Os Detection Techniques Background information This is a list, with explanations for all the active and passive techniques I can find for remoteoperating system identification – there is a massive list of sources at the end. Background information: techniques Active fingerprinting – Active fingerprinting is the process of transmitting packets Read more…
I have decided to start studying towards a CISSP and / or an OSCP, as part of that I saw an excellent blog post recommending to go through a lot of CTF challenges from vulnhub.com. These are my Kioptrix walkthrough guides / findings and observations for each of the first Read more…
This is a WordPress mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. (wikipedia) Read more…
Malware detection on Plesk systems using maldet and clamav Linux Malware Detect (LMD) is a malware scanner for Linux released under the GNU GPLv2 license, that is designed around the threats faced in shared hosted environments. It uses threat data from network edge intrusion detection systems to extract malware that Read more…
Metasploit for website pentest using wmap. Wmap is a web application scanner that runs within metasploit. We can use wmap to get an outline of the application we are probing. Start dvwa inside vagrant In this tutorial I’ll be using dvwa in vagrant as my target If you dont have Read more…
A comparison of service-oriented architecture and frameworks IntroductionPapazoglou, (2003) organised SOA in four architectural layers: Service Foundations, Service Composition, Service Management and Service Engineering and outlined a host of technologies that could be utilised when developing and deploying an SOA system to overcome the challenges of a distributed enterprise system, Read more…
Continuing on from my original metasploit beginners tutorial, here is a slightly more advanced Metasploit tutorial on how to use metasploit to scan for vulnerabilities. The outcome of this tutorial will be to gather information on a host and its running services and their versions and vulnerabilities, rather than to Read more…
This post is a combination of previous posts about privacy settings in mac and ios. Safari do not track: Safari gives users the option to enable the ‘do not track’ feature. It’s easy to enable: safari > preferences > privacy > Ask websites not to track me Safari prevent cross-site Read more…
This is a burpsuite beginners tutorial. Burpsuite is a collection of tools, written in Java used to perform various network security related tasks. Burpsuite can be used as a basic http proxy to intercept traffic for analysis and playback, a web application security scanner, a tool to perform automated attacks Read more…
There are a couple of things you need for mining monero in osx using xmring: 1) A monero wallet (get one from mymonero.com) 2) Homebrew (brew.sh) mining monero in osx using xmring: dependencies You have to make sure you have homebrew installed (so that you can install the xmrig dependencies), Read more…
Kali linux wpa_supplicant cli config. To setup a wifi connection using wpa_supplicant on the cli in kali, first you have to bring up your network interface ifconfig wlan0 up Next, we create a config file wpa_passphrase ‘router_ssid’ ‘wifi_password’ > /etc/wpa_supplicant.conf We need to edit the config file and remove some Read more…
This post has a collection of Linux commands for networking. There are basic linux network commands, advanced linux network commands and some centos network configuration commands, but I’ve tried to keep it to the point. jump to:Linux Network ConfigurationBasic Linux Network CommandsAdvanced Linux Network Commands Linux commands for Networking Configuration Read more…
Pihole on a raspberry pi – making a network wide advert blocker with a raspberry pi. I have a router using dnsmasq with adblocking setup on my router. I also have a raspberry pi (which was being used as a retropi machine). I also have a Pizero. My retropi setup Read more…
This post will explain ddwrt dnsmasq caching dns server configuration Using a ddwrt dnsmasq caching dns server lets machines in your LAN resolve DNS from a machine inside your local network, ultimately reducing the time to resolve an IP address from a domain name. If there is a result in Read more…
Automatic cron updates with yum-cron on centos Update: I made a post on installing and configuring yum-cron in centos I have a virtual machine on my esxi box running centos 7. I dont log in all that much, as most of the operations that are run are automatic (eg polling Read more…
This post will show you how to setup dnsmasq in order to serve dns requests for (multiple) internal domains – using dnsmasq as an internal DNS server. Using this setup you can also add block lists so that your entire network doesnt get adverts :D eg you can serve a Read more…
Multiple ip addresses on one physical NIC. I have a gigabyte brix running esxi to host a few virtualised servers. I have one server for my web development. I have multiple apps that all require running on port 80. I have one physical network port. Fortunately, you can have multiple Read more…
What is an sql injection attack? All websites process data entered by users. An input-validation attack is when unexpected user input is processed by a web server or database and an error occurs. What is an sql injection attack? “An SQL Injection Attack (SQLIA) occurs when an attacker attempts to Read more…
Linux / OSx commandline network host discovery This post contains Various ways to find the hosts in your network using commanline commands. For the following, it is assumed that: 192.168.1.0/24 is your whole network 192.168.1.255 is your broadcast address Replace with your own values (you can find these with ifconfig) Read more…
