HackTalk

Avira Antivirus Fail

connection — Tue, 15 May 2012 16:33:25 +0000

Avira has sent out a defective antivirus update that is causing paid versions of its product to detecting and blocking critical Windows processes, effectively rendering millions of PCs unusable. What a fail…

So an article posted on ZDnet today talks about a major fail on Avira’s part which is causing Avira to detect critical windows files to be flagged as malicious and rendering millions of PCs unusable. Here are the files that are being flagged:

\windows\system32\dllhost.exe
\windows\system32\explorer.exe
\windows\system32\iexplorer.exe
\windows\system32\notepad.exe
\windows\system32\regedit.exe
\windows\system32\rundll32.exe
\windows\system32\taskeng.exe
\windows\system32\wuauclt.exe

I’m wondering who skimped out on testing this update on a test system before pushing it out to production because they deserve to be shot for not noticing this sooner. I think it is the responsibility of not only Antivirus vendors but all software companies to thoroughly test their patches and updates to ensure you aren’t going to brick the end-user.

What I’d really like to know is how Avira is going to fix this PR blunder. I’ll be following up with Avira to try to get some more information on how/why this happened and update you along the way.

ZDNet posted the following temporary fix for users affected by this fail-update:

Bring up the Task Manager. Hit CTRL + SHIFT + ESC, right-click on the task bar and choose “Start Task Manager,” or hit CTRL + ALT + DEL and click on “Start Task Manager.”
Click on File, then “New task (Run…),” type “c:\program files\avira\antivir desktop\avconfig.exe” or equivalent, and then click OK. This will open the Avira Antivirus configuration window.
Click on the Expert mode switch at top left.
Click Realtime Protection on the left panel and then on Proactiv. Untick the check box for “Enable Proactiv” on the right. Click Apply.
Restart your computer.

BASH Magic: Converting Username Lists Into A Usable Format

connection — Mon, 14 May 2012 12:07:01 +0000

Recently a buddy of mine was on a pentest and he saw a username list in the format of Smith, John@gmail.com and while this was all fine and dandy the emails were actually stored as jsmith@gmail.com. I’ve encountered similar situations so I decided to code up a quick BASH oneliner to help him, myself and anyone else who encounters things like this in the future.

Command after the fold

cat FILE |sed -E 's/^(.*)\,.(.).*(\@.*)/\2\1\3/' |tr "[:upper:]" "[:lower:]"

Given the following sample data:

Smith, John@gmail.com

Doe, Jane@hotmail.com

Here is the output:

jsmith@gmail.com jdoe@hotmail.com
I hope this helps you guys out.

Keep your hacks up and your head down.

~Connection

Interview With Echelon of TeamGhostShell

connection — Fri, 11 May 2012 15:44:27 +0000

Today I had the pleasure of interviewing Echelon of TeamGhostShell. Read the interview after the fold.

connection   So Echelon I’ll admit I hadn’t heard much about you or TeamGhostShell for that matter until the recent acm.hdu.edu.cn leak. How long has TeamGhostShell been active?
Echelon   Not many have. We only just started, our first official release was May 6th.
Echelon   That was the Forex leak.
connection   Ah alright so still a pretty new group
Echelon   Yeah. We are former members of another active group, but recently decided to go off in another direction.
connection   Gotcha
connection   So I’ve only noticed two names in the releases, you and DeadMellox
connection   Are you the only two members?
Echelon   There is one more member that we have yet to announce. But expect some more info soon
Echelon   And like I said, we’re a new group so we’re expecting some more soon
connection   Ah great. So #ProjectGhostShell has been the “driving force” so to speak, for the releases and it looks like it’s just getting started. Are you currently looking to recruit any new members to help out with #ProjectGhostShell?
Echelon   Not officially, but.. we’re always open to anything that can help #ProjectGhostShell and our team, and if that involves more members then great.
connection   For anyone interested in helping out with #ProjectGhostShell is there any way they can reach you and/or DeadMellox (outside of twitter) to show their support/help with current targets?
Echelon   Not right now. If we decide to create an open IRC room for people who want to support/join us then we will announce it on our twitters. Since we just started, nothing is really decided yet.
connection   That makes sense.
connection   So speaking about #ProjectGhostShell, can you talk more about it? What are the motives behind it, potential targets, etc.
Echelon   #ProjectGhostShell is a project, or operation, that we launched as a reaction to the latest arrests of hackers around the world. We’ve seen LulzSec been taken down of course, but more recently we’ve seen members of TeaMp0ison and CabinCrew also falling into the claws of the FBI and other agencies.
Echelon   The targets involve those connected to these agencies, as well as targets that can damage them if leaked or attacked.
connection   Yea the arrest of _MLT_ is the most recent arrest of a hacker that has been really publicized, I take it attacks like this are to show government agencies that there will be retaliation for arresting any hackers. Now with the most recent public leak of the acm.hdu.edu.cn domain, what was the motivation behind that?
connection   I ask that simply because not many Anon or hackers are really getting arrested from China and the university really has nothing to gain from arresting hackers.
Echelon   The attack on HDU was not directly a part of #ProjectGhostShell. It was more related to what AnonymousChina is doing, which is trying to get people to look at the situation in China, especially on the Internet. Another reason was the reason that was published with the leak. The simple irony of that University getting attacked by the same tool it teaches.
Echelon   A kind of.. remark, on their poor security.
connection   That makes perfect sense.
connection   To be honest, I’ve been cracking quite a bit of the hashes released and I’ve cracked a ton pretty easily so I can totally understand the motivation there
connection   What was most surprising was that a “security” university was hashing their passwords as md5; not to mention the fact that they were unsalted md5.
Echelon   It was a piece of cake.
Echelon   It’s really weird, isn’t it? You’d think that these guys check their security once a day, considering the stuff they learn.
connection   Yea it was very shocking but when you think of sites like Gawker that had all their passwords in plain-text I guess some sort of hashing is better than nothing
Echelon   Indeed
connection   So if you could tell the hacktalk.net readers anything or give anyone shout-outs, what would it be?
Echelon   Oh and btw before we go on, I made a mistake earlier
connection    ah
connection   what’s that
Echelon   We (before I joined) did a hack on the University of Arkansas computer store on April 16th
Echelon   http://news.softpedia.com/news/Team-GhostShell-Hacks-University-of-Arkansas-Computer-Store-264675.shtml
connection   Ah cool, I’ll check that out for sure
Echelon   There was a large break after that, which is why I said we just started. And also I haven’t slept for a long time, so you’ll have to excuse the mistak
Echelon   And to your question..
Echelon   If you’re thinking about getting into these things, always stay safe and hidden. Always stay Anonymous. They are always watching
connection   So something I’ve been pretty much dying to ask, what’s next? What can we expect to see within the next few weeks to a month form TeamGhostShell. If you can’t speak about targets that’s completely understandable
connection   So feel free to be vague
Echelon   Next up is some military targets and possibly government targets as well
Echelon   Can’t give you any names
connection   Well I’d like to thank you for taking some time out to do this interview today. Do you have any last words?
Echelon   Thank you. Yes… be sure to expect us.

If you’d like to speak with Echelon or DeadMellox head over to twitter. @Echelon and @DeadMellox

As always, Keep Your Head Up And Your Hacks Down.

~connection

Cyber criminals are mass producing attack techniques, says Verizon

connection — Fri, 11 May 2012 11:25:01 +0000

A recent post on The Inquirer had me facepalming pretty hard. According to Verizon cyber criminals are focusing on attacking small and medium sized businesses using automated scripts that exploit vulnerabilities in the same exact way every time. No shit, sherlock…

Using automated “scan & pwn” styled scripts is nothing new; people have been using them since the dawn of friggen time. It started with just supplying google dorks with your vulnerabilities and led to completely automated tools such as Mass Defacers and the like. Currently we have tools such as Metasploit which interface with nmap scans to help automate the attacking of network services and even some of the more popular web applications. Why then is Verizon acting like this is something new when these are the same exact attacks we have been seeing for years? Is Verizon behind the times? The recent infographic released by Verizon (link here: https://s3.amazonaws.com/infographics/Worst-IT-Security-Breaches-800.png ) was supposed to give insight into the attacks Verizon was recently seeing. After reading this post about Verizon just catching up with the “scan & pwn” styled attacks makes me wonder just how skewed this infographic really is and if it is even a reputable source.

From Cracked To Complex : How To Generate More Secure Passwords

connection — Wed, 09 May 2012 13:48:16 +0000

One of my favorite past-times is cracking password hashes and seeing just how insecure many website and organization password policies really are. In this post I will be sharing a list of passwords which are all real cracked password from the last few months but with a more secure twist. More after the fold

Oftentimes when cracking lists of hashes I find myself writing not only new rules but finding ways to generate entirely new wordlists. Recently I was wondering if I could take all the password I’ve cracked over the last few months and force them to be compliant with the standard 2 uppercase, 2 lowercase, 2 special chars, 2 numbers, 10 character minimum password policy.

I started writing a filter for John the Ripper that could do this for me when I stumbled onto the following blog: http://lanmaster53.com/2011/02/creating-complex-password-lists-with-john-the-ripper/

The guys over at the LanMaster53 blog already beat me to the punch and created a filter which saved me a bunch of time.

What they did was run their filter on the r0cky0u list which is cool but I had much more recent and a much higher volume of passwords that I wanted to run this on so I set out to run it on my 7.6G list.

I’ll be the first to admit that when my new “complex” list came out as under 1G I was pretty surprised but then again, quite a few of the passwords I had cracked were like “a” or “123456″ so not many met even the bare minimum for a “complex” password.

I’ve decided to share this list with everyone because it will not only help people out who want a list of complex passwords but it will show how many passwords could have been much more secure had they just followed a very basic password policy.

Download Link: https://www.dropbox.com/s/koaltej3lm5460z/complex.txt

If you liked this link and want to help HackTalk share more things with the community, please sign up to Dropbox using our referral link which will get you an extra 500mb and give us some extra space too. You can find out referral link here: http://db.tt/7sAIQOLU

I hope this helps some of you out.

Keep your hacks up and your head down,

Connection

TeamDigi7al dumps website of the Canadian National Film Board

connection — Tue, 01 May 2012 23:58:33 +0000

TeamDigi7al dumps website of the Canadian National Film Board! http://bit.ly/IHXwKR

Mirror of leak after the break

 --------------------------------------------------------www.onf-nfb.gc.ca--------------------------------------------------------------------------------
 ---------------------------------------------------------------------------------------------------------------------------------------------------------
 Team Digi7al
 @teamdigi7al

Shoutouts to: Everyone over at Team Digi7al

Hey everyone DMT here again, back with my most major hack so far!
 I proudly present to you the dump from a subdomain of the National Film Board of Canada.
 It averages 1 million views a day, and it's website is worth about $6.8 million. Naturally you would think
 there would be tons of super sensitive info, but sadyl, there wasn't   The juicy infoz was limited to user name
 and password data, among the applicants for a scholarship they run I guess. Oh well never-the-less it was still a fun dump,
 so check out the infoz!

Site:www.onf-nfb.gc.ca
 Vuln url: find it yourself   I never disclose my vuln urls publicly, so now isn't the time to start xD
 DB+NAME: ONFNFB_CLF:5.1.24-rc-log
 User: clfuser@NFBGCPROD.NFB.CA
 information_schema,ONFNFB_CLF,test_tube

---------------------------------------------------------------------------------------------------------------------------------------------------------
 ---------------------------------------------------------------------------------------------------------------------------------------------------------
 ---------------------------------------------------------------------------------------------------------------------------------------------------------

auth_user:

date_joined,email,first_name,id,is_active,is_staff,is_superuser,last_login,last_name,password,username
 "sjolicoeur","sjolicoeur","sjolicoeur","sjolicoeur","sjolicoeur","sjolicoeur","sjolicoeur","sjolicoeur","sjolicoeur","sjolicoeur","sjolicoeur"
 "Stephane","Stephane","Stephane","Stephane","Stephane","Stephane","Stephane","Stephane","Stephane","Stephane","Stephane"
 "Jolicoeur","Jolicoeur","Jolicoeur","Jolicoeur","Jolicoeur","Jolicoeur","Jolicoeur","Jolicoeur","Jolicoeur","Jolicoeur","Jolicoeur"
 "1","1","1","1","1","1","1","1","1","1","1"
 "s.jolicoeur@nfb.ca","s.jolicoeur@nfb.ca","s.jolicoeur@nfb.ca","s.jolicoeur@nfb.ca","s.jolicoeur@nfb.ca","s.jolicoeur@nfb.ca","s.jolicoeur@nfb.ca","s.jolicoeur@nfb.ca","s.jolicoeur@nfb.ca","s.jolicoeur@nfb.ca","s.jolicoeur@nfb.ca"
 "1","1","1","1","1","1","1","1","1","1","1"
 "1","1","1","1","1","1","1","1","1","1","1"
 "2007-07-03 09:51:06","2007-07-03 09:51:06","2007-07-03 09:51:06","2007-07-03 09:51:06","2007-07-03 09:51:06","2007-07-03 09:51:06","2007-07-03 09:51:06","2007-07-03 09:51:06","2007-07-03 09:51:06","2007-07-03 09:51:06","2007-07-03 09:51:06"
 "sha1$c4737$2c3eb34bb4781172bd0af2c7d1988cad26ffbf4c","sha1$c4737$2c3eb34bb4781172bd0af2c7d1988cad26ffbf4c","sha1$c4737$2c3eb34bb4781172bd0af2c7d1988cad26ffbf4c","sha1$c4737$2c3eb34bb4781172bd0af2c7d1988cad26ffbf4c","sha1$c4737$2c3eb34bb4781172bd0af2c7d1988cad26ffbf4c","sha1$c4737$2c3eb34bb4781172bd0af2c7d1988cad26ffbf4c","sha1$c4737$2c3eb34bb4781172bd0af2c7d1988cad26ffbf4c","sha1$c4737$2c3eb34bb4781172bd0af2c7d1988cad26ffbf4c","sha1$c4737$2c3eb34bb4781172bd0af2c7d1988cad26ffbf4c","sha1$c4737$2c3eb34bb4781172bd0af2c7d1988cad26ffbf4c","sha1$c4737$2c3eb34bb4781172bd0af2c7d1988cad26ffbf4c"
 "1","1","1","1","1","1","1","1","1","1","1"
 "2007-06-18 10:01:20","2007-06-18 10:01:20","2007-06-18 10:01:20","2007-06-18 10:01:20","2007-06-18 10:01:20","2007-06-18 10:01:20","2007-06-18 10:01:20","2007-06-18 10:01:20","2007-06-18 10:01:20","2007-06-18 10:01:20","2007-06-18 10:01:20"

