TCPDump. If you want to capture traffic you need to be using this tool. TCPDump is small lightweight and really easy to understand once you learn the basic syntax. It’s the perfect tool to gather info off the wired or wireless network. If you’re running it on a computer with dsniff installed you can use dsniff to route traffic through your computer and see everything your target is doing even on a switched network (See the article on How-To spy on other users on the local network from back in August )

For years the de-facto groupware suite was Microsoft Exchange and Outlook. Well as someone who prefers to not use Microsoft products if I can avoid it this has been somewhat of a problem. Sure there have been some projects that replaced some of the functionality of Exchange (Like Zimbra)  but there have always been problems. Things just never seemed to work quite right. That is until I tried Zarafa. Zarafa is an Exchange replacement that runs on Linux. Like a lot of recent Open Source projects the company responsible for Zarafa as made available both a Community (Read “free as in beer and speech”) version that has a restriction of 3 connected mapi (Outlook) clients and a paid version that you can pay for per client access license.

The key features of Zarafa are

1. Ajax based web interface (This is as close to Outlook in a web browser as I’ve ever seen)
2. Outlook support (versions 2000 to 2007)
3. Mobile support (Push email to Activesync devices (Windows Mobile or iPhone) via Z-Push
4. Active Directory/LDAP integration
5. POP3/IMAP support
6. MySQL support
7. Single Sign on support
8. Brick Level Backup (not in the community version)

Nmap is one of those essential tools that you find yourself always reaching for after a few years of system administration. It’s an excellent tool for network mapping but more importantly for our purposes it can be used for security auditing. The main ways I use Nmap are as a port scanner and in some cases to identify the OS of the IP being scanned. These are by no means the only uses. Nmap has a ton of option and in addition can be extended with scripts.

Stealth MAC is an absolute necessity if you’re going to be doing anything subversive from your iPod/iPhone every network enabled device has what is known as a MAC address which is a unique identifier that’s assigned to the network adapter by the manufacturer. These are supposed to be globally unique ( but that’s not always the case) and normally the first three pairs of numbers/letters identify the hardware manufacturer. This is terrible if we’re planning on doing something subversive on a network as it’s a digital footprint of our activities.

Skyhook the company behind the WiFi pseudo GPS in the iPod touch and the iPhone apparently has an API that allows you access to their database. Using this database you can find the physical geographic location of a WiFi router or access point.

Hi everyone! Like I promised last week I’ve been hard at work sorting out my ultimate portable covert hacking device install. I’m going to jailbreak my old iPod touch (Replaced by my iPhone 3G) and turn it into a portable innocent looking mobile hacking outpost I can carry with me anywhere. I mean who’s going to suspect the guy carrying nothing more than an iPod.