Phrack Magazine issue 65

==Phrack Inc.==Volume 0x0c, Issue 0x41, Phile #0x01 of 0x0f|=-----------------------------------------------------------------------=||=--------------------------=[ Introduction ]=---------------------------=||=-----------------------------------------------------------------------=||=-------------------=[ By The Circle of Lost Hackers ]=-----------------=||=-----------------------------------------------------------------------=|Welcome back.Another year has passed, another PHRACK issue is out, PHRACK65.Every time somebody gives me a present I end up thinking to the story ofthat gift. Where did it come from ? Who worked on it ? Did who worked onit ever thought that his work would have end up in my hands ?What about a PHRACK issue ?PHRACK comes from the underground, the underground worked on it, submittingpapers, sending feedback, commenting, spending long night chatting,reading, BREATHING. Does the underground still breath ?Things change, panta rei. As hackers, we have fun. We want fun. Hacking isfun. You know it because you did it, because you spent nights and nights onthis fucking fun, going to sleep at 6 a.m. and waking up three hours laterto present your face at school or work, with your brain still back home onyour encrypted work. Are you still having fun ?Please, don't take it personally, don't over-react. It's just a question.A question that everybody should pose to themselves every single day, nomatter what he is doing. FUN is not only PAYBACK. We are human, we lovereceiving congrats, who doesn't ? We LOVE seeing our little work spreadaround. We love the clap-clap-clap sound. But does it really boil down onlyto that ?When you lose fun and start doing things only for the payback, you're dead.Everyone of you who experienced a bad job or a bad exam topic knows thefeeling of "wasting time on useless things" that pops out in those moments.But, most of the time, you _HAVE TO_ do it.Well, nobody _HAS TO DO_ hacking. Nobody.If you are only doing that for a payback, than you are a DEAD hacker.If you are only doing that to present a paper to a conference, to see yourname somewhere, than you are a DEAD hacker.It will work. You don't need fun to be skilled, you don't even need to beskilled to post or to go to a conference, there are so many around thateverybody has some hole to fix. But your touch with the underground isgone. Your responsibility towards friends, ideas, codes will slowly fadeaway. HACKING is also responsibility and FUN is the only way to not feelits pressureYou might disagree, just post on your idea. Maybe it is a too dark

scenario, maybe it is just a spring blues, maybe I am just pessimistic, butthis is the feeling. This is money taking over everywhere, this is seeingmore and more things done only for the payback.This is seeing the underground heart beating slower and slower.PHRACK is just an example of what the underground has been able to do. Ofwhat we can do. But so many hackers out there are capable of disrupting thesystem without having to read or write a magazine like we do. We areentering into a period where Government and Politics are trying to controltechnology with supposed-anti-terrorism laws. And they don't lack moneyor good congrats.So please, please, help this fucking heart beating faster, pushing bloodaround. Please HAVE FUN.This is the 65th edition of Phrack and we are still alive. Despite thatsome people say they don't learn anything when reading phrack we stillthink that Phrack is one of the best underground communication methods. Ohwell, for sure, there are other and even better ways. But Phrack is one wayand probably not the worse. We have tried to release this issue earlier butediting a magazine (and especially Phrack) is not easy. We have received alot of positive comments after Phrack release #64 and a lot of people saidthey will contribute. However we did not see anything coming. Almost allarticles from this release are coming from our first circle of friends.Again.This release, despite that it is not the perfect one, tries to bringa good mix between technical articles and what we call spirit articles. Ourintroducing and concluding articles (Phrack Prophile and The UndergroundMyth) bring two opposite visions of the hacking underground.Contradiction? No. Freedom of speech.We have kept with our regular columns Phrack World News and InternationalScenes. We also have decided to publish less exploit articles. However,low-level hackers should find their way easily into this new release.[-]=====================================================================[-]For this issue, we are bringing you the following :0x01 Introduction TCLH0x02 Phrack Prophile of The UNIX Terrorist TCLH0x03 Phrack World News TCLH0x04 Stealth Hooking: another way to subvert the Windows kernel mxatoneivanlefou0x05 Clawing holes in NAT with UPnP felinemenace0x06 The only laws on Internet are assembly and RFCs Julia0x07 Hacking the System Management Mode BSDaemon, coideloko, d0nand0n0x08 Mystifying the debugger for ultimate stealthness halfdead0x09 Australian Restricted Defense Networks and FISSO The Finn0x0a Phook - The PEB Hooker shearer & dreg0x0b Hacking the $49 Wifi Finder openschemes0x0c The art of exploitation: Samba WINS stack overflow max_packetz

0x0d The Underground Myth anonymous0x0e Hacking your brain: Artificial Conciousness -C0x0f International scenes variousWindows stealth hooking article brings a deep analysis of the XP kernelinternals by presenting two sophisticated backdooring techniques. It isgenerally hard to find valuable reverse engineering articles covering*new* topics and satisfying our standards, but these guys have made a greatjob. Make sure also to check out the PEB Hooker and the full publishedsource code if M$ software reversing is your thing. Both of those articleswill bring you a very good read.Felinemenace is featured again and brings you one of their latest hacks onmore recent network protocols. Our second network article digs into FISSOby introducing not-so-public information about australian restrictednetworks.As we continue to care about cryptography, Phrack #65 includes a usefulcryptographic concept of deniable encryption, a particulary relevant topicfor hackers. Check out Julia's article for all details.As mentioned, we have tried to bring you the best low-level hacking around.Articles such as Hacking the System Management Mode, Hacking the $49 WifiFinder, Mystifying the debugger, are not really 0day for those of youalready in the underground, but aim to bring you sufficiently material todevelop your creativity on that matter.Finally, we could not release Phrack without at least one exploitationarticle. Max Packets has done the job of describing step by step hisSamba WINS exploit. The information contained herein will certainly beenough for those of you guys who want to develop their own.Scene Shoutz:-------------Again, Phrack #65 could not have happened without so many people. Thanksto the admins, coders, hackers, scripterz.Shouts : mauro, sysk, leandro, assad, kiwicon for an amazing conferencewith a lot of original topics. As long as you stay a non profit eventPhrack will support you! We are also looking forward to the next BACon inseptember 2008. Shouts to all south american hackers & expats.No shouts: All supposed "Underground people" who asked us milliontimes when Phrack will be out but never contribute to the magazine. Ifyou guys were a little more productive perhaps Phrack would be releasedmore often. Also, we will -not- help poor indonesians bypassinggovernment's p0rn websites filters. Sorry taufiks1428@gmail.com.Lames:* cucamonga (xt@docking.gaykansascity.com) has joined #phrack<el> why hasnt phrack65 been leaked yet<vegas> probably coz i don't have it<shiftee> probably cause nobody wants to read itPhrack has not been leaked this time...sorry for that... probably because