Request For Family Status

NBSTEGO - bash script for steganography

I do not know why, but I dedicated myself to changing
BrutalStego
, I wrote, since a new bash script, which is really a text steganography, the crypt
AES256
and hides it in hexadecimal vector file.

The thing that interested me was to encrypt text, hide it and be able to detect with password entry, in short, a steganography tool online!

Instruments used: grep, awk, dd, bc, wc, xxd, openssl

basically works like this: you insert the name of the vector file, you insert the name of the new file (the one containing the secret message), insert and finally the message is part of the password.Dopo these inputs, the special software in the OpenSSL AES256 encrypts the secret message, then convert it to hex and places it in the new vector file.
I tested on JPG and MP3 on and you do not notice any disruption.
By raising the little program, you can go to reveal the secret message by entering the name of the vector file and password
Here's the script:


# / bin / bash #

NBStego - by Nanni Bassetti -
http:// www.nannibassetti.com

-
nannib@libero.it

# a simple steganographic tool for Linux. Tested on JPG, MP3, AVI
# It uses AES256 algorithm by openssl

hid () {

echo "Insert the message to hide:"

read

ms echo $ ms> pText echo "Insert the file where to hide:"

read fl echo "Insert the file name of the new file: " read nfl echo" Insert your password: "read pw
# here it crypts the plain text in text by cyphered aes25 and save it into steg.bin
openssl aes-256-cbc-in pText-out bar- .'m
# password length
lenpw = $ (expr length "$ pw")
lenpw_mod = $ (echo 0 + 10 count=$lenpw_mod
# temp2.bin is a 10 bytes file filled of zeroes to store the secret message length
dd if=$fl of=temp2.bin bs=1c skip=$lenpw_mod count=10
# temp2.bin is the end of the new file
dd if=$fl of=temp3.bin bs=1c skip=$(echo $lenpw_mod + 10 > $nfl
rm temp1.bin
rm temp2.bin

rm temp3.bin
rm steg.bin rm steghex.bin rm ptext rm l.bin echo " "
echo " -------------------------- "
echo " "

}
#-----End Hide-----

reveal ()
{
echo "Insert the file name containing the secret message:"
read nfl
echo "Insert the password:"
read pw
lenpw=$(expr length "$pw")
lenpw_mod=$(echo 0 + 10 if=$nfl skip=$lenpw_mod bs=1c count=10 read case $ answ1
answ1 in
1) hid;;
2) reveal;;
*) echo "Wrong answer! Write 1 or 2 "
echo" ";
esac exit



Click here to DOWNLOAD

Freckles On Inside Of Cheek

Linux Live distro but how many I bring?


We are now in 2009, everything has evolved, everything is fast and powerful, but the Italian Justice?
That remains slow, very slow, there are cases started in 1998, which have yet to finish and maybe still require expert opinions. How
equip?
We could be faced with if not 286 Intel 386 machines without USB ports, no CD-ROM without BIOS that can boot from a CD-ROM, with very little RAM, the only positive thing was the size of the hard disk found in it, that would probably be a few megabytes.


Sometimes, even the machines 'modern', can have problems of incompatibility with Linux Live distro, because here we are, of course, talking about using a live, for various reasons, and not to detach the hard disk and connect to our workstations, which would be the best solution to address each issue.


So good in our backpack expert information should not be missing anything, according to my personal classification, as a live distro:


HIGH LEVEL
- Boot from CD-ROM, ideal for modern systems, with excellent graphical interfaces.

Helix 2,

CAINE,

FCCU 12.1
,

ForLex
,
Deft 4.1




MEDIUM
- boot from CD-ROM - are lighter and can run without a GUI.



FCCU
11 or 10,
FIRE

,

IRItaly
,
PHLAK
,

Knoppix-STD,
DSL

LOW
- boot from floppy - floppy disk and start turn on the computer dinosaurs

SMART Linux

,

mulinux
,
Floppix

also would not hurt to always carry your cd

GParted
and a rescue cd such as Trinity

,
SystemRescueCd and linux net-oriented
as BackTrack.
Too? ;) Well I am convinced that in the other comments will appear

Dishwasher Rattling Sound

Anti-Forensics

I just finished reading an interesting article on Mark Whitteker ISSA Journal, that summarizes some basic techniques of anti-forensics, I find this kind articles very constructive, why do not they say anything new, but serve to bring together and synthesize the concepts, which is useful, particularly in an area so rich in techniques to remember.

What is anti-forensics? It's all those escamotages, serving to embarrass the "digital

investigators" in order to be able to hide or make it very awkward retrieval of digital evidence.

types of anti-forensics can be divided into three main branches:

Data Hiding (hiding data) Tool's weakness (known weaknesses of the tools for computer forensics) Investigator's weakness (weakness investigator)

hiding data

Data can be hidden in many ways, not only on the hard disk in question, but also on Web sites of storage,

here you can find a discussion of Mario Pascucci on some techniques, but let us consider the most common and well known: Encryption Encrypt

entire volumes or only file, may be the most easy to implement, but it becomes one of the toughest obstacles for the digital investigator because an encryption with AES (Advanced Encryption Standard) 128 bit 128 has 2 possible keys with a brute force attack does not come to anything, except in a very long time (we're talking years) constant and parallel processing.

So in this case, the investigator agrees that, look for the password in other ways, such as check in system memory (ram dumping) any password entered, if there is some readable file, having a log of a Any pre-installed key-logger or a profiling of the suspect, but attempts are really tied to hope and luck, for example, if the password is a possible word, maybe just a dictionary attack and the chest opens ;.

Steganography

From ancient Greek "hidden writing", is a known technique for hiding information in other binary files, including pictures, mp3 files, etc..

Personally, I developed a small instruments for teaching purposes, which may be understood as a trivial steganography:

BrutalStego
or a more complex with

NBSTEGO . There are many tools for steganography as: JHide,

Digital Invisible Ink and many more that you can read here

.
systems to see if a file contains steganography are based on probabilistic algorithms, in fact often give false positives and false negatives, none of this can be useful to the investigator, unless they have found traces of steganography programs on the PC of the suspect, otherwise it becomes a hunting blind.

