Random Musings - Day #280

The nicely named stackoverflow is a Q&A site for proggies. Some very nice codes and tools can be found at remote exploit. Downloads can be found at download32.

I thought I had this in my blog somewhere but some funny stuff with Super Mario Bros including the Super Mario Corrupter, Super Mario Gold Run, Super Mario rescuing the Princess

Random Musings - Day #247

The Security Accounts Manager (SAM) can be stored in LANMAN hash and/or NTLM. LANMAN makes passwords brute-force attacks easy if the SAM is retrieved.

There is a registry setting to look for under "HKLM\System\CurrentControlSet\Control\LSA", there is a key "LMCompatibilityLevel" which has acceptable range of 0-5. 0 is usually default, which means all hashing is acceptable. You should really set it to 4 or 5. Microsoft discuss this on their support site

More useful links include: arp-scan, introduction to steganograhpy, XSS in the Cisco Ironport and how to look up reverse zones for ip addresses in DNS.

The well known SMB vulnerability ms09-001 does have POC exploits but they only crash the concerned system best demonstrated by 4xunderground.

Random Musings - Day #194

Remote Exploits may the way forward after seeing milw0rm wind-up and then come back to life. It is also the home of backtrack.
Talking of exploits, cats having been exploiting humans all this time with their constant purring.

I've decided to name kaspersky, kaplinsky as it's easier to remember and named after Natasha Kaplinsky. But that's where the similar ends as Kaspersky seems very hard to work with.

And oh the song with the yodelling start is TI and Rihanna's "Live your life".