Jugaad Se Ukhaad : The Hacking Challange 2011 Results

We announced Jugaad se Ukhaad challange 1.5 Months ago and it was a good deal of joy to  see the attacks come in. The server was running on a modified version of Linux patched with gresec and some custom patches. It was out in the wild, with server signature changed to Optinet, one of the UTM products we were testing at the time. So, here are our attack statistics on IP 110.235.1.130 IP are : 
  • 10 Measured attacks
  • 2 LOIC DDos (small scale)
  • ZERO Success Rate
So, all in all, we havent got anyone who has successfully exploited the server. We will be back with more challanges in future with some pretty cool prizes next time.

Till Then

Stay gold..

Rishabh Dangwal & Amarjit Singh

by Rishabh Dangwal · 0

Why Android rocks and why I like android ...

Buying an Android was one of the most amazing decisions I ever made, buying and HTC android (a333, 2.2.1 modded to 2.3.4) was even better,with fantastic support by the community and the HTC hacking commmunity at the pinnacle of eveything else (though I tend to remember the original nokia/symbian hackers who dct flashed-patched-disassembled their devices to connect their patchcodes to overwrite and override the flash protection and enter into debug modes of even the most trivial handsets...always makes me nostalagic.Infinity box anyone ?)

Well..onto my android, how life has changed since I moved over it -

  • Always connected to social networking services and Email.
  • Phone call logs/SMS dumped into my gmail account for quick reference.
  • gesture based replys to anyone (for eg and inverted "U" will input "goodnight tc :) " to those late night sms and conversations which you want to end since the next morning you have to catch up for office..sigh..)
  • Calender sync in realtime , call logs sync to calender and make an entry for subsequent calls , duration and name (if available) with autorecord and dumping recording to gmail if necessary. No more life threatning calls.
  • Exploring the endless possiblities of application porting over the inherent Linux kernel.
  • Old school games using emulators. I can now play Contra:hardcorps all the time any where ..or even can listen to chiptunes of castlevania/super c. Although i am looking forward to Mame emulation (tiger arcade works super slow..) over android but CPU is a bottleneck as of now. Need to get a new android soon :|
  • Wifu and wardriving while i am on bus..here is a sample packet capture -
BSSID;LAT;LON;SSID;Crypt;Beacon Interval;Connection Mode;Channel;RXL;Date;Time
00:08:5C:EF:08:F0;28.56602;77.22951;Adiva;WpaPsk;-93;Infra;11;-92;2011/03/17;18:52:01
00:08:9F:81:8F:C4;28.56944;77.20531;Car0baR;WPA2;-96;Infra;6;-95;2011/03/17;18:58:30
00:0F:61:F2:D1:40;28.56866;77.21955;OZone WiFi;Open;-97;Infra;1;-95;2011/03/17;18:54:16
00:0F:61:F2:D1:4F;28.56866;77.21955;Aircel_OZone WiFi;Open;-95;Infra;1;-93;2011/03/17;18:54:16
00:14:78:EB:20:E4;28.56936;77.20624;Plutos Network;Wep;-86;Infra;6;-85;2011/03/17;18:58:05
00:17:9A:09:D1:79;28.56813;77.22440;WebunivM;Wep;-93;Infra;6;-91;2011/03/17;18:53:05
00:18:02:87:02:8F;28.56845;77.22306;RT2561_6;Wep;-94;Infra;6;-93;2011/03/17;18:53:18
00:18:02:92:A2:73;28.56955;77.20365;mtnlbb;Wep;-90;Infra;6;-89;2011/03/17;19:00:21
00:18:EB:01:4D:02;28.55103;77.24771;ICON EROS;Open;-94;Infra;1;-91;2011/03/17;18:40:44

  • tcpdump/shark/nmap..need i say more ? (PS: you can always install shark over your GF's phone :P)
  • Samba server :)
  • Penetration testing using the nessus client and reading reports over it when I am on bus.
  • Connected to like minded geeks ( who like to be pesked for technicalities ) even when I am on DTC and getting bored by the ongoing travels (i am looking at you : prateek singla, rahul sasi, prashant uniyal, chin tu/faku chand,raghu sharma and those who know I cant mention their names here :P )
  • Taking remote control of remote computers and network devices using vnc/rfb (wrote bit.che for my college project, interested may see a demo at my college). Hell , if all else fails, you can always move with android vnc and team viewer.
  • ssh to a machine having metasploit.
  • 24x7 connectivity using openvpn...or vidalia..lemme summarise it in one image
  • Overclocking :) although its a matter of only installing setcpu, but then, who doesnt likes the power it brings to slower devices.
  • ninjamorph
  • and much much much more (including 2 way authentication using timed key generation)


I am androidified .. Are you ?

by Rishabh Dangwal · 4

All Rights Reserved by Pro Hack . Copyright 2008 - 20011. Template by Bloggermint .