Posts by JollyFrogs

Various Tools

DBeaver - Client that supports SQL, MySQL, PostgreSQL, MariaDB, SQLite, Oracle, DB2, SQL Server, Sybase, MS Access, Teradata, Firebird, Derby, etc. Reaver - Wireless WPS attack tool PixieWPS - Wireless WPS offline cracker (exploits weak entropy)  

Wireless hacking

WEP - Brute-force key recovery [crayon-5add748c38837926493800/] Keep aireplay-ng running in the background while we start to [crayon-5add748c38842952632057/] With aireplay-ng running, start cracking the WEP key using: [crayon-5add748c38845947202254/] WPA2 - Crack using a wordlist [crayon-5add748c38847914155025/] With airodump-ng running in another terminal [crayon-5add748c3884a198844683/] Keep replaying until you have captured the handshake [..]

Windows - Useful Commands

Use winexe to execute a command on Windows remotely [crayon-5add748c38d08371038593/]  

Create customized wordlist

Create a wordlist containing words from length 1 to 6 with characters 0-9 and A-F: [crayon-5add748c38efc597850705/] Create a wordlist containing words with length of 4 with characters mixed alpha-numerical [crayon-5add748c38f02746883262/] Say you want to create a wordlist with a length of 8, with the following characteristics: [Capital Letter] [2 [..]

tcpdump examples

Capture packets with host 20.20.20.20 and port 110 and write to file: [crayon-5add748c390b5475179855/] Capture ICMP ping requests [crayon-5add748c390ba423789878/] Capture ICMP ping replies [crayon-5add748c390bc462877008/] Capture packets with DSCP tags [crayon-5add748c390be748157390/] Dump HTTP traffic in ASCII and HEX format [crayon-5add748c390c0630073953/] Grab the user agent from the http header on port 9999 [..]

Linux - Useful Commands

Create a file on Linux: [crayon-5add748c3931b463482763/] Delete the contents of a file on Linux: [crayon-5add748c39320461848159/] Spawn an interactive PTY from a shell through python [crayon-5add748c39323330424626/] Base64-encode a string [crayon-5add748c39325012072555/] Base64-decode a string [crayon-5add748c39327936669413/] Find text in files recursively [crayon-5add748c39329961710083/] Simple Bash loop example [crayon-5add748c3932b064854145/] Search and replace text in [..]

Transfer Files - Linux

Replace 20.20.20.20 with Kali attacker Replace 10.10.10.10 with Linux target

Transfer Files - Windows

Replace 20.20.20.20 with Kali attacker Replace 10.10.10.10 with Linux target

OSEE - AWEstralia 2018 preparations

Living in Australia, the total cost of attending the AWE training in Vegas, including flights and hotel would exceed AUD 10,000$. So instead I decided to ask the Offensive Security trainers if they wanted to come and deliver the AWE training in my home town of Brisbane, Australia. I [..]