Don't say we didn't warn you.
Exploring hacking tools, also known as security testing tools
Setting the user ID on an executable means it runs under that user’s permissions, not the perms of the user that runs the executable. It’s highly useful in system admin, but it’s wildly dangerous too, because every SETUID file is a vector for hacking. John Hammond (on YouTube) give an excellent example in the context …
Continue reading “[ Pen Testing ] :: Step by Step :: Exploiting SETUID”
There are actually four subsets of tools you can install with Kali, depending on your needs, disk resources and download speeds. These packages have names like kali-linux-full and kali-linux-all (those sound the same, don’t they?). Fortunately the good people at Offensive Security have a guide to the various metapackages. For instance: kali-linux is the barebones, …
Continue reading “[ Hacker Night School ] :: Kali Linux Metapackages (All Tools or Subsets)”
Kali is cool as hell, but taking it to work could get you fired, or at some of the places I support, get me arrested. It’s not really intended to be a daily-driver OS, though the 2020 update has moved it a long way in that direction. The biggest problem with carrying Kali around is …
Continue reading “[ Hacker Night School ] :: Adding the Kali Tools to Ubuntu”
This content requires an account to access it.
When you hack or pen test or play CTF, you use Kali or Parrot or some other Linux, right? Windows hasn’t been a preferred security testing platform, but that doesn’t mean people haven’t been thinking about it. Enter FireEye, and the “Commando VM: The First of Its Kind Windows Offensive Distribution”. Hmmm. So … going …
Yeah, we all do it, right? We let our browser store our passwords for all those sites we visit every day. It’s easy, it’s convenient, and it’s really easy to hack. Starry shows us how to reveal these passwords, swipe them and use them in another browser. Plus: he demos what you can do about …
Continue reading “Finding and Using Browser-saved Passwords: Another video from Starry Sky”
Co-founder of School for Hackers Starry Sky gives us a video on hacking tools. This time he explores Netcraft, an intelligence-gathering tool for those of us who really just want to know a little bit more. Come on, just a little bit … 😉