I recently saw this tweet from kali linux https://twitter.com/kalilinux/status/1209615382224547840?s=19 on installing nethunter on an unrooted android device. This is my attempt to do so. The tweet linked here: https://www.kali.org/docs/nethunter/nethunter-rootless/ The instructions are pretty easy to follow Install the NetHunter-Store app from https://store.nethunter.com I had to enable install from this source From Read more…
Os Detection Techniques Background information This is a list, with explanations for all the active and passive techniques I can find for remoteoperating system identification – there is a massive list of sources at the end. Background information: techniques Active fingerprinting – Active fingerprinting is the process of transmitting packets Read more…
I have decided to start studying towards a CISSP and / or an OSCP, as part of that I saw an excellent blog post recommending to go through a lot of CTF challenges from vulnhub.com. These are my Kioptrix walkthrough guides / findings and observations for each of the first Read more…
Spidering a web application using website crawler software in kali linux There are lots of tools to spider a web application (an companies which are based on this tech, eg google) short list of tools to help you spider a site (eg for creating a sitemap for SEO, or recon Read more…
This is a WordPress mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. (wikipedia) Read more…
What is a WAF A WAF is a web application firewall. A Web Application Firewall protects HTTP applications (eg websites) using a set of rules to protect against various common attacks, such as SQL Injection and Cross site scripting (XSS). Mod Security Web Application Firewall Mod_Security is an apache (and Read more…
Malware detection on Plesk systems using maldet and clamav Linux Malware Detect (LMD) is a malware scanner for Linux released under the GNU GPLv2 license, that is designed around the threats faced in shared hosted environments. It uses threat data from network edge intrusion detection systems to extract malware that Read more…
Remote Debugging PHP in Eclipse with XDebug prereqs: 1) This post assumes you already have a working xdebug install2) Eclipse Configuring Eclipse and Xdebug Open Eclipse Inside Eclipse, goto preferences > php > debug > debuggers Change the debugger to xdebug Click configure Change the dropdown for “accept remote session Read more…
A comparison of service-oriented architecture and frameworks IntroductionPapazoglou, (2003) organised SOA in four architectural layers: Service Foundations, Service Composition, Service Management and Service Engineering and outlined a host of technologies that could be utilised when developing and deploying an SOA system to overcome the challenges of a distributed enterprise system, Read more…
Continuing on from my original metasploit beginners tutorial, here is a slightly more advanced Metasploit tutorial on how to use metasploit to scan for vulnerabilities. The outcome of this tutorial will be to gather information on a host and its running services and their versions and vulnerabilities, rather than to Read more…
It turns out that coding in php on android is possible (even if its not as good as on a mac, linux or even windows). In this blog post I’ll go into some editors, IDE’s and other options for editing php code (and running a development LAMP stack) on your Read more…
build your own blockchain application in less than an hour Edward Ciggaar developer advocate IBM I’ve been looking forward to this one for a while now :D starting with an example of a game (coffee with blockchain) the hyperledger platform was explained – a map was shown on the screen Read more…
This is a simple Vega scanner tutorial for beginners on XSS scanning with vega scanner in kali linux. VEGA is an open-source web security scanner, written in java with a GUI. you can scan for XSS issues and can also scan for SQL injection vulnerabilities. In this short introduction tutorial Read more…
Blackarch pacman package groups Install with pacman -S groupname to quickly install a bunch of tools in one command: This info is available in the blackarch developers guide here: https://blackarch.org/blackarch-guide-en.pdf – this post is a copy-paste of that info – there are a lot of red-team things in the list, Read more…
Automatic updates in kali (and other apt based distros). There are a ton of ways to do automatic updates in kali linux (though this will work on debian, ubuntu, proxmox and any other apt-based system): 1) unattended-upgrades 2) a cron script 3) cron-apt This post will go through the various Read more…
Altcoins exploded in 2015. Minergate is a nice little site that offers various GUI clients for cpu and gpu mining. This is a short little post about mining altcoins in centos with minergate using the CLI client. Currently on minergate you can mine: Aeon [AEON] (aeon.cash) Bytecoin [BCN] (bytecoin.org) Bitcoin Read more…
How to install birdwatcher in kali linux Birdwatcher is an OSINT data analysis and data gathering tool for twitter. Birdwatcher has been designed to feel like metasploit or recon-ng, so should be familiar for anyone who has used those tools. Install birdwatcher in kali linux: Kali has ruby 2.2.x. by Read more…
Ive completed my MSc Thesis! I was awarded a grade A (81%) and an MSc with distinction :D The abstract from my thesis is below: SQL injection vulnerabilities remain one of the top ten most critical web-application security risks. SQL injection itself is a well understood subject. There are many Read more…