---------------------------------------------------------------------------------------------------------------------------------------------------------
 ---------------------------------------------------------------------------------------------------------------------------------------------------------
 ---------------------------------------------------------------------------------------------------------------------------------------------------------

django_session:

expire_date,session_data,session_key

"2007-07-02 10:01:48","KGRwMQpTJ19hdXRoX3VzZXJfYmFja2VuZCcKcDIKUydkamFuZ28uY29udHJpYi5hdXRoLmJhY2tl
 bmRzLk1vZGVsQmFja2VuZCcKcDMKc1MnX2F1dGhfdXNlcl9pZCcKcDQKTDFMCnMuNGYxODQ0NmU1
 ZmNmYjE1NDQyZmQ5Y2RmNjYzYjU1NzY=
 ","9f39809a933a04a8ca37a0ad2e87c481"

"2007-07-17 09:51:06","KGRwMQpTJ19hdXRoX3VzZXJfYmFja2VuZCcKcDIKUydkamFuZ28uY29udHJpYi5hdXRoLmJhY2tl
 bmRzLk1vZGVsQmFja2VuZCcKcDMKc1MnX2F1dGhfdXNlcl9pZCcKcDQKTDFMCnMuNGYxODQ0NmU1
 ZmNmYjE1NDQyZmQ5Y2RmNjYzYjU1NzY=
 ","a7191ec9a0e8c524935a9ea743458b91"

"2007-08-13 10:02:49","KGRwMQpTJ3Rlc3Rjb29raWUnCnAyClMnd29ya2VkJwpwMwpzLjM4OGUwYzM3NTkyZTcwNWM5ZDI3
 ZDk2ZjEyNGM2NTli
 ","b3688b5d2c7be402d662a8f32fa11bb1"

"2008-11-28 12:17:30","KGRwMQpTJ3Rlc3Rjb29raWUnCnAyClMnd29ya2VkJwpwMwpzLjM4OGUwYzM3NTkyZTcwNWM5ZDI3
 ZDk2ZjEyNGM2NTli
 ","c3a00cee00041d02fb66624d9a7a9a1e"

---------------------------------------------------------------------------------------------------------------------------------------------------------
 ---------------------------------------------------------------------------------------------------------------------------------------------------------
 ---------------------------------------------------------------------------------------------------------------------------------------------------------

user:

courriel,groupe,id,login,nom,pass,prenom,telephone

"f.francois@onf.ca","WEB_CRB_ADM","5","florence","Francois","*C6E74EDED542939C3FF2F2277CD9EDD14719455A","Florence","514 496-6301"

"m.louir@onf.ca","WEB_ADM","7","louir","Louir","*ABC62529BB6624CE35F7EE8208A889CE12C3AC24","Mohammed","514 283-4854"

"r.reyes@onf.ca","WEB_MDT_ADM","15","ryan","Reyes","*8DC81F46F004E99DD2347305BF897C973FD50956","Ryan","None"

"b.duberger@onf.ca","WEB_ADM","17","bduberger","Benoit","*2B31D89E6E7A98119D0C1FD74464B16090CC9EB2","Du Berger","283-9250"

"j.f.cote@onf.ca","WEB_ADM","20","jfcote","Cote","*FDC3A3485A01F7D36D9CB3B3266AF1A1E04DD744","Jean-Francois","283-9634"

"s.laberge @onf.ca","WEB_MDT_ADM","21","sophie","Laberge","*FD2A6F14CCCAA12C62CD43C6FEACBD82DBD04DF7","Sophie","None"

"jfpoulin@onf.ca","WEB_ADM","24","jfpoulin","Poulin","*B293DE054BB4880279FF20DC060C43E283709036","Jean-Francois","496-1329"

"j.beaulieu@onf.ca","WEB_ADM","25","jsbeaulieu","Beaulieu","*AFBF7165B0FC12B27BCB31E96FCE4960696A126B","Jean-Sébastien","283-4789"

"m.trudel@onf.ca","WEB_ADM","26","mtbelisle","Trudel-Bélisle","*9CC54EC16AFEEA9A170D20553B650BF677AE580B","Marc","38945"

"j.pomerleau@onf.ca","WEB_ADM","27","jpomerleau","Pomerleau","*86D64F87EA16DE65740650978EAA9B9CA84D7521","Jo\c3\abl","None"

"s.jolicoeur@nfb.ca","WEB_ADM","28","sjolicoeur","Jolicoeur","*47BEC6DD1989B851EA889588BF3E6A1F3E30E30C","Stephane","NULL"

---------------------------------------------------------------------------------------------------------------------------------------------------------
 ---------------------------------------------------------------------------------------------------------------------------------------------------------
 ---------------------------------------------------------------------------------------------------------------------------------------------------------
 *NOTE: This is the best infoz of the dump so far.

suzuki_application (my guess is that these are the applicants for a scholarship or other program they run in co-ordination with the David Suzuki foundation. ):

applicantEmail,applicantExt,applicantLevel,applicantName,applicantPhone,applicantPosition,applicantStudents,applicantSubject,applicantSurname,contactEmail,contactName,contactPhone,contactSurname,dateActivity,id,inscriptionDate,newsletter,school,schoolAddress,schoolCity,schoolExt,schoolPhone,schoolProvince,schoolWww,schoolZip,technicalLevel,terms,transferredInfo

"gvezina@fourmiweb.com","None","ICI","Gabrielle","514 999-3945","ICI","350","None","V\e9zina","None","None","None","None","both","1","NULL","0","TEST","TEST","TEST","None","5145555555","Alberta","None","H2H2H2","1","1","1"

"squevillon@onf.ca","32_v2","secondaire 2","Sophie","514-283-3477","Coordo","27","anglais","Quevillon","None","None","None","None","both","2","NULL","0","ONF","3155 ave C\f4te de Liesse","Montreal","32_v2","514-283-3477","Quebec","onf.ca","H4A 2J5","1","1","1"

"gvezina@fourmiweb.com","None","545","Gabrielle","5145555555","ici","5454","None","V\e9zina","None","None","None","None","both","3","2011-08-30 16:13:56","0","TEST","test","test","None","5145555555","Alberta","None","h2h2h2","1","1","1"

"dennis.caron@tcdsb.org","None","8","Dennis","416 986 3141","teacher","approx 30","all","Caron","None","None","None","None","both","4","2011-08-31 14:15:50","1","St. Maurice Catholic School","45 Kingsview Blvd ","Toronto","None","416 393 5379","Ontario","None","M9R 4A6","1","1","1"

"leela.acharya@tdsb.on.ca","20042","Gr. 12","Leela","416-393-1420","Teacher","60","World Issues","Acharya","None","None","None","None","1","5","2011-08-31 14:21:29","1","Bloor Collegiate Institute","1141 Bloor St. West","Toronto","20042","416393-1420","Ontario","None","M6H1M9","1","1","1"

"programs@okscience.ca","None","Secondary grades 9-12","Elizabeth","250 545-3644","Program Director","40","None","Brown","None","None","None","None","both","6","2011-08-31 14:24:21","0","Okanagan Science Centre","2704 Hwy 6","Vernon","None","250 545-3644","British Columbia","www.okscience.ca","V1B 2Z5","1","1","1"

"marnie@mamaweswen.ca","410","9-12","Marnie","705-844-2340","Education Program Manager","20","First Nations/Adult Education","Yourchuk","None","None","None","None","both","7","2011-08-31 14:29:28","1","North Shore Tribal Council","473 A Hwy 17 West","Cutler","410","705 844-2340","Ontario","WWW.MAMAWESWEN.CA","p0r1a0","1","1","1"

"sara.hayward@nbed.nb.ca","None","9 10","Sara","506-721-4977","Teacher","29-136","Science","Hayward","None","None","None","None","both","8","2011-08-31 14:40:02","1","Harbour View High School","305 Douglas Avenue","Saint John","None","506-658-5359","New Brunswick","hvhs.nbed.nb.ca","E2K1E5","1","1","1"

"jdennis@chinooksedge.ab.ca","None","7","Jody","403-886-4390","Vice Principal","50","all","Dennis","jdennis@chinooksedge.ab.ca","Jody","403-886-4390","Dennis","both","9","2011-08-31 14:45:02","1","Penhold School","Box 130","Penhold","penholdschool.c","403-886-4390","Alberta","None","T0M 1R0","1","1","1"

"joannemacdonald@unamakitec.ca","None","Alternative Grades 9 to 12 and Adult Upgrading ","Joanne","Same as above a","Acting Principal","50","Our school offers courses in Mikmaq history and language, English language arts, social studies, science, and math based on NS Department of Education requirements for high school completion and the Adult Learning Programs Levels I to III","Macdonald","None","None","None","None","both","10","2011-08-31 14:45:30","0","Unamaki Training and Education Centre","PO Box 7010","Eskasoni First Nation","210","902379-2758","Nova Scotia","Still under construction","B1W 1A1","1","1","1"
 "annemarie.sauer@pvsd.ca","None","6 to 12","Anne Marie","306336-2388","classroom teacher","50","Social Studies and English","Sauer","None","None","None","None","both","11","2011-08-31 14:58:58","1","Lipton School","Box 160","Lipton ","None","306336-2200","Saskatchewan","None","S0G 3B0","1","1","1"

"ghowell@viw.sd84.bc.ca","None","7-12","Glyn","250-934-6305","Teacher","18","Math/Science","Howell","None","None","None","None","both","12","2011-08-31 15:04:08","1","Captain Meares Elementary-Secondary School","399 Alpine View","Tahsis","None","250-934-6305","British Columbia","None","V0P 1X0","1","1","1"

"laura.savich@spschools.org","None","Grade 9","Laura","780-459-4456","Teacher","15","Science","Savich","None","None","None","None","2","13","2011-08-31 15:52:25","1","Sir George Simpson School","60 Grosvenor Blvd","St. Albert","None","780-459-4456","Alberta","www.sgsjh.spschools.org","T8N 0X6","1","1","1"

"molsen@wolfcreek.ab.ca","None","Grade 7-9","Megan","403 783-9712","Teacher","35","Math, Science, Phys Ed","Olsen","None","None","None","None","both","14","2011-08-31 16:15:39","1","Clive Shcool","General Delivery","Clive","None","403 784-3354","Alberta","None","T0C 0Y0","1","1","1"

"mpulfer@mulgrave.com","3298","11 and 12","Mark","604 922 3223","Teacher","5","Environmental Systems and Societies","Pulfer","None","None","None","None","both","15","2011-08-31 16:24:26","1","Mulgrave School","2330 Cypress Bowl Lane","West Vancouver","3298","604 922 3223","British Columbia","www.mulgrave.com","V7S 3H9","1","1","1"

"cherjola@hotmail.com","None","8 - 12","Cheryl","250 471-2002","Teacher","32","Science/Math","Jones-Large","cherjola@hotmail.com","Cheryl","250 471-2002","Jones-Large","both","16","2011-08-31 17:19:09","1","Aatse Davie School","PO Box 79","Fort Ware","None","250 471-2002","British Columbia","www.kwadacha.com","V0J 3B0","1","1","1"

"chill@sd52.bc.ca","na","7-12","Cameron ","250 841 2511","teacher","15","all","Hill","None","as above ","None","None","both","17","2011-08-31 17:42:35","0","Hartley Bay School","224 Galagm Laxa Ave.","Hartley Bay, B.C.","na","250 841 2511","British Columbia","na","V0V1A0","1","1","1"

"jwkorchinski@cbe.ab.ca","None","10 through 12","Jeffrey","403 662 3547","Teacher","15","Science","Korchinski","None","None","None","None","both","18","2011-08-31 17:46:55","1","West View School","12626 85th St NW","Calgary","None","403 662 3547","Alberta","None","T3R 1J3","1","1","1"
 "None","None","None","None","None","None","None","None","None","None","None","None","None","None","19","2011-08-31 17:48:30","0","None","None","None","None","None","None","None","None","0","0","0"

"chill@sd52.bc.ca","na","7-12","Cameron ","250 841 2511","teacher","15","all","Hill","None","as above ","None","None","both","20","2011-08-31 17:56:58","0","Hartley Bay School","224 Galagm Laxa Ave.","Hartley Bay, B.C.","na","250 841 2511","British Columbia","na","V0V1A0","1","1","1"

"dianedougan@sd28.bc.ca","None","8 9","Diane","250-992-2131","Science Teacher","80+","Science","Dougan","None","None","None","None","both","21","2011-08-31 17:58:04","1","Quesnel Junior School","585 Callanan Street","Quesnel","None","250-992-2131","British Columbia","None","V2J 2V3","1","1","1"

"taylor_christopher@durham.edu.on.ca","None","6/7","Chris","905 620 1255","Elementary Teacher","30","None","Taylor","None","None","None","None","both","22","2011-08-31 18:56:05","0","Robert Munsch Public School","20 Norista Street","Whitby","None","905 620 1255","Ontario","www.munschps.ca","L1R 0J2","1","1","1"

"joellen.jensen@nbed.nb.ca","None","10, 12","JoEllen","5068476204","Department Head of English","58","None","Jensen","None","None","None","None","both","23","2011-08-31 19:39:13","1","Rothesay High Scool","61 Hampton Road","Rothesay","None","5068476204","New Brunswick","www.rothesayhigh.ca","E2E5L6","1","1","1"

"dreardon@hrsb.ns.ca","None","P-9","Don","902 864-7553","Principal","120","None","Reardon","cmackeiga@staff.ednet.ns.ca","Charlotte","902 864-7524","MacKeigan","both","24","2011-08-31 21:06:35","1","Cavalier Drive","116 Cavalier Drive","Lower Sackville","None","902 864-7524","Nova Scotia","None","B4C3L9","1","1","1"

"smaki@nvsd44.bc.ca","None","10","stephanie","604-903-3400","teacher","65","social studies","maki","None","None","None","None","both","25","2011-09-01 01:09:41","1","Carson Graham Secondary School","3365 mahon avenue","North Vancouver","None","604-903-3400","British Columbia","www.nvsd44.bc.ca/schoolsites/carsongraham.aspx","v7n 3t7","1","1","1"

"liz.woods@yesnet.yk.ca","None","Secondary","Elizabeth Liz","867-993-5435","Teacher","30","Science","Woods","None","None","None","None","both","26","2011-09-01 10:53:50","1","Robert Service","P. O. Box 278","Dawson City","None","867-993-5435","Yukon","None","Y0B 1G0","1","1","1"
 "bhendry16@yahoo.ca","None","9","Brian","647 987-5390","Head of Science","40","Ecology","Hendry","None","None","None","None","2","27","2011-09-01 11:09:19","0","Country Day School","13415 Dufferin Street","King","323","905 833-1220","Ontario","cds.on.ca","L7B 1K5","1","1","1"

"c.pratt@tvdsb.on.ca","None","11/12","Charlene","519-245-3397","Department Head, Social Science","20 - 30","Philosophy, Anthropology, Sociology, Food, Fashion","Pratt","None","None","None","None","both","28","2011-09-01 12:32:13","1","Strathroy Disteict Collegiate Institute","361 Second St. ","Strathroy","549","519-245-2680","Ontario","None","N7G4J8","1","1","1"

"james_j.wilson@ucdsb.on.ca","None","Grade 11","Jim","613-924-2618","Program Leader - Science","50","biology, chemistry, environmental science","Wilson","None","None","None","None","both","29","2011-09-01 13:11:58","1","Athens District High School","21 Church Street","Athens","None","613-924-2618","Ontario","None","K0E 1B0","1","1","1"

"crow@hotmail.com","None","asdfasd","asdasd","sdfsdf","sdfasd","ssdf","None","asdasd","None","None","None","None","both","30","2011-09-01 15:05:29","1","testnh","testnh","testnh","None","1234567","Alberta","None","h3w 1e3","1","1","1"

"mielke.daniel@nesd.ca","None","N/A","Mielke","306-769-8784","Prinicipal","35","None","Dan","None","None","None","None","both","31","2011-09-01 15:09:08","1","Arborfield School","Box 70","Arborfield","None","306-769-8784","Saskatchewan","arborfield.nesd.ca","S0E 0A0","1","1","1"

"squevillon@onf.ca","32_v2","secondaire 2","Sophie","514-283-3477","Coordo","27","anglais","Quevillon","None","None","None","None","both","32","2011-09-02 08:58:36","0","ONF","3155 ave C\f4te de Liesse","Montreal","None","514-283-3477","Alberta","None","H4A 2J5","1","1","1"

"blaisl@rainbowschools.ca","None","8","Leslie","7056824721","Teacher","50","all","Blais","None","None","None","None","both","33","2011-09-02 08:59:00","1","Copper Cliff Public School","50 School Street","Copper Cliff","None","7056824721","Alberta","None","P0M 1N0","1","1","1"

"gvezina@fourmiweb.com","None","ici","Gabrielle","(514) 666 6666","ici","324","None","V\e9zina","None","None","None","None","both","34","2011-09-02 11:36:45","1","TEST","TEST","TEST","None","(514) 555 5555","Manitoba","None","h2h2h2","1","1","1"

"brad.rawluk@lpsd.ca","None","9","Brad","7808756239","Grade 9 Teacher","68","Science","Rawluk","None","None","None","None","1","35","2011-09-02 12:11:22","0","Bishop Lloyd Middle School","5524 - 31 Street ","Lloydminster","None","7808756239","Alberta","None","T9V1W1","1","1","1"

"rmorrissette@wsd1.org","None","12","Rhonda","204-947-1674","Teacher-librarian","60","World Issues/Native Studies","Morrissette","None","None","None","None","both","36","2011-09-03 07:23:58","1","Winnipeg Adult Education Centre","310 Vaughan St.","Winnipeg","None","204-947-1674","Manitoba","None","R3G 2N8","1","1","1"

"gregorykel@limestone.on.ca","None","9-12","Kelly","6134836949","Teacher: Aboriginal School Focus Program","15","Environmental Science, English, Native Studies, Physical Education","Gregory","None","None","None","None","both","37","2011-09-03 15:13:12","1","Q.E.C.V.I.","145 Kirkpatrick St.","Kingston","None","6135461714","Ontario","queenelizabeth.limestone.on.ca","K7K 2P4","1","1","1"

"doreen.barnes@calgaryislamicschool.com","296","K-12","Doreen","403-248-2773","Academic Director","40","all subjects","Barnes","None","None","None","None","both","38","2011-09-03 15:26:49","1","Calgary Islamic School","2612 37th Ave NE","Calgary","296","403-248-2773","Alberta","www.calgaryislamicschool.com","T1Y 5L2","1","1","1"

"gharris@mail1.scdsb.on.ca","None","K-8","Greg","705-728-5698","Teacher Librarian","70","Science","Harris","None","None","None","None","both","39","2011-09-05 08:01:37","1","Ardagh Bluffs Public School","159 Summerset Drive","Barrie","None","705-728-5698","Ontario","None","L4N 6H2","1","1","1"

"mcnabb.katie@prairiesouth.ca","None","6-10","Katie","306-759-2110","Teacher","25","Science, social studies, PE, Health career ed","McNabb","None","None","None","None","both","40","2011-09-05 09:47:22","1","Eyebrow School","Box 130","Eyebrow","None","306-759-2110","Saskatchewan","None","S0H 1L0","1","1","1"

"brent.cook@sd87.bc.ca","None","9-10","Brent","250-771-4321","Teacher","26","Science and Social Studies","Cook","None","None","None","None","both","41","2011-09-05 18:25:05","0","Dease Lake School","P.O. Box 280","Dease Lake","None","250-771-4321","British Columbia","None","V0C1L0","1","1","1"

"mazerda@nbed.nb.ca","None","10,11 12","David","506-523-7160\67","Teacher","400","History,World Issues ","Mazerolle","None","None","None","None","both","42","2011-09-06 08:17:39","1","Bonar Law Memorial School","197 Main St.","Rexton","None","506-523-7160","New Brunswick","mazerda@nbed.nb.ca","E4W2A9","1","1","1"

"angela.chiasson-fox@dsb1.edu.on.ca","None","9-12","Angela","705-567-4981","Secondary Teacher","60","Science, Biology and Leadership","Chiasson Fox","None","None","None","None","both","43","2011-09-06 12:47:03","1","Kirkland Lake District and Composite School","60 Allen Ave","Kirkland Lake","None","705-567-4981","Ontario","None","P2N 3J5","1","1","1"

"marc.dubeau@ocdsb.ca","None","teacher","Marc","821-2241","Department Head","27","social science","Dubeau","None","None","None","None","both","44","2011-09-06 14:32:08","1","Osgoode Township HS","2800 8th line rd ","metcalfe","421","6138212241","Ontario","othspanthers.ca","k0a1w0","1","1","1"

"sdwyer@bss.on.ca","x1523","9 - 12","Sarah ","416-483-4325","Head, Learning Commons","100","Science, Geography,Social Sciences","Dwyer","dmacnab@bss.on.ca","Darby","416-483-4325","Macnab","1","45","2011-09-06 16:27:18","1","THe Bishop Strachan School","298 Lonsdale Road","Toronto","None","416-483-4325","Ontario","bss.on.ca","M4V 1X2","1","1","1"

"erin.schroeder@tcdsb.org","None","7/8","Erin","416-393-5467","Teacher","60","All","Schroeder","None","None","None","None","both","46","2011-09-06 17:06:30","0","St. Dominic Savio","50 Tideswell Blvd. ","Scarborough","None","416-393-5467","Ontario","None","M1B 5X3","1","1","1"

"sarah.menard@ucdsb.on.ca","205","9, 11","Sarah","613-346-2122","Science Teacher","50","science, biology","Menard","None","None","None","None","both","47","2011-09-07 07:29:33","0","Tagwi Secondary School","16750 County Rd. 43","Avonmore","None","613-346-2122","Ontario","None","K0C1C0","1","1","1"

"lhandiak@vanguardquebec.qc.ca","204","11","Linda ","514 932 9770","Teacher","35","History","Handiak","aharding@vanguardquebec.qc.ca","Andrea","514 932 9770","Harding","1","48","2011-09-07 12:35:20","1","Vanguard Intercultural High School","175 rue Metcalfe","Montreal","None","514 932 9770","Quebec","www.vanguardquebec.qc.ca","H3Z 2X6","1","1","1"

"gvezina@fourmiweb.com","None","TEST","TEST","TEST","TEST","TEST","None","TEST","None","None","None","None","both","49","2011-09-07 12:44:44","1","TEST","TEST","TEST","None","TEST","Alberta","www.test.com","TEST","1","1","1"

"gvezina@fourmiweb.com","None","TEST","TEST","TEST","TEST","TEST","None","TEST","None","None","None","None","both","50","2011-09-07 12:51:47","1","TEST","TEST","TEST","None","TEST","Alberta","http://www.test.com","TEST","1","1","1"

"None","None","None","None","None","None","None","None","None","None","None","None","None","None","51","2011-09-07 13:32:09","0","None","None","None","None","None","None","None","None","0","0","0"

"amalia@thestudy.qc.ca","262","7-11","Amalia","514 9359352","Director, IT","60","Technology","Liogas","None","None","None","None","both","52","2011-09-06 13:33:55","1","The Study","3233 The Boulevard","Montreal","None","514 9359352","Quebec","http://www.thestudy.qc.ca","H3Y1S4","1","1","1"

"denise.morris@hzsd.ca","None","4","Denise","8357266","Teacher","12","all","Morris","None","None","None","None","both","53","2011-09-07 17:26:46","1","George Gordon Education Center","Box 70","Punnichy","None","8352222","Saskatchewan","None","s00a3c0","1","1","1"

"seung-mi.jang@tcdsb.org","None","8","Seung-Mi","416-970-7726","teacher","50","core subjects","Jang","None","None","None","None","1","54","2011-09-07 18:20:27","1","St. Henrys Catholic Elementary School","100 Bamburgh Circle ","Scarborough","None","416-393-5612","Ontario","None","M1W 3R3","1","1","1"

"harttom@nbed.nb.ca","None","11/12","Tom","506-466-7312","Science Dept Head/teacher","65","Env. Science","Hart","None","None","None","None","2","55","2011-09-08 08:01:51","0","St Stephen High School","282 King St","St Stephen","None","506-466-7312","New Brunswick","sshs.nbed.nb.ca","E3L 4X7","1","1","1"

"kathryn.downe@nbed.nb.ca","None","K - 12","Kathryn","(506) 357-4181","Science Learning Specialist District 17","two high school classes - approx. 69 students","None","Downe","brent.rowney@nbed.nb.ca","Brent","(506) 357-4291","Rowney","both","56","2011-09-08 09:34:47","1","Oromocto High School District 17","25 MacKenzie Avenue","Oromocto ","None","(506) 357-4015","New Brunswick","None","E2V 1K4","1","1","1"

"swiftmid@nbed.nb.ca","None","11","Michael","506-432-2017","Department Head","40","Biology","Swift","None","None","None","None","both","57","2011-09-08 11:39:51","1","Sussex Regional High School","55 Leonard Drive","Sussex","None","506-432-2017","New Brunswick","http://sussexhigh.nbed.nb.ca/splash.asp","E4E 2P8","1","1","1"

"psalembier@sd43.bc.ca","111","11","Philip","604-936-7205","Teacher-Librarian","50","Biology","Salembier","achew@sd43.bc.ca","Angeline","604-936-7205","Chew","both","58","2011-09-08 18:33:50","0","Centennial","570 Poirier St.","Coquitlam","111","604-936-7205","British Columbia","http://www.sd43.bc.ca/secondary/centennial/Pages/default.aspx","V3J 6A8","1","1","1"

"mpinaud@hotmail.com","None","7,8,9","Michelle ","(902) 794-2492","Teacher","150","Science","Pinaud","None","None","None","None","both","59","2011-09-09 07:36:29","1","Thompson Junior High School","30 Regent Street","North Sydney","None","(902) 794-2492","Nova Scotia","www.cbv.ns.ca/thompson","B2A2E6","1","1","1"

"marklucas@trentu.ca","None","9-12","Mark","204-687-8404","Teacher","20-100","Science, Math, History ","Lucas","None","None","None","None","1","60","2011-09-09 11:03:14","1","Hapnot Collegiate","115 Green Street","Flin Flon","None","204-687-7506","Manitoba","None","R8A 0P7","1","1","1"

