Video

Hi, everyone, this is gilgil.

These movies will be released in POC2007 conference(http://www.powerofcommunity.net).

This documents explain sniffing, spoofing, mitm(man in the middle) attacks related to sniffing.

 

SnoopSpy 2 held in POC 2007

http://www.youtube.com/view_play_list?p=E04290E546EC0E42

 

sniffing - plain text login

Now, let me show you basic sniffing examples to get id and password information in certain web sites those do not support cipher login.

01._plain_text_login_nytime_com.avi : Newyork Times site login.

02._plain_text_login_youtube_com.avi : Youtube site login.

 

sniffing - cipher text login

If the site supports SSL(secure socket layer),  you can not get id and password information directly. You should use HTTP SSL Proxy.

03._cipher_text_login_ebay_com_can_not.avi : EBay site login that supports SSL. Login packet is encrypted.

04._cipher_text_login_ebay_com_ssl.avi : EBay site login that gets id and password information using SSL Proxy.

05._cipher_text_login_yahoo_com_ssl.avi : Yahoo site login.

06._cipher_text_login_gmail_com_ssl.avi : GMail site login.

07._cipher_text_login_sf_net_ssl.avi : SourceForge site login.

 

funny story by changing packet

You can do many other funny things by changing TCP or UDP data packet.

08._poc2007_gil1973.avi : Example that changes packet from "POC2007" to "GIL1973".

09._http_empas_com.avi : What would happen if "https://" is changed to "http://"?

10._http_auction_co_kr.avi : More example.

11._http_sf_net.avi : More example.

12._http_nate_gzip.avi : If HTTP response content-type is not text/htm, it is difficult to change HTML. Then, how can you change HTML?

13._google_com_can_not_http.avi : There are some sites that do not support http protocol, and if packet is changed from "https://" to "http://" those sites do not allow http plain text login.

14._paypal_com_can_not_http.avi : ditto.

 

messenger sniffing

15._google_talk_chat.avi : It is easy to sniff Google Talk messenger.

16._msn_chat.avi : So does MSN messenger.

17._nate_chat_can_not.avi : Some messenger supports cipher chat and it is difficult to analyze packets.

18._nate_chat_vr.avi : How can you see the full details of a conversation that is encrypted in packet level? You should use version rollback technique.

 

online game hacking

You are not good at FPS online game. What should you do so as to upgrade your ability in online game?

19. warrock_normal.avi : please... :(
20. warrock_delay.avi : please... :(
21. special_force_normal.avi : please... :(
22. special_force_delay.avi : please... :(
23. sudden_attack_normal.avi : please... :(
24. sudden_attack_delay.avi : please... :(

 

epilogue

Hackers attack what is worth attacking.

For more question, email gilgil1973@gmail.com

Thank you.