MetaSploit tutorial for beginners This (updated for 2021) MetaSploit tutorial for beginners is meant to be a starting guide on how to use MetaSploit if you have never used it before. It assumes that you already have MetaSploit installed and that it works, or that you are running Kali / Read more…
It (unexpectedly) works, first time, no messing! More info here: https://www.britishtelephones.com/t746.htm Dialing a mobile from it is a pain though!
I recently saw this tweet from kali linux https://twitter.com/kalilinux/status/1209615382224547840?s=19 on installing rootless nethunter on an unrooted android device. This is my attempt to do so. The tweet linked here: https://www.kali.org/docs/nethunter/nethunter-rootless/ The instructions are pretty easy to follow Install the NetHunter-Store app from https://store.nethunter.com I had to enable install from this source Read more…
This time its a generic non-branded chinese bluetooth speaker. I got this one from amazon, for less than £10. Its fabric covered so looks good, and is very loud. It plays audio recordings when you pair and un pair (its a bit chinglish, but is a nice touch) it also Read more…
Ive been spurned by expensive headphones in the past, but still burn through them. This time I decided to get some cheap ($10) bluetooth earpod style headphones from China. They are pretty good. Bass isnt great (they were ten bucks after all) I wouldnt use them for mastering, but they Read more…
Os Detection Techniques and OS fingerprinting Os Detection Techniques – Background information This is a list of Os Detection Techniques, with explanations for all the active and passive Os Detection Techniques I can find for remote operating system identification – there is a massive list of sources at the end. Read more…
We are driving from Glasgow to Kent to see my brother and his family, and Zoes sister and her family in Kent.Its the first time Im driving down, so we decided to stay the night at a hotel in Preston to break the journey. We had full English breakfast and Read more…
I have decided to start studying towards a CISSP and / or an OSCP, as part of that I saw an excellent blog post recommending to go through a lot of CTF challenges from vulnhub.com. These are my Kioptrix walkthrough guides / findings and observations for each of the first Read more…
Spidering a web application using website crawler software in kali linux There are lots of tools to spider a web application (an companies which are based on this tech, eg google) short list of tools to help you spider a site (eg for creating a sitemap for SEO, or recon Read more…
This is a WordPress Security mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. Read more…
Installing and configuring the fail2ban centos service fail2ban is a service for linux systems that checks log files for failed login attempts and automatically inserts firewall rules to block further attempts at logins from those IP addresses for a specified amount of time. Installing fail2ban on centos is relatively easy Read more…
If you have ssh with keys for authentication setup on your system, and you use vagrant then you can combine the two to have all your ssh keys automatically shared with your vagrant machine vim ~/.ssh/config Host 192.168.x.x ForwardAgent Read more…
Metasploit for website pentest using wmap. This is a short tutorial on using the wmap module inside metasploit. Wmap is a web application scanner that runs within metasploit. We can use wmap to get an outline of the application we are probing. Start dvwa inside vagrant In this tutorial I’ll Read more…
Vagrant with sshfs. You can use sshfs in vagrant with only a private network. This is fine if you are doing all your devlopment from a single machine and dont need to access the vagrant box from your network, but if you need to run some testing from an external Read more…
service-oriented architecture and frameworks IntroductionPapazoglou, (2003) organised SOA in four architectural layers: Service Foundations, Service Composition, Service Management and Service Engineering and outlined a host of technologies that could be utilised when developing and deploying an SOA system to overcome the challenges of a distributed enterprise system, including application integration, Read more…
Continuing on from my original metasploit beginners tutorial, here is a slightly more advanced Metasploit tutorial on how to use metasploit to scan for vulnerabilities. The outcome of this tutorial will be to gather information on a host and its running services and their versions and vulnerabilities, rather than to Read more…
It turns out that coding in php on android is possible (even if its not as good as on a mac, linux or even windows). In this blog post I’ll go into some editors, IDE’s and other options for editing php code (and running a development LAMP stack) on your Read more…
build your own blockchain application in less than an hour Edward Ciggaar developer advocate IBM I’ve been looking forward to this one for a while now :D starting with an example of a game (coffee with blockchain) the hyperledger platform was explained – a map was shown on the screen Read more…
This is a short post detailing how to manually setup php fpm with apache on centos7. php fpm is a great solution (especially when used with nginx, but you may want to keep running apache while still having some of the benefits of fmp – you might even be running Read more…
