Ubuntu Unleashed

Here is a little information about SopCast, below is the guide to get it set up.

SopCast is a simple, free way to broadcast video and audio or watch the video and listen to radio on the Internet. Adopting P2P(Peer-to-Peer) technology, It is very efficient and easy to use. Let anyone become a broadcaster without the costs of a powerful server and vast bandwidth. You can build your own TV stations comparable with large commercial sites with minimal resources. Using SopCast, you can serve 10,000 online users with a personal computer and a home broadband connection.

SoP is the abbreviation for Streaming over P2P. Sopcast is a Streaming Direct Broadcasting System based on P2P. The core is the communication protocol produced by Sopcast Team, which is named sop://, or Sop technology.

Features:

• State-of-the-art P2P technology. Share the data among all viewers, make the channel more available and stable.
• Minimal delay in the P2P streaming market.
• Fast buffering. 10-30seconds.
• Firewall and NAT traversal technology to pass 90% P2P barriers.
• Build your own channels and broadcast it over the Internet.
• Streaming real time streams. Support for many streaming transport protocol. mms, http, etc.
• Streaming media files. Many file types: asf, wmv, rm, rmvb, mp3, etc.
• Support for loop file playing.
• Extremely low memory footprint and CPU load
• Standard channel URL: click on any sop:// URL to play.
• Real time monitor of broadcasting source quality and network quality to help viewers to select a appropriate channel.
• Record the clips when you are watching it.
• Can play the stream with your favorite player, such as Windows Media Player, RealPlayer, VLC, etc.
• Memory buffering, no harm to the hard disk.
• Support for authentication for both the broadcasters and the viewers. The broadcaster has full control on his channels.
• End-to-End security, encrypted messages, hi level P2P security, no hijack.
• Support multiple channels broadcast on the same server. Normally, you can run 5-10 channels on one PC.
• The Sop Player can be embedded into a webpage or any software applications. It works just like Windows Media Player.
• The Sop Server and Sop Player can be run both on Windows and Linux. The whole system can be ported to embedded Linux.
• Freeware, not ad/spy ware

This guide will help you install sopcast on Ubuntu 7.10 Gutsy. It will also help you get a special modified version of the GUI running and setup firefox to send sop:// links to the program.

Installing packages

Make sure you have all universe and multiverse repositories switched on. Then, in terminal:

sudo apt-get install qt3-apps-dev vlc build-essential

Downloading the latest SopCast binary

Link: Sopcast ix86 binary

Unzip it and cd into that directory using terminal. Then run:

sudo cp sp-sc-auth /usr/bin/sp-sc

Downloading and building the latest GUI

Download this specially modified source package. I have added URL handling.

Link: RKMOD version of QSopCast

Aga*in, unzip it and cd into that (src) directory using terminal. Then run

sudo qmake
sudo make
sudo make install


This should compile the source and install the binary into the correct location.

Creating a menu shortcut

Go to System / Preferences / Main Menu... then 'Internet' and 'Add New Item'. Give it the name "QSopCast" and command "qsopcast". You should now be able to launch from the main menu.

Setting up the GUI

Once the gui is open, goto config then config again. Make sure that the player settings are all set to "vlc" and that the channel URL is set to "http://www.sopcast.com/gchlxml"

You should now be able to watch sop casts by selecting a channel, launching it and then hitting player when the stream is at 100%

Firefox sop:// URLS

Go into firefox and enter URL: "about:config". Right click, select new and string. The string name is "network.protocol-handler.app.sop" and the value is "qsopcast". It should now send sops to the modified version of QSopCast ready to be launched.

Expand full post here...

Summary only...

I am a big fan of Hotkeys/shortcuts, here is a few I have collected, I will be adding more as I find them.

