Friday, 1 January 2021
23:56
Tuesday, 22 September 2020
perPage: 7,
While in lockdown, I've visited a number of places throughout history without leaving the slight discomfort of my cheap gaming chair. From Ancient Rome to China's Garden of Perfect Brightness, the virtual holidays are a perfect way to satisfy any unrequited wanderlust. Recently, I travelled to Versailles circa 1685 thanks to a little game by Cryo Interactive Entertainment.
Read more »
23:03
LAD TV
No comments
While in lockdown, I've visited a number of places throughout history without leaving the slight discomfort of my cheap gaming chair. From Ancient Rome to China's Garden of Perfect Brightness, the virtual holidays are a perfect way to satisfy any unrequited wanderlust. Recently, I travelled to Versailles circa 1685 thanks to a little game by Cryo Interactive Entertainment.
Read more »
Saturday, 12 September 2020
perPage: 7,
Well, is this the end? Short answer - no, of course not.
But it sure does look like shit has gone crazy! What the actual fuck is happening? Is 2020 the worst year we've had this century, maybe in the last 50 years? Quite possibly.
For those looking for my thoughts on the matter at hand, watch the video below. I pretty much agree with everything Ben Shapiro said.
Now, more than ever, it's important to escape from the everyday gloom and doom. That's what RPGs are for - pretending you're an elf wizard, half-orc barbarian, or human thief exploring the places no sane man has any right to be. Without D&D (and similar RPGs), we'd have even less.
On that note, my stock of Cha'alt hardcovers is dwindling. If you want yours before the follow-up, Cha'alt: Fuchsia Malaise, comes out, now's your chance! Details over here.
Stay safe out there, hoss. That comes direct from the Duke of the OSR!
I actually had some gaming content to put up on the old blog, but the state of the world (ok, mostly just America) is too fucked up for that right now. You'll see it in a couple days.
VS
- 18:26
- LAD TV
- No comments
Well, is this the end? Short answer - no, of course not.
But it sure does look like shit has gone crazy! What the actual fuck is happening? Is 2020 the worst year we've had this century, maybe in the last 50 years? Quite possibly.
For those looking for my thoughts on the matter at hand, watch the video below. I pretty much agree with everything Ben Shapiro said.
Now, more than ever, it's important to escape from the everyday gloom and doom. That's what RPGs are for - pretending you're an elf wizard, half-orc barbarian, or human thief exploring the places no sane man has any right to be. Without D&D (and similar RPGs), we'd have even less.
On that note, my stock of Cha'alt hardcovers is dwindling. If you want yours before the follow-up, Cha'alt: Fuchsia Malaise, comes out, now's your chance! Details over here.
Stay safe out there, hoss. That comes direct from the Duke of the OSR!
I actually had some gaming content to put up on the old blog, but the state of the world (ok, mostly just America) is too fucked up for that right now. You'll see it in a couple days.
VS
perPage: 7,
This week on Super Adventures, it's the legendary LucasArts classic, Full Throttle! Remastered!
It seemed like a good time for me to get around to this one, with the original game's 25th anniversary being just around the corner. It came out on April 20th so I'm a month early, but Super Adventures is taking a break during April (and May) so I'm playing it now.
I've played the classic Full Throttle before, in fact I've beaten the game, but I've forgotten almost everything about it since then. I'm fairly sure I used a guide to get through it, but that doesn't necessarily mean anything. I used guides all the time back then, because assumed I wouldn't make it though a game without them.
I do know one thing about the game though: it actually sold pretty well, better than any LucasArts adventure that came before it (but maybe not as well as The Dig), which the company appreciated as it also cost a fortune (though maybe not as much as The Dig). It's possible that all the expensive CD-filling cutscenes were the reason the game was such a big hit for them, though some have theorised it was actually because it had a big explosion on the box art.
Okay, I don't usually do SPOILER warnings on Super Adventures, but I'm going to play through the first third of the game and spoil a big chunk of the puzzles and story, so you might not want to read this if you haven't played through it before.
Read on »
- 17:19
- LAD TV
- No comments
| Remastered - | Developer: | Double Fine | | | Release Date: | 2017 | | | Systems: | Win, PS4, PS Vita |
| Original Game - | Developer: | LucasArts | | | Release Date: | 1995 | | | Systems: | MS-DOS, Win & Mac OS |
This week on Super Adventures, it's the legendary LucasArts classic, Full Throttle! Remastered!
It seemed like a good time for me to get around to this one, with the original game's 25th anniversary being just around the corner. It came out on April 20th so I'm a month early, but Super Adventures is taking a break during April (and May) so I'm playing it now.
