http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2012-09-28 23:48:44 - iagox86 : Somebody posted this on my blog; an old whitepaper about a hash length extension vulnerability in flickr, vimeo, etc: http://tco/6sD1xoVHhttp://www.secuobs.com/twitter/news/346866.shtmlhttp://www.secuobs.com/twitter/news/346866.shtml Secuobs.com : 2012-08-11 12:16:01 - iagox86 - Sites that have root: in Javascript, causing scanners to flag directory traversal false positives everywhere #hackerfirstworldproblemshttp://www.secuobs.com/twitter/news/339602.shtmlhttp://www.secuobs.com/twitter/news/339602.shtml Secuobs.com : 2012-08-02 11:36:18 - iagox86 - RT @hdmoore: A neat local privilege escalation for Linux systems using the nVidia driver: http://tco/8CMZq3Gdhttp://www.secuobs.com/twitter/news/337624.shtmlhttp://www.secuobs.com/twitter/news/337624.shtml Secuobs.com : 2012-07-27 02:45:36 - iagox86 - Leaving for BSidesLV + Defcon in a couple hours, flying in with my wingmen @sporked and @alexwebr Hope to see everybody therehttp://www.secuobs.com/twitter/news/336216.shtmlhttp://www.secuobs.com/twitter/news/336216.shtml Secuobs.com : 2012-07-20 15:53:05 - iagox86 - The Winnipeg Defcon crew, starring @sporked @AlexWebr @mak_kolybabi @nitrodist @russtfm and more 204 represent #ff #followfridayhttp://www.secuobs.com/twitter/news/334987.shtmlhttp://www.secuobs.com/twitter/news/334987.shtml Secuobs.com : 2012-07-19 22:51:33 - iagox86 - @AlexWebr: My first @nmap script looks for a Git repo in a webserver's root was accepted today -- congrats to latest nmap contributorhttp://www.secuobs.com/twitter/news/334813.shtmlhttp://www.secuobs.com/twitter/news/334813.shtml Secuobs.com : 2012-06-21 14:15:42 - iagox86 - RT @ReverseICS: Is that a 16dbi gain 24 ghz yagi antenna in your pocket, or are you just happy to see my unencrypted wifihttp://www.secuobs.com/twitter/news/329052.shtmlhttp://www.secuobs.com/twitter/news/329052.shtml Secuobs.com : 2012-06-18 01:22:14 - iagox86 - RT @Adam_Cyber: Announcing CrowdRE a cloud based collaborative tool to enable sharing of annotations in IDA Pro http://tco/d9dYfbme g http://www.secuobs.com/twitter/news/328365.shtmlhttp://www.secuobs.com/twitter/news/328365.shtml Secuobs.com : 2012-06-18 01:22:14 - iagox86 - RT @aaronportnoy: I wonder how hard it would be to PGP encrypt/decrypt commits to @crowdstrike's CloudRE server #reconmtl #freestoragehttp://www.secuobs.com/twitter/news/328364.shtmlhttp://www.secuobs.com/twitter/news/328364.shtml Secuobs.com : 2012-06-18 01:22:14 - iagox86 - RT @CrowdStrike: Those interested in CrowdRE private cloud, please send your feedback and what features you would like to see to crowd http://www.secuobs.com/twitter/news/328363.shtmlhttp://www.secuobs.com/twitter/news/328363.shtml Secuobs.com : 2012-06-18 01:22:14 - iagox86 - So tempted to ask every presenter when the private cloud version will be coming out #reconmtl #recon2012http://www.secuobs.com/twitter/news/328362.shtmlhttp://www.secuobs.com/twitter/news/328362.shtml Secuobs.com : 2012-06-15 07:21:12 - iagox86 - RT @filar: Love the Microsoft security guy showing Google Chrome vulnerabilities #recon2012http://www.secuobs.com/twitter/news/327613.shtmlhttp://www.secuobs.com/twitter/news/327613.shtml Secuobs.com : 2012-06-12 12:49:57 - iagox86 - @skimbu Tested it using the shell