Archive for October, 2006

Thoughts on Metasploit

On the 28/10/2006 HD Moore released version 2.7 of his infamous Metasploit package. In my opinion he deserves to be credited for his excellent contributions in this area. However, I do wonder how long this framework will be effective?

Metasploit 3 seems to be going in the same direction as the commercial Core Impact exploit suite [...]


JSScanner

JavaScript Network Mapper (v1.0)
author: david.kierznowski_at_gmail.com
http://michaeldaw.org

I have been doing alot of research into JavaScript Port Scanning lately. This tool is an initial attempt to correlate my ideas into a single project.

Download the latest version of jsscan.tar.gz here.

Synopsis:
function webPingScan() {
s = new jsscanner(”192.168.1.1/30″);
s.jssWebPing();
}

Usage:
s = new jsscanner(”IP/Range”);
s.jssWebPing(); OR
[...]


Web Browser Port Restrictions

Some of my notes regarding Browser Port Restrictions.

Internet Explorer:

Anything goes. I need to look into this more.

Opera 9:

Resticts access to Ports 22,25,53 and 110. All other services seem accessible, I need to do more work here – It was interesting to note that my CPU was cranked up to 100% when requesting a restricted port. [...]


WIFI Hacking

Max Moser and team from remote-exploit.org are doing some great stuff:

- Backtrack
A brilliant linux distribution designed for penetration testers. I have used this distro for a number of tasks (especially WIFI testing) and it just works!

- WIFI Cheat Sheet
Contains up to date information on default WIFI insecurities and vulnerabilities.


Beef Delight

So all her friends have warned her against dating a computer nerd, or you feel like roughing up some serious grub before hitting up the code. Regardless of the reasoning, this is a Michael Daw classic.

Things you will need:
- Two pieces of “stewing” steak (500g)
- Rice
- Mixed Vegetables and Red Peppers (Red is good for [...]