Welcome!
Unless specified otherwise, all code in the posts are in public domain. Feel free to use it, change it and share it! The posts themselves are licensed under this Creative Commons license.
Twitter
Author Archives: Thomas Roth
Black Hat, CCS & Co.
Update: CCS will be released at Black Hat EU 2011! Black Hat DC 2011 was great – a lot of interesting people, interesting talks, and nice parties. Unfortunately I wasn’t able to demonstrate and release the Cloud Cracking Suite as … Continue reading
Upcoming Black Hat Talk
Because of the huge media coverage about my upcoming talk “Breaking encryption in the cloud: GPU accelerated supercomputing for everyone” at Black Hat DC I want to make sure that no one is getting the wrong impression about what I’m going to … Continue reading
Posted in Security
Tagged Amazon EC2, Black Hat, Cloud, Hashes, Passwords, Security, WPA
13 Comments
Cracking Passwords In The Cloud: Getting The Facts Straight
My last article about the benchmark on the new GPU Cluster instances in the Amazon cloud had a large impact. One magazine wrote: “A German hacker claims to have used cloud computing to crack passwords stored in an algorithm that … Continue reading
Posted in Everyday Hacks, Security
Tagged Amazon EC2, Cloud, Hashes, Passwords, Penetration Testing, Security
14 Comments
Cracking Passwords In The Cloud: Amazon’s New EC2 GPU Instances
Update: Great article about this at Threatpost! This also got slashdotted, featured on Tech News Today and there’s a ZDNet article about this. Update: Because of the huge impact I have clarified some things here As of today, Amazon EC2 … Continue reading
Posted in Everyday Hacks, Security, Tools
Tagged Amazon EC2, Cloud, Hashes, Penetration Testing, Security
196 Comments
Small Patch For The SET “Java Applet” Payload
Update: This is fixed in revision 362 of the SET. The current Social Engineering Toolkit version from SVN (Revision 359) contains a broken java_applet.pde which will result in a compiling error like: teensy:20: error: expected ‘,’ or ‘;’ before ‘void’ … Continue reading
mbed.org – Introduction & Improved MbedRPC Module For Python
Today I received my NXP mbed Design Challenge kit. At first glance it looks like a cool piece of hardware: NXP LPC1768 (ARM Cortex-M3 Core) running at 96 MHz, 512KB flash, 64KB RAM, Ethernet, USB device/host, CAN, SPI, I2C, Analog … Continue reading
Firesheep: Handlers for SchuelerVZ, StudiVZ and MeinVZ
Update: I was relying on a cookie which only showed up under certain circumstances. This is fixed now, but accounts will show up multiple times in Firesheep. I will fix this soon. Firesheep is a great tool to show ‘normal’ people … Continue reading
Posted in Everyday Hacks, Security
Tagged Firesheep, MeinVZ, SchuelerVZ, Security, Social Networks, StudiVZ
16 Comments
DIYDA: Lamps, Robots & ‘Finissage’
On the last day of the DIYDA we had two great workshops at the DingFabrik: Fabienne did a workshop about building small, insect-like robots, while in the other room Julian showed how to make your own lamp out of wood … Continue reading
DIYDA: Stamps and 3D Printing
Today there were two workshops in the rooms of the DingFabrik: Kathrin showed how to make your own stamps, and Fabienne and Wim brought their MakerBots. I spent most of the time socializing at the stamps workshop, and also tried … Continue reading
Why ‘Password Maps’ Are a Bad Idea
Update: Wow, F-Secure UK and KoreLogic are linking to this! Over the last couple of weeks, multiple people pointed me to articles about the idea of using maps instead of passwords. Most of them pointed me either to this MSNBC … Continue reading