This project contains a set of easy classes that I have done for different proposes. There are classes for security, serialization and so on. The list and information about the classes are in its main page.

You can download the source code and binaries from my #Code website: http://code.eridem.net/projects/show/eridemapi-csharp

It is a tool that help us to do Blind SQL Injection attacks to prove the security in our webpages. It is a tool to detect the security on the arguments in our websites and it must not be used to attack websites or another illegal proposes.

This tool was developed by Alex Soler and Miguel Ángel Domínguez.

You can download the source code and binaries from the Google Code website: http://code.google.com/p/secblindsqlinjection/

In this practice, we will see Hiragana words. We need to recognize the Japanese words related with these words in Rōmaji. Write down them and check them.

Once you finish the exercise, select the hide text with the mouse and they will appear.

In order to create a new exercise, reload this page.

You can access to the next exercise Japan Generator – Rōmaji to Hiragana which is opposite to this one

In this practice, we will see Rōmaji sounds. We need to recognize the Japanese words related with these sounds in Hiragana. Write down them and check them.

Once you finish the exercise, select the hide text with the mouse and they will appear.

In order to create a new exercise, reload this page.

You can access to the next exercise Japan Generator – Hiragana to Rōmaji which is opposite to this one

Homemade Kerberos was an assignment which I did in a security course. It is programmed in C# with .NET Remoting. In the project we can find a KDC server and two clients which want to communicate between each other using a Kerberos protocol. The implementation of this Kerberos is the simplest and it should be used only for educational proposes.

Abstract

In this report, we present an overview in the security of the mobile agents and platforms. The recent necessity of mobile agents grow up with the global intercommunication. Mobiles phones, PDA (Personal Digital Assistant), e-Readers and the apparition of thousands of small devices which are introducing in the social life make that the mobile agent parading and their security get turn in an important case of study. During this report, we will build an overview of the mobile agent story, security research and an analysis about advantages and disadvantages of methods used nowadays.

Index

1. Introduction
2. Dicctionary attack
3. Description
4. An example
5. Download (I don’t want to know what it does! Just do it!)
6. How to use it

1. Introduction

This article is about a program which can clean, sort and delete repeated words in your wordlists. You can download it directly in the Download section, but I recommend you read the full article to know why you could neet it and how it works.

2. Dictionary attack

In cryptanalysis and computer security, a dictionary attack is a technique for defeating a cipher or authentication mechanism by trying to determine its decryption key or passphrase by searching likely possibilities.

A dictionary attack uses a brute-force technique of successively trying all the words in an exhaustive list (from a pre-arranged list of values). In contrast with a normal brute force attack, where a large proportion key space is searched systematically, a dictionary attack tries only those possibilities which are most likely to succeed, typically derived from a list of words in a dictionary. Generally, dictionary attacks succeed because many people have a tendency to choose passwords which are short (7 characters or fewer), single words found in dictionaries or simple, easily-predicted variations on words, such as appending a digit.

When we want to perform this kind of attack, we usually have several wordlists in separate files: common English words, cities, names, medical words and so on. But many of those words are repeated in most of the wordlists files. For example, it is usual to find these words into the wordlist file as “12345 qwerty asdfg a aa aaa aaaa”, because people who built these wordlists added only the common words. When we use a large list of words, we accumulate repeated words. If we do not have a large number of words in a reduced number of wordlist files, the time that we waste in operations and time is not so important, but when we use wordlists with a huge number of words (10,000 words or more) with repetitions, we need to optimize it.

3. Description

The proposed algorithm will clean this huge word lists. It will delete all repeat words, clean spaces and new lines, and sort all words. So, this algorithm will perform the following tasks:

1. Clean spaces and add a new line between words.
2. For each wordlist file, sort all words.
3. For each wordlist file, remove repeat words.
4. Compare every file with the others to remove repeated words and save the result in the second compared file.

