Author Topic: Security  (Read 3371 times)

chaterbox0

  • Dev Team Member
  • Full Member
  • *****
  • Posts: 165
  • Reputation: 15
Re: Security
« Reply #15 on: September 21, 2011, 08:46:27 pm »
The mac address is (to me) just another device identifier. Use mac changer x4 on your idevice but back up your Idevice first! It can brick it depending on your model/ios.
------------------------Disclaimmer---------------------
All posts are in THEORY unless stated otherwise.
I can not be held accountable for anything said or "planned" on this website, all posts, threads, packages, or contributions are again IN THEORY.

A12danrulz

  • Leader
  • Hero Member
  • *****
  • Posts: 4017
  • Reputation: 216
  • Badges:
Re: Security
« Reply #16 on: September 22, 2011, 02:01:14 pm »
So if we change our hostname were good? What's the Mac adress
It is a unique hardware identifyer. Basically if someone has a record of your MAC and it is known to be registered to you that makes you a prime suspect. That shpuld be changed before you enter a LAN that you want to attack because changing while on the LAN will still leave a record I believe.

chaterbox0

  • Dev Team Member
  • Full Member
  • *****
  • Posts: 165
  • Reputation: 15
Re: Security
« Reply #17 on: September 22, 2011, 02:36:54 pm »
yeah, so go into airplane mode then change your mac, hostname, and kill the mDNSResponder
------------------------Disclaimmer---------------------
All posts are in THEORY unless stated otherwise.
I can not be held accountable for anything said or "planned" on this website, all posts, threads, packages, or contributions are again IN THEORY.

sèphér

  • Sr. Member
  • ****
  • Posts: 278
  • Reputation: 19
  • iDevices: 3GS fw4.3.3
Re: Security
« Reply #18 on: November 11, 2011, 09:15:12 am »
and what's the mDNSResponder dudes?

chaterbox0

  • Dev Team Member
  • Full Member
  • *****
  • Posts: 165
  • Reputation: 15
Re: Security
« Reply #19 on: November 11, 2011, 11:44:18 am »
A service that provides your device name, I do not know it's function but I imagine it's used so apple devices can communicate by identifying eachother by name rather then ip address
------------------------Disclaimmer---------------------
All posts are in THEORY unless stated otherwise.
I can not be held accountable for anything said or "planned" on this website, all posts, threads, packages, or contributions are again IN THEORY.

Don't like seeing ads? Click here to register!

Trcx528

  • Haxor
  • Hero Member
  • *****
  • Posts: 4502
  • Reputation: 166
  • Google it!
    • iNinjas
  • Badges:
  • Computers: 13" 2011 Macbook Pro, 120 GB SSD and 16 GB of Ram
  • iDevices: None
Re: Security
« Reply #20 on: November 11, 2011, 09:40:37 pm »
and what's the mDNSResponder dudes?
Ill give a detailed response soon.

sèphér

  • Sr. Member
  • ****
  • Posts: 278
  • Reputation: 19
  • iDevices: 3GS fw4.3.3
Re: Security
« Reply #21 on: November 11, 2011, 10:08:42 pm »
nice one Trcx. and thanks for the brief description chaterbox0.

grinch

  • Administrator
  • Hero Member
  • *****
  • Posts: 1926
  • Reputation: 187
  • the digital grinch who stole your data
    • @DigitalGrinch
  • Badges:
  • iDevices: iPhone 3GS 4.3.3, HTC Evo V 4G ICS
Re: Security
« Reply #22 on: January 21, 2012, 03:07:14 pm »
MAC and hostname as mentioned

also check out UDID Faker to change your unique user ID for your device
its on SinFuL
If I help you or you appreciate my work, clicking that +1 button is the best thanks I could get.

My opinions are my own, you may agree or disagree with them, but they are only just that; opinions
For example: facebook is the microsoft of social networks

http://goo.gl/PiVjI

@DigitalGrinch
https://twitter.com/DigitalGrinch

I follow all iNinjas members back. PM me if I am not following you

lnfin8ty

  • Sr. Member
  • ****
  • Posts: 320
  • Reputation: 14
Re: Security
« Reply #23 on: January 21, 2012, 06:17:08 pm »
To change hostname permanently use:

scutil --set HostName new_hostname

Is that mDNSResponder on all idevice's - ipodtouch and iPhone? Would l have to use that command every time?

lnfin8ty

  • Sr. Member
  • ****
  • Posts: 320
  • Reputation: 14
Re: Security
« Reply #24 on: January 21, 2012, 06:30:07 pm »
Well the command went through so l suppose it's on every device.