"j.stein@bialikmtl.ca","223","7 - 11","Judy ","514 481 2736","Coordinator of Curriculum","109","All subjects","Stein","l.zentner@bialikmtl.ca","Lee","514 481 2736","Zentner","1","61","2011-09-09 13:37:59","1","Bialik High School","6500 Kildare Road","Montreal","223","514 481 2736","Quebec","http://www.jppsbialik.ca/en/bialik","H4W3B8","1","1","1"

"scribst@sasktel.net","None","4-12","Stan","306-478-2387","Science teacher","25","Biology, Chemistry, Science 4-10, Social 4,6","Scribner","scribst@sasktel.net","Stan","306-478-2387","Scribner","both","62","2011-09-11 22:48:41","1","Mankota","Box 300","Mankota","None","306-478-2370","Saskatchewan","None","S0H 2W0","1","1","1"

"mollgrah@fc.amdsb.ca","2405","11","Molly","519 524-7353","teacher","40","green industries","Graham","None","None","None","None","both","63","2011-09-12 09:16:27","1","Goderich DCI","260 south st.","Goderich","None","519 524-7353","Ontario","None","n7a 3x9","1","1","1"

"tpatterson@chinooksedge.ab.ca","None","Grade 9 and Bio 20 students","Teri","403-728-3459","Teacher/Tech Leader","Approx. 30","Science and Biology","Patterson","gmeyer@chinooksedge.ab.ca","Giselle","403-728-3459","Meyer","both","64","2011-09-12 10:30:45","0","Spruce View School","Box 130","Spruce View","None","403-728-3886","Alberta","www.spruceviewschool.ca","T0M 1V0","1","1","1"

"sfullerton@svsd.ca","None","9-12","Shannon Fullerton","204-734-6065"," Teacher","100","None","Rooks","None","None","None","None","both","65","2011-09-12 16:27:16","1","Swan Valley Regional Secondary School","Box 5000","Swan River","None","204-734-4511","Manitoba","None","R0L 1Z0","1","1","1"

"crystal.woodworth@sd6.bc.ca","4535","8-12","Crystal ","250-342-9213","Library Teacher","50","all","Woodworth","None","None","None","None","both","66","2011-09-12 17:26:20","1","David Thompson Secondary School","1535 14th Street Unit 1","Invermere","4535","250-342-9213","British Columbia","www.sd6.bc.ca/dtss","V0A 1K2","1","1","1"

"bgregory@sd20.bc.ca","518","9-10","Bud","250-365-7735","Science Department Head","60","Science","Gregory","None","None","None","None","both","67","2011-09-12 18:44:27","1","Stanley Humphries Secondary School","720 7th Avenue","Castlegar","518","250-365-7735","British Columbia","www.shsscastlegar.ca","V1N1R5","1","1","1"

"velitchka.apostolova-gilbert@tdsb.on.ca","20238","12","Velitchka","416396-5525","Teacher-Librarian","60","English, Canadian and World Issues","Gilbert","None","None","None","None","both","68","2011-09-13 14:59:41","1","David and Mary Thomson CI","2740 Lawrence Ave. East","Scarborough","20238","416-396-5525","Ontario","http://www.thomsoncollegiate.ca/","M1P 2S7","1","1","1"

"claire.dossantos@tdsb.on.ca","None","7-8","Claire ","647-802-7620","Teacher/Dept Head","120","Language/Math/Drama/Visual Arts/Music","dos Santos","None","None","None","None","both","69","2011-09-13 20:43:06","1","Ledbury Park Elementary and Middle School","95 Falkirk ","Toronto","None","416-395-2630","Ontario","tdsb.on.ca/ledburypark.com","M5M 4K1","1","1","1"

"krussell@sd91.bc.ca","None","Gr. 9 -12","Kathy-Lynne ","250 567-2291","Spec. Ed. Assistant/Environmental Group Leader","up to 60","Science, Socials, Environmental Group","Russell","None","None","None","None","both","70","2011-09-13 23:53:47","1","Nechako Valley Secondary","Box 950","Vanderhoof","None","2505672291","British Columbia","None","V0J 3A0","1","1","1"

"wikylibrary@hotmail.com","None","9-12","sheri","705-859-2692","librarian","50","science","mishibinijima","None","None","None","None","both","71","2011-09-14 08:48:35","1","Wasse Abin High School","34 Henry Street","wikwemikong","None","705-859-2870","Ontario","www.olsn.ca/wpl","P0P 2J0","1","1","1"

"mhartling@albertcollege.ca","2273","9","Mary ","6139685726","Library Services Coordinator","40","Science","Hartling","None","None","None","None","1","72","2011-09-14 09:24:49","1","Albert College","160 Dundas St. West","Ontario","2273","6139685726","Ontario","albertcollege.ca","K8P 1A6","1","1","1"

"mark.watkin@yrdsb.edu.on.ca","None","9 - 12","mark","416 858-6221","head of geography","100","geography world studies","watkin","None","None","None","None","1","73","2011-09-14 10:47:38","1","milliken mills high school","7522 kennedy road","unionville","216","905 477-0072","Ontario","None","l3r 9s5","1","1","1"

"sbarton@lcsd.ca","None","11","Susan","7808705998","Teacher","30","Biology","Barton","None","None","None","None","both","74","2011-09-14 20:02:17","0","Holy Rosary High School","6611A 39th Street","Lloydminster","None","7808753600","Alberta","www.hrhs.ca","T9V 2Z4","1","1","1"

"knudsen.audrey@prairiesouth.ca","231","9 - 12","Audrey","3066423319","HighSchool Teacher","22","Biology, Physics, History, CHemistry","Knudsen","None","None","None","None","both","75","2011-09-14 20:08:08","0","Assiniboia Composite HighSchool","200 Bell Road","Assiniboia","None","3066423319","Saskatchewan","None","S0H0B0","1","1","1"

"zhein@lcsd.ca","None","3","Zoey","7808088600","Teacher","30","Science","Hein","sbarton@lcsd.ca","Susan","7808705998","Barton","both","76","2011-09-14 20:33:13","0","St Marys","5207-42 Street","Lloydminster","None","7808088600","Alberta","www.lcsd.ca","T9V 1M8","1","1","1"

"cvince@lcsd.ca","None","7","Christine","7808753827","Teacher","30","Science","Vince","sbarton@lcsd.ca","Susan","7808705998","Barton","both","77","2011-09-14 20:35:31","0","St Joseph","5706 27th Street","Lloydminster","None","7808753827","Alberta","www.lcsd.ca","T9V 2B8","1","1","1"

"mbulduc@lcsd.ca","None","3","Michelle","3068254600","Teacher","30","Science","Bulduc","sbarton@lcsd.ca","Susan","7808705998","Barton","both","78","2011-09-14 20:41:46","0","Father Gorman","3112 47 Avenue","Lloydminster","None","3068254600","Saskatchewan","www.lcsd.ca","S9V 1G5","1","1","1"

"cforcier@lcsd.ca","None","4","Chantale","7808755366","Teacher","30","Science","Forcier","sbarton@lcsd.ca","Susan","7808705998","Barton","both","79","2011-09-14 20:43:58","0","Ecole St Thomas","5216 44th Street","Lloydminster","None","7808755366","Alberta","www.lcsd.ca","T9V 1R6","1","1","1"

"ggagnon@lbpearson.qc.ca","None","10 - 12","Gail","514 694 8500","Educational Consultant","50","Leadership, Ethics, Environmental Science","Gagnon","None","None","None","None","both","80","2011-09-14 21:12:05","1","Place Cartier Adult Centre","257 Beaconsfield Boulevard","Beaconsfield","None","514 694 8500","Quebec","http://placecartier.lbpsb.qc.ca","H9W4A5","1","1","1"

"rupa.jolly@ocdsb.ca","None","11","Rupa","613-731-1191","teacher","60","Social Studies","Jolly","None","None","None","None","1","81","2011-09-14 22:13:16","0","Canterbury High School","900 Canterbury Ave","Ottawa","None","613-731-11391","Ontario","http://www.canterburyhs.ocdsb.ca/","K1G 3A3","1","1","1"

"schampagne@sjsd.net","None","6","Stephanie","204-837-5808","Teacher","50","Social Studies/Science","Champagne","None","None","None","None","2","82","2011-09-15 13:38:10","0","Golden Gate","330 Bruce Ave","Winnipeg","None","204-837-5808","Manitoba","None","R3J 0V8","1","1","1"

"emilylennon@nbed.nb.ca","None","12","Emily","1-506-658-5359","Teacher","29","Environmental Science","Lennon","None","None","None","None","1","83","2011-09-15 15:08:31","0","Harbour View High School","305 Douglas Ave.","Saint John","None","1-506-658-5359","New Brunswick","hvhs.nbed.nb.ca","E2M 1E5","1","1","1"

"dominic.leach@nbed.nb.ca","None","11 and 12","Dominic","506 457-6898","Teacher","At least 90, will be more depending on venue location","World Issues, Modern History, Economics, Environmental Science","Leach","None","None","None","None","both","84","2011-09-15 15:29:00","1","Leo Hayes High School","499 Cliffe St","Fredericton","None","506 457-6898","New Brunswick","leohayeshigh.nbed.nb.ca","E3a 9p5","1","1","1"

"jsholtes@staff.ednet.ns.ca","None","Grade 6","Joseph","902-441-8206","Elementary School Teacher","20","None","Sholtes","None","None","None","None","both","85","2011-09-15 15:29:22","0","Oxford School, Halifax Regional School Board","6364 North Street","Halifax","None","902-421-6763","Nova Scotia","http://www.oxford.ednet.ns.ca/","B3L 1P6","1","1","1"

"ebreeze@southridge.bc.ca","None","8-12","Emma"," 604 542 1774","Senior School Teacher-Librarian","20-40","None","Breeze","None","None","None","None","both","86","2011-09-15 17:16:05","1","Southridge School","2656 160th Street","Surrey","None","604 535 5056","British Columbia","www.southridge.bc.ca","V3S 0B7","1","1","1"

"doroberts@sd38.bc.ca","None","8-12","Donna","(604)876-1525","Science Teacher","25","General science, physics","Roberts","None","None","None","None","both","87","2011-09-15 17:54:33","1","Hugh Boyd Secondary School","9200 No.1 Road","Richmond","None","(604)668-6615","British Columbia","www2.sd38.bc.ca/boyd-web/boyd_home/home.html","V7E 6L5","1","1","1"

"heather.mcphail@peelsb.com","None","9","Heather","9054510432","Teacher","50","Geography","McPhail","None","None","None","None","both","88","2011-09-15 21:28:36","1","Central Peel Ss","32 Kennedy Road North","Brampton","None","905-451-0432","Ontario","None","L6V1X4","1","1","1"

"barb.biggs@epsb.ca","None","7, 8, 9","Barb","780-466-2976","Curriculum coordinator","up to 140","LA,, SC","Biggs","None","None","None","None","both","89","2011-09-15 23:49:02","0","Avonmore","7835-76 Ave","Edmonton","None","780-466-2976","Alberta","None","T6C 2N1","1","1","1"

"arlene.stevens@peelsb.com","427","secondary","Arlene","905-567-4260","Teacher-Librarian","30","library","Stevens","None","None","None","None","1","90","2011-09-16 09:41:20","0","Rick Hansen Secondary ","1150 Dream Crest Rd","Mississauga","427","905-567-4260","Ontario","http://schools.peelschools.or/sec/rickhansen","L5V 1N6","1","1","1"

"jmcdonald@sd52.bc.ca","238","9 - 12","Josh","250-624-5031","Science Department head","60","Biology, Earth Sciences, Sustainable Development","McDonald","None","Dianne","250-624-5031","Rabel","both","91","2011-09-16 10:35:33","1","Charles Hays Secondary School ","201 Prince Rupert Boulevard","Prince Rupert","None","250-624-5031","British Columbia","http://sd52.bc.ca/chss","V8J 2N7","1","1","1"

"alycia.morehouse@fredericton.ca","None","9-12","Alycia ","506-460-2777","Climate Change Coordinator - City of Fredericton ","To be determined","Various","Morehouse","marg.milburn@gnb.ca","Marg","506-453-3446","Milburn","1","92","2011-09-16 11:23:01","0","Fredericton High School","300 Priestman Street","Fredericton","None","506-453-5435","New Brunswick","http://frederictonhigh.nbed.nb.ca/","E3B 6J8","1","1","1"

"alycia.morehouse@fredericton.ca","None","9-12","Alycia","506-460-2777","Climate Change Coordinator - City of Fredericton","To be determined","Various","Morehouse","marg.milburn@gnb.ca","Marg","506-453-3446","Milburn","1","93","2011-09-16 11:27:29","0","Leo Hayes High School","499 Cliffe Street","Fredericton","None","506-457-6892","New Brunswick","http://leohayeshigh.nbed.nb.ca/"," E3A 9P5","1","1","1"

"dstewart@sd62.bc.ca","None","8","Danita ","250 642 5881","Teacher","30","Science/Math","Stewart","None","None","None","None","both","94","2011-09-16 12:39:31","1","Journey Middle School","6522 Throup Rd PO BOX 100","Sooke","None","250 642 5881","British Columbia","None","V9Z 0E5","1","1","1"

"dstewart@sd62.bc.ca","None","8","Danita ","250 642 5881","Teacher","30","Science/Math","Stewart","None","None","None","None","both","95","2011-09-16 12:42:01","1","Journey Middle School","6522 Throup Rd PO BOX 100","Sooke","None","250 642 5881","British Columbia","None","V9Z 0E5","1","1","1"

