Fun with SHODAN | Shodanhq.com is awesome. These are fun: http://www.shodanhq.com/search?q=X-Powered-By%3A+PHP%2F5.1.2 Many sites running old PHP from 2006. Edit as desired to find an old php target. http://www.shodanhq.com/search?q=X-AspNet-Version%3A+1.1.4322 Incredible how many sites still use ASP .NET 1.x http://www.shodanhq.com/search?q=%22cisco-ios%22+%22last-modified%22 Web management pages for Cisco devices that have authentication disabled. http://www.shodanhq.com/search?q=Server%3A+Microsoft-IIS%2F5.0+ IIS 5.0 http://www.shodanhq.com/search?q=Server%3A+Apache%2F1. Ancient versions of Apache still in use
Open Source Auditing Tools
Open Source Auditing Tools | Here are various open source tools that are useful for security auditing! If you are a consultant, or an admin that just likes to be on top of his game, these are free open source tools that help audit the security level of workstations and servers in your environment. Note: These are by nature Linux-friendly
Remote Access Without Opening Ports
Remote Access Without Opening Ports | Q. How can I access my computer or family’s computer remotely without having to open up ports in the firewall? A. Using a [free] third party app is the solution Here are a few free* solutions to connect remotely and keep your home ip ‘stealth’. (*Free for non-commercial use.) These work with Mac OS X,
Banner Grabs with netcat and nmap
Banner Grabs with netcat and nmap | netcat can be used to quickly grab a service banner, as well as trusty nmap. I’ll show you some tips! The netcat command is simply: $ nc [target] [port] Add tack v to get more verbosity. Examples: $ nc -v scottlinux.com 22 Connection to scottlinux.com 22 port [tcp/ssh] succeeded! SSH-2.0-OpenSSH_5.3p1 $ nc -v scottlinux.com 80
TCP/OS Fingerprinting Tools – p0f and nmap
TCP/OS Fingerprinting Tools – p0f and nmap | The particular way an operating system or device sends and receives TCP packets provides a unique fingerprint. TCP header information such as the window size, TTL, overall SYN packet size, MSS, MTU and so forth can help identify the OS. This is known as OS fingerprinting. The best known passive TCP fingerprint tool is p0f,
Open and Extract winmail.dat Files
Open and Extract winmail.dat Files | How can I open winmail.dat or other .dat files? Outlook users sending HTML emails with attachments often reach other users as an odd winmail.dat file. (Thanks, Microsoft!) I’ll show you some tips on how to open that attachment! The perhaps easiest way to extract or view these sort of attachments is via the excellent website:
flac – Audio Codec of Choice
flac – Audio Codec of Choice | Similar to MP3 (but lossless), flac is an audio codec for your music. Instead of ripping to MP3, consider ripping to flac! flac stands for free lossless audio codec Why choose flac? flac is awesome for various reasons: Entire original source file is retained (excellent for CD archiving _with_ metatags!) Zero quality loss (lossless) Can
Useful Windows Commands
Useful Windows Commands | Here are some basic Windows commands that are good to know! Hit Windows key + R or use the Search box to type these commands. gpedit.msc Group Policy Editor services.msc Services devmgmt.msc Device Manager compmgmt.msc Computer Management This one is cool: Crack open a command prompt. (Windows key + R or Search box -> cmd
scottlinux.com RSS feed url update
scottlinux.com RSS feed url update | The RSS url for scottlinux.com has been updated to simply: http://scottlinux.com/feed The previous somewhat weird url ‘http://scottlinux.com/?feed=rss2′ now redirects to the above correct one. However, you may have to update your RSS readers. Apologies and safe hacking,
Convert VDI to VMDK – VirtualBox to VMware
Convert VDI to VMDK – VirtualBox to VMware | To convert a VirtualBox vdi image to VMware, use the built-in VirtualBox command line utility VBoxManage. I’ll show you how! 1. First uninstall the VirtualBox Guest Additions from your VM to prepare for portability. 2. Next (if desired) copy the .vdi image file to a temp location as a backup. 3. Now determine the UUID
