Os Detection Techniques Background information This is a list, with explanations for all the active and passive techniques I can find for remoteoperating system identification – there is a massive list of sources at the end. Background information: techniques Active fingerprinting – Active fingerprinting is the process of transmitting packets Read more…
It turns out that adding cordova to an existing vue app is pretty easy – if only I’d known this before trying at least 10 different ways: First, make sure your environment is setup npm install -g cordovanpm install -g @vue/cli clone your existing repo and cd to its folder Read more…
I have decided to start studying towards a CISSP and / or an OSCP, as part of that I saw an excellent blog post recommending to go through a lot of CTF challenges from vulnhub.com. These are my Kioptrix walkthrough guides / findings and observations for each of the first Read more…
This is a WordPress mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. (wikipedia) Read more…
Installing and configuring the fail2ban centos service fail2ban is a service for linux systems that checks log files for failed login attempts and automatically inserts firewall rules to block further attempts at logins from those IP addresses for a specified amount of time. Installing fail2ban on centos is relatively easy Read more…
This tutorial will show you how to make a Raspberry Pi hack tool by installing Kali on the Raspberry Pi – by the end of this guide you will have a Kali Raspberry Pi hacking tool with lots of tools ready for use! Install Kali on the Raspberry Pi Following Read more…
If you have ssh with keys for authentication setup on your system, and you use vagrant then you can combine the two to have all your ssh keys automatically shared with your vagrant machine vim ~/.ssh/config Host 192.168.x.x ForwardAgent Read more…
This is a burpsuite beginners tutorial. Burpsuite is a collection of tools, written in Java used to perform various network security related tasks. Burpsuite can be used as a basic http proxy to intercept traffic for analysis and playback, a web application security scanner, a tool to perform automated attacks Read more…
There are a couple of things you need for mining monero in osx using xmring: 1) A monero wallet (get one from mymonero.com) 2) Homebrew (brew.sh) mining monero in osx using xmring: dependencies You have to make sure you have homebrew installed (so that you can install the xmrig dependencies), Read more…
I have a router running dd-wrt. sometimes the dd-wrt web ui crashes and you cant access the interface, but your WAN connection works, and you can still login via ssh On the dd-wrt command-line there are a couple of utilities available to let you start and stop services. If your Read more…
This post has a collection of Linux commands for networking. There are basic linux network commands, advanced linux network commands and some centos network configuration commands, but I’ve tried to keep it to the point. jump to:Linux Network ConfigurationBasic Linux Network CommandsAdvanced Linux Network Commands Linux commands for Networking Configuration Read more…
Altcoins exploded in 2015. Minergate is a nice little site that offers various GUI clients for cpu and gpu mining. This is a short little post about mining altcoins in centos with minergate using the CLI client. Currently on minergate you can mine: Aeon [AEON] (aeon.cash) Bytecoin [BCN] (bytecoin.org) Bitcoin Read more…
This post is a wapiti tutorial. You’ll find various wapiti options, how to import wapiti scan results into metasploit and how you can disable wapiti modules to speed up your scans. A basic one-liner command to get you started would be: More about the command line arguments: These basics will Read more…
This is a short tutorial showing how to setup wordpress and cloudflare flexible ssl. Cloudflare offer a service called ‘flexible ssl’ this means that cloudflare encrypts your content between the end-user and cloudflare, but the connection between cloudflare and your site is not encrypted. This is a good solution if Read more…
This tutorial is a basic Kali linux arachni tutorial: to get arachni up and running on your kali linux system and perform a basic scan. Arahni is a vulnerability scanner for web-apps, it is installed as part of kali-linux, their site is here Arachni via the command line Open a Read more…
This post will show you how to mount a remote ssh filesystem as a ‘drive’ in osx using a bash script, osxfuse and brew. There are a few ways to go about this, all of them require a bit of setup and tweaking, But I found this to be the Read more…
M-business Security Threats: Device as an attack vector with mobile devices widespread they are commonly being used as attack vectors Virii While not many viruses exist for mobile devices themselves, mobile devices are being used to speed viruses inside networks as most mobile devices don’t have antivirus software installed Default Read more…
This post lists all the shutdown / sleep / lock screen keyboard shortcuts mac osx that I have found on my macbook air. (I haven’t discovered the combos myself – I just run across them on the ‘net and sometimes they stick, these are the keyboard shortcuts I’ve learned) 1) Read more…
This is the change log for multiloquent 6 1 01 11a7be0 psr2 fixes abe3129 psr2 changes 80cbc30 misc tidy ups 00d17a1 tag link 5ea34c5 pagination dd3582f pagination still 9443ffa pagination b44f9be pagination 2a7d85b pagination 74f362f pagination 694c07f pagination 283bc75 pagination 8329440 pagination 59ed693 pagination 313d6f5 mb class in css 02ff70a Read more…
This post is a collection of things to form a best practice for mac security. 1) enable password after sleep or screensaver. settings > security > require a password immediately after sleep or screensaver. This will stop anyone who sneaks up on your machine when your not there from using Read more…