I've played the classic Full Throttle before, in fact I've beaten the game, but I've forgotten almost everything about it since then. I'm fairly sure I used a guide to get through it, but that doesn't necessarily mean anything. I used guides all the time back then, because assumed I wouldn't make it though a game without them.
I do know one thing about the game though: it actually sold pretty well, better than any LucasArts adventure that came before it (but maybe not as well as The Dig), which the company appreciated as it also cost a fortune (though maybe not as much as The Dig). It's possible that all the expensive CD-filling cutscenes were the reason the game was such a big hit for them, though some have theorised it was actually because it had a big explosion on the box art.
Okay, I don't usually do SPOILER warnings on Super Adventures, but I'm going to play through the first third of the game and spoil a big chunk of the puzzles and story, so you might not want to read this if you haven't played through it before.
Read on »
Friday, 4 September 2020
perPage: 7,
Title: Shantae and the Seven Sirens
Developer: WayForward
Publisher: WayForward
Genre: adventure, platformer, metroidvania
Number of Players: 1
Platform: Nintendo Switch
Release Date: 28 May 2020
Price: $29.99
Also Available On: iOS, Steam, PS4, XB1
Shantae and the Seven Sirens is the newest adventure of the beloved half-genie. I have only played one other game on the series, Shantae and the Pirate's Curse on the 3DS and I love that game and I expected to love this game as well. And I did. In fact, I think this is one of the best games I have played this year. Let me tell you why.
This game, like the previous games on the series, is of the metroidvania variety, my favorite video game genre as I have mentioned several times on my past reviews. The usual tropes of metroidvania games – exploring interconnected areas, gradual unlocking of abilities, platforming, etc. – are all here, and this game uses these tropes very well.
You play as Shantae, and on this game, she and her usual crew are on vacation in an island to attend the half-genie festival. Shantae along with five other half-genies are set to perform a musical number at the beginning of the festival when tragedy strikes: all of the half-genies, except for Shantae, got kidnapped as their performance begins, and Shantae begins her adventure to free her friends from the clasps of seemingly evil sirens who reside below the island. As you free the other half-genies one by one, they get to lend their abilities to Shantae which makes her transform into different animals, with abilities such as dashing, climbing walls, digging through soil, breaking rocks, swimming, and double jumping. These abilities open up the map gradually as you are able to expore more areas and unlock shortcuts to connect them together, making further exploration and backtracking easier. The game also has warp rooms that make traversing the map much less tedious, as you will be required to go from one end of the map to the other more and more as you progress into the game.
Aside from abilities, you also get to learn dances that act like magic skills. These dances are also learned from the other genie, but you will be required to present them Fusion Stones which you will have to search somewhere in the map. You will be given a clue on where you may find them then it is up to you on how to achieve that. Obtaining most of these Fusion Stones involve sub-quests from other NPCs, which are mostly fetch quests, some will even mark them on the map. Once you solve their sub-quests, you get the Fusion Stones, give it to the half-genie that required them, and you learn their dance. These further unlock areas and treasures and can even be used as wide area attacks that hit all enemies visible on the screen.
If the abilities and dances are still not enough for you, there are also the monster cards that defeated monsters would occasionally drop. These monster cards can be equipped and will give Shantae added buffs, like stonger attacks, faster dash, etc. You can mix and match depending on what you need or your play style. There is a wide variety of enemies in the game and this is a good incentive to defeat every enemy that you face. Defeating enemies doesn't earn you XP, but you get plenty of gems, and with these gems, you can buy upgrades, such as additional weaponry (which themselves can be upgraded to stronger ones) and stronger and faster attacks, in the form of Shantae's long hair. You can also search for and collect heart squids, which can then upgrade your HP. Similar to the Zelda series, you will need four of these to form one new heart container (you have to visit an NPC to do this for you). These heart squids are mostly hidden and often will require you to have already obtained specific abilites to get to them. They are not marked on the map, unfortunately, so you will have to remember where they are so that you can get back to them once you already have the required ability.
The map is divided into different sections which you will unlock the more you explore. With more and more abilities at your disposal, you wil soon find yourself doing more backtracking and having to go from one section to a farther one. Again, the warp rooms can make it easier for you to do this, but if you want to obtain more gems and monster cards, you may want to not use them.
