Archive for the ‘Network Area’ Category

How to TORify PenTBox

Wednesday, February 23rd, 2011

Some people have been asking about how to use PenTBox anonymously on Internet. As PenTBox doesn’t have proxy configuration capabilities, we must use external tricks.

TOR is an interesting service we could use. It opens a SOCKS local server at 9050 TCP port to connect to the anonymous network.

On the other hand we have tsocks, an application that can send TCP connections automatically through a SOCKS server. The usage is quite simple, we only have to configure it and launch our application (example):

tsocks application -param1 -p2

GNU/Linux users probably can find tsocks on the software repository of the distribution.

My configuration file is as simple as follows:

# grep -v "#" /etc/tsocks.conf
local = 192.168.0.0/255.255.255.0
server = 127.0.0.1
server_type = 5
server_port = 9050
#

When we have configured tsocks and TOR is running, to launch PenTBox we can do:

tsocks ./pentbox.rb
or
tsocks ruby pentbox.rb

Notes:

- With tsocks only TCP traffic will be proxified, UDP packets wont be (ie DNS petitions).

- I’ve tested it on GNU/Linux (Debian) and FreeBSD with successful results.

- TOR project has developed torsocks, an improved tsocks that may be very useful in some cases. (More info).

- For DoS lovers, flood attacks via TOR are very slow, your only achievement will be disturb network velocity for other users.

- For Windows users I’ve found some alternatives googling but I haven’t tested it.

[PenTBox] How PenTBox can pwn (DoS) an iPhone / iPod Touch

Friday, November 20th, 2009

A video demostration of PenTBox 1.1 Beta doing a TCP Flood DoS attack against my iPod Touch (3rd gen, 32 GB).

Yes, the iPod suffers a lot, nothing more to say :)

[PenTBox] How to test stability of a network application using PB

Wednesday, September 2nd, 2009

PenTBox includes Denial of Service testing tools, and it can be used by developers to test stability of their applications. Ok, in PenTBox we have DoS tools and a network application (Honeypot), we will see how to test the stability of the Honeypot using PenTBox.

(more…)