"cathie.hunchuk@rbe.sk.ca","None","9-12","Cathie","306-523-3409","Teacher-Librarian","200","all","Hunchuk","kelly.dunham@rbe.sk.ca","Kelly","306-523-3400","Dunham","both","96","2011-09-16 12:46:14","1","Winston Knoll Collegiate","5255 Rochdale Blvd.","Regina","None","306-523-3409","Saskatchewan","http://winstonknoll.rbe.sk.ca","S4X 4M8","1","1","1"

"nkaethler@stgeorges.bc.ca","3749","11","Norm","604-221-1304","Science Teacher","21","Earth Science","Kaethler","None","None","None","None","1","97","2011-09-16 17:49:06","1","St. Georges School","4175 W 29 Ave","Vancouver","3749","604-221-1304","British Columbia","stgeorges.bc.ca","V6S1V1","1","1","1"

"cory.randell@yrdsb.edu.on.ca","None","9-12","Cory ","905 780 7858","Teacher","150","Geography, History, Science","Randell","None","None","None","None","both","98","2011-09-16 19:47:57","1","Richmond Green S.S.","1 William F. Bell Parkway","Richmond Hill","None","905 780 7858","Ontario","www.richmondgreen.ss.yrdsb.edu.on.ca/","L0G 1V0","1","1","1"

"gsingfield@wqsb.qc.ca","2158","7 9","Singfield","819 684 7472","Principal","60","English","George","None","None","None","None","both","99","2011-09-18 17:56:02","1","Symmes-DArcy Mcgee High School","701 du Plateau","Gatineau","2158","819 684 7472","Quebec","http://www.symmesdarcy.com/ ","J9J3G2","1","1","1"

"ewilkins@sd78.bc.ca","None","8-12","Erin","604-869-9971","Counsellor / Educator","30-100","Law / Social Justice / Peace Ed.","Wilkins","None","None","None","None","both","100","2011-09-19 12:12:16","1","Hope Secondary","Box 249","Hope","None","604-869-9971","British Columbia","None","V0X 1L0","1","1","1"

"gendall.jeff@nesd.ca","None","10, 11, 12","Jeffery","306-377-4633","Teacher","30","Science, Biology","Gendall","None","None","None","None","both","101","2011-09-19 13:09:45","0","Gronlid School","1 Railway Avenue","Gronlid","None","306-277-4633","Saskatchewan","http://gronlid.nesd.ca","S0E 0W0","1","1","1"

"rebeirl@scdsb.edu.on.ca","Science","11 and 12","Lloyd","705-566-9605","Science Program Leader / Biology Teacher","25-30","Biology / Science","Rebeiro","None","None","None","None","both","102","2011-09-19 13:27:34","1","St. Charles Colleege","1940 Hawthorne Ave.","Sudbury","Science","705-566-9605","Ontario","None","P3A 1M8","1","1","1"

"tknowlton@summer.com","None","10-12","Trevor","250-770-7650","Teacher","40","Careers / Technology","Knowlton","None","None","None","None","both","103","2011-09-19 13:37:37","0","Summerland Secondary School","9518 Main Street PO Box 2501","Summerland","None","250-770-7650","British Columbia","http://sd67.bc.ca/schools/sss/","V0H 1Z0","1","1","1"

"k.farrow@tvdsb.on.ca","None","all","Katy","519-452-2600","Science Department Head","150","general science, biology, chemistry","Farrow","None","None","None","None","both","104","2011-09-19 13:52:05","1","A B Lucas Secondary School ","656 Tennent Ave","London","None","591-452-2600","Ontario","None","N5X 1L8","1","1","1"

"Julie.Arsenault@dsbn.org","None","Grades 7 8","Julie","905-945-5427","Teacher","80","English, Maths Sciences","Arsenault-Howick","None","None","None","None","both","105","2011-09-19 14:09:04","0","Lakeview Public School","33 Olive Street","Grimsby","None","905-945-5427","Ontario","http://lakeview.dsbn.org/","L3M 2B9","1","1","1"

"tim.randall@nbed.nb.ca","None","12","Tim","(506) 453-8068","Teacher","13","Outdoor Pursuits","Randall","None","None","None","None","both","106","2011-09-19 14:13:27","1","Leo Hayes High School","499 Cliffe street","Fredericton","None","506 453-8068","New Brunswick","LHHS.ca","E3A9P5","1","1","1"

"lynne.campbell@peelsb.com","None","7-12 building (likely 7/8 and maybe 9s","Lynne","9052790575","Teacher Librarian","250+","None","Campbell","None","None","None","None","both","107","2011-09-19 14:58:46","0","The Woodlands School","3225 Erindale Station Rd","Mississauga","None","9052790575","Ontario","None","L5C1Y9","1","1","1"

"cerowlandson@cbe.ab.ca","None","grade 9-12","Carrie","403-817-7720","Senior Education Specialist, Global Learning","60","Global Learning","Rowlandson","None","None","None","None","both","108","2011-09-19 15:07:26","1","The Calgary Board of Education","1221 - 8 St SW","Calgary","None","403-817-7720","Alberta","www.cbe.ab.ca","t2r 0l4","1","1","1"

"nriemann@share.epsb.ca","#2206","9","Nick","780-468-4361","Science Teacher","81","Science","Riemann","None","None","None","None","both","109","2011-09-19 15:15:32","1","A. Blair McPherson","430 Tamarack Green NW","Edmonton","#2206","780-468-4361","Alberta","None","T6T 0J4","1","1","1"

"beth.dasno@kpdsb.ca","None","10-12","Beth ","807-737-7459","Classroom Teacher","26","Envrionmental Science Geography","Dasno","None","None","None","None","both","110","2011-09-19 15:54:53","1","Queen Elizabeth District High School","15 Fair St. Box 548","Sioux Lookout ","None","807-737-3500","Ontario","www.qedhs.com","P8T 1A9","1","1","1"

"mohr.penny@nesd.ca","None","7-12","Penny","306-886-2123","Teacher","50","Math, Science","Mohr","None","None","None","None","both","111","2011-09-19 15:57:24","1","Bjorkdale School","105 Hara Avenue East","Bjorkdale","None","306-886-2123","Saskatchewan","None","S0E 0E0","1","1","1"

"beaulieuplatnar_brigitte@durham.edu.on.ca","None","9 to 12","Brigitte","905-509-1943","Teacher-Librarian","60","Geography and Science","Beaulieu","None","None","None","None","1","112","2011-09-19 16:13:48","1","Ajax High School","105 Bayly Street East","Ajax","1202","905-633-1610","Ontario","http://ajax.ddsbschools.ca/","L1V 6S3","1","1","1"

"brian.steffensen@dpcdsb.org","None","11/12","brian","9055427096","head of geography and environment","30","Environment, Geography, Geology, Astronomy, World Issues","steffensen","None","None","None","None","both","113","2011-09-19 16:28:00","1","st aloysius gonzaga","1800 erin centre blvd","mississauga","None","905 820 8900","Ontario","None","L5R5E2","1","1","1"

"carol.obrien@wrsd.ca","None","9-11","Carol","403 845 3711","Teacher ","25","Math Science","OBrien","None","None","None","None","both","114","2011-09-19 16:41:20","1","West Central High School","5506-50 St.","Rocky Mountain House","None","403 845 3711","Alberta","http://www.wrsd.ca/wchs/dev/index.asp","T4T1W7","1","1","1"

"ben.petruk@epsb.ca","None","7-9","Ben","(780)271-1059","teacher","64","science, social studies, language arts","Petruk","None","None","None","None","both","115","2011-09-19 16:58:37","1","Edith Rogers","8308 Mill Woods Road","Edmonton ","310","(780) 462-3310","Alberta","edithrogers.epsb.ca","T6K 1Y7","1","1","1"

"thunt@sd38.bc.ca","None","8-12","Tamera","604-668-6575"," teacher","50","Science, Biology","Hunt","None","None","None","None","both","116","2011-09-19 17:17:23","0","Matthew McNair Secondary ","9500 No. 4 Road","Richmond","None","604-668-6575","British Columbia","None","V7A 2Y9","1","1","1"

"klessard@hpsd48.ab.ca","None","7-12","Kristen","780-925-3959","Science teacher","35","science/biology","Lessard","None","None","None","None","both","117","2011-09-19 17:36:37","0","Georges P Vanier","5504 Centennail Ave","Donnelly","None","780-925-3959","Alberta","None","T0H 1G0","1","1","1"

"kibbott@sd38.bc.ca","None","10","Karen ","604-668-6430","Teacher","30","Ecology","Ibbott","None","None","None","None","both","118","2011-09-19 17:38:07","0","Cambie Secondary","4151 Jacombs Rd.","Richmond","None","604-668-6430","British Columbia","None","V6V 1N7","1","1","1"

"yap@ess.vancouver.bc.ca","None","6 7","Muriel","604-787-8854","prof science","25 twice","ecosysteme and little world","Grenier","None","None","None","None","both","119","2011-09-19 18:07:51","1","ESS","3020 Heather Str","Vancouver","None","604-876-7211","British Columbia","grenier@ess.vancouver.bc.ca","V5Z 3K3","1","1","1"

"ringrose_michael@durham.edu.on.ca","None","6","michael","905-839-5289","teacher","480","elementary","ringrose","None","None","None","None","both","120","2011-09-19 18:08:29","0","highbush ps","605 strouds lane","pickering","None","905-839-5289","Ontario","None","l1v5m5","1","1","1"

"ringrose_michael@durham.edu.on.ca","None","9","michael","905-839-5289","teacher","500","science","ringrose","None","None","None","None","both","121","2011-09-19 18:11:44","0","Dunbarton hs","655 Sheppard Avenue","pickering","None","(905) 839-1125","Ontario","None"," L1V 1G2","1","1","1"

"donna.vonhagen@hzsd.ca","None","7","Donna","306 835 2128","Teacher","19","All but Tech Lit","Von Hagen","None","None","None","None","2","122","2011-09-19 18:52:44","1","Punnichy Elementary Community School","Box 206","Punnichy","None","306 835 2128","Saskatchewan","None","S0A 3C0","1","1","1"

"gmiller@hpedsb.on.ca","None","11","Gayle","613-968-6944","Science Teacher","45","Biology","Miller","None","None","None","None","both","123","2011-09-19 19:05:55","0","Moira SS","275 Farley Avenue","Belleville","1415","613-968-6944","Ontario","None","K8N 4M2","1","1","1"

"jbutler@hts.on.ca","None","9-12","Jacqueline","416 556 6314","Senior Science Teacher/Environmental Sustainability Coordinator","Maximum number allowable","Environmental Science/Science/Biology","Butler","None","None","None","None","1","124","2011-09-19 19:56:55","1","Holy Trinity School","11300 Bayview Ave","Richmond Hill","None","905 737 1114","Ontario","www.hts.on.ca","L4E 3V1","1","1","1"

"vdmeer.j.r@gmail.com","None","9 - 12","Jan","705-658-5610","Science Teacher","40","Science","Vandermeer","None","None","None","None","both","125","2011-09-19 20:28:55","1","Delores D. Echum Composite School","28 Amisk Street","Moose Factory","None","705-658-5610","Ontario","None","P0L 1W0","1","1","1"

"julia.andreacchi@yrdsb.edu.on.ca","197","Grade 9","Julia","905-967-1045","Teacher-Librarian","150","Science/Biology","Andreacchi","michael.vlachopoulous@yrdsb.edu.on.ca","Michael","905-967-1045","Vlachopoulous","1","126","2011-09-20 08:57:39","1","Sir William Mulock S.S.","705 Columbus Way","Newmarket","197","905-967-1045","Ontario","www.mulock.ca","L3Y 1K6","1","1","1"

"paul_prsa@wecdsb.on.ca","None","9","Paul","519-735-3326","Teacher","25-50","Geography","Prsa","None","None","None","None","both","127","2011-09-20 09:22:23","0","St. Josephs CHS","2425 Clover Ave. ","Windsor","None","519-735-3326","Ontario","None","N8P 2A3","1","1","1"

"alionetti@lbpearson.qc.ca","None","grade 8 and 9","Angela ","514-516-1272","science teacher","30-55","science and technology","Lionetti","None","None","None","None","1","128","2011-09-20 10:05:38","1","Riverdale High School","5060 Sources Blvd","PierrefondsL","None","514-684-9920","Quebec","riverdale@lbpearson.qc.ca","H8Y 3E4","1","1","1"

"teacher.ncs@shaw.ca","169","9-12","Graham","250-754-4512","teacher","55","chemistry, physics, math, general science","de Greeff","None","None","None","None","both","129","2011-09-20 11:21:27","0","Nanaimo Christian School","198 Holland Road","Nanaimo","None","250-754-4512","British Columbia","nanaimochristianschool.ca","V9R 6W2","1","1","1"

"kmccullough@rdcrd.ab.ca","1209","9","Kristie ","403-314-1449","Teacher ","110","LA/SS/Science","McCullough","None","None","None","None","both","130","2011-09-20 11:27:50","1","St. Francis","321 Lindsay Ave,","Red Deer","None","403-314-1449","Alberta","None","T4R 3M1","1","1","1"

"kristin.kopra@ocdsb.ca","None","7/8","Kristin","(613) 830-4634","Teacher","50","English, Math, Environment Club","Kopra-Moreau","None","None","None","None","both","131","2011-09-20 11:33:56","1","Henry Larsen Elementary","1750 Sunview Dr.","Ottawa","None","(613) 830-4634","Ontario","henrylarsenps.ocdsb.ca","K1C5B3","1","1","1"

