HD Moore has done it again and is adding payloads for the iPhone. Some of these payloads include the ability to make a victims iPhone vibrate or even better..root shell access! HD is also putting in recent exploits like the like the one that exploits the Perl Compatible Regular Expressions (PCRE) library vulnerability. HD goes […]
Metasploit 3 Adds iPhone Hacking Tools Read More »
I finally had the time to finish a nice help document which describes how to install a VMware virtual network to run the De-ICE Penetration Testing LiveCD’s. So why did I do all of this? For the longest time I have been looking for a way to create a training type program for a small
VMware Documentation for De-ICE Pen Test LiveCD’s Released Read More »
So I have been tinkering around with Gentoo Linux and have been trying to get it up and running on a Dell D620. My first mistake was using genkernel instead of manually configuring the kernel (as recommended by Gentoo). Genkernel seems to install all kinds of extra stuff that you don’t need. My problem is
Gentoo Installation Woes Read More »
So I just got a PS3 and have been looking at all the cool things you can do with it…since you can run Linux on a PS3 (Yellowdog, Gentoo, etc..). One of the things you can turn your PS3 into is a PVR and record TV shows. There is a great site that shows you
Found a good article today on how to properly defend against brute force ssh attacks. I knew that iptables was one method to do it but there are many others. Take a look at this article for methods like: * Strong passwords * RSA authentication * Using ‘iptables’ to block the attack * Using the
Defending against brute force ssh attacks Read More »
Yes..it’s been awhile! Seems that life and career got in the way! I will be posting more in the very near future..lots of updates from Blackhat and Defcon that I attended in Vegas as well as some new projects I am hoping to get more involved with. Also looking at expanding the site and changing
Long time…no updates! Read More »
Looks like XSS is becoming the latest threat vector. No surprise here. Webmasters…keep your sites patched! Cross-site scripting the top security risk – Network World
Cross-site scripting the top security risk Read More »
Here is a good article on how to manage your shell history. For those of you that don’t know, all the commands that you enter into a Bash shell (default shell on many Linux distros) are stored in a history file. This is to allow a user to use previous executed commands. The problem with
Shell game: Managing Bash command history Read More »
Bruce Schneier posted a good article on how a company is retrieving data from old cell phones. Goes to show how easy it is to recover this data. Scary to think that this company found some interesting data including contracts, bank accounts, passwords, and even prescriptions. Schneier on Security: Recovering Data from Cell Phones
Recovering Data from Cell Phones Read More »
Ahh..netcat..how useful you are to me! If you don’t use netcat for pen testing you absolutly have to. Good article below on how you can use netcat. Some examples: * Outbound or inbound connections, TCP or UDP, to or from any ports * Full DNS forward/reverse checking, with appropriate warnings * Ability to use any
Netcat – The TCP/IP Swiss Army Knife Read More »
