Skip to content

GitLab

Susceptibility of Instant Message Metadata to Traffic Analysis
Susceptibility of Instant Message Metadata to Traffic Analysis

Please review any and all PUBLIC repositories, groups and associate files. These allow anyone on the Internet to access without authentication. Repository and group owners are responsible for their content and permission settings. Go to your project(s), click on Settings > General and expand the "Visibility, project features, permissions" to change this setting.

Commit bddcc943 authored by Verkempinck, Jeana (PO1)'s avatar Verkempinck, Jeana (PO1)
Browse files
Options

Update Raw-Capture/2020-02-26/GA-20200226-keystroke.csv,... 

Update Raw-Capture/2020-02-26/GA-20200226-keystroke.csv, Raw-Capture/2020-02-26/GA-20200226-Log.txt, Raw-Capture/2020-02-26/GA-20200226-SessionKeys.log, Raw-Capture/2020-02-26/GB-20200226-keystroke.csv, Raw-Capture/2020-02-26/GB-20200226-Log.txt, Raw-Capture/2020-02-26/GB-20200226-SessionKeys.log, Raw-Capture/2020-02-26/GB-20200226-keymouseclick.csv, Raw-Capture/2020-02-26/GA-20200226-keymouseclick.csv, Raw-Capture/2020-02-26/GB-20200226.pcapng, Raw-Capture/2020-02-26/GA-20200226.pcapng, Raw-Capture/2020-02-26/GM-20200226.pcapng files
parent 0b4aaaa1
Expand all Hide whitespace changes
Inline Side-by-side
Showing with 1543 additions and 0 deletions
Raw-Capture/2020-02-26/GA-20200226-Log.txt 0 → 100644
View file @ bddcc943
==== Initiated Capture At 13:16:42.47 on the Wed 02/26/2020 ====
Initialized at 13:16:42.49 on the Wed 02/26/2020
Host Name: DESKTOP-UOQMGH6
OS Name: Microsoft Windows 10 Home
OS Version: 10.0.17763 N/A Build 17763
OS Manufacturer: Microsoft Corporation
OS Configuration: Standalone Workstation
OS Build Type: Multiprocessor Free
Registered Owner: BullockPC
Registered Organization:
Product ID: 00326-10000-00000-AA193
Original Install Date: 12/2/2019, 5:43:32 PM
System Boot Time: 2/24/2020, 12:53:25 PM
System Manufacturer: LENOVO
System Model: 20377
System Type: x64-based PC
Processor(s): 1 Processor(s) Installed.
[01]: AMD64 Family 22 Model 48 Stepping 1 AuthenticAMD ~2000 Mhz
BIOS Version: LENOVO 9FCN23WW, 10/3/2014
Windows Directory: C:\Windows
System Directory: C:\Windows\system32
Boot Device: \Device\HarddiskVolume1
System Locale: en-us;English (United States)
Input Locale: en-us;English (United States)
Time Zone: (UTC-08:00) Pacific Time (US & Canada)
Total Physical Memory: 7,099 MB
Available Physical Memory: 4,978 MB
Virtual Memory: Max Size: 8,251 MB
Virtual Memory: Available: 5,972 MB
Virtual Memory: In Use: 2,279 MB
Page File Location(s): C:\pagefile.sys
Domain: WORKGROUP
Logon Server: \\DESKTOP-UOQMGH6
Hotfix(s): 7 Hotfix(s) Installed.
[01]: KB4534131
[02]: KB4465065
[03]: KB4486153
[04]: KB4516115
[05]: KB4523204
[06]: KB4537759
[07]: KB4532691
Network Card(s): 2 NIC(s) Installed.
[01]: Qualcomm Atheros AR956x Wireless Network Adapter
Connection Name: Wi-Fi
Status: Hardware not present
[02]: Realtek PCIe GBE Family Controller
Connection Name: Ethernet
DHCP Enabled: No
IP address(es)
[01]: 207.140.106.29
[02]: fe80::315b:7945:b5bb:43ee
Hyper-V Requirements: VM Monitor Mode Extensions: Yes
Virtualization Enabled In Firmware: Yes
