USB Ethernet adapters + shared connection. USB WiFi adapter + create_ap. I often block DNS and non-plaintext protocols, and gradually let stuff through as I work out what each bit does.
-
-
USB wifi (alfa), hostap, dnschef and wireshark will get you a long way.
2 replies 0 retweets 5 likes -
Replying to @moore_rich @cybergibbons and
And if you're not comfortable with hostap, iptables, etc., CERT Tapioca can make it pretty point-and-clicky for you. https://github.com/CERTCC/tapioca pic.twitter.com/cYWIrTsEij
2 replies 1 retweet 16 likes -
Replying to @wdormann @moore_rich and
This makes me conflicted. So many years doing things by hand only to realise... There's an easier way
1 reply 0 retweets 2 likes -
I have honestly started swinging towards "lazy" as a preference. create_ap + a patch to bridge to a USB ethernet, simples.
2 replies 0 retweets 2 likes -
Replying to @cybergibbons @pjvenda and
Lazy is good. Automating stuff that used to be "black magic" and putting a GUI on it is how we make progress and it leaves more time for the actual cool stuff. That said, all tools are ephemeral and will be replaced by something better so understanding what they do is the key.
1 reply 2 retweets 16 likes -
Replying to @moore_rich @pjvenda and
I do feel we need to embrace this more in hacking. I keep on trying to get this across in videos: stay lazy. Do the least work possible for results.
1 reply 0 retweets 5 likes -
Replying to @cybergibbons @moore_rich and
There's a balance to be struck with this stuff. I very much script everything so I don't have to think about it again. But I can if I want to. Problems arise when people are good at hacking and creative but very inefficient by not understanding 80% of the foundations they need.
2 replies 0 retweets 2 likes -
Replying to @pjvenda @cybergibbons and
@cybergibbons you are really not the person that represents the class I am discussing. Quite the opposite. You know metric tonnes of everything. So you are well entitled to be lazy.2 replies 0 retweets 1 like -
Replying to @pjvenda @cybergibbons and
But it concerns me a great deal with people can't deal with basic tasks and don't grasp basic concepts of networking, cryptography, architectures, operations, etc.
1 reply 0 retweets 2 likes
I use Tapioca myself on a regular basis. I don't feel like I'm cheating because the tool is a means to an end. And that end isn't having iptables command-line syntax memorized. Also, the existence of tools that are easier to use doesn't lead to people that are less knowledgeable.
-
-
Replying to @wdormann @cybergibbons and
I was hoping this wasn't the idea I was portraying. I started by talking about my own view. I don't think any less of people who use tools like tapioca to get a job done. Or bettercap or burp or yersinia or responder or mimikatz or objection ..... I use all of them.
1 reply 0 retweets 3 likes -
I do worry when people who use some of these tools memorise a flowchart, which they adhere to religiously, sometimes at the cost of huge inefficiencies.
0 replies 0 retweets 1 like
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.