r/tecknowledge • • Feb 07 '17

request4comments Our IRC Server - Shell Access - Future Plans NSFW

5 Upvotes

Holas.

So I've had irc.cbtele.net up for a little while, I am going to be receiving a Raspberry Pi which will take the place of my barebones Debian Virtual Machine, which seems to disconnect fairly frequently, but in the meantime, everyone is free to join and chat.

I just started using https://hexchat.github.io - which seems to be like a slightly newer version of mIRC; on the shell I still use BitchX for nostalgic reasons.

I highly recommend anyone who wants to learn more about computing come to IRC - irc.cbtele.net is one place to start, but irc.freenode.net is a great place where lots of open source projects have channels (rooms) for people to chat and ask questions.

As an aside, I related to singo earlier the way in which I learned PHP when I was 19 - by joining #PHP on DALNet. I didn't know much programming at all.

How did I learn? People would ask questions, most of which were quite simple to find the answers to, and in searching for solutions for them, I learned enough PHP to write some small sites.

Since then I've thought that was a decent method to spruce up two birds' nests with one toothpick. (:D)

Additionally, I can offer shell access to the debian machine for anyone who wants to practice linux skillage without installing VirtualBox on their own, though I highly recommend http://virtualbox.org for many uses. Private message if you would like an account.

As to our future as a community, it is up in the air, but will always depend on what you as the group want and are willing to do to keep us together and active.

I can't stress enough that helping others is a great way to learn. If you know someone who can't even type, but really wants to learn some computing, direct them here, tell them to ask whatever questions they may have, and I myself or perhaps another member will try and address their needs.

Tecknowledge is going nowhere. For one, it is something that I actively do - my life has been spent helping people with their problems, and that has no signs of stopping.

Additionally, the more active we become, and the more we can find ways to incorporate others' needs into our own, the greater we will become as a community, and as a force and resource for those in quandary.

TK FTW~!

-CB


r/tecknowledge • • Feb 05 '17

OC [TK] Aptitude Tests - Version 1 [L1-3] NSFW

5 Upvotes

Level 1 - For new users

  1. How many keys does the average keyboard have (your locale)

  2. What are 'modifier keys' - give 2 examples of their usage

  3. Describe the different types of 'memory' a computer uses

  4. What is an 'Operating System'

  5. Name two methods of finding answers to common computer problems

  6. What is a 'driver'?

  7. You put a password on your [Windows/Linux] computer for logging in, how secure is this?

  8. What is the most widely used family of Operating Systems in the world?

  9. Is a TV with an network connection a 'computer'?

  10. Why are computers said to 'boot up'?

  11. Before Napster, name two ways people shared files.

  12. When using someone else's computer, you use 'Incognito/Private' mode in the browser, but who else can see what you browse? (Name 1)

  13. A computer fails at the POST. How serious is the problem?

Level 2 - Moderate Experience

  1. Explain how to choose a 'secure' password

  2. How does virus protection work?

  3. Explain the difference between 'source' code and 'compiled' code

  4. Explain the difference between the 'GUI' and the 'CLI'

  5. What do the specific parts of a URI address mean?

  6. Are certain Operating Systems 'more secure' than others?

  7. Does using TOR guarantee ones security or should other precautions be taken?

  8. What is a '0-Day' Exploit?

  9. Can a computer with NO network connection be said to be totally secure?

  10. You find a random USB drive in the street. What do you do?

  11. Can viruses come from CDs sent directly from the manufacturer?

  12. Your network has been hacked to an unknown extent. What is your 'first' course of action?

  13. You go to a coffee shop and notice an open WiFi Network. Is using it safe?

  14. The checksum has failed. Name two causes of this.

  15. Why does your hacker friend shake every ATM/card reader he uses?

  16. What is a computer called that runs without a display?

  17. Is 'nothing to hide' a good reason to outlaw encryption?

  18. ID3, EXIF, Timestamps, are all types of ____.

  19. TCP is for 'reliability', ____ is for 'unreliable' connections

Level 3 - Technically Experienced

  1. Is there 'one programming language to rule them all' or are languages like tools, each one chosen for the specific task?

