Hacking – coopreme

MySQL SSL Stripping

Posted onApril 30, 2015May 12, 2021

I like encryption downgrade attacks and sslstrip. I hear a lot about attacks that are based on tricking clients to accepting a false certificate but I really like attacks that are based on weaknesses in the program logic itself. Enter CVE-2015-3152 (yes it lists the CVE as Read More …

Pentest Lab Setup

Posted onApril 9, 2015April 9, 2015

I’ve setup a lot of hacklabs at work and for personal use they started out as physical networks and migrated to virtualized networks. However I’ve always wanted to set one up on my mid-2012 MacBook Pro rather than the thinkpad, panasonic, or other laptop. I’ve Read More …