Within some of these map sections lie labyrinths, which act as dungeons. Here, you will encounter lots of enemies, solve some area puzzles, encounter Risky Boots (Shantae's perennial nemesis and act as a mini-boss), and go head to head with sirens: the big baddies of the game. These sirens are huge and have interesting attack patterns and character design, but they are not particularly hard to fight. Their attacks are well-telegraphed and you will easily figure out their patterns. The fight may get finished soon, but you'll have fun the entire time. Upon defeating a boss, the chapter ends and a new one begins. You take your acquired gems to the shop, upgrade your weapons and attacks, and off you go again to explore further to solve the mysteries surrounding the island.
The more you get stronger, the more fun it is to defeat the monsters, and thus, making exploring better. Previously unreachable areas will be eventually reachable, and it is such a good feeling to accomplish that, especially in this game. It may only take you around 10 hours to complete the entire game on your first playthrough, but it is well-paced and very little downtime in action and story elements. There is a New Game+, with Shantae having more magic but less defense. A bit lame, but it could be an extra challenge. If you need more challenge, there are achievements to aim for, such as being able to complete the game on any % items, complete the game with 100%, complete the game at high speed, and complete the game on New Game+. You may need to play the game at least 2 more times to unlock all achievements in the game. You only unlock win screens, though, but that is better than nothing.
Overall, Shantae and the Seven Sirens is one excellent entry to the series. I think Pirate's Curse is a bit better and I did enjoy that game more, but this game is a close second. I should play the other games, to really see which game is the best in the series. Anyway, this game has amazing visuals, cood character design and animation, and solid 60fps framerate mostly throughout the game. Add to that the excellent soundtrack full of catchy tunes that make playing the game even more enjoyable. So if you are a fan of this adorable half-genie, do yourself a favor and go through another big adventure with her. Even if you are not, I'm pretty sure you will enjoy the game, as I did, and this may be one of the best games that you will play this year.
REPLAY VALUE: Very high
PROS
- 00:18
- LAD TV
- No comments
Written by Patrick Orquia
Title: Shantae and the Seven Sirens
Developer: WayForward
Publisher: WayForward
Genre: adventure, platformer, metroidvania
Number of Players: 1
Platform: Nintendo Switch
Release Date: 28 May 2020
Price: $29.99
Also Available On: iOS, Steam, PS4, XB1
Shantae and the Seven Sirens is the newest adventure of the beloved half-genie. I have only played one other game on the series, Shantae and the Pirate's Curse on the 3DS and I love that game and I expected to love this game as well. And I did. In fact, I think this is one of the best games I have played this year. Let me tell you why.
This game, like the previous games on the series, is of the metroidvania variety, my favorite video game genre as I have mentioned several times on my past reviews. The usual tropes of metroidvania games – exploring interconnected areas, gradual unlocking of abilities, platforming, etc. – are all here, and this game uses these tropes very well.
You play as Shantae, and on this game, she and her usual crew are on vacation in an island to attend the half-genie festival. Shantae along with five other half-genies are set to perform a musical number at the beginning of the festival when tragedy strikes: all of the half-genies, except for Shantae, got kidnapped as their performance begins, and Shantae begins her adventure to free her friends from the clasps of seemingly evil sirens who reside below the island. As you free the other half-genies one by one, they get to lend their abilities to Shantae which makes her transform into different animals, with abilities such as dashing, climbing walls, digging through soil, breaking rocks, swimming, and double jumping. These abilities open up the map gradually as you are able to expore more areas and unlock shortcuts to connect them together, making further exploration and backtracking easier. The game also has warp rooms that make traversing the map much less tedious, as you will be required to go from one end of the map to the other more and more as you progress into the game.
Aside from abilities, you also get to learn dances that act like magic skills. These dances are also learned from the other genie, but you will be required to present them Fusion Stones which you will have to search somewhere in the map. You will be given a clue on where you may find them then it is up to you on how to achieve that. Obtaining most of these Fusion Stones involve sub-quests from other NPCs, which are mostly fetch quests, some will even mark them on the map. Once you solve their sub-quests, you get the Fusion Stones, give it to the half-genie that required them, and you learn their dance. These further unlock areas and treasures and can even be used as wide area attacks that hit all enemies visible on the screen.