Second Level Address Translation: Yes
Data Execution Prevention Available: Yes
==== Initiated IP-Config At 13:16:47.55 on the Wed 02/26/2020 ====
Active Connections
Proto Local Address Foreign Address State
TCP 0.0.0.0:135 DESKTOP-UOQMGH6:0 LISTENING
TCP 0.0.0.0:445 DESKTOP-UOQMGH6:0 LISTENING
TCP 0.0.0.0:5040 DESKTOP-UOQMGH6:0 LISTENING
TCP 0.0.0.0:5357 DESKTOP-UOQMGH6:0 LISTENING
TCP 0.0.0.0:8732 DESKTOP-UOQMGH6:0 LISTENING
TCP 0.0.0.0:49664 DESKTOP-UOQMGH6:0 LISTENING
TCP 0.0.0.0:49665 DESKTOP-UOQMGH6:0 LISTENING
TCP 0.0.0.0:49666 DESKTOP-UOQMGH6:0 LISTENING
TCP 0.0.0.0:49669 DESKTOP-UOQMGH6:0 LISTENING
TCP 0.0.0.0:49670 DESKTOP-UOQMGH6:0 LISTENING
TCP 0.0.0.0:49671 DESKTOP-UOQMGH6:0 LISTENING
TCP 207.140.106.29:139 DESKTOP-UOQMGH6:0 LISTENING
TCP 207.140.106.29:51075 52.230.222.68:https ESTABLISHED
TCP 207.140.106.29:51162 104.16.249.249:https TIME_WAIT
TCP 207.140.106.29:51171 server-13-35-121-115:https TIME_WAIT
==== Initiated Set SSL Key Log At 13:18:16.38 on the Wed 02/26/2020 ====
Set SSLKEYLOGFILE at 13:18:16.79
Trace configuration:
-------------------------------------------------------------------
Status: Running
Trace File: GA-20200226.etl
Append: Off
Circular: On
Max Size: 250 MB
Report: Off
Trace started at: 13:18:21.78
Ping ran for self synchronization. TTL set at 3.
Pinging 207.140.106.1 with 32 bytes of data:
Reply from 207.140.106.1: bytes=32 time=1ms TTL=255
Reply from 207.140.106.1: bytes=32 time=1ms TTL=255
Reply from 207.140.106.1: bytes=32 time=1ms TTL=255
Ping statistics for 207.140.106.1:
Packets: Sent = 3, Received = 3, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 1ms, Maximum = 1ms, Average = 1ms
Browers started for "https://hangouts.google.com/".
Keylogger started at: 13:18:24.70
Reverted SSL Keylog variable at 13:25:37.21
==== Initiated netsh merge At 13:25:37.32 on the Wed 02/26/2020 ====
Finished Merge at 13:27:53.93
==== Initiated Exiting At 13:30:24.10 on the Wed 02/26/2020 ====
Raw-Capture/2020-02-26/GA-20200226-SessionKeys.log 0 → 100644
View file @ bddcc943
This diff is collapsed.
Raw-Capture/2020-02-26/GA-20200226-keymouseclick.csv 0 → 100644
View file @ bddcc943
This diff is collapsed.
Raw-Capture/2020-02-26/GA-20200226-keystroke.csv 0 → 100644
View file @ bddcc943
This diff is collapsed.
Raw-Capture/2020-02-26/GB-20200226-Log.txt 0 → 100644
View file @ bddcc943
==== Initiated Capture At 13:16:40.36 on the Wed 02/26/2020 ====
Initialized at 13:16:40.39 on the Wed 02/26/2020
Host Name: BULLOCK-PC
OS Name: Microsoft Windows 10 Pro
OS Version: 10.0.17763 N/A Build 17763
OS Manufacturer: Microsoft Corporation
OS Configuration: Standalone Workstation
OS Build Type: Multiprocessor Free
Registered Owner: BullockPC
Registered Organization:
Product ID: 00330-81470-29136-AA581
Original Install Date: 12/3/2019, 12:37:23 PM
System Boot Time: 2/24/2020, 5:41:55 PM
System Manufacturer: TOSHIBA
System Model: Satellite A215
System Type: x64-based PC
Processor(s): 1 Processor(s) Installed.
[01]: AMD64 Family 15 Model 104 Stepping 1 AuthenticAMD ~1800 Mhz
BIOS Version: Phoenix Technologies LTD 2.00 , 1/25/2010
Windows Directory: C:\Windows
System Directory: C:\Windows\system32
Boot Device: \Device\HarddiskVolume1
