Sunday, December 5, 2010

Wireshark

AppName : Wireshark
AppType  : Traffic Packet Analyzer (a.k.a. Sniffer) 
Homepage: http://www.wireshark.org/download.html
Portable Available: Yes

WARNING: This tool could be use for bad intentions. This post is merely to educate the audience. I do not encourage anyone to mess with other's people privacy.

Background
No one in the internet is safe, and we all must be aware of that. We hear every now and there that someone, someplace gets hack. This post, besides explaining the details and the use of the software, it might get a glimpse to you of how that happens.

First, let's get to the basic: how information is being transfered from your PC to facebook? In a nutshell, it's exactly the same as the U.S. Postal Service, you take the stuff, put it in a box, place a label on it, and the service will take it to the destination. Your PC prepare what is called a 'packet', put the chunks of data in that packet and tells the internet, hey! I have a packet for facebook, please deliver it to him, and the magic happens!

Well, Wireshark do what? By Wikipedia definition, "Wireshark is a free and open-source packet analyzer". So imagine there is a guy in the postal service that opens the box you sent, look through the things inside and put them back. This program basically do the same.

The catch? Well, first most of the data sent through the internet is in a form where only the sender and the receiver can understand and second, you need to be inside a network (like the one Starbuck has , Wi-Fi spots) to be able to work. 

User Interface


At first glance, you may get scare (I did) with  all the options the tool have, but we will keep it very simple here. Firs you want to do is to go Capture--> Interfaces. 

The page will display all active connections where the application can extract packets.

Before starting to 'analyze' the packets, you may want to apply options or filters to the interface, so we do not get all the data (messages like ARP, DNS, you can google it if you want to learn more). 


In the Options menu, I often choose the 'No ARP No DNS' filter, so I don't get those broadcast messages from the router.




Click on Start, which will get the application to start fetching data who is passing through the network.  You will see something similar like the following:



Data will begin to show up in the screen with tons of information. For instance, the selected packet, says it comes from 72.246.64.82 and arrives at 192.168.2.6 (remember, all 192.168. address are one inside your network). The info of the packet says it is a JPEG file, so someone is downloading a photo, but from where? Lets see, right click on the packet and select follow TCP Stream which will display the following window;


Well, seem that someone using a MAC accessed a facebook app and requested that download. Cool!


Filters!
Filters rocks! I was getting tired of see everything, but can apply simple notation like:
ip.addr == 192.168.2.4 and tcp.port == 80

Here I am saying, hey! I want just to hear messages to this address but only for request of 80 ( web request). After input of the filter, just click on Apply and you are on.


Advance Use
Once stopped, you can save the whole data into a plain file ( a .pcap) and use your own text editor to search in it. What can you found there? From URLs, source IP, provider Broadcast messages to conversations, user name, emails and passwords (for non encrypted pages). 
Someone claim that you can even see facebook passwords (check it out here!)


Do the exercise, export the file and see what you can found. 
Comment below.

Sunday, November 28, 2010

JRuler


AppName : JRuler
AppType  : Measurement Tool
Homepage: http://www.spadixbd.com/freetools/jruler.htm
Portable Available: Yes

Background
So ok, it's a ruler, seem so simply,so why in earth I'm going to use this thing? Trust me, I was like that until I started developing web applications, I use JRuler like in everything! I need to have the correct size of a <div>, I need to place an image but I dunno how big it needs to be, or do you need to crate a banner and dunno how much letters and how big is going to be needed to be? Well, this tool is what you need!


Usability
The ruler interface is a clean and simple one. You have a yellow-ish rectangle, which simulate a real ruler divided in whatever scale is selected. You can change it by right click on it and select between pixel, inches, Picas ( whatever that is) and centimeters. Depending of the position of your mouse, the numbers in the ruler will change dynamically update the exact location of the pointer, which is awesome. Also, you have a gray-ish slider, where you can make the ruler larger or smaller. Finally, you can rotate the ruler (flip it) by pressing the 'F' key. 




JRuler is a simple, small ( <500kb size) and and application that  does not need installation (unzip and ready to use). People who manage image, banners and web development will found this tool very useful!

Sunday, November 21, 2010

Notepad++

AppName : Notepad++
AppType  : Text Editor
Homepage: http://notepad-plus-plus.org/
Portable Available: Yes


Background
If you are still using Notepad for quick editing those source files, copying old methods into your new code or for a quick text replace, you are uber out-dated. Notepad++ will instantly upgrade your editing abilities of plain text files into other level.


Instantly after you open the application, you will notice a bunch of information and tools. I will highlight what I use in my day-by-day basis.

Tabs and Status Bar
Yes! I know! What made Firefox so famous.... TABS on a program, imagine you could have multiple document open without taking over of all your taskbar space. Having tabs will help you on doing a special search, the 'Find All...'located under the normal search option, I will talk about this a lil later. Also the tab have an visible indicator of whether or not the document is saved ( red mark for not saved). About status bar...I know, notepad has that but... you also get a nice little counter of length and total lines besides the normal cursor location.

Save a Copy
How many times you wish to save a backup, so if you screw up, you can go back, but , you don't have a straight forward way of doing it. Instead you have to edit the document, do a save as, and after save it, you need to close it and open the original one... Kinda tricky right? Well Notepad++ have a neat option under File called Save a Copy As which let you save a copy but continue working on the original one... that is SWEET!

Colors for your Language
The Language drop down menu is just amazing, amazing! You opened a .java file, but all you see is black and white? Go to Language and select JAVA... BOOOM!


Notepad++ will give color to the method names, variables.... the perfect text editor that fits to your needs. Sometimes the program just recognize the file and auto set it. Super cool!

Plugins->Compare
I use the built in diff of tortoise for my source control comparison (will have a separate analysis on that super tool also), but the compare tool in this app is just awesome. If you need to do a complex merge of source file and you want to be 200% source you are doing it right, you need to try this compare plugin.

Find what? Find All!
Ok find is a simple tool, yet a powerful one, all developers should know that at the moment of defining algorithms or simple using an editor to find something.  Check out the search window:


Check it out! Sexy, isn't it? There are various neat options yo choose, but when I am looking for something in multiple files, I aim for Find All in All Opened Documents. What does that do? Well, it performs neat magic trick which present a little report of all occurrences of what you are looking for and if you double click on the item, it will automatically transport you to that document's location.


Notepad++ is a simple yet powerful tool for text editor. If you are still using notepad, the upgrade is a must. If you are using another editor, I recommend you to try this one. Notepad++ is one of those tools that it never hurts to have it.