Data_Raid

Analysing the code in detail and the errors when trying to compile the code will help you. The exploit is pretty old (2003) too which will might cause compilation errors when compiling on systems that have updated code such as OpenSSL. When you try and compile the code on BT5 you probably had the errors listed below:

error: expected…[Read more]

Congrats MaXe! Well deserved too.
Big thanks to Don who continually provides awesome giveaways.

I’m no expert but ….. would $nbsp; work?

(ipconfig$nbsp;/all)

As lordcranius mentioned, the password hash ends at the first colon (the password may or may not include a period but should be included if you’re extracting just the hash). In the example you provided, the password hash is
$1$3OF/pWTC$lvasdl74pAHAcrvepWqpu.

Here’s a useful link to that explains the format of the shadow file and what each field…[Read more]

I had this problem too a while back. The error message: “Generic crypt (3) module: hash encoding string length x, type id y appears to be unsupported on this system” refers to the crypt function not being present on the system or JTR 1.7.6 and above was compiled without crypt being present on the system. I was unable to crack SHA-512 passwords…[Read more]

Spot = URL ?

http://www.easyvmx.com/ (as tturner mentioned) or you can continue using Virtual Box or VMware server instead of VMplayer. Here are some free images that can save you some time setting up your own images: http://www.thoughtpolice.co.uk/vmware/ (obviously no Microsoft images)

@Inc0 wrote:

Hello, I need some explanation, check this exploit : http://1337day.com/exploits/14229, its a denial of service, but how can I dos someone with this ?

Thank You 😀

The exploit mentions that BS Player 2.56  needs to be installed (might also work on the latest version: 2.57), the “victim” needs to open the crafted playlist file (m3u…[Read more]

Congratulations! Awesome prize. Please try and provide a detailed review preferably with pics.

@j0rDy wrote:

The work of Lulzsec is clearly that of younger people. When there identities are known (and its not a question if, but when) you will see that the IT business is shocked that this can be done by some “kids who live with their parents”. in the end they will spend a fortune on fixing everything, and within a few years it will all be…

[Read more]

Maybe not j0rdy:

Twitter update: LulzSec The Lulz Boat
Seems the glorious leader of LulzSec got arrested, it’s all over now… wait… we’re all still here! Which poor b*stard did they take down?

This should be of interest if the DC is Win2k8: http://www.room362.com/blog/2011/5/15/dumping-hashes-on-win2k8-r2-x64-with-metasploit.html
and check out smart_hashdump: http://www.darkoperator.com/blog/2011/5/19/metasploit-post-module-smart_hashdump.html

In before the lock … or delete  😉

That password is a SHA-512 hash, starts with $6$ (86 characters)
Extra info: SHA-256 hashes start with $5$ (43 Characters)
MD5 hashes start with $1$ (22 characters)
Blowfish hashes start with $2$ or $2a$ (depending on the variant used)

I’ll work on the password hash and let you know if I crack it  😉

I wish it was that easy to exploit a machine with just the MAC address  😉

The MAC address simply lists the physical address burnt into the network card/device when the device is manufactured. The MAC address should be unique and usually a manufacturer will have a MAC address prefix assigned to that company, for example Cisco is assigned:…[Read more]

Congrats MaXe!
You’ll be impressed with the certificate when it arrives 🙂

I have watched that video before and I think it’s interesting, and Dino does a good job of explaining exploits, NOPs, EIP, EAX etc..
Is it relative to OSCP? Sure! Is the thread in the right forum? Maybe 🙂

@jason wrote:

Anyone else tried to get gdm to start automatically under the gnome version? It seems to be disabled somewhere that’s less than obvious (to me anyway)  :-[

This is what I did on my system (might be worth taking a snapshot before): apt-get install gdm

and then edit the /etc/rc.local file to start gdm automatically, which looks…[Read more]

01010010 01100101 01100001 01101100 00100000 01101000 01100001 01100011 01101011 01100101 01110010 01110011 00100000 01110100 01111001 01110000 01100101 00100000 01101001 01101110 00100000 01100010 01101001 01101110 01100001 01110010 01111001 00100001 00100000 00111010 00101101 00101001

@H1t M0nk3y wrote:

Ok, I have installed Backtrack 5 Gnome 64 bit yesterday along with VMWare Workstation, Nessus and some other little tools. So far, I have nothing to complain about. It will become my main OS.

But I miss the little drop-down that used to be in the lower panel in Backtrack 4. I used it a lot for quickly typing commands such as…

[Read more]