• Unallocated space and secure deletion



This is the space not occupied by active files, because when a file is deleted from the system, the fact remains physically in a space marked as "unallocated" therefore available to write another file.

Clearing standard serves only to eliminate the pointer to the file from the File Allocation Table (FAT) or Master File Table (MFT).
With computer forensics tools, you can recover deleted files (advertising occult

FUNDL or SFDUMPER

), but if you fill up before deleting files or careatteri random zeros at the end you can not recover more than the original file.

SLACK SPACE

The files are saved when they are allocated in clusters, groups of sectors on the disk, but if a file occupies clusters 5 and a half is allocated into six clusters, leaving half free cluster. There are tools like Metasploit's Slacker

utility that allow you to write in the slack space, that space that is advancing in a cluster, then if you encrypt the file and insert it in the slack space, the investigator may be drawn with deception, finding only the data that seem to trash previous file allocated in that cluster, when it is an encrypted file.

TOOL'S Weakness Other anti-forensics techniques, can exploit bugs or reside in the known weaknesses of the most popular tools for computer forensics. The

ADS (Alternate Data Streams)
, no longer a threat. The

MD5 collision, ie you can edit a file and to be the same MD5 hash of the original file, this can serve to hide a file and claim it as a file known, when the investigator performs a search using matching the MD5 hash of a dictionary of known about the files contained on the disk in question.

Changing the Timestamp

with this technique you can trick the tools that create a timeline based on the time of MAC (Modify, and Create Access file).
The manipulation of the magic number and file extension , this technique is quite disturbing to the investigators, because if you change only the extension of a file, for example, from JPG to DOC programs carving ( Foremost, Photorec, Scalpel, etc.). and programs such as "file" or "TridNet, realize it, because we consider the headers and footers file (in the case of JPG and FFD9 FFD8 are in hex), but if you also change the headers and footers, you cheat, even this tool, so it made a thorough inspection and manual!
LA investigator's Weakness
This is, in my opinion, the technique more problematic, it is condensed into a simple concept, ie the time and resources that must employ an investigator to analyze the media seized. Just have several gigabytes or terabytes of disks, Raid, use techniques for hiding data and then tests to be conducted via lead many resources in terms of time and money, forcing the investigator to work at large. This is a reflection that I had asked many times when I read all the techniques "for" anti-forensics, I often wondered:

"But if a technical consultant to analyze receives 10-100 250GB hard drive one, how can get up to work on every hard disk, checking for encryption, steganography, slack space, hidden files in the spaces between MBR and partition start, hidden partitions, file systems inside the file system, etc.. etc..? "

Conclusions

I think it's useful to know more about possible methods of hiding data, but always believe in the motto "it is easier to conceal than discovering"

Nanni Bassetti

Who Song Lets Jam Radioactive Song

BrutalStego some basic techniques, simple but effective steganography

For fun, I wondered, what would happen to a JPG image or an MP3 if you should add the hexadecimal code or text inside them, without a definite orientation, in short, a manual steganography.
So I decided to try translating a sentence in hex:

$ echo "Hello world! Ugh always like this example sentence:)" xxd-p

6369616f206d6f6e646f2120556666612073656d70726520717565737461
20636f6d65206672617365206573656d70696f203a290a

Getting a hexadecimal of the sentence, then opening a JPG with a hex editor I tried to paste the above code, starting at offset 11 (decimal), save the edited picture and try to see it ... okay! The picture does not show visible signs. :)

If I do the reverse:

$ echo "6369616f206d6f6e646f2120556666612073656d70726520717565737461
20636f6d65206672617365206573656d70696f203a290a" xxd-r-p Hello world! Ugh always like this example sentence:)
So I decided to automate the process of steganography and was born bsteg.sh
that report here:

#!/bin/bash
# BrutalStego - by Nanni Bassetti - http://www.nannibassetti.com -

nannib@libero.it

#
a simple steganographic tool for Linux
echo "Insert the message to hide:"
read ms

echo "Insert the file where to hide:" read fl echo "Insert the file name of the new file:"

read nfl
echo $ms > $nfl

len=$(wc -c steg.bin

1) asks the message to hide
2) Get the name of the file you want to hide the message

3) ask for the new file name changed (so as not sovrascirvere the original) 4) Create a file "steg.bin "containing the message encoded in hexadecimal 5) Calculate the length of the file steg.bin

6) Cut the" head "of the file where will you hide the message, the head is from 0 bytes to 11 bytes

7) Crop the rest of the file from byte 11 onwards 8) Chain in the file and save new pieces: head + + steg.bin restante_del_file

9) A video tells us what is the length of the encoded message and shows us the decoding, for prove that everything went well.

Eventually, someone would be enough to have the length of the encoded message eg. "112" and knowing that it must begin at byte 11, with a simple hex editor or a dd should cut piece from 11 to 112 of the file to get the original message.

tested on JPG and MP3 and everything works fine .... clearly you can also indulge parameterizing the starting point, which should not necessarily be 11. An example

friend to go the length that will decode the message?


"
Hello, but with all the mess you've done that yesterday we had to call 112?

"

Easy! ;)

3d Apartment Extreme Programa

FKLook - search keyword and copy the files

here's my new baby FKLook case of a bash script for Linux, allowing you to search for keywords in a directory full of files and copy all those that contain a directory of your choice , in order to have a repository of files selected by the keyword.

Test it!
hello
# / bin / bash / File # Keywords

searching tool by Nanni Bassetti http://www.nannibassetti.com - nannib@libero.it echo "############# ############################"
echo "FKLOOK - by Nanni Bassetti http://www.nannibassetti.com - nannib @ free . it " echo "by this script you can search for a keyword in many files" echo "and it copies only the files those match with the keyword, in a separated directory you chose" echo "########################################" echo " "
echo "Write the output directory where you to save the files (eg. /media/myfiles):" read outdi
data=$(date Where You Want to the files looking for the keyword: "
read indir echo" Write the keyword search: "
read key grep-i-aR $ key $ indir / *.*> $ outdir / fn filelist.txt
= "$ (cat $ outdir / filelist.txt CAINE CAINE



now has the Sleuthkit Autopsy and recompiled to image recognition and AFF EnCase format.

http://www.caine-live.net/page5/page5.html

Putting Anniversary Program Together

Coup?





