code from the Metasploit blog, the Nmap script, and the Nessus script I wrote they all worked earlierhttp://www.secuobs.com/twitter/news/326879.shtmlhttp://www.secuobs.com/twitter/news/326879.shtml Secuobs.com : 2012-04-09 05:49:25 - iagox86 - Spent a few hours debugging db2 odbc drivers with @bkulyk today We won, proved IBM was lyinghttp://www.secuobs.com/twitter/news/310597.shtmlhttp://www.secuobs.com/twitter/news/310597.shtml Secuobs.com : 2012-03-28 11:38:14 - iagox86 - RT @r_netsec: Nmap script to test for servers vulnerable to ms12-020 without triggering the BSoD - http://tco/rxFv5YJ8http://www.secuobs.com/twitter/news/307279.shtmlhttp://www.secuobs.com/twitter/news/307279.shtml Secuobs.com : 2012-02-25 00:45:11 - iagox86 - Remote check for remote pre-auth PCAnywhere vuln should be in the Nessus feed shortly What an ugly codebase, proud of my check, thoughhttp://www.secuobs.com/twitter/news/297349.shtmlhttp://www.secuobs.com/twitter/news/297349.shtml Secuobs.com : 2012-02-04 02:59:58 - iagox86 - RT @Myne_us: we are hiring a Nessus Vulnerability Research Engineer at @TenableSecurity , position is remote, submit resume to http://t http://www.secuobs.com/twitter/news/290669.shtmlhttp://www.secuobs.com/twitter/news/290669.shtml Secuobs.com : 2012-01-22 05:27:07 - iagox86 - RT @RonGula: Thanks to @DigitalBond for helping make the Nessus checks passive PVS plugins for a variety of SCADA systems : http://t http://www.secuobs.com/twitter/news/286264.shtmlhttp://www.secuobs.com/twitter/news/286264.shtml Secuobs.com : 2012-01-15 01:26:03 - iagox86 - RT @nmap: What new capabilities would you like for Nmap We're seeking NSE script ideas new authors: http://tco/BQfnHBwmhttp://www.secuobs.com/twitter/news/283918.shtmlhttp://www.secuobs.com/twitter/news/283918.shtml Secuobs.com : 2011-12-21 01:12:50 - iagox86 - RT @RonGula: Remote control manager FAIL by @iagox86 - great piece on reverse engineering a vague ZDI advisoryhttp://www.secuobs.com/twitter/news/277085.shtmlhttp://www.secuobs.com/twitter/news/277085.shtml Secuobs.com : 2011-12-20 07:53:29 - iagox86 - RT @hdmoore: It seems like HP Network Node Manager's only purpose is to run shellcode at this point: http://tco/kLcVNddYhttp://www.secuobs.com/twitter/news/276771.shtmlhttp://www.secuobs.com/twitter/news/276771.shtml Secuobs.com : 2011-12-20 00:42:16 - iagox86 - @carnal0wnage I definitely considered making a Metasploit module I don't think Tenable would approve, though, since it's an 0-dayhttp://www.secuobs.com/twitter/news/276662.shtmlhttp://www.secuobs.com/twitter/news/276662.shtml Secuobs.com : 2011-11-25 00:15:03 - iagox86 - @joswr1ght Thanks Josh A few other people suggested Scapy as well, sounds like the wa to gohttp://www.secuobs.com/twitter/news/268979.shtmlhttp://www.secuobs.com/twitter/news/268979.shtml Secuobs.com : 2011-11-09 16:31:31 - iagox86 - RT @edskoudis: I just said, Working w/ Scapy is like being a 10 yo girl who gets a pony, finding out it is a pegasus unicorn pony tha http://www.secuobs.com/twitter/news/264242.shtmlhttp://www.secuobs.com/twitter/news/264242.shtml Secuobs.com : 2011-10-03 15:47:36 - iagox86 - RT @gangrif: Note: when demoing nmap First, compile nmap #derbyconhttp://www.secuobs.com/twitter/news/253831.shtmlhttp://www.secuobs.com/twitter/news/253831.shtml Secuobs.com : 2011-10-01 