77 results for tags
hacking x
-
oxid.it - Home
cain & abel updatepermalink -
Cain & Abel v4.9.45 released
- Added Windows 8 support in LSA Secret Dumper.
- Added Windows 8 support in Credential Manager Password Decoder.
- Added Windows 8 support in EditBox Revealer.
- Added ability to keep original extensions in fake certificates.
- Added support for Windows 8 RDP Client in APR-RDP sniffer filter.
- Winpcap library upgrade to version 4.1.3 (Windows8 supported).
- OUI List updated.- http://www.oxid.it/index.html
-
Nmap Scanning past Watchguard Firewalls - Blog - Penetration Testing - Chris Gatford, HackLabs
bypass firewalls : stealth scanpermalink -
nmap -sS -iL targetlist.txt -P0 -sV -T2
When done with a full port range (-p1-65535) on four IP's it takes 1000 seconds to complete. The -T2 option is the time setting, T1 is the slowest.- http://www.penetrationtester.com/blog/2009/4/30/nmap-scanning-past-watchguard-firewalls.html
-
Part 2: Quick and Useful Tricks for Analyzing Binaries for Pen Testers
permalink -- http://pen-testing.sans.org/blog/pen-testing/2013/05/16/part-2-quick-and-useful-tricks-for-analyzing-binaries-for-pen-testers
-
Kali Linux - Penetration Testing Distribution - Documentation
permalink -- http://fr.docs.kali.org/
-
XSS Filter Evasion Cheat Sheet - OWASP
permalink -- https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet#DIV_expression
-
Infosec Reactions
a voir :permalink -
http://securityreactions.tumblr.com/post/48694886031/my-newbie-friend-exploiting-something-for-the-first
http://securityreactions.tumblr.com/post/48614746208/received-new-shiny-exploit-doesnt-work
http://securityreactions.tumblr.com/post/47537446031/noticing-a-critical-vulnerability-thats-wasnt-in
http://securityreactions.tumblr.com/post/46931464069/finding-out-a-friend-prefers-ie
http://securityreactions.tumblr.com/post/46246734903/launching-without-patching-a-known-critical-issue
http://securityreactions.tumblr.com/post/44784835834/when-the-client-asks-are-you-sure-you-did-not-leave
http://securityreactions.tumblr.com/post/43889513478/me-pulling-off-a-great-social-engineer
http://securityreactions.tumblr.com/post/43800767538/best-practices
http://securityreactions.tumblr.com/post/43812261515/mandiant-apt1-day- http://securityreactions.tumblr.com/
-
SQL Injection With Update Query | Learn How To Hack - Ethical Hacking and security tips
permalink -- http://www.rafayhackingarticles.net/2013/05/sql-injection-with-update-query.html
-
Skeleton Scribe: Practical HTTP Host header attacks
permalink -- http://www.skeletonscribe.net/2013/05/practical-http-host-header-attacks.html?m=1
-
Reverse shells one-liners
à voir aussi : http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheetpermalink -
et : http://lanmaster53.com/2011/05/7-linux-shells-using-built-in-tools/- http://bernardodamele.blogspot.fr/2011/09/reverse-shells-one-liners.html
-
Pass-the-hash attacks: Tools and Mitigation - pass-the-hash-attacks-tools-mitigation_33283
Explication détaillée de l'attaque "pass the hash" où l'on transmet directement le hash sans avoir besoin de connaître le mot de passe.permalink -- http://www.sans.org/reading_room/whitepapers/testing/pass-the-hash-attacks-tools-mitigation_33283
-
Comment exploiter une faille XSS avec le framework Beef ?
Petite présentation de BeEF (The Browser Exploitation Framework).permalink -
BeEF exploite le navigateur et permet d'en tirer un keylogger, webcam, etc...
A voir aussi les autres tools de Bindshell ici : http://www.bindshell.net/tools.html- http://www.funinformatique.com/comment-exploiter-une-faille-xss-avec-le-framework-beef/
-
Une grande collection des mots de passe pour l'attaque par force brute
permalink -- http://www.funinformatique.com/collection-mots-de-passe-attaque-force-brute/
-
Netcat | Les Tutos de Nico
EDIT : voir aussi http://www.6ma.fr/tuto/netcat+couteau+suisse+reseau-42permalink -- http://www.lestutosdenico.com/tutos-de-nico/netcat
-
SMB Relay Demystified and NTLMv2 Pwnage with Python
permalink -- http://pen-testing.sans.org/blog/pen-testing/2013/04/25/smb-relay-demystified-and-ntlmv2-pwnage-with-python
-
Overview - libyal - Overview of libraries - Yet another library library (and tools) - Google Project Hosting
Joachim Metz a développé bon nombre de librairies dédiées à la forensic : recherche d'informations sur du matériel info.permalink -- http://code.google.com/p/libyal/wiki/Overview
-
Hacking the <a> tag in 100 characters
permalink -- http://bilaw.al/2013/03/17/hacking-the-a-tag-in-100-characters.html