Discussion:
Postgres lib location
i***@public.gmane.org
2009-03-26 11:40:35 UTC
Permalink
Hi,
Just compiling the "latest" snapshot with postgres support and I get:

iwar-log.c:32:22: error: libpq-fe.h: No such file or directory

But I have the dev libs installed on my debian etch system , so to fix
i did the following:

diff -ruN /tmp/iwar-0.08-CVS-12292008/iwar-engine.c
iwar-0.08-CVS-12292008/iwar-engine.c
--- /tmp/iwar-0.08-CVS-12292008/iwar-engine.c 2008-12-29
19:56:07.000000000 +0000
+++ iwar-0.08-CVS-12292008/iwar-engine.c 2009-03-26
11:25:36.000000000 +0000
@@ -56,7 +56,7 @@
#endif

#ifdef HAVE_LIBPQ
-#include <libpq-fe.h>
+#include <postgresql/libpq-fe.h>
PGconn *psql;
PGresult *result;
#endif

diff -ruN /tmp/iwar-0.08-CVS-12292008/iwar-log.c
iwar-0.08-CVS-12292008/iwar-log.c
--- /tmp/iwar-0.08-CVS-12292008/iwar-log.c 2008-11-21
06:57:47.000000000 +0000
+++ iwar-0.08-CVS-12292008/iwar-log.c 2009-03-26 11:25:36.000000000 +0000
@@ -29,7 +29,7 @@
#endif

#ifdef HAVE_LIBPQ
-#include <libpq-fe.h>
+#include <postgresql/libpq-fe.h>
PGconn *psql;
PGresult *result;
#endif

Maybe the check in the configure script needs updating too.

Thanks and keep up the good work.
i***@public.gmane.org
2009-03-26 13:37:57 UTC
Permalink
You might want to check out WarVox:

http://warvox.org/

It utilizes VoIP carriers, and unlike iWar, does a degree of signals
analysis / carrier identification etc.

It's also highly extendable to the metasploit platform, so that you can
exploit terminal vulnerabilities such as the old solaris /bin/login
overflow.

Enjoy.
Post by i***@public.gmane.org
Hi,
iwar-log.c:32:22: error: libpq-fe.h: No such file or directory
But I have the dev libs installed on my debian etch system , so to fix
diff -ruN /tmp/iwar-0.08-CVS-12292008/iwar-engine.c
iwar-0.08-CVS-12292008/iwar-engine.c
--- /tmp/iwar-0.08-CVS-12292008/iwar-engine.c 2008-12-29
19:56:07.000000000 +0000
+++ iwar-0.08-CVS-12292008/iwar-engine.c 2009-03-26
11:25:36.000000000 +0000
@@ -56,7 +56,7 @@
#endif
#ifdef HAVE_LIBPQ
-#include <libpq-fe.h>
+#include <postgresql/libpq-fe.h>
PGconn *psql;
PGresult *result;
#endif
diff -ruN /tmp/iwar-0.08-CVS-12292008/iwar-log.c
iwar-0.08-CVS-12292008/iwar-log.c
--- /tmp/iwar-0.08-CVS-12292008/iwar-log.c 2008-11-21
06:57:47.000000000 +0000
+++ iwar-0.08-CVS-12292008/iwar-log.c 2009-03-26 11:25:36.000000000 +0000
@@ -29,7 +29,7 @@
#endif
#ifdef HAVE_LIBPQ
-#include <libpq-fe.h>
+#include <postgresql/libpq-fe.h>
PGconn *psql;
PGresult *result;
#endif
Maybe the check in the configure script needs updating too.
Thanks and keep up the good work.
_______________________________________________
iWar mailing list
http://bundy.vistech.net/mailman/listinfo/iwar
i***@public.gmane.org
2009-03-26 14:31:37 UTC
Permalink
Post by i***@public.gmane.org
http://warvox.org/
It utilizes VoIP carriers, and unlike iWar, does a degree of signals
analysis / carrier identification etc.
Correct, CVS Head iWar doesn't do it (yet). I'm sitting on the
iWar code that does it as we speak. I'd like to do a few more things
before pushing it up.

