Spidering a web application using website crawler software in kali linux There are lots of tools to spider a web application (an companies which are based on this tech, eg google) short list of tools to help you spider a site (eg for creating a sitemap for SEO, or recon Read more…
This is a WordPress mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. (wikipedia) Read more…
Metasploit for website pentest using wmap. Wmap is a web application scanner that runs within metasploit. We can use wmap to get an outline of the application we are probing. Start dvwa inside vagrant In this tutorial I’ll be using dvwa in vagrant as my target If you dont have Read more…
Metasploitable background: What is metasploitable? “Metasploitable is a Virtual Machine that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit.” Why do we need metasploitable? One of the problems you encounter when Read more…
This follows on from the previous laravel gist. it covers generating mdels, views and bootstrapping for controllers for pre-existing database tables.Useful if you have a few hundred tables and relationships in an existing database. cd ~/git brew install nmp brew install nodejs curl -sS https://getcomposer.org/installer | php composer global require Read more…
This is a simple Vega scanner tutorial for beginners on XSS scanning with vega scanner in kali linux. VEGA is an open-source web security scanner, written in java with a GUI. you can scan for XSS issues and can also scan for SQL injection vulnerabilities. In this short introduction tutorial Read more…
There are a couple of things you need for mining monero in osx using xmring: 1) A monero wallet (get one from mymonero.com) 2) Homebrew (brew.sh) mining monero in osx using xmring: dependencies You have to make sure you have homebrew installed (so that you can install the xmrig dependencies), Read more…
Blackarch on the chuwi hi10pro – prereq’s a usb hub a usb flashdrive a usb mouse a usb wifi adaptor (at least for the initial setup) Download blackarch from https://blackarch.org/downloads.html write to a usb drive (I used Etcher to do this part) Plug into chuwi and boot – Press F7 Read more…
After trying Kali on the hi10 pro (its totally not ready for the bay-trail / cherry-trail platforms) I decided to give ubuntu on the chuwi hi10 pro a go (after hearing good things about their support) This is a short tutorial on dual booting ubuntu linux and windows10 on the Read more…
This is a short tutorial on dual booting windows and Kali on the Chuwi Hi10 Pro. Updated for Kali 2018.4 When I first wrote this post I seriously wouldn’t have recommended Kali on the Chuwi Hi10 Pro as an every-day system – Starting with 2018.01 and the 4.14 kernel it Read more…
This post has a collection of Linux commands for networking. There are basic linux network commands, advanced linux network commands and some centos network configuration commands, but I’ve tried to keep it to the point. jump to:Linux Network ConfigurationBasic Linux Network CommandsAdvanced Linux Network Commands Linux commands for Networking Configuration Read more…
Configuring free ssl certs with letsencrypt in centos Using letsencrypt in centos requires a few modifications to your centos before you can run the letsencrypt client. The setup for vhosts in centos is different from the setup in debian based distros. This is how I modified my centos install to Read more…
How to copy a file to multiple locations in linux. cp doesnt let you copy one file to multiple locations; There are a few ways to do this, but the one I always return to uses find To copy the contents of a directory to multiple other directories find /location/to/folder Read more…
This post is a wapiti tutorial. You’ll find various wapiti options, how to import wapiti scan results into metasploit and how you can disable wapiti modules to speed up your scans. A basic one-liner command to get you started would be: More about the command line arguments: These basics will Read more…
This is a basic plecost tutorial. Plecost is a commandline utility that will scan your wordpress host and identify lots of information leaks that could potentially help crackers breaking in to your site. There is some information at iniqua labs, but its a little difficult to get to grips with. Read more…
Since I released my first public wordpress theme (I have made lots of themes over the years, but have never released any as open-source) I decided I would share the build process for multiloquent theme – just incase anyone wanted to know. the tools I use: 1) eclipse (zend-php-eclipse) 2) Read more…
This post will show you how to install phpunit in centos using pear or composer. I prefer using composer as its mega easy to add lots of cool stuff and keep it all updated. Install phpunit in centos with composer. Firstly, If you don’t have composer, then you’ll need to Read more…
mc for mac osx! GNU Midnight Commander – mc – is an excellent orthodox text mode file manager. mc runs in your console, and has mouse support. It also has support for utf-8. It has a builtin editor (though you can configure your own, so you can use vim if Read more…
This post will show you how to convert all filenames in a directory to lowercase (or uppercase). This is on that I don’t use often, so I’m adding it here in order to find it later on, hopefully! convmv –lower –notest * you can use *.jpg to rename all jpeg Read more…
This short blog post will show you a command that will let you find the ten biggest files or directories in linux and osx machines. I forget these commands every time I need to use them, so I have added a post to my blog to help me be able Read more…
You can get the ios style ‘scroll down and release’ or ‘pull to refresh’ feature in google chrome or safari on osx by installing a simple extension. go here https://github.com/weetidy/Pull-to-refresh-for-Chrome-and-Safari and download the file as a zip. the extracted file contains two folders. click on the crx file in the Read more…
This will show you how to mount a remote directory in finder using sftp. (Mount sftp folder with finder). There is a link at the bottom to a post to mount any remote system you have ssh access to using homebrew. check that out if you like working with the Read more…
This post will show you a few of the cool useful linux and osx commandline tools that I use every day. They are mostly available for osx, but some require fink or brew to install on a mac. # ssh available by default on osx and linux. lets you log Read more…
This post is about setting up XMAPP on a mac with xdebug. The first thing we are going to do is to change the document root inside xampp to the ‘Sites’ folder. Changing the DocumentRoot has a few benefits – one being that its far easier to get to in Read more…
This one is simple. copy it across. intact. it just works. a few things to do before you copy it across though – consolodate it so that all the music is in the itunes folder. you might want to let itunes sort all the songs into folders – just goto Read more…
A few things went wrong today. well, not exactly wrong, just not the way I had expected. we got a message from mcaffee saying that their copy of nessus had found that we were running apache < 2.2.9 – which we were, so it was time for us to update Read more…
How to convert mp3 files to audiobooks using itunes. new method: Select a track in itunes. Right click > get info > options > set “media kind” to “audiobook”. The selected track is now an audiobook! How to convert mp3 files to audiobooks using itunes the old way I was looking Read more…