you are browsing the Open tag

Android

Kali linux nethunter on unrooted android – rootless nethunter!

I recently saw this tweet from kali linux https://twitter.com/kalilinux/status/1209615382224547840?s=19 on installing rootless nethunter on an unrooted android device. This is my attempt to do so. The tweet linked here: https://www.kali.org/docs/nethunter/nethunter-rootless/ The instructions are pretty easy to follow Install the NetHunter-Store app from https://store.nethunter.com I had to enable install from this source Read more…

By Jonathan Mitchell, 11 months6 months ago

vuejs

Building a PWA vuejs app with wordpress API – Part 7

By now in out Building a PWA vuejs app with wordpress API journey, we have a basic vuejs app which can fetch data from a WordPress API using axios and can display the data.The aim of this Building a PWA vuejs app with wordpress API series, however is to build Read more…

By Jonathan Mitchell, 1 year3 weeks ago

Turing Fest 2019

Unmasking Imposter Syndrome

people though ‘only girls have this’ and lots of people though it wasnt even a thing. everyone stood up when asked of they had experienced what was on screen Don’t believe everything you think. your self talk is killing you! write a list of all the negatives then write the Read more…

By Jonathan Mitchell, 1 year1 year ago

vuejs

Building a PWA vuejs app with wordpress API – Part 5

Building a PWA vuejs app with wordpress API – Part 5 at this point pour app looks pretty poor, this part of the turorial we will fix some of the issues we have: 1) add a link for the categories 2) use some bootstrap code to make things look nicer Read more…

By Jonathan Mitchell, 1 year6 months ago

vuejs

Building a PWA vuejs app with wordpress API – Part 2

Continuing on fom Part1, where we made a (very) basic vuejs app to fetch data from a wordpress API, we will move on and in this tutorial we will set up some routes and create a basic ‘single’ page to show the content from a wordpress post Tirst thing to Read more…

By Jonathan Mitchell, 1 year6 months ago

vuejs

Building a PWA vuejs app with wordpress API – Part 1

Building a PWA vuejs app with wordpress API – Part 1 The aim in this is to make an offline-first PWA with vuejs / axios / bootstrap using wordpress as a backend service.Secondary considerations are: using cordova to aid us in building an android, iOS and electron app Beginning Building Read more…

By Jonathan Mitchell, 1 year6 months ago

image courtesy of https://www.flickr.com/photos/christiaancolen/20607701226

jonathansblog

OS Detection Techniques

Os Detection Techniques and OS fingerprinting Os Detection Techniques – Background information This is a list of Os Detection Techniques, with explanations for all the active and passive Os Detection Techniques I can find for remote operating system identification – there is a massive list of sources at the end. Read more…

By Jonathan Mitchell, 1 year6 months ago

Development

Adding cordova to an existing vue app

It turns out that adding cordova to an existing vue app is pretty easy – if only I’d known this before trying at least 10 different ways: First, make sure your environment is setup npm install -g cordovanpm install -g @vue/cli clone your existing repo and cd to its folder Read more…

By Jonathan Mitchell, 1 year3 weeks ago

Kali Linux

Kioptrix Walkthrough Guide

I have decided to start studying towards a CISSP and / or an OSCP, as part of that I saw an excellent blog post recommending to go through a lot of CTF challenges from vulnhub.com. These are my Kioptrix walkthrough guides / findings and observations for each of the first Read more…

By Jonathan Mitchell, 2 years5 months ago

jonathansblog

WordPress Security

This is a WordPress Security mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. Read more…

By Jonathan Mitchell, 2 years6 months ago

Apache

Mod Security Web Application Firewall

What is a WAF A WAF is a web application firewall. A Web Application Firewall protects HTTP applications (eg websites) using a set of rules to protect against various common attacks, such as SQL Injection and Cross site scripting (XSS). Mod Security Web Application Firewall Mod_Security is an apache (and Read more…

By Jonathan Mitchell, 2 years2 years ago

Apache

Malware detection on Plesk systems

Malware detection on Plesk systems using maldet and clamav Linux Malware Detect (LMD) is a malware scanner for Linux released under the GNU GPLv2 license, that is designed around the threats faced in shared hosted environments. It uses threat data from network edge intrusion detection systems to extract malware that Read more…

By Jonathan Mitchell, 2 years2 years ago

Hardware hacking

Raspberry Pi hacking

This tutorial will show you how to make a Raspberry Pi hack tool by installing Kali on the Raspberry Pi – by the end of this guide you will have a Kali Raspberry Pi hacking tool with lots of tools ready for use! Install Kali on the Raspberry Pi Following Read more…

By Jonathan Mitchell, 2 years2 years ago

Development

Xdebug in sublime text

Remote Debugging PHP in SublimeText with XDebug prereqs: This post assumes you already have a working xdebug install SublimeText How to get Xdebug working with Sublime Text? Open SublimeText Open the package install dialog (cmd+shift+p then type “pack inst”) Search for ‘xdebug’ Select Xdebug Client and Press enter Setting Up Read more…

By Jonathan Mitchell, 2 years2 years ago

Development

xdebug in brackets editor

Remote Debugging PHP in Brackets with XDebug prereqs: This post assumes you already have: a working xdebug install Brackets How to get Xdebug working with Brackets? Open Brackets Goto the extensions tab (the second icon on the right pane) Search for ‘xdebug’ Click install Click close, click close again Click Read more…

By Jonathan Mitchell, 2 years2 years ago

Hardware hacking

iPhone battery replacement

My iPhone 6 plus was going slow, so I got a battery from ebay and followed the ifixit iPhone battery replacement tutorial – my phone is now much faster (it feels like a new phone again) starting – all my tools ready screen open screen detatched battery removed new battery Read more…

By Jonathan Mitchell, 2 years2 years ago

Editors

Remote Debugging PHP in Eclipse with XDebug

Remote Debugging PHP in Eclipse with XDebug prereqs: 1) This post assumes you already have a working xdebug install2) Eclipse Configuring Eclipse and Xdebug Open Eclipse Inside Eclipse, goto preferences > php > debug > debuggers Change the debugger to xdebug Click configure Change the dropdown for “accept remote session Read more…

By Jonathan Mitchell, 2 years2 years ago

Editors

Remote Debugging PHP in Visual Studio Code with XDebug

Remote Debugging PHP in Visual Studio Code with XDebug prereqs: 1) This post assumes you already have a working xdebug install2) vscode How to get Xdebug working with Visual Studio Code? Open vscode Goto the extensions tab (the last icon on the left pane) Search for ‘PHP Debug’ Click install Read more…

By Jonathan Mitchell, 2 years5 months ago

Methodology

service-oriented architecture and frameworks – SOA frameworks

service-oriented architecture and frameworks IntroductionPapazoglou, (2003) organised SOA in four architectural layers: Service Foundations, Service Composition, Service Management and Service Engineering and outlined a host of technologies that could be utilised when developing and deploying an SOA system to overcome the challenges of a distributed enterprise system, including application integration, Read more…

By Jonathan Mitchell, 2 years6 months ago

Commandline

How to use metasploit to scan for vulnerabilities

Continuing on from my original metasploit beginners tutorial, here is a slightly more advanced Metasploit tutorial on how to use metasploit to scan for vulnerabilities. The outcome of this tutorial will be to gather information on a host and its running services and their versions and vulnerabilities, rather than to Read more…

By Jonathan Mitchell, 2 years6 months ago

Android

Coding in php on android

It turns out that coding in php on android is possible (even if its not as good as on a mac, linux or even windows). In this blog post I’ll go into some editors, IDE’s and other options for editing php code (and running a development LAMP stack) on your Read more…

By Jonathan Mitchell, 2 years6 months ago

Android

Migrate music from itunes to google play

Migrate music from itunes to google play. 1) goto play.google.com/music 2) sign up (the free service is fine, when it asks for a payment, you can select ‘google play balance’) 3) go here for instructions form google 4) go here: to get the google music manager to upload your tracks Read more…

By Jonathan Mitchell, 2 years2 years ago

Amsterdam Blockchain

Build your own blockchain application in less than an hour

build your own blockchain application in less than an hour Edward Ciggaar developer advocate IBM I’ve been looking forward to this one for a while now :D starting with an example of a game (coffee with blockchain) the hyperledger platform was explained – a map was shown on the screen Read more…

By Jonathan Mitchell, 2 years2 years ago

Technology

Public DNS services

I joined a few older posts together (and redirected those old posts here) to create a single place for my public dns services list and instructions. Short list of IP addresses if you know what your doing google: 8.8.8.8 8.8.4.4 opendns: 208.67.222.222, 208.67.220.220 quad9 (IBM): 9.9.9.9 cloudflare: 1.1.1.1, 1.0.0.1 You Read more…

By Jonathan Mitchell, 3 years ago

jonathansblog

Burpsuite beginners tutorial – how to use burp suite

This is a burp suite beginners tutorial. Burpsuite is a collection of tools, written in Java used to perform various network security related tasks. Burpsuite can be used as a basic http proxy to intercept traffic for analysis and playback, a web application security scanner, a tool to perform automated Read more…

By Jonathan Mitchell, 3 years4 months ago

Kali Linux

Vega scanner tutorial for beginners in kali linux

This is a simple Vega scanner tutorial for beginners on XSS scanning with vega scanner in kali linux. VEGA is an open-source web security scanner, written in java with a GUI. you can scan for XSS issues and can also scan for SQL injection vulnerabilities. In this short introduction tutorial Read more…

