At work we use myzone as an incentive to keep people fit – we have challenges each month to see who can do the most :) Ive used Huel in the past, but the white version has lots of carbs – the black version is higher in protein and lower Read more…
By now, we have a basic vuejs app which can fetch data from a WordPress API using axios and can display the data.The aim of this series, however is to build an app and get it on the app stores. To achieve this, we are going to use cordova. Cordova Read more…
make users feel smart, not stupidfreeagent – bought over by RBSThey are a tech company, so have a strong engineering team1. Hiring is #1the hiring process needs to be good – there is a huge portion needed o be dedicated (eg 50%)Glassdoor is watching you.progression.fyiannual salary reviewshave clear progression pathways Read more…
Im listening to a great talk about culture inside a company – aira.net defining culture: you have to address the culture and define what you want it to be, it wont happen organically. you have to have a strong feedback culture to have a good culture you need to make Read more…
Os Detection Techniques Background information This is a list, with explanations for all the active and passive techniques I can find for remoteoperating system identification – there is a massive list of sources at the end. Background information: techniques Active fingerprinting – Active fingerprinting is the process of transmitting packets Read more…
Cyber Essentials is a UK government scheme to educate business about the most basic elements for cyber security Firewalls Patching Antivirus/malware detection Etc Company can be certified, which shows to your customers that you are aware of the risks and have mitigated some risk and are applying the best practices Read more…
I have decided to start studying towards a CISSP and / or an OSCP, as part of that I saw an excellent blog post recommending to go through a lot of CTF challenges from vulnhub.com. These are my Kioptrix walkthrough guides / findings and observations for each of the first Read more…
This is a WordPress mega-post containing a lot of best-practice information on securing, hardening, updating and maintaining a WordPress site. Used by more than 60 million websites, including 30% of the top 10 million websites as of April 2018, WordPress is the most popular website management system in use. (wikipedia) Read more…
Metasploit for website pentest using wmap. Wmap is a web application scanner that runs within metasploit. We can use wmap to get an outline of the application we are probing. Start dvwa inside vagrant In this tutorial I’ll be using dvwa in vagrant as my target If you dont have Read more…
Vagrant with sshfs. You can use sshfs in vagrant with only a private network. This is fine if you are doing all your devlopment from a single machine and dont need to access the vagrant box from your network, but if you need to run some testing from an external Read more…
It turns out that coding in php on android is possible (even if its not as good as on a mac, linux or even windows). In this blog post I’ll go into some editors, IDE’s and other options for editing php code (and running a development LAMP stack) on your Read more…
After playing with my google home mini for a few days I decided I needed a chromecast (I have appletv, roku boxes, and an old android tv box, but none work woth the google home. nice box. the chromecast. setup on the tv (complete with ice-lolly splashes from olivia) the Read more…
keynote panel: An E2E approach to tackling data security challenges of the IoT Right now we have lots of theory about security, so intellectually we are good. in practice we are terrible – old devices, devices that cant update, etc when you learn dev you dont learn security – you Read more…
Multiloquent 10 0 0 Changelog f5ed825 – post format 268d5ef – removing old hings e59727b – cleanup dd08d38 – version bump adb1fa7 – syntax error fix 68555e5 – fixes 089c9f0 – remove api key 90426b8 – updating readme 7195e1b – version bump c7dc318 – fix for images, version bunp dbc9b9a Read more…
Replace iphone home button: The home button on my iphone 6 plus stopped working, so I had to fit a new one. Unfortunately touchId won’t work any more but at least I’ll be able to open up my phone and see inside and also get a working button! I ordered Read more…
Vagrant with NFS and public_network. You can use NFS in vagrant, but it requires a private_network to work; This is fine if you are doing all your devlopment from a single machine and dont need to access the vagrant box from your network, but if you need to run some Read more…
At work we had a mac mini 2014 that needed an ssd harddrive upgrade. This post has a short video and some info on the process documenting how to remove the harddrive from a 2014 mac mini and install an ssd. You will need a few tools: guitar plectrum (to Read more…
Blackarch pacman package groups Install with pacman -S groupname to quickly install a bunch of tools in one command: This info is available in the blackarch developers guide here: https://blackarch.org/blackarch-guide-en.pdf – this post is a copy-paste of that info – there are a lot of red-team things in the list, Read more…