These tasks are optimized, and the program already does several tasks at the same time. Anyway, the hardest task is to compare every file with the others, although this task is optimized to not repeat comparisons.

Using this algorithm, we can reduce up to 40-50% of time that a dictionary attack could spend.

4. An example

We have four files in our computers, FileA, FileB, FileC, FileD, (table 4.1) with different words. Maybe the words of these files are repeated or maybe not. In total, we have 36 words, including repeated words.

Table 4.1: Total words: 36.

Task 1, 2, 3: For each file: Clean spaces. Add a new line between words. Sort words. Remove repeat words (table 4.2).

Table 3.2: Total words: 32.

Task 4: Compare file by file to remove repeated words. In the example, Six comparison shall be performed: <fileA, fileB>, <fileA, fileC>, <fileA, fileD>, <fileB, fileC>, <fileB, fileD>, <fileC, fileD>. The first wordlist file is compared with the second one, and as a result, from the second wordlist all words, which are in both wordlist, will be deleted. So, the first four comparisons (file A comparisons) will be shown in table 4.3.

Table 4.3: Total words: 25.

Task 4: By comparing the rest of the files: <fileB, fileC>, <fileB, fileD> and <fileC, fileD>, the final state of files are shown in the table 4.4.

Table 4.4: Total words: 21.

The reduction in the number of words are from 36 to 21 which is a 41.6% less of the original word list file.

5. Download

You can download the shell script if you accept the GPL v3 license, and if you accept it, YOU ARE RESPONSIBLE of any kind of damage as: lost of data, deleted files, or any other problems in your hardware, software or system.

EXECUTE IT WITH PRECAUTION! Read the “How to use it” section.

Download <Clean wordlists> version 0.0.1!!!

6. How to use it

After downloading it, change the execution permissions:

chmod +x cleanwl.sh

Then, copy it into the folder where you have the wordlists files you want to clean and execute the script: 

[path_of_the_script]/cleanwl.sh

for example: ./cleanwl.sh

It will show you the statistics of the process, but if you don’t want to see that, you can redirect it to a file or to /dev/null. IMPORTANT: if you decide to redirect the output to a file, redirect it into another folder, not in the same folder that the wordlists files!!

for example: ./cleanwl.sh > ../stats.txt

The Friendly Korea Community API is an API (Application Programming Interface) which brings us the possibility of use simple classes for access to the data of the website http://chingu.prkorea.com.

On Friendly Korea Community, you are able to find korean and international friends how love Korea culture, music, people, movies, food, so on. Furthermore, you can join in the community and post messages to people how are there. To sum up, it’s a kind of Korean’s Facebook.

Nowadays, I have a beta version with several classes. With this classes, an user can:

1. login as user, see his complete own information (name, family name, country, gender, …), see his photo URL.
2. watch a list of his friends with their names, photos URL and their complete information (name, family name, country, gender, …).

Download Friendly Korea Community API – 0.1.0 Last Update: May 15 2009 SourceForge.net

Complete Code Example (v.0.0.2)

SCIM (Smart Common Input Method) es una plataforma de métodos de entrada (IM) que nos permite el uso de más de treinta lenguajes de escritura en algunos sistemas operativos como Linux o BSD. Utiliza una simple estructura que permite la adicción de nuevos lenguajes. Además, existe una interfaz gráfica que nos permite la configuración y cambio de idiomas, mediante shortcuts, de manera fácil y clara.

Durante este tutorial aprenderemos como poder usar SCIM para poder escribir en tres idiomas asiáticos: Chino, Japonés y Coreano. Al finalizar éste, seremos capaz de escribir tanto con un teclado convencional (Genérico de 105 teclas en español), mediante el uso de Romaji para japonés y Romaja parael coreano, es decir, escribir fonéticamente para que aparezca la escritura en sus respectivos idiomas; como el uso de los idiomas con los teclados de cada pais (chino, japonés y coreano), es decir, pulsando las teclas con sus correspondientes símbolos.

