Archives
- RDP Cert Scan with nmap
- Pop ESP
- Use After Free Exploits for Humans Part 1 – Exploiting MS13-080 on IE8 winxpsp3
- Crypto Attacker Burp Plugin
- Belated Codegate 2014 Quals Writeups and Lessons Learned
- MSCash Hash Primer for Pentesters
- Soft Function Hooking with windbg and pykd
- Code Execution (Post Exploit) Order of Operations
- A few Metasploit Post Exploit Resource Scripts
- Yet another VBS pwncode generator
- The Deputies are Still Confused (Full talk and content from Blackhat EU)
- Powershell Portscanner
- CSRF tips for dealing with x-frame-options
- Cookie Tossing in the Middle
- Common OAuth issue you can use to take over accounts
- Qualys validaterequest ‘finding’ is an Annoying PCI Problem
- Using windbg to beat my dad at chess
- DPAPI Primer for Pentesters
- Common .NET ViewstateUserKey CSRF Issue
- .NET MVC AntiforgeryToken CSRF Testing
- Stripping the Referer in a Cross Domain POST request
- ValidateRequest should probably still be Enabled
- Free Stanford ‘Intro to Cryptography’ Class Review
- BeEf Clickjacking Module and using the REST API to Automate Attacks
- Extracting Certificate Info from Things (like web services)
- CSAW 2012 Quals Tutorial/Writeup
- CVE-2012-5357,CVE-1012-5358 Cool Ektron XSLT RCE Bugs
- Rocking the Vote to Figure out how old my ex-Boss is
- Dan Guido’s Favorite Food? (A script to search reddit comments)
- Defcon 2004 CTF Quals Writeup
- Clickjacking Google
- AV Evading Meterpreter Shell from a .NET Service
- Redirecting STDIN on windbg
- Analysis of John Wilander’s Triple Submit Cookies
- Metasploit Generic NTLM Relay Module
- Some Practical ARP Poisoning with Scapy, IPTables, and Burp
- Interesting Problems with .NET IsPostBack()
- Google Docs Billion Laughs
- PPP pwnables 99
- Hello Wordpress.com
- 3 Quick Metasploit Tips
- Calculating an Integer Overflow
- Blind Second Order SQL Injection with Burp and SqlMap
- Some Interesting URI Parsing Quirks and Open Redirects
- Server Shells from Web Clientside Attacks
- Auto login to LiveID with Burp Macros/Session
- DOM XSS Behind a WAF
- Serving Back XML for XSS
- Is it already 2012?
- Linkedin Crawler
- Toorcon 2010 Talk
- email_spider
- pydbg reverseme solution
- Reverseme Windows Keygen
- Nmap script to detect Debian OpenSSL Random Number Generator Weakness
- Reverseme: Namegenme
- Reverseme: Easy Windows Using Reflector
- Reverseme: Easy Windows
- nmap script to try and detect login pages
- Nessus Grep
- calling convention cheat sheet
- snmp cheatsheet
- Nessus with Nikto – Running out of memory
- proxychains – handy tool!
- mycontroller – done
- Auto Pw Change
- Where was the Hacker in the Room for X-FRAME-OPTIONs?
- 8-queens problem hill climbing python implementation
- The square of random is less uniform (derr)
- Finished RTOS similar to FreeRTOS
- Paper Fun: Simplified Single Packet Authorization
- Paper fun: Concerns with Time-Space Based Wireless Security
- GPG Cheat Sheet
- Simpson’s Paradox
- execv-like system call
- I thought of a new slogan for cups…
- RTOS and the Parallax Propeller
- browsing with firefox, tor, refcontrol, and noscript on ubuntu
- playing a scale with the atmega16
- Security in an Insecure Environment
- Format String Exploits
- avr interrupts
- stk500 avr atmega16 linux gcc hello, world
- php multiuser system – the www-data problem
- Auto Restore Virtualbox
- Social Network Analysis of Disclosure
- Count number of lines in a file
- mounting partitions from a disk image
- Bash Error Checking
- sorta captcha breaking thing
- An analysis of a Time Synchronization Protocol
- madwifi == awesome
- gcc security tips
- convert flash to mp3
- HTTP over SSH
- 2.0.38 /usr/src/linus/fs/ufs/ufs_super.c
- modular exponentiation python program
- Analysis of a proposed key-management scheme for DSN
- gnu readline – python
- Golay G24
- isbn-10 validity identifier
- wargames reverseme
- python anagram finder
- Windows reverseme – nothing tricky
- Basic TKinter GUI format in python
- rdp over ssh into your office box
- md5check directories
- recursive remove in python
- ISUbuntu
- my home voip setup
- process monitoring with kill
- ldap by hosts
- The easiest way to backup an ldap database
- wget login pages
- Using smbclient to view public cifs shares
- Encrypt a message with RSA in python
- Get Weather from the commandline
- Simple Beauty Website Baker Template
- syn cookies
- sizeof()
- Privilidge Separation in sshd
- Small Steps
- getfacl, setfacl
- swappiness is the route to happiness
- fail2ban attack
- strong passwords with pam_cracklib
- Unintended consequences of half open scans
- View/change UUID in Linux
- Spoofing IP Addresses
- Reverseme – windows
- fpdns
- syscall table
- Bash Bomb
- vim tricks – different types of insert, repeat
- vim trick – restoring something you delete
- mycontroller – Cache
- Windows Password, geygen, password reverseme
- Reverseme – very very easy Linux
- Rescue initramfs
- websitebaker module: Random pic with text
- Really global environment variables for ssh
- chkrootkit
- Build a Bridge and Get Over it
- mycontroller – DMA
- Matrix Multiplication Optimization in C++
- print shell code
- unmask – python profiling tool
- websitebaker modules
- ssh-keygen -R
- The Magic Constant
- Getting rid of the Lame Ubuntu Splash screen
- add some color to your man
- scanrand
- mycontroller – RAM
- Program Counter
- RAMEL
- Broadcom Wireless and Linux
- TCP/IP Drinking Game
- Matching Regular Expressions that don’t end with…
- Longest Common Subsequence in C++
- Hanging mount (not the way you like it)
- Reverseme – Trivial Linux
- Rotating a movie with mencoder
- vim tricks
- Get Mail List from LDAP
- Common Permission Error
- PDPTA Paper
- Zombie Killer
- Readelf – a sexy little elf
- Boot Ubuntu into Runlevel 3
