full-disclosure - Re: Torpark breaks with DEP enabled, and how to break it further so that it works

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 13 Feb 2007 10:35:06 -0800
From: coderman <coderman@...il.com>
To: KJKHyperion <hackbunny@...tpj.org>
Cc: Full-Disclosure@...ts.grok.org.uk
Subject: Re: Torpark breaks with DEP enabled,
	and how to break it further so that it works

On 2/13/07, KJKHyperion <hackbunny@...tpj.org> wrote:
> ...
> Torpark, for the couple of people who don't know yet, is a bloated
> launcher for Portable Firefox and Tor...

fun stuff; if you don't mind even a little more bloat you might want
to try out janusvm which gives you a transparent DNS/TCP proxy through
Tor using a virtual machine.

advantages:
- full transparent proxy, no SOCKS or wrappers required.
- avoids crappy windoze tcp/ip stacks via ethernet bridge. (for
network intensive Tor this can be a big problem)

drawbacks:
- requires vmware (player or workstation)
- users must take care to clean any necessary state in browser or
application between anonymous and non-anonymous modes.

latest january release trimmed off 12M of fat from the dc14 build.  at
least we're trying... ;)

http://janusvm.peertech.org/JanusVM.zip
MD5: 44e13efde64810c8df50babb636fa253
SHA1: dfa29620c8d14110d8507dfcb395a80326ee7b1b
SHA2-256: 0B062B02739E34020510CE41650B338AF695686DBA9DAD9FC667E4AF8EC6DA60

> PS: stop posting child porn on 4chan.org, faggots. You got almost all
> exit nodes banned. GTFO khtxbye, go gum up anonib.com instead

fortunately stupidity leaves many traces; these idiots leave tracks
elsewhere and will face consequences for their actions at some point.
[this isn't limited to banned exit nodes either, these assholes are
also getting exit nodes confiscated in germany and elsewhere.  *sigh*]

P.S.  we've been trying for a number of weeks to get a qemu version
working like the vmware bridge with the tap device used by qemu.  this
causes problems due to windows routing tables, even in bridged mode
(2k/XP) when the VPN connects to janusvm and pushes a new default
route.  if anyone has dealt with this and knows the requisite tricks
for making a bridged tap route outside of the windows IP routes i'd
love to hear it...

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/