Tapatalk forum app for iPhone is now free. I participate in a lot of forums: imore macrumours digital point ubuntu forums and lots of others I first found tapatalk a while back and I use it every day. a few of the features that you’ll like: iCloud sync: Tapatalk remembers Read more…
This post will show you how to install redmine mylyn connector in zend studio or eclipse. firstly you need to configure redmine: update your redmine to the latest version [see instructions here] install redmine mylyn connector in redmine [see instruction here] once your redmine is updated and the plugin installed Read more…
When trying to login you get a message similar to cannot verify login with facetime or messages on osx. warning: this is quite a complex set of instructions. In the end I ended up creating a new user account on my mac and transferring my documents to the new user Read more…
Google two factor authentication is causing problems for osx. if you had your google account setup in previously, you only needed one password for all apps to use now, if you have googles two factor auth, then you need to setup passwords for each app. i think its from a Read more…
This post will show you how to subscribe to your facebook friends birthdays using ical on your mac 1) login to your facebook account 2) goto events (in the left hand bar) 3) click on the maginifying glass in the top right 4) pick ‘birthdays’ 5) click on the maginifying Read more…
This post will show you how to subscribe to facebook events using ical on your mac osx 1) login to your facebook account 2) goto events (in the left hand bar) 3) click on the maginifying glass in the top right 4) pick ‘export events’ 5) click on the url Read more…
This will show you how to change the login screen wallpaper background image in osx lion. the file you need to change is called /System/Library/Frameworks/AppKit.framework/Versions/C/Resources/ NSTexturedFullScreenBackgroundColor.png simply rename the image and copy the image you want to the folder and call it NSTexturedFullScreenBackgroundColor.png done :)
Automount network drive on startup osx. This will show you how to automount a network drive when you login to osx lion. This method will persist through a reboot, so your drive will always be available. Connect to your network drive (finder > go > connect to server) Enter the Read more…
Bulletproof security is an excellent wordpress security plugin for your wordpress installation it provides a lot of cool features: XSS protection SQL injection protection htaccess protection wp-config protection, One-Click Setup Wizard Setup Wizard AutoFix (AutoWhitelist|AutoSetup|AutoCleanup) MScan Malware Scanner .htaccess Website Security Protection (Firewalls) Hidden Plugin Folders|Files Cron (HPF) Login Security Read more…
This will show you how to use ssh with keys for authentication. this has a couple of advantages over using passwords: 1) you can enable key only logins. 2) you dont need to type [or remember] passwords You will need two machines (though you probably know this already): remotehost.com – Read more…
How to enable secure https twitter browsing 1) goto twitter 2) goto settings > account 3) at the very bottom you will find a checkbox for HTTPS Only 4) tick the box now whenever you log in to twitter your entire session will be encrypted, not just the login part.
I get a lot of spam bots visiting my site and trying to post comments. akismet stops them being in my approve queue (i have to approve all of the other comments) but I wanted a way to stop the bots being able to register. I also wanted a way Read more…
Here are some tips to make your mac boot faster: Rotate your logs open terminal > type: sudo periodic daily weekly monthly this command runs the log rotate scripts, etc Repair disk permissions applications > utilities > disk utility > repair permissions this command repairs disk permissions, this will fix Read more…
This blog post is quite easy, it shows you how to install rkhunter on a linux machine and how to configure rkhunter to run periodically using a cron job. RKhunter (rootkit hunter) is a program that takes a fingerprint of installed files and directories in your machine during install and Read more…
Using ichat for msn, twitter, irc, icq etc – iChat can use jabber (xmpp). xmpp can use ‘transports’ to let you connect to other networks, like MSN, icq, irc, twitter, etc. Update: there is a way to do this now without having to resort to using a jabber service. You Read more…
This is a short nessus tutorial to help you get to grips with nessus. Nessus is a vulnerability scanner. Nessus can scan your assets for network security vulnerabilities. Nessus allows you to be proactive in securing your base so that all your base belongs to you :D Nessus tutorial quick Read more…
This tutorial is about syncing all your webmail email accounts to gmail, and then sync that to your apple mail.app and your iphone the hardest part about having so many email accounts and social networking accounts is finding the time to log into them all and check for mail and Read more…
Syncing your iphone or ipad with google: Here are the detailed instructions on syncing your iphone or ipad with google gmail calendar and contacts. After doing this you will have all your google contacts on your iphone or ipad, and all your google calendars on your iphone (or your ipod Read more…
This one is pretty cool. ive been looking for a decent way to get all my feeds to my mac. I have them all setup in google reader and was thinking about putting them all into mail.app (which im still working on) – but untill then I offer an intermediate Read more…