Wardriving with Kismet, GPS and Google Earth.
Wardriving was once a really popular sport, I myself loved mapping new areas with my trusty Orinco Gold Card. I’m not sure how popular it is these days but I…
Linux
Reporting SSL/TLS Issues the Easy Way with YANP
What’s YANP I hear you ask? YANP stands for “Yet Another Nessus Parser” written by Alessandro Di Pinto and I’m over the moon that I found it. I’ll tell you…
Quick Guide to Installing Bloodhound in Kali-Rolling
Intro I have had a few people over the last couple of months asking me how to get Bloodhound up and running after I had sung its praise since seeing…
Exploiting MS17-010 – Using EternalBlue and DoublePulsar to gain a remote Meterpreter shell
This walk through assumes you know a thing or two and won’t go into major detail. After all it’s meant for fellow researchers and penetration testers. Findings so far… Findings…
Exploiting the OpenNMS/Jenkins RMI Java Deserialization Vulnerability
Even though this vulnerability was detected back in 2015 I am only starting to notice it popping up on engagements more frequently. CVE-2015-8103 – Jenkins CLI – RMI Java Deserialization…
CentOS 7 Server Hardening Guide
So… you’ve just setup a shiny new server and you want to take measures to keep the bad guys out? Well, here I will give you a few tips on…