Назад в раздел
In addition to these, there are many interesting (traditional and nontraditional) development tools for Mac, including the following:
Password Crackers and Related UtilitiesThe utilities described in the following sections are popular password crackers or related utilities for use on Macintosh. Some are made specifically to attack Mac-oriented files. Others are designed to crack UNIX password files. This is not an exhaustive list, but rather a sample of the more interesting tools freely available on the Internet. PassFinderPassFinder is a password cracking utility used to crack the administrator password on FirstClass systems. This is an important utility. The program suite FirstClass is a gateway system, commonly used for serving e-mail, UUCP, and even news (NNTP). In essence, FirstClass (which can be found at http://www.softarc.com/) is a total solution for mail, news, and many other types of TCP/IP-based communication systems. It is a popular system on the MacOS platform. (It even has support for Gopher servers and FTP and can be used to operate a full-fledged BBS.) Because FirstClass servers exist not only on outbound Internet networks, but also on intranets, PassFinder is a critical tool. By cracking the administrator password, a user can seize control of the system's incoming and outgoing electronic communications. (However, this must be done on the local machine. That is, the user must have access to the console of the instant machine. This is not a remote cracking utility.)
FirstClass Thrash!This is an interesting collection of utilities, primarily designed for the purpose of conducting warfare over (or against) a FirstClass BBS. It has features that could be easily likened to Maohell. These include mailbombing tools, denial-of-service tools, and other, assorted scripts useful in harassment of one's enemies. It's primarily used in warfare.
FMProPeeker 1.1This utility cracks FileMaker Pro files. FileMaker Pro is a database solution from Claris, (http://www.claris.com). While more commonly associated with the Macintosh platform, FileMaker Pro now runs on a variety of systems. It is available for shared database access on Windows NT networks, for example. In any event, FMProPeeker subverts the security of FileMaker Pro files.
FMP Password Viewer Gold 2.0FMP Password Viewer Gold 2.0 is another utility for cracking FileMaker Pro files. It offers slightly more functionality (and is certainly newer) than FMProPeeker 1.1.
MasterKeyIIMasterKeyII is yet another FileMaker Pro cracking utility.
Password KillerPassword Killer is designed to circumvent the majority of PowerBook security programs.
Killer CrackerKiller Cracker is a Macintosh port of Killer Cracker, a password cracker formerly run only on DOS and UNIX-based machines. (You can find a lengthy description of Killer Cracker in Chapter 10, "Password Crackers." Thankfully, the Mac version is distributed as a binary; that means you do not need a compiler to build it.)
MacKrackMacKrack is a port of Muffet's famous Crack 4.1. It is designed to crack UNIX passwords. It rarely comes with dictionary files, but works quite well. Makes cracking UNIX /etc/passwd files a cinch. (It has support for both 68K and PPC.)
Unserialize PhotoshopUnserialize Photoshop is a standard serial number-killing utility, designed to circumvent serial number protection on Adobe Photoshop. This utility really falls into the traditional cracking category. I don't think that this type of activity does much to shed light on security issues. It is basically a tool to steal software. Therefore, I will refrain from offering any locations here. Adobe is a good company--perhaps the only company ever to get the best of Microsoft. My position on stealing software (though I've stated it before) is this: You want free software? Get FreeBSD or Linux and go GNU. This way, you get quality software for free and still maintain extreme cool.
WordListMakerWordListMaker is a utility designed to manage dictionary files. This is invaluable if you plan to crack password files of any size, or files on which the users may speak more than one language (forcing you to use not only American English dictionaries, but perhaps others, including British English, Italian, French, German, and so forth). The utility is designed to merge dictionary files, a function that on a UNIX system takes no more than a brief command line but that, on many other platforms, can be a laborious task.
Remove PasswordsRemove Passwords is a nifty utility that removes the password protection on Stuffit archives. Stuffit is an archiving utility much like PKZIP or GZIP. It is more commonly seen on the Macintosh platform, but has since been ported to others, including Microsoft Windows. You can acquire Stuffit at ftp://ftp.aladdinsys.com/. Remove Passwords bypasses password protection on any archive created (and password protected) with Stuffit.
RemoveItRemoveIt is a utility almost identical to Remove Passwords. It strips the passwords from Stuffit archives.
Tools Designed Specifically for America OnlineThe tools described in the following sections are designed primarily to subvert the security of America Online. Specifically, the majority of applications in this class steal service from AOL by creating free accounts that last for several weeks. Use of most of these tools is illegal. Maohell.sitCurrently available at 13 sites on the Net, Maohell.sit is the Macintosh port (or rather, equivalent) of the famous program AOHELL. AOHELL allows you to obtain free access to America Online services. It can create bogus accounts that are good for several weeks at a time. The utility also comes with various tools for harassment, including an automated mailbombing utility and some chat room utilities.
