I recently saw this tweet from kali linux https://twitter.com/kalilinux/status/1209615382224547840?s=19 on installing nethunter on an unrooted android device. This is my attempt to do so. The tweet linked here: https://www.kali.org/docs/nethunter/nethunter-rootless/ The instructions are pretty easy to follow Install the NetHunter-Store app from https://store.nethunter.com I had to enable install from this source From Read more…
By now, we have a basic vuejs app which can fetch data from a WordPress API using axios and can display the data.The aim of this series, however is to build an app and get it on the app stores. To achieve this, we are going to use cordova. Cordova Read more…
people though ‘only girls have this’ and lots of people though it wasnt even a thing. everyone stood up when asked of they had experienced what was on screen Don’t believe everything you think. your self talk is killing you! write a list of all the negatives then write the Read more…
Building a PWA vuejs app with wordpress API – Part 5 at this point pour app looks pretty poor, this part of the turorial we will fix some of the issues we have: 1) add a link for the categories 2) use some bootstrap code to make things look nicer Read more…
Continuing on fom Part1, where we made a (very) basic vuejs app to fetch data from a wordpress API, we will move on and in this tutorial we will set up some routes and create a basic ‘single’ page to show the content from a wordpress post Tirst thing to Read more…
Building a PWA vuejs app with wordpress API – Part 1 The aim in this is to make an offline-first PWA with vuejs / axios / bootstrap using wordpress as a backend service.Secondary considerations are: using cordova to aid us in building an android, iOS and electron app Beginning Building Read more…
Os Detection Techniques Background information This is a list, with explanations for all the active and passive techniques I can find for remoteoperating system identification – there is a massive list of sources at the end. Background information: techniques Active fingerprinting – Active fingerprinting is the process of transmitting packets Read more…
It turns out that adding cordova to an existing vue app is pretty easy – if only I’d known this before trying at least 10 different ways: First, make sure your environment is setup npm install -g cordovanpm install -g @vue/cli clone your existing repo and cd to its folder Read more…
I have decided to start studying towards a CISSP and / or an OSCP, as part of that I saw an excellent blog post recommending to go through a lot of CTF challenges from vulnhub.com. These are my Kioptrix walkthrough guides / findings and observations for each of the first Read more…
This is a WordPress mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. (wikipedia) Read more…
What is a WAF A WAF is a web application firewall. A Web Application Firewall protects HTTP applications (eg websites) using a set of rules to protect against various common attacks, such as SQL Injection and Cross site scripting (XSS). Mod Security Web Application Firewall Mod_Security is an apache (and Read more…
Malware detection on Plesk systems using maldet and clamav Linux Malware Detect (LMD) is a malware scanner for Linux released under the GNU GPLv2 license, that is designed around the threats faced in shared hosted environments. It uses threat data from network edge intrusion detection systems to extract malware that Read more…
This tutorial will show you how to make a Raspberry Pi hack tool by installing Kali on the Raspberry Pi – by the end of this guide you will have a Kali Raspberry Pi hacking tool with lots of tools ready for use! Install Kali on the Raspberry Pi Following Read more…
Remote Debugging PHP in SublimeText with XDebug prereqs: This post assumes you already have a working xdebug install SublimeText How to get Xdebug working with Sublime Text? Open SublimeText Open the package install dialog (cmd+shift+p then type “pack inst”) Search for ‘xdebug’ Select Xdebug Client and Press enter Setting Up Read more…
Remote Debugging PHP in Brackets with XDebug prereqs: This post assumes you already have: a working xdebug install Brackets How to get Xdebug working with Brackets? Open Brackets Goto the extensions tab (the second icon on the right pane) Search for ‘xdebug’ Click install Click close, click close again Click Read more…
My iPhone 6 plus was going slow, so I got a battery from ebay and followed the ifixit iPhone battery replacement tutorial – my phone is now much faster (it feels like a new phone again) starting – all my tools ready screen open screen detatched battery removed new battery Read more…
Remote Debugging PHP in Eclipse with XDebug prereqs: 1) This post assumes you already have a working xdebug install2) Eclipse Configuring Eclipse and Xdebug Open Eclipse Inside Eclipse, goto preferences > php > debug > debuggers Change the debugger to xdebug Click configure Change the dropdown for “accept remote session Read more…
Remote Debugging PHP in Visual Studio Code with XDebug prereqs: 1) This post assumes you already have a working xdebug install2) vscode How to get Xdebug working with Visual Studio Code? Open vscode Goto the extensions tab (the last icon on the left pane) Search for ‘PHP Debug’ Click install Read more…
A comparison of service-oriented architecture and frameworks IntroductionPapazoglou, (2003) organised SOA in four architectural layers: Service Foundations, Service Composition, Service Management and Service Engineering and outlined a host of technologies that could be utilised when developing and deploying an SOA system to overcome the challenges of a distributed enterprise system, Read more…