Warvox is pretty nifty.

- Beave
i***@public.gmane.org
2009-03-26 14:40:48 UTC
Permalink
Anyone using warvox successfully ?
Post by i***@public.gmane.org
Post by i***@public.gmane.org
http://warvox.org/
It utilizes VoIP carriers, and unlike iWar, does a degree of signals
analysis / carrier identification etc.
Correct, CVS Head iWar doesn't do it (yet). I'm sitting on the
iWar code that does it as we speak. I'd like to do a few more things
before pushing it up.
Warvox is pretty nifty.
- Beave
_______________________________________________
iWar mailing list
http://bundy.vistech.net/mailman/listinfo/iwar
i***@public.gmane.org
2009-03-26 14:58:56 UTC
Permalink
Post by i***@public.gmane.org
Anyone using warvox successfully ?
Yes. I started playing with it pretty much as soon as I heard
about it. It works pretty much as advertised. I've had a couple of
small quirks with it, but nothing huge.

- Beave
i***@public.gmane.org
2009-03-26 14:49:59 UTC
Permalink
Wondering this aswell.

Not enough info on their page about the backend stuff, how its logged
and everything. Guess I'll have to download and try it.

I do like the graphs and audio fingerprint stuff.





--Ben





________________________________

From: iwar-bounces-***@public.gmane.org
[mailto:iwar-bounces-***@public.gmane.org] On Behalf Of
iwar-***@public.gmane.org
Sent: Thursday, March 26, 2009 9:41 AM
To: iwar-***@public.gmane.org
Subject: Re: [iWar] Postgres lib location



Anyone using warvox successfully ?
i***@public.gmane.org
2009-03-26 15:11:50 UTC
Permalink
How does the audio fingerprinting work?
Post by i***@public.gmane.org
Wondering this aswell.
Not enough info on their page about the backend stuff, how its logged and
everything. Guess I’ll have to download and try it.
I do like the graphs and audio fingerprint stuff.
--Ben
------------------------------
*Sent:* Thursday, March 26, 2009 9:41 AM
*Subject:* Re: [iWar] Postgres lib location
Anyone using warvox successfully ?
------------------------------------------------------------------------------
NOTICE: This electronic mail message and any attached files are confidential. The information is exclusively for the use of the individual or entity intended as the recipient. If you are not the intended recipient, any use, copying, printing, reviewing, retention, disclosure, distribution or forwarding of the message or any attached file is not authorized and is strictly prohibited. If you have received this electronic mail message in error, please advise the sender by reply electronic mail immediately and permanently delete the original transmission, any attachments and any copies of this message from your computer system. Thank you.
==============================================================================
_______________________________________________
iWar mailing list
http://bundy.vistech.net/mailman/listinfo/iwar
i***@public.gmane.org
2009-03-26 15:34:54 UTC
Permalink
Post by i***@public.gmane.org
Wondering this aswell.
Not enough info on their page about the backend stuff, how its logged
and everything. Guess I'll have to download and try it.
I do like the graphs and audio fingerprint stuff.
It's worth a download. The backend uses the "iaxrecord" to
record raw audio files. After dialing (if I remember this correct) in
the analysis screen, Warvox uses KissFFT to look for "interesting"
information. So, for example, it'll analyze the raw audio files
for 2100hz and 2250 hz (with a bit of tolerance). If it finds those
tones, it'll mark them as a "modem". It does create some nice graphics
and reports, which can be useful.

iWar is doing the same thing (well, my copy) without the
graphics. However, you'll be able to load all the "raw" data files
from a iWar dial into Warvox.

Before doing a live dial, make sure your in a single party
recording state.