AOL4FREE2.6v4.sitAOL4FREE2.6v4.sit, which manipulates the AOL system, forcing it to interpret you as always occupying the "free" or demo section of AOL, has caused quite a controversy. The author was arrested by the United States Secret Service after being identified as the creator of the software. He currently faces very heavy fines and perhaps a prison sentence. Here's a report from a recent news article:
One interesting document regarding the whole affair is located at wku.edu. The author shows a series of messages between AOL personnel discussing the AOL4FREE problem. (These messages were intercepted from e-mail accounts.) The communication between AOL's inner staff discussed various signatures that AOL4FREE would leave on the system during a sign-on. Having identified these sign-on signatures, the staff were ready to "...get verification from TOS and then hand [the crackers] over to the Secret Service."
However, things did not go as well as the internal staff of AOL had hoped. Since their e-mail was intercepted, a new version of AOL4FREE was created that fixed the problem. Thus, the new version would continue to work, even after AOL had installed their "AOL4FREE Detector." This is discussed in the document:
It will be interesting to see what happens. I have a strong feeling that new versions of AOL4FREE are about to be released. (Don't ask me why. Call it a premonition.) From my point of view, this would not be so bad. In my not-so-humble-opinion, AOL has, until very recently, engaged in Information Superhighway robbery. However, that opinion has not enough weight for me to print the location of version 4 in this book. The WebStar ControversyOn October 15, 1995, a challenge was posted to the Internet: A Macintosh Web server running WebStar was established and offered as a sacrificial host on the Net. If anyone could crack that server, that person would be awarded $10,000.00. The challenge was a demonstration of the theory that a Mac would be more secure than a UNIX box as a Web server platform. Did anyone collect that 10 grand? No. Chris Kilbourn, the president and system administrator for digital.forest, an Internet service provider in Seattle, Washington, posted a report about that challenge. (I will be pointing you there momentarily.) In it, he explains
So what really happened here? Did the challenge ultimately prove that a Mac is more secure than a UNIX box as a Web server platform? Yes and no. To understand why both answers are valid, you need to have a few particulars. First, the machine included in the challenge was running only a Web server. That is, it did not run any other form of TCP/IP server or process. (How realistic that would be in a Mac serving as anything other than exclusively a Web server is an area of some dispute. However, for the moment, we are dealing with a simple Web server.) Therefore, the simple answer is yes, a standalone Mac Web server is more secure than a full-fledged UNIX server running a Web daemon. However, that is not the end of the story. For example, the UNIX server can do things that the Mac server cannot. That includes file transfers by a dozen or more different protocols. It also includes handling file sharing with more than a dozen platforms. The key here is this: For a sacrificial Web server, the Mac is a better choice (that is, unless your system administrator is very well versed in security). UNIX has just too many protocols that are alive by default. Part of the security gained by the Mac is in the fact that there is no command interpreter that is well known by UNIX or IBM users behind the Web server. However, there is a way to crack such a server. Here's a report from an Apple Technical article:
The AppleScript engine is indeed an interpreter; it's just not one known intimately by a large population of non-MacOS users. The problem must therefore be approached by someone who is deeply familiar with TCP/IP, AppleScript, and cracking generally. I would imagine that the list of such persons is fairly short. However, these are the elements that would be required. So know that it is not impossible. It is simply that the majority of cracking knowledge has been UNIX-centric. This will change rapidly now that the Internet is becoming so incredibly popular. Apple experts advise that security issues should remain a constant concern if you are providing remote services. In a document designed to provide guidance in setting up an Internet server, the folks at Apple offer this:
Certainly, it has already been proven that a Mac Web server can be vulnerable to denial-of-service attacks, including the dreaded Sequence of Death. In a recent article by Macworld, the matter is discussed:
Note that this problem was unrelated to Apple. This brings back the point that I have made many times: When software developers and engineers are developing packages at different times, in different places, and within the confines of different companies, security holes can and do surface. This is because acquiring the API is sometimes not enough. Here is a great example of such a situation: Have you ever used version 1.5.3 of ASD's DiskGuard? If you have, I'll bet you were a bit confused when you couldn't access your own hard disk drive:
However, all this discussion is really immaterial. Average Macintosh users are not security fanatics and therefore, their personal machines are probably subject to at least minimal attack. This will depend on whether they have their disk and resources shared out. The Macintosh file sharing system is no less extensive (nor much more secure) than that employed by Microsoft Windows 95. The only significant difference is that in the Mac environment, you can not only turn off file sharing, but also pick and choose which files you want to share. This is done by going to the Sharing Options panel and making the appropriate settings.