22:40:33 - iagox86 - Overflowing room for @Carlos_Perez's talk http://tco/y1pP4538http://www.secuobs.com/twitter/news/253570.shtmlhttp://www.secuobs.com/twitter/news/253570.shtml Secuobs.com : 2011-10-01 22:40:33 - iagox86 - Overflowing room at @Carlos_Perez's talk #DerbyCon http://tco/te7zd7vHhttp://www.secuobs.com/twitter/news/253569.shtmlhttp://www.secuobs.com/twitter/news/253569.shtml Secuobs.com : 2011-08-29 07:59:56 - iagox86 - I suspect that ms11-058 makes the DNS vuln more exploitable, not less Waiting to hear from @Microsoft before releasing info :http://www.secuobs.com/twitter/news/242416.shtmlhttp://www.secuobs.com/twitter/news/242416.shtml Secuobs.com : 2011-08-23 20:47:28 - iagox86 - @ochsff It is, but it's a byte converted to a dword so it's not going to overflow anythinghttp://www.secuobs.com/twitter/news/240673.shtmlhttp://www.secuobs.com/twitter/news/240673.shtml Secuobs.com : 2011-08-04 01:58:35 - iagox86 - @kongo_86 yup, absolutely Talk to me at or after Defconhttp://www.secuobs.com/twitter/news/234690.shtmlhttp://www.secuobs.com/twitter/news/234690.shtml Secuobs.com : 2011-08-03 22:53:49 - iagox86 - They're neither whitehats, nor blackhats - just jackasses --valsmith on press whores Palin and Gregory Evans on screen #bsideslvhttp://www.secuobs.com/twitter/news/234610.shtmlhttp://www.secuobs.com/twitter/news/234610.shtml Secuobs.com : 2011-08-03 20:27:16 - iagox86 - If you're at #bsideslv, come say hi I'm wearing a green shirt and grey/orange shmoocon baghttp://www.secuobs.com/twitter/news/234525.shtmlhttp://www.secuobs.com/twitter/news/234525.shtml Secuobs.com : 2011-08-03 20:27:16 - iagox86 - @glynwintle damn Are you doing Blackhat or Bsides I'm at Bsides getting ready for the first trachttp://www.secuobs.com/twitter/news/234524.shtmlhttp://www.secuobs.com/twitter/news/234524.shtml Secuobs.com : 2011-07-10 18:41:11 - iagox86 - RT @ap0x: Slides for my #Recon talk Reverse engineering software compressions are online: http://tco/wS6pG8dhttp://www.secuobs.com/twitter/news/226202.shtmlhttp://www.secuobs.com/twitter/news/226202.shtml Secuobs.com : 2011-07-08 21:39:43 - iagox86 - First speaker is dropping an 0-day in Windows Very nice #reconhttp://www.secuobs.com/twitter/news/225631.shtmlhttp://www.secuobs.com/twitter/news/225631.shtml Secuobs.com : 2011-06-15 00:12:31 - iagox86 - @pello There seem to be a lot of obscure options, but -o is really bad I'd prefer to just use Wireshark - normally I prefer commandline :http://www.secuobs.com/twitter/news/217483.shtmlhttp://www.secuobs.com/twitter/news/217483.shtml Secuobs.com : 2011-06-15 00:12:31 - iagox86 - If you know Java or any of those other pretend languages, you should be able to follow this ruby --@todb #sharkfesthttp://www.secuobs.com/twitter/news/217482.shtmlhttp://www.secuobs.com/twitter/news/217482.shtml Secuobs.com : 2011-05-31 18:41:16 - iagox86 - RT @nevdull77: I've posted a Nmap script that performs some of the MySQL CIS benchmark tests Feedback and test results are welcome http http://www.secuobs.com/twitter/news/212361.shtmlhttp://www.secuobs.com/twitter/news/212361.shtml Secuobs.com : 2011-05-14 09:01:30 - iagox86 - RT @nmap: Tired of all the typing remembering so many Nmap options Try this Bash command completion script: http://bitly/nmapbashhttp://www.secuobs.com/twitter/news/206436.shtmlhttp://www.secuobs.com/twitter/news/206436.shtml