1. Instalando SCIM con los idiomas

Si llegaste hasta aquí porque ya intentaste instalar SCIM con estos idiomas y no lo conseguiste, primeramente recomiendo desinstalar todo lo relacionado con SCIM en tu máquina:

Ahora podemos continuar con una instalación limpia. Lo primero que deberemos hacer es instalar todos los paquetes, usaremos cuatro comandos para separar los idiomas, en el caso de que no necesites instalarlos todos. El primer comando es de instalación obligatoria. El segundo es el chino, el tercero el japonés y el cuarto el coreano.

Una vez instalados los paquetes sin problemas, deberemos crear un archivo de configuración para que se inicie SCIM al arrancar la interfaz gráfica. Para ello usaremos el editor de GNOME (o en KDE usaremos kate):

Y añadiremos dentro del archivo el siguiente contenido:

Ahora cerraremos el editor y le daremos solo permisos de lectura al archivo:

2. Arrancando SCIM automáticamente en KDE y GNOME

Para que SCIM arranque automáticamente una vez iniciemos KDE o GNOME, deberemos crear un archivo de inicio.

2.1. Archivo para KDE

Abriremos kate con el siguiente comando:

Y añadiremos el siguiente contenido:

Ahora le aplicaremos los permisos adecuados:

2.2. Archivo para GNOME

Abriremos gedit con el siguiente comando:

Y añadiremos el siguiente contenido:

3. Configurando SCIM

Una vez realizado los pasos anteriores, arrancaremos SCIM con el siguiente comando:

Nos aparecerá el icono de un teclado pequeño en la bandeja del sistema. Pulsaremos con el botón derecho del ratón sobre el y seleccionaremos la opción SCIM Setup. A partir de este momento, dejo unas capturas de la configuración que debe tener SCIM.

3.1. Configuración global

3.2. Configuración de idiomas

3.3. Configuración del entorno

Una vez configurado SCIM, deberemos reiniciar la máquina. Esto es importante para poder empezar a usarlo.

4. Utilizando SCIM

De acuerdo a la configuración anterior, aprenderemos las nociones básicas para cambiar entre idiomas y usarlos. Para intercambiar entre idiomas, pulsaremos CTRL+ESPACIO ó CTRL+ALT+ESPACIO y nos aparecerá una barra en la que nos indica el lenguaje actual seleccionado. En la siguiente imagen vemos unos ejemplos de escritura según la barra seleccionada.

En el caso de nuestro ejemplo, hemos seleccionado los idiomas correspondientes para la traducción fonética con un teclado en Español. Es decir, en el segundo caso, hemos escrito “konnichiwa” y se ha traducido directamente al Hiragana. En el tercer caso hemos escrito “annyeong” y se ha traducido directamente al coreano. En estos dos ejemplos de teclado, hay que tener en cuenta que estén seleccionadas los teclados JP y KR como vemos redondeados en la imagen.

Intercambiando entre idiomas, podemos elegir otro tipo de coreano que sirve para teclados con simbología coreana. En el caso del chino, surge de igual manera.

Día 6: Sayonara baby!

Para ser amables con la gente japonesa, deberemos aprendernos los saludos más típicos que mi amiga me ha ido enseñando. En esta tabla vemos los aprendidos hasta ahora:

La palabra gozaimasu es una palabra formal que indica algo así como “muy buenas…“. Algunos de estos saludos creo que os sonarán “sayonara baby” (by Terminator), aunque lo más normal es decir “matane” entre amigos y buenos conocidos.

Día 7: Adjetivos posesivos

Los adjetivos posesivos en japonés los aprenderemos de inmediato, pues para crear un adjetivo posesivo utilizaremos el subjeto más “no”.

[Sujeto] + no + [Objeto poseido]

Otra de las cualidades a tener en cuenta es que no usan el plural, así que más fácil todavía (bueno, me ha comentado que se usan en momentos especiales, así que de momento no los vemos). A continuación se muestra una lista completa de los posesivos: