Recent Twats
- You Can't Charge Me With Downloading Porn Because You Can't Copyright Obscenity http://t.co/bMQmsKV4
- @PatrickElOso Today I don't feel like doing anything I just wanna lay in my bed Don't feel like picking up my phone, so leave a message...
- RT @RealGilbert: The RIP Eddie Murphy reports are false! The cops found a dead black guy and just assumed it was either Eddie Murphy or ...
Archives
- January 2012
- December 2011
- November 2011
- October 2011
- September 2011
- August 2011
- July 2011
- June 2011
- May 2011
- April 2011
- February 2011
- January 2011
- December 2010
- November 2010
- October 2010
- September 2010
- August 2010
- July 2010
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
Category Archives: hardware & software
Assault on PHP Applications
This is a must read if you’re a pen tester or PHP developer. Some great things on PHP security including file include, upload vulnerabilities, command execution, and of course SQL injection… Assault on PHP Applications Blackhat Forums Author: Aelphaeis Mangarae … Continue reading
Posted in hardware & software, security
1 Comment
Setting up Windows Honey Pot Shares
I recently setup a honeypot share on a Windows server. I put some very “interesting” files and directories in there (financial information, PII etc) and then enabled audit logging in Windows. There’s a very powerful but mostly unknown Windows tool … Continue reading
Posted in microsoft, security
Leave a comment
Reduce ssh brute force attempts…
In case you’re still running sshd on port 22 (which you should change!) you’re probably getting hammered with brute force attempts. Take a peak at /var/log/secure or /var/log/wtmp or the “last” command and have a looksy. There’s a great little application … Continue reading
Penetration Testing & Capture the Flag
Penetration Testing Nowadays penetration testing is where it’s at. Whether trying to learn security, becoming a white hat, or consulting it’s a must have skill. However, it can be intimidating on where to start. Besides picking up books the next … Continue reading
Posted in forensics, hardware & software, news
1 Comment
Malware Analyzers Part deuce
Several weeks ago I posted about different free malware analyzers (sandbox environments). I’ve stumbled across another free tool from Mandiant which is their Red Curtain offering. Red Curtain will scan a given local directory or drive and analyze each file … Continue reading
Posted in hardware & software, malware
Leave a comment
Google Hacking
Google hacking has been around for a while but unfortunately it is still very relevant. Basically because the Google crawler is so powerful you can use this to your advantage to discover sensitive data. You can find password files as … Continue reading
Posted in google
Leave a comment
UNetbootin: Live CDs to thumb drives made easy
I’ve always found it a major pain to correctly install a Live CD on a thumb drive. You want to do this because of SPEED. Have you tried running Backtrack from a thumb drive? Load times are incredible and there’s … Continue reading
Unlock iPhone: Run unofficial applications
I just came across these steps in Wired to unlock your iPhone: 1. Update iTunes and Iphone app installe 2. Download Pwnage Tool 3. Select “simple mode” and install Cydia *If anything goes wrong you can reverse the process using … Continue reading
Posted in apple
Leave a comment
Google Wave
At the recent Google I/O conference in San Francisco the next big Google project was announced, Google Wave. Imagine being able to instant message and collaborate with multiple people in real time. Now chat rooms have been around for a … Continue reading
SSL Strip
There’s a nice tool that will perform SSL man in the middle attacks. In layman’s terms this means when this tool is run on a gateway it will create a clear text HTTP stream on the network (that you can … Continue reading