If the abilities and dances are still not enough for you, there are also the monster cards that defeated monsters would occasionally drop. These monster cards can be equipped and will give Shantae added buffs, like stonger attacks, faster dash, etc. You can mix and match depending on what you need or your play style. There is a wide variety of enemies in the game and this is a good incentive to defeat every enemy that you face. Defeating enemies doesn't earn you XP, but you get plenty of gems, and with these gems, you can buy upgrades, such as additional weaponry (which themselves can be upgraded to stronger ones) and stronger and faster attacks, in the form of Shantae's long hair. You can also search for and collect heart squids, which can then upgrade your HP. Similar to the Zelda series, you will need four of these to form one new heart container (you have to visit an NPC to do this for you). These heart squids are mostly hidden and often will require you to have already obtained specific abilites to get to them. They are not marked on the map, unfortunately, so you will have to remember where they are so that you can get back to them once you already have the required ability.
The map is divided into different sections which you will unlock the more you explore. With more and more abilities at your disposal, you wil soon find yourself doing more backtracking and having to go from one section to a farther one. Again, the warp rooms can make it easier for you to do this, but if you want to obtain more gems and monster cards, you may want to not use them.
Within some of these map sections lie labyrinths, which act as dungeons. Here, you will encounter lots of enemies, solve some area puzzles, encounter Risky Boots (Shantae's perennial nemesis and act as a mini-boss), and go head to head with sirens: the big baddies of the game. These sirens are huge and have interesting attack patterns and character design, but they are not particularly hard to fight. Their attacks are well-telegraphed and you will easily figure out their patterns. The fight may get finished soon, but you'll have fun the entire time. Upon defeating a boss, the chapter ends and a new one begins. You take your acquired gems to the shop, upgrade your weapons and attacks, and off you go again to explore further to solve the mysteries surrounding the island.
The more you get stronger, the more fun it is to defeat the monsters, and thus, making exploring better. Previously unreachable areas will be eventually reachable, and it is such a good feeling to accomplish that, especially in this game. It may only take you around 10 hours to complete the entire game on your first playthrough, but it is well-paced and very little downtime in action and story elements. There is a New Game+, with Shantae having more magic but less defense. A bit lame, but it could be an extra challenge. If you need more challenge, there are achievements to aim for, such as being able to complete the game on any % items, complete the game with 100%, complete the game at high speed, and complete the game on New Game+. You may need to play the game at least 2 more times to unlock all achievements in the game. You only unlock win screens, though, but that is better than nothing.
Overall, Shantae and the Seven Sirens is one excellent entry to the series. I think Pirate's Curse is a bit better and I did enjoy that game more, but this game is a close second. I should play the other games, to really see which game is the best in the series. Anyway, this game has amazing visuals, cood character design and animation, and solid 60fps framerate mostly throughout the game. Add to that the excellent soundtrack full of catchy tunes that make playing the game even more enjoyable. So if you are a fan of this adorable half-genie, do yourself a favor and go through another big adventure with her. Even if you are not, I'm pretty sure you will enjoy the game, as I did, and this may be one of the best games that you will play this year.
REPLAY VALUE: Very high
PROS
- Amazing hand-drawn art style with vibrant colors and cool animation
- Excellent soundtrack, with lots of catchy songs
- Solid 60fps frame rate mostly thoughout the game
- Quite a good story, with some twists and turns along the way
- Wide variety of enemies
- Cool boss fights, albeit on the easy side
- Beautiful animated cut scenes with good voice acting
- The entire game can be finished withing 10-12 hours, but it is well-paced and there is very little down time in terms of action and story elements
- Humorous dialogue with NPCs
- Very good use of HD rumble
- Ideal for handheld gaming
- Controls are very responsive
CONS
- Collectibles are not marked on the map, making backtracking to obtain them a bit tedious especially late in the game
- Loading times during Transitions in some areas could be a bit too long to be desired
- New Game+ could have been better
RATING: 4.5/5 hair slashes and belly dances
Sunday, 30 August 2020
perPage: 7,
- 19:44
- LAD TV
- No comments
TL;DR: Don't build a burner device. Probably this is not the risk you are looking for.
Introduction
Every year before DEF CON people starts to give advice to attendees to bring "burner devices" to DEF CON. Some people also start to create long lists on how to build burner devices, especially laptops. But the deeper we look into the topic, the more confusing it gets. Why are we doing this? Why are we recommending this? Are we focusing on the right things?
What is a "burner device" used for?
For starters, the whole "burner device" concept is totally misunderstood, even within the ITSEC community. A "burner device" is used for non-attribution. You know, for example, you are a spy and you don't want the country where you live to know that you are communicating with someone else. I believe this is not the situation for most attendees at DEF CON. More info about the meaning of "burner" https://twitter.com/Viss/status/877400669669306369
Burner phone means it has a throwaway SIM card with a throwaway phone, used for one specific operation only. You don't use the "burner device" to log in to your e-mail account or to VPN to your work or home.
