I have decided to start studying towards a CISSP and / or an OSCP, as part of that I saw an excellent blog post recommending to go through a lot of CTF challenges from vulnhub.com. These are my Kioptrix walkthrough guides / findings and observations for each of the first Read more…
Spidering a web application using website crawler software in kali linux There are lots of tools to spider a web application (an companies which are based on this tech, eg google) short list of tools to help you spider a site (eg for creating a sitemap for SEO, or recon Read more…
This is a WordPress mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. (wikipedia) Read more…
Metasploit for website pentest using wmap. Wmap is a web application scanner that runs within metasploit. We can use wmap to get an outline of the application we are probing. Start dvwa inside vagrant In this tutorial I’ll be using dvwa in vagrant as my target If you dont have Read more…
Remote Debugging PHP in SublimeText with XDebug prereqs: This post assumes you already have a working xdebug install SublimeText How to get Xdebug working with Sublime Text? Open SublimeText Open the package install dialog (cmd+shift+p then type “pack inst”) Search for ‘xdebug’ Select Xdebug Client and Press enter Setting Up Read more…
Remote Debugging PHP in Brackets with XDebug prereqs: This post assumes you already have: a working xdebug install Brackets How to get Xdebug working with Brackets? Open Brackets Goto the extensions tab (the second icon on the right pane) Search for ‘xdebug’ Click install Click close, click close again Click Read more…
Remote Debugging PHP in Eclipse with XDebug prereqs: 1) This post assumes you already have a working xdebug install2) Eclipse Configuring Eclipse and Xdebug Open Eclipse Inside Eclipse, goto preferences > php > debug > debuggers Change the debugger to xdebug Click configure Change the dropdown for “accept remote session Read more…
Remote Debugging PHP in Visual Studio Code with XDebug prereqs: 1) This post assumes you already have a working xdebug install2) vscode How to get Xdebug working with Visual Studio Code? Open vscode Goto the extensions tab (the last icon on the left pane) Search for ‘PHP Debug’ Click install Read more…
A comparison of service-oriented architecture and frameworks IntroductionPapazoglou, (2003) organised SOA in four architectural layers: Service Foundations, Service Composition, Service Management and Service Engineering and outlined a host of technologies that could be utilised when developing and deploying an SOA system to overcome the challenges of a distributed enterprise system, Read more…
Continuing on from my original metasploit beginners tutorial, here is a slightly more advanced Metasploit tutorial on how to use metasploit to scan for vulnerabilities. The outcome of this tutorial will be to gather information on a host and its running services and their versions and vulnerabilities, rather than to Read more…
It turns out that coding in php on android is possible (even if its not as good as on a mac, linux or even windows). In this blog post I’ll go into some editors, IDE’s and other options for editing php code (and running a development LAMP stack) on your Read more…
Laravel quickstart gist using craftable and existing database schema to generate models, etc from existing database schema. cd ~/git brew install nmp brew install nodejs curl -sS https://getcomposer.org/installer | php mv composer.phar /usr/local/bin/composer composer create-project –prefer-dist laravel/laravel exampletest “5.5.*” cd exampletest composer require –dev “xethron/migrations-generator” copy in .env file php Read more…
This follows on from the previous laravel gist. it covers generating mdels, views and bootstrapping for controllers for pre-existing database tables.Useful if you have a few hundred tables and relationships in an existing database. cd ~/git brew install nmp brew install nodejs curl -sS https://getcomposer.org/installer | php composer global require Read more…
Here is my quick start bootstrap for creating laravel sites from scratch cd ~/git brew install nmp brew install nodejs curl -sS https://getcomposer.org/installer | php composer global require laravel/installer laravel new php atisan migrate:install php artisan make:auth php artisan migrate #api composer require laravel/passport php artisan migrate php artisan passport:install Read more…
This is a short post detailing how to manually setup php fpm with apache on centos7. php fpm is a great solution (especially when used with nginx, but you may want to keep running apache while still having some of the benefits of fmp – you might even be running Read more…
Blackarch on the chuwi hi10pro – prereq’s a usb hub a usb flashdrive a usb mouse a usb wifi adaptor (at least for the initial setup) Download blackarch from https://blackarch.org/downloads.html write to a usb drive (I used Etcher to do this part) Plug into chuwi and boot – Press F7 Read more…
This is a short post on how to factory restore android on chuwi hi10 1) Download and install intel phoneflashtool https://01.org/android-ia/downloads/intel-platform-flash-tool-lite 2) Download the version of android you need from here: http://forum.chuwi.com/forum.php?mod=viewthread&tid=2341&extra=page%3D1%26filter%3Dtypeid%26typeid%3D25 The password is en.chuwi.com 3) Connect your chuwi to your mac with a usbC cable 4) Turn your Read more…
This is a short tutorial on dual booting windows and Kali on the Chuwi Hi10 Pro. Updated for Kali 2018.4 When I first wrote this post I seriously wouldn’t have recommended Kali on the Chuwi Hi10 Pro as an every-day system – Starting with 2018.01 and the 4.14 kernel it Read more…