Secuobs.com : 2011-05-11 19:19:59 - iagox86 - Just used a double netcat relay to get an actual port 25 email from my server to a test box in my lab @edskoudis would be proudhttp://www.secuobs.com/twitter/news/205057.shtmlhttp://www.secuobs.com/twitter/news/205057.shtml Secuobs.com : 2011-05-11 19:19:59 - iagox86 - Just used ncat to MitM a SSL connection by relaying it plaintext to another ncat and running wireshark in between 3 ncathttp://www.secuobs.com/twitter/news/205056.shtmlhttp://www.secuobs.com/twitter/news/205056.shtml Secuobs.com : 2011-05-11 19:19:59 - iagox86 - @celord It's basically a welfare version of sslstrip or similar :http://www.secuobs.com/twitter/news/205055.shtmlhttp://www.secuobs.com/twitter/news/205055.shtml Secuobs.com : 2011-05-11 19:19:59 - iagox86 - @terriko Perhaps they're encrypting it in some safe way as a mitigation for the fact that SSL suckshttp://www.secuobs.com/twitter/news/205054.shtmlhttp://www.secuobs.com/twitter/news/205054.shtml Secuobs.com : 2011-05-11 19:19:59 - iagox86 - RT @TomSellers: Using Nessus w/o SecurityCenter here lately makes me miss NeXpose To those who have used both, does SecurityCenter f http://www.secuobs.com/twitter/news/205053.shtmlhttp://www.secuobs.com/twitter/news/205053.shtml Secuobs.com : 2011-05-07 12:51:29 - iagox86 - RT @juanjo1410: Bash-completion script for Nmap }:-j http://googl/ascEshttp://www.secuobs.com/twitter/news/203356.shtmlhttp://www.secuobs.com/twitter/news/203356.shtml Secuobs.com : 2011-05-06 12:13:34 - iagox86 - RT @haxorthematrix: Apparently if you resume an nmap scan it does not complete with the NSE script NSE output only goes to STDOUT and n http://www.secuobs.com/twitter/news/202957.shtmlhttp://www.secuobs.com/twitter/news/202957.shtml Secuobs.com : 2011-04-29 16:24:08 - iagox86 - RT @hammackj: Just released a blog post on OSX x64/Intel shellcode to do a reverse_tcp connection http://googl/I0Hz3http://www.secuobs.com/twitter/news/200762.shtmlhttp://www.secuobs.com/twitter/news/200762.shtml Secuobs.com : 2011-04-21 08:54:08 - iagox86 - Hosting the SANS 560 capture-the-flag challenge right now After some initial VPN hiccups, everything's going greathttp://www.secuobs.com/twitter/news/197753.shtmlhttp://www.secuobs.com/twitter/news/197753.shtml Secuobs.com : 2011-04-05 19:31:36 - iagox86 - RT @nevdull77: Just committed afp-ls, a Nmap script listing files on remote AFP volumeshttp://www.secuobs.com/twitter/news/192587.shtmlhttp://www.secuobs.com/twitter/news/192587.shtml Secuobs.com : 2011-04-05 19:31:36 - iagox86 - @edskoudis Why don't we do it Defcon style and just, like, drinkhttp://www.secuobs.com/twitter/news/192586.shtmlhttp://www.secuobs.com/twitter/news/192586.shtml Secuobs.com : 2011-04-04 18:17:25 - iagox86 - RT @MarkBaggett: Fun with my shmoocon badge http://wwwvimeocom/21844850http://www.secuobs.com/twitter/news/192225.shtmlhttp://www.secuobs.com/twitter/news/192225.shtml Secuobs.com : 2011-03-31 22:50:07 - iagox86 - RT @MarkBaggett: If someone can steal something from RSA and spoof your token it was never secure unless u trust RSA wont spoof your tokenhttp://www.secuobs.com/twitter/news/191026.shtmlhttp://www.secuobs.com/twitter/news/191026.shtml Secuobs.com : 2011-03-31 22:50:07 - iagox86 - @MarkBaggett Same goes