System Locale: en-us;English (United States)
Input Locale: en-us;English (United States)
Time Zone: (UTC-08:00) Pacific Time (US & Canada)
Total Physical Memory: 1,918 MB
Available Physical Memory: 850 MB
Virtual Memory: Max Size: 2,686 MB
Virtual Memory: Available: 1,309 MB
Virtual Memory: In Use: 1,377 MB
Page File Location(s): C:\pagefile.sys
Domain: WORKGROUP
Logon Server: \\BULLOCK-PC
Hotfix(s): 7 Hotfix(s) Installed.
[01]: KB4534131
[02]: KB4465065
[03]: KB4486153
[04]: KB4516115
[05]: KB4523204
[06]: KB4537759
[07]: KB4532691
Network Card(s): 2 NIC(s) Installed.
[01]: Realtek PCIe FE Family Controller
Connection Name: Ethernet
DHCP Enabled: No
IP address(es)
[01]: 207.140.106.30
[02]: fe80::2412:b02c:f38:9608
[02]: Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter
Connection Name: Wi-Fi
Status: Hardware not present
Hyper-V Requirements: VM Monitor Mode Extensions: Yes
Virtualization Enabled In Firmware: Yes
Second Level Address Translation: No
Data Execution Prevention Available: Yes
==== Initiated IP-Config At 13:16:50.25 on the Wed 02/26/2020 ====
Active Connections
Proto Local Address Foreign Address State
TCP 0.0.0.0:135 Bullock-PC:0 LISTENING
TCP 0.0.0.0:445 Bullock-PC:0 LISTENING
TCP 0.0.0.0:5040 Bullock-PC:0 LISTENING
TCP 0.0.0.0:5357 Bullock-PC:0 LISTENING
TCP 0.0.0.0:49664 Bullock-PC:0 LISTENING
TCP 0.0.0.0:49665 Bullock-PC:0 LISTENING
TCP 0.0.0.0:49666 Bullock-PC:0 LISTENING
TCP 0.0.0.0:49667 Bullock-PC:0 LISTENING
TCP 0.0.0.0:49668 Bullock-PC:0 LISTENING
TCP 0.0.0.0:49669 Bullock-PC:0 LISTENING
TCP 207.140.106.30:139 Bullock-PC:0 LISTENING
TCP 207.140.106.30:50104 52.242.211.89:https ESTABLISHED
TCP 207.140.106.30:50112 72.21.91.29:http CLOSE_WAIT
==== Initiated Set SSL Key Log At 13:18:16.74 on the Wed 02/26/2020 ====
Set SSLKEYLOGFILE at 13:18:17.45
Trace configuration:
-------------------------------------------------------------------
Status: Running
Trace File: GB-20200226.etl
Append: Off
Circular: On
Max Size: 250 MB
Report: Off
Trace started at: 13:18:18.72
Ping ran for self synchronization. TTL set at 3.
Pinging 207.140.106.1 with 32 bytes of data:
Reply from 207.140.106.1: bytes=32 time=1ms TTL=255
Reply from 207.140.106.1: bytes=32 time=1ms TTL=255
Reply from 207.140.106.1: bytes=32 time=1ms TTL=255
Ping statistics for 207.140.106.1:
Packets: Sent = 3, Received = 3, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 1ms, Maximum = 1ms, Average = 1ms
Browers started for "https://hangouts.google.com/".
Keylogger started at: 13:18:21.63
Reverted SSL Keylog variable at 13:25:49.29
==== Initiated netsh merge At 13:25:49.50 on the Wed 02/26/2020 ====
Finished Merge at 13:29:59.55
==== Initiated Exiting At 13:30:04.66 on the Wed 02/26/2020 ====
Raw-Capture/2020-02-26/GB-20200226-SessionKeys.log 0 → 100644
View file @ bddcc943
This diff is collapsed.
Raw-Capture/2020-02-26/GB-20200226-keymouseclick.csv 0 → 100644
View file @ bddcc943
This source diff could not be displayed because it is too large. You can view the blob instead.
Raw-Capture/2020-02-26/GB-20200226-keystroke.csv 0 → 100644
View file @ bddcc943
This diff is collapsed.
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment