Friday, August 17, 2007

The Palm as a tool of the hacker (I): terminal emulators

"PalmOS is an ideal platform for hacking tools and hacking in general." With this statement we started this series of articles in which we will see how to get the most out tasks in the Palm of "hacking" in its option-related security and networking in particular. Quoting verbatim:

I think the potential of the Palm in security, hacking, networking and programming is undervalued. And I say this without even taking into account the huge potential of free software. Fyodor, the developer and maintainer of security software nmap, once said: "Nothing beats doing penetration tests from the beach using a Palm and Ricochet modem (or other wireless device)." The Palm have many other advantages: small, economical, easy to conceal, and can take anywhere.

Before continuing, let me make it clear that it is not the same hacker (an expert in something related to computers and networks) that cracker (person who violates a computer system, with the objective of getting their own benefit, or hurt), and in fact in many pages are using the word incorrectly, to get more readers know what we are talking about (going into machines that should not be accessed), which through ignorance of the author.

To understand in a way which is a fun cracker, I recommend reading the book Takedown, which chronicles the persecution and finally arrest of the famous cracker Kevin Mitnick by the hacker Tsutomu Shimomura.

Kevin Mitnick y Tsutomu ShimomuraTsutomu Shimomura
Kevin Mitnick and Tsutomu Shimomura

Now that we know what this is about the subject, and we can imagine what kind of tools are we're going to see: software for PalmOS with everything that we need to transform our Palm in the dream of a hacker tool (which does not necessarily cracker) . To use the software that we will see in this series of posts will require that we possess Palm access to networks. For this we will be able to use any of the methods we have already seen: using the data cable, Bluetooth connectivity, a mobile GPRS, or simply a wifi network, and so on.

The first thing we need if we work mainly with machines with the operating system of family UNIX (Linux, a BSD, AIX ...) is a terminal program, ie a client Telnet or SSH (SSH Telnet is but encryption to provide security to the communication). Telnet is a protocol that allows us to access a system through an interface in text mode (terminal). Those who have ever used the shell of windows, or MS-DOS (what memories), they will know what is (rather know how it looks, because the text mode of these operating system is quite advanced and more powerful than the MS -DOS).

Conectándonos por SSH a un Powerbook desde nuestra Palm
SSH connected to a Powerbook from our Palm

As terminal programs have several options. We have to telnet pTelnet, and as always it's best that we can use SSH, such as SSH clients more variety: TuSSH (only for PalmOS less than 4), pssh (with support for SSH 2) and Top Gun SSH (SSH only 1) .

Capturas de ptelnet y tussh en funcionamientoTuSSH conectado a un equipo
Ptelnet catches and running tussh

If we do not have access to any server with Telnet or SSH enabled, we can do our own testing with PC, installing an SSH server as a free FreeSSHd in the case of using windows, or the ubiquitous OpenSSH if your machine is similar Linux or.

Usando FreeSSHd como servidor y Putty como cliente en un mismo PC
Using FreeSSHd as Putty as a client and server on the same PC

In the next post in this series, we will continue the analysis of the software that will allow us to make our Palm the perfect tool for hacking.

Posts in this series:


Related Articles

23 comments on The Palm as a tool of the hacker (I): terminal emulators "


Pages: [1] 2 3 »

Pages: [1] 2 3 »

Leave a comment


Labels valid: <a href="" title=""> <ABBR title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <'s datetime = "" > <em> <i> <q Cite=""> <strike> <strong>

Akismet has protected and in this blog of thousands of fraudulent reviews. But if your comment filtered by mistake please let me know by e-mail contact from the right.