Saving data from “dying” HDD – LVM & ext3
Couple of days I restarted my machine running Debian Wheezy and for my surprise I was not able to boot. I was using encryption for the entire disk. I was able to unlock the disk but not able to mount the partitions. Nice … time to panic … After I took enough time panicking I…
Automatic code analysis by Deutsche Telecom
The Developer Garden (Deutsche Telecom “ecosystem”) announced a new service – automatic code analysis for applications developed using the following technologies – .NET, ASP, VB, JAVA, C/C++, PHP, RUBY, Perl, Java Script. Aside from the typical marketing sentences about what you are getting out of their product it reads “Amplify your know-how by analyzing your…
Fix metasploit “Database not connected or cache not built”
This is a short post explaining how to deal with metasploit instance not connected to its database (I’m using the new Kali Linux but it is the same for Backtrack 5). The issue usually surfaces when you try to search auxiliary or exploit. Assuming that you use msfconsole you get something like this: msf >…
Malware Sandbox – Free Public Cuckoo instance
I’m writing this down for my own reference and if someone else benefits this I’ll be more than happy. Here is the URL (https://malwr.com/) to the public cuckoo sandbox – free to submit executables for malware analysis. Enjoy
Kali Linux – the new toy from Offensive Security
I’m very pleased to write this down – Offensive Security (the maker of Backtrack distro) came up earlier this month with a stable release of their new penetration distribution called Kali. It comes as s BackTrack successor but on the other hand it is a completely new build. There are some new stuff compared to BT5 in terms of tool…
HTTP Basic Authentication Dictionary and Brute-force attacks with Burp Suite
HTTP Basic Authentication brief explanation HTTP supports several authentication mechanisms. Upon a request for resource within a protected space the server should respond with authentication challenge using WWW-Authenticate header. In order to receive authorization the client should send requested identification information using Authorization header. When the client is not authorised a 401 “Unauthorised” response status…
GoodBye Google Reader
Google is retiring my favorite RSS reader 🙁 what a pity … so … decided to move to a desktop RSS reader but there it is … the sync question – how I’m going to sync between 2 or 3 of my devices. So I will give LiFeRea a shot and see how it will go. If anyone…
Problem with Ubuntu wfica Citrix client loading too slow
Last couple of days I was trying to wrap my head around a problem with the Ubuntu Citrix wfica client connecting to a Secure Gateway. Sometimes it was “loading” quite fast and sometimes it was taking up to 30 sec to start connecting the target server. The wfica process was listed as running but no…
Security source code review scoping questionnaire – v 2
Here is amended version of the security source code review questionnaire. I added couple of questions and reworded couple of existing ones to eliminate some ambiguities. Security Source Code Review Questionnaire – v2 (English) Security Source Code Review Scoping Questionnaire – v2 (Bulgarian)
forum.arenabg.com members table dumped and published in the Internet
Yesterday a partial dump containing email addresses and hashed passwords for the forum.arenabg.com members leaked. According to The Hackers News the leak was published by a Russian hacker. I will not comment the story, but if you ever used forum.arenabg.com make sure that you not reuse the same password for your email or somewhere else.…
