• Recent
    • Unsolved
    • Tags
    • Popular
    • Users
    • Groups
    • Search
    • Register
    • Login

    [Solved] FOGProject Tecnical Info

    Scheduled Pinned Locked Moved Solved
    FOG Problems
    2
    7
    589
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      besa
      last edited by besa

      Hey guys.
      I am here but its not because of problems that FOG cause to me.
      I am a Cyber Security Student and I am doing an “auditory” in 1 small company, and they use fog to update their images.

      What I wanted to know, how FOGCrypto works.
      I already searched FOGCrypto on google & github but I only find the executable, not the Source Code.

      1 Reply Last reply Reply Quote 0
      • george1421G
        george1421 Moderator
        last edited by

        FOGCrypto is and old program used to encrypt password so they could be saved in fog. Not really of value for a cyber security student to write a paper on.

        On a whole fog is not very secure because it uses many older protocols like NFS v3 and http (vs https). There is still some very old code in FOG that was written when security wasn’t really a topic. In the context of cyber security there are many reasons to not use FOG in vulnerable environments (if you were looking for a different entry point to discuss). Understand I’m not saying anything bad about FOG, but it was originally written in different time and space.

        The developers are slowly working on FOG 2.0 code base that was built from the beginning with cyber security in mind. That release is still a while off at the moment from being realized. But the baseline stuff that has been done so far looks really great.

        Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

        1 Reply Last reply Reply Quote 2
        • B
          besa
          last edited by

          Its not for a paper, but for recommendation. My brothers supervisor wanted to take a look to the {Company}… and they use old fog system[1.2.0].
          If I “grab” the system, my work finish.
          So, Active Directory uses Admin credentials(1 point for me), so if I get the pass, I am in.
          I though that FOGCrypt uses FOG unique identification for HASH, but I couldn’t find his source code to “reverse”(brute force dictionary).

          george1421G 1 Reply Last reply Reply Quote 0
          • B
            besa
            last edited by

            Oky, I get it. The password is hashed with passphrase that is located in config.ini (dahh) …
            Thanks

            1 Reply Last reply Reply Quote 0
            • george1421G
              george1421 Moderator @besa
              last edited by

              @besa said in [Solved] FOGProject Tecnical Info:

              Its not for a paper, but for recommendation. My brothers supervisor wanted to take a look to the {Company}… and they use old fog system[1.2.0].

              Just be aware that FOG 1.2.0 is really old. It doesn’t support win10, uefi, gpt disks, and current hardware. If you are imaging older stuff then it will work OK for you. But if you are going to need anything I mentioned, you will need a more current release of FOG. FOG versions newer don’t need fogcrypt since its all built in now.

              Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!

              B 1 Reply Last reply Reply Quote 1
              • B
                besa @george1421
                last edited by

                @george1421 Well, they still use 1.2.0… and they are Using Win 7 x86 Enterprise as a client and ubuntu 14 as a server…
                And yes, I tried 1.5.4 … this is why I wanted some info on how to reverse the AD Pass.

                I tried to install one fog image on VMWare but no success… the image on 40-50% failed…

                B 1 Reply Last reply Reply Quote 0
                • B
                  besa @besa
                  last edited by besa

                  @george1421
                  Finally, I did the decrypter 😛
                  Thanks for the code!

                  1 Reply Last reply Reply Quote 1
                  • 1 / 1
                  • First post
                    Last post

                  208

                  Online

                  12.0k

                  Users

                  17.3k

                  Topics

                  155.2k

                  Posts
                  Copyright © 2012-2024 FOG Project