Altcoins exploded in 2015. Minergate is a nice little site that offers various GUI clients for cpu and gpu mining. This is a short little post about mining altcoins in centos with minergate using the CLI client. Currently on minergate you can mine: Aeon [AEON] (aeon.cash) Bytecoin [BCN] (bytecoin.org) Bitcoin Read more…
I just realised I dont have a post on how to install xdebug in centos7 with php7 and setting up xdebug and eclipse. Its a feature that I use every day, and I had assumed I already had a post, but when searching my site ) only found instructions for Read more…
There are a couple of different ways to install php7 on centos7 – Installing yum-plugin-replace and inline-replaceing the whole php subsystem seems to be the easiest way: You need to have a couple or yum repo’s enabled for this to work properly: webtactic and epel rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm rpm -Uvh Read more…
Pihole on a raspberry pi – making a network wide advert blocker with a raspberry pi. I have a router using dnsmasq with adblocking setup on my router. I also have a raspberry pi (which was being used as a retropi machine). I also have a Pizero. My retropi setup Read more…
This post is a wapiti tutorial. You’ll find various wapiti options, how to import wapiti scan results into metasploit and how you can disable wapiti modules to speed up your scans. A basic one-liner command to get you started would be: More about the command line arguments: These basics will Read more…
Multiloquent 9 0 0 Changelog 3015a81 – Merge branch ‘master’ of https://github.com/localhost8080/multiloquent a79d3a3 – Update to version number as this removes backward compatibility with the old amelia theme df0d6df – Update to bootstrap code 9bd8d60 – update to all bootstrap and bootswatch themes b39a9f3 – update to all bootstrap and Read more…
My New HomeLab Gigabyte Brix – 8 GB HyperX DDR3 ram for now (another 8GB on its way) Another 8GB has been ordered, bringing me up to 16gb. I’ll be upping the available ram for my Kali install and upgrading my windows 8 to windows 10! – 16GB usb drive Read more…
multiloquent 8 0 0 changelog c41bf6f – update to all bootstrap and bootswatch themes c070b3e – Documentation e64a96c – update to all bootstrap and bootswatch themes 94772c5 – Docs df12467 – Documentation 75fb109 – Documentation 4bb1676 – Documentation 7623c10 – comments ab69833 – documentation b93798f – Some documentation cc0a96f – Read more…
This is a basic openvas tutorial for beginners. I will explain a little of how to use openvas web ui to perform a test of your systems. It will give you the basic options for using metasploit msfconsole to run an openvas vulnerability scan. You will also learn how to Read more…
This post will show you how to install phpcs and phpmd in sublime text on your mac: Following on from my post about using git and phpcs in brackets, I decided to try the same setup in sublime text. The first part is some background setup – installing phpcs and Read more…
Setting up brackets editor with git and phpcs with wordpress coding standard etc Brackets editor (brackets.io) is an editor that I’ve wanted to try out for a while now, but for it to be viable for me to use, I had to configure a few things: git in brackets editor Read more…
Here is a selection of podcasts I subscribe to [RSS] PARANORMAL PODCAST [RSS] Practical Backpacking™ Podcast [RSS] Sasquatch Chronicles [RSS] The Unexplained with Howard Hughes [RSS] The Gralien Report [RSS] The Bigfoot Field Guide [RSS] The Linux Link Tech Show Itunes Feed [RSS] Ubuntu Podcast » MP3 [RSS] Coder Radio Read more…
This is the change log for multiloquent 6 1 01 11a7be0 psr2 fixes abe3129 psr2 changes 80cbc30 misc tidy ups 00d17a1 tag link 5ea34c5 pagination dd3582f pagination still 9443ffa pagination b44f9be pagination 2a7d85b pagination 74f362f pagination 694c07f pagination 283bc75 pagination 8329440 pagination 59ed693 pagination 313d6f5 mb class in css 02ff70a Read more…
To update to php 5.4 and mysql 5.5 in centos 6: 1) install the epel, remi and rpm-forge repos rpm -Uvh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm rpm -Uvh http://pkgs.repoforge.org/rpmforge-release/rpmforge-release-0.5.3-1.el6.rf.x86_64.rpm 2) edit the /etc/yum.repos.d files to enable the repos vi /etc/yum.repos.d/epel.repo change the enabled=0 to enabled=1 vi /etc/yum.repos.d/remi.repo change the enabled=0 to Read more…
Since I released my first public wordpress theme (I have made lots of themes over the years, but have never released any as open-source) I decided I would share the build process for multiloquent theme – just incase anyone wanted to know. the tools I use: 1) eclipse (zend-php-eclipse) 2) Read more…
I have released multiloquent – the theme I use for jonathansblog to the public: you can get it here: http://wordpress.org/themes/multiloquent I have a github if you want a cutting-edge version (but it will be broken frequently) https://github.com/localhost8080/multiloquent This is the readme.txt for multiloquent theme v9 Multiloquent html5 / bootstrap theme Read more…
WordPress and buffer for automatic google plus posts This is a short post about setting up WordPress and buffer for automatic google plus posts. Buffer is an excellent service that allows posting to multiple social media sites (twitter, Facebook, google+, linkedin) If you run a wordpress site then there are Read more…
While probably not the best platform to do web development on, an ipad can be used to create code for your website. I use my ipad mini (in emergencies) to fix code if needs be. there are lots of apps out there, but the ones I choose to help me Read more…
This post is a comparison of the various email clients available on mac osx (and some mac osx email clients and sparrow alternatives if you are looking for them – Ive included sparrow in the list aswell so that others might learn its awesomeness) 1) mail.app features: imap, pop, exchange, Read more…
