Pad snapshot

DISCLAMER:
Do not attempt to use this package (EarthQuakeInABox) against targets you do not own or unless you have expressed, written permission to do so from the application's  owner. This package is provided as a service to citizens looking to better communicate with other citizens privately as well as to better understand how computer systems work (and to prevent their servers from being shut down) and is not intended to be used by malicious persons for malicious purposes. It is for infomational purpose only and should be seen as such.
 Project being hijacked by amisan  (lol)
INFO: will be making it more portable,
How:
It will download everything, first it gets tor then uses tor to get everything else.
in the end it the care packe will just be a single exe
Objective:  It is to help ease anons into our decentralized i2p communication network (its a  darknet) , getting them to our secure IRC channel (helps to reduce V&) . Also we want to encourage anons to use TorChat (A decentralised Instant Messenger), as well as learn how to use ssh over tor (to access old school BBS networks anonymously. or help admin linux server as a anonymous volunteer). Also part of its aim is to help educate Anonymous via ebooks, as well as provide a starting platform for acting as 'anon' (via basic tools, pictures to manipulate and use)
Also on finalizing of the package, we aim to disseminate this package as a zipfile hidden within an image. Its just cool that way.
tl;dr: Secure Communication Care Package for Anons (hidden in an image)
TODO: https://f3ew3p7s6lbftqm5.tor2web.org/ - add this onion fileserver (just replace tor2web with .onion in tor)
Licence: GPLv3 Free to use and sources must always be avaiable, even by modders. Also free for use by anonymous.
New AnonSauce Project
PortableAnon Page: http://nero.secondsource.info/page.php?14
PortableAnon Forum: http://nero.seconhttp://nero.secondsource.info/page.php?14dsource.info/p/forum/forum_viewforum.php?18
Wiki: http://sourceforge.net/apps/mediawiki/cherimoya/index.php?title=Earthquake_in_a_Box
Current EarthQuake in a box:
    build: http://www.mediafire.com/?9gp64ktud06oeg1 V1.0 EQINB
PNG
    Mirror: http://nero.secondsource.info/news.php?item.34.9
Constructor/sourcecode:
    constructor V1.0 http://www.mediafire.com/?j716v6yzff4ykrv
File Library  of most versions: http://nero.secondsource.info/page.php?14
Earthquake in a Box as a jpg image 0.0.5: (just rename to a ZIP and extract) http://sourceforge.net/projects/cherimoya/files/earthquake.png/dwnload (old version v0.0.5
==== Programlist ==== Structure of current earthquake in a box V0.1 (feel free to suggest)
-readme
+ Launchscripts (To easily tell users what to do)
+ About and Other info (about projects and other stuff)
+ DOC ( Useful readings)
+ Communcations
    = VoI2P (in development)
    = i2p
    = Torchat
    = IRC
    = Browser
    = RSS notifier
    = i2p apps
        = i2pmessenger
        = imule
        = i2psnark
   = Screamer Radio (with preset to radiopayback and 2600) for v0.1.1
= pentest (used to attact the usual anons to downloading this stuff)
    = HOIC
    = LOIC
    = WhoIs
    = UDP Unicorn
    = LOIC Hive
= defence
    = MacMakeup
    = MAC Address Changer (to be added) (site link plz?)
    http://www.voidnish.com/articles/ShowArticle.aspx?code=MacIdChanger thx will add soon on next ver
    = truecrypt
    = HashGen
    = ramdisk
= network
    = putty
    = winscp
    = Lan Messenger
= propaganda
    = TTS reader
    = Resource
========
SUGGEST EBOOKS for DOC folder (provide links)
Find the old 888chan library of ebooks, maybe a torrent somewhere. Where? I have no clue where it exist
========
Portable Anonymous Platform
Objective, create a 'care package' that is nifty enough to be placed in a usb for windows based system,(similar to, say, PortableApps.com) for those not willing to use a Linux Distro like Cherimoya Linux or Backtrack.