for SSL - if a compromised CA = huge problems, it was never secure without trusting *every8 CAhttp://www.secuobs.com/twitter/news/191025.shtmlhttp://www.secuobs.com/twitter/news/191025.shtml Secuobs.com : 2011-03-25 11:25:06 - iagox86 - I need to finally learn OllyDbg anybody have any interesting reverse engineering/debugging challenges that I can play withhttp://www.secuobs.com/twitter/news/188656.shtmlhttp://www.secuobs.com/twitter/news/188656.shtml Secuobs.com : 2011-03-24 23:58:28 - iagox86 - RT @CrackMeIfYouCan: 32,249 salted MD5 hashes from a white-power website leaked Most popular password 123456 - As if I needed proof th http://www.secuobs.com/twitter/news/188400.shtmlhttp://www.secuobs.com/twitter/news/188400.shtml Secuobs.com : 2011-03-23 17:57:18 - iagox86 - RT @mogigoma: My known SSL key script got committed to #nmap http://nmaporg/svn/scripts/ssl-known-keynsehttp://www.secuobs.com/twitter/news/187834.shtmlhttp://www.secuobs.com/twitter/news/187834.shtml Secuobs.com : 2011-03-18 00:47:26 - iagox86 - If I try to negotiate don't seal with the server, it errors out If I MITM and tell the client not to encrypt, it still encryptshttp://www.secuobs.com/twitter/news/185898.shtmlhttp://www.secuobs.com/twitter/news/185898.shtml Secuobs.com : 2011-03-17 03:28:05 - iagox86 - @zeroday - awhile back you tweeted that you wanted Nmap to scan a full AS Now you can http://seclistsorg/nmap-dev/2011/q1/853http://www.secuobs.com/twitter/news/185525.shtmlhttp://www.secuobs.com/twitter/news/185525.shtml Secuobs.com : 2011-03-14 15:01:04 - iagox86 - RT @nmap: HBGary planned to BLOW THE BALLS OFF OF NMAP http://bitly/nmapballshttp://www.secuobs.com/twitter/news/184412.shtmlhttp://www.secuobs.com/twitter/news/184412.shtml Secuobs.com : 2011-03-10 20:22:21 - iagox86 - @TheNetWasMyIdea Nessus is cool, and I'm not just saying that cuz it's my job, but I like talking about my own projectshttp://www.secuobs.com/twitter/news/183147.shtmlhttp://www.secuobs.com/twitter/news/183147.shtml Secuobs.com : 2011-03-10 01:05:03 - iagox86 - RT @nmap: Video posted: Mak Kolybabi's @mogigoma Intro to Nmap talk at @SkullSpaceWpg event: http://vimeocom/20718383http://www.secuobs.com/twitter/news/182701.shtmlhttp://www.secuobs.com/twitter/news/182701.shtml Secuobs.com : 2011-02-25 19:45:49 - iagox86 - RT @Carlos_Perez: Sipvicious is not working for me today : does anybody know of a good tool for enumerating SIP extensionshttp://www.secuobs.com/twitter/news/178238.shtmlhttp://www.secuobs.com/twitter/news/178238.shtml Secuobs.com : 2011-02-15 05:00:48 - iagox86 - RT @nmap: Our last stable release took a year, so we're pleased to release Nmap 551 after just two weeks http://bitly/nmap551http://www.secuobs.com/twitter/news/173965.shtmlhttp://www.secuobs.com/twitter/news/173965.shtml Secuobs.com : 2011-02-03 08:32:34 - iagox86 - RT @taosecurity: Thanks to Jon Mark Allen for pointing me to Ron Bowes' paper Scanning Windows Deeper With the Nmap Scanning Engine http http://www.secuobs.com/twitter/news/169758.shtmlhttp://www.secuobs.com/twitter/news/169758.shtml Secuobs.com : 2011-02-03 08:32:34 - iagox86 - RT @mruef: My video about #Nmap NSE scripting for large-scale pentests from #Hashdays 2010 is online: http://wwwyoutubecom/watchv=cHz http://www.secuobs.com/twitter/news/169757.shtmlhttp://www.secuobs.com/twitter/news/169757.shtml