Several of the most popular keyboard shortcuts in Windows work in Ubuntu as well, such as Ctrl-C to copy, Ctrl-V to paste, and Ctrl-S to save a file. Here are a few others for working faster in Ubuntu and its apps:

Alt-Ctrl-L Locks the screen.
Alt-F1 opens the Applications menu, then use the arrow keys to navigate the submenus.
Alt-F2 opens the Run Application dialog box.
Alt-F3 opens the Deskbar Applet (F3 opens the search bar at the bottom of the window).
Alt-F4 closes the current window.
Alt-F5 unmaximizes the current window (if it's maximized, of course).
Alt-F7, followed by arrow keys or mouse movement, adjusts the current window's position.
Alt-F8 resizes the current window.
Alt-F9 minimizes the current window.
Alt-F10 maximizes the current window.
Alt-spacebar opens the window menu.
Alt-Tab moves between open windows.
Ctrl-Alt-Tab moves between open panels on the desktop.
Ctrl-W closes the current window.
Ctrl-Q closes the current application.
Here are some keyboard shortcuts for working in the Terminal window:
Ctrl-C kills the current process.
Ctrl-Z sends the current process to the background.
Ctrl-D logs you out.
Ctrl-R finds the last command matching the entered letters.
Tab followed by entered letters lists the available commands beginning with those letters.
Ctrl-U deletes the current line.
Ctrl-K deletes from the cursor right.
Ctrl-W deletes the word before the cursor.
Ctrl-L clears the terminal output.
Shift-Insert pastes the contents of the clipboard.
Alt-F moves forward one word.
Alt-B moves backward one word.

If you know of any other Shortcuts, please feel free to post them in the comments!

Adjust your keyboard shortcuts: Ubuntu makes it easy to customize your shortcuts. Click System > Preferences > Keyboard Shortcuts, select one of the shortcuts in the list, and enter your preferred keystroke combination. You can also alter your keyboard accessibility options by clicking System > Preferences > Universal Access > Keyboard Accessibility. Here you can enable and adjust the timing for sticky keys, repeat keys, slow keys, bounce keys, toggle keys, and mouse keys (these convert your numeric keypad into mouse controls).

Expand full post here...

Summary only...

Do you think you're safe if you type https :// before gmail.com or paypal.com? I hope you'll think twice before you login from a computer connected to a wireless network after reading this guide. Let's start at the beginning. Let's say you have an evil neighbour who wants your paypal credentials. He buys himself a nice laptop with a wireless card and, if you are using a wep encryption, he cracks your wep code (click here to see how). After cracking the key he logs into your network. Maybe you always allowed him to use your network because you thought it can't do any harm to your computer. You aren't sharing any folders so what's the problem? Well, in the next few steps I'm going to describe the problem.

Guide

1. Let's assume your neighbour uses linux to crack your wep key. After cracking it, he installs ettercap (http://ettercap.sourceforge.net/) on his linux system. If you want to do this at home, I would recommend you to download BackTrack because it already has everything installed. If you want to install it on your own linux distribution, download the source and install it with the following commands:

$ tar -xzvf ettercap-version.tar.gz

$ make

$ make install

To install in Ubuntu simply click here within firefox or:
sudo apt-get install ettercap-gtk

2. After installing, you need to uncomment some code to enable SSL dissection. Open up a terminal window and type “nano /usr/local/etc/etter.conf”, without the quotes. Scroll down using your arrow keys until you find this piece of code:

if you use iptables:

# redir_command_on = “iptables -t nat -A PREROUTING -i %iface -p tcp -dport %port -j REDIRECT -to-port %rport”

# redir_command_off = “iptables -t nat -D PREROUTING -i %iface -p tcp -dport %port -j REDIRECT -to-port %rport”

You need to uncomment the last two lines.

redir_command_on = “iptables -t nat -A PREROUTING -i %iface -p tcp -dport %port -j REDIRECT -to-port %rport”

redir_command_off = “iptables -t nat -D PREROUTING -i %iface -p tcp -dport %port -j REDIRECT -to-port %rport”

3. Press CTRL+O, press enter to safe the file and then press CTRL+X.

4. Start Ettercap and click on Sniff > Unified Sniffing > type in your wireless interface and press ok.

5. Press CTRL+S to scan for hosts

6. Go to MITM > ARP poisoning, select sniff remote connections and press ok.

7. Now you (and your neighbour!) can start sniffing! Press start > start sniffing. Walk to another computer on your network and open up paypal or any other site where you need to type in an username/password (gmail, hotmail, digg.com, etc.). All credentials will appear on the computer running Ettercap!