But let's forget this word misuse issue for a moment, and focus on the real problem.
The bad advice
The Internet is full of articles focusing on the wrong things, especially when it comes to "burner devices". Like how to build a burner laptop, without explaining why you need it or how to use it.
The problem with this approach is that people end up "burning" (lame wordplay, sorry) significant resources for building a secure "burner device". But people are not educated about how they should use these devices.
The threats
I believe the followings are some real threats which are higher when you travel:
1. The laptop getting lost or stolen.
2. The laptop getting inspected/copied at the border.
These two risks have nothing to do with DEF CON, this is true for every travel.
Some other risks which are usually mentioned when it comes to "burner devices" and DEF CON:
3. Device getting owned via physical access while in a hotel room.
4. Network traffic Man-in-the-middle attacked. Your password displayed on a Wall of Sheep. Or having fun with Shellshock with DHCP. Information leak of NTLM hashes or similar.
5. Pwning the device via some nasty things like WiFi/TCP/Bluetooth/LTE/3G/GSM stack. These are unicorn attacks.
6. Pwning your device by pwning a service on your device. Like leaving your upload.php file in the root folder you use at CTFs and Nginx is set to autostart. The author of this article cannot comment on this incident whether it happened in real life or is just an imaginary example.
How to mitigate these risks?
Laptop getting stolen/lost/inspected at the border?
1. Bring a cheap, empty device with you. Or set up a fake OS/fake account to log in if you really need your day-to-day laptop. This dummy account should not decrypt the real files in the real account.
Device getting owned while in a hotel room with physical access
1. Don't bring any device with you.
2. If you bring any, make it tamper-resistant. How to do that depends on your enemy, but you can start by using nail glitter and Full Disk Encryption. Tools like Do Not Disturb help. It also helps if your OS supports suspending DMA devices before the user logs in.
3. If you can't make the device tamper-resistant, use a device that has a good defense against physical attackers, like iOS.
4. Probably you are not that important anyway that anyone will spend time and resources on you. If they do, probably you will only make your life miserable with all the hardening, but still, get pwned.
Network traffic Man-in-the-middle attacked
1. Don't bring any device with you.
2. Use services that are protected against MiTM. Like TLS.
3. Update your OS to the latest and greatest versions. Not everyone at DEF CON has a 0dayz worth of 100K USD, and even the ones who have won't waste it on you.
4. Use fail-safe VPN. Unfortunately, not many people talk about this or have proper solutions for the most popular operating systems.
5. For specific attacks like Responder, disable LLMNR, NBT-NS, WPAD, and IPv6 and use a non-work account on the machine. If you don't have the privileges to do so on your machine, you probably should not bring this device with you. Or ask your local IT to disable these services and set up a new account for you.
Pwning the device via some nasty thing like WiFi/TCP/Bluetooth/LTE/3G/GSM stack
1. Don't bring any device with you.
2. If you bring any, do not use this device to log in to work, personal email, social media, etc.
3. Don't worry, these things don't happen very often.
Pwning your device by pwning a service on your device
Just set up a firewall profile where all services are hidden from the outside. You rarely need any service accessible on your device at a hacker conference.
Conclusion
If you are still so afraid to go there, just don't go there. Watch the talks at home. But how is the hotel WiFi at a random place different from a hacker conference? Turns out, it is not much different, so you better spend time and resources on hardening your daily work devices for 365 days, instead of building a "burner device".
You probably need a "burner device" if you are a spy for a foreign government. Or you are the head of a criminal organization. Otherwise, you don't need a burner device. Maybe you need to bring a cheap replacement device.