Secuobs.com : 2011-01-29 08:05:52 - iagox86 - @ultramegaman Dude, it's Ron from Winnipeg's hackerspace I'm at Shmoocon - my number is 204-960-4345, call/sms me laptop battery = 1 pourcentshttp://www.secuobs.com/twitter/news/167943.shtmlhttp://www.secuobs.com/twitter/news/167943.shtml Secuobs.com : 2011-01-28 04:10:56 - iagox86 - @terriko Those CAPTCHAs are hugely unfair for those of us with prosopagnosia, although it was a fun challenge I just *barely* passedhttp://www.secuobs.com/twitter/news/167371.shtmlhttp://www.secuobs.com/twitter/news/167371.shtml Secuobs.com : 2011-01-27 16:06:16 - iagox86 - Next year I'm going to get 10 plane tickets for Shmoocon, then I'll definitely make it It'll be like a nop sledhttp://www.secuobs.com/twitter/news/167114.shtmlhttp://www.secuobs.com/twitter/news/167114.shtml Secuobs.com : 2011-01-27 03:28:09 - iagox86 - RT @lakiw: Just FYI, the Nmap cracking effort lead by Brandon Enright has cracked over 85 pourcents of the Gawker list That's impressive conside http://www.secuobs.com/twitter/news/166932.shtmlhttp://www.secuobs.com/twitter/news/166932.shtml Secuobs.com : 2011-01-20 05:21:27 - iagox86 - @strandjs Awesome Can't wait to meet you at Shmoocon I think we met once, very briefly, after a talk you didhttp://www.secuobs.com/twitter/news/164321.shtmlhttp://www.secuobs.com/twitter/news/164321.shtml Secuobs.com : 2011-01-20 05:21:27 - iagox86 - @strandjs I guess I should have picked something I knew less about to talk about, but at least I didn't pick Nmap as my topic :http://www.secuobs.com/twitter/news/164320.shtmlhttp://www.secuobs.com/twitter/news/164320.shtml Secuobs.com : 2011-01-14 10:11:29 - iagox86 - RT @haxorthematrix: Methinks the @Sparkfun folks and @gdead should get together for drinks and discussed self imposed DDoS mitigation, e http://www.secuobs.com/twitter/news/162501.shtmlhttp://www.secuobs.com/twitter/news/162501.shtml Secuobs.com : 2010-12-31 00:03:51 - iagox86 - AwakenedLandscom compromised, 35,351 md5 hashes stolen, 27,290 unique Only 314 are '123456' - are people learninghttp://www.secuobs.com/twitter/news/158570.shtmlhttp://www.secuobs.com/twitter/news/158570.shtml Secuobs.com : 2010-12-23 18:15:14 - iagox86 - RT @RonGula: Thanks to @legogator for making such a cool Nessus logo out of legos for Tenable's all-hands meeting: http://yfrogcom/h89msojhttp://www.secuobs.com/twitter/news/156869.shtmlhttp://www.secuobs.com/twitter/news/156869.shtml Secuobs.com : 2010-12-23 05:59:24 - iagox86 - scrollwarscom compromised, 16,000 or so passwords are floating around raw md5http://www.secuobs.com/twitter/news/156658.shtmlhttp://www.secuobs.com/twitter/news/156658.shtml Secuobs.com : 2010-12-23 05:59:24 - iagox86 - 11,941 unique md5 hashes stolen from scrollwarscom, 1370 of which were cracked already PW for the 1st user probably admin is qwertyhttp://www.secuobs.com/twitter/news/156657.shtmlhttp://www.secuobs.com/twitter/news/156657.shtml Secuobs.com : 2010-12-23 05:59:24 - iagox86 - Holy hell hellrisingcom was also compromised 20219 total passwords, 14327 distinct, reportedly in unsalted sha1 formathttp://www.secuobs.com/twitter/news/156656.shtmlhttp://www.secuobs.com/twitter/news/156656.shtml Secuobs.com : 2010-12-21 01:53:01 - iagox86 - @ChrisShort I'll run Nmap on anything at any time Just