Hello community
Tak-Pazaak has finished the engine, and wish to work the bugs out, so we are in need of a few people to play the game (text mode) and report any bugs they find in order to work them out before implementing it into the android app. Then we will need a few testers whom we will need to test the android app when it’s finished pre-release. Testers will receive a free version of the game on release
Tak-Pazaak is in need of alpha-beta testers!
Wrote an Android Subnetting Calculator
Decided I needed some more practice with android development before trying to get too deep into Tak-Pazaak, therefore coded a little Subnetting Calculator using my open source’d Subnetting API.
It came out pretty nice
I’m going to push it to the Market tomorrow, along with open sourcing it on Launchpad.
Brute Force Without a Dictionary Using John The Ripper
If you’re like me, and playing with, using professionally, or writing list requiring brute-forcing software. You don’t want to waste the hard drive space for massive all-encompassing password lists which have a limited chance of success. Luckily you don’t have to do that at all leveraging some john the ripper and (l/u)nix functionality.
Aircrack-ng:
When using Aircrack-ng to try and figure out the key for say WPA2 encryption, you can pipe john generated password lists into aircrack on the fly in the following manner.
#john –incremental=all –stdout | aircrack-ng -a 2 -e WirelessNetwork WirelessNetwork-01.cap -w -
There is still a bit of an issue here however. if you have to shutdown your machine and you haven’t yet retrieved the key you don’t want to have to re-run this command and restart john’s list generation, you want to pick up where you left off (I assume anyway).
Luckily for us jtr has the ability to store and resume sessions, so some tweaking will allow you to pick at the encryption at your leisure.
#john –incremental=all –session=WirelessBrute –stdout | aircrack-ng -a 2 -e WirelessNetwork WirelessNetwork-01.cap -w -
This will store your password generation index within a jtr session file called WirelessBrute.rec, to resume the brute-force at any time you can easily do so with the following command.
#john –restore=WirelessBrute | aircrack-ng -a 2 -e WirelessNetwork WirelessNetwork-01.cap -w -
Easy enough
Medusa:
When using a utility like Medusa you need to get a little trickier, utilising a bash utility called xargs.
We will still be leveraging jtr’s ability to store sessions, however we will not quite be directly piping john’s output into medusa, we will pipe it into xargs which will execute the command following it for each line of stdin. We can use this to brute-force utilising medusa without a stored dictionary.
In reality you most likely will not be trying to brute-force a username/password based authentication without one or the other, so you will probably have either a list, or singleton value for one or the other (moth likely username).
To preform a brute-force attack utilising medusa and jtr, you can use something similar to the following command.
#john –incremental=all –session=RouterBrute –stdout | xargs -L 1 medusa -h 192.168.1.1 -u admin -M web-form -p
to restore:
#john –restore=RouterBrute | xargs -L 1 medusa -h 192.168.1.1 -u admin -M web-form -p
The -L 1 flag passed to xargs means execute for every 1 line of input.
This does however slow down the brute-force, having to launch/quit medusa every attempt, also it means it will not stop when an account has been found, so it would help to pipe the output into a separate file in this way:
#john –restore=RouterBrute | xargs -L 1 medusa -h 192.168.1.1 -u admin -M web-form -p >> check.txt
then later run a grep on the output file, or write a script to do a periodic grep and kill the process / alert you when it finds the string ‘FOUND’ in the medusa output
This method of course can be implemented within the Medusa-GUI utilising it’s ability to edit the command you before execution, make sure you have JTR installed, launch the medusa-gui, and append the jtr command / pipes, as well as the output appendage to a separate file, and go, the medusa-gui may add a toggle button for this in the future.
Links:
Medusa
Medusa-GUI
John The Ripper
Aircrack-ng
Tak-Pazzak Menu Update
The code for the menu screen is complete, not so much the graphics >.>
Gaz is still working on the graphics and I keep changing it up on her, in any case, this will be the menu design, code is final, graphics are not.
I’m going to write the pazzack engine next, an API for playing pazzack
It will include an AI with three levels of difficulty, this will be released open source on launchpad
It should be able to have some other cool implementations, pazzack irc bot?
Tak-Pazzack Momentum Increasing!
Hey Guys,
Sorry to keep teasing you with this project
My goal is to have it completely done before I head off to college at Texas Tech in Lubbock late August, A menu screan has been prototyped, and were playing with the layout and graphics. LibGDX is a very cool engine, and will be the base for Tak-Pazzack as it will let us quickly develop, test, and debug on the pc then just move it over to the android platform, its also making this project a lot more fun to code.
Bigmoneyhat (the other guy
) has really been digging into it, and what is also cool about all of this, Tak-Pazzack will be released on all platforms (minus the iphone ;P) even though the resolution will be a little weird on the desktop hah.
I’ll post screenshots of the menu screen when the code is pumped out and the design is final, and I’ll release the Pazzack engine Open Source and post the javadoc on wiki.taksmind.org.
Thanks for the support guys
honestly I would have given this project up due to lack of time if it wasn’t for it, now its probably going to be the last big project the Hippo Dev Team ever releases.
Plans For Tak-Pazzack
I have been looking very hard at the Libgdx Engine, its aim being a cross-platform Java 2d game engine. Meaning with the engine I could write a desktop version of the game, then change a few lines of code and release it on the android platform, which will save on both development, and debugging time.
I’m going to do a little more research and figure out if it’s right for the project.
Plans for the Medusa-GUI – and a PPA for Hippo-Software
The Medusa-GUI currently has a universal installer hacked together with an ant script, emulating the way that make files work.
The Hippos Development Team I believe is looking at the project again to see where the installation methods can be optimized, adding the ability for the ant script to generate a debian package, and setting up a ppa which will include software such as the Medusa-GUI, the Subnetting Application, JHippo(why not?), The Subnetting Lib and the TextGameEngine(possibly, after some major restructures.)
We don’t mean to isolate users of non-Ubuntu based operating systems, therefore will maintain the current ant installation, and uninstillation functionality, however have already moved it from placing the files in /usr/* to /usr/local/* to comply with file system standards, and encourage the users of other platforms to package the Medusa-GUI for their OS of choice after the next and most stable release which may or may not happen next week.
We also encourage the community to submit bugs, feature requests, and ask us questions on The Medusa-GUI Launchpad Page This will help us find the motivation to continue adding functionality to the project, and improve its usability, etc.