"dinu.chande@ocdsb.ca","None","12","Dinu","613.239-2424","Business Economics Head","60","Business Economics","Chande","None","None","None","None","both","132","2011-09-20 11:41:23","0","Glebe Collegiate Institute","212 Glebe Avenue","Ottawa, Ontario","None","613-239-2424","Ontario","www.glebeci.ca","K1S 2C9","1","1","1"

"christopher.chow@dpcdsb.org","None","8","Chris","905-793-4861","Teacher","2 Gr. 8 classes - 46 total students","All","Chow","None","None","None","None","both","133","2011-09-20 11:55:49","1","Lester B. Pearson Catholic School","140 Howden Blvd.","Brampton","None","905-793-4861","Ontario","www.dpcdsb.org/LBPEA","L6S2G1","1","1","1"

"jgcarragher@edu.pe.ca","None","10,11,12","Jeff","(902)-394-2005"," Teacher","60 approx","Physics, Science, Computer Science","Carragher","drflynn@edu.pe.ca","Darcy","(909)-675-7480","Flynn","both","134","2011-09-20 12:31:49","0","Bluefield High School","924 Colville Road","Hampshire","None","(902)-675-7480","Prince Edward Island","http://www.edu.pe.ca/bluefield/","C0A 1Y0","1","1","1"

"tyorke@hsd.ca","None","7-9","Tamra","204-326-1757","Lead Science Teacher","50","General Science","Yorke","None","None","None","None","1","135","2011-09-20 13:20:16","0","Blumenort School","Box 100","Blumenort","None","204-362-1757","Manitoba","None","R0A 0C0","1","1","1"

"hastingss@hdsb.ca","None","8","Sarah","(905) 844 \96 961","Intermediate Teacher","~50","Math, Science (Geography)","Hastings","None","None","None","None","both","136","2011-09-20 13:45:45","1","W. H. Morden Public School","180 Morden St.","Oakville","None","(905) 844 \96 961","Ontario","whm.hdsb.ca","L6K 2S3","1","1","1"

"miguel.cruz@htcsd.ca","None","11","Miguel","1(306)693-6744","Teacher","24","Biology","Cruz","None","None","None","None","both","137","2011-09-20 14:01:23","1","Vanier Collegiate Institute","324 Mac Donald St. W.","Moose Jaw","None","1(306)693-6744","Saskatchewan","None","S6H 2V4","1","1","1"

"marcgdube@hotmail.com","None","Secondary IV","Gaiduk","514-596-5460","ESL teacher","60","ESL, social studies","Marc","None","None","None","None","both","138","2011-09-20 14:06:12","1","\c9cole secondaire Marie-Anne","100 Sauv\e9, est","Montreal","None","514-596-5460","Quebec","None","H3L1H1","1","1","1"

"eric.tunney@peelsb.com","329","Secondary","Eric","905.625.7731","Department Head - Global Human Studies","12","Geography","Tunney","None","None","None","None","both","139","2011-09-20 14:40:44","1","Glenforest Secondary School","3575 Fieldgate Drive","Mississauga","329","905.625.7731","Ontario","www.glenforestlibrary.com","L6J6Z2","1","1","1"

"czernia@rainbowschools.ca","None","10/12","andrea","7055075956","teacher","60","civics/science","czerniak","None","None","None","None","both","140","2011-09-20 14:49:54","1","Lively District Secondary School","265 5th Avenue","Lively","None","705.692.3671","Ontario","None","P3Y 1M4","1","1","1"

"stoesz.melissa@brandonsd.mb.ca","None","10, 11, 12","Melissa","204-729-3180","Teacher","125","History, Geography","Stoesz","None","None","None","None","both","141","2011-09-20 15:17:40","0","Ecole secondaire Neelin High School","1020 Brandon Avenue","Brandon","None","204-729-3180","Manitoba","http://www2.brandonsd.mb.ca/neelin/","R7A 1K6","1","1","1"

"None","None","None","None","None","None","None","None","None","None","None","None","None","None","142","2011-09-20 17:55:34","0","None","None","None","None","None","None","None","None","0","0","0"

"blanchc@rainbowschools.ca","None","6","Cindy","705-671-5945","Teacher","50","Science, Social Studies, Mathematics, Language","Blanchard","None","None","None","None","both","143","2011-09-20 17:59:18","1","Chelmsford Public School","121 Charlotte Street","Chelmsford","None","705-671-5945","Ontario","None","p0m1l0","1","1","1"

"wnaka@sd20.bc.ca","None","7","Wayne","250-365-8478","Principal","60","Social Studies","Naka","None","None","None","None","1","144","2011-09-20 18:14:20","1","Kinnaird Elementary School","2273 10th Avenue","Castlegar","None","250-365-8478","British Columbia","www.kinnaird-elementary@wikispaces.com","V1N 2Z8","1","1","1"

"randy.radmanovich@epsb.ca","304","9","Randy","780 434 7914","Assistant Principal","90","Social Studies","Radmanovich","None","None","None","None","both","145","2011-09-21 01:16:12","1","Riverbend Junior High School","14820 53 avenue","Edmonton","304","780 434 7914 ","Alberta","http://riverbend.epsb.ca/Riverbend/Home.html","T6H 4C6","1","1","1"

"wchampion@hotmail.com","None","7/8","Wendy ","604-271-7081","Teacher","25","Humanities/Science","Champion","None","None","None","None","2","146","2011-09-21 10:31:16","1","Choice School","20451 Westminster Hwy","Richmond","None","604-271-7081","British Columbia","None","V6V 1B3","1","1","1"

"beth.allan@aspenview.org","None","7-12","Beth","7803983610","Teacer","60","Language Arts, Computers","Allan","None","None","None","None","both","147","2011-09-21 10:39:12","0","Thorhild Central School","21410 Highway 18","Thorhild","None","7803983610","Alberta","http://www.aspenview.org/tcs/","T0A 3J0","1","1","1"
 "None","None","None","None","None","None","None","None","None","None","None","None","None","None","148","2011-09-21 10:39:12","0","None","None","None","None","None","None","None","None","0","0","0"

"pagecaro@csdecso.on.ca","None","10-11-12","Pageot","2267771956","Teacher","20","History, Politics","Caroline","None","None","None","None","2","149","2011-09-21 14:11:45","0","\c9cole secondaire Notre-Dame","700, rue Bristol","Woodstock","None","2267771956","Ontario","http://csdecso.on.ca/Ecoles/Notre-Dame/accueil.html","N4T 0E4","1","1","1"
 "None","None","None","None","None","None","None","None","None","None","None","None","None","None","150","2011-09-21 14:16:53","0","None","None","None","None","None","None","None","None","0","0","0"

"jstudler@isd21.mb.ca","None","8","Jennifer ","204-322-5576","Science Teacher","30","Math Science","Studler","None","None","None","None","both","151","2011-09-21 14:23:54","1","Warren Elementary School","400 Hanlan Street","Warren","None","204-322-5576","Manitoba","None","R0C3E0","1","1","1"

"esaul@rainbowschools.ca","None","11","Liane","705-566-2280","Environmental Science Teacher","about 35","Science, Biology, Environmental","Esau","None","None","None","None","1","152","2011-09-21 14:39:10","0","Lasalle Secondary School","1545 Kennedy","Greater City of Sudbury","None","705-566-2280","Ontario","None","P3A 2D1","1","1","1"

"cesard@foothills38.ab.ca","None","Grade 6-7, 8-9","Dan","403-938-1400","Teacher","230","Science","Cesar","None","None","None","None","both","153","2011-09-21 20:26:51","1","Heritage Heights School","3156 Hwy 552E RR1","DeWinton ","None","403-938-1400","Alberta","http://heritageheights.fsd38.ab.ca/","T0L 0X0","1","1","1"

"lawrenf@rainbowschools.ca","None","11 12","Fiona ","705-522-2320","Teacher","25","Environmental Science Biology","Lawrence","None","None","None","None","both","154","2011-09-21 22:28:09","1","Lo-Ellen Park Secondary School","275 Loachs Road","Sudbury","None","705-522-2320","Ontario","None","P3E 2P8","1","1","1"
 "None","None","None","None","None","None","None","None","None","None","None","None","None","None","155","2011-09-22 07:02:14","0","None","None","None","None","None","None","None","None","0","0","0"

"hutchis@rainbowschools.ca","None","11","Sarah","705-859-3345","Teacher","28","Aboriginal Studies","Hutchinson","None","None","None","None","both","156","2011-09-22 08:13:00","1","Manitoulin Secondary School","107 Bay Street","MChigeeng","None","705-368-7000","Ontario","mss.rainbowschools.ca","P0P 1G0","1","1","1"

"dollyandkenadams@live.com","309","9-10","Dolly","613-623-3183","teacher","25","English","Adams","None","None","None","None","both","157","2011-09-22 09:58:18","1","Arnprior District Highschool","59 Ottawa St.","Arnprior","309","613-624-7224","Ontario","http://www.renfrew.edu.on.ca/sec/adh/index.htm","K7S 3G8","1","1","1"

"craig.winslow@ncdsb.com","None","8","Craig","905 957 3032","Grade 8 Teacher","30","Science, Math, Language, Phys-Ed, Religion","Winslow","None","None","None","None","both","158","2011-09-22 10:04:43","1","St. Martin Catholic School","186 Margaret St.","Smithville","None","905 957 3032","Ontario","None","L0R 2A0","1","1","1"

"amorin@pvnccdsb.on.ca","None","7-8","Alan","705-324-7445","Teacher","56","Math, Science","Morin","None","None","None","None","both","159","2011-09-22 10:23:10","0","Pope John Paul II","130 Orchard Park Road","Lindsay","None","705-324-7445","Ontario","None","K9V5K1","1","1","1"

"smastromatteo@kcdsb.on.ca","245","senior","steven","807 548 8282","teacher","25","None","mastromatteo","None","None","None","None","1","160","2011-09-22 10:39:08","0","st. thomas aquinas high school","1 poirier drive","kenora","245","807 548 8282","Ontario","None","p9n4g8","1","1","1"

"michael.petinarelis@yrdsb.edu.on.ca","317 or 438","10","Michael"," (905) 727-3107","Department Head of Geography","26","Native and Environmental Studies","Petinarelis","None","None","None","None","both","161","2011-09-22 10:44:23","0","Aurora High School ","155 Wellington Street West ","Aurora ","317 or 438","(905) 727-3107","Ontario","http://www.aurora.hs.yrdsb.edu.on.ca/","L4G 2P4 ","1","1","1"

"monica.date@dsb1.edu.on.ca","136","9-12","Monica","705-647-7336","Teacher/Department Head","60","Geography/Science","Date","None","None","None","None","both","162","2011-09-22 14:07:59","1","Timiskaming District Secondary School","90 Niven St, Box 4050","New Liskeard","136","705-647-7336","Ontario","www.dsb1.edu.on.ca","P0J 1P0","1","1","1"

"slucas@mail.scdsb.on.ca","None","9-11","Syd","705-726-1846","Science Teacher","70","Science, Environmental Science","Lucas","None","None","None","None","both","163","2011-09-22 14:25:23","1","Barrie Central Collegiate","125 Dunlop St.","Barrie","None","705-456-3959","Ontario","cen.scdsb.on.ca","L4N 1A9","1","1","1"

"cgoorbarry@wlauriersb.qc.ca","None","456","Audra","450-612-5523","Teacher","19","all","Goorbarry","None","None","None","None","both","164","2011-09-22 15:20:25","1","Grenville Elementary","184 Principale","Montreal","None","819-242-2852","Quebec","None","J0V 1J0","1","1","1"

"vfranke@sd57.bc.ca ","None","Grade 7 ","Vivian ","250-562-5388 ","Classroom Teacher ","26 "," All ","Franke Olsen ","None","None","None","None","both","165","2011-09-22 17:01:18","0","Pinewood Elementary ","4140 Campbell Avenue ","Prince George ","None","250-562-5388 ","British Columbia","None","V2N 3A9 ","1","1","1"

"m.goldenberg@tldsb.on.ca","None","9,10,11,12","Marcie","705-341-2115","Teacher","38","History, Native Studies","Goldenberg","None","None","None","None","both","166","2011-09-22 23:11:58","1","Lindsay Collegiate and Vocational Institute","260 Kent Street West","Lindsay","640","705-324-3556","Ontario","lcv.tldsb.on.ca","K9V2Z5","1","1","1"

"m.goldenberg@tldsb.on.ca","None","9,10,11,12","Marcie","705-341-2115","Teacher","38","History, Native Studies","Goldenberg","None","None","None","None","1","167","2011-09-22 23:12:54","1","Lindsay Collegiate and Vocational Institute","260 Kent Street West","Lindsay","640","705-324-3556","Ontario","lcv.tldsb.on.ca","K9V2Z5","1","1","1"

"lee-anne.moore@yrdsb.edu.on.ca","None","11","Lee-Anne","905 773-1907","Teacher","30","English Literature","Moore","None","None","None","None","both","168","2011-09-23 00:08:01","1","Aurora High School","155 Wellington St. W","Aurora","None","905 727 3107","Ontario","www.aurora.hs.yrdsb.edu.on.ca","L4G 2P4","1","1","1"

"paldred@lbpsb.qc.ca","None","10","Patricia","514-626-9610","Community and Spiritual Care Animator","60","None","Aldred","None","None","None","None","both","169","2011-09-23 06:42:04","1","Pierrefonds Comprehensive High School","13800 Pierrrefonds Boulevard","Pierrefonds","None","514-626-9610","Quebec","http://pchs.lbpsb.qc.ca","H9A 1A7","1","1","1"