    Could this not be a Live distro on a USB with custom modules? I could make that, but it's going to take up a lot of CPU, why not use a proper Cherimoya live media then We can already do live distro, but live distro (Virtualbox) takes up valuable CPU cycles... if you want to attack, might as well use it as a proper OS

    Oh and we chose USB format so we can be compact. (not all anons want to run a full blown distro) what do you mean? Cherimoya installs to USB. But its still pretty big . ah, I get it. Lets say your flash drive gets reposessed by someone who is computer illiterate, and they saw you doing things you shouldn't have been. If they see the drive is almost completely full, and see a bunch of technical stuff, they are going to flip. On the flipside, if they see folders that have just .exe's, they could think the programs are just games. (personal experience) Might be a good idea to set all the folders to "hidden" then. Or make a "hidden" ext4 partition (well, hidden to windows). But we do need to make it easy to show those folders. Perhaps bury it in the prefferences or a command in terminal?


It will contain the usual fare of 'network stress tester', but it will also contain security apps to help protect anons. (TorChat, i2p, tor). On the subject of security or fellow anons, shouldn't there be some sort of security measure so that if an anon is careless and looses it or it is stolen by the feds you can't access it without a password or some other security procedure?
It shall also contain a 'starter kit' of anonymous related images and video (and voice synths) to assist in making propaganda(Size should be considered, perhaps distributed in lightalso without these kinds of files like the carepack.) Perhaps someone could upload some of the largest stuff to a website/FTP and link to it in some sort of file that contains lots of links.
It shall contain documentation (as well as links to other documentations, perhaps via magnets URL) for anons, expecially guides from AnonSec  (Similar to the document new anons read during #Opnewblood )
    Ah so in that note, we shall also link to our Live OS effort, for the anons who are brave enough. you make it sound like it'll destroy your computer, it won't. well, yeah, it needs a bit more development.
        Its a gateway drug more like
It will also have a Linux version, contained in a JPG picture, which uses bash scripts to get packages from repositories, or build them from source in the case of Arch.
The starter kit and documentation will be implemented in Cherimoya Linux, along with it's own packages.
What  will make us different compaired to others, is that we shall be using  'portable platform' programs so that its easier to browse though apps  included in the package.
Although such a care package gives very little defense, and relies on Windows, which may contain backdoors and trackers, it's important to have a way for the new to quickly get into and get accustomed to Anonymous. For real security, the open-source Cherimoya Linux is being made for Anonymous as a secure and prebuilt liveCD to be the ultimate care package.
Pros of a Windows care package

    easier for anons to get, and requires less teaching

    smaller in size

    portable on any Windows system

    easier to expand anon user base

    lower system requirements?

    --this isnt even true compared to Virtualbox, I guess (Lower as in easier, Windows provides access for all OEM computers)

    easy to securely wipe afterwards (tools like Eraser http://eraser.heidi.ie/)

    (feel free to add some) (This tool could run during shutdown of the portableanon enivronment: http://www.nirsoft.net/utils/clean_after_me.html)

Cons

    Using Windows can be extremely unsafe, no matter where or what you use.

    Microsoft  can, and at anytime access and disclose information about you,     including the content of your communications in order to comply with US law.

    (You can secure a windows box, lets not forget that)  Yeah, right.

    I mean unsafe from within. If you notice the stuff we're doing, adversaries can easily force Microsoft to add a backdoor to track users, and may already have.I know they were doing that with hacked versions of Windows with 7. They would pull registration info if you put in a bad key then refused to fix it and had put your name in. I admit, its not newfag friendly, but we cannot halt this thing because people arent watching their outbounds. We should put a warning then.

    Can be easily manipulated and redisturbed with malware. -> Distribution control is the way to combat this. Keep mirrors low, i think the idea of a sourceforge distribution isn't a bad one. Also if we keep our modifications and the source programs used, seperate, people can always remake it themselves. I agree with above. It's not like we are going to censor mods (unless they contain malware or are suspiciously insicure) so I think we should have all of the mods in a central location and asume that all others are trying to molest us.

    If  any single application in this package is malicious, your system is  fucked (with Linux there is MAC to protect yourself from your own applications, and segregation with a root account)

    preconfiguring apps is a pain in the ass

    There will always be stuff left (in the registry, for example) that shows it was used, unlike in a liveCD Cofstoring back to that point after use? Restore points are annonying, I think its just a case of optimising the package to wipe these registry values.

    you will never be able to use Aircrack, Slowloris, or pyLoris (Linux can) Aircrack has a windows version I believe Tell me how to use it on a driver with no injection support (which is most of all wireless drivers). It just barely works on Linux. You can get windows drivers for your atheros cards etc that support all the modes, but yes it is dependant on the rare drivers and there isn't much custom driver support for injection on a windows box.