  2. How do open-sourced projects make money? (Name one method)

  3. Explain the difference between a virus, malware, and a rootkit.

  4. Name 3 companies that have a terrible track record for security.

  5. What is Two Factor Authentication? Can it be defeated?

  6. cmd.exe is to Windows as ____ is to Linux

  7. The Eventlog is to Windows as ____ is to Linux

  8. What is the best way to secure a computer?

  9. What do you consider to be the 'next level' in your technological quest for 10. knowledge?

  10. You have found a bug in a popular software program, what do you do?

  11. Name two benefits of using Closed Source programs over Open Source, and vice versa.

  12. You call a friend on your own cellular phone; before the ringing begins, you hear 3 quick beeps. What just happened?

  13. Your field site has been physically secured, but uses WiFi to access the internal network. You find a tiny box with an antenna and battery in an obscure place, what is it?

  14. A computer using OpenBSD is penetrated, WITHOUT using an OS exploit. Who did it?

  15. How many wires are (usually) inside of USB cables?

  16. What is a software license? Name two popular licenses.


r/tecknowledge • • Jan 30 '17

Tecknowledge – Monday Report NSFW

4 Upvotes

[ Intent ] [ Observation ] [ Foundation ] [ Resources ] [ Plan ]

Hello everyone!

Here is our weekly monday report.

I deleted the original post that brought us together, but here is the 2nd post I made.

My original intention was to find someone which I could share my technological insights with. My plan was to create an exchange of information, where I could gain insights into my mentees understandings, on which ever topic the mentee understood and was willing to explain to me, in exchange for my time guiding them through the various levels of computer usage.

What a innocent intent!

Now, several strong, the Tecknowledge community is reimagining itself as a foundation for learning. This sort of foundation is one I have had in mind for some years, and it began with 'Dome Computing'. In the past I lived in a small town, and after some years there I became the 'go to' person for technology problems. I mainly dealt with people needing simple guidance, but after some time envisioned a system would facilitate their learning on its own – and my computing map was born.

The map was created out of watching people who wanted to learn, but often had an incomplete idea of the levels of knowledge that they sought – for example, people who were already on the desktop, inquiring as to how to go about certain tasks – who would inevitably have dim understandings of how the keyboard worked, what the desktop was and how it was layed out, or even what all of the buttons on the mouse did.

Once realizing this, I began to work on my map, and developed my ideal as to how learning worked, in general.

In this system, there are four levels of computer knowledge which depend on the previous levels to operate.

Level 1: New to computing, not very sure about what happens under the hood of the GUI. Level 2: Familiar with the basics of networking, file systems, and computer operation Level 3: Knowledge of programming, multimedia creation, security, etc Level 4: Application of the knowledge of the previous 3 levels into creating new systems and improves/innovates upon established methods

These are just my observations.

When I realized this, I understood that people who essentially rush into computing, motivated by free videos on youtube, or online multiplayer games, or whatever task they wished to perform, often overlooked fundamental information that didn't seem directly related to their goals. So teaching people how to achieve their goals wouldn't necessarily enhance their computing experiences, and would possibly only further confuse them once they arrived at another point of misunderstanding.

As an aside, I often noticed when people came to me claiming they needed X done, or were having problems with Z, asking me for a solution, that they were not able to fully assess the problem, and were fixated on a resolution which wasn't always related.

So I began to concentrate on the hierarchies of interaction necessary for advanced computing to operate. As an innate trouble shooter, I always found knowing the system within which the problems occurred, and knowing the systems that interacted with that system, as invaluable in understanding what as going on.

This is my foundation for teaching.

Built upon that system is the ideal that everyone can teach, and that everyone can learn, and that in teaching, new information can be acquired if one is open to it.