Retained by: http://www.canisciolti.info/articoli_dettaglio.php?id=16229

Foreword.

jobs at risk, strikes, agents provocateurs among the demonstrators, accusing the left and the inevitable clashes. The strategy of tension began well over 40 years ago. Today history repeats itself. Then we must ask: who maneuver the wires do we prepare? The answer can only come from an analysis of facts and knowledge than has happened in the past ... because the mechanism adopted seems to be the same. We therefore examined in parallel between what happened more than forty years ago and today and try to understand, analyzing the facts, what we prepare.

secret services and the secret State

start by saying that, as in the past was the case for the strategy of tension, what they probably should look for how we prepare, and political power and intelligence. The reason is simple:

"Intelligence agencies are all over the world, illegal organs of political and economic power. Their function would be to ensure the safety state, but it often happens that democracy is endangered by its illegal activities. " We can say that they are identified, with some exceptions, in the continuing protection of the illegality, understood as the protection of persons responsible for serious subversive facts, and as usual screening investigations on those facts, and finally as the continued use of the screen handy "secret politico-military" even when it is clear that it is invoked to cover the burning truth. From this ongoing work are also inevitably come out of the way different in his favor ... [1] "

The secret services also go hand in hand with state secrets, tool referred to in the history of our Republic, has been made of wide abuse. Here too, the reason is simple:





"... the state secret shall be distributed among its owners and immunizes them, each according to its degree of initiation, compared to the discussion. ... The number of state secrets one knows that becomes the measure of his rank and its privileges in a subtly graded hierarchy. The mass of the dominated is no secret: he did not say no right to participate in power, to criticize and monitor [2] "Analysis

Parallel Sifar-De Lorenzo and seismic Pollari

Scandal Sifar Lorenzo De La


first structure intelligence of the Italian Republic (Sifar) was born in 1949 (article on this blog on 06 January 2008 "When you say that the mechanism is always the same" label intelligence).

Purpose.

a memorandum from the General Command of Staff (JCS) of the U.S. Government, dated May 14, 1952 (and remained secret until 1978), we learn as the head of Sifar was secretly bound to respect the objectives of a permanent plan of offensive anti-called "demagnetize" ("demagnetize"), and consisting of "political operations, paramilitary and psychological measures to reduce the presence of the Communist Party in Italy a goal ... Priority was to be achieved by any means.

Structure: Gladio.


In 1956, thanks to a secret agreement between De Lorenzo and the CIA (or in a situation of absolute constitutional illegality), was Gladio.

The structure employed by the Office of R Sifar, was divided into 40 modules, six of which are informative, ten of sabotage, six of propaganda, evasion and escape of six, twelve of the guerrillas. From

documentary material collected during the investigation by the GI of Venice Casson and military prosecutors in Padua, Sergio Dini and Frank Roberti, shows how the gladiators were trained in a range of terrorist activities:

- for purposes of intimidation (throwing bombs at party headquarters);

- provocation, or who did the beating and actions of peaceful demonstrations degenerated into clashes with police;

- acts of terrorism to pass it to others.

Filing illegal.

In 1959, General De Lorenzo begins a transaction, illegal and secret profiling of Italian citizens. These include: politicians, priests, bishops, businessmen and other categories of interest relevant to the lives of the nation

The information gathered in the files (often extended to family members) in some cases, then, were entirely invented, and of little use for the purposes of national security but very useful for the purpose of blackmail. Piano Solo Golpe



In 1964 Sifar is ready for the coup.
the coup, which then will not be implemented because the left will accept the conditions of the coup, provided employment by the single Carabinieri (hence the name "Piano Solo"), strategic objectives in major Italian cities by implemented with the support of "militia", recruited in a clandestine manner.
These action groups (mainly funded by the Mason Vittorio Valletta, President of FIAT) "should respond to this coup that General De Lorenzo had prepared, even in the capacity as agents provocateurs [3].

Secret State


In 1967, thanks to articles in Espresso, the scandal broke out Sifar-De Lorenzo.

The Government, of course, immediately raises the state secret investigations of the judiciary and the documents sent to the Parliamentary Commission of Inquiry Bolchini Lombardi (in 1990, lifted the state secret, you will find that this was used to cover serious crimes and to ensure the impunity of those who tried to kill the very existence of democracy).

In 1969 began the period of terrorism and massacres. Officially

Gladio was never activated. The problem is that appears in the darkest pages in the history of our Republic: murder Mattei, Piano Solo, murder commissioner Luigi Calabresi, the Milan police station massacre, Argo 16, Sossi kidnapping, murder court occurred, Judge Amato murder, Moro, murder, Toni De Palo, Mauro Rostagno murder, murder them causes (see article on this blog May 29, 2008, "Gladio, the main secret of the Republic", labels intelligence).

So we have seen the escalation

1. establishment of an illegal: sword with men trained in a range of terrorist activities.
2. unlawful filing of Italian citizens with false information collected for blackmail
3. placing unjustified state secret
4. preparation of a coup.

We come to today.

Scandal Earthquakes - Pollari.

On September 27, 2001 in Rome, the Council of Ministers, headed by Silvio Berlusconi, appointed director of SISMI, General Nicolo Pollari, the Guardia di Finanza (see article on this blog on January 11, 2008 "Earthquakes, Pollari and the mechanism always ... the same, "labels intelligence)

profiling illegal.


In 2003, the public prosecutor in Milan, he discovers that in Rome, in Via Nazionale, the quake has an office deputy with false leads, the creation of false documents and packaging printing, and I found an archive of thousands of illegal files and notes on politicians, magistrates, journalists, celebrities from the world economic and financial, etc. ....


Head of the center is Pio Pompa, a former Telecom employee, in close contact with the head of SISMI Nicolo Pollari, which sends regular reports.

