Os Detection Techniques Background information This is a list, with explanations for all the active and passive techniques I can find for remoteoperating system identification – there is a massive list of sources at the end. Background information: techniques Active fingerprinting – Active fingerprinting is the process of transmitting packets Read more…
Spidering a web application using website crawler software in kali linux There are lots of tools to spider a web application (an companies which are based on this tech, eg google) short list of tools to help you spider a site (eg for creating a sitemap for SEO, or recon Read more…
This is a WordPress mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. (wikipedia) Read more…
Remote Debugging PHP in SublimeText with XDebug prereqs: This post assumes you already have a working xdebug install SublimeText How to get Xdebug working with Sublime Text? Open SublimeText Open the package install dialog (cmd+shift+p then type “pack inst”) Search for ‘xdebug’ Select Xdebug Client and Press enter Setting Up Read more…
Remote Debugging PHP in Brackets with XDebug prereqs: This post assumes you already have: a working xdebug install Brackets How to get Xdebug working with Brackets? Open Brackets Goto the extensions tab (the second icon on the right pane) Search for ‘xdebug’ Click install Click close, click close again Click Read more…
Remote Debugging PHP in Eclipse with XDebug prereqs: 1) This post assumes you already have a working xdebug install2) Eclipse Configuring Eclipse and Xdebug Open Eclipse Inside Eclipse, goto preferences > php > debug > debuggers Change the debugger to xdebug Click configure Change the dropdown for “accept remote session Read more…
Remote Debugging PHP in Visual Studio Code with XDebug prereqs: 1) This post assumes you already have a working xdebug install2) vscode How to get Xdebug working with Visual Studio Code? Open vscode Goto the extensions tab (the last icon on the left pane) Search for ‘PHP Debug’ Click install Read more…
Continuing on from my original metasploit beginners tutorial, here is a slightly more advanced Metasploit tutorial on how to use metasploit to scan for vulnerabilities. The outcome of this tutorial will be to gather information on a host and its running services and their versions and vulnerabilities, rather than to Read more…
This is a burpsuite beginners tutorial. Burpsuite is a collection of tools, written in Java used to perform various network security related tasks. Burpsuite can be used as a basic http proxy to intercept traffic for analysis and playback, a web application security scanner, a tool to perform automated attacks Read more…
This is a simple Vega scanner tutorial for beginners on XSS scanning with vega scanner in kali linux. VEGA is an open-source web security scanner, written in java with a GUI. you can scan for XSS issues and can also scan for SQL injection vulnerabilities. In this short introduction tutorial Read more…
I just realised I dont have a post on how to install xdebug in centos7 with php7 and setting up xdebug and eclipse. Its a feature that I use every day, and I had assumed I already had a post, but when searching my site ) only found instructions for Read more…
There are a couple of different ways to install php7 on centos7 – Installing yum-plugin-replace and inline-replaceing the whole php subsystem seems to be the easiest way: You need to have a couple or yum repo’s enabled for this to work properly: webtactic and epel rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm rpm -Uvh Read more…
This post is a wapiti tutorial. You’ll find various wapiti options, how to import wapiti scan results into metasploit and how you can disable wapiti modules to speed up your scans. A basic one-liner command to get you started would be: More about the command line arguments: These basics will Read more…
What is an sql injection attack? All websites process data entered by users. An input-validation attack is when unexpected user input is processed by a web server or database and an error occurs. What is an sql injection attack? “An SQL Injection Attack (SQLIA) occurs when an attacker attempts to Read more…
This post will show you how to mount a remote ssh filesystem as a ‘drive’ in osx using a bash script, osxfuse and brew. There are a few ways to go about this, all of them require a bit of setup and tweaking, But I found this to be the Read more…
This is a basic nikto tutorial for kali linux. It will get you started with nikto. For advanced usage, see ‘man nikto’ or http://cirt.net/nikto2-docs/ Nikto is a web application scanner – it will scan a web service and look for known vulnerabilities. It can be very useful to perform a Read more…
MetaSploit tutorial for beginners This MetaSploit tutorial for beginners is to be a starting guide for how to use MetaSploit. It assumes that you already have MetaSploit installed, or that you are running Kali / backtrack Linux. The basic concept of how to use MetaSploit is as follows:– Run msfconsole Read more…
This post will show you how to How to delete and move icons from apple tv! Its easy once you get the hang of it: Moving Icons Highlight the icon you want to move or erase. Press and hold the select button. The icon will start to wobble. You can Read more…
mc for mac osx! GNU Midnight Commander – mc – is an excellent orthodox text mode file manager. mc runs in your console, and has mouse support. It also has support for utf-8. It has a builtin editor (though you can configure your own, so you can use vim if Read more…
I have a western digital mybook word NAS. Using the afp protocol file transfers were very slow. I knew there had to be a way to make your AFP NAS more responsive. It seems slow when you try to connect to it from a mac using AFP, but its lightning Read more…
This short blog post will show you how to enable spotlight indexing on a network drive. I have also added the commands to disable spotlight indexing on network drive that’s already indexed. The first thing you have to do is to make sure you connect your network drive to the Read more…
After moving into my new flat I had to wait three weeks for my isp to connect me. here is a list of my essential iphobe apps that kept me connected. mail.app this one is the most important. it let me read my mail. safari.app this one helped me search Read more…
Teamviewer is an excellent (and free for non commercial use) remote access and remote desktop app for mac, linux and windows. and it now has an iphone/ipad app. it lets me log in to all of my machines remotely from eachother and I can now access them from my iphone Read more…
This will show you how to mount a remote directory in finder using sftp. (Mount sftp folder with finder). There is a link at the bottom to a post to mount any remote system you have ssh access to using homebrew. check that out if you like working with the Read more…
This post will show you a few of the cool useful linux and osx commandline tools that I use every day. They are mostly available for osx, but some require fink or brew to install on a mac. # ssh available by default on osx and linux. lets you log Read more…
This will show you how to use ssh with keys for authentication. this has a couple of advantages over using passwords: 1) you can enable key only logins. 2) you dont need to type [or remember] passwords You will need two machines (though you probably know this already): remotehost.com – Read more…
Setting up eclipse on a mac to work with SVN this post will show you how to setup eclipse on your mac to work with a local [or remote] SVN repository install eclipse goto help > install new software select ‘use all available sources’ search for ‘SVN’ under ‘collaboration’ click Read more…
If you have an apple tv and a mac and use the same remote to control them both you might notice that your mac starts to do things (like play songs from itunes) when you are trying to control your apple tv. this short post will show you how to Read more…
ive noticed a few things wrong with my site – the daily unique visitors were down by 17%, the theme wasnt quite right, the site was pretty slow. i did a few cleanups on the site code, enabled gzip caching of javascript and css, took off some images that were Read more…
Yesterday I was securing a server to pass the PCI tests and the Mcaffee tests for a client of our’s. We have a Basic iptables firewall for linux that we use as a template – I didnt manage to get the firewall rules set properly for the client, so I Read more…