Use Curl to Fetch ASP.NET Version Banner

Published on May 11, 2012, by in sysadmin, windows.

The version of ASP.NET is sent in a banner with http requests and can be viewed with a curl command. I’ll show you how! X-AspNet-Version: 2.0.50727 To view this with curl, use tack capital I and fetch any url ending in .aspx. A random url ending in .aspx works as well: $ curl -I 10.112.12.67/asdfsaf.aspx

(More)…

Expand Windows 7 VirtualBox Hard Drive

Published on April 12, 2012, by in windows.

Out of space with your Windows 7 VirtualBox instance? No need to reinstall the vm. Using the free bootable iso clonezilla, you can clone your Windows 7 VirtualBox guest to a larger hard drive. I’ll show you how! 1. Download a copy of the latest stable clonezilla iso: http://clonezilla.org/downloads.php 2. Add a second larger virtual

(More)…

Fun with SHODAN

Published on March 30, 2012, by in linux, sysadmin, windows.

Shodanhq.com is awesome. These are fun: http://www.shodanhq.com/search?q=X-Powered-By%3A+PHP%2F5.1.2 Many sites running old PHP from 2006. Edit as desired to find an old php target. http://www.shodanhq.com/search?q=X-AspNet-Version%3A+1.1.4322 Incredible how many sites still use ASP .NET 1.x http://www.shodanhq.com/search?q=%22cisco-ios%22+%22last-modified%22 Web management pages for Cisco devices that have authentication disabled. http://www.shodanhq.com/search?q=Server%3A+Microsoft-IIS%2F5.0+ IIS 5.0 http://www.shodanhq.com/search?q=Server%3A+Apache%2F1. Ancient versions of Apache still in use

(More)…

Open Source Auditing Tools

Published on February 29, 2012, by in linux, osx, sysadmin, windows.

Here are various open source tools that are useful for security auditing! If you are a consultant, or an admin that just likes to be on top of his game, these are free open source tools that help audit the security level of workstations and servers in your environment. Note: These are by nature Linux-friendly

(More)…

Remote Access Without Opening Ports

Published on February 3, 2012, by in linux, osx, windows.

Q. How can I access my computer or family’s computer remotely without having to open up ports in the firewall? A. Using a [free] third party app is the solution Here are a few free* solutions to connect remotely and keep your home ip ‘stealth’. (*Free for non-commercial use.) These work with Mac OS X,

(More)…

Banner Grabs with netcat and nmap

Published on December 22, 2011, by in linux, osx, sysadmin, windows.

netcat can be used to quickly grab a service banner, as well as trusty nmap. I’ll show you some tips! The netcat command is simply: $ nc [target] [port] Add tack v to get more verbosity. Examples: $ nc -v scottlinux.com 22 Connection to scottlinux.com 22 port [tcp/ssh] succeeded! SSH-2.0-OpenSSH_5.3p1 $ nc -v scottlinux.com 80

(More)…

TCP/OS Fingerprinting Tools – p0f and nmap

Published on December 22, 2011, by in linux, osx, sysadmin, windows.

The particular way an operating system or device sends and receives TCP packets provides a unique fingerprint. TCP header information such as the window size, TTL, overall SYN packet size, MSS, MTU and so forth can help identify the OS. This is known as OS fingerprinting. The best known passive TCP fingerprint tool is p0f,

(More)…

Home Archive for category "windows"
© Copyleft scottlinux.com CC BY-SA 3.0