"Marisa.Grancic@hscdsb.on.ca","244","9","Marisa","70-945-5540","Teacher","50","Geography","Grancic","None","None","None","None","both","170","2011-09-23 08:50:55","1","St. Marys College","130 Wellington Street East","Sault Ste. Marie","None","705-942-5540","Ontario","None","P6A 2L5","1","1","1"

"annemarie.hynes@fmcsd.ab.ca","None","9","Anne Marie","780-799-9785","Teacher/Science Leader","30-90","Math and Science","Hynes","None","None","None","None","both","171","2011-09-23 09:17:34","1","Holy Trinity Catholic High School","230 Powder Drive","Fort McMurray","6486","780-792-0012","Alberta","http://holytrinity.fmcschools.ca/","T9K0W8","1","1","1"

"julie.buckle@hwdsb.on.ca","None","12","Julie","905 4070037","Teacher","50","outdoor and environmental edcuation","Buckle","None","None","None","None","both","172","2011-09-23 09:36:54","1","Waterdown District High SChool","215 parkside drive","waterdown","500","905689-6692","Ontario","www.hwdsb.on.ca/waterdown","L0R2H1","1","1","1"

"glawsonc@staff.ednet.ns.ca","None","7-9","Carl","(902) 885 - 277","Science Teacher","42","Science and Tech. Ed.","Glawson","None","None","None","None","both","173","2011-09-23 10:16:35","1","Duncan MacMillan High School","481 Church Point Road","Sheet Harbour","None","(902) 885 - 277","Nova Scotia","http://www.dmhs.ednet.ns.ca/","B0J 3B0","1","1","1"

"R_Tirino@yahoo.com","None","5","Ronald","718 441-5211","teacher","30","special education/early childhood","Tirino","None","None","None","None","both","174","2011-09-23 10:22:23","1","p993","francis lewis blvd and 37 ave ","bayside ny","None","718 441-5211","Alberta","None","11416","1","1","1"

"stephanie.moffatt-watson@ocdsb.ca","234","9 - 12","Stephanie","613 745-9411","teacher-librarian","100","all","Moffatt-Watson","None","None","None","None","both","175","2011-09-23 10:38:09","1","Colonel By Secondary School","2381 Ogilvie Road","Ottawa","234","613 745-9411","Ontario","www.colonelby.com","K1J 7N4","1","1","1"

"sandra.ziemniak@peelsb.com","430","Secondary","Sandra","905-824-1790","Teacher Librarian","90","Science","Ziemniak","None","None","None","None","both","176","2011-09-23 10:54:21","0","Meadowvale SS","6700 Edenwood Drive","Mississauga","None","905-824-1790","Ontario","None","L9T 0T6","1","1","1"

"dsmith3@sd23.bc.ca","6543","Eleven","Derek","250-712-7040","Teacher","62","Social Studies","Smith","None","None","None","None","1","177","2011-09-23 12:33:55","1","Mt. Boucherie Secondary","2751 Cameron Rd.","West Kelowna","None","250-712-7040","British Columbia","http://www.mbs.sd23.bc.ca/","V1Z 2T6","1","1","1"

"sschultz@wolfcreek.ab.ca","5205","10-12","Steve","403-782-6615","Science Teacher Environmental Club Facilitator","60","Science, Chemistry, Environment, ElectroTech","Schultz","None","None","None","None","1","178","2011-09-23 13:04:27","1","Lacombe Composite High School","5628 56th Ave","Lacombe","5205","403-782-6615","Alberta","http://elchs.wolfcreek.ab.ca/lcsweb/","T4L 1G6","1","1","1"

"slkinney@sd79.bc.ca","219","10-12","Sheri","250-746-2235","Teacher-Librarian","30","(submitting for science)","Kinney","None","None","None","None","both","179","2011-09-23 13:10:39","0","Cowichan Secondary School","2652 James Street","Duncan","None","250-746-4435","British Columbia","http://www.sd79.bc.ca/csslibrary/","V9L 2X2","1","1","1"

"edie.mitchell@sait.ca","None","Post-secondary","Edie","4036047888","MacPhail School of Engery ","100","Energy","Mitchell","None","None","None","None","both","180","2011-09-23 15:24:19","1","SAIT Ploytechnic","1301 - 16th Ave NW","Calgary","None","4036047888","Alberta","www.sait.ca","T4C1J9","1","1","1"

"lucy.sardella@dsbn.org","None","9-12","Lucy","905 835 1186","Head of Science. Teacher","20","Biology, Chemistry","Sardella","None","None","N

How to use Google-Fu

connection — Tue, 01 May 2012 15:04:23 +0000

I’ve been asked to write an article about how I build Google dorks. This proves
much harder than actually building Google dorks lols. the real secret is there is
no real secret. All I do is choose a starting point and a goal and fiddle with my
dork until it gets me everything I need.

There is a method to this madness though, I have a structured way of refining by
dork, adding this taking away things, the only way you can really
know how to do this is through experience, but I’ve noticed some tactics that
generally help.

Identifying Web applications

Most web applications are identifiable through things like:
*script names
*path names–Restful/non-restful it all looks the same
*parameters,arguments supplied to script names
*text in the page
*domain

We can use these to find them with Google dorks, you guys already know this! But what
happens when you don’t have a conclusive amount of “Identifiers”? What happens when
you have only one or two details with which to fingerprint the application, or you have
a bunch of them but don’t know how to use all this information effectively. Before
I discuss the tactics you can use in either case, I need to make sure you are aware of the
assumptions I’m basing all this on:

a given web application in this case is identifiable by either—one or more of these—:
Script Names
Script arguments/parameters
Page text
Domain
There is more than on web application of any given type
If a web application is identifiable by a given attribute so are the others of the same type

I agree with you that all these axioms are not always true, all I’m saying is that you will
have greater success with the approaches I detail here if these axioms are satisfied.

Now when you are looking for a given web application, you may not have information on
all the attributes of the web application, you often have very little of them. I’ve
expressed the situations you might possible find your self in, in terms of scenario you
can think of these as states to exist in when you are looking for a web application,
or a basis of all the possible states. What I mean by this is you will either be in
one of these states or a combination of these states at all times!

What you do when you are in either of these states is either find a way to add more information
to your search or find the application with only the information you have. “Make it a game”…

Scenario A: Targeting with Script Names and Naming conventions

In this state you only have information on the script names used by the application. What you
can do is find a way to get to at least one instance of the same application and use the
script names/query strings/domain etc to build a more effective dork
So lets say all you know is that the web application uses a script called “foo.php” how do build
a dork that will give you either helpful results or point you to the exact targets you are looking
for?

I usually start like this:

inurl:"*foo.php"

(you can try it yourself!)
will find exactly the scripts you are looking for.
If you do manage to find the targets you are looking for, pay attention to a couple of things in the results:

domains
arguments,parameters
text in the pages etc

so that you can include it in the search.

Now it may happen that this returns no results at all! What you do then is segment the search term as follows,

inurl:"*foo.php*"

becomes inurl:"/**.php*" + inurl:"foo"

If there is a web application running this script, the dork above will find it! The problem is it will find a whole
lot of other crap too, it will also find URLs where foo is an argument to a script or part of the domain! Point
being it will most definitely find what you are looking for.

you can also try looking for information on scripts named “foo”, by dorking for

intext:"*foo.php*"

You’ll get a bunch of forums and sometimes php.net will show up—most of the time it will— and you’ll be able
to read a lil about scripts named “foo” this will hopefully point you in the right direction if you are really really
desperate!

Scenario B: Targeting with Script Arguments

So in this “state” you have the script arguments and/or parameters, but you have no idea what the scripts are called…

Arguments:

If you only have knowledge of the arguments you can try,

inurl:"*.[script_type]*?*" + inurl:"=foo"

for instance

inurl:"*.php*?*" + inurl:"=foo"

which strictly specifies that that “foo” should appear after a “=” which is after a “?”, and most likely this will
mean foo is an argument—most likely!—.

you can also try a rehash of that dork:

inurl:"/**.[script_type]?*=foo*"

And all you do then is inspect the results you get and look for more fingerprints of the web application.

Scenario C: Targeting with Domain names

All you have is a domain? or a piece of a domain? And you want to find as many possible sites with this piece of information?
we can use two directives here either ‘site’ or ‘inurl’ or both!
if you only know one part of the domain, it can appear in three possible places

major part of the domain [foo.x.x] :

site:foo.*
 inurl:foo.*
 or
 site:foo* | inurl:foo.*
 or
 site:foo* + inurl:foo.*

the middle of the domain [x.foo.x] :

site:*.foo.*
 or
 inurl:*.foo.*

or you can combined them

site:"*.foo.*" + inurl:*.foo.*"
 or
 site:*foo* | inurl:foo | inurl:*foo*

I’m mindlessly overloading parameters here to make sure they are satisfied, this helps!
You will get exactly what your were looking for!

Targeting using Page text

This is probably the most difficult piece of information to start out with for me, because its the most
difficult piece of information to wildcard, the best you can do is simply use

 intext:"foo"
 or
 intext:"~foo"

trying to use synonyms of the word foo to get the right hits
you may also try generalizing a little bit

intext:"*foo*" | intext:"*Foo*"

try thinking about other terms that will likely appear with foo in the text and combined it with your dork

intext:"foo" + intext:"bar" | intext:"foo" | intext:"bar"

this gets the combination of foo and bar in the text or just either one of them. Try to get more information
relating to your target from this as fast as possible so you can start applying dorking techniques
to the query strings ands domains you find

Putting it all together

What I showed you in the previous sections were methods you can use to milk the states in which you have only one
kind of information, but it may happen that you have more than one type or more than one instance of any of the
information types. What you should do is combined these techniques to write a single dork that will find
all the instances of the web application, some examples would be:

( site:*.foo.* | inurl:"*.foo.* ) + inurl:"*bar.php?*=zee"
^                                                    ^
|                                                    |
domain information                        script information
or
(site:*.foo.* | inurl:"*.foo.*" ) + inurl:"*bar.php?*" + ( inurl:"*=zee" | inurl:"*=taf" )
^
|
arguments

There are many other ways you can combine these techniques, you don’t have to know them off by heart though
just make sure you understand how each technique works so you can call on it when need be.

That’s it for me!
Hope you guys enjoyed it!!

Author:Keith k3170 Makan
Site:k3170makan.blogspot.com
Twitter:@k3170makan

you may also want to read: http://k3170makan.blogspot.com/2012/01/science-of-google-dorking.html

HackTalk.net would just like to thank Keith for this amazing article. Keith’s article has been only minimally edited (just to give headers bigger text and to give dorks a different font) but is posted as is.

I hope this article will help out all the HackTalkers out there struggling to get their head around effective Google Dorking and how to use google-fu.

If you have an article you’d like to contribute to HackTalk.net please contact connection.

Keep the hacks up and your head down.

Bulk Site URL Enumeration With GooDork

connection — Tue, 24 Apr 2012 17:11:24 +0000

Yesterday I was tasked with mapping IP/Hostnames to Google Search Results. While I was initially going to use SearchDiggity I decided to use GooDork. I’m super glad I did. This post will discuss how you can use GooDork for Bulk Site URL Enumeration.

When I saw Keith Makan working on GooDork I knew I’d have to give it a try one of these days. While working on a recent assessment I had over 200 IPs/Hostnames which I wanted to run through a Google “site:” search to see what Google had indexed in order to give me some potential jump off points. Someone recommended I use SearchDiggity but it really wasn’t my cup of tea and figured that GooDork might be a better tool for the job. I’m glad I went with GooDork.

Alright let’s jump right into it.
First of all the GooDork banner, while cool, is a bit of a pain in the ass so let’s nuke it to make grepping out data from the results easier later on.
echo "" > Banner

Alright now that that is done make sure you put your IP addresses/hostnames into a file, I named mine “urls.txt”.

Execute the following command:

for i in `cat urls.txt` ; do echo -e "site: $i\n==========\n `python GooDork.py "site:$i"`"; done >> urls && sed 's/step.*//g' urls |sed 's/===================================//g' |sed 's/\[\]//g' |sed 's/Found.*seconds//g' |awk '{if(length($0) > 1) print $0}' |awk '{gsub(/site/,"\nsite");print}'

Alright let’s break this command down a bit for those that aren’t the most BASH savvy.

The first part of the command uses a for loop to grab the IPs/hostnames from the urls.txt file. Inside of the for loop we print out “site : IPaddress/Hostname” and then some equal signs to act as a separator and then pass in the results of GooDork under the line of equal signs. Once we finish with all of the IPs/hostnames in the list we throw them into the urls file and immediately start the magic. First things first we want to get rid of the output from GooDork; this include stuff like what step it is on, the equal sign separation lines GooDork adds in, some brackets GooDork has in the output and the time it took to find the results. Now we use awk to only print lines that aren’t blank and then use awk again to clean up the output by adding a newline before the site: IP/hostname line.