Related word- Nsa Hacker Tools
- Hack Tool Apk No Root
- Hack Website Online Tool
- Hacking App
- Usb Pentest Tools
- Pentest Tools Open Source
- Pentest Tools Kali Linux
- Pentest Tools Download
- Pentest Tools Apk
- Termux Hacking Tools 2019
- Hacking Tools Kit
- Pentest Tools Port Scanner
- Hacker Tools For Mac
- Android Hack Tools Github
- How To Make Hacking Tools
- Kik Hack Tools
- Pentest Tools For Windows
- Pentest Tools For Ubuntu
- Hack Tools For Pc
- Hacker Tools For Pc
- Hacker Tools Free Download
- New Hack Tools
- Pentest Tools Free
- Blackhat Hacker Tools
- Hacking Tools For Windows 7
- Hacking Tools For Windows Free Download
- Hack Apps
- Hack App
- Pentest Tools Windows
- Hackers Toolbox
- Hack Tools Github
- Hacking Tools 2019
- Hacking Tools For Windows
- Hack Tool Apk No Root
- Pentest Tools Subdomain
- Hacker Tools Windows
- Nsa Hacker Tools
- Hacking App
- Hacker Tools Apk Download
- Hacking Apps
- Hack Tools For Windows
- Best Hacking Tools 2019
- Hack App
- Wifi Hacker Tools For Windows
- Pentest Tools Url Fuzzer
- Hacking Tools For Games
- Pentest Tools Github
- Pentest Tools Kali Linux
- Tools For Hacker
- Pentest Tools Alternative
- Best Hacking Tools 2019
- Hacking Tools Windows 10
- Hacking Tools Github
- Hacking Tools Free Download
- Wifi Hacker Tools For Windows
- Hacking Tools For Beginners
- Pentest Tools Apk
- Hacker Tools Linux
- Hacker Tools Github
- Hacker Tools Apk Download
- Hacking Tools Online
- Hacking Tools 2019
- Hacker Tools Software
- Pentest Tools Port Scanner
- Pentest Box Tools Download
- Hacker Tools 2019
- Pentest Tools Website Vulnerability
- Pentest Tools Website Vulnerability
- Pentest Tools Subdomain
- Hak5 Tools
- Hacking Tools Hardware
- Tools Used For Hacking
- Hacker Tools Windows
- Hacking Tools For Windows Free Download
- Pentest Tools Github
- Bluetooth Hacking Tools Kali
- Underground Hacker Sites
- Hacker Tools Online
- Hacking Tools Online
- Termux Hacking Tools 2019
- Pentest Tools Alternative
- Hack Tools 2019
- How To Make Hacking Tools
- Hacking Tools Name
- Pentest Tools Nmap
- Hacking Tools Usb
- Hacking Tools Name
- Hacker Security Tools
- Pentest Box Tools Download
- Pentest Tools Find Subdomains
- Hacker Tools Apk
- Pentest Tools Website Vulnerability
- What Is Hacking Tools
- Hack Tools
- Free Pentest Tools For Windows
- Android Hack Tools Github
- Hacker Tools For Pc
- New Hack Tools
- Pentest Tools Linux
- Pentest Tools For Android
- Pentest Automation Tools
- Pentest Tools Url Fuzzer
- Blackhat Hacker Tools
- Hacking Tools For Games
- Hacker Tools Hardware
- Pentest Tools Apk
- Hacking Tools For Windows 7
- Pentest Tools Subdomain
- Hack Rom Tools
- Hack Tools Mac
- Pentest Recon Tools
- Hack Tools
- Nsa Hacker Tools
- Android Hack Tools Github
- Pentest Tools Linux
- Hacking Tools For Beginners
- New Hacker Tools
- Pentest Tools Apk
- Nsa Hacker Tools
- Hack Tools Github
- Wifi Hacker Tools For Windows
- Pentest Tools For Mac
- Hack Tool Apk
- Hacking Tools Github
- Pentest Tools Tcp Port Scanner
- Hacker Techniques Tools And Incident Handling
- Game Hacking
- Growth Hacker Tools
perPage: 7,
Don't try to download the Winsocks 2 patch from the official MS site, it is not there anymore, but you can download it from other sites.
- 11:16
- LAD TV
- No comments
In the Hacking Windows 95, part 1 blog post, we covered that through a nasty bug affecting Windows 95/98/ME, the share password can be guessed in no time. In this article, I'm going to try to use this vulnerability to achieve remote code execution (with the help of publicly available tools only).
The first thing we can do when we have read access to the Windows directory through the share, is to locate all the *.pwl files on the c:\windows directory, copy them to your machine where Cain is installed, switch to Cracker tab, pwl files, load the pwl file, add username based on the filename, and try to crack it. If you can't crack it you might still try to add a .pwl file where you already know the password in the remote windows directory. Although this is a fun post-exploitation task, but still, no remote code execution. These passwords are useless without physical access.
The first thing we can do when we have read access to the Windows directory through the share, is to locate all the *.pwl files on the c:\windows directory, copy them to your machine where Cain is installed, switch to Cracker tab, pwl files, load the pwl file, add username based on the filename, and try to crack it. If you can't crack it you might still try to add a .pwl file where you already know the password in the remote windows directory. Although this is a fun post-exploitation task, but still, no remote code execution. These passwords are useless without physical access.
One might think that after having a share password and user password, it is easy to achieve remote code execution. The problem is:
- there is no "at" command (available since Windows 95 plus!)
