Os Detection Techniques Background information This is a list, with explanations for all the active and passive techniques I can find for remoteoperating system identification – there is a massive list of sources at the end. Background information: techniques Active fingerprinting – Active fingerprinting is the process of transmitting packets Read more…
I have decided to start studying towards a CISSP and / or an OSCP, as part of that I saw an excellent blog post recommending to go through a lot of CTF challenges from vulnhub.com. These are my Kioptrix walkthrough guides / findings and observations for each of the first Read more…
This is a WordPress mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. (wikipedia) Read more…
Malware detection on Plesk systems using maldet and clamav Linux Malware Detect (LMD) is a malware scanner for Linux released under the GNU GPLv2 license, that is designed around the threats faced in shared hosted environments. It uses threat data from network edge intrusion detection systems to extract malware that Read more…
I finally swapped my iPhone for an android phone. I’ve been an iPhone user since the iPhone 3gs, right through till the 6plus. I was spoiled a little in the last 3 years as I didn’t change my phone (it shows how good the 6plus is) and I didn’t need Read more…
Remote Debugging PHP in SublimeText with XDebug prereqs: This post assumes you already have a working xdebug install SublimeText How to get Xdebug working with Sublime Text? Open SublimeText Open the package install dialog (cmd+shift+p then type “pack inst”) Search for ‘xdebug’ Select Xdebug Client and Press enter Setting Up Read more…
A comparison of service-oriented architecture and frameworks IntroductionPapazoglou, (2003) organised SOA in four architectural layers: Service Foundations, Service Composition, Service Management and Service Engineering and outlined a host of technologies that could be utilised when developing and deploying an SOA system to overcome the challenges of a distributed enterprise system, Read more…
build your own blockchain application in less than an hour Edward Ciggaar developer advocate IBM I’ve been looking forward to this one for a while now :D starting with an example of a game (coffee with blockchain) the hyperledger platform was explained – a map was shown on the screen Read more…
This is a very interesting panel on cyber security and id management / user verification using blockchain technologies its a lot of high level topics, and a few of the companies exibiting have product that addresses the topic ID verification seems to be a hugh topic here – for finance Read more…
There are a couple of things you need for mining monero in osx using xmring: 1) A monero wallet (get one from mymonero.com) 2) Homebrew (brew.sh) mining monero in osx using xmring: dependencies You have to make sure you have homebrew installed (so that you can install the xmrig dependencies), Read more…
Blackarch pacman package groups Install with pacman -S groupname to quickly install a bunch of tools in one command: This info is available in the blackarch developers guide here: https://blackarch.org/blackarch-guide-en.pdf – this post is a copy-paste of that info – there are a lot of red-team things in the list, Read more…
Automatic updates in kali (and other apt based distros). There are a ton of ways to do automatic updates in kali linux (though this will work on debian, ubuntu, proxmox and any other apt-based system): 1) unattended-upgrades 2) a cron script 3) cron-apt This post will go through the various Read more…
This post has a collection of Linux commands for networking. There are basic linux network commands, advanced linux network commands and some centos network configuration commands, but I’ve tried to keep it to the point. jump to:Linux Network ConfigurationBasic Linux Network CommandsAdvanced Linux Network Commands Linux commands for Networking Configuration Read more…
Altcoins exploded in 2015. Minergate is a nice little site that offers various GUI clients for cpu and gpu mining. This is a short little post about mining altcoins in centos with minergate using the CLI client. Currently on minergate you can mine: Aeon [AEON] (aeon.cash) Bytecoin [BCN] (bytecoin.org) Bitcoin Read more…
How to install birdwatcher in kali linux Birdwatcher is an OSINT data analysis and data gathering tool for twitter. Birdwatcher has been designed to feel like metasploit or recon-ng, so should be familiar for anyone who has used those tools. Install birdwatcher in kali linux: Kali has ruby 2.2.x. by Read more…
Configuring free ssl certs with letsencrypt in centos Using letsencrypt in centos requires a few modifications to your centos before you can run the letsencrypt client. The setup for vhosts in centos is different from the setup in debian based distros. This is how I modified my centos install to Read more…
Automatic cron updates with yum-cron on centos Update: I made a post on installing and configuring yum-cron in centos I have a virtual machine on my esxi box running centos 7. I dont log in all that much, as most of the operations that are run are automatic (eg polling Read more…
This is a quick post about importing nessus6 scan results into metasploit. This can be very useful for adding a ton of information into a new Metsploit database, or adding to information you already have (eg importing results from a weekly or monthly scan of a website / web server) Read more…
Multiple ip addresses on one physical NIC. I have a gigabyte brix running esxi to host a few virtualised servers. I have one server for my web development. I have multiple apps that all require running on port 80. I have one physical network port. Fortunately, you can have multiple Read more…
