[Goodies]

I'm looking into ratting someone with Mac. I was wondering if jrat really works bc I've heard that it doesn't. And I was also trying to find out if dc works on macs.

Dark comet does not work on Macs because the compilation process, instructions opcode, and dependencies/libraries are very different.

Jrat will work as long as they have Java installed (who doesn't?)

[vulpixbrinley]

Ah, that explains so much! Thank you! (:

[hav0x]

Hm, I guess this is a good place to start :3. So, I'm currently in the process of learning C# and I was wondering if there was a simple way to port it to Mac? Thanks!

[Goodies]

Hm, I guess this is a good place to start :3. So, I'm currently in the process of learning C# and I was wondering if there was a simple way to port it to Mac? Thanks!

Well, you can install a pseudo-.net implementation with Mono:
http://www.go-mono.com/mono-downloads/download.html

I think that's dumb. I'd say start learning C/C++. Unless this is your first language, Then I recommend something like Python.

C# is a Microsoft proprietary language (though I believe it's becoming an international standard, but that won't change anything). C# is for Microsoft.

[ѕнα∂σω]

Actually, yes and no ;) Data is not actually sent to IP addresses but to MAC addresses. Weird, I know, but that's how it works. if you, say, ping 192.168.8.5 (assuming it's an alive host)

First it will calculate the range:
192.168.8.0/24 = 192.168.8.1 - 192.168.8.254
If it is in that range, it will look up the MAC address in the ARP table. ARP (address resolution protocol) is used just to find the MAC address of a known IP address.

It will then send the data to the MAC address, not necessarily th IP address. This is where ARP spoofing comes into play.

For example,. Even though 192.168.8.5 is at 11:22:33:11:22:33, at attacker can update your ARP table by sending ARP responses with a source IP of 192.168.8.5 but a source MAC of 77:77:77:77:77:77 and data will be sent to the destination IP of 192.168.8.5, but to the attacker's machine.

If it sends data to something that is NOT in your subnet, it looks up the MAC of the default gateway either by looking in the ARP table or, if it's not in there, by doing an ARP request. Again, an attacker can spoof ARP responses to become MITM.

---

Also, it doesn't necessarily need to be an entire octet changing. If we were given an IP of:

192.168.8.0/20 we would have to do a little math.

20 1's:
11111111.11111111.11110000.00000000 = 255.255.240.0

So with an IP of:
192.168.8.0, we match this up with the mask so:

These bits don't change (network bits)
These bits do change (host bits)

11000000.10101000.00001000.00000000 = 192.168.8.0

We can see that the value in the 3rd octet is cut, right? If we do the entire range, it goes from:
11000000.10101000.00000000.00000000 = 192.168.0.0
to
11000000.10101000.00001111.11111111 = 192.168.15.255

So, since you use the network address to identify a network, it would be 192.168.0.0/20, however, 192.168.8.0/20 is just as valid.

In this network, 192.168.8.0 and 192.168.8.255 are just host addresses.

An easy way of doing this (in case you're interested) is by seeing how many host bits are in the first octet with host bits... sorry if that is confusing.

Look at them octet by octet.

255 = 1111 1111
255 = 1111 1111
240 = 1111 0000 <-- everything from the first 0 in the subnet mask is hosts... there will never be a 1 after a 0.
000 = 0000 0000

There are 4 host bits in the 3rd octet. Take those 4 bits, and raise 2 to that number.

2 ^ 4 = 16. This means that 16 in the 3rd octet will be the next network, and it is.

192.168.0.0/20 +16 in the third octet
192.168.16.0/20 +16 in the third octet
192.168.32.0/20
etc.. etc.. etc...

So now, just by looking at that, you can see that the next subnet has a range of 192.168.16.0 - 192.168.31.255 :)

Wow. Thank you. Such a nice and detailed explanation. Thanks a lot, this is exactly what I needed.

[Im gone brah]

How would you go 'bout launching a microp local stack based buffer overflow? And does it only work on Windows XP sp2?!?!?

[Zapu]

How would you go 'bout launching a microp local stack based buffer overflow? And does it only work on Windows XP sp2?!?!?

hey zayne nice to see you m8y 😎

[Im gone brah]

hey zayne nice to see you m8y 😎

Sup, login to skype sometime?🤝

[Zapu]

Sup, login to skype sometime?🤝

I'll be back on in about a month. 🤝

[geomck]

So I'm fairly new at this and I've been trying to sniff over L2L/ IPSec VPN (old routers only supported protocol) with wireshark. (I have the preshared encryption keys), but I and i can't sniff any packages they send over the network... Both routers are properly connected and configured. (local ips respond to pings from both sides).

Thanks in advance!
GM