Purpose.

Reading the reports show how the program intends to "neutralize" and "disjoint" with "traumatic events", people and groups identified as "enemies" not of the institutions, but the prime minister then in office, Silvio Berlusconi

Secret State


But not enough SISMI is also involved in the abduction of an imam took place in the center of Milan. Pollari was summoned by the judiciary for essre questioned the government puts the state secret.

Falange Armata.

At that time another survey exposes thousands of illegal wiretaps made by the Telecom Tavaroli to the detriment of unsuspecting citizens ... but not only come to light through documents found during a search, is also the Falange Armata .


". ... Organization, with specific characteristics of psychological warfare. ... The operation has seen armed phalanx born in state institutions, whose leaders have many medals on his chest.
Murders, robberies, bombings, kidnappings, introduced in military and political, institutional theft of weapons, training of civilians in military activities, political and military espionage, illegal wiretapping, violations and use of a secret office, embezzlement, assault on democracy and more is what the phalanx of armed operation in place between 1985 and 1994 through active traders, individually or in small teams ... has managed and manipulated people included in official institutions, which handled the 'depistanti provision of information or worse still useful to disable a person considered a threat to their interests, making arrest for crimes never happened ... to make the subject full attention discredited or banned, or at worst find him dead in unclear circumstances, related to strange sexual interests ... "[4]

remember that the Armed Falange had claimed responsibility, including other things, the following murders:



On January 4, 1991, in Bologna in the neighborhood of the Pillar, three policemen were killed.
The massacre claimed by the Falange Armata.


May 3 in an armory of Bologna are killed three people.
The massacre claimed by the Falange Armata



On 23 May 1992 Giovanni Falcone was killed along with wife and escort Capaci.
The massacre is claimed by the Falange Armata.


On 19 July Paolo Borsellino was killed by agents of his escort in via d'Amelio in Palermo.
The massacre is claimed by the Falange Armata.

1993


May 14 car bomb exploded in a street in Rome Faure. 15 wounded.
The massacre is claimed by the Falange Armata.

Georgofili Street May 27 in a car bomb explodes in Florence. 5 dead and 48 wounded.
The massacre is claimed by the Falange Armata.


[Left: The general director of police and Sifar (1955-1962) Giovanni De Lorenzo. Right: General and Director of the Guardia di Finanza SISMI (2001-2006), and current Council of State in Palazzo Chigi, Nicolò Pollari]


summarize the points of contact so far found between the two scandals:

Sifar-De Lorenzo -------- ----------- seismic Pollari

dossieraggio illegal ------------------- dossieraggio Illegal
Piano "demagnetize" ------ ------------ Piano "neutralize" Gladio
-------------------------------- --- Falange Armata
state secret -------------------------
state secret plan to carry out a coup ----- -----?

The voice is still missing in the right column is the plan for implementing the coup.

Coup

And then we have Question: There are elements of today that can make us suspect that the plan for a coup in fact be ready? Probably yes.
Mainly two elements are, what we see:

1. Under Law No 24 February 2006 85 published in Official Gazette of March 13, 2006, No 60 with the headline: "Amendments to the Criminal Code in relation to crimes of opinion", the legislature, in substance deprived of any effective protection democratic institutions of the country.



The most important changes introduced by the law have little to do with the crimes of opinion, in fact, are amended Articles:
- 241 Criminal Code (terrorist attacks against the independence, integrity and the unity of the State);
- 283 cp (attack on the Constitution of the State);
-289 cp (attack against the constitutional bodies and regional assemblies)
that the figures of attack on the country's democratic institutions.

With this change, because it is integrated the offenses, the acts must not only be suitable and direct, but also violent.


But it means leaving the democratic institutions without any protection because once the violent act and do good works is lost.


also an attack on the integrity of the state or the Constitution, or the functioning of constitutional bodies, may be well committed with abuse of official authority, without any violence.

2. This summer, the government has essentially militarized territorio.Migliaia of our soldiers were sent to various Italian cities alongside police and Carabinieri, why?
Certainly not to fight the Camorra, since this can not be fought on the streets but in the centers of power where it is firmly attached.


What is worth noting, however, is that the government is implementing policies that do not seem to strive to optimize resources and avoid waste, but to cut jobs. This obviously leads to strikes and demonstrations, as we see, they lend themselves to intervention agents provocateurs ... just as happened 40 years ago.


Banks also are in great difficulty and there is reason to suspect that the assurances provided to us are actually lies. What happens when there is a crack? And if, as happened in Argentina, people stormed the banks to get back his money?
What will happen then? Apply anti-terror laws against citizens? In the case of popular uprisings soldiers shoot into the crowd? Maybe.

What is certain is that the soldiers in riot gear are already on our roads and have had months to prepare by studying the territory.

[1] Joseph De Lutiis, secret services in Italy, Editori Riuniti, 1998
[2] Giuseppe De Lutiis, secret services in Italy, Editori Riuniti, 1998
[3] parliamentary commission of inquiry on the events of June-July 1964 Report majority, cit., 556-557
[4] http://fabiopiselli.blogspot.com/2008/01/11-spionaggio-elettronico-e-falange.html
by paolofranceschetti.blogspot.com - seen on comedonchisciotte.org 31.10.2008

Best Orthodontic In Johor Bahru

The heir ...



How was the history of cinema, the transition from black and white to color, that's suddenly (but not too much) everything takes color, everything becomes clear and clear. If there were still doubts about the existence of the program is still the masonic lodge Propaganda 2 is well now that these doubts are put aside. Not only because Mr. Gelli pass the baton to the nano, but because the whole state apparatus, which not long ago had outlawed the secret associations, now allows a multi prosecuted and sentenced as well as founder and "venerable master" of the P2 to go on TV to revive the glories of the past. How is it that censorship is not acted here as the various Travaglio Santoro, Gomez and other champions of truth and that is that you do not lose the opportunity to threaten various complaints and edicts of the cock. I know rogues, thieves, liars, criminals, fraudsters and profiteers .. but never people who combines all these features, that's why "The Reverend" is changed the delivery to his pupil, because of the many is the only "complete". I'd like to know where I finished the classic men's all. "

Always Have To Blow My Nose After I Eat

Minister La Russa insulting the Head of Unit



Well here you are a shining example, a representative type of the current government, even the current regime. Lower and lower! But when we resume our country!