My brother and his wife got me a raspberry pi for my birthday :D So far I haven’t decided what to do with it, But I have lots of ideas – I could turn it into a gameboy (though I already have a couple of handheld retro gaming machines – Read more…
Linux / OSx commandline network host discovery This post contains Various ways to find the hosts in your network using commanline commands. For the following, it is assumed that: 192.168.1.0/24 is your whole network 192.168.1.255 is your broadcast address Replace with your own values (you can find these with ifconfig) Read more…
This is a basic nikto tutorial for kali linux. It will get you started with nikto. For advanced usage, see ‘man nikto’ or http://cirt.net/nikto2-docs/ Nikto is a web application scanner – it will scan a web service and look for known vulnerabilities. It can be very useful to perform a Read more…
Here is a little script that will turn off mail for every domain in plesk! I use it as part of an automated domain creation script to be doubly sure that mail is sent from external mail services and isn’t received internally in the plesk machine (preventing users getting their Read more…
Since I released my first public wordpress theme (I have made lots of themes over the years, but have never released any as open-source) I decided I would share the build process for multiloquent theme – just incase anyone wanted to know. the tools I use: 1) eclipse (zend-php-eclipse) 2) Read more…
I have been experimenting with the solarized colour palate for my console screens. One thing that I needed was colour man pages (I use man pages all the time) I found this post add the following to your ~/.bashrc # Less Colors for Man Pages export LESS_TERMCAP_mb=$’\E[01;31m’ # begin blinking Read more…
This post will show you how to install redmine mylyn connector in zend studio or eclipse. firstly you need to configure redmine: update your redmine to the latest version [see instructions here] install redmine mylyn connector in redmine [see instruction here] once your redmine is updated and the plugin installed Read more…
Taking a screenshot on an iphone is something that you have probably done by mistake a ton of times. Its not always that easy to know what to do if someone asks you (though once you know its a very simple thing to do!. This post will show you how Read more…
This will show you how to airplay from iPhone or iPad to linux. This way you can stream from your iPhone to a linux media server, or a raspberry pi :D If you don’t know what airplay is already, then this post most likely isn’t for you, but here is Read more…
You can use spotlight to find email or documents by a specific person. To do this you use the keyword ‘author’ author:bob final report Will bring up all the documents made by bob [or sent from bob] that match ‘final report’ There are other keywords you can use: name, date, Read more…
This will show you how to enable airplay on bbc iplayer for ipad or iphone. doing this will let you watch bbc iplayer content on your tv via your apple tv :D airplay on bbc iplayer open the iplayer app double-click the home button (the physical button on your ipad Read more…
I did a post recently on the snowball mic from blue microphones, I also got a snowflake mic at the same time, so here is a post about that too :D the snowflake is the baby brother of the snowball a cardiod USB microphone with a built-in soundcard, so you Read more…
I recently got a blue microphones snowball mic. the snowball is an omnidirectional USB microphone with a built-in soundcard, so you only need a usb port for it to work. its an excellent mic for podcasting and the like, so I thought that id put up a review of it. Read more…
This will show you how to burn the downloaded osx lion to a usb flash drive so that you can do a fresh install. download lion from the app store. right click the downloaded file click ‘show package contents’ go to contents > sharedsupport right click on the installesd.dmg copy Read more…
Spotlight on osx is a fantastic feature which will give you suggestions by searching your mac for documents and apps. This post will show you how to turn off spotlight search to disable spotlight search suggestions and free up some resources on your machine. There are lots of scenarios where Read more…
Enable firmware password on osx: This post will show you how to enable the firmware password on osx firmware passwords will protect your mac from: booting from a cd or dvd booting from the diagnostic utility on the install dvd booting from the network booting from a different target drive Read more…
This is an excellent extension for google chrome that will give your chrome source code view syntax highlighting when you view source.It supports bash files; css files; javascript files; xml files and a whole lot more. Html source is already highlighted if you right click and view source, but this Read more…
Setting up eclipse with xampp and xdebug to debug php code. This post will show you how to setup eclipse on your mac to work with xdebug inside XAMPP. This setup will allow you to step through your code as it runs, line by line, add breakpoints in your eclipse Read more…
There are lots of firefox addons for web development; here are the best firefox addons for web development I use on a daily basis. firebug Firebug integrates with Firefox to put a wealth of development tools at your fingertips while you browse. You can edit, debug, and monitor CSS, HTML, Read more…
Defining and implementing a solid technical social media strategy. this post is all about how to get your content to as many ‘social media’ sites as possible with minimal effort and tracking it all so that you know whats happening 1 ) different types of sites, microblogging, news aggregation, etc Read more…