- Beave
i***@public.gmane.org
2009-03-26 19:04:00 UTC
Permalink
any reason why people aren't using a sip client ?
Post by i***@public.gmane.org
Post by i***@public.gmane.org
Wondering this aswell.
Not enough info on their page about the backend stuff, how its logged
and everything. Guess I'll have to download and try it.
I do like the graphs and audio fingerprint stuff.
It's worth a download. The backend uses the "iaxrecord" to
record raw audio files. After dialing (if I remember this correct) in
the analysis screen, Warvox uses KissFFT to look for "interesting"
information. So, for example, it'll analyze the raw audio files
for 2100hz and 2250 hz (with a bit of tolerance). If it finds those
tones, it'll mark them as a "modem". It does create some nice graphics
and reports, which can be useful.
iWar is doing the same thing (well, my copy) without the
graphics. However, you'll be able to load all the "raw" data files
from a iWar dial into Warvox.
Before doing a live dial, make sure your in a single party
recording state.
- Beave
_______________________________________________
iWar mailing list
http://bundy.vistech.net/mailman/listinfo/iwar
i***@public.gmane.org
2009-03-26 19:39:59 UTC
Permalink
Post by i***@public.gmane.org
any reason why people aren't using a sip client ?
IAX2 is easier to deal with, that's probably the main reason.
It's a much cleaner protocol. However, I started working on a SIP
dialer based of PJSIP for Warvox and iWar (with the same capabilities
or writing raw files). I just need time to sit down and complete it.

- Beave
i***@public.gmane.org
2009-04-07 05:24:49 UTC
Permalink
Post by i***@public.gmane.org
It's also highly extendable to the metasploit platform, so that you
can exploit terminal vulnerabilities such as the old
solaris /bin/login overflow.
It doesn't actually extend to the Metasploit platform (yet), they're two
separate projects. I was implementing a wardialer in Metasploit
(modules/auxiliary/scanner/telephony/wardial.rb) and a Telephony library
to allow using a modem dial-up connection as a transport for exploits,
and when I pinged HD for some assistance with a few things he went nuts
on the whole wardialing idea for about a month and WarVox is the result
(:

So yes, you can wardial with either WarVox or Metasploit, but they're
not yet interoperable. WarVox can take advantage of VoIP directly to
dial multiple numbers at the same time and can do more extensive
analysis unrelated to detecting carriers. The MSF Wardialer operates
much like iWar in that it needs an actual serial modem to detect/connect
to carriers, which of course you can connect to a VoIP ATA if you don't
have a landline. You can then use detected carriers to launch exploits
at from MSF using the MSF Telephony library that I added which provides
the software interface to the serial modem and the code to glue that
into the exploitation system, assuming you write said exploits yourself
(currently there's only a test exploit that just dials up to the number
and echos the banner info IIRC).

Anyhow, everything I've mentioned related to Metasploit is currently
available in the Metasploit SVN development tree, so feel free to play
with it (:
--
I)ruid, C²ISSP
druid-Gj+Nkfc0CKwdnm+***@public.gmane.org
http://druid.caughq.org
i***@public.gmane.org
2009-04-07 13:03:30 UTC
Permalink
Post by i***@public.gmane.org
Post by i***@public.gmane.org
It's also highly extendable to the metasploit platform, so that you
can exploit terminal vulnerabilities such as the old
solaris /bin/login overflow.
It doesn't actually extend to the Metasploit platform (yet)
extend-able. ;-)

i***@public.gmane.org
2009-03-26 14:05:37 UTC
Permalink
Post by i***@public.gmane.org
diff -ruN /tmp/iwar-0.08-CVS-12292008/iwar-log.c
iwar-0.08-CVS-12292008/iwar-log.c
--- /tmp/iwar-0.08-CVS-12292008/iwar-log.c 2008-11-21
06:57:47.000000000 +0000
+++ iwar-0.08-CVS-12292008/iwar-log.c 2009-03-26 11:25:36.000000000 +0000
@@ -29,7 +29,7 @@
#endif
#ifdef HAVE_LIBPQ
-#include <libpq-fe.h>
+#include <postgresql/libpq-fe.h>
PGconn *psql;
PGresult *result;
#endif
Maybe the check in the configure script needs updating too.
Thanks and keep up the good work.
Thanks. I'll update the CVS head ASAP.

- Beave
Loading...