We are definitely starting to get into the crunch time for wedding preparation though I think we are still slightly ahead of the curve. We have chosen our caterer, DJ, venues, hotel rooms, and photographer. So we really only need to do the following to be ready for the big day:

• Finalize colors
• Choose a playlist for the DJ (I Think electric slide and chicken dance may be banned)
• Choose a florist and floral design. ( All Shelby J )
• Choose table centerpieces
• Start to register at places for wedding gifts (Cabelas HAHA, She would kill me)
• Book a Honey moon
• Make wedding invitations
• Seating Chart
• Wedding Dress
• Marriage license (Can’t do more than 60 days in advance)
• Bachelor and Bachelorette parties
• Meet with the priest to see what is required to get married in the Catholic Church.

The good thing is with that list we will be crossing one more item off the list tonight, though most likely adding a few as well. Tonight we will be meeting with Father David at St. Peters Church in Elizabethtown PA to discuss the process of using the Catholic Church and filling out paper work. This may be interesting.

Rooms are held up to 30 days prior to the wedding. Meaning you must book before August 31st of 2012.

Hotels:

Hilton Garden Inn Hershey | website

550 East Main Street, Hershey, PA 17036 | approx 7.4 miles from reception

(717) 566-9292

Cost $149.00 per night. We have 15 rooms for 10/5/12 and 30 for 10/6/12 (same for standard, double, queen or king)

When booking use code KLW.

Days Inn Hershey | website

350 West Chocolate Avenue, Hershey, PA | approx 8.4 miles from the reception.

(717) 534-2162

Cost $112.49  per night. We have 5 rooms for 10/5/12 and 15  for 10/6/12. Rooms are double queen.

When booking say it is for the Koons & LaSalvia wedding.

Sheraton Harrisburg Hershey Hotel | website

4650 Lindle Road, Harrisburg, PA | approx 9.3 miles from the reception.

1(800)-323-3535

Cost $119.00 per night. We have 5 rooms for 10/5/12 and 20  for 10/6/12.

When booking say it is for the Koons & LaSalvia wedding. There will be a special website provided by then for this closer to the date.

Moonstone Manor (formerly Conewago Manor Inn) | website

The rate is $200.00 a night and is by special invite only. If you are interested in staying with us let us know. Three of 8 rooms are possibly spoken for already.

Hopefully we will have some pics up soon.

Wish me luck I am half way through the list and have to make a decision by tonight.

We talked for a few days and finally found a date and time that our schedules allowed us to meet (February 7th 2009). Our first date was at Bube’s Brewery in Mount Joy PA. I got there a bit early since I lived not far from there and text-ed Shelby to see where she was. I got a message from her back saying she does not have texting and not to ever text her again, also that she was going to be a few minutes late.

Some might say she fell head over heals for me. Though I know she just tripped on her way in . Lunch went OK and afterwards I asked if we could hang out again. She said she was real busy and we had to see. I was persistent and thankfully so. My persistence paid off and we been together ever since.

A little over two years ago I met the girl of my life, not knowing at the time she would one day be my wife.

Social Engineering: The Ring

One day while out shopping she found the ring she would later on wear. The only issue I had was it was more then what I planned on. Though how could you say no to the one you love. I did not let her know at the time and continued to ask what she thought of other rings making sure her heart was definitely set on that one.
Then one evening as I was getting ready to leave work I called her letting her know I was going to stop at the store to get some water. She told me since I did not feel well that she would stop at the store for me and meet me at home. I figured this be the best opportunity to surprise her. Though I was super ill I ran to the store and bought the ring knowing that she would stop by there on the way to get the water to look at it like she normally did. I got to the store and purchased the ring to find that this is a one of a kind ring with no others available like it from that store. Nor did any other stores have one. I spent the last several months visiting jewelers showing them pictures of the ring and asking if they had one like it, all of them were amazed by the design. Once I heard this I knew she would call me tonight to let me know that the ring was gone. Like clockwork the call came through and you can hear the disappointment in her voice.

Phase 1 was completed she had no idea that I bought it for her or what was to come.

DNS Poisoning and ARP Spoofing: The Proposal

Before continuing to read, for those non technical people out there or in the event that the owner of Hip2Save ever reads this, NOTHING malicious was done to their site and all the below took place on my own personal network using our own personal equipment.

What is a better way to say I love you then poisoning the one’s you love DNS to send her to a false site that looks like the original site but has a personal deal, poem and directions. I decided to use the site www.hip2save.com. The site offers daily deals and she loves to visit the site and get free / discounted products, I know we will have to work on her giving away her info so freely. I used wget –m to download a mirrored copy of their site to my apache directory on my backtrack box and altered the page to look like the below image:

That was the easy part. The next part was carrying out the actual spoof and poisoning. Remember it is a race condition to see what DNS server answers first. So I cheated here and set my firewall to my malicious DNS server that I installed on my backtrack so I knew I would win. When I think about it, it would have been easier to setup my own zones for the sites I wanted to hijack, but where would the challenge be there. With that in place I used Dsniff’s arpspoof to take care of the arp s this did not take out my wireless switch like ettercap did. Then I used ettercap –T –q –P dns_spoof (after editing the etter.dns file of course). I also enabled IP forwarding so the packets could be forwarded out and I used my DNS server to handle all the non hijacked sites. The above took several days of testing and researching before I knew without a doubt that it would all work.

Exploitation: Popping the question

Several hours after she got home from work we were both sitting on the couches watching TV and surfing the net when she said “what is this” and started to cry (Happy tears). I was like what’s wrong as I got off the couch and approached her to see what she was talking about (already knowing).  I pulled the ring out and asked her to marry me while getting down on one knee.
She said: Yes and was extremely impressed with my idea for the proposal and even though she doesn’t know anything about hacking she asked that I explain to her how I did it.