Editions

    Earthquake in a Box - Windows archive + Linux bash scripts, embedded in a picture.

    Dangerous Rabbit - (Linux bash scripts for Arch and Debian embedded in a picture)

Developers:
todo -
iruel - Primary (more like the only) developer of Cherimoya GNU/Linux. Lives in the clouds of Bhavagara. Massive amounts of experience in the workings of Linux, although zero programming ability.
Existing Resources To include in such USB:
    One Portable Platform to host and organize this package:
        http://www.pegtop.net/start/
        or
        http://en.wikipedia.org/wiki/ASuite <- We chose this. As it has 'directory' structure, which allows us to better organize our programs, very important if we are putting alot of apps in
        or
        http://portableapps.com/ (hopefully we can also use the new platform that has a 'portable marketplace' its not out yet, but maybe soon)[[though more likely a few months away](PortableApps is mostly re-packged apps that are already portable.  Try to grab apps from PortableFreeware.com (marked stealth, if they don't write to registry) or TinyApps.org instead)

    Existing Carepackages (to consider extracting the useful bits from it):
        Earthquake in a Box/Dangerous Rabbit: http://sourceforge.net/apps/mediawiki/cherimoya/index.php?title=Dangerous_Rabbit
    Existing Programs we should consider:
        TorChat (prefilled buddylist so people can already reach some anons e.g. Torchat infoserv: 7oj5u53estwg2pvu (moved) - by amisan ) - DONE
        i2pmessenger - The developers of Torchat say that it will become unusable (maybe for good) the minute Tor upgrades to the newest version, which severely neglects hidden services. Having a second chat on a second network will relieve that problem. - DONE (how do you find people via this?)
        portable python <--- python could be slimmed down but that would make it less useful and remove many functionalities that are required by other applications
        LOIC - DONE
        Slowloris:
         Impossible on Windows <--- not explicitly, requires wincap or whatever it is called as well as perl
        RSS readers - presetted to anonnews, anonnewswire, anonsource, and others... -DONE sorta
        IRC presetted options to i2p IRC proxies, as well as various other ircs. - DONE
        (swithcing to irssi because it give the impression of more " |_33t - ness " ,
        will auto connect to either i2p default or maybe amisan's i2p ircd.
        Firefox addons http://sourceforge.net/apps/mediawiki/cherimoya/index.php?title=Firefox_Addons
        TrueCrypt ??? - Can try - DONE - cool :D
        KeePassPortable
        ***add in macchanger for windows
            -mac??(does simple change fast mac but need to restart the local connection for the  mac change) - Am using macmakeup
            macmakeup195d ??(does have a big list with ready branded macs from manufacturers) http://www.pendriveapps.com/mac-makeup-change-mac-address/
        Roboform??- DONE
        psst-II?? din't manage to run :(
        Putty - with optional settings or instructions for tor, or i2p - No tor or I2p preset, but DONE
        Voice synths http://download.cnet.com/Speech-Synthesizer/3000-2051_4-10386877.html - DONE
        Audacity - sound editor - No need... <--- maybe... but you could add it for audio effect adding
        Important to consider size. I think it is prudent to release a lite version without voice synth and audacity etc.
        Port checker? just to see what is open/closed or getting data passed thru it - I've had good experience with Angry IP Scanner. Gets messy with 64bit OSs though.
Packages from Cherimoya
Piratepad: http://www.anonpad.org/GFP8ffgWY
Wiki: https://sourceforge.net/apps/mediawiki/cherimoya/index.php?title=Main_Page
Cherimoya has included many useful packages, so a list of them is here:

    Full List of packages in Cherimoya: https://raw.github.com/treeofsephiroth/cherimoya-dvd/master/packages.i686

    Earthquake in a Box/Dangerous Rabbit: http://sourceforge.net/apps/mediawiki/cherimoya/index.php?title=Dangerous_Rabbit

    Torchat - DONE

    LOIC (in place of LOIQ) - Trying Hive LOIC and HOIC (HOIC needs source code code, not trustworthy without source)

    slowloris, pyloris (Impossible in Windows, requires difficult patch) <-- could add in automated installer

    XChat - Nettalk Done

    I2P - Done

    VoI2P is currently under development, will add alpha version when reached.

    Tor/Vidalia - Can already get tor browser bundle... so no need.