What is an sql injection attack? All websites process data entered by users. An input-validation attack is when unexpected user input is processed by a web server or database and an error occurs. What is an sql injection attack? “An SQL Injection Attack (SQLIA) occurs when an attacker attempts to Read more…
Linux / OSx commandline network host discovery This post contains Various ways to find the hosts in your network using commanline commands. For the following, it is assumed that: 192.168.1.0/24 is your whole network 192.168.1.255 is your broadcast address Replace with your own values (you can find these with ifconfig) Read more…
This is a short tutorial showing how to setup wordpress and cloudflare flexible ssl. Cloudflare offer a service called ‘flexible ssl’ this means that cloudflare encrypts your content between the end-user and cloudflare, but the connection between cloudflare and your site is not encrypted. This is a good solution if Read more…
This is a sponsored post. I dont usually do sponsored posts, but this one is different (I’m getting a hat for drawing attention to this, and I think its worthwhile). F1 isn’t doing to well just now, two teams have filed for administration [caterham and marrusia] and are missing two Read more…
This is a basic openvas tutorial for beginners. I will explain a little of how to use openvas web ui to perform a test of your systems. It will give you the basic options for using metasploit msfconsole to run an openvas vulnerability scan. You will also learn how to Read more…
This post will show you how to install phpcs and phpmd in sublime text on your mac: Following on from my post about using git and phpcs in brackets, I decided to try the same setup in sublime text. The first part is some background setup – installing phpcs and Read more…
This post will show you how to mount a remote ssh filesystem as a ‘drive’ in osx using a bash script, osxfuse and brew. There are a few ways to go about this, all of them require a bit of setup and tweaking, But I found this to be the Read more…
Oracle process overview. There are 3 types of oracle processes: USER processes SERVER processes BACKGROUND processes User connected to a user application (eg sql*plus) controls the application associated with an oracle server process Server processes there are 2 types of oracle server process, depending on configuration Dedicated ( 1 server Read more…
Oracle logical structures Oracle logical structures can be summarised by the following: Schema. Tablespace. Datablock. Redo log. Schema collection of objects (table, view, etc) owned by db user name is the same as db user mixed up (user is often used interchangeably with schema) access – user has access to Read more…
This is the change log for multiloquent 6 1 01 11a7be0 psr2 fixes abe3129 psr2 changes 80cbc30 misc tidy ups 00d17a1 tag link 5ea34c5 pagination dd3582f pagination still 9443ffa pagination b44f9be pagination 2a7d85b pagination 74f362f pagination 694c07f pagination 283bc75 pagination 8329440 pagination 59ed693 pagination 313d6f5 mb class in css 02ff70a Read more…
How to change the number of icons in launchpad – this is a great tip: change the number of icons in launchpad! if you use launchpad a lot (I don’t, because the icons are too big) then you can change the number of icons that are shown at any one Read more…
This post is a collection of things to form a best practice for mac security. 1) enable password after sleep or screensaver. settings > security > require a password immediately after sleep or screensaver. This will stop anyone who sneaks up on your machine when your not there from using Read more…
This is an easy way to change the username of your wordpress admin account: login as your current admin user navigate to users > all users add a new user make sure the role is ‘administrator’ give the user the desired username that you want the next steps are: logout Read more…
When trying to login you get a message similar to cannot verify login with facetime or messages on osx. warning: this is quite a complex set of instructions. In the end I ended up creating a new user account on my mac and transferring my documents to the new user Read more…
Enable camera on iphone or ipad lockscreen instructions for ios11 instructions for ios10 instructions for ios7 instructions for ios5.1 and ios6 instructions for pre ios5 How to enable camera on iphone or ipad lockscreen in ios11. In iOS 11 the camera is part of your control center – to show Read more…
Enable firmware password on osx: This post will show you how to enable the firmware password on osx firmware passwords will protect your mac from: booting from a cd or dvd booting from the diagnostic utility on the install dvd booting from the network booting from a different target drive Read more…
This will show you how to use ssh with keys for authentication. this has a couple of advantages over using passwords: 1) you can enable key only logins. 2) you dont need to type [or remember] passwords You will need two machines (though you probably know this already): remotehost.com – Read more…
I get a lot of spam bots visiting my site and trying to post comments. akismet stops them being in my approve queue (i have to approve all of the other comments) but I wanted a way to stop the bots being able to register. I also wanted a way Read more…
Here are some tips to make your mac boot faster: Rotate your logs open terminal > type: sudo periodic daily weekly monthly this command runs the log rotate scripts, etc Repair disk permissions applications > utilities > disk utility > repair permissions this command repairs disk permissions, this will fix Read more…