Os Detection Techniques Background information This is a list, with explanations for all the active and passive techniques I can find for remoteoperating system identification – there is a massive list of sources at the end. Background information: techniques Active fingerprinting – Active fingerprinting is the process of transmitting packets Read more…
A good talk about the risks and realities that small businesses face in the cyber domain. SME are basically not doing enough and are expecting someone to do cyber for them. There was a nice breakdown of wannacry and its effects on SME in the UK, and the ‘Not Petya’ Read more…
I have decided to start studying towards a CISSP and / or an OSCP, as part of that I saw an excellent blog post recommending to go through a lot of CTF challenges from vulnhub.com. These are my Kioptrix walkthrough guides / findings and observations for each of the first Read more…
This is a WordPress mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. (wikipedia) Read more…
This tutorial will show you how to make a Raspberry Pi hack tool by installing Kali on the Raspberry Pi – by the end of this guide you will have a Kali Raspberry Pi hacking tool with lots of tools ready for use! Install Kali on the Raspberry Pi Following Read more…
Laravel quickstart gist using craftable and existing database schema to generate models, etc from existing database schema. cd ~/git brew install nmp brew install nodejs curl -sS https://getcomposer.org/installer | php mv composer.phar /usr/local/bin/composer composer create-project –prefer-dist laravel/laravel exampletest “5.5.*” cd exampletest composer require –dev “xethron/migrations-generator” copy in .env file php Read more…
This post is a combination of previous posts about privacy settings in mac and ios. Safari do not track: Safari gives users the option to enable the ‘do not track’ feature. It’s easy to enable: safari > preferences > privacy > Ask websites not to track me Safari prevent cross-site Read more…
This is a burpsuite beginners tutorial. Burpsuite is a collection of tools, written in Java used to perform various network security related tasks. Burpsuite can be used as a basic http proxy to intercept traffic for analysis and playback, a web application security scanner, a tool to perform automated attacks Read more…
There are a couple of things you need for mining monero in osx using xmring: 1) A monero wallet (get one from mymonero.com) 2) Homebrew (brew.sh) mining monero in osx using xmring: dependencies You have to make sure you have homebrew installed (so that you can install the xmrig dependencies), Read more…
Blackarch on the chuwi hi10pro – prereq’s a usb hub a usb flashdrive a usb mouse a usb wifi adaptor (at least for the initial setup) Download blackarch from https://blackarch.org/downloads.html write to a usb drive (I used Etcher to do this part) Plug into chuwi and boot – Press F7 Read more…
This is a short post on how to factory restore android on chuwi hi10 1) Download and install intel phoneflashtool https://01.org/android-ia/downloads/intel-platform-flash-tool-lite 2) Download the version of android you need from here: http://forum.chuwi.com/forum.php?mod=viewthread&tid=2341&extra=page%3D1%26filter%3Dtypeid%26typeid%3D25 The password is en.chuwi.com 3) Connect your chuwi to your mac with a usbC cable 4) Turn your Read more…
This is a quick post about importing nessus6 scan results into metasploit. This can be very useful for adding a ton of information into a new Metsploit database, or adding to information you already have (eg importing results from a weekly or monthly scan of a website / web server) Read more…
This is a basic openvas tutorial for beginners. I will explain a little of how to use openvas web ui to perform a test of your systems. It will give you the basic options for using metasploit msfconsole to run an openvas vulnerability scan. You will also learn how to Read more…
This post will show you how to mount a remote ssh filesystem as a ‘drive’ in osx using a bash script, osxfuse and brew. There are a few ways to go about this, all of them require a bit of setup and tweaking, But I found this to be the Read more…
This post lists all the shutdown / sleep / lock screen keyboard shortcuts mac osx that I have found on my macbook air. (I haven’t discovered the combos myself – I just run across them on the ‘net and sometimes they stick, these are the keyboard shortcuts I’ve learned) 1) Read more…
How to enable iCloud password for all sites on iPhone and iPad: ICloud keychain is great. But some sites block the saving of passwords. Fortunately there is a way to force iCloud to remember password for all sites on iPhone and iPad, regardless if they want you to remember the Read more…
ICloud keychain is an excellent feature in osx mavericks and ios7.To enable iCloud keychain on iPhone and ipad: class=”alert alert-success”>If you have iOS < 7.0.3 Install iOS 7.0.3 [preferences > general > software update] As part of the iOS 7.0.3 setup you will be asked to add a passcode if Read more…
This post is a collection of things to form a best practice for mac security. 1) enable password after sleep or screensaver. settings > security > require a password immediately after sleep or screensaver. This will stop anyone who sneaks up on your machine when your not there from using Read more…
