Security

Tools

• Viha MacOS X Wireless Tools

Viha is a project developing a suite of wireless auditing tools for MacOS X. So far, the only components developed are a custom AirPort driver for monitor mode packet capture, a framework for driver access and 802.11 packet deconstruction, and a command-line wireless network stumbler. Because OS X before 10.2 (Jaguar) doesn't allow us to dynamically unload/load the Apple AirPort driver, we require OS X 10.2 for now.

I am GPL'ing everything for the newer releases, so the 0.0.1a release is binary-only, but the 0.0.2 releases will be under the GNU General Public License. To assist in using the driver in other projects, it will be available separately while the "Tools" release includes everything else (including the driver).

0.0.1a release is a bugfix to correct a memory leak in IEEE80211Frame (thanks to Michael Rossberg for reporting it, check out his awesome Aqua stumbler.

• README
• Viha Wireless Tools 0.0.1a Binary Release
• Viha Wireless LAN Driver 0.0.2 Source Release
• Example Stumbler source code

Advisories

• 2000-10-02 / thttpd SSI Arbitrary File Disclosure
• 2002-04-08 / Solaris AnswerBook2 Format String and Admin Script Execution Vulnerabilities

Miscellaneous

• Patch for NetBIOS Auditing Tool to check for Windows 9X "one-byte" file sharing authentication bug (see NSFOCUS Advisory)

SPARC Buffer Overflows

• Slides of presentation at DEFCON 8 (July 2000).
• Source code for example shellcode, exploits, utilities, and slides.
• Errata
• Real Video
• Real Audio

Shellcode

SPARC

• Exec /bin/sh ( Assembly C Header)
• Bind /bin/sh to TCP port ( Assembly C Header)

PowerPC

• execve /bin/sh ( Assembly C Header)