From the desk of Mubix and friends:

“Deploy a cert for Firefox” does he mean install your CA’s cert in all your Firefox installs? There needs to be a bit more context to what you are trying to accomplish, sorry.

Ask me anything

L4amer takes us through 3 tools that do enumeration using null sessions. Metasploit, rpcclient, and smbenum.py

Breaking in via SQLi (SQLNinja) and Metasploit with PTH and Token stealing.

Jason takes us through exploit a web application, uploading a php shell, and finally getting command line access and more.

Please remember, this is not a podcast, we aren’t checking out a new tool, playing with it for a week, and then showing it off. Here are a list of our current projects though:

IPv6 Attacking

Trojans, RATs, and Malware

Fuzzing each layer of the OSI model

Adding features, and supplying patches to open source projects

DNSMap vs Fierce2 vs Metasploit (dns_enum)

A crucial step to any pentest, or information gathering session is DNS enumeration. This video shows you how 3 tools excel or fail at what they were designed to do.

I apologize for the lack of releases, sick kids and a failed drive have kept me pretty wrapped up. More soon though, plus a fresh new look for the site.

Will do, you aren’t the first to ask, it’s on the list of To-Dos

Definitely! Added to the list. Thanks!

So we got it, all the videos from here on with be closer to the console to allow for non-full-screen playing.

Also there was a concern with the ability to download the video. Vimeo allows you to do so, I’ll double check to see if it’s a switch somewhere to turn it on. Either way, we will continue to upload to Blip, Vimeo and Youtube

Thanks