Author Archive

PEAP/LEAP Brute-Force Fun

Friday, July 16th, 2010

I’ve uploaded a basic PEAP/LEAP brute-force logon script that I wrote a couple of months ago to the wireless page. It simply calls wpa_supplicant and parses the results, which is slow, but appears to work. Enjoy.

Joe

Tags:
Posted in Stuff | Comments Off

Site Update and New Content

Tuesday, May 18th, 2010

Heya,

I reworked the site a bit yesterday. My goal is to migrate all of my old patches/content into it. You’ll find a couple of new pages (Passwords & Hashes, Challenge/Response Authentication) linked on the right sidebar. These pages should contain the latest Samba and other patches I’ve put together over the years.

I’ve also added a new wireless page which contains a patch to Hostapd that adds auto-probe response and PEAP/MSCHAPv2 logging fun.

Joe

Tags:
Posted in General | Comments Off

Medusa 2.0 Release

Wednesday, February 10th, 2010

After what feels like an eternity, Medusa 2.0 is now available for public download.

http://www.foofus.net/jmk/tools/medusa-2.0.tar.gz

This release contains the most significant changes to the core of Medusa since its original release in 2005. We’ve moved to a “real” thread pool and modified how credential sets are selected. See the following for a more detailed list of changes:

http://www.foofus.net/jmk/medusa/ChangeLog

Enjoy,
Joe

Tags:
Posted in Medusa | Comments Off

Samba “Improvements” Updated

Thursday, September 3rd, 2009

I’ve updated my Samba modifications for the 3.3.7 release. The patch adds support to Samba utilities for passing-the-hash. For the uninformed, this allows you to leverage hashes gathered with such excellent tools as FgDump, without needing to ever crack the password. You can simply pass-the-hash and mount remote shares, create new accounts, etc. as the targeted account. Another bit of goodness here are some changes to the nmbd and smbd daemons. With this patch, nmbd will respond to all broadcast requests. Smbd will log any challenge/response handshakes. All sorts of fun can be had with this…  See the following pages for more information:

http://www.foofus.net/jmk/smbchallenge.html/
http://www.foofus.net/jmk/passhash.html

Tags:
Posted in Stuff | Comments Off

Foofus.Net Mailing List

Tuesday, February 17th, 2009

Have a FgDump/PwDump or Medusa question? Join our mailing list and we’ll help you out.

http://lists.foofus.net/listinfo.cgi/foofus-tools-foofus.net

Tags:
Posted in General, Stuff | Comments Off

Medusa 1.5 Release

Tuesday, February 17th, 2009

Fellow Pen-testers:

Version 1.5 of Medusa is now available for public download.

What is Medusa? Medusa is a speedy, massively parallel, modular, login brute-forcer for network services created by the geeks at Foofus.net. It currently has modules for the following services: AFP, CVS, FTP, HTTP, IMAP, MS-SQL, MySQL, NCP (NetWare), NNTP, PcAnywhere, POP3, PostgreSQL, rexec, rlogin, rsh, SMB, SMTP (AUTH/VRFY), SNMP, SSHv2, SVN, Telnet, VmAuthd, VNC. It also includes a basic web form module and a generic wrapper module for external scripts.

While Medusa was designed to serve the same purpose as THC-Hydra, there are several significant differences. For a brief comparison, see:

http://www.foofus.net/jmk/medusa/medusa-compare.html

It’s been over a year since version 1.4 was released and there has been a bunch of changes. This release includes multiple bug fixes, several new modules and additional module functionality. The following is a quick rundown on some of the new features. A somewhat detailed report is available here: http://www.foofus.net/jmk/medusa/ChangeLog

* AFP – new module (still marked as unstable)
* HTTP – digest auth support
* IMAP – STARTTLS, NTLM support
* POP3 – STARTTLS, LOGIN, PLAIN, NTLM support
* SMBNT – LM, LMv2, NTLMv2 support
* SMTP – NTLM support
* TELNET – AS/400 (TN5250) support
* misc. core and module bug fixes

Finally, the main documentation and actual files are located here:

http://www.foofus.net/jmk/medusa/medusa.html
http://www.foofus.net/jmk/tools/medusa-1.5.tar.gz

Medusa was developed on Gentoo Linux and FreeBSD. Some limited testing has been done on other platforms/distributions (OpenBSD, Debian, Ubuntu, Darwin, Mac OS X, Solaris). If people wish to contribute patches to fix portability issues, I’d be happy to accept them. There are probably lots of bugs which have yet to surface. Please let me know if you encounter issues, fix a bug or just find the application useful.

Enjoy,
Joe

Tags: ,
Posted in Medusa | 8 Comments »

New Foofus.Net Blog

Tuesday, February 17th, 2009

Welcome to the new Foofus.Net blog!

If you’re in search of our fascinating old content, here you go:

Tags:
Posted in General | Comments Off