HOWTO : Sandboxing Firefox on Mac OS X Yosemite (10.10.1)

Step 1 :

Go to the Apple Apps Store to install the current version of XCode if you do not have it installed.

Step 2 :

Install Homebrew if you do not have it installed.

sudo ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"

To test the install if it is success or not :

brew doctor

Step 3 :

Install git if you do not have it installed.

brew install git

Step 4 :

cd /Users/Shared/

sudo git clone https://github.com/pansen/macos-sandbox-profiles.git

Step 5 :

cd /Applications/Firefox.app/Contents/MacOS/
sudo mv firefox-bin firefox-bin.real
sudo ln -sf /Users/Shared/macos-sandbox-profiles/bin/firefox-bin .

Step 6 :

Quit the Firefox if it is still running (not just close the browser) and then restart it.

That's all! See you.

HOWTO : ArpON on Mac OSX Yosemite (10.10.1)

ArpON (ARP handler inspection) is a portable handler daemon that make ARP protocol secure in order to avoid the Man In The Middle (MITM) attack through ARP Spoofing, ARP Cache Poisoning or ARP Poison Routing (APR) attacks. It blocks also the derived attacks by it, which Sniffing, Hijacking, Injection, Filtering & co attacks for more complex derived attacks, as: DNS Spoofing, WEB Spoofing, Session Hijacking and SSL/TLS Hijacking & co attacks.

Step 1 :

Go to the Apple Apps Store to install the current version of XCode if you do not have it installed.

Step 2 :

Install Homebrew if you do not have it installed.

sudo ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"

Step 3 :

To test the install if it is success or not :

brew doctor

Step 4 :

brew install git
brew install cmake
brew install libdnet
brew install libnet

brew link libdnet

Step 5 :

cd ~
sudo git clone git://git.code.sf.net/p/arpon/code arpon

sudo -sH
cd arpon
mkdir build
cd build
cmake -DCMAKE_INSTALL_PREFIX=/usr ..
make
make install

exit

Step 6 :

cd ~
nano arpon_startup

/usr/sbin/arpon -i en0 -D -q

chmod +x arpon_startup

Step 7 :

sudo nano /System/Library/LaunchDaemons/org.arpon.startup.plist



*** Please note that where "samiux" is my username, change to your username accordingly.

Step 8 :

Reboot your Mac.

REFERENCE

ArpON - ARP Handler Inspection
Installing Homebrew on OS X Yosemite 10.10, Package Manager for Unix Apps
Protect you from being ARP spoofing

That's all! See you.

Bug Fix : Bugtraq 2 XFce 64-bit with Paralles Tools on Mac OS X 10.8.4

You need to do the following at the guest (Bugtraq 2 XFce 64-bit) on Paralles 8 before installing the Paralles Tools.

sudo ln -s /usr/lib/insserv/insserv /sbin/insserv

Otherwise, the Paralles Tools cannot be installed properly.

That's all! See you.

HOWTO : Burp Suite with Tor on Mac OS X 10.8.4

Step 1 :

Go to the Burp Suite official site to download the free edition.

Then save it to Documents folder.

Step 2 :

Open a terminal.

nano burpsuite_free.sh

java -jar /Users/samiux/Documents/burpsuite_free_v1.5.jar

Replace "samiux" with your user name.

Step 3 :

Go to Java official site to download Java JRE

Step 4 :

Go to Tor official website to download and install "Tor Browser Bundle for 64-Bit Mac".

Step 5 :

Go to Privoxy official site to download Privoxy 3.0.21 64 bit.pkg and install.

Step 6 :

Open a terminal.

nano /usr/local/etc/privoxy/config

Append the following lines :

forward-socks5 / 127.0.0.1:9150 .
forward 192.168.*.*/ .

Restart the Mac.

Step 7 :

Open a terminal and go to the Documents folder.

./burpsuite_free.sh

Options >> Upstream Proxy Servers >> Add >> Proxy host >> 127.0.0.1
Options >> Upstream Proxy Servers >> Add >> Proxy port >> 8118

Step 8 :

Start "TorBrowser_en-US". The TorBrowser will launch.

ToBrowser >> Preferences >> Advanced >> Connection >> Settings

Select "Manual proxy configuration:".

HTTP Proxy >> 127.0.0.1 >> Port >> 8080
SOCKS Host >> 127.0.0.1 >> Port >> 9150

Step 9 :

Make sure Burp Suite is behind the Tor my visiting cmyip.com

Remarks :

To install in Ubuntu 12.04 LTS is similar. However, the port 9150 will be port 9050.

That's all! See you.

HOWTO : LimeChat with Tor on Mac OS X 10.8.4

UPDATE on Jan 4, 2015 : Change the Tor addresses


Step 1 :

Download and install the LimeChat from Apple Apps Store on you Mac.

Step 2 :

LimeChat >> Preferences >> Interface >> Layout of the main window >> 3 Columns
LimeChat >> Server >> Server Properties >> General >> Network name -- TorifiedFreenode
LimeChat >> Server >> Server Properties >> General >> Server -- 10.40.40.40
LimeChat >> Server >> Server Properties >> General >> Port -- 6667
LimeChat >> Server >> Server Properties >> General >> Nickserv Pasword -- [your SASL password]
LimeChat >> Server >> Server Properties >> General >> Use SASL >> selected

LimeChat >> Server >> Server Properties >> Details >> Proxy >> SOCKS 5 proxy
LimeChat >> Server >> Server Properties >> Details >> Homename >> 127.0.0.1
LimeChat >> Server >> Server Properties >> Details >> Port >> 9150

LimeChat >> Server >> Server Properties >> On Login >> #infosec-ninjas [add some channels]

Step 3 :

Go to Tor official website to download and install "Tor Browser Bundle for 64-Bit Mac".

Step 4 :

Run "TorBrowser_en-US".

Vidalia Control Panel >> Settings >> Advanced >> Edit current torrc

Append the following :

MapAddress 10.40.40.40 p4fsi4ockecnea7l.onion

Since Tor servers for TOR has been updated. The previous .onion address is no longer working. Please use one of the following addresses :

frxleqtzgvwkv7oz.onion
p567hbjdstqvg7xw.onion
2hktdmgt6bg2hjuc.onion
l4wvhvf666nifnpg.onion

Select it and then "Apply selection only" >> OK

Sometimes, the address will be too busy for login, so, you need to toggle between the addresses to see if it can login or not.

Or, you can append all the above addresses and do not select "Apply selection only". (However, it is not tested.)

Step 5 :

Close LimeChat and Stop Tor as well as close Vidalia Control Panel.

Then restart Vidalia Control Panel and LimeChat. TorBrowser will start up too.

That's all! See you.