Excessive Cervical Mucus During Ovulation

CAINE

Today I am very happy, because both the Linux
Day Reggio Calabria where he attended the
CFIini:
Gianni Amato Loris Borgese, Achille Foti
went very well, from what I hear, there was an audience interested and interactive ... The

Linux Day di Modena with: Nanni Bassetti, Denis Brothers, Jordan and Giancarlo Giustini Lanzi benissmo went anyway, we met Professor Michele Colajanni, the researcher Mauro (sorry can not remember the name) of the University of Modena, people extremely available and open to future projects and collaborations.

Great interest has been shown since my introduction to
CFI (Computer Forensics Italy)

Best Practices and lawyers, with many questions that stimulate dialogue.
Then it was the turn of Giancarlo Giustini, who made the Linux Live Distro

CAINE, the first in the world to fit the Sleuthkit Autopsy 3.0 and 2.20 and all the other tools updated (Photorec, testdisk, foremost, etc..) also contains
FUNDL, SFDumper
LRRP and tools developed by myself and Denis Frati. On this show, there was very interest, I was personally proud of the work of Giancarlo, because we have spent all of us a bit of expertise and ideas and this has been recognized with a loud voice several times and for that I thank them so much .... I had, once again pleasure to breathe healthy air of collaboration, sharing of knowledge, without celodurismo races, but with a desire and a positive and constructive enthusiasm .... beautiful, beautiful, beautiful! Finally
Denis closed the proceedings with a series of slides
"hot"
, but very interesting, because he said, several reasons why Linux is a good choice for digital forensics. Very
space Q & A (Questions and Answers), the audience is was really curious, many compliments and requests .... then we all separated.

the evening, they took me to dinner at Modena, I ate a guinea pig for Danacol of Danone, (I do not understand how they do in Emilia-Romagna with the arteries!)
Special ringraziamaneti to:

Jordan Lanzi, Francesco

Allertsen, Federico , Mauro for the nice company!
We hope that this journey undertaken by IFC, go ahead, for now we put the flags up: Modena, Rome and Reggio Calabria ...

http://www.cfitaly.net/italiacfi

Lump In Roof Of Mouth

SCHOOL: THE MOBILIZATION TO STRIKE GROWS FOR THURSDAY '


" 27/10/2008 17:28 (ANSA)-ROMA-

The week of action against the Reform and Gelmini a Roma 'began with a series of initiatives taken by school and university students: marches, sit-ins, occupations and outdoor lessons that have peacefully invaded''patchy''all City '.

The two major initiatives were held in Republic Square, where schools of the fourth municipality organized a parade of high school students directly to Piazza Venezia, which was attended by 7,000 people, according to the organizers and the euro, which is 'done a garrison with about 2,000 students from three institutions - the Vivona, the Cannizzaro and Aristotle - gathered at the meeting and then decided to organize a sit-in outside the Ministry of Public education. Also in the morning students and faculty of the university teachers' La Sapienza of Medicine held an open lecture on the headquarters of the Ministry of Education and those of philosophy, in Piazza Farnese.

A''program''out there 'was when the parade of high school students and' come to Via Cavour and student activists to''lock''training close to Fiamma Tricolore, took the head of the procession being able to divert up to a length in front of the Senate, where the protest and 'continued with a sit-in. In late morning a hundred students were still in Viale Trastevere outside the headquarters of the ministry.

UNIVERSITA ': THE WISDOM STUDENTS BARE, NO WHO CLEARANCE SEARCH
They were naked, covered only by a boxer or bra and panties, naked to protest against those who''research''. And 'a protest staged by about thirty-stripping of students of the faculty' of Psychology at La Sapienza of Rome in front of the rector of the 'university', after arriving in procession along with another three hundred demonstrators, including researchers and teachers. Within the parade also marched dressed people with a lot of garbage with the words''I refused,''researchers and other students dressed as nurses, bartenders, maids or prostitutes, ironically staging their future work. The search is''stripped us naked and of our rights? We remain in his underwear,''chanted the demonstrators

CHRISTIAN FAMILY: SUSPEND OR WITHDRAW Gelmini decree
''The good of the school (but also in the country) requires the suspension or withdrawal of the Gelmini decree,''invokes next issue of Famiglia Cristiana editorial titled''Do not call it a simple reform cut spending.'' So''is not guaranteed 'the right to study: first you decide and then, overwhelmed by protests, s'abbozza a sham dialogue,''writes the weekly Pauline.

For schools only cuts. The country is in crisis,''the money to Alitalia and banks,''but the school will require sacrifices''for families, but the costs and privileges of Senators and Members remain intact,''writes the newspaper. Students and teachers''- notes the magazine, distributed in all the Italian parishes - have good reason to protest. And not to vote in the conduct or apron (which can also be good), but the cuts indiscriminate 'strike at the heart of a nation', as the philosopher Dario Antiseri.

viewfinder there 'a law passed in a hurry, in midsummer. The words and 'booming,' Reform of the school ', more' prosaic 'expenditure restraint' by getting decrees without discussion and an educational project shared by students and teachers.'' And in the face of protests in schools is not''you can 'think to have recourse to authoritarian or police. A country that looks to the future by investing in schools and education, rationalizing expenditure, eliminating waste, privilege and 'Baron', as well as' the 'nonchalant and cheerful management'''. A country in crisis''- comments yet Christian family - find the money to Alitalia and banks: 'cause not for school? It requires sacrifices for families, but the costs and privileges of Members and Senators remain intact.''

CEI, HARMFUL SHAKE THE SQUARES

CITY 'OF THE VATICAN, Oct. 27 -''It' s a difficult choice to proceed on these issues with strokes of decree-laws, but it seems pointless if the other side even malicious act by shaking the streets.'' The Bishop says. Diego Coletti, chairman of the Bishops' Conference for the school, interviewed by Vatican Radio on the Gelmini decree cuts and school.

