Background SQL Server has a function called CAST, that converts an ASCII codes array to text. Hackers can use this function to obfuscate the SQL Injection payload, and bypass filters that block SQL commands or hazardous characters. Here is an…
Let’s get started detecting streams (ADS) What is an stream? An stream is essentially a hidden file within another file (.txt, .jpg, .mp3, .exe, etc) Why should I care? Files can contain malicious streams and compromise your machine Creating an…
Names You Need To Know in Data Security: Cleversafe This article is about a company called Cleversafe that has created a secure and redundant way to store enormous amounts of data. The article also explains why this technology is…
how to detect php backdoor ? (Note content is from ) Website security: How to find backdoor PHP shell scripts on a server This is supplemental information for a series of articles that begins at: Website security: what to do…
i just read a great article on how to browse the web securely with his creation of the “Secure Browsing Environment”. The author shows you how to: Spin up your own linux virtual machine instance of WattOS Set up shared…
How to install fail2ban on ubuntu 10.10 Install Fail2ban # apt-get update # apt-get install fail2ban List IPtables to see if it is running # iptables -L You will see this at bottom of IPTables: Chain fail2ban-ssh (1 references) target…
howto use htaccess apache I just came across a great article that give at least a hundred htaccess examples in different situations. It can be found here. Table of Contents General htaccess definition htaccess comments important information performance issues regex…
Here is an FTDNS example (File Transfer via DNS) from Johannes B. Ullrich, Ph.D. (): File transfer via DNS For pentesters, this is helpful as it will first of all sneak past many firewalls, and secondly you do not need…
Background Before you can be a badass hacker you need to understand what exactly it is your doing. Today’s Lesson is on flooding a network with random MAC addresses. Switch Behavior If you fill up a switches table with random…
GNS3 is a graphical network simulator that allows simulation of complex networks. To allow complete simulations, GNS3 is strongly linked with : Dynamips, the core program that allows Cisco IOS emulation. Dynagen, a text-based front-end for Dynamips. Qemu, a generic…