Blackarch on the chuwi hi10pro – prereq’s a usb hub a usb flashdrive a usb mouse a usb wifi adaptor (at least for the initial setup) Download blackarch from https://blackarch.org/downloads.html write to a usb drive (I used Etcher to do this part) Plug into chuwi and boot – Press F7 Read more…
How to root android on a chuwi hi10 Pro First, you need to enable developer mode How to root android on a chuwi hi10 Pro: Enable Developer Mode start android, goto settings > about tablet > click on “build number” 10 times Then you need to allow oem unlocking settings Read more…
Google recently announced the google partners mobile sites certification program. The Mobile Sites certification is a professional accreditation that Google offers to individuals who demonstrate proficiency in basic and advanced aspects of mobile website design and development. A Mobile Sites certification allows individuals to demonstrate that Google recognises them as Read more…
After trying Kali on the hi10 pro (its totally not ready for the bay-trail / cherry-trail platforms) I decided to give ubuntu on the chuwi hi10 pro a go (after hearing good things about their support) This is a short tutorial on dual booting ubuntu linux and windows10 on the Read more…
This is a short tutorial on dual booting windows and Kali on the Chuwi Hi10 Pro. Updated for Kali 2018.4 When I first wrote this post I seriously wouldn’t have recommended Kali on the Chuwi Hi10 Pro as an every-day system – Starting with 2018.01 and the 4.14 kernel it Read more…
Chuwi Hi10 Pro ultrabook tablet convertable surface – That’s some title, but I’m not sure how to describe my new machine. Its a tablet, but its also a laptop – it has a real keyboard and works exactly like a laptop, except you can remove the screen! It was a Read more…
We have a new client at work who are getting a bespoke CRM system built from scratch. They have been in for a meeting in Glasgow, and We went down to their head office in Ilford to beef out their specs. I got a taxi at 06:30, flight at 08:00. Read more…
We are lucky to get beer every Friday where I work. Here are some that Ill be trying over the next few weeks
Automatic updates in kali (and other apt based distros). There are a ton of ways to do automatic updates in kali linux (though this will work on debian, ubuntu, proxmox and any other apt-based system): 1) unattended-upgrades 2) a cron script 3) cron-apt This post will go through the various Read more…
This post has a collection of Linux commands for networking. There are basic linux network commands, advanced linux network commands and some centos network configuration commands, but I’ve tried to keep it to the point. jump to:Linux Network ConfigurationBasic Linux Network CommandsAdvanced Linux Network Commands Linux commands for Networking Configuration Read more…
Altcoins exploded in 2015. Minergate is a nice little site that offers various GUI clients for cpu and gpu mining. This is a short little post about mining altcoins in centos with minergate using the CLI client. Currently on minergate you can mine: Aeon [AEON] (aeon.cash) Bytecoin [BCN] (bytecoin.org) Bitcoin Read more…
There are a couple of different ways to install php7 on centos7 – Installing yum-plugin-replace and inline-replaceing the whole php subsystem seems to be the easiest way: You need to have a couple or yum repo’s enabled for this to work properly: webtactic and epel rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm rpm -Uvh Read more…
Configuring free ssl certs with letsencrypt in centos Using letsencrypt in centos requires a few modifications to your centos before you can run the letsencrypt client. The setup for vhosts in centos is different from the setup in debian based distros. This is how I modified my centos install to Read more…
I was given this Edinburgh Beer Factory Paulozzi by one of the Doctors in the building where I work; I got it 3 weeks ago now, and didn’t drink it till last week, and didnt have time to add a blog post till now :| I’m not usually a lager Read more…
This post contains the kali linux keyboard freeze fix. Kali 2.0 is out, and I’ve installed it on my work pc; one thing I noticed was that the usb keyboard kept becoming un-responsive. It was very annoying. Symptoms Keyboard stops responding randomly for a few seconds, making typing very difficult. Read more…
I ordered a Pibow Ninja Coupe a few days ago, and got it delivered to work this morning. This post is full of photos, unboxing the case and assembling the case with the raspberry pi inside it! The case arrived at work this morning At home, waiting to be opened Read more…
Natural Selection Brewing are a Herriot-Watt University Masters Project (yep, they do a masters degree in beer!) Each year they choose to do a different beer, and they do everything themselves – they concept the beer, make the recipe, brew it, package it, market it, distribute it, hold a launch Read more…
Multiple ip addresses on one physical NIC. I have a gigabyte brix running esxi to host a few virtualised servers. I have one server for my web development. I have multiple apps that all require running on port 80. I have one physical network port. Fortunately, you can have multiple Read more…