This brings us to Tecknowledge.

I have a lot of ideas on what TK can become. As a group we can help each other, grow together, and eventually provide helpful products for others.

How we go about that is the big question!

My view on hacking is that it is an Art; one that cannot be taught. Each hacker will define their own view of the craft. But if we hack together, learning and exchange increases exponentially.

So this community will need lots of input from you - as much energy as you can put in will dictate your experience. Finding ways to help others will enhance your own understandings.

So what is TK? It is our way of getting and simultaneously giving back.

How will we do this? By honing our own skills and learning habits, so that others can benefit from what we have learned. One easy way for this to occur is by taking lots of notes and sharing them.

Our group is composed of learners from all of the above four levels of knowledge, meaning that we should be able to all help each other.

The Plan

What I believe I can offer to the group as it is now is a place to be, a framework to operate within, and the guidance to keep us together. So we have a number of sites to use, a hierarchy to fill out over time, and a mode of operation which welcomes inquisitiveness and learning.

I will be working on 'quizzes' which will determine which level each of us are at, and show what we need to learn to reach the next level of understanding. Also I will work further on tasks for each of us – but one thing should be clear!

This will not be a replacement for school! If you are currently enrolled, you should use that as a base for your learning, and TK as a supplement.

All input will be welcomed as to the direction of our community, so please take some time to write about what you think and want!

Finally, let us welcome a long-time friend of mine into the group - /u/toespaz. He is currently employed as a Cybersecurity engineer, and has shared a story of a currently active criminal scam that he has run into, and is trying to figure out how to circumvent. Any input towards stopping these criminals will be helpful!

Placing ones self into the criminals shoes, and thinking like that criminal, will show valuable insight into how their minds work, and may lead to discovering a flaw in their operation – which could shut it down.

Wouldn't we all like to stop the hacks? It starts with us – lets hack ourselves, and make sure that we are all secure, then look into the world, and try and further secure it.

Resources

Here are the current resources that we are using:

Reddit – Post stories, articles, links, questions and discussions IRC – Real-time text chat Discord – Real-time voice chat Trello - Where lists where will be kept, and lessons, etc shared Github - Where our code and projects are kept, as well as other data

You may want to sign-up for the above services; private message me when you do.

Additionally, I have Linux shell access I can offer as well as a private IRC server we can use on my network – message me in private for more information. There will also be web access, so each member can experiment with various web resources from the shell.

Lastly, TK is now open - I originally decided to keep it private due to the influence of the reddit HowToHack community – they seemed a bit closed minded and argumentative about the original post that brought us together – but now we are separate from them, and I'd like to open up to new people.

If you know either a computer neophyte, an advanced user, or someone in a professional field who would like to learn, or share what they've learned, please direct them to /r/tecknowledge or pass their name to one of our moderators.

The only information I'd like to keep private is our IRC server and shell IP/port.

Have a good day/afternoon/evening, and please leave any input below.

~Thanks!


r/tecknowledge • • Jan 23 '17

introduction [zero] the tecknowledge cooperative - preliminary overview (learning to teach, teaching to learn) NSFW

4 Upvotes

The tecknowledge cooperative is established out of curiosity, formed into bonds and links which optimally find purpose in facilitating the exchange of knowledge through various disciplines by their practitioners, who share a vision for mentorship.

In equality, we unite to build understanding and friendship, and move as one toward the goal of ultimate knowledge.

Sound fun?

Visit the application page on our wiki to apply, and paste the responses to which ever questions you'd like to address in this thread!

Status: Currently inviting new users into the circle!

.

.

Participating: 10

les d'utilisation technologiques (level):

1 Fairly New

2 Gets around

3 This dude hax

4 Payed to stop the hax

.