By Jonathan Mitchell, 3 years2 years ago

Kali Linux

DVWA vagrant

This is a short post on how to setup a dvwa vagrant box for your testing. I recommend this method when installing and testing new tools (and even for developing tools of your own) – there are known vulnerabilities in this system, so you can use the scientific method while Read more…

By Jonathan Mitchell, 3 years3 years ago

Hardware hacking

Replace iphone home button

Replace iphone home button: The home button on my iphone 6 plus stopped working, so I had to fit a new one. Unfortunately touchId won’t work any more but at least I’ll be able to open up my phone and see inside and also get a working button! I ordered Read more…

By Jonathan Mitchell, 3 years3 years ago

Osx

How to install macOS High Sierra GM

This is a short post about how to install macOS High Sierra GM on your mac. You will need an apple developer account. Log in to developer.apple.com Click the ‘install GM seeds’ link at the bottom right (or go to developer.apple.com/download) Click the download button next to the macOS High Read more…

By Jonathan Mitchell, 3 years3 years ago

Kali Linux

Blackarch pacman package groups for tools

Blackarch pacman package groups Install with pacman -S groupname to quickly install a bunch of tools in one command: This info is available in the blackarch developers guide here: https://blackarch.org/blackarch-guide-en.pdf – this post is a copy-paste of that info – there are a lot of red-team things in the list, Read more…

By Jonathan Mitchell, 3 years3 years ago

Hardware hacking

Blackarch on the chuwi hi10pro – install and config

Blackarch on the chuwi hi10pro – prereq’s a usb hub a usb flashdrive a usb mouse a usb wifi adaptor (at least for the initial setup) Download blackarch from https://blackarch.org/downloads.html write to a usb drive (I used Etcher to do this part) Plug into chuwi and boot – Press F7 Read more…

By Jonathan Mitchell, 3 years3 years ago

Android

Factory restore android on chuwi hi10

This is a short post on how to factory restore android on chuwi hi10 1) Download and install intel phoneflashtool https://01.org/android-ia/downloads/intel-platform-flash-tool-lite 2) Download the version of android you need from here: http://forum.chuwi.com/forum.php?mod=viewthread&tid=2341&extra=page%3D1%26filter%3Dtypeid%26typeid%3D25 The password is en.chuwi.com 3) Connect your chuwi to your mac with a usbC cable 4) Turn your Read more…

By Jonathan Mitchell, 3 years3 years ago

Hardware hacking

Gameboy Pocket Backlight Mod

I ordered a gameboy pocket backlight mod from the internets (ebay). I went for a white backlight and used the instruction video from “this does not compute” on ebay to guide me through. It was fairly easy to install (though I did break my screen at one point and I Read more…

By Jonathan Mitchell, 4 years ago

Apache

Install xdebug in centos7 with php7

I just realised I dont have a post on how to install xdebug in centos7 with php7 and setting up xdebug and eclipse. Its a feature that I use every day, and I had assumed I already had a post, but when searching my site ) only found instructions for Read more…

By Jonathan Mitchell, 4 years2 years ago

Hardware hacking

How to replace macbook air battery

How to replace macbook air battery. I have a macbook air, its a 2012 13″ – the battery was awesome in the beginning, but after 4 years it was time to replace the battery. I ordered a flueron replacement from amazon prime and it arrived next day. On opening the Read more…

By Jonathan Mitchell, 4 years4 years ago

Commandline

Yum-cron installing and configuring

yum-cron is an alternate interface to yum that is optimised to be convenient to call from cron. It provides methods to keep repository metadata up to date, and to check for, download, and apply updates. Rather than accepting many different command line arguments, the different functions of yum cron can Read more…

By Jonathan Mitchell, 4 years6 months ago

Iphone and ipad

How to force icloud backup

This is a short post that shows you how to force icloud backup. If you get the message telling you that icloud hasnt been able to backup to icloud for a week or longer, you can force your device to backup to icloud. How to force icloud backup open settings Read more…

By Jonathan Mitchell, 4 years ago

Hardware hacking

Pihole on a raspberry pi

Pihole on a raspberry pi – making a network wide advert blocker with a raspberry pi. I have a router using dnsmasq with adblocking setup on my router. I also have a raspberry pi (which was being used as a retropi machine). I also have a Pizero. My retropi setup Read more…

By Jonathan Mitchell, 5 years2 years ago

Methodology

MSc Thesis

Ive completed my MSc Thesis! I was awarded a grade A (81%) and an MSc with distinction :D The abstract from my thesis is below: SQL injection vulnerabilities remain one of the top ten most critical web-application security risks. SQL injection itself is a well understood subject. There are many Read more…

By Jonathan Mitchell, 5 years6 months ago