4 types of service in an SOA system. Business services Domain services Integration services Foundation / Utility services Business Services Provide high-level functionality Provides abstraction of the interface Provides integration of the layers below Breaks the direct dependance between business processes and existing systems Provides a virtual implementation Provides business processes Read more…
This is a short tutorial showing how to setup wordpress and cloudflare flexible ssl. Cloudflare offer a service called ‘flexible ssl’ this means that cloudflare encrypts your content between the end-user and cloudflare, but the connection between cloudflare and your site is not encrypted. This is a good solution if Read more…
This is a basic openvas tutorial for beginners. I will explain a little of how to use openvas web ui to perform a test of your systems. It will give you the basic options for using metasploit msfconsole to run an openvas vulnerability scan. You will also learn how to Read more…
MetaSploit tutorial for beginners This MetaSploit tutorial for beginners is to be a starting guide for how to use MetaSploit. It assumes that you already have MetaSploit installed, or that you are running Kali / backtrack Linux. The basic concept of how to use MetaSploit is as follows:– Run msfconsole Read more…
RCA 6226 Aeropessure Type microphone The âAeropressureâ was a rugged radio announcing and public address microphone designed for on-location use, featuring exceptional wind noise suppression. During its some five decades of microphone production, probably no other single manufacturer came close to the technical engineering expertise, development innovation, and product line Read more…
I had an issue with people trying to send iMessages to my phone number. for some reason ios7 had set iMessages to only send to my email address and not to my phone number. to fix it, I had to get the help from my boss at work :) its Read more…
Subnetting class C networks Benefits of Subnetting: Reduced Network Traffic Optimised Network Performance – as a result of reduced traffic Simplified management Facilitated spanning of large geographical distances How to create subnets: Determine the number of required network ID’s one for each subnet one for each WAN connection Determine Read more…
Ubuntuforums.org has been hacked and all of the email addresses, usernames and passwords have been taken. there are 1.8 million users on that forum :| from the announcement: There has been a security breach on the Ubuntu Forums. The Canonical IS team is working hard as we speak to restore Read more…
this site from google will tell you if your dns servers are ready for ipv6. if they arent then you could add googles public dns [8.8.8.8] or the opendns ip address [208.67.222.222] see this post for instructions on how to add opendns to your mac and this post for instructions Read more…
This post will list the various ways to get pdf ebooks (or anything in a pdf) on to your iphone / ipad / ipad mini there are a few ways to do it: if its just one or two pdf files then email it to an email address thats configured Read more…
When trying to login you get a message similar to cannot verify login with facetime or messages on osx. warning: this is quite a complex set of instructions. In the end I ended up creating a new user account on my mac and transferring my documents to the new user Read more…
How to sync imessages between iphone ipad and mac osx Once you have setup your mac and iOS device to use the same method to send and receive iMessages then anyone who sends you an iMessage (ether to your phone number or email address) will have that message delivered to Read more…
This post will show you how to sync your LinkedIn contacts with your iPhone addressbook. Goto the LinkedIn app Goto the ‘you’ section Click the gear Click on ‘download connections’ You are done :)
This post will show you how to sync all of your Facebook contacts details with the contacts in your iPhones addressbook. It will only add the information that your Facebook contacts have allowed to be synced, so if bob or joe don’t want you having their new cell number or Read more…
This one is pretty cool :) in chrome or safari on osx simply highlight the address you want to find a map for right click the highlighted address click on ‘show address in google maps’
I have a western digital mybook word NAS. Using the afp protocol file transfers were very slow. I knew there had to be a way to make your AFP NAS more responsive. It seems slow when you try to connect to it from a mac using AFP, but its lightning Read more…
This one is cool: Quickly add any url from any app to safari reading list! highlight a url (in the address-bar in chrome or firefox) goto the services menu (appname > services) you will find a link for ‘add to reading list’ click it :) In chrome you can highlight Read more…
In ios5 and above you can change the default email account – allowing you to send emails from a specified account. To do this goto: settings > mail, calendars and contacts scroll down and find ‘Default Account’ select it, and you are presented with a list of your configured mail Read more…
This will show you how to change the from: address when you send an email in iphone mail.app compose a new mail click on the address in the from: field it will now give you a list of the configured accounts pick the account you want to send form
This will show you how to remove the search box from safari and perform your searches from the addressbar, like you do in google chrome its really easy, just go to https://github.com/rs/SafariOmnibar and download their installer.