"No-Tech Hacking" Sample Chapter
Yo Yo SKillz #1
Gooscan (Linux)
Downloads
Downloads
Downloads Home » Blackpapers
DocumentsDate added
-
Microsoft Access Trojan VBA: The overlooked Macro Virushot!
- 14.06.2000
- Everyone got all excited about viruses like the Melissa virus which relied on macros in Microsoft Word. As a result, Microsoft got all "safe" and decided to ban untrusted macro execution in all their office products, except one: Microsoft Access. Although this exploit leverages something similar to a macro, turning off this feature in Access well, BREAKS Access. Go figure.
- Hits: 7224
-
Application Information Gatheringhot!
- 13.06.2000
- A document similar in purpose to the Netware Guide. Early in my training of junior assessment guys, this came in real handy. This shows various common techniques for NT and Unix information gathering. So, if you find a service open with a portscanner, this document gives you an idea of what to do next.
- Hits: 8907
-
DNS Prediction With Googlehot!
- 25.03.2005
- It's possible to use Google to help find hosts that Google doesn't even KNOW about! This paper outlines a technique we'll call DNS name prediction with Google. This technique can help a security auditor locate hosts, targets, and subdomains that exist on a target network via Google queries, name expansion with Google sets, and DNS lookups. A neat topic, outlined with working examples.
- Hits: 11481
-
Phrack 52: Steganography Thumprintinghot!
- 26.01.1998
- A decent article, although it's old. This was my first real article/paper. I met Mike (Shiffman) / Daemon9 / Route through a friend of mine, Topher, and we got to chatting. We came up with the idea of this paper, and here it is. Seems like a lifetime ago.
- Hits: 11800
-
The Google Hacker's Guidehot!
- 19.03.2004
- The Google search engine found at www.google.com offers many different features including language and document translation, web, image, newsgroups, catalog and news searches and more. These features offer obvious benefits to even the most uninitiated web surfer, but these same features allow for far more nefarious possibilities to the most malicious Internet users including hackers, computer criminals, identity thieves and even terrorists. This paper outlines the more nefarious applications of the Google search engine, techniques that have collectively been termed "Google hacking". The intent of this paper is to educate web administrators and the security community in the hopes of eventually securing this form of information leakage. This was the early predecessor to Google Hacking For Penetration Testers.
- Hits: 105393