Tutorials

Executing commands in MySQL with it’s running privilege

Sometimes when you are pen-testing or doing what ever your doing. You get an access to a box with a normal user privilege and you have an access to mysql as a root user, or the mysql root’s password is blank. You think you can’t execute commands on the box More >

The Art of Pivoting and Enumeration

While I was pen-testing a network there was one of the boxes a Windows 7 which was connected to an internal network that I needed to reach, enumerate and PWNE.

Some information about the network

Pentester (me): 192.168.1.30
Windows 7 (the one which has access to an internal network): 192.168.1.200
Internal network: 10.10.10.0 / 255.255.255.0

I have all the Admin’s More >

Create your own malicious keyboard or mouse!

In this tutorial I’m going to talk about how to create your own malicious keyboard or mouse. We will be using a small programmable USB-based micro-controller called Teensy from http://www.pjrc.com/teensy/.

Specification Teensy 2.0 Processor ATMEGA32U4 Flash Memory 32256 RAM Memory 2560 EEPROM 1024 I/O 25 Analog In 12 PWM 7 UART,I2C,SPI 1,1,1

This is More >

How to install Android 2.2 CN:Froyo

Google have just released Froyo ( Android 2.2) couple days ago, and the source code still not available. Hopefully, It’ll be available soon. I can’t wait to see it’s mods! Some of the new features in this release are: (more…)

Playing with ‘r8187′

Hello again guys ,, sorry for being away all that time… anyways i’ll get into the subject directly

i bough a wireless card “gb” that uses r8187 driver and i pluged it with an antenna , the maximum TX-power the regular linux driver can be increased to 12 or 15 as More >

The Evil Access Point!

In this tutorial we are going to create an evil wifi access point! when someone connects to it and uses some services like “pop3,imap,ftp,smtp,http,https,dns” these services will be tested for all the expoits that maches them in the metasploit framework 3 and tries to exploit each one , when one More >

Psyco & bruteforce accelerating

What is Psyco ?

Think of Psyco as a kind of just-in-time (JIT) compiler, a little bit like what exists for other languages, that emit machine code on the fly instead of interpreting your Python program step by step. The difference with the traditional approach to JIT compilers is that Psyco More >

Moved to dwm.

I’m a Gnome user for along time and just decided to move to a simple , small , stable and fast window manager i found lots of them online like wmi , wmii , dwm , fluxbox , openbox , blackbox …etc and from all of these window managers i More >

Coffee Binary Wifi

Hello Guys … today i went to coffee beanery with my laptop indeed i search for the wireless networks and the nearest one has an essid of “cblink” its the caffe beanery link anyways it has an WEP encryption WEP cipher so i went to the women that works here More >

Faking Xchat ctcp ‘VERSION’ replays

Xchat is a multiplatform IRC client , if you use it someone can easily know what version your using and sometimes the

Operation system your using which will effect your security sometimes .. for example

>Qnix< CTCP VERSION * Received a CTCP VERSION from Qnix -Qnix- VERSION Xchat 2.* (gentoo ..etc)

as you More >