Naturally, in a network, this may be a complex matter. Your choices will be made depending on the trust relationships in your organization. For example, if you are in a publishing department of a magazine, perhaps you take commercial advertisements but the copy for these is generated in another portion of the building (or at the very least, another portion of the network). It may require that you share a series of folders so that you can conveniently traffic ad copy between your department and the advertising department. The file sharing hole is a matter of extreme concern. At the very least, every Mac user should establish a password for himself as the owner of the machine. Furthermore, that password should be carefully considered. Mac passwords are subject to attack, the same as any other password on every password system ever created. Care should be taken to choose a characteristically "strong" password. If this term strong password is a foreign concept to you, please review Chapter 10, which contains a series of references to reports or technical white papers that discuss the difference between weak and strong password choices and how to make them. Finally (and perhaps most importantly), guest access privileges should be set to inactive. But, then, as most experienced Mac users know, file sharing is not the only security hole in the Macintosh environment. There are obscure holes and you have to dig very deep to find them. Apple (much like Microsoft) is not nearly as gung-ho about advertising vulnerabilities on their platform as, say, the average UNIX vendor. Typically, they keep the matter a bit more isolated to their particular community. Naturally, MacOS holes are like holes on any other operating system. Today, if you purchase a brand new Mac with the latest distribution of MacOS, you have a guarantee of good security. However, again, not everyone uses the latest and the greatest. For example, do you remember Retrospect? If you have used it (or are now using it) have you ever seen this advisory:
Anti-Cracker ToolsSo much for programs that help crackers gain unauthorized access to your system. Now I would like to detail a few programs that will keep those curious folks out. StartUpLogCreated by Aurelian Software and Brian Durand, StartUpLog is a snooper application. It begins logging access (and a host of other statistics) from the moment the machine boots. Using this utility is very easy. It ships as a Control Panel. You simply install it as such and it will run automatically, logging the time, length, and other important information of each access of your Mac. It's good for parents or employers.
Super SaveFor the ultimate paranoiac, Super Save is truly an extraordinary utility. This utility will record every single keystroke forwarded to the console. However, in a thoughtful move, the author chose to include an option with which you can disable this feature whenever passwords are being typed in, thus preventing the possibility of someone else later accessing your logs (through whatever means) and getting that data. Although not expressly designed for security's sake (more for data crash and recovery), this utility provides the ultimate in logging.
BootLoggerBootLogger is a little less extreme than either StartUpLog or Super Save. It basically reads the boot sequence and records startups and shutdowns. It is a less resource-consuming utility. I suggest using this utility first. If evidence of tampering or unauthorized access appears, then I would switch to Super Saver.
DiskLockerDiskLocker is a utility that write protects your local hard disk drive. Disks are managed through a password-protect mechanism. (In other words, you can only unlock the instant disk if you have the password. Be careful not to lock a disk and later lose your password.) The program is shareware (written by Olivier Lebra in Nice, France) and has a licensing fee of $10.
FileLockFileLock is a little more incisive than DiskLocker. This utility actually will do individual files or groups of files or folders. It supports complete drag-and-drop functionality and will work on both 68K and PPC architectures. It's a very handy utility, especially if you share your machine with others in your home or office. It was written Rocco Moliterno (Italy).
SesameSesame is likely to become an industry standard (much as Mac Password has). Sesame offers full-fledged password protection for the MacOS. First, the utility offers several levels of protection. For example, you can create an administrator password and then individual user passwords beneath it. Moreover, Sesame will actually protect against a floppy boot attack. In other words, whatever folders or files you hide or password protect with this utility, those options will still be evident (and the controls still present) even if a local user attempts to bypass security measures by booting with a floppy disk. This is shareware with a $10 licensing fee and was written by Bernard Frangoulis (France).
