diablohorn.wordpress.com

blog.teusink.net

blog.teusink.net: Passwords stored using reversible encryption: how it works (part 1)

http://blog.teusink.net/2009/08/passwords-stored-using-reversible.html

About security, pentesting and everything else. Tuesday, August 25, 2009. Passwords stored using reversible encryption: how it works (part 1). This feature is not enabled by default but I’ve seen it a couple of times in customer networks. As I couldn’t find any description of how this mechanism works or any tool to recover these passwords, I decided to investigate. When you change your password on a domain that has reversible encryption enabled, a password filter. You can look at this structure in an AD ...

mattandreko.com

Burp Icon in OSX - MattAndreko.com

https://www.mattandreko.com/2014/08/01/burp-icon-in-osx

Hostess is a code-slaying dragon found deep within the core of the earth, unearthing magma and vulnerabilities single handedly while using the other hand to pet his cat". Burp Icon in OSX. Recently, I on a Google Hangout with a coworker and saw him using the Burp Suite. And this post should document the process I found that worked for me. So first, to describe my configuration, I keep the Burp Suite. Jar files in my ‘ /Downloads/burp/’ folder, as shown here:. IRC channel, and a little Googling. Automator...

blog.teusink.net

blog.teusink.net: July 2010

http://blog.teusink.net/2010_07_01_archive.html

About security, pentesting and everything else. Sunday, July 4, 2010. Hacking wireless presenters with an Arduino and Metasploit. I gave a presentation this week at Hack in the Box. In Amsterdam about hacking wireless presenters (slides here. At lot of security research has been done on wireless keyboards in the last couple of years. 27Mhz keyboards were attacked successfully and can be sniffed using a home-built device. Needless to say doing so may be a criminal offence in your country. I started my res...

mattandreko.com

Compiling SSLScan With SSLv2 Support on OSX - MattAndreko.com

https://www.mattandreko.com/2014/12/17/compiling-sslscan-with-sslv2-support-on-osx

Hostess is a code-slaying dragon found deep within the core of the earth, unearthing magma and vulnerabilities single handedly while using the other hand to pet his cat". Compiling SSLScan With SSLv2 Support on OSX. This guide will outline how to compile the newer versions of SSLScan with color highlighting, on OSX while retaining SSLv2 capabilities. It has so far only been tested against OSX Yosemite. Downloading the source code. Then download the SSLScan code using ‘git’. To build these applications, y...

sovasec.com

Southern Virginia Security » 2009 » June » 15

http://www.sovasec.com/2009/06/15

June 15th, 2009. Now browsing by day. CyberWar is a Racket. Monday, June 15th, 2009. Inspired by ‘War is a Racket’. By Maj. Gen. Smedly Darlington Butler U.S.M.C. CyberWar is a Racket. Under the threat of war, the cost of defense is never too high. A nation is under significant obligation to protect its investments where ever they may be. The United States’ trade deficit is in the trillions of dollars. The nation must possess assets for which they use to back the value of money sent overseas. These dolla...

sovasec.com

Southern Virginia Security » Cyber Wars

http://www.sovasec.com/tag/cyber-wars

Now browsing by tag. Cybersecurity Act of 2009. Director of National Intelligence. National Institute of Standards and Technology. Office of Management and BUdget. Cyber Fear Echo Chamber. Wednesday, December 2nd, 2009. Theologians, Politicians, and Financiers agree! When in doubt use a little fear and not FUD. Interesting how things pick up right where we left off; with discussion of MAD and CyOffensive Stratagies. Can America take over the internet? Counselor to DHS’ top cybersecurity official. 8221; &...

sovasec.com

Southern Virginia Security » Blog Archive » CyberWar is a Racket

http://www.sovasec.com/2009/06/cyberwar-is-a-racket

Laquo; S.773 Cybersecurity Act -quick summary. CzarWars Episode 1 – The Phantom Finance. CyberWar is a Racket. Written by SoVaSec on June 15th, 2009. Inspired by ‘War is a Racket’. By Maj. Gen. Smedly Darlington Butler U.S.M.C. CyberWar is a Racket. Under the threat of war, the cost of defense is never too high. A nation is under significant obligation to protect its investments where ever they may be. The United States’ trade deficit is in the trillions of dollars. These dollars are then stockpiled or u...

securityartwork.es

Ismael Liceras, Autor en Security Art Work

http://www.securityartwork.es/en/author/iliceras

Blog de Seguridad de la Información de S2 Grupo. Two-step authentication, or how to make it tough for a hacker. 27 de February de 2015. Two-step authentication is a protection approach widely known among cyber security people but it is not that known among regular users. This article aims to teach everybody about it, as domestic user accounts are more and more targeted by hackers. Leer Más. Click to share on Facebook (Opens in new window). Click to share on Twitter (Opens in new window). Menos de un mes.

blog.distracted.nl

Distracted: Cacheebr, the MS Cache password brute forcer

http://blog.distracted.nl/2009/05/cacheebr-ms-cache-password-brute-forcer.html

Writings about the things that keep me busy. While I should actually do something else. Friday, May 15, 2009. Cacheebr, the MS Cache password brute forcer. I built an MS Cache brute forcer. The MS Cache hashes are a little harder to optimize. They are salted and need 2x MD4. This is how you built an MS Cache hash:. Built NTLM hash for the password: MD4(Unicode(password). Append Unicode&lowercase username to the NTLM hash. So in short: MD4( MD4(Unicode(password) Unicode(tolower(username) ). I can understa...