precursor: this is about getting docker compose, docker volumes, and volume drivers to let you persist data in a user defined path (not the docker virtual path). so if you want to use compose, volumes, and have it write to a location like your development Read More …
I like encryption downgrade attacks and sslstrip. I hear a lot about attacks that are based on tricking clients to accepting a false certificate but I really like attacks that are based on weaknesses in the program logic itself. Enter CVE-2015-3152 (yes it lists the CVE as Read More …
Another cool python script here from TJ O’Conner’s work – this comes in handy 🙂 #!/usr/bin/python # -*- coding: utf-8 -*- import sys from scapy.all import * interface = ‘mon0’ hiddenNets = [] unhiddenNets = [] def sniffDot11(p): if p.haslayer(Dot11ProbeResp): addr2 = p.getlayer(Dot11).addr2 if (addr2 Read More …
Looking into some python recently and going through many code books, gonna start keeping up with useful bits here! #!/usr/bin/python import optparse from socket import * from threading import * screenLock = Semaphore(value=1) def connScan(targetHost, targetPort): try: connSkt = socket(AF_INET, SOCK_STREAM) connSkt.connect((targetHost, targetPort)) connSkt.send(‘grab\r\n’) results Read More …
Here is scoring server I wrote back in 2010-2011 for using in hacking/ctf competitions. It’s built in LAMP (linux apache mysql and php). Its fairly easy to use and a little messy on the code side as it’s my first php project. It’s  database driven Read More …