    Bitcoin - bad idea, as having it on usb promotes bad practices of money security (link to bitcoin.com though) ok

    metasploit -can't find portable version

    aircrack  http://www.aircrack-ng.org/

    macchanger - DONE

    Firefox addons http://sourceforge.net/apps/mediawiki/cherimoya/index.php?title=Firefox_Addons

    Adblock Plus[1]

    NoScript[2]

    BetterPrivacy[3]

    Ghostery[4]

    Beef Taco[5]

    HTTPS Everywhere[6]

    Torbutton (Alpha for Firefox 4.0)[7]

    MafiaaFire Redirector[8]

    User Agent Switcher[9] (or we could use RandomUserAgent, just a thought)

    Chatzilla[10]

    Greasemonkey[11]

    Stylish[12]

    Firebug [1.7.3] (along with FireCookie, FirePHP, FlashFirebug... am I missing any?)

Don't forget to use noScript. Also, some javascript heavy sites will grab your IP even through TOR.Have javascript and cookies turned off by default.
        A linux OS - We already made the OS, Cherimoya. Maybe we can link to it or provide some documentation or 'promotional' posters so people can be inclined to look for it. (adding it in will make it too big, this package is for newer anons)
        Bitcoin - just to promote its use... maybe also some documents about securing your wallet and protecting against hacks and scams.
    Existing Documentations:

    Plenty of apps to consider here: http://en.wikipedia.org/wiki/List_of_portable_software avoid putting in stuff people don't need. or would usally already have... or can easily obtain.
    and http://tinyapps.org/internet.html

Non-Existant Resources that needs to be created:
    Links to various anonymous related websites. (including eepsite and .onion hidden sites on tor and i2p)
    Links to forums (e.g. http://nero.secondsource.info/p/forum/forum.php )
    AnonAlert - To automatically inform masses of anons of important events. Like a pager system?(http://nero.secondsource.info/page.php?4 ) - Yea kinda
     AutoStarter -  To automagically start up various programs and scripts  (e.g. start i2p services first before opening the IRC to #anonops (http://nero.secondsource.info/p/forum/forum_viewtopic.php?27 ) )Should be able to be completed with a .bat file that runs programs in a specific order. - But we want to give people the option of what programs to autostart the first time.
    Latest portable i2p install. ( kinda like http://portable-i2p.blogspot.com/ ) -DONE
    Portable python - http://www.portablepython.com/
    Maybe a launch pad similar to U3? It would be useful to make a GUI. I could probably make something like that in Java/C++ sounds nice, we are using asuite, but custom ones are always cool.
    VoI2P, amisan's personal project (anonymous peer to peer voice chat, [High latency] )