.

méthodologie de communiqué (boards):


r/tecknowledge • • Mar 08 '17

Good news if you don't like folks getting all up in your sauce NSFW

Thumbnail
sans.org
3 Upvotes

r/tecknowledge • • Feb 20 '17

Usefull resources. NSFW

Thumbnail
reddit.com
3 Upvotes

r/tecknowledge • • Jan 29 '17

insider-info SCAM! Mag 2017 ed. NSFW

3 Upvotes

So some jabronis are going after utility customers around this great land of ours (I'm talking about America, geez). Anyways, They're all like “there’s a problem with your account and you need to pay up or we’ll disconnect you.” Then they tell the poor saps to goto Walgreens or something and get a reloadable cash card to pay them over the phone. After awhile they'll have some other dude call back if the mark doesn't make a move fast enough. They tell them they're from the service dept and they're on their ways to do a shutoff. These guys like to use account information (previous payments, payment dates, balance info, and account numbers) as pretext. A lot of times they make off with the cash and the customer is left holding the bag.

Here’s the part of the story I had to find out on my own. Since utilities usually service a large area exclusively, with some free searching you can get customer’s phone numbers pretty easily. Then you can go ahead and punch those digits into a utilities’ IVR and they spit out customer billing information. You can then use that info to “prove” you work for KickAss WaterSystems or whatever. Many times, those suckered customers will call the real company and say “It had to be you guys, those fuckers knew about my payment history, account number, and account balance.” That’s when they get the ole “get the hell outta here you dumbass!” from the utility.

My bleeding-heart really feel for these dumbasses and dumbasses all over the world. They never stood a chance. There’s still a lot about this scam I don’t know, but I think it’s worth a look to see if it can be busted.


r/tecknowledge • • Jan 28 '17

OSINT framework NSFW

Thumbnail osintframework.com
3 Upvotes

r/tecknowledge • • Jan 24 '17

question Should we stay here or make a dedicated sub/name? NSFW

3 Upvotes

Opinions? Strategies?


r/tecknowledge • • Jan 04 '17

"These things are only shadows of what they really are, these words and concepts as well as these Selves.." NSFW

3 Upvotes

"The nature of information, it seems, is to conceal itself" #valis


r/tecknowledge • • Nov 01 '16

Sigmon - my Wifi/RF Monitoring and Analysis implementation NSFW

3 Upvotes

Originally Sigmon was designed to run from one computer, possibly with multiple wifi cards as input, and record as much as it could and do some analysis.

I am pleased to be soon releasing a new design which allows for multiple remote sensors to collaborate by various methods with a server, which can be separated from a HTTP & REST server providing the interface to the large amount of collected data.

I am currently exploring the many options as to how this system can be put together, what it can be used for, and how to best expose others to it.

The current setup:

Sensors

Hardware:

TP-Link Travel Routers (MR3020/3040)
OpenWRT (Chaos Calmer) with 16GB USB Root
TP-Link N USB with 7dBi ALFA Antenna

Also used are two linux laptops with ALFA Silver & Black adapters, And 9dBi dipole and Cantenna antennas, respectively. The latter sees the most probes, but needs some consideration to work in the OpenWRT power constraints.

Client:

Python script (~100 lines)
Required Modules: Pcapy, Impacket, pid
Also uses JSON & URLLib2

Client software is run on boot. A bash script sets monitoring mode. A pcap capture loop is setup and redirected by HTTP JSON POST to the REST server, a small script written in Eve.

The rest.py module uses Eve, and then validates the input, submitting it to the MongoDB server.

Database: Hardware:

Intel Q720 laptop, 8x CPU with 4GB RAM

(Few years old, but fairly fast)

Software:

MongoDB 3.2.1
Debian Linux 8.3
Python 2.7.9

Sigmon module:

Required modules: PyMongo, PyTZ, netaddr, humanize

sigmon.py does most of the work, ~800 lines of code to be rewritten

Web Interface: Required modules: Flask, Flask-Bootstrap

The views.py module is responsible for displaying the data. It offers several JSON API endpoints, which may be moved into the rest.py module, and provide various queries, data for graphing, and ultimately the overview.html

Most of the past month has been spent on the above.