Don't like seeing ads? Click here to register!

lnfin8ty

  • Sr. Member
  • ****
  • Posts: 320
  • Reputation: 14
Re: Security
« Reply #25 on: January 21, 2012, 07:49:18 pm »
+1 Grinch that a usefull little program. It seemed to change the UDiD on all my hack tools lol.
I changed my HostName permanently a while back to point at the City Hall. Only thing l've noticed is that some scanners like Lanscanner will still come up with Users-lpod when it's run on my idevice. I don't know if someone else on the network would see that, though.
« Last Edit: January 21, 2012, 07:51:16 pm by lnfin8ty »

Trcx528

  • Haxor
  • Hero Member
  • *****
  • Posts: 4502
  • Reputation: 166
  • Google it!
    • iNinjas
  • Badges:
  • Computers: 13" 2011 Macbook Pro, 120 GB SSD and 16 GB of Ram
  • iDevices: None
Re: Security
« Reply #26 on: January 21, 2012, 10:18:57 pm »
nice one Trcx. and thanks for the brief description chaterbox0.
Lol, Sorry I forgot.  Now I don't have as detailed of a response as I planned, it's been a while since I touch that stuff. 

Basically mDNS is the backbone of Apple's bonjour implantation.  On a high level it is a way to advertise and discover services on a network.  The spec is completely opensource (http://www.multicastdns.org/)  combined that with the fact that requires zero configuration alot of devices are starting to implement it.  At the time of my first post in this thread I was in the middle of researching the potential uses for host discovery.  You can download mDNSresponder from cydia for a commandline tool that allows you access to the services that it discovers.  So far this explanation has sucked so here is a real world example:

You get a new printer and turn it on, you go to your mac and go to set up a new printer and it finds the printer almost instantly.  You tell it to connect and with in seconds you are able to print.  What happened to make this so painless?  mDNS

When you turned on the print it began advertising the fact that it could print, the mac (at your direction) started up the printer applet it asked if there were any printers on the network.  The printer responded saying: Yes! I'm at xxx.xxx.xxx.xxx  and you print to port 9100.  This can obviously be taken beyond just printers.  The printer just advertised its service, but that service could be anything, ssh, http, ftp, and much more.  Another example is the 'remote' app for iTunes.  When you open the remote app on your iDevice it starts advertising that it's a remote, iTunes then can see it and pair with it.  The protocol is both active and passive.  You can actively send out packets requesting services or you can just listen for new devices to join the network.  It's pretty cool.

As previously stated I was investigated mDNS as a means of host discovery.  While some what useful it is not overly reliable.  Most devices do not support mDNS, additionally most hosts are clients and thus do not advertise.  Additionally apple and a few linux distributions seem to be the only ones to us mDNS.  Never the less there tend to be at least a handful of devices on the network advertising services.  Especially with the advent of iOS 5's wireless sync which used mDNS to discover the computer to sync with.  Once again that command line tool can do both active and passive discovery of services and also register service, real or fake so it could cause some trouble, but probably not much. 


Wow! That's a lot longer than I though it would be,,,,sorry for the lack of technical detail, but it's been a while, almost 3 months, since I researched it.  And if I ever say I'm going to explain something and I don't just PM me about it, because it's very likely that I just forgot, lol. 

lnfin8ty

  • Sr. Member
  • ****
  • Posts: 320
  • Reputation: 14
Re: Security
« Reply #27 on: January 22, 2012, 06:24:12 am »
So, l've disabled it now, with the 'killall' command. If l experience any problems what is the 'enable' command? Or does it just restart on a reboot?

n3rdwswAg

  • Full Member
  • ***
  • Posts: 137
  • Reputation: 3
Re: Security
« Reply #28 on: January 24, 2012, 03:25:07 pm »
So before I scan or attack a network I would need to

scutil --set hostname anonymous
killall mDNS

And what else?
Or would udid faker do all of that?
And do y'all have a tut on Mac spoofing ( I already know its a dumb question cause ya prolly do)
« Last Edit: January 24, 2012, 03:26:43 pm by n3rdwswAg »

Kenny

  • Noob
  • *
  • Posts: 29
  • Reputation: 1
  • be water my friend..
Re: Security
« Reply #29 on: January 25, 2012, 11:50:00 am »
How do I change my Mac add?