- there is no admin share
- there is no RPC
- there is no named pipes
- there is no remote registry
- there is no remote service management
If you think about security best practices, disabling unnecessary services is always the first task you should do. Because Windows 95 lacks all of these services, it is pretty much secure!
During my quest for a tool to hack Windows 95, I came across some pretty cool stuff:
During my quest for a tool to hack Windows 95, I came across some pretty cool stuff:
LanSpy
But the best of the best is Fluxay, which has been written by chinese hackers. It is the metasploit from the year 2000. A screenshot is worth more than a 1000 words. 4 screenshot > 4 thousand words :)
But the best of the best is Fluxay, which has been written by chinese hackers. It is the metasploit from the year 2000. A screenshot is worth more than a 1000 words. 4 screenshot > 4 thousand words :)
It is pretty hard to find the installer, but it is still out there!
But at the end, no remote code execution for me.
But at the end, no remote code execution for me.
My idea here was that if I can find a file which executes regularly (on a scheduled basis), I can change that executable to my backdoor and I'm done. Although there is no scheduler in the default Windows 95, I gave it a try.
Let's fire up taskman.exe to get an idea what processes are running:
Looks like we need a more powerful tool here, namely Process Explorer. Let's try to download this from oldapps.com:
LOL, IE3 hangs, can't render the page. Copying files to the Win95 VM is not that simple, because there are no shared folders in Win95 VM. And you can't use pendrives either, Win95 can't handle USB (at least the retail version). After downloading the application with a newer browser from oldapps, let's start Process Explorer on the test Windows 95.
Don't try to download the Winsocks 2 patch from the official MS site, it is not there anymore, but you can download it from other sites.
Now let's look at the processes running:
After staring it for minutes, turned out it is constant, no new processes appeared.
Looking at the next screenshot, one can notice this OS was not running a lot of background processes ...
After staring it for minutes, turned out it is constant, no new processes appeared.
Looking at the next screenshot, one can notice this OS was not running a lot of background processes ...
My current Win7 has 1181 threads and 84 processes running, no wonder it is slow as hell :)
We have at least the following options:
- You are lucky and not the plain Windows 95 is installed, but Windows 95 Plus! The main difference here is that Windows 95 Plus! has built-in scheduler, especially the "at" command. Just overwrite a file which is scheduled to execution, and wait. Mission accomplished!
- Ping of death - you can crash the machine (no BSOD, just crash) with long (over 65535 bytes) ICMP ping commands, and wait for someone to reboot it. Just don't forget to put your backdoor on the share and add it to autoexec.bat before crashing it.
- If your target is a plain Windows 95, I believe you are out of luck. No at command, no named pipes, no admin share, nothing. Meybe you can try to fuzz port 137 138 139, and write an exploit for those. Might be even Ping of Death is exploitable?
Let's do the first option, and hack Windows 95 plus!
Look at the cool features we have by installing Win95 Plus!
Now we can replace diskalm.exe with our backdoor executable, and wait maximum one hour to be scheduled.
Instead of a boring text based tutorial, I created a YouTube video for you. Based on the feedbacks on my previous tutorialz, it turned out I'm way too old, and can't do interesting tutorials. That's why I analyzed the cool skiddie videoz, and found that I have to do the followings so my vidz won't suck anymore:
Cool new boot splash screen!
But our main interest is the new, scheduled tasks!
Now we can replace diskalm.exe with our backdoor executable, and wait maximum one hour to be scheduled.
Instead of a boring text based tutorial, I created a YouTube video for you. Based on the feedbacks on my previous tutorialz, it turned out I'm way too old, and can't do interesting tutorials. That's why I analyzed the cool skiddie videoz, and found that I have to do the followings so my vidz won't suck anymore:
- use cool black windows theme
- put meaningless performance monitor gadgets on the sidebar
- use a cool background, something related with hacking and skullz
- do as many opsec fails as possible
- instead of captions, use notepad with spelling errorz
- there is only one rule of metal: Play it fuckin' loud!!!!