MacPasswordThe industry standard for full password protection on MacOS, MacPassword is a fully developed commercial application. It provides not only multiple levels of password protection (for both disk and screen), but it also incorporates virus scanning technology. It's definitely worth the money. However, you can always check it out for free. The demo version is available at many locations across the Internet. Here's an excerpt from Tom Gross's copy of the Mac FAQ:
SummaryAlthough the Mac platform is not known for being a cracking platform, it is well suited for hacking. Hacking on the Mac platform can be fun; cracking is another matter entirely. This chapter covers a multitude of utilities for hacking and cracking using the Macintosh platform, and also discusses ways to keep hackers and crackers out. ResourcesThe following list of resources contains important links related to Macintosh security. You'll find a variety of resources, including books, articles, and Web sites. Books and ReportsGetting Your Apple Internet Server Online: A Guide to Providing Internet Services. Alan B. Oppenheimer of Open Door Networks and Apple. Security Ports on Desktop Macs. A discussion of physical security on a Mac using various security ports and cable locking mechanisms. ArticleID: TECHINFO-0017079; 19960724 15:55:27.00. The $10,000 Macintosh World Wide Web Security Challenge: A Summary of the Network and the Attacks. Chris Kilbourn, digital.forest. (Formatting provided by Jon Wiederspan.) The Mac History Page by United Computer Exchange Corporation. This is an amazing pit stop on the Internet. If you want to instantly identify older Mac hardware and its configuration limitations, this is the site for you. Displayed in table format. A great resource, especially for students who are in the market for an inexpensive, older Mac. How Macs Work. John Rizzo and K. Daniel Clark. Ziff-Davis Press. ISBN 1-56276-146-3. Voodoo Mac. Kay Yarborough Nelson. Ventana Press. ISBN 1-56604-028-0. Sad Macs, Bombs, and Other Disasters. Ted Landau. Addison-Wesley Publishing Company. ISBN 0-201-62207-6. The Power Mac Book. Ron Pronk. Coriolis Group Books. ISBN 1-883577-09-8. Macworld Mac OS 7.6 Bible. Lon Poole. IDG Books. ISBN 0-7645-4014-9. Macworld Mac SECRETS, 4th Edition. David Pogue and Joseph Schorr. IDG Books. ISBN 0-7645-4006-8. The Whole Mac Solutions for the Creative Professional. Daniel Giordan et al. Hayden Books. ISBN 1-56830-298-3. 1996. Guide to Macintosh System 7.5.5. Don Crabb. Hayden Books. ISBN 1-56830-109-X. 1996. Building and Maintaining an Intranet with the Macintosh. Tobin Anthony. Hayden Books. ISBN 1-56830-279-7. 1996. Using the Internet with Your Mac. Todd Stauffer. QUE. ISBN 0-78970-665-2. 1995. Simply Amazing Internet for Macintosh. Adam Engst. Hayden Books. ISBN 1-56830-230-4. 1995. Sites with Tools and MunitionsGranite Island Group and Macintosh Security. ClaireWare Software. Macintosh applications, security. Macintosh Security Tools. CIAC. (U.S. Department of Energy.) The Ultimate Hackintosh Linx. Warez, security, cracking, hacking. AoHell Utilities at Aracnet. Hacking and cracking utilities for use on America Online. Hacking Mac's Heaven! Hacking and cracking tools and links from the Netherlands. Lord Reaper's Hacking Page. Cracking and hacking utilities for use on MacOS. Files for Your Enjoyment. UK site with Mac hacking and cracking utilities. The Grouch's Page. The ultimate list of Mac hacking and cracking software. Guide to Cracking Foolproof. Quite complete. Vladimir's Archive. Good, quick-loading archive of some baseline Mac hacking and cracking tools from Japan. Treuf's Mac SN# Archive. Serial number archive for those who refuse to pay for software, use free software, or write their own. The Mac Hack Page. A very large collection of strange and often unique utilities. This site also has links to many of the major Mac hacking and cracking tools, text files, and other assorted underground materials. DArKmAc'S pHiLeZ. Yet another archive of baseline Mac hacking and cracking utilities. Ziggiey's Hack Hut for Macs. Extraordinary, dynamic list for "warez" sites, the majority of which are reachable via FTP or Telnet. Zines and Electronic Online MagazinesMacUser On-Line Magazine. MacCentral. Extensive and very well-presented online periodical about Macintosh. Macworld Daily. The latest and greatest in Macintosh news. MacSense Online. Good resource for quick newsbytes on the current state of the art with Macintosh. MacHome Journal Online. Good, solid Internet mag on Macintosh issues. Core! Online. Electronic Journal in the UK. The Internet Roadstop. Online periodical addressing Macintosh Internet issues. MacAssistant Tips and Tutorial Newsletter and User Group. Very cool, useful, and perhaps most importantly, brief newsletter that gives tips and tricks for Mac users. Commercial, but I think it is well worth it. A lot of traditional hacking tips on hardware, software, and special, not-often-seen problems. These are collected from all over the world. $12 per year. MacTech. Well-presented and important industry and development news. You will likely catch the latest dope on new security releases here first. Also, some very cool technical information (for example, the development of the new, high-end "SuperMacs," which are ultra-high- performance Macs that offer UNIX workstation power and even multiprocessor support). The Underground Informer. E-zine that concentrates on the often eclectic and creative BBS underground out there.
  
© Copyright, Macmillan Computer Publishing. All rights reserved. |
 |
|
