Search For ethernet

Enhanced printenv Script for Server Debugging

Post by AskApache Apr 14, 20111 comment

A souped-up version of the Apache printenv script for hard-core server environment debuggery.

#!/bin/sh
echo -e "Content-type: text/plain\n\n"
...
  __T "CURRENT PROCESS CMDLINE"
  {
   for p in `echo /proc/[0-9]*/cmdline`;
   do
    pid=${p:6:$((${#p}-13))}
    [[ $pid == $PPID || $pid == $$ ]] && continue;
    __M "[ /proc/$pid ]";
    sed 's/\x00/ /g;G' $p 2>/dev/null
   done
  }
 fi

Category: Hosting

Mac Address Vendor Lookup

Post by AskApache Nov 22, 2009comment

Category:

COMPUTER SECURITY TOOLBOX

Post by AskApache Sep 26, 20083 comments

List of mainly obscure security software geared more for the master pentester. These are mostly for unix, bsd, and mac and many are difficult to install and setup (require custom servers, inside access points, obscure libraries). Only programs that output data are included, so no actual exploits or anything. Most of these output extremely useful albeit extremely technical information.

Category: Security

Undetectable Sniffing On Ethernet

Post by AskApache Apr 14, 2008comment

I have been in some tight spots where I had to sniff a password or two off the wire, or sniff some packets off the wire and based on the packets content perform some action... Accidentally, I stumbled on a method to sniff data while remaining undetected and invisible.

Category: Hacking

Hacking VLAN switched networks

Post by AskApache Mar 30, 20082 comments

There isn't much vlan info on the net in terms of specifics and I had to learn all about it because I needed to log in to a switch that was on a different vlan. With the help of the Ettercap developers NaGA and ALoR I figured it out.

Category: Hacking
Tags: Hacking, security

Pen-testing Security Tools

Post by AskApache Nov 02, 20071 comment

While testing the exploitability of your target and mapping out vulnerabilities it is important to gain access inside the targets defenses so that you can establish an internal foothold like a owned box or switch. This is so you can use a tool to discover the packet-filtering being used, and literally map out the firewall/IDS rules. Needless to say that really provides you with a lot more complete vulnerability assessment to help discover more weak spots in the system.

Category: Security

Story by Author of PING for UNIX

Post by AskApache Oct 04, 2007comment

Yes, it's true! I'm the author of ping for UNIX. Ping is a little thousand-line hack that I wrote in an evening which practically everyone seems to know about. :-)

Category: Hacking

If you can crash your daemon, you likely have a security problem

Post by AskApache Sep 23, 2007comment

Tons of awesome tips and tricks using netcat. Port redirector, nessus wrapper, capture exploits being sent by vuln scanners, etc. This is very useful for doing stuff like redirecting traffic through your firewall out to other places like web servers and mail hubs, while posing no risk to the firewall machine itself.

Category: Security