How to: SQLMap (dump and destroy)
SQLMap is the tool to automate SQL Injection vulnerability exploitation. This tool is very popular to exploit the SQL Injection vulnerability. While most of kiddies knew about this tool to gather information and retrieves the tables information, i try to share this information about the powerful of SQLMap rather than just as “a database dumper tool”.
I will separate this in 3 section, as a fingerprinter (we already knew this), as an enumerator (of course), and as a destroyer (hmm..?!). Check it out. Read more
Backtrack 4 R1 is released to Public
Backtrack 4 R1 is now released to Public.
Find out here.
*This version seems larger than the previous.
Batch Audio Converter <=v.1.0.0 Stack Overflow (SEH)
Iseng-iseng nyari aplikasi yang bisa diotak-atik buat maenan SEH, dapet juga aplikasi Batch Audio Converter <= v.0.4.0.0 dan berhasil di eksploitasi dengan sukses melalui SEH Overflow (tulisan mengenai SEH secara jelas bisa dilihat di situs Peter Van Eeckhoutte dan situs underground Indonesia tertua, Kecoak Elektronik). Ngeliat versi dari aplikasinya, saya liat di Help/About pada aplikasi tersebut dan mengunjungi situs pembuatnya. Pembuatnya adalah Freewaretoolbox, langsung aja saya download versi terakhir, yaitu versi 1.0.0 dan ternyata masih kena juga dengan buffer overflow.
Saya langsung kirim email ke pembuatnya untuk segera diperbaiki karena kalau dilihat, aplikasi ini sangat umum dipakai karena beberapa dari pengguna internet sering melakukan konversi dari format mp3 ke format wav atau ke format yang lain. Read more
Nessus access from Android 2.2
While Android 2.2 (code name Froyo – frozen yogurt, released last week on Google I/O May 19-20, 2010) is now support Flash, we can now grab remote Nessus server (which is using flash since version 4.2) while on mobile.
This also make the mobile pentesting is more powerful. TheAluc on his twitter is researching how to make a possible Android Mobile Hacking. Well, in the near future, pentesters won’t bring their laptop to the cafe or office, they just bring the Android phone 
*TheAluc also make the “impossible Ruby – Metasploit porting” on Android – Nexus One.
The Redmine Interface Project on Metasploit is also working on jRuby to make Metasploit portable more stable.
Metasploit 3.4.0 Released
Metasploit 3.4.0 is released to public. Check the Release Notes or directly go to Download.
PHP include exploitation with Metasploit
Metasploit support for PHP Include exploitation, or simply known as RFI (Remote File Inclusion). I will show you how this work on CS-Cart 1.3.3 which vulnerable to remote file inclusion.
The vulnerable path is at classes/phpmailer/class.cs_phpmailer.php?classes_dir=[include arbitrary php code]
so in Metasploit, the PHPURI PATH will be like this:
classes/phpmailer/class.cs_phpmailer.php?classes_dir=XXpathXX
let see how this exploitation works. Read more
Penetration testing Real world mode by Offsec
A video about Penetration testing in the real world, enjoy the video from Offensive Security.
It cannot be embedded, so better view on their website.
The video is here:
http://www.offensive-security.com/videos/penetration-testing-in-the-real-world/
Enjoy!
Sertifikasi OSCP dari Offensive Security
Sertifikasi OSCP (Offensive Security Certified Professional) adalah salah satu sertifikasi yang dikeluarkan oleh Offensive Security. Belum pernah mendengar tentang Offensive Security? Silakan ke websitenya untuk melihat-lihat. Karena kalau sudah pernah mendengar Auditor, WHAX, Whoppix, dan sekarang bernama BackTrack, secara tidak langsung berarti telah mengenal pembuatnya, yaitu orang-orang dari Remote-Exploit yang kemudian membentuk sub-bagian training bernama Offensive Security.
OSCP sendiri merupakan sebuah sertifikasi taraf internasional bisa didapat setelah berhasil mengikuti training Pentesting with BackTrack Online + ujian yang disediakan. Saya mengambil training Pentesting with BackTrack (PWB) secara online beberapa bulan yang lalu, tepatnya tanggal 24 Januari 2010. Ini pertama kalinya saya mengambil sebuah training online plus sertifikasi, karena itu saya akan menceritakan beberapa hal yang sangat menarik selama 2 bulan saya ikutan training PWB Online 
Nice Buffer Overflow Video – Easy Music Player
Well, this will show you how the buffer overflow exploitation works against Easy Music Player.
The art of Exploitation from D0uBle ZerO Zer0 on Vimeo.
Powered by ScribeFire.