This post will show you how to encrypt your external drives so that your data remains safe. it really only works with new drives though, so if you have a drive thats already got lots of data on it, you might need to find a way to save that data Read more…
Enabling encryption on your macs harddrive is easy. goto system preferences > security and privacy > filevault click the padlock in the bottom left hand corner type your password click ‘turn filevault on’ you will then get a recovery key. you can write this down, print it, email it, whatever Read more…
Ubuntuforums.org has been hacked and all of the email addresses, usernames and passwords have been taken. there are 1.8 million users on that forum :| from the announcement: There has been a security breach on the Ubuntu Forums. The Canonical IS team is working hard as we speak to restore Read more…
Finally a use for siri! you can use siri to generate secure passwords. thanks to the wolfram alpha integration inside siri you can ask: wolfram alpha password and siri will grab you a random password from wolfram! {sourced from cult of mac but I thought it was cool enough to Read more…
Osx has a lot of built in tools. there is a wifi analyser / packet capture tool to open it, just hold down ALT + click on the wifi icon in the menu bar the dropdown menu will have a lot more information, eg transmit rate / security info for Read more…
Google two factor authentication is causing problems for osx. if you had your google account setup in previously, you only needed one password for all apps to use now, if you have googles two factor auth, then you need to setup passwords for each app. i think its from a Read more…
This post will show you how to setup a wireless internet connection from your mac to your phone so that you can get internet through your phones 3g connection! assuming you are allowed the personal hotspot functionality by your provider: on your iphone goto settings > personal hotspot if you Read more…
I wanted to delete my old time machine backup from my western digital mybook world i didnt need it for anything, as I have a backup of it :D i found two ways to do it. method 1 – ssh. if you have ssh enabled on your mybook world then Read more…
Wpscan wordpress vulnerability scanner. WPScan is a vulnerability scanner which checks the security of WordPress installations using a black box approach. WpScan checks the security of your wordpress installation by enumerating installed themes and plugins and checking against vulnerability databases for known issues. Details Username enumeration (from author querystring and Read more…
Enable firmware password on osx: This post will show you how to enable the firmware password on osx firmware passwords will protect your mac from: booting from a cd or dvd booting from the diagnostic utility on the install dvd booting from the network booting from a different target drive Read more…
This will show you how to use ssh with keys for authentication. this has a couple of advantages over using passwords: 1) you can enable key only logins. 2) you dont need to type [or remember] passwords You will need two machines (though you probably know this already): remotehost.com – Read more…
An experiment with twitter trains Twitter experiment for this experiment I made a new twitter account. I setup some basic info on the profile, sent out a tweet and uploaded a picture. im going to join some trains and see if they work. its 10 am. im searching google for Read more…
This post is about setting up XMAPP on a mac with xdebug. The first thing we are going to do is to change the document root inside xampp to the ‘Sites’ folder. Changing the DocumentRoot has a few benefits – one being that its far easier to get to in Read more…
this one will show you how to share your itunes library over a network [a local network, like your home wifi network =] first thing: authorise all your machines with the same itunes store account. then: open itunes on the machine where your library is [ill call it the main Read more…
Using ichat for msn, twitter, irc, icq etc – iChat can use jabber (xmpp). xmpp can use ‘transports’ to let you connect to other networks, like MSN, icq, irc, twitter, etc. Update: there is a way to do this now without having to resort to using a jabber service. You Read more…
Syncing your iphone or ipad with google: Here are the detailed instructions on syncing your iphone or ipad with google gmail calendar and contacts. After doing this you will have all your google contacts on your iphone or ipad, and all your google calendars on your iphone (or your ipod Read more…
This post will show you how to sync your google calendar with ical. jump to: instructions for osx lion, mountain lion and mavericks instructions for snow leopard faq How to sync your google calendar with ical in osx lion, mountain lion and Mavericks In osx snow leopard it was possible Read more…
keeping chrome firefox and safari synced is hard. browser wars are good. and bad. now with the launch of a dev build of chrome for the mac and linux there is now a decent choice of fast browsers on mac. one problem is how to keep all the data synced Read more…
i have used xmarks for a good while now. it used to be called foxmarks. it basically keeps a list of your bookmarks on their server and syncs them with your browser. not impressive if oyu only have one computer and use one browser, but when you use 5 computers Read more…