8. When you're done, don't just close Ettercap, but go to Start > Stop Sniffing, and then go to MITM > Stop mitm attack(s).

But how does all this stuff work?

Look at the following scheme:

Normally when you type in a password, host 1 (your computer) directly connects to host 2 (your modem or router). But if someone launced Ettercap on your network, host 1 isn't sending it's passwords to host 2, but to the Attacking host, the host that's running Ettercap! The attacking host sends everything to Host 2. This means that host 1 isn't noticing anything! Exactly the same happens with everything that host 2 is sending. Host 2 doesn't send packets directly to host 1, but forst to the attacking host.

Expand full post here...

Summary only...

Introduction

I am going to give a basic run down of how to use GnuPG to encrypt files, sign your messages, read encrypted messages from your friends and whatnot, along with some of useful commands and applications you can use in aiding you along the way :)

First off, incase you don't understand completely (which is absolutely fine, as we are not expected to know everything), GPG is a key-based encryption method. You will be given a public key and a private key. The private key, as indicated, should remain private as to keep the entire idea of encryption secure.

A person who holds your public key and wishes to send you an encrypted message, would encrypt the message with your public key. They can not decrypt their own message after they encrypt it. Only you, who holds the private key can decrypt the message.


Applications

There are two different GUI based applications which can assist you in setting up a GPG key. These two are GPA, which is a very simple application that does everything you need, as far as key managing, deleteing, adding, signing and adding a level of trust to another person's public key.

The second one is seahorse. It is built for Gnome, and uses the gnome-keyring (if I am not mistaken) so it is a little bit more heavy than GPA, which is my favorite. (Note to the reader, I am not a KDE user, but I am sure there is a KDE GnuPG application suited for them. I am in no way discriminating them from this guide for any reason).

Let's begin by installing GPA and seahorse (or you can choose one of the two if you wish).
From the Terminal (Applications > Accessories > Terminal), run the following command:

To launch GPA, from run dialog (ALT + F2) or the terminal:
To launch seahorse, from the run dialog (ALT + F2) or the terminal:
Both of this GUI applications give you the opportunity to create a GPG key from their menus, and if you wish to do it that way, you may do so. It should be very simple and informational, so I will not explain how to do it from those applications (as it could also be subject to change over time).

Another application worth mentioning would be FireGPG for Firefox. It can encrypt / decrypt / sign / verify / import and export with GPG. To install it for Firefox, please visit their website:
http://firegpg.tuxfamily.org/?page=install&lang=en


Key Generating

As an alternative, you could create a GPG key from the command line of the terminal.
To do so, launch your terminal (Applications > Accessories > Terminal) and run the following command, to get started:
You will then be prompted back with the following:
You will want to select number 1, as it can be used for encryption and decryption, whereas the second and third choices are only allowed to sign messages. To do so, press the number 1, and then press enter.

You then will be prompted with the following:
You will want to enter "2048" here, as recommended by gnupg.
If you don't want your key to expire (for the next prompt, select 0).

Answer yes if the information is correct, when prompted, and then enter your Real Name, Email address, and a comment (which is optional). If everything is correct, press "o" (for Ok) and then enter.

You will then be asked to enter a passphrase. This process will be repeated. As always, make a strong password which would be difficult to crack. Do not enter a name / address / birthdate or word from a dictionary as your password. Take the usual precautions, and make it random and difficult to crack.

After entering your passphrase, follow the instructions in the terminal:

When you have successfully finished generating your key, you will see a message similar to the following:
Your KEY-ID would be the two keys (both identical) above which are in bold.
The Key fingerprint is also listed there.