    Propaganda poster and links to our Cherimoya Linux OS (make it noticeable)
    : http://nero.secondsource.info/page.php?7
    Piratepad: http://www.anonpad.org/GFP8sfgWY
    Wiki: https://sourceforge.net/apps/mediawiki/cherimoya/index.php?title=Main_Page
Latest Download:
http://www.mediafire.com/?ciy7cfabcq43q1w - V0.0.5 I2p and IRC includeed. Ready for general collaboration.
http://www.mediafire.com/?8z8nwmpn0ke421 - v0.0.1 Proof of viablity (Package Constructor) of making a 'transparent package' by using a batch script. (the script will act as our 'step by step' documentation of what we modified and created for the package. Discussions on http://nero.secondsource.info/p/forum/forum_viewtopic.php?77.last
Hash verification:
(MD5 checksum should be easy with python)
We should make a script that automatically 'verifies' a usbkey to make sure that its not tampered. (even better would be to make a script that can 'package' our usb. This will help in improving transparency) Would it be possible to link an encryption file to a server, and make it so the server changes the password every five minutes or so, and requires the password to be entered before viewing the encrypted files, and have the password be posted in a secure location, requiring user authentication? Else, requiring you to be connected to a certian network before allowing you to view the files? I know AT&T does something similar to this. They use SecureID keyfobs that have a set of randomly generated passcodes that are programmed into PC software as well as the SecureID keyfob, and it changes about once per minute. They use that to allow the employees to connect to their VPN they have.
Note: We should always make a step by step account of how we made this care package. So others can trust what we did, and also take over our effort if we lose interest. Which mean the instruction should be included in the package itself as well, +3
(Tails could be forked but we already have a working system, i think)
Can't we just use tails? (Well again, no, as we are aiming to cater to window newbies)
It's more than usablility and user-friendliness. Tails does not have the specific applications we need, such as I2P, LOIQ, pyLoris, and metasploit. Also, rebuilding TAILs using it's liveCD creator is absymally complex, and nearly impossible to replicate (which is the primary goal of Cherimoya). We may borrow some features from it, but Cherimoya and TAILS are not the same system. It is quality software, but it serves a different audience with a different goal.
Tails is a live CD or live USB that aims at preserving your privacy and anonymity.
TAILS is pretty good, distributed by TOR Projects: https://tails.boum.org/ Yea I got it, not bad. But as said above, it doesnt suit our purpose unfortunately. We need to import stuff from it, but we also need some experience...
Cherimoya GNU/Linux  is a live system that gives anons high anonymity (with I2P and Tor),  high security (using sandboxing and MAC) and server testing utilities  (such as LOIQ, pyLoris, metasploit, and aircrack). It is the ultimate care package for Anonymous.
LulzSec, should have 2 versions, White and grey,
 the plan forum people will get antsy with the grey tools added now are packaged.
It professes to be a truly installable system, while merging the features of TAILS, Polippix, and Backtrack.
Piratepad: http://www.anonpad.org/GFP8sfgWY
Wiki: https://sourceforge.net/apps/mediawiki/cherimoya/index.php?title=Main_Page
Embedding an archive in a JPG image , or perhaps a bmp
(a bunch of txt files with stuff like this would be great)
Windows:
http://www.online-tech-tips.com/computer-tips/hide-file-in-picture/
Open up My Computer.  In Windows XP or earlier click Tools > Folder  Options; in Vista or later click Organize > Folder and Search  Options.  Go to the View tab and find the option "Hide extensions for  known file types" and uncheck it.  Click OK to save the setting, you  should now see "merge_example.jpg", with the .jpg extension showing.
Now rename that file to merge_example.rar, and confirm that you  want to change the extension.  Now if you have WinRAR installed, you  should be able to open the file in WinRAR to reveal the hidden archive,  embedded right into a picture file!
Weird, huh!  And it's really quite simple to replicate.  Here are some simple instructions:
Create a folder and fill it with the files that you want to put in your  archive.  Select all the files and add them to a new ZIP or RAR archive.   You should now have a folder with a ZIP or RAR archive along with all  the files that are inside that archive.  You can delete the main files  now (not the archive.)  Now find the picture that you want to embed the  archive into and copy it into the folder.  You should now have a folder  with a single image and a single ZIP or RAR archive.  Make sure that you  don't have any files selected in that folder and hold shift, then right  click anywhere in the empty space and select "Open command window  here."  With a command prompt window opened and set to the working  directory, type this command:
    copy /b [DISPLAY IMAGE NAME] + [ZIP / RAR NAME] [OUTPUT IMAGE NAME]
Replace:
[DISPLAY IMAGE NAME] with the filename of the image you want to embed the archive into (including extension)
[ZIP / RAR NAME] with the filename of your archive (including extension)
[OUTPUT IMAGE NAME] with the name you want your output image to have (include extension)
An example command would be:
    copy /b display.jpg + hidden.rar merge_example.jpg
And now merge_example.jpg is a valid JPG image file with a hidden RAR file packed inside.  Very nifty.
Linux: from:
http://www.pinoytux.com/linux/tip-hiding-files-inside-an-image-in-linux
Get an image file and an archive of the files that you want to hide.  In this example, I have cat beer_and_cig.jpg and hideme.zip file. The  zip file contains an MP3 song that I have stored inside the archive. To  create the archive-image file, run this command:
    cat beer_and_cig.jpg  hideme.zip > ucantseeme.jpg
What this does is the ‘cat‘ command reads the image file first, then reads the zip file and puts them together in the file named ucantseeme.jpg.
To test the integrity of the image file, try this:
    # unzip -t ucantseeme.jpg
    Archive:  ucantseeme.jpg
    warning [ucantseeme.jpg]:  4751 extra bytes at beginning or within zipfile
    (attempting to process anyway)
    testing: Feist - 09 - One Two Three Four.mp3   OK
    No errors detected in compressed data of ucantseeme.jpg.
Idea: Custom Filesystem
How? LZMA compression similar to many binary firmware blobs.
Unknown difficulty level but seems like an intermediate level of difficulty.
The warning shows that your image was successfully inserted, and the rest tells you that the archive is totally intact.