Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - Live Wire

Pages: [1] 2
1
Security Tools / Kali Linux
« on: March 30, 2013, 05:48:20 pm »
Does anyone else not like the new OS from Offensive Sec? I tried it, and I liked it for awhile, but it's not BT5. I'm going back to BT. Has anyone else tried Kali yet? Is this universal, or just me?

2
Scripting languages / [Python] Form Field data hijacker for FF
« on: February 06, 2013, 10:30:48 pm »
So, I was watching a friend buy something, and noticed that everything in the fields was saved data. After some research, I discovered that Firefox stored data in sqlite databases, which could be read with python. So, after some research and programming, I created a program that connects to the database, dumps the data and writes it to a file. Take a look:

Code: [Select]
#!/usr/bin/python
'''
Form Field Jack for Firefox (currently only tested on Ubuntu)
v1.0 Feb 6, 2013
Authored by Live Wire
'''

import glob
import sqlite3 as sql

output = open("field_history_output.txt","w")
ffFormFields = "/home/drew/.mozilla/firefox/*.default/formhistory.sqlite"

def findFile(path):
    return glob.glob(path)

def main():
    fieldsSQL = findFile(ffFormFields)        #returns as array
    con = sql.connect(fieldsSQL[0])           
    cur = con.cursor()
    cur.execute("select * from moz_formhistory;")
    rawSQLData = cur.fetchall()
    strSQLData = str(rawSQLData)            #converts to string data
    output.write(strSQLData)            #writes to file

if __name__=="__main__":
    main()

This is one of my first actual programs in python, please let me know what you think! Also working on a parser for the output, sorry its kinda messy. Also working on porting it to windows systems, as this only works on Linux right now.  Next comes the cookies database, which is working, but still rough.

Any comments welcome!

3
Hacking and Security / Website Defacement Question
« on: January 29, 2013, 09:22:58 am »
First off: I'm not going to use this to deface websites, just want some info.
 
I understand how to compromise sites, but how do you go from getting information to changing the page? Is it as easy as finding the admin account and going from there, or is there a better way? Only asking because the most recent Anon attacks have made me wonder. Thanks

4
eBooks / Storm Lockpicking Guide [Official]
« on: December 09, 2012, 09:14:52 pm »
So went and got the free download of this, hope yall enjoy. Official guide from Locksport International and Storm. You guys should check out Storm, they have some good stuff.

http://upload.evilzone.org/download.php?id=7007242&type=rar

http://www.stormlockpicks.com

And here is a slightly more in depth book

http://www.lysator.liu.se/mit-guide/MITLockGuide.pdf

5
eBooks / Little Book of Ruby
« on: November 15, 2012, 07:32:07 am »
Hey, so you guys probably have this, but if not, here it is. Just a basic intro to the Ruby programming lang. Pretty good for beginers, or anyone wanting to get up on their skill. Enjoy!
 
http://upload.evilzone.org/download.php?id=2270979&type=zip

6
Web Oriented Programming / Interact with website elements
« on: November 14, 2012, 02:22:51 pm »
im working on a project. Basically, for this online form, username is firstname.lastname and the password is lastname1234. What im trying to do is post to this website for the purpose of bruteforcing the password with an incrementing number. It's a basic website, selection bar and two fields. I have no problem with the non web part, but I am unsure of how to interact with a website. Tried google. nothing super useful. Most of the results were long strings of spaghetti code. Any thoughts from you guys? Thanks!
 
the page is https://dodea.gradespeed.net/pc/studentlogin.aspx if you want to look at it
 
PS If at all possible, in either java, js, or ruby would be preferred, but something like perl would also be okay

7
Found it on the Webs / Good Review of Stupid Tech Show
« on: October 14, 2012, 10:13:24 pm »
I thought this was funny. I like that part about drinking the whole bottle ;)

http://edition.cnn.com/2012/10/09/tech/innovation/bravo-reality-show-silicon-valley/index.html

8
eBooks / Certified Ethical Hacker - Official Handbook
« on: September 28, 2012, 08:39:33 pm »
Hey. First book upload. This is the official PDF from the book. It's actually okay, gives a pretty good (if slightly outdated, basic) intro to basic pen tester stuff. Hope ya'll enjoy.

9
Found it on the Webs / Python Forensics
« on: September 26, 2012, 04:12:23 pm »
A friend of mine showed this to me, wrote by one of his professors at the academy. All about forensics programming.  Hope you enjoy!

http://computer-forensics.sans.org/community/papers/gcfa/grow-forensic-tools-taxonomy-python-libraries-helpful-forensic-analysis_6879

10
C - C++ / Basic C++ program (Good place to start)
« on: September 25, 2012, 11:30:45 am »
Hey guys. Made this piece of code this for my TI for the upcoming SAT. Then I thought that it has a lot of good intro c++ stuff. So I'm going to do a break-down of the code. Hope you enjoy!!
 
First, the whole code.
 
Code: [Select]

#include <iostream.h>
 
int main(){
   
    //vars
    int inNum;
    bool check = true;
   
    //setup
    cout << "\nPlease enter the number: ";
    cin >> inNum;
   
    // actual calcs
         
    for (int i = 2; i < inNum && check;){
        if (inNum%i != 0){
           i++;
           
        }else{
            check = false;
        }
             
    } //end for
   
    if (check == false){
          cout << "\nNumber is not prime!\n\n";
    }else if (check == true){
          cout << "\nNumber is prime!\n\n";
    }else{
          cout << "\n\n\nWTF?\n\n";
    }
   
   return 0;   //for syntax only!!!   
}//end of main

Okay, #1
Code: [Select]
#include <iostream.h>

This just tells the program that we want to be able to process basic input. This is used for a lot of things, but I'm just getting stuff from the keyboard.
 
#2
Code: [Select]
int main(){
   
    //vars
    int inNum;
    bool check = true;

We declare the main method, of the int type. We then declare the variables we want to use in the program. Personally, I like to declare all of my vars upfront. Here we use an int (basically a simple number) and a bool (logic statement (true/false)).
 
#3
Code: [Select]
    //setup
    cout << "\nPlease enter the number: ";
    cin >> inNum;

This is a VERY important step! This is where we use the IO functions of C++. cout tells the program to print the specified text, and cin takes the inputed data, and stores it in the variable we already declared (int inNum;).
 
*the \n is used to make a new line. The // is used for comments, and not used in the actual program.


#4
Code: [Select]
   for (i = 2; i < inNum && check;){
        if (inNum%i != 0){
           i++;
           
        }else{
            check = false;
        }
             
    } //end for
 

Okay, now we're moving into real programming. We used a for loop here. In a nutshell, I instructed the program to create a new variable (int i), and set its value to 1. Then, I told the program to keep running while i < inNum AND check is still true. After this, I could have created a number of other statements, but I only needed two. This is the real use of the for loop. Normally, it is used to declare, check, and increment a value. Since you can do all of this from a single statement, it is better for this than a while loop.
 
After that, we introduce the if/else statment. These take a statment, check if they are true, and execute the code depending on the outcome.
 
 Next, I use the mod (%) sign. This is just returning the remainder of inNum / the current value of i. We then check to see if the remainder does not equal (!=) 0. This tells us that the number is not prime, so we can keep checking for higher values of i (i++ (adding 1 to the value of x) ). If we find that it ever DOES equal 0, it cannot be prime and we set the boolean logic variable check to false. This means that the loop can no longer continue, and we stop checking for values.
 
#5
Code: [Select]
    //if/else
 
    if (check == false){
          cout << "\nNumber is not prime!\n\n";
    }else if (check == true){
          cout << "\nNumber is prime!\n\n";
    }else{
          cout << "\n\n\nWTF?\n\n";
    }

This is the basic programming logic statement. Rember we set check to false if the inputed number is not prime. In *MOST* programming, you will use  =  to assign a value, and  ==  to compare something's value to another value.
 
Here, we look to see if check is false or true. If check is false, the number is not prime, and we report this to the user. If check is true, we tell the user. If a magnet was used to wipe a specifc point of your memory in the split second it took to check this, it outputs this to the user. Can't be to prepared, can you?
 
#6
Code: [Select]
return 0;   //for syntax only!!!   
}//end of main

We then end to code. The return of 0 isn't required, but is good for syntax.
 
 
 
 
I tried to do the best I could with the syntax. This is the first tut I've ever done, so any pointers would be helpful.
 
As usual, any feedback appriciated!

11
General discussion / Slackn Off
« on: September 05, 2012, 07:33:10 pm »
So how was everyones summer? Do anything big? Mine was okay, but after the first week, the realities of highschool set back in, and you start thinking back. So what did yall do?

12
General discussion / WTF skiddies
« on: July 05, 2012, 01:34:02 pm »
can we kill this site, please? if not, at least read the intro, it's kinda funny. then the instructions on how to be "elite"


http://elite-hackers.com/


ahahaha 15 yearolds

13
General discussion / Bureaucratic Bullshit = Lost lives
« on: July 05, 2012, 12:41:56 pm »
This really pissed me off, but I'm happy that this guy did the right thing. As a lifeguard myself, I couldn't imagine letting this happen. Just another sign of how fucked up America is. I think maybe this company needs a lesson........ lol  :) . But seriously, what do you guys think?



14
Mobile Hacking / Phone hacking - A technical definition
« on: May 18, 2012, 09:47:25 pm »
Whats the deal with this? All you hear about in the news today is "phone hacking". But, after some research, I can't seem to find a real definition of what it actually is. Anyone have any information to clear up this point? Thanks.


PS - A real definition of what it is. Wiretapping, rooting, or what?

15
Scripting languages / AutoIt help
« on: February 01, 2012, 11:09:56 pm »
So I've been working with Autoit for about an hour now, and its really easy to use. Fr those who don't know, its like the bastard child of C and java. But is there any way to just write to a file? The things I find online are either for writing to a .log file, or overwriting a file. I just need a command that adds a new line of text to a .txt file. Any thoughts? ( besides telling me to google it?)

Pages: [1] 2


Intern0t SoldierX SecurityOverride programisiai
Want to be here? Contact Ande, Bluechill or Kulverstukas on the forum or at IRC.