]

image =  CISCO IMAGE LOCATION... i.e. c7200-is-mz.124-25f.bin 

npe = npe-400

ram = 160

[[ROUTER R1]]

f0/0 = NIO_linux_eth:eth0

Just be sure to add the path to the bin file on the image line.
I created the following script to simply spawn a Dynamips subprocess and open Dynagen:


#!/usr/bin/python

import subprocess

import shlex

import time

import sys 

def executecmd(cmd):

args= shlex.split(cmd)

pcmd = subprocess.Popen(args) if(len(sys.argv) == 2 or 3):

if sys.argv[1].lower() == "start":

#starting dynamips and waiting 3 seconds

executecmd("sudo dynamips -H 7200 &")

time.sleep(3)

#starting dynagen and waiting 3 seconds

executecmd("sudo dynagen " + sys.argv[2])

time.sleep(3)

if sys.argv[1].lower() == "kill":

print "stopping processes"

#stopping dynamips and waiting 3 seconds

executecmd("killall -9 dynamips")

time.sleep(3)

#stopping dynagen and waiting 3 seconds

executecmd("killall -9 dynagen")

 else:

print "usage: sudo python" + sys.argv[0] + "<start <test.net file location>| kill>"

print "example: sudo python run_dynagen.py start /home/user1/test.net"


To telnet to the “console” of the router just execute the following through the linux command line:
>sudo telnet localhost 2000

All that’s left to do is program the router then you can access via telnet or attack through eth0.

 
Text Machine Ver1

I wanted a way to receive and display texts on a TV screen – like you see at conferences, concerts, sporting events, etc.  I found a “free” way  that uses Google Voice (you only need some web hosting that allows you to pipe emails to a php script).

Continue reading »

 
Backtrack 5 r1 Updater Script - New and Improved

The Backtrack 5 r1 Updater scripts have been updated View Original Post Here The scripts are now available on github Download the latest version via SVN svn checkout https://github.com/joethemachine/Backtrack-5-Updater   For a new BT5 install run the bt_post_install script (Only needs to be run once) Use the bt_update script to keep BT5 update to date. [More...]

 
Upload (exfil) through PHP

 You never know what kind of situation you are going to find yourself in during an engagement. I recently lucked out with a fully functioning GUI on a Windows machine in the customer’s internal network. The problems I ran into were application filtering on the client and extreme egress filtering on the border firewall. My [More...]

 
Man in the Middle...made easy

*Taken from Mallory Blackhat 2010 Presentation* Man in the middle attacks are nothing new, but a good portion of the time a new attack comes out it is only some theoretical attack with no tools to back it. I have been leaning on Ettercap pretty heavily the past couple engagements. The tool is extremely powerful, [More...]

 

Hi: I was on an assessment recently and had some time while running through network scan tools; so I had found an article recently talking about how to gather some immediate zone info if the name server is open. I decided to try this while waiting (mostly because I am impatient); I had to tweak [More...]

 
Cisco SNMP Config Copy Brute Force (with ACL bypass)

I am a big fan of snmpblow.pl on network penetration tests, but recently had an experience where this tool did not work because the router was using the newer newer Cisco MIB.   The following script implements the same functionality using Python and SCAPY.  This should run on a standard Backtrack5 install.  It uses the new [More...]

 

The DARPA Cyber Colloquium will investigate future techniques and technologies for securing the Nations cyber infrastructure and assuring DoD’s cyber capabilities This conference was broken into 3 parts:  Presentations by Gov. Leaders, Presentations by Industry Leaders, and Presentations on DARPA Cyber Programs.   Below are my summaries for each part of the conference and a conclusion [More...]

 
Backtrack 5 r1 Updater Script

Lately it seems that I am installing a new copy of backtrack a lot lately. Each time I need to dig up old notes to add the little tweaks and addons I need, but I always miss something.  I needed a way of updating backtrack after a new install and then keep backtrack up to [More...]

 
My DIACAP Diatribe (5 reasons I think the process is failing)

A recent article on CNN (http://www.cnn.com/2011/10/10/us/drone-program-virus/index.html?iref=allsearch) about another UAV attack got me thinking. Why to we keep seeing this stuff in the news? I mean its the DoD right? If anyone has super kung fu secure software it should be these guys. The armed forces get all the coolest toys. They literally have the technology [More...]

© 2012 Rocket City Hackers Suffusion theme by Sayontan Sinha