Related posts
- Pentest Tools
- Pentest Tools Website Vulnerability
- Hacker Tools List
- Hacking Tools For Beginners
- Pentest Automation Tools
- Blackhat Hacker Tools
- Ethical Hacker Tools
- Pentest Tools For Ubuntu
- Hacker Security Tools
- Hacker Tools 2020
- Pentest Tools Website Vulnerability
- Nsa Hack Tools Download
- Hack Tools Mac
- Usb Pentest Tools
- Hackers Toolbox
- Hacking Tools Windows 10
- Pentest Tools
- Hacker Tools Free Download
- Hacker Tools 2020
- Hacker Tools List
- Hacking Tools For Windows
- How To Make Hacking Tools
- Hacking Tools For Pc
- Hacking Tools For Windows Free Download
- Pentest Tools Free
- Hack Tool Apk
- Pentest Tools Review
- Pentest Tools For Ubuntu
- Pentest Tools Website
- Hacking Tools Free Download
- Hack Website Online Tool
- Pentest Tools
- Best Hacking Tools 2020
- Hacker Tools
- Pentest Tools For Windows
- Hacker
- Best Hacking Tools 2020
- Hacking Tools Download
- Hacking Tools 2020
- Hacker Tools Linux
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Website
- Pentest Tools Github
- Nsa Hack Tools Download
- Pentest Tools Github
- Hack Tools
- Hacking Tools For Mac
- Pentest Tools Download
- Hack Tools
- Game Hacking
- Usb Pentest Tools
- Termux Hacking Tools 2019
- Hacking Tools For Windows 7
- Pentest Tools Android
- Install Pentest Tools Ubuntu
- Hacker Tools Free
- Android Hack Tools Github
- Hacks And Tools
- Top Pentest Tools
- Hacking Tools For Pc
- Pentest Tools Website
- Hackrf Tools
- Usb Pentest Tools
- World No 1 Hacker Software
- Hacker Techniques Tools And Incident Handling
- Hacking Tools 2020
- Hacking Tools Usb
- Top Pentest Tools
- Pentest Tools Find Subdomains
- Pentest Tools For Ubuntu
- Top Pentest Tools
- Pentest Tools For Mac
- Pentest Recon Tools
- Hacking Tools For Beginners
- Hacker Tools Free Download
- Nsa Hacker Tools
- Hacking Tools Pc
- Hack Rom Tools
- How To Install Pentest Tools In Ubuntu
- Pentest Tools Kali Linux
- Hacker Tools 2020
- Hacker Tools 2019
- Pentest Tools Linux
- Hacker Tools Software
- Best Pentesting Tools 2018
- Pentest Tools For Android
- Android Hack Tools Github
- Pentest Tools Download
- Hacker Tools For Pc
- Hacking Tools Software
- Install Pentest Tools Ubuntu
- Hack Apps
- Underground Hacker Sites
- New Hack Tools
- Pentest Tools Windows
- Hacking Tools Kit
- Hacking App
- Pentest Recon Tools
- Pentest Tools For Ubuntu
- Hacking Tools For Windows
- Hacker Tool Kit
- Pentest Tools Website
- Hacker Hardware Tools
- Pentest Tools Windows
- Pentest Tools Github
- Hacking App
- Pentest Tools Alternative
- Pentest Tools Subdomain
- Hacking Tools And Software
- Hack Tool Apk No Root
- Pentest Tools Nmap
- Pentest Box Tools Download
- Hack Tool Apk
- Hacker Tools Free
- Hacking Tools And Software
- Hack Tools Online
- Hacking Tools For Games
- Tools For Hacker
- Hacking App
- Growth Hacker Tools
- Hacker Tools For Mac
- Hacker Tools Mac
- Pentest Tools Apk
- Hacking Tools For Windows
- Hackrf Tools
- Hacker Tools For Windows
- Hacking Tools Usb
- Underground Hacker Sites
- Pentest Tools Review
- Tools For Hacker
- Pentest Tools Bluekeep
- Hack And Tools
- Nsa Hack Tools
- What Is Hacking Tools
- Hacker Tools List
- Hack Tools Github
- Pentest Tools Framework
- Hacker Tools Mac
- Hacker Search Tools
- Hacker
- Hacks And Tools
- Hacking Tools 2020
- How To Hack
- Hacker Tools Windows
- Pentest Tools Review
- Hacker Tools For Pc
- Termux Hacking Tools 2019
- Hacker Tools 2019
- Hacker Tools Apk
- Pentest Tools Nmap
- Hacking Tools For Windows
- Pentest Tools Website Vulnerability
- Blackhat Hacker Tools
- Hacker Tools 2019
- Pentest Tools Download
- Hacking Tools 2019
- Hack Tools For Windows
- Kik Hack Tools
- Hacker
- Pentest Tools
- Best Hacking Tools 2019
- Best Hacking Tools 2020
- Nsa Hack Tools
- Nsa Hack Tools Download
- Usb Pentest Tools
Subscribe to:
Comments (Atom)
