Flyover at the Miami Dolphins Game

UCF in NCAA Top 25

The rankings are in. University of Central Florida is ranked 25. University of Florida was ranked 24. Look out Gators. Miami and Florida State are in the not ranked bucket.

Go Fighting Knights.

Miami Heat

Free In-Flight WiFi

From November 20th to January 2nd Google is teaming up with AirTran, Delta, and Virgin America to provide free Wifi.  I have had a chance to fly with WiFi and it is the goods!

http://www.freeholidaywifi.com/

Metasploit Pro PWDump Report

I have been testing Rapid7's new Metasploit Pro product.  While I am finishing up the review, you can check here for the HackMiami review of Metasploit Express.

Added to the features are VPN pivoting and 2 new attack vectors of Web Attacks and Social Engineering. 

On Nov 2nd, HD had a webcast to showcase the new features of Pro.  One of the questions received was about taking the hashes collected and converting them into plain text passwords.  HD said that in the next update, one could export data that had been looted to a PWDump format.

While at a client site last week, I got an opportunity to use this feature.  It is quite simple. 

Step 1:

Under the Reports tab, Go down to Generated Reports and select Generate a Report.

Under the Report Format Select PWDump.

The output looks like this.

Running this through your favorite program (I like ophcrack) results in the plain-text passwords.

This is often helpful when explaining the risks to the non-technical company management.  Hashes may not mean anything to them.  It is often very effective when you ask if "Fluffy2010" is also their VPN, Facebook, and personal email password. 

Spoiler Alert:  It was!