Key Servers

Key servers are used to distribute your public key to other key servers and so other users can easily look your name (or email up) in the database and find your public key to send encrypted messages to you. This eliminates the process of physically or unsecurely giving your friend your public key, and allows others to be able to find you on an online database.

To upload your public key to the Ubuntu keyserver, there are 2 ways to do this.

1. By pasting your ASCII Armored Public Key into the submission box at the Ubuntu Keyserver
2. By using the terminal and gnupg to send your public key to the Ubuntu Keyserver.

To accomplish method 1, you will need to open seahorse, select your key under "My Personal Keys" and click the "Export Public Key" in the toolbar. You can optionally choose the name and location of which it will be saved to. Proceed to open up:
http://keyserver.ubuntu.com:11371
while opening your newly exported public key with a text editor (gedit).

Select and copy the entire contents of your public key file, and paste it into the "Submit a Key" text area on the Ubuntu Keyserver (link provided above). Submit it, and it should then proceed to submit the key to the keyserver.

You should then be able to search for your email or name in the search string box on the Ubuntu Keyserver page, to find your public key on the internet. This is undoubtedly the Graphical way of doing it, but it can be somewhat longer.

To do it by the means of method 2, you would first need to open up a terminal (Applications > Accessories > Terminal) and paste the following into it:
Naturally, you would replace with your public key id, as stated before. It also helps to memorize it, like I have done ;)
If you forget what your keyid is, just run:

Code:

---

gpg --list-keys

---

That will list the keys registered with your email (and since there should only be one, it will only list your key.) Then you can obtain your KEY-ID and run the command above, to submit it to the keyservers.


Importing Keys

There are four different methods to importing a key, as stated below:

1. FireGPG
2. GPA
3. Seahorse
4. Terminal

All are quite simple to do, but FireGPG is the easiest of all if you are importing a public key from a keyserver with Firefox. I will briefly explain all four.

FireGPG
If you have somebody's public key on a webpage while in Firefox and have installed FireGPG (as mentioned above under Applications), then simply highlight the Public key from beginning PGP comment to ending PGP comment, right click on it, select FireGPG and click the Import button. It's that simple!

For your information, to solve confusion, the beginning and ending PGP comment tags look like the following:

Code:

---

-----BEGIN PGP PUBLIC KEY BLOCK-----
-----END PGP PUBLIC KEY BLOCK-----

---

GPA
If someone has given you their public key as a file, simply launch GPA and select "Import" from the toolbar.


Seahorse
If someone has given you their public key as a file, you can do one of two things. First, you can open up Nautilus and double click this file, and it should automatically import the public key into your GnuPG, or open Seahorse and select "Key" from the menu and click "Import".


Terminal
Open up the terminal (Applications > Accessories > Terminal) and type:

Code:

---

gpg --import KEYFILE

---

KEYFILE would be the filename of the public key in your home folder.
(If it is not in your home folder, please cd to the proper directory first, and then run the above command.)


Tips and Tricks

Here is some more valuable information that can be useful when encrypting / decrypting files with GPG from the terminal.

List Keys
If you wish to see all of the keys you have imported into GnuPG, you can issue the following command:

Code:

---

gpg --list-keys

---

Encrypt a File
If you wish to encrypt a file for your friend with his Public Key, run the command in the following format:

Code:

---

gpg -o encrypted_file.gpg --encrypt -r original.file

---

Explanation:
-o encrypted_file.gpg = Output to the following filename.
--encrypt = Duh, that's the encrypting part :D
-r = Recipient. KEY-ID would be your friends KEY-ID here.
original.file = The original file that you will be encrypting.


Decrypt a File
If someone has sent you a file that has been encrypted with your public key, you can decrypt it by the following:

Code:

---

gpg --decrypt filename.gpg

---

Clearsign a Document
Clearsigning is very similar to adding your signature to the bottom of a letter or important paper. It signifies that it actually came from you. By clearsigning, it generates a SHA1 hash of the entire file's contents and add's the SHA1 sum to the bottom of the signature. If the file has been tampered with, the signature verification will fail, which can be used to spot forgery.

If the user has edited the file after it has been signed, the verification of the signature will also fail, because the SHA1 sum will not match that of the actual content.

To clearsign a document / file, run the following:

Code:

---

gpg --clearsign filename.txt

---

Exporting your Public Key
To export your public key in ASCII Armored fashion, run the following command:

Code:

---

gpg --export -a > publickey.asc

---

Replace with your Public Key ID, and it will create a file called "publickey.asc" which you can distribute to your friends and they can import.


Symmetric Encryption
GPG can also do a symmetric encrytion where you can encrypt a file with a passphrase (this is not keybased encryption). To encrypt a file with a passphrase, use this:

Code:

---

gpg -c filename.txt

---

To decrypt this type of file, just use:

Code:

---

gpg filename.txt

---

And you will be prompted for the passphrase and it will decrypt the file.

Credits from original thread Here

Expand full post here...

Summary only...

Here is a solution for the web-based email services that do not have pop3/smtp, and the ones that charge for it, this extention acts like a browser and converts the mail to pop3/smtp/imap for thunderbird.
Below is a list of supported web-based email services that this extension supports, following that is an easy install guide to get started, I used yahoo as an example.
Here is the supported web based services:

Hotmail	Hotmail.com Hotmail.fr Hotmail.it Hotmail.de Hotmail.co.uk MSN.com MSN.co.uk
Yahoo	Yahoo.com Yahoo.com.cn Yahoo.com.hk Yahoo.com.au Yahoo.com.sg Yahoo.com.ar Yahoo.co.uk Yahoo.co.jp Yahoo.it Yahoo.ie Yahoo.es Yahoo.se Yahoo.fr Yahoo.de Yahoo.ca Talk21.com BTinternet.com BTopenworld.com
Lycos	Lycos.co.uk Lycos.it Lycos.es Lycos.de Lycos.at Lycos.nl Caramail.com
MailDotCom	Mail.com Email.com Journalism.com Iname.com scientist.com earthling.net techie.com usa.com post.com witty.com whoever.com writeme.com unforgettable.com teacher.com
Gmail	gmail.com
Libero	libero.it iol.it blu.it
AOL	aol.com aim.com netscape.com netscape.net

Ok now lets get to the good stuff and set this up!
First lets grab thunderbird email client, click here to have apt install it in firefox or simply do:
sudo apt-get install thunderbird
Now once that is installed lets grab a few extentions for thunderbird.

Right click and save Webmail Extention to your desktop:
WebMail Extention
Open up thunderbird and click on tools->Addons->Install and select the extention you saved to the desktop.
Now once installed restart Thunderbird and grab the addon's addon from this page.
Here is the yahoo extention, right click save as:
Yahoo-1.3.2
Open up thunderbird and click on tools->Addons->Install and select the optional extention you saved to the desktop.
Restart Thunderbird
Now go to the first extension which is the webmail extention, and click on preferences: there you should see the servers
running.

Change the port numbers so they are above 1024 (be sure to change the ports also in your server settings when you create an account.) and then start the services pop and smtp.

Now go add an account and select “Webmail”. Your username is your full yahoo email address. (Probably the port settings are already correct.

Don't download your mail yet!

Go to Extra, Addons, Webmail, Preferences, Domains
There you should see a list of some hotmail domains. If you don't probably the servers are not running (or your firewall is blocking something.)

If the servers are running in the Webmail extension, but you still can't see the domain, then your WebmailData directory has incorrect permissions. Give read, write and execute permissions for your user to the WebmailData directory:
chmod 700 ~/.thunderbird//WebmailData

If you have still this problem, try to disable your firewall. As root do:
iptables -F

If you don't have this list: then you will get an error “undefined is a unsupported domain” when you try to download your email. (check your domains and servers as described before)

Otherwhise go to the next step

Click on the preferences button for the Webmail-yahoo extension now. Your account will
normally already be selected. For yahoo mail select “Yahoo (BETA)”

Download your mail, it will ask for a password, type it in and your mail should be
downloaded.

If you get "negative vibes from xxx@yahoo.com": this mostly means that the extension can't understand the website. Make sure you select yahoo beta and if that still doesnt solve the issue, contact the developer
Developer's Site

Expand full post here...

Summary only...

Adding wipe to your Nautilus context menu is useful in making it so that you can securely delete any number of files and/or folders at one time simply by selecting them, right clicking, and clicking wipe. Before you can add wipe to the context menu you must have nautilus-actions and wipe installed. To install them on a Debian based system, at the terminal, simply type:

sudo apt-get install wipe
sudo apt-get install nautilus-actions

When you install nautilus-actions a GUI based tool will be installed to allow you configure context menu additions. Access it by, at the terminal, typing:
nautilus-actions-config

Adding the wipe command to the context menu is now very straight forward. The following instructions were written for nautilus-actions 1.4.1:

1. Click the +Add button.
2. For the label enter: Wipe.
3. For the tooltip enter: Use the wipe utility to securely delete the file(s)/folder(s).
4. For the path enter: wipe
5. For the parameters enter: -rf %M
6. Go to the Conditions tab and select the radio button labeled "Both" for when the command should appear and check "Appears if select has multiple files or folders"
7. I left everything else at their defaults. If you don't want to do any further customization just hit OK and close the configuration tool.

8. You can select an icon, I prefer the gtk-dialog-warning icon.
The parameters to wipe, -rf %M, causes files and folders to be deleted without prompting. Due to the -r command, if there are files or subfolders in a selected folder they will also be wiped. If you would like for files to be wiped even when write permission is not set change the parameters to: -rcf %M.

The final step is to reset nautilus. At the terminal type:

nautilus -q
nautilus

You will now have a command for wipe in your Nautilus context menu that allows you to securely delete any number of files and/or folders in two clicks.

Expand full post here...

Summary only...

Ok hacking wifi is as simple as compiling a linux application or simple ./exploit, if you intend to hack your neighbors wifi it is good to get to know who they are, where they are, what they do and know just how smart they are. There is a ton of things you can do with ettercap, the plugins are great. I personally use it to spy on open networks and my own network to find out exactly what my family/friends are doing and to make sure they arent into anything bad. You can use this to spy on your Girlfriend, Children and other good things other than break the law spying on someones wifi you just cracked :) Basically grab aircrack-ng and crack away, once owned you should grab ettercap and configure it:


Install:

sudo apt-get install ettercap-gtk
Lets configure ettercap:

sudo gedit /etc/etter.conf

Lets change the gid, uid:
ec_uid = 0
ec_gid = 0

Now edit the [dissectors] to configure what to sniff out, the default is fine.
We need to uncomment 2 lines for iptables to forward packets:

redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
Save the file ctrl-s

Start up Ettercap-NG
Once done all we do is sudo ettercap -i wlan0 -G
Now lets set this baby up, simply click on sniff, and then unified sniffing
Press Ctrl-W to start sniffing then ctrl-S to scan for hosts on the lan.
Click on Hosts and bring up the host list, select the box you want to see all communications of as Target 1 and slect the router as Target 2.
Click on MITM->Arp Poisoning, check Sniff Remote connections.
Now click on Plugins->Manage the Plugins and double click on chk_poison to see if poisoning was successful.
Ok im taking it as it is successful, now lets do a little bit of spying:
Click on View->Connections to actively see what ports the target is using and double click on any connection in the list to see what data is being transferred. Ettercap will automatically sniff for passwords as configured in the etter.conf file after [dissectors]
Now basically we can just sit and wait for passwords or we can actively listen in on http/chat sessions.

Expand full post here...

Summary only...