''The problem of saving and 'certainly on the table and it' flawless, - said Msgr. Coletti - but 'we must also say that the reforms that have taken place in recent years have not had the chance' of a review and some issues as the main or master control and discipline of profit have been abandoned to some insight. Well did the minister - emphasizes the monsignor - to put the facts straight on these issues, the answer could be a little 'more' rational and calm on the part of those who were not agree''. About equal 'schools, then, Coleman notes that''is not' can continue to think in terms of conflict between state public school and non-state public school, the school non-state public has every right to be recognized as an equal footing establishment of public services for everyone.''

UDS, RIGHT GUYS HAVE TAKEN THE HEAD OF THE PARADE
It is split at via Cavour, the procession of school students who had gone to the direct 9 from Piazza della Repubblica to Piazza Venezia. He did know the Students Union (UDS). "All of a sudden - he told the national executive Stephen UDS, who participated the parade - Block Student militants, training near the Fiamma Tricolore, on board a truck with a megaphone, they took by force the head of the procession, which was organized spontaneously by the students of institutions of the fourth town hall. "The promoters of the event have since tried to distance himself from the head of the march, and arrived at via dei Fori Imperiali, Piazza Venezia, instead of turning to tried to turn left into the Coliseum, but the deviation is not authorized by the police, many students did not understand what was happening and continued to follow lock student who organized a sit-in in front of the Senate. "A procession of a reform movement in the fight against Gelmini and cuts to the budget - concludes Qty - has been exploited by far-right groups, who have tried to put the hat to a fascist movement, it is they who voted for who is the government. "

How Much Are X Rays To See If My Dogs Pregnant

V0.3 CFI - Linux Day 2008 Modena

Leisure time is also used to test and when you have a passion for computer forensics, are suffering ....

Through

Nigilant32
(present in the Helix Live

Entertainment Center Blueprints

Veltroni attacked Berlusconi, "All nonsense, I'm in charge' - (Unity) - (Posted on: 26/10 / 2008) after the event


Well this is an article that appeared on Unity in which the nanerotto not miss the opportunity to make everyone understand that black is not only an elegant color to be used in clubs, perhaps in order to teach or to "educate" intoxicated young people of wealth, power and money. No, the black, it suggests, is also the color of the misfortune that befell us between "head and neck" sixty years ago by reducing Italy to a heap of rubble. Why is there no other way by which to define the behavior and the policy of this homunculus, there is no other way to call it fascist, for all its public appearance shows off what is now obvious to the whole nation, or that it is a seventy still in the grip of delusions of grandeur. I do not know what else to think about listening to his utterances it? Only thing missing is that the next press pass from the balcony of Palazzo Venezia and then maybe we can implement in reality one of the cartoons of the wizards Vauro: "For Berlusconi, the strike is useless - Ok take up arms."

Recently another "youngster" or the ex-picconate has produced statements which have left the shouting illness. And I think it was because it's really a shame that a former President Emeritus of the Republic you let go of the bullshit in general. Returning to the asphalt, undaunted we would stress that it will continue to govern with common sense, which permeates the programs of PDL and adds that it will go ahead with the reform Gelmini, another "mind" could even pass the exam for lawyers by RC. I must say, we are really in good shape.

Actress With Brown Hair And Green Eyes

Di Pietro Antonio Di Pietro in Rome

Indian Wedding Hindu Christian Mix

: Internet the level of information

Fire Red Gameshark Advance Vba

Antonio Di Pietro a "Balla Balla"

Tanning Bed Nearest To Gaylord Palms

You broke the Maroni .. In many

Videos that I added the pipe three months ago after the "genius" of Maroni ....

Pre Paid Sim In India Blackberry

....


On the net there are many now, I am speaking of blogs, there are more, and the number is increasing day by day. Blog rebellion are, peaceful for now, (the one looking truncheon), protest, even anger, of "I'm not there" and so, for those who believe in the proverbial speech of the nano is only by handful of troublemakers cue from the phantom left. I say phantom trying to keep as much as possible etymological source of the period but excluding the definitions of elusive, just because you do not know ndo is, and mysterious, just because it's a mystery whether there is or not. Certainly by earthen account the words "Like a ghost" SIN "imaginary", and should use it Uolter, which could finally call themselves "SON" imaginary. Forgive the shameless joke. In any case there is no doubt that the nano is in the throes of one of its countless and ever more frequent hallucinations, and if you look good even those around him is infected, only to witness the awesome ball sphericity of the eyes of our minister to im-equal opportunities, but it's not his fault, no, the blame lies with those who have put in the room buttons, is the fault of those who got caught for a ride, once again, this scoundrel who has no other interest than to enrich his pockets even more and spend his money on whores, viagra and beauty clinics . I do not think in the history of Western democracies there was ever a being so, a cross between Pinocchio and the Duce, between Don Corleone and an Alzheimer's patient (with all due respect to Alzheimer's patients), a being able to rip off millions of people, able to synthesize all that if we can be wrong in politics. The moral commitment that requires Mandado is misunderstood him, indeed, committed body and soul in making legal all the crap he has done, and in doing so has also helped his minions. Not content has formed a government team that not only is the most ridiculous and incompetent that the political memories, but will go down in history for two very rare pearls, two ministries that were given to people in managing millions of light years away from any decisionistica capacity of high-level, completely unrelated to the political debate but rather prone and servility to the abiding power, inefficient and unprepared, ignorant (of the material to be treated of course) and above all ready to do anything to take place in some leather chair (human, our). Of course I speak of the Public Dis-truzione Minister and the Minister for Im-equal opportunities, and there is no doubt that our gentle donzellele are so indisputable that it is possible to reach so high "from the bottom." Well, as our intrepid Knight latest fall threat of police intervention, but then all remain even after twelve hours (a record I know!), To vacate the schools and universities who peacefully occupied the school does not want see destroyed, pulverized by a pack incapable of whom are very good but to make the usual crafty favors. It remains to be seen what the thermometer says the bearing and the Italian people, the balls turn rider knows, and not worry that there's only one cure for fever ....

