Got asked to help remotely locate local admins on boxes on a network. rpcclient $> enumalsgroups Usage: enumalsgroups builtin|domain [acc...

Nothing earth shattering, but since this is a place for my notes... Sometimes while you are on a box and pilfering through all the documents...

This morning I saw a tweet by @dinodaizovi . Dino posted a comment regarding an article by Google (you can find Here ) responding to an i...

Thank you to Mario Steele for creating a wxruby gem compatible with the more recent versions of Ubuntu's G++ compiler. You can download ...

As of the release of Burp 1.3.5 the same methodology shown in a previous post video (using Android SSL enforced apps with Burp) is a bit dif...

Thanks to a tip from a friend it turns out I've had the wrong version of DirSnatch posted all along. Nobody complained so I had no clue....

Metasploit has a nifty PHP Remote File Include module that allows you to get a command shell from a RFI. Not too complicated to use, set you...

Back in 09 there was a buzz about token kidnapping by Argeniss http://www.argeniss.com/research.html http://www.argeniss.com/research/TokenK...

MC pushed out a new exploit today ( jboss_deploymentfilerrepository ) so while it lists 4.x as vuln, actually several other versions are vul...

Layer Four Traceroute (lft) http://pwhois.org/lft If you are using the one bundled with your distro you are probably missing out some of the...