Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 23 guests online
 
Advertisement

You are here: Home
EH-Net
May 25, 2013, 06:26:20 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
  Home Help Calendar Login Register  
  Show Posts
Pages: 1 ... 3 4 [5]
61  Ethical Hacking Discussions and Related Certifications / Forensics / Forensic Test image on: April 23, 2006, 03:48:25 AM
If new to forensics you can find an interesting image to do practice here. A set of 31 questions is provided, anyone is free to look at the answers (before or after having found them yourselves Wink )

It's also a good way to test new or other tools given that the right answer is provided so that you can compare the results.

It's a lot of stuff to download: 7 raw images, ~650MB each or just 2 EnCase images (both together ~1 GB ). So even if you don't intend to use EnCase download the EnCase images, get FTK-Imager - it need's a dongle only to do analysis, not for imaging purposes - and convert the encase image to a raw image. It's painless and saves a lot of download time.
62  Resources / Tools / Re: Free Tools from WildPackets on: April 20, 2006, 04:56:11 AM
My favorite is netdoppler. Great tool to measure throughput, latency etc., really comfortable.
pathchar for Linux/Unix offers roughly the same functionality but is somewhat outdated and difficult to understand as there is no real documentation.
63  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Oracle SQL Injection help... on: April 12, 2006, 05:58:44 AM
That's a lot of different things you're trying to do.

Start with the most basic:

You said that you want to exploit a login form. The query contructed by a login form usually is something like:

Quote
select * from users where username =' Content of Textbox1'
and password = 'Content of Textbox2'

You mentioned that you tried to enter
   
Quote
or ''x''=''x'' --'

and get the error ORA-01756: quoted string not properly terminated. With your input the query will be:

Quote
select * from users where username =' or ''x''=''x'' --''
                                                   2 single quotes ^^
and password = 'Content of Textbox2'
If you modify your input slightly

    ' or 1=1 --

that will give you
Quote
select * from users where username ='' or 1=1 --'
                              2 single quotes ^^
and password = 'Content of Textbox2'
Now everything after the second '1' should be ignored and your query should work.

Hint: Try to figure out the query constructed by the form you want to exploit, write it down and look at it after modifying by your input...



64  Resources / Tools / Re: KNOPPIX 5.0 Released at CeBIT 2006 on: March 25, 2006, 11:12:51 AM
Quote
I tried uninstalling KDE from Knoppix (which I later discovered is an impossibility), anyway I uninstalled KDE-core and various kde-libs files, before deciding that if I was to just reinstall KDE on top of the old install, it would just overwrite anything that was there without the need for uninstalling everything first. I'm not sure if that's the correct thing to do, perhaps some of the Linux gurus here could correct me.

If your problem is related to a mismatch between something configured and the newly downloaded files doing so will not really help. When you uninstall packages with 'apt-get remove' everything related to the configuration will not be deleted (nor overwritten if you reinstall it).

So if you really want to get rid of KDE compile a list with all KDE related packages by running "dpkg -l | grep -i kde". Uninstall all the packages on the list with apt-get remove (that will also remove some of the dependencies but not all). After that "dpkg -l | grep rc" wil give you a list of all packages removed but still configured on your system, to really get rid of all these config files just do a "dpkg --purge packagename", after that you can reinstall KDE...
65  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Hacking with Live Linux Distros on: March 04, 2006, 07:52:24 AM
Quote
It' s shame it only comes as a live disk, though one of my colleagues recomended installing a raw Linux kernel, and copying on top of that all the programs, desktop, features, shell, tools etc. from the Knoppix disk.

No need to do so. Knoppix includes a script to install theLive-CD on Harddisk.
66  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Ethereal Packet Capturing on: January 18, 2006, 04:09:12 AM
From wiki.ethereal.com:
Quote
Windows

Capturing WLAN traffic on Windows depends on WinPcap and on the underlying network adapters and drivers. Unfortunately, most drivers/adapters support neither monitor mode, nor seeing 802.11 headers when capturing, nor capturing non-data frames.

Promiscuous mode can be set; unfortunately, it's often crippled. In this mode many drivers don't supply packets at all, or don't supply packets sent by the host.

If you experience any problems capturing packets on WLANs, try to switch promiscuous mode off. In this case you will have to capture traffic on the host you're interested in.

If anybody finds an adapter and driver that do support promiscuous mode, they should mention it at the bottom of this page, for the benefit of other users.

See [WWW]MicroLogix's list of wireless adapters, with indications of how well they work with WinPcap (Ethereal uses WinPcap to capture traffic on Windows), for information about particular adapters.
67  Ethical Hacking Discussions and Related Certifications / CPTE - Certified Penetration Testing Engineer / $1,000,000.00 Training Give-away on: November 17, 2005, 04:06:04 AM
Interesting offer:

Quote
Mile2 is justifiably confident that our Certified Penetration Testing courses are heads and shoulders above competing products. To prove this bold claim, we are giving away US$1,000,000.00 worth of seats to individuals who have already exhausted their training budget by attending similar classes conducted by the competition (before November 2005). In keeping with our global presence, we are offering these free seats World-Wide  for CPTS events.

Details here
68  Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: I Passed CEH! on: November 08, 2005, 11:17:05 AM
CEH and CPTS are different and independent certifications.

There is no need to do any classroom study (I never did). Quote from mile2:

Quote
The CPTS BETA examination trial is now complete. The final exam will be released late November 2005. The examination fee will be $165.00 once released. We are taking advance orders for only $85.00. To receive this discount exam fee you must express interest in the exam BEFORE it is fully released. You will not be charged until the release date and we will confirm your order at that time.

Details: http://www.mile2.com/CPTS_Exam_Registration.html

So as you already passed CEH perhaps you could just try this exam without any further studying.
69  Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: I Passed CEH! on: November 07, 2005, 11:29:39 AM
I took the CPTS-Beta-Exam in August. At that time I tried to get some answers from a guy at mile2, one of them was:

.) will a recertification be necessary

Answer:

Not presently, but there will probably be some kind of continuing education
element at some point.

BTW, when I asked for a time frame for the results of the beta by email, they told me that I passed and that the results will be out soon at prometrics. So it seems that I'm one of the very first to hold that certificate  Grin
Pages: 1 ... 3 4 [5]
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.085 seconds with 21 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.