Florida Dirver's License Template

Strings and Grep two giants of Linux

very glad to announce to the whole community the CFI our events page:

http://www.cfitaly.net/italiacfi

from here you can see both past events and those in progress ....

For 25/10 we have:
http://www.conoscerelinux.it/Members/pigio/linuxday-2008/linuxday-2008/
in Modena (Bassetti, brothers, Justin, Lanzi), and presentation of CAINE

http://www.caine-live.net/

then Gianni Amato, Achille Foti and Lori Borgese and perhaps Calogero Bonasia about Reggio Calabria:
http://rclug.linux.it:80/eventi / linux-day/2008

short thanking the availability of LUG, CFI is, slowly, keeping the promise of moving knowledge about the country .... we hope to continue and so with the help of all .... Thank you!

How To Get Last Drop Of Urine Out

CFI EVENTS - FALL 2008

CAINE: A new open source distribution for live digital forensics Developed by: Giancarlo Giustini, Mauro Andreolini, Michele Colajanni E-mail: @ gmail.com ing.giustini , mauro. andreolini@unimore.it
,
michele.colajannig @ unimore.it Department of Information Engineering University of Modena and Reggio Emilia WEB SITE: http://www.caine-live.net The development version is also included Selective File Dumper (SFDumper)
What
diversity of Cain? The new idea is the creation of automated report, after having performed all the operations, acquisition, analysis, terminal commands, etc.., The interface allows you to create a report with all the log files of the transactions made and is also used to add notes and customization.

Not only that .... CAINE differs from the other distro, for ease of use, the use of a single GUI (graphical user interface) that allows the launch of the various tools and a good usability at all.
E 'little distracting, easy to use, thus freeing the operator from that which frightens many, namely the difficulties of working with Linux and its Windows Terminal
This is what struck me more ... but maybe Giancarlo has to add something I missed;)
The distribution was made to
OSSConf2008
SITE:
http://www.caine-live.net

Initiation Ideas For Members

CAINE: A new open source distribution for live digital forensics

I just tried Helix 2 on my laptop Acer 1694 Centrino M760 with 1250Mb Ram. Boot: 6 minutes = 8-O
pleasant surprise is installed! Once inside known: 1) Excellent wireless and ethernet network configurator 2) Air is missing but there is Adept.
3) The menus are in good shape, now known easy usability of the tools 4) RegViewer as usual .... not it works ... just select a file to register ... the tool disappears.
5) Ophcrack requires a path to the rainbow tables that ... nn
I managed to find ... perhaps there are nn
6) For the rest looks very nice;)

Party Windows:
well done ... .

many tools especially useful for dumping the RAM WinAudit a useful tool to learn all of the Windows system on which you are working on a tool called USB Deview to display all USB devices that are and have been attacked at least once PC analyzed. A Disk Manager with ability to lock onto discs. A Pre-Search tool for searching and fast image preview
I tried it on the workstation with 1GB of RAM and Intel Pentium Dual Core + Hd Hd Sata and PATA.
Boot: 2.5 minutes

welcome change my SATA hard disk is seen, while the 1.9a no!

www.e-fense.com/helix/

Good Household Masterbation Lubes

Helix 2 has finally arrived!

often talk about creating a virtual machine under Linux, to run another operating system
"virtualized "This system is often represented by Windows.
The concept is simple, you create a virtual machine, with its own virtual hard drive and install Windows on it as if it were a normal installation, clearly, the machine virtual must activate the CD-Rom, so you can insert your Windows CD. Once you install the operating system from Microsoft, the problem remains of how to do communicate with the host system Linux to browse the shared directories for example.

But between theory and practice, as usual, there is always some difficulty, since, in order to browse the network and see the shared folders, you must configure both Linux and network connections of the virtualized system.
Here I describe my experience with Virtualbox (

http://www.virtualbox.org/

) if anyone has anything to add or correct feel free to write your comments .... because this is a typical result Trial and error!

First you need to create a shell like this:

tunctl-t-u vbox0 nbs

chmod 666 / dev / net / tun brctl
addbr br0 brctl

addif br0 eth0 ifconfig br0 192.168.1.100 netmask 255.255.255.0

vbox0

ifconfig br0 brctl addif vbox0 up ifconfig

Or put these commands in the file / etc / network / interfaces

If you decide to create the file, the name, for example, vbox.sh. In this example I used the 192.168.1.x address, note that my network card in Linux is configured with IP address 192.168.0.222 and gateway 192.168.0.1, then the bridge that is being created by this script belongs to a subset different. What does the script:

tunctl - creates and manages interface TUN / TAP persistent
Taken from Wikipedia:

"into computer networks, TUN and TAP are drivers that allow the creation of virtual network devices. Compared to common peripherals ( eg. eth0) which are controlled directly by the network cards, packets sent to or from devices TUN / TAP will be sent to or from software programs. TUN is able to simulate a network device point-to-point and works with type of IP packets while TAP is capable of simulating an Ethernet device and logically using Ethernet frames. " chmod 666 / dev / net / tun - please set the right to read and write to all users on the virtual device addbr br0 brctl - create a virtual bridge. The bridge is a network device that can also sort the packets between different subnets.

addif br0 eth0 brctl - makes the eth0 port of the bridge, in fact arise in order to sort the packets from eth0 ifconfig br0 192.168.1.100 netmask 255.255.255.0
- Configures the IP and netmask of

How Would I Get A Wall That Separates Rooms

Virtualizing Windows with VirtualBox

Here is the version of FUNDL - File Undeleter, tools based on the
Sleuthkit for Linux, Windows 32 finally:
DOWNLOAD

In essence it is a ripping Cygwin environment, which I did with my hands, bringing the following files needed to run the tutto.Sfrutta the
Sleuthkit
3.0.0b4 (3.0 is now available
TSK) FLS with the new that solves the problems of recovering orphaned files .... So with this we recover all the deleted files! It starts with start.bat The path to the image file should always be written as follows: / cygdrive / LETTERA_VOLUME / Dir_file_immagine / file.dd

How To Sew Moccasin Boots

FUNDL

In digital forensics, there is always need tools and new ideas .... Here I am limited to creating three small tool, which may not have nemeno utility, however, at least from an academic point of view may be valid:
FUNDL - File Undeleter

- This is a file for Linux bash shell (requires the use of
Sleuthkit
), which is used to retrieve all the deleted files from a disk or from its image bitstream. Here
Windows
version.

