UGN Security
Posted By: zenon Programming projects. - 05/19/02 03:38 PM
No one out there that has some good idea
for a UGN programming project?
Posted By: sinetific Re: Programming projects. - 05/19/02 05:54 PM
How about file sharing. Wasn't someone gonna do a UGN file sharing program awhile ago? Maybe it was somewhere else i was thinking of that wanted to do that.
Posted By: SilentRage Re: Programming projects. - 05/19/02 07:24 PM
blah, I think the file sharing thing isn't necessary. KaZaA Lite is plenty good enough.

Here's a few ideas:

System Monitor (with a keylogger, clipboard sniffer, URL logger, window logger, all da good stuff) But then STARR by www.iopus.com is plenty good enough.

A desktop controlling utility. There's a bunch out there, but they're usually trojan's which are hunted by norton or huge applications meant for network admins or something. We can make one which is simple and provides basic viewing of another desktop as well as controlling the remote desktop's mouse and keyboard.

We can make a stealth FTP server. There's a lot of trojan's out there, but most require a proprietary client. Also, they have a bunch of features you don't really need. So we can make something which you can use with your favorite FTP client. It can provide remote file, registry, and execute access.

How about a socket script? Maybe somebody isn't a programmer, but they'd like to make little scripts to do stuff like upload/download files and various connectivity stuff.

Then there's a mouse/keyboard macro maker. This can be useful in games and banner clicking while you're away. Shoot, it can be useful for many reasons.

Well there's a few. I never run out of ideas, so if you'd like to consider more, let me know. smile
Posted By: zenon Re: Programming projects. - 05/21/02 11:22 AM
Well, my ethics forbid me to program something
that even smells as a trojan, so I'll not be up
to those trojan ideas. >(

But maybe something else (that is NOT just Win-
oriented?) Maybe some super-fast ICQ-like prog
that acts 100% like ICQ, text based, terminal
window. And you just type like:

-username ; "message"

and the -username receives something like;

-username sent you a message:
"message"
/.

or something like that.. pimp
Posted By: SilentRage Re: Programming projects. - 05/21/02 12:30 PM
ethics is how you use a tool. No sense in refusing to make a deck of cards because people gamble and kill over them. For instance, if I made that stealth FTP server, my ethics allow me to use it as a means of storing files on school computers or something - or transfering files I want from a computer. I would not use it for destructive purposes cause this would never benefit me.

But less controversial ideas:

1) Socket script as mentioned above - a good idea I say cause there isn't already one out there. It would be one very useful tool as well.

2) Packet dropping program. Modify the rulesets in a config file to drop any incoming or outgoing packet. These rulesets may state that all incoming packets from such a range should be dropped. Or only packets from such a range should be allowed. Or only these ports are to be open - or closed. Or only these ports may be connected out to - or specifically block these ports. These rulesets may be used to drop all UDP and/or ICMP packets. You may add custom rulesets for advanced users which specify if this offset within a packet contains this value then drop it - or if it doesn't - allow it.

I've never heard of such a utility existing, but it would be hella cool. Unfortunately, it requires a lot of work too.

3) Port redirection program. Specify that all incoming or outgoing packets sent to this address/port is instead sent to this address/port. It is up to the user to figure out creative ways to use this utility.

4) Keyboard mapping program. JonConley once described to me the annoying effects of a trojan which remapped his keyboard. If he had a keyboard remapping program, then he could have fixed it. Not sure what else this would be good for, but maybe you can.

5) Hot-Keys Manager. This program can setup either real or virtual hot keys to perform various tasks. Like if you press CTRL+A then your address information would be inserted into the textbox with focus. Or map a key combonation to executing a program, or to opening a window.

Well, there's 5 more ideas for ya. smile
Posted By: Soap Re: Programming projects. - 05/21/02 04:20 PM
Quote:

2) Packet dropping program. Modify the rulesets in a config file to drop any incoming or outgoing packet. These rulesets may state that all incoming packets from such a range should be dropped. Or only packets from such a range should be allowed. Or only these ports are to be open - or closed. Or only these ports may be connected out to - or specifically block these ports. These rulesets may be used to drop all UDP and/or ICMP packets. You may add custom rulesets for advanced users which specify if this offset within a packet contains this value then drop it - or if it doesn't - allow it.

I've never heard of such a utility existing, but it would be hella cool. Unfortunately, it requires a lot of work too.
Itsn't that a firewall you're making, like a winbased Ipchain kinda prog.
Well the firewall I use (software-wise) is called Look'n stop and does exactly what you say above.
Posted By: sinetific Re: Programming projects. - 05/22/02 02:00 AM
that is what IPchains does, but they deffinately need something like that for windows it would blow away any psuedo firewall they have now away
Posted By: Soap Re: Programming projects. - 05/22/02 09:12 AM
That's what I just said.....

And FYI Look'n stop is for windoze (I'm using it under XP)
Posted By: zenon Re: Programming projects. - 05/28/02 05:40 AM
3) Port redirection program. Specify that all incoming or outgoing packets sent to this address/port is instead sent to this address/port. It is up to the user to figure out creative ways to use this utility.
<img border="0" alt="[Sheep]" title="" src="graemlins/sheep.gif" />

Man I liked that one =)
Cool =)
Maybe I'll try this one...
<img border="0" alt="[Thumb]" title="" src="graemlins/thumb.gif" />
Posted By: SilentRage Re: Programming projects. - 05/28/02 11:29 AM
Here's a couple more ideas that I've had before and remembered:

>> A utility that supports extraction and REPLACEMENT of EXE icons. Extraction is easy and done by many programs, but how many programs out there actually replaces the icons within an EXE? I haven't seen any - but it would be very cool! As far as I know, I'd have to learn the EXE header format and do normal file I/O functions to do this.

>> A raw packet sender + basic packet sniffer. This utility would support 3 file formats. A packet script file used to compile a raw packet file and also a packet stream file that references raw and script packet files to send a stream of packets. I don't think this program would make an effective spoofed DoS attack cause it'll have to compile all those packets and send them very rapidly to be affective - as this utility is not intended for such a thing anyway. The only reason I'd use this utility is for experimenting with the ICMP and ARP protocols. Maybe somebody else can find more useful tasks for it.
Posted By: olosoft Re: Programming projects. - 05/29/02 06:24 PM
get resource hacker http://www.rpi.net.au/~ajohnson/resourcehacker/

you open up an exe and it displays all the resources it has in it. icons, cursors, windows, menues, bitmaps, etc. you can extract and replace and everything. its pretty nice.
© UGN Security Forum