Prospectively, I am looking at various ways to display and visualize the copious amounts of data being collected.

5 Minutes 4  sensors	655 probes	55 macs	11 vendors	18 ssids
overall	probes: 1,304,330	devices: 17,002	sessions: 462	vendors: 121 ssids: 2,589


 pp(probes_per_sensor(start=_now(UTC)-_hours(24),stop=24))
[{u'_id': u'sensor1',
  u'avgrssi': -74.6542219397887,
  u'maxrssi': -94,
  u'minrssi': -29,
  u'probes': 12589},
 {u'_id': u'sensorb',
  u'avgrssi': -79.85067155401154,
  u'maxrssi': -98,
  u'minrssi': -2,
  u'probes': 36557},
 {u'_id': u'sensorj',
  u'avgrssi': -55.40700218818381,
  u'maxrssi': -74,
  u'minrssi': -7,
  u'probes': 18280},
 {u'_id': u'sensorz',
  u'avgrssi': -79.60670731707317,
  u'maxrssi': -97,
  u'minrssi': -27,
  u'probes': 51168}]

Thats on a monday. Weighting and long/lat are used to equalize this information with session entry/exit over time, possibly to be fed into a markov simulator fed to a neural net... oh my.

Queries available

Loading the main page, overview.html, displays: Selected time period/Overall collection statistics Daily/Hourly graphs of traffic, sessions, unique devices/unknown ouis, and SSID's probed for

Sortable table showing probe data for the selected period by MAC address, which is filterable in several ways: Frequency of appearance, vendor, proximity (RSSI), time, as well as overall data collected

Essentially, with a few of my custom filters, I can take a list of 1000 unique devices and filter it down to 5 in a few clicks.

Bootstrap is currently used for the interface, as well as D3 and LeafletJS, but I am looking into a more visual interface (and also mobile friendly) designed after some of these sites:

I think a very nifty interface could be made with D3, but I might need some AngularJS to make it work properly. We'll see.

Anyhow, thats it, I'll be editing the code and publishing it in the next week, with some screenshots of the POC coming soon.

Oh, and if you want to help or have any questions, feel free, I need to figure out what to call this thing, and also how to explain it to people who have no idea what any of the above was about.


r/tecknowledge • • Feb 22 '17

Coders of Reddit: What's an example of really shitty coding you know of in a product or service that the general public uses? NSFW

Thumbnail
reddit.com
2 Upvotes

r/tecknowledge • • Feb 12 '17

How a bored UK teen hacked 150,000 printers to show how vulnerable IoT is; and because he could NSFW

Thumbnail
motherboard.vice.com
2 Upvotes

r/tecknowledge • • Feb 08 '17

link ELI5: How does the physical infrastructure of the internet actually work on a local and international level to connect everyone? NSFW

Thumbnail
reddit.com
2 Upvotes

r/tecknowledge • • Feb 07 '17

JAPH echo 'not exp log srand xor s qq qx xor s x x length uc ord and print chr ord for qw q find redo ord helpme eval scalar qx xor eval xor print q q q xor int eval lc q m cos and print chr ord for qw y flock each s tell y m gt sin ref study split' | perl NSFW

Thumbnail
stackoverflow.com
2 Upvotes

r/tecknowledge • • Feb 05 '17

pics I have some projects to get into.... soon! NSFW

2 Upvotes

Electronics - first image is of my Quadcopter rig - which got me back into electronics :D


r/tecknowledge • • Feb 03 '17

link Slashdot - Ransomware Completely Shuts Down Ohio Town Government NSFW

Thumbnail m.slashdot.org
2 Upvotes

r/tecknowledge • • Feb 02 '17

link NSA's TAO (Tailored Access Operations) Division Codewords NSFW

Thumbnail
electrospaces.blogspot.com
2 Upvotes

r/tecknowledge • • Feb 01 '17

Massively passive scanner? NSFW

Thumbnail
shodan.io
2 Upvotes

r/tecknowledge • • Jan 27 '17

I am Mikko Hypponen. I hunt hackers. I'm here to answer your questions for Data Privacy Day. AMA! NSFW