Today we went for a walk from Glasgow Harbour along to Kelvingrove park. We entered Kelvingrove park through the gate where Dumbarton road changes to Argyl street, at Partick bridge, to the west of the river kelvin. A quick walk up the west bank of the river kelvin takes you Read more…
We went to the Riverside Museum today. We can see it from the window, but we dont manage to get along as much as we should, so we decided to go today. We got up early and had a big breakfast – fresh strawberries, apples and bananas on top of Read more…
Vagrant with NFS and public_network. You can use NFS in vagrant, but it requires a private_network to work; This is fine if you are doing all your devlopment from a single machine and dont need to access the vagrant box from your network, but if you need to run some Read more…
There are a couple of things you need for mining monero in osx using xmring: 1) A monero wallet (get one from mymonero.com) 2) Homebrew (brew.sh) mining monero in osx using xmring: dependencies You have to make sure you have homebrew installed (so that you can install the xmrig dependencies), Read more…
I made another modified gba with backlit screen mod – this time the modified gameboy advance with a backlight was a present for my brothers birthday. I ordered the original gameboy advance, a new case, transparent buttons and a new backlit screen and an adaptor ribbon for the screen from Read more…
This is a short post on how to factory restore android on chuwi hi10 1) Download and install intel phoneflashtool https://01.org/android-ia/downloads/intel-platform-flash-tool-lite 2) Download the version of android you need from here: http://forum.chuwi.com/forum.php?mod=viewthread&tid=2341&extra=page%3D1%26filter%3Dtypeid%26typeid%3D25 The password is en.chuwi.com 3) Connect your chuwi to your mac with a usbC cable 4) Turn your Read more…
Chuwi Hi10 Pro ultrabook tablet convertable surface – That’s some title, but I’m not sure how to describe my new machine. Its a tablet, but its also a laptop – it has a real keyboard and works exactly like a laptop, except you can remove the screen! It was a Read more…
Automatic updates in kali (and other apt based distros). There are a ton of ways to do automatic updates in kali linux (though this will work on debian, ubuntu, proxmox and any other apt-based system): 1) unattended-upgrades 2) a cron script 3) cron-apt This post will go through the various Read more…
I got a VR headset as a christmas present – i havent really had time to play with it yet, but look out for some posts about this new tech :D
This post has a collection of Linux commands for networking. There are basic linux network commands, advanced linux network commands and some centos network configuration commands, but I’ve tried to keep it to the point. jump to:Linux Network ConfigurationBasic Linux Network CommandsAdvanced Linux Network Commands Linux commands for Networking Configuration Read more…
I just realised I dont have a post on how to install xdebug in centos7 with php7 and setting up xdebug and eclipse. Its a feature that I use every day, and I had assumed I already had a post, but when searching my site ) only found instructions for Read more…
I ordered some transparent buttons for my Gameboy Pocket so that I could do my Gameboy Pocket Custom buttons mod. This post shows how to replace the buttons in your Gameboy Pocket and shows off my mod :) Before the button mod – my Gameboy Pocket and my Gameboy advance Read more…
How to replace macbook air battery. I have a macbook air, its a 2012 13″ – the battery was awesome in the beginning, but after 4 years it was time to replace the battery. I ordered a flueron replacement from amazon prime and it arrived next day. On opening the Read more…
Configuring free ssl certs with letsencrypt in centos Using letsencrypt in centos requires a few modifications to your centos before you can run the letsencrypt client. The setup for vhosts in centos is different from the setup in debian based distros. This is how I modified my centos install to Read more…
Hardening ssl ciphers. I wrote a post previously about disabling sslv2 and enabling sslv3 and tlsv1. Times have changed since then, its been best-practice for a long time now to only use tlsv1.1 and tlsv1.2 with forward secrecy. This post replaces the previous post, and will be updated with the Read more…
I was given this Edinburgh Beer Factory Paulozzi by one of the Doctors in the building where I work; I got it 3 weeks ago now, and didn’t drink it till last week, and didnt have time to add a blog post till now :| I’m not usually a lager Read more…
I decided to give up smoking (smoking analogs is the correct term – I’ve since learned) a week ago today. I bought a Kanger Subox Mini in black – its a ‘vape mod’ – a fancy e-cigarette that takes flavoured liquid and evaoprates it so that you can inhale the Read more…
This post will show you how to use iptables on centos7. Centos7 has moved its firewall service to firewalld, away from iptables, but if you have been running centos for a while (I’ve been running iptables since I moved from ipchains), you will no doubt have a big list of Read more…
This post will explain ddwrt dnsmasq caching dns server configuration Using a ddwrt dnsmasq caching dns server lets machines in your LAN resolve DNS from a machine inside your local network, ultimately reducing the time to resolve an IP address from a domain name. If there is a result in Read more…
We decided to sleep in and miss breakfast today. So at about 11 we headed along the Corsa Italia in Sorrento for something to eat. Zoe had a chicken burger, I had a cheeseburger that was in a black bun! We went along to the lanes and I got a Read more…