This leads to output like this:

site: http://hacktalk.net
==========
Results:

http://hacktalk.net/profile/%3Farea%3Dstatistics%3Bu%3D350

http://blog.hacktalk.net/tweets-for-2011-12-20/

http://blog.hacktalk.net/tweets-for-2012-01-08/

http://blog.hacktalk.net/xss-helper/

http://hacktalk.net/other/five-fun-facts-in-programming/

http://hacktalk.net/community-projects/

http://hacktalk.net/tutorialsguides/intro-to-defeating-aslr/

http://hacktalk.net/general-discussion-1/fun-in-the-field-my-exciting-social-engineering-tales/

http://hacktalk.net/profile/%3Fu%3D412%3Barea%3Dshowposts

http://blog.hacktalk.net/tag/bitst0rm/

http://hacktalk.net/*nix-support/

http://blog.hacktalk.net/advanced-google-searching-and-google-fu/

http://hacktalk.net/phpjavascript/apache-logs-blocking/

http://hacktalk.net/tutorialsguides/hiding-files-in-ntfs-alternatedatastreams(ads)/

site: http://blog.hacktalk.net
==========
Results:

http://blog.hacktalk.net/tweets-for-2011-12-20/

http://blog.hacktalk.net/tweets-for-2012-01-08/

http://blog.hacktalk.net/xss-helper/

http://blog.hacktalk.net/honda-admits-to-data-breach/

http://blog.hacktalk.net/exploit-db-ettercap-and-more-hacked/

http://blog.hacktalk.net/page/71/

http://blog.hacktalk.net/how-private-is-private-mode/

http://blog.hacktalk.net/fbi-servers-40-search-warrants-in-anonymous-crackdown/

http://blog.hacktalk.net/tweets-for-2012-01-15/

http://blog.hacktalk.net/google-uk-street-view-wi-fi-data-deleted/

http://blog.hacktalk.net/portsmouth-city-council-rapped-for-data-breach/

http://blog.hacktalk.net/tag/bitst0rm/

Now you can also add >> Output.txt to the end of the line to get all this outputted to your file of choice.

I spoke with Keith about this little hack I made using his tool and he really liked the idea of it and said that he is considering implementing this functionality into GooDork and as such this post may very well become useless in the near future but I hope this post helps to illustrate that fact that using fairly basic BASH skills you can take an already awesome tool and make it do something the author of the tool hadn’t even thought of.

If you can make my little one-liner shorter feel free to leave a comment as I’m always looking for ways to get more compact scripts to improve my commandline-fu.

Keep your hacks up and your head down; cya in cyberspace.

Interview with M4D_DA5H of TeamDigi7al

connection — Tue, 24 Apr 2012 02:00:57 +0000

Hey HackTalkers, today’s post is an interview I had with M4D_DA5H of TeamDigi7al. More after the fold

21:10 I’d like to start by saying thanks for taking the time to do this interview
21:10 Not a problem, bro. Thanks for having me!
21:11 So Team Digi7al has recently burst into the scene publicly and has been leaking databases left and right it seems. How long have you guys been a team before these public releases?
21:15 Well, Digi7al is a reformed version of TeamHav0k, with INER7IA as our “leader”. So you add the time that Hav0k was around, plus another 2-3 weeks or so.
21:15 Ah alright that’s pretty cool.
21:16 We think so.
21:16 So what exactly are the motives behind the releases that Digi7al has been dropping? Is the group politically inclined like many other groups releasing things nowadays?
21:18 I think we are somewhat politically inclined to release the things we have. But also, just like everyone else, it is sort of a “Because its fun, and we can” kind of thing. Which if you get right down to it, that’s what everyone does.
21:20 Yea that’s completely understood. One big thing that is asked to the groups that have been sprouting up lately is if they are “part” of Anonymous. Is Digi7al operating under the guise of Anonymous or participating in any of their Ops?
21:23 We do not operate under Anonymous, and to not plan to do so. We are also in contact with them at this time.
21:24 Alright. Now I noticed in your releases that there are quite a few members of the team, are you guys still looking to recruit any new members and, if so, how can they get in contact with Digi7al?
21:27 We are not currently looking for new members of TeamDigi7al. And the best way to connect with us would be on our Twitter page, @TeamDigi7al.
21:28 Alright let’s get down to the knitty gritty; you hit me up earlier with a vulnerability discovered by Ichi, care to talk about it and why that site in particular was being checked for vulns?
21:32 “I guess you could say it was for fun and I was curious to see if a company as famous as US Weekly was vulnerable to XSS.” ~Ichi
21:33 So you recently tweeted @hacktalkblog about a potential for NYT being in the next release, would you care to talk about that?
21:36 NYT’s website was a personal goal of mine, and not really something that we desided to do as a team. I would like play around with whatever I can find, but has since been put on the back burner because of other possibilitys.
21:38 That’s cool. So about Digi7al, I know groups rarely last too long nowadays but it seems you guys are pretty close knit and are constantly churnning out new material. Do you see Digi7al going away any time soon?
21:40 It is sad to see that some teams do not make it to long for one reason or another, but TeamDigi7al is here for the long run.
21:41 Do you have anything you’d like to say to anyone reading this interview? Shoutz? Hate? Random shit that makes no sense?
21:46 I would like to give a shoutout to my friend Marshall Eriksen, my gay Twitter lover @Zer0Pwn, and everyone on TeamDigi7al. I love you all (full homo).
21:47 Haha. Thanks for your time once again and feel free to hit me up on twitter (@hacktalkblog) or irc (irc.freenode.net #hacktalk) any time even if it’s just to shoot the breeze
21:48 Thanks!

US Weekly XSS Vulnerability

As always we welcome any groups, teams, independent hackers, security researchers, or really anyone who has stumbled onto this blog to hit up the HackTalk team and we are willing to interview you, help spread a press release, or even just chat about your latest tool.

I’d like to say thank you to M4D_DA5H and the rest of TeamDigi7al for taking time out to get interviewed and providing some insight into the group.

Keep your hacks up and your head down. Cya in cyberspace

Securing Your Backtrack 5 R2 Install

connection — Sat, 21 Apr 2012 17:25:48 +0000

Today’s post comes to us from HackTalker _flood who wrote in to provide you with the way he secures his Backtrack 5 R2 install for remote access.

The basics of installing Backtrack 5R2 for the purposes of secure remote access.

So you are finally realizing how far behind the times you are and want to experiment with Backtrack. Better late than never With the new release of Backtrack 5 R2, they have not included a VMware image like in previous versions. So you have either two options, boot in live mode and lose changes and settings upon each boot-up cycle, or you can install backtrack to a partition on your machine. Now both have their pros and cons like everything else in the world, however this article is to help those out there who are opting to install to a partition. This is a great option if you want to have a Backtrack box always up and waiting to wreak network havoc with a remote install of backtrack that you can always connect to. I have a Backtrack box up that I access remotely if I want to do some testing and don’t want to boot up an image and go through all the hassle of setting the entire thing up, I just SSH into the box and do what I need to do. This article is help you securely setup your Backtrack box so that it can be accessed remotely from any computer that sits on the same subnet.

I’m assuming that you already have downloaded the ISO file and are booted up ready to install. I also assume that you are booted up and have a dedicated partition picked out for the install. Setting up and preparing for an install are out of the scope of this article.

Boot up into Backtrack. Log in with root/toor

At the prompt, type startx and press enter.

Assuming all goes well with your graphics card, you will soon be in the GUI portion of Backtrack.

Notice on the desktop you will see the install script. Double-click it and it will bring up a pretty straight-forward wizard on how to install to your partition. What I do recommend doing is having at least 15GBs of storage space free to install.

After all goes well, you will want to reboot. So go ahead and do that.

Upon a reboot you should now have a fresh copy of Backtrack installed and you should be sitting at the login prompt.

Go ahead and login with root/toor and then launch the startx command.

Now the fun begins:

Back in the GUI, the first thing we want to do is set up our static networking. (Unless you like guessing what IP address this box will have every time you do a reboot).

Open a terminal and launch this command:
#ifconfig -a
This should list all your networking interfaces. In my case, my box has a single ethernet port which correlates to the eth0 interface.

Your setup should be similar. Now to set static IP address scheming, (fill in the xxx with whatever subnet and IP address you want the box to have) do the following:
#pico /etc/network/interfaces auto eth0 iface eth0 inet static address 192.168.xxx.xxx netmask 255.255.255.0 gateway 192.168.xxx.xxx
Close out and save this file and then do the following:
#pico /etc/resolv.conf nameserver 192.168.xxx.xxx nameserver 192.168.xxx.xxx nameserver 208.67.222.222 nameserver 208.67.220.220
Close out and save this file

Change your password:

Assuming we have a backtrack box that is going to be on constantly you will want to change the password pretty quickly before you setup SSHD on the box. We don’t want anyone else to login to the box. To change the password do the following
#passwd root
Enter new complex, randomly generated password

Remote Access:

So now we want to setup remote command line access to our newly installed Backtrack box, but something I usually like to do is change the default SSH port to something other than 22 just for kicks.
#pico /etc/ssh/sshd_config
find the port line where it says 22 and change it to 800

Save the file and close out.

Now run the following command:
#sshd-generate
This will generate ssh keypairs and then
#/etc/init.d/ssh start
This will start up the sshd server and you should now be able to launch putty (or another ssh client) on another computer on the same subnet and connect to the Backtrack box at port 800.

For sshd to survive a reboot
#update-rc.d -f ssh defaults
This will bring sshd after a reboot.

Updating the box

It is important to upgrade the Backtrack box so it is most current and that you don’t get rooted
#apt-get update #apt-get upgrade #apt-get dist-upgrade

Firewall rules:

So the Ubuntu distro that Backtrack is based off of comes with iptables which is a stateful firewall, you can check out current rules by doing a
#iptables -L
This should list nothing in each of the three sections, INPUT, FORWARD, OUTPUT.
These are basically all inbound connections, forwarded ports if the box was a router and outbound ports/connections. This is not a tutorial for using iptables, just google around for some, there are plenty, but this should get you on the right track as far as using them.

We basically want to leave output alone as we want to use all the goodies built into backtrack to be able to connect to any target we want, however we do want to limit inbound connections to only those we choose. Right off the bat, there should be only two inbound ports we would want, port 800 for remote access to our box, and a metasploit inbound port. Now this is not a metasploit tutorial but if we are going to run a metasploit exploit with a reverse payload to connect back to our backtrack machine, we want it to be able to get through and connect to our backtrack box. So we are going to create two inbound rules, one for inbound ssh on port 800 and one for port 443 which most outbound firewalls will allow for legitimate traffic, so it’s considered a good port to use for reverse payloads.
#iptables -P FOWARD DROP
this will set all forwarding packets to be dropped, we don’t want anything going anywhere we don’t want.
#iptables -I INPUT 1 -i lo -j ACCEPT
this sets the loopback interface to accept any packets, this is necessary/helpful if we run any local service ports that require the loopback/localhost adapter to run, especially if we want to run a spoofed dns/webserver we can run it off loopback/localhost to test it and it will work.

#iptables -I INPUT 2 -m state --state RELATED,ESTABLISHED -j ACCEPT
this rule lets all related/already established packets come inbound, for instance say we shoot out a ping to our default gateway, this will let the response back from the gateway to our backtrack box, or else it will get dropped by the iptables firewall

#iptables -I INPUT 3 -i eth0 -p tcp --dport 800 -m state --state NEW,ESTABLISHED -j ACCEPT
this rule allows all traffic from tcp port 800 to come into interface eth0, this is the rule that lets our ssh traffic into the backtrack box so we can remotely control it.

#iptables -I INPUT 4 -i eth0 -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
this rule allows all traffic from tcp port 443 to come into interface eth0, this is the rule that lets our reverse payload to traverse firewalls back to our backtrack box so we can hopefully gain a reverse shell on a remotely exploited machine via metasploit (out of scope of this article).

#iptables -A INPUT -j DROP
this rule drops every other packet that is destined for our backtrack box. this will help to make sure that our backtrack box doesn’t get compromised it only allows what we want, 800 and 443, everything else will get dropped

Side Note:

The rules above will allow any inbound access to ports 800 and 443. We can further lock this down by changing the rules to allow inbound access on those ports from specific IP addresses. For instance, say you only want to connect to this Backtrack box from the IP address 192.168.1.100, you would modify the 3rd rule to this:
#iptables -I INPUT 3 -i eth0 -p tcp -s 192.168.1.100 --dport 800 -m state --state NEW,ESTABLISHED -j ACCEPT

The same applies to the 443 rule, let’s say we are only attacking the IP address 192.168.1.50, then we would only want to allow 443 inbound from that IP address so we would modify this rule to be:
#iptables -I INPUT 3 -i eth0 -p tcp -s 192.168.1.50 --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT

So you think you’re all set with the iptable rules until you do a reboot and guess what, they are gone upon a reboot, so you have to make these rules persistent across reboots, so you will need to create two scripts:

#pico /etc/network/if-pre-up.d/iptablesload

#!/bin/sh
iptables-restore < /etc/iptables.rules
exit 0

Save file and close and do the following:

#pico /etc/network/if-post-down/iptablessave

#!/bin/sh
iptables-save -c > /etc/iptables.rules
If [ -f /etc/iptables.downrules ] ; then
iptables-restore < /etc/iptables.downrules
fi
exit 0

Save the file and close.

Now do the following commands to make the scripts executable:
#chmod +x /etc/network/if-post-down.d/iptablessave #chmod +x /etc/network/if-pre-up.d/iptablesload

This will put a script in the /etc/network/if-post-down.d and /etc/network/if-pre-up.d directories that will save and restore the iptables rules that are created so they last and survive on a reboot.

Security on ssh:

So you think you’re all set, but you want to make sure no one roots you What you can do is check out the following log file /var/log/auth.log.
Run the command
#cat /var/log/auth.log | grep sshd

This will show all sshd logins coming into your backtrack box and will show you what login names were tried and also which IP addresses they were coming from. If you have any remote syslog boxes it might be wise to install syslog-ng and ship these logs over to your remote syslog box, but that is out of the scope of this article.

That’s primarily it, you should now have a pretty secure/locked down Backtrack box that is ready for you to remotely access it and start trouble.

_flood

I’d like to thank _flood for submitting this post and encourage all of you HackTalkers to submit any articles you may have written and I’ll gladly post them on the blog and link to any website you’d like.
If you would like to ask _flood any questions or just meet the author of this post, head on over to irc.freenode.org #hacktalk and you can typically find _flood there.

As always, Cya In Cyberspace.