Continuing on from my original metasploit beginners tutorial, here is a slightly more advanced Metasploit tutorial on how to use metasploit to scan for vulnerabilities. The outcome of this tutorial will be to gather information on a host and its running services and their versions and vulnerabilities, rather than to Read more…
It turns out that coding in php on android is possible (even if its not as good as on a mac, linux or even windows). In this blog post I’ll go into some editors, IDE’s and other options for editing php code (and running a development LAMP stack) on your Read more…
Migrate music from itunes to google play. 1) goto play.google.com/music 2) sign up (the free service is fine, when it asks for a payment, you can select ‘google play balance’) 3) go here for instructions form google 4) go here: to get the google music manager to upload your tracks Read more…
build your own blockchain application in less than an hour Edward Ciggaar developer advocate IBM I’ve been looking forward to this one for a while now :D starting with an example of a game (coffee with blockchain) the hyperledger platform was explained – a map was shown on the screen Read more…
I joined a few older posts together (and redirected those old posts here) to create a single place for my public dns services list and instructions. Short list of IP addresses if you know what your doing google: 8.8.8.8 8.8.4.4 opendns: 208.67.222.222, 208.67.220.220 quad9 (IBM): 9.9.9.9 cloudflare: 1.1.1.1, 1.0.0.1 You Read more…
This is a burpsuite beginners tutorial. Burpsuite is a collection of tools, written in Java used to perform various network security related tasks. Burpsuite can be used as a basic http proxy to intercept traffic for analysis and playback, a web application security scanner, a tool to perform automated attacks Read more…
This is a simple Vega scanner tutorial for beginners on XSS scanning with vega scanner in kali linux. VEGA is an open-source web security scanner, written in java with a GUI. you can scan for XSS issues and can also scan for SQL injection vulnerabilities. In this short introduction tutorial Read more…
This is a short post on how to setup a dvwa vagrant box for your testing. I recommend this method when installing and testing new tools (and even for developing tools of your own) – there are known vulnerabilities in this system, so you can use the scientific method while Read more…
Replace iphone home button: The home button on my iphone 6 plus stopped working, so I had to fit a new one. Unfortunately touchId won’t work any more but at least I’ll be able to open up my phone and see inside and also get a working button! I ordered Read more…
This is a short post about how to install macOS High Sierra GM on your mac. You will need an apple developer account. Log in to developer.apple.com Click the ‘install GM seeds’ link at the bottom right (or go to developer.apple.com/download) Click the download button next to the macOS High Read more…
Blackarch pacman package groups Install with pacman -S groupname to quickly install a bunch of tools in one command: This info is available in the blackarch developers guide here: https://blackarch.org/blackarch-guide-en.pdf – this post is a copy-paste of that info – there are a lot of red-team things in the list, Read more…
Blackarch on the chuwi hi10pro – prereq’s a usb hub a usb flashdrive a usb mouse a usb wifi adaptor (at least for the initial setup) Download blackarch from https://blackarch.org/downloads.html write to a usb drive (I used Etcher to do this part) Plug into chuwi and boot – Press F7 Read more…
This is a short post on how to factory restore android on chuwi hi10 1) Download and install intel phoneflashtool https://01.org/android-ia/downloads/intel-platform-flash-tool-lite 2) Download the version of android you need from here: http://forum.chuwi.com/forum.php?mod=viewthread&tid=2341&extra=page%3D1%26filter%3Dtypeid%26typeid%3D25 The password is en.chuwi.com 3) Connect your chuwi to your mac with a usbC cable 4) Turn your Read more…
I ordered a gameboy pocket backlight mod from the internets (ebay). I went for a white backlight and used the instruction video from “this does not compute” on ebay to guide me through. It was fairly easy to install (though I did break my screen at one point and I Read more…
I just realised I dont have a post on how to install xdebug in centos7 with php7 and setting up xdebug and eclipse. Its a feature that I use every day, and I had assumed I already had a post, but when searching my site ) only found instructions for Read more…
How to replace macbook air battery. I have a macbook air, its a 2012 13″ – the battery was awesome in the beginning, but after 4 years it was time to replace the battery. I ordered a flueron replacement from amazon prime and it arrived next day. On opening the Read more…
yum-cron is an alternate interface to yum that is optimised to be convenient to call from cron. It provides methods to keep repository metadata up to date, and to check for, download, and apply updates. Rather than accepting many different command line arguments, the different functions of yum cron can Read more…
This is a short post that shows you how to force icloud backup. If you get the message telling you that icloud hasnt been able to backup to icloud for a week or longer, you can force your device to backup to icloud. How to force icloud backup open settings Read more…
Pihole on a raspberry pi – making a network wide advert blocker with a raspberry pi. I have a router using dnsmasq with adblocking setup on my router. I also have a raspberry pi (which was being used as a retropi machine). I also have a Pizero. My retropi setup Read more…
Ive completed my MSc Thesis! I was awarded a grade A (81%) and an MSc with distinction :D The abstract from my thesis is below: SQL injection vulnerabilities remain one of the top ten most critical web-application security risks. SQL injection itself is a well understood subject. There are many Read more…