Difference between pages "Category:Network Forensics" and "Webloc"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Supported Hardware Chipsets)
 
m (forgot the main reason why I created this page, DeRez)
 
Line 1: Line 1:
{{Infobox_Software |
+
This is Mac OS X's internet shortcut file, similar to the Microsoft Windows [[.URL]] file.  However, due to the heavy usage of [[AppleDouble_header_file|AppleDouble]] resources, the expected data is actually stored as metadata and not in the the expected data file location.
  name = KisMAC |
+
  maintainer = KisMAC Team |
+
  os = {{MAC OS X}} |
+
  genre = Wireless forensics |
+
  license = {{Unknown}} |
+
  website = [http://www.http://kismac-ng.org] |
+
}}
+
  
""KisMAC"" is a free and open-source sniffer/scanner for MAC OS X that uses third party usb devices including, Intersil Prism2, Ralink rt2570, rt73, and Realtek rtl8187 chipsets. All of the internal AirPort hardware is supported for scanning.
+
On the file system itself, the shortcut file named <code>News.webloc</code> pointing to <code>http://news.google.com</code> is actually a zero byte file. The URL is instead stored in the <code>._News.webloc</code> file in a field with resource type '<code>url </code>'.
  
== Crypto Support ==
+
The contents of this resource file are visible with the Apple Developer Tool [http://developer.apple.com/documentation/Darwin/Reference/ManPages/man1/DeRez.1.html DeRez]
  
Bruteforce attacks against LEAP, WPA and WEP
+
[[Category:File Formats]]
Weak scheduling attack against WEP
+
Newsham 21-bit attack against WEP
+
 
+
 
+
More information about KisMAC can be found at [http://www.http://trac.kismac-ng.org/wiki link kismac-ng.org]
+

Revision as of 03:27, 4 September 2008

This is Mac OS X's internet shortcut file, similar to the Microsoft Windows .URL file. However, due to the heavy usage of AppleDouble resources, the expected data is actually stored as metadata and not in the the expected data file location.

On the file system itself, the shortcut file named News.webloc pointing to http://news.google.com is actually a zero byte file. The URL is instead stored in the ._News.webloc file in a field with resource type 'url '.

The contents of this resource file are visible with the Apple Developer Tool DeRez