Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
User Journal

Journal Journal: Running Oracle DB modules in Kali Linux

Apparently, there is some manual work that needs to be done before one can run Oracle DB modules in Metasploit under Kali Linux. This is because of proprietary libraries from our dear Oracle.

Here are the instructions that worked for me:
http://blog.infosecsee.com/2013/08/how-to-get-oracle-support-in-metasploit.html

User Journal

Journal Journal: TP-Link wr703n minipwner

So I followed the instructions here:
http://www.minipwner.com/
to create a minipwner box using a TP-Link mini router.

However, using an older openwrt image would break the ones with the 1.7 firmware.
Here is the fix:

Unbrick wr703n wifi router
http://forums.openpilot.org/blog/52/entry-92-unbrick-wr703n-wifi-router/

User Journal

Journal Journal: Wrote my first snort rule!

Wrote my first snort rule! It detects if someone is trying to capture credentials via the auxiliary/server/capture/smb module.
More information about this type of attack is here:
http://www.packetstan.com/2011/03/nbns-spoofing-on-your-way-to-world.html;

Rule:
alert tcp any 445 -> any any (msg:"SMB Metasploit credential capture attempt!"; reference: url,http://www.metasploit.com/modules/auxiliary/server/capture/smb; reference: url,http://www.packetstan.com/2011/03/nbns-spoofing-on-your-way-to-world.html; content:"|11 22 33 44 55 66 77 88|"; classtype:attempted-user; offset: 73; depth: 8; flow: to_client; sid: 123000001; rev:1;)

User Journal

Journal Journal: Hacking Windows Networks, the easy way.

Here is a beautiful tutorial on hacking Windows networks:
http://www.packetstan.com/2011/03/nbns-spoofing-on-your-way-to-world.html

Here is a fix for the pcaprub issue:
http://www.backtrack-linux.org/forums/backtrack-5-beginners-section/40688-pcaprub-module-problem.html

User Journal

Journal Journal: Ubuntu 11.10 upgrade/install NVidia

Nvidia drivers weren't loading. Error: could not allocate memory:

Solution:
Apparently this is a known bug, and i had to do the following to fix this:

edit /etc/default/grub
find the option GRUB_CMDLINE_LINUX and add nopat, so for me this looked like

GRUB_CMDLINE_LINUX="nopat"

run sudo update-grub

Source:
http://askubuntu.com/questions/37590/nvidia-drivers-not-working-after-upgrade-why-can-i-only-see-terminal

User Journal

Journal Journal: FDA and Security Patching

There is a common misconception that the FDA has to approve security patches on systems. This is not the case. The FDA attempts to clarify this issue with the following statement:

http://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm189111.htm

User Journal

Journal Journal: Secure file upload/download in Django

Original Link:
http://stackoverflow.com/questions/1340776/secure-static-media-access-in-a-django-site

Quote:
EDIT: How I ended up solving this after reading Van Gale's answer and this:

Switched to WSGI.
Installed mod_xsendfile
Moved all public media files into a subfolder in /media/public
Added access to the public folder using an Alias /media/public /var/www.../media/public
Added WSGIScriptAlias /media/protected/ /var/www.../apache/django.wsgi (same handler as for the rest of the site)
Added XSendFile On and XSendFileAllowAbove On
To the Django app I added an urlconf for /media/protected which does basically what's here, only modified for my authentication system. It handles urls such as /media/protected/GROUP_ID/file so that only members of the GROUP can download the files.

User Journal

Journal Journal: Remastering Ubuntu 10.10 with UCK

As of Nov 5th, 2010, there is a bug with uck (Ubuntu Customization Kit) that prevents remastering Ubuntu when run on Ubuntu 10.10.

The problem arises because mkbootmsg was placed in another package, it is now in gfxboot-dev (instead of just gfxboot).
This would cause a 'command not found' error.

The workaround is installing gfxboot-dev like this:
sudo apt-get install gfxboot-dev

Enjoy your new custom Distro!

PHP

Journal Journal: LDAP + PHP + SSL = headache

Apparently... LDAP hard codes the path of ldap.conf to
C:\OpenLDAP\sysconf\ldap.conf

In order for LDAP to not require a valid certificate, one must add the following contents
to that file:

TLS_REQCERT never

Source:
http://lists.horde.org/archives/sork/Week-of-Mon-20040503/001578.html

User Journal

Journal Journal: How to clear test orders from Magento!

After thousands of dollars of fake orders to get your magento store integrated and running... you will
probably need to clear out all those tests.... Here is how you do it:

http://www.eliasinteractive.com/blog/magento-ecommerce-how-to-reset-all-test-order-information-and-set-unique-prefix-for-orders-invoices-shipments-and-credit-memos

User Journal

Journal Journal: Useful Magento Payment tutorial!

After reading many semi-useful tutorials... Hearing horror stories about the only Magento book available...
Finally a useful tutorial for setting up a new magento Payment method/Gateway :)

http://colourgray.wordpress.com/2009/11/11/magento-create-a-custom-payment-method/

User Journal

Journal Journal: Getting started developing for Magento!

Here is a great link to get you started! It does a great job introducing the concepts needed to start coding.
http://activecodeline.com/writing-a-custom-module-in-magento-detailed-walktrough

Slashdot Top Deals

Parts that positively cannot be assembled in improper order will be.

Working...