JPG_Builder
- This is a bash shell script for Linux, which inserts the header and footer of a JPG image into a binary file. This may serve to restore groped some of which are missing corrupted JPG header and / or footer.

Spywarino
- This is a small program for Windows that uses the pre-compiled dd, nc bitwise to duplicate a disk in the LAN, without the owner's knowledge of the disk (clearly a monkey user). Useful for the hard copy of someone and then analyze it calmly. ;)
Well toollini are three funny ... I repeat do not know how useful it is FUNDL ... maybe ... but certainly the most useful to develop better anyway .... have educational value.

little tool for Win32

Of
Admin
(of 16/09/2008 @ 09:07:53, in

Computer Forensics, linked 207 times)
How do you measure competence?
In recent times there has been some debate about what it takes to be able to speak, teach or work in computer forensics and I came out to see different realities:

A) The Megalomaniacs: first only to utter the words "computer forensics" you must:
1) Having made a number close to the diameter of Jupiter and CTP CTU! Seriously is a number and it's always sometime .... maybe .... if you have deliberately made 5.10, 100 do not know ... there is always one that says that ... are few quality of these CT? Mha ... do not count ... for those of category A, are only the "measures" (we could rename the pornodivi). 2) You must be debated in court, again for an indefinite number of times, against the most formidable lawyers in the world, those cloned from cells of Bill Gates and Linus Torvald, with an injection of DNA of Perry Mason and a bit of DNA German shepherd, in short mythological figures or extremely rare.
3) You must have done years and years (always an unknown number) of apprenticeship with the great (big is too little) of the CF, in practice those famous four cats, which should open up a residence to accommodate all their apprentices. ah ... of course if you do NOT known to one coaching by Megalomaniacs, you have not done anything .... because even those who worked for years in the field is not nobody is not "recognized" by one of them.
4) You must have lunch, dinner and got a drink with an unknown number of PM! Attention not just talk to the PM, you almost have an intimate relationship, to be able to boast of a complete CT.
5) Finally, you have to have some international certificazioncina is completely useless, but it is so cool!

B) SURFACE: 1) Category widespread especially in Italy, they take everything, teach, take the CT, they do have a lot (to the delight of megalomania), but maybe do not even know what a code hash or copy and paste is not a "lawyer". 2) They always have something to do with these "very rare" (ironic) LAWYERS normal, they do not understand a club for Best Practices. and information and that their expertise does not ever complain.

3) There are many and often turn to megalomaniacs or scholars (a category we will see below) for advice.

4) tend to use the tools cf simpler and more expensive, but in front of words such as "offset", you look so puzzled.

C) SCHOLARS:

1) Category uncommon, composed of people who have different computing experience, have studied a lot, using the best practices and the they have done or said has always been detailed and demonstrated or demonstrable. 2) They have little advice, not due to inexperience, but opportunities of life, but those few have always been made with all the trappings and quality. 3) They have a passion for outreach, writing on the web, in forums, on magazine paper, maybe you self-publish and have a positive feedback from many people. 4) We generally do not say or write incorrect things (as human beings always are), but are attacked by the cat. A (megalomaniac), with no real reasons or technical / scientific.
5) Just the fact that he studied, wrote, made of the CT, etc.. distinguishes them from many other common information, not everyone can get published in magazines, although in certain limited fields semba be a normal thing .... They for the rest of the world, and many people are examples, why are so many information, but few have even a single CT or published anything.
6) Always have a great success when they speak or teach in public, always positive feedback from diverse audiences, are almost never attacked the facts, but always on a smoky concepts.
7) Their enemies are the megalomaniacs, the latter can not stand that someone who is not part of their tour, and admired, but have never even once been to dinner with Brian Carrier ..... but Scandal! Ah But if Brian Grundy Carrier or make the "pariah" compliments .... the megalomaniacal bulldozing over this ... ;)

CONCLUSION: The computer forensics

in Italy is diverse, is made from many different situations, often vary from attorney to attorney from city to city.
In the end, those in category B are those that are best of all, work hard, are shadows, they derive from categories A and C, and no one criticizes them.
Yes, because those in category A tend to fiercely attack those of C, but to give the pat father to those of B, that should embody everything they hate. But who knows what really hate those of A, perhaps those who hate becomes more popular than them and who does not REALLY hurt the work of CT.

I think if one follows, with scientific rigor and passion best practices, is always kept updated, it keeps on technical, CT will be a good, no matter how many bits of his advice .... do not ask for CVs .... and the experiences are always different! One may have done to try CT 100 JPG file deleted .... and another has made five, all different, all with difficult issues to be solved .... who is worth more? One may not have made even though a CT studies in its laboratories and simulates the most common case studies and the more strange in the end .... if it can extract data from a hard disk to a friend or our own laboratory (clearly applying the best practices), why should not fail during a CT? (I speak of a highly technical discourse) The method that is!
REMEMBER that computer forensics is a discipline and intellectual sport ..... training and experience will make studies, also from cases handled by others, does all of experience, maybe to use when there will be in similar cases ..... it's all in the mind, not muscle!

Treating Warts On Lip

FAUNA OF DIGITAL COMPUTER FORENSICS INVESTIGATIONS




This is a guide, a handbook on procedures and case studies, which can occur during an information technology. Not the usual book of computer or digital forensics for all, but is intended for professionals, trainers, as a set of guidelines and procedures to be followed during the identification, acquisition, analysis and reporting.
A handbook to become the Sherlock Holmes digital!

http://www.lulu.com/content/1356430