毒男s Diving log in Philipine
7th Sept 2015
8th Sept 2015
9th Sept 2015
10th Sept 2015
Thanks for the Video “V2” by Felix Ko
As that’s quite time consuming to go to the torrent site and search bt files from it, the geeks wrote a ‘oneliner’ (actually 2 lines) to perform the search:
root@raspberrypi:~# cat /usr/bin/search
#!/bin/sh
lynx -dump “http://thepiratebay.se/search/$@/0/7/0″|grep magnet | sed ‘y/+/ /; s/%/\\x/g’ | xargs -L 1 echo -e#transmission-remote -n “transmission:the password lor” -a “magnet:?xt=urn:btih…”
And here is the script to download the torrent with transmission x:
root@raspberrypi:~# cat /usr/bin/download
#!/bin/sh
transmission-remote -n “transmission:okay, you win” -a “$@”
That’s how it looks like for a search:
root@raspberrypi:~# search harvard business school
25. magnet:?xt=urn:btih:19ce84592aec23ca73f017f7643fb21b9b22dce2&dn=Harvard Business Review – 10 Must Reads on Strategy x5BPDFx5D x5BQwert&tr=udpx3Ax2Fx2Ftracker.openbittorrent.comx3A80&tr=udpx3Ax2Fx2Ftracker.publicbt.comx3A80&tr=udpx3Ax2Fx2Ftracker.istole.itx3A6969&tr=udpx3Ax2Fx2Ftracker.ccc.dex3A80&tr=udpx3Ax2Fx2Fopen.demonii.comx3A1337
30. magnet:?xt=urn:btih:8b7a78d69ba037175d3ac4c2fe91fa8269eb183e&dn=Harvard Business Review – April 2014 USA&tr=udpx3Ax2Fx2Ftracker.openbittorrent.comx3A80&tr=udpx3Ax2Fx2Ftracker.publicbt.comx3A80&tr=udpx3Ax2Fx2Ftracker.istole.itx3A6969&tr=udpx3Ax2Fx2Ftracker.ccc.dex3A80&tr=udpx3Ax2Fx2Fopen.demonii.comx3A1337
36. magnet:?xt=urn:btih:20a0ea7c101eee5f67f25e9d4ff30873e8b5f9a3&dn=Harvard Business Review – February 2014 USA&tr=udpx3Ax2Fx2Ftracker.openbittorrent.comx3A80&tr=udpx3Ax2Fx2Ftracker.publicbt.comx3A80&tr=udpx3Ax2Fx2Ftracker.istole.itx3A6969&tr=udpx3Ax2Fx2Ftracker.ccc.dex3A80&tr=udpx3Ax2Fx2Fopen.demonii.comx3A1337
42. magnet:?xt=urn:btih:6a3d4a510ab735efd98905aec2bf74bd0ad50cfe&dn=Harvard Business Review – March 2014 USA&tr=udpx3Ax2Fx2Ftracker.openbittorrent.comx3A80&tr=udpx3Ax2Fx2Ftracker.publicbt.comx3A80&tr=udpx3Ax2Fx2Ftracker.istole.itx3A6969&tr=udpx3Ax2Fx2Ftracker.ccc.dex3A80&tr=udpx3Ax2Fx2Fopen.demonii.comx3A1337<—snip—>
Here is how we download:
root@raspberrypi:~# download “magnet:?xt=urn:btih:8b7a78d69ba037175d3ac4c2fe91fa8269eb183e&dn=Harvard Business Review – April 2014 USA&tr=udpx3Ax2Fx2Ftracker.openbittorrent.comx3A80&tr=udpx3Ax2Fx2Ftracker.publicbt.comx3A80&tr=udpx3Ax2Fx2Ftracker.istole.itx3A6969&tr=udpx3Ax2Fx2Ftracker.ccc.dex3A80&tr=udpx3Ax2Fx2Fopen.demonii.comx3A1337”
localhost:9091/transmission/rpc/ responded: “success”
Since it is quite troublesome to locate and click an icon or type the link with a browser everyday.
It should be expected that when geek need to listen to the only local radio that Hong Kong have, he will just type “903” to achieve it.
Here we go:
alias 903=’ffplay rtsp://maclive.881903.com/cr2 -nodisp’
“The finding was attached as below:”
Setup self-hosted git remote repository
http://kovshenin.com/2011/howto-remote-shared-git-repository/
Git deployment workflow between local, remote repository and web server
http://ryanflorence.com/simple-git-deployment/
Git deployment workflow between development and live/production on the same server
https://coderwall.com/p/xczkaq
With this IFTTT plugin, this blog post will now be sync to this one. http://happypentest.blogspot.hk/
There are several things we gonna check on building a secure web page. Assumed that the assessment is done on black box. Here we included some steps and procedures for a simple analysis on a web page. The following is from 2010, it take no reference from SANS and OWASP’s checklist, but it contains what comes up my mind at the moment I post.
Imagine when you carry your own notebook to do assessment in different client sites. You would like to run several scripts and have to put different configuration files for different sites. I found its quite useful when you can notify to yourself what IP you current have and change your working directory to certain folder. Here is the script to put in the ~/.profile when you are using a Mac
#Check if I am at office
networksetup -getinfo Wi-Fi| grep -x “Router: 123.123.123.123” > /dev/null && cd /Users/anony/ Documents/work && \
toilet -f mono12 -F metal Office
It works if you are running OS X 10.7.2 with the program ‘toilet’ installed. You can grep one by “sudo port install toilet”.
Here is the result when I am in Office with IP 123.123.123.123
Have fun 🙂For a penetration test, most checking procedures are standardized and routine. Don’t you ever feel tired by typing nmap, Nessus, or Saint by your own hand? Are you still feeling safe and rational to type ‘CD’ a thousand times to change directory to manage your clients? Even if you upgraded yourself proudly and start using some funny GUI interface from Nexpose or Tenable, you will still suffer from managing them manually. Those automated tools will no longer helpful or customizable when you meet an standard crappy IPS that blocks typical scanning.
Manual assessment is your own value position to distinguish yourself from others in terms of skills, knowledge and speed! But the term “manual” are often over used by companies. It doesn’t mean you have to spend your time and effort to keep typing ls and cd on the keyboards with your bloody hand but your mental power to think of an alternate route to penetrate into the system. Here is a handy script I written for myself to save my time, make a penetration test in a more organized manner and help you focus on a real hacking but not typing.
client my_client_name
http://www.cyberciti.biz/tips/linux-how-to-create-multiple-users-accounts-in-batch.html
for i in `seq 1 30`;
do
echo -n “group$i:group$i:”
echo -n $i | awk ‘{printf 1;printf “%03d”, $1;}’
echo :506:Student user:/home/user$i:/bin/bash
done
Google api:
http://code.google.com/apis/ajax/playground/
XHR request:
function loadXMLDoc(url)
{
if (window.XMLHttpRequest)
{// code for IE7+, Firefox, Chrome, Opera, Safari
jsonhttp=new XMLHttpRequest();
}
else
{// code for IE6, IE5
jsonhttp=new ActiveXObject("Microsoft.XMLHTTP");
}
jsonhttp.open("GET",url,false);
jsonhttp.send(null);
document.write("Response from mysql:</br>");
document.write(jsonhttp.responseText);
return(JSON.parse(jsonhttp.responseText));
}
var result = loadXMLDoc('the_request.php');
Geeks in HK 