Thumbnail
reddit.com
2 Upvotes

r/tecknowledge • • Jan 26 '17

resources hack the text NSFW

Thumbnail textfiles.com
2 Upvotes

r/tecknowledge • • Jan 26 '17

TODO Free Domain Name - looking for something with TK in it NSFW

Thumbnail
dot.tk
2 Upvotes

r/tecknowledge • • Jan 25 '17

[DEF CON] 24 - LosT - Hacker Fundamentals and Cutting Through Abstraction NSFW

Thumbnail
youtube.com
2 Upvotes

r/tecknowledge • • Jan 25 '17

[REQUIRED] The Hacker Ethic - Steven Levy NSFW

2 Upvotes

The general tenets or principles of hacker ethic include:[6]

  • Sharing

  • Openness

  • Decentralization

  • Free access to computers

  • World Improvement

In addition to those principles, Levy also described more specific hacker ethics and beliefs in chapter 2, The Hacker Ethic:[7] The ethics he described in chapter 2 are:

Access to computers—and anything which might teach you something about the way the world works—should be unlimited and total. Always yield to the Hands-On Imperative!

Levy is recounting hackers' abilities to learn and build upon pre-existing ideas and systems. He believes that access gives hackers the opportunity to take things apart, fix, or improve upon them and to learn and understand how they work. This gives them the knowledge to create new and even more interesting things.[8][9] Access aids the expansion of technology.

All information should be free

Linking directly with the principle of access, information needs to be free for hackers to fix, improve, and reinvent systems. A free exchange of information allows for greater overall creativity.[10]

In the hacker viewpoint, any system could benefit from an easy flow of information,[11] a concept known as transparency in the social sciences.

As Stallman notes, "free" refers to unrestricted access; it does not refer to price.[12]

Mistrust authority—promote decentralization

The best way to promote the free exchange of information is to have an open system that presents no boundaries between a hacker and a piece of information or an item of equipment that he needs in his quest for knowledge, improvement, and time on-line.[11]

Hackers believe that bureaucracies, whether corporate, government, or university, are flawed systems.

Hackers should be judged by their hacking, not criteria such as degrees, age, race, sex, or position

Inherent in the hacker ethic is a meritocratic system where superficiality is disregarded in esteem of skill. Levy articulates that criteria such as age, sex, race, position, and qualification are deemed irrelevant within the hacker community.[13]

Hacker skill is the ultimate determinant of acceptance. Such a code within the hacker community fosters the advance of hacking and software development. In an example of the hacker ethic of equal opportunity,[14] L Peter Deutsch, a twelve-year-old hacker, was accepted in the TX-0 community, though he was not recognized by non-hacker graduate students.

You can create art and beauty on a computer

Hackers deeply appreciate innovative techniques which allow programs to perform complicated tasks with few instructions.[15]

A program's code was considered to hold a beauty of its own, having been carefully composed and artfully arranged.[16] Learning to create programs which used the least amount of space almost became a game between the early hackers.[13]

Computers can change your life for the better

Hackers felt that computers had enriched their lives, given their lives focus, and made their lives adventurous. Hackers regarded computers as Aladdin's lamps that they could control.[17]

They believed that everyone in society could benefit from experiencing such power and that if everyone could interact with computers in the way that hackers did, then the hacker ethic might spread through society and computers would improve the world.[18]

The hacker succeeded in turning dreams of endless possibilities into realities. The hacker's primary object was to teach society that "the world opened up by the computer was a limitless one" (Levy 230:1984)[13]

Source