point me to your ip address :http://www.secuobs.com/twitter/news/155726.shtmlhttp://www.secuobs.com/twitter/news/155726.shtml Secuobs.com : 2010-12-20 03:00:30 - iagox86 - RT @xme: Interesting project: LittleBlackBox - a repository of private SSL keys extracted from various embedded devices http://bitly/ http://www.secuobs.com/twitter/news/155386.shtmlhttp://www.secuobs.com/twitter/news/155386.shtml Secuobs.com : 2010-12-17 02:57:54 - iagox86 - @minorcrash Nmap Scripting Engine and how to write scriptshttp://www.secuobs.com/twitter/news/154308.shtmlhttp://www.secuobs.com/twitter/news/154308.shtml Secuobs.com : 2010-12-15 14:59:37 - iagox86 - RT @mdowd: Suggestion for OpenBSD webpage: Only one government-installed backdoor in over 10 yearshttp://www.secuobs.com/twitter/news/153515.shtmlhttp://www.secuobs.com/twitter/news/153515.shtml Secuobs.com : 2010-12-15 01:40:06 - iagox86 - RT @ethicalhack3r: Some nice Nmap scripts for probing NetBus by Toni Ruottu - http://seclistsorg/nmap-dev/2010/q4/573http://www.secuobs.com/twitter/news/153220.shtmlhttp://www.secuobs.com/twitter/news/153220.shtml Secuobs.com : 2010-12-15 01:40:06 - iagox86 - RT @rlhc: I love PFsense This is one cool firewall distribution based on FreeBSD Only wish it could produce a report on nightly traffi http://www.secuobs.com/twitter/news/153219.shtmlhttp://www.secuobs.com/twitter/news/153219.shtml Secuobs.com : 2010-12-14 16:02:23 - iagox86 - RT @SkullSpaceWpg: We had our first SkulSpace hack-a-thon in @mak_kolybabi's living room The product Nmap scripts First - http:// http://www.secuobs.com/twitter/news/153028.shtmlhttp://www.secuobs.com/twitter/news/153028.shtml Secuobs.com : 2010-12-14 03:50:31 - iagox86 - RT @Carlos_Perez: for those who asked for the sound recorder Meterpreter script, new version run entirely in memory enjoy http://bitly/ http://www.secuobs.com/twitter/news/152844.shtmlhttp://www.secuobs.com/twitter/news/152844.shtml Secuobs.com : 2010-12-14 03:50:31 - iagox86 - Has anybody played w/ metasploit exim exploit I get 554 SMTP synchronization error on default deb no luck vs other distros, eitherhttp://www.secuobs.com/twitter/news/152843.shtmlhttp://www.secuobs.com/twitter/news/152843.shtml Secuobs.com : 2010-12-14 03:50:31 - iagox86 - Update Nessus plugins to get diskpulse-* scripts I wrote If you have anything with port 9120 open, check it out - nasty vulnshttp://www.secuobs.com/twitter/news/152842.shtmlhttp://www.secuobs.com/twitter/news/152842.shtml Secuobs.com : 2010-12-14 03:50:31 - iagox86 - I work on Nmap NSE all weekend, and break the semicolon habit Then I go back to NASL, and have to remember semicolons again Funhttp://www.secuobs.com/twitter/news/152841.shtmlhttp://www.secuobs.com/twitter/news/152841.shtml Secuobs.com : 2010-12-08 19:42:24 - iagox86 - RT @RonGula: I'm excited to announce Tenable's new online vuln scanning service - the Nessus Perimeter Service : http://bitly/eTTy8Ohttp://www.secuobs.com/twitter/news/150620.shtmlhttp://www.secuobs.com/twitter/news/150620.shtml Secuobs.com : 2010-12-07 02:53:03 - iagox86 - Sweet, somebody wrote a dissector for my Dnscat protocol http://diablohornwordpresscom/2010/12/05/dnscat-traffic-post-dissector/http://www.secuobs.com/twitter/news/149874.shtmlhttp://www.secuobs.com/twitter/news/149874.shtml Secuobs.com : 2010-12-06 20:27:44 - iagox86 - RT @chiche: 10 Cool Nmap Tricks and Techniques http://blogurfixcom/p=141http://www.secuobs.com/twitter/news/149700.shtmlhttp://www.secuobs.com/twitter/news/149700.shtml Secuobs.com : 2010-12-02 07:31:53 - iagox86 - @lakiw Nmap scripting engine My current favourite topic when people aren't asking me to talk about facebook :http://www.secuobs.com/twitter/news/148093.shtmlhttp://www.secuobs.com/twitter/news/148093.shtml Secuobs.com : 2010-11-29 19:51:21 - iagox86 - @MaideHoN Just a pretty wrapper around Metasploit Cool, though :http://www.secuobs.com/twitter/news/147004.shtmlhttp://www.secuobs.com/twitter/news/147004.shtml Secuobs.com : 2010-11-27 04:09:37 - iagox86 - Deepsec talk is over no more public speaking till the end of January when I mentor SANS560 in Winnipeg Stress--http://www.secuobs.com/twitter/news/146642.shtmlhttp://www.secuobs.com/twitter/news/146642.shtml Secuobs.com : 2010-11-26 02:21:34 - iagox86 - @ivanristic I don't think you can ever fix SQLi/XSS the way you said Even prepared statements don't help if you use them wrong #deepsechttp://www.secuobs.com/twitter/news/146355.shtmlhttp://www.secuobs.com/twitter/news/146355.shtml Secuobs.com : 2010-11-23 19:47:05 - iagox86 - RT @RonGula: #nessus #jobs Tenable is looking for more people to help test new Nessus plugins full time : http://bitly/gSAzxAhttp://www.secuobs.com/twitter/news/145479.shtmlhttp://www.secuobs.com/twitter/news/145479.shtml Secuobs.com : 2010-11-20 05:20:52 - iagox86 - Use Nessus to check for Stuxnet infections: http://bitly/bTMV1z written by me and Renaudhttp://www.secuobs.com/twitter/news/144393.shtmlhttp://www.secuobs.com/twitter/news/144393.shtml Secuobs.com : 2010-11-20 05:20:52 - iagox86 - @lakiw :D I've enjoyed the crap people have entered Too much amusement See you at Shmooconhttp://www.secuobs.com/twitter/news/144392.shtmlhttp://www.secuobs.com/twitter/news/144392.shtml Secuobs.com : 2010-11-18 21:18:27 - iagox86 - RT @nevdull77: Pentesting iSCSI Check these #Nmap scripts out http://bitly/byYSauhttp://www.secuobs.com/twitter/news/143875.shtmlhttp://www.secuobs.com/twitter/news/143875.shtml Secuobs.com : 2010-11-15 21:32:07 - iagox86 - @ChrisJohnRiley No, DeepSec is going to be completely different, as is my ISACA talk in 2 days It's quite the month for me :http://www.secuobs.com/twitter/news/142510.shtmlhttp://www.secuobs.com/twitter/news/142510.shtml Secuobs.com : 2010-11-15 07:20:07 - iagox86 - RT @terriko: admits that she kind of wants to write nmap scripts thanks to @iagox86 at #bsidesottawa Mostly, she'd like to be asleep, t http://www.secuobs.com/twitter/news/142351.shtmlhttp://www.secuobs.com/twitter/news/142351.shtml Secuobs.com : 2010-11-14 02:17:15 - iagox86 - I think I'm going to show up a little late today gotta re-write the Internet so I can do my demo *starts with DNS* #bsidesottawahttp://www.secuobs.com/twitter/news/142131.shtmlhttp://www.secuobs.com/twitter/news/142131.shtml Secuobs.com : 2010-11-14 02:17:15 - iagox86 - RT @mobob: Wow great cloak n daggers demo by @iagox86 using nmap scripts #Bsidesottawahttp://www.secuobs.com/twitter/news/142130.shtmlhttp://www.secuobs.com/twitter/news/142130.shtml Secuobs.com : 2010-11-13 00:08:13 - iagox86 - @kellman some of those slides seemed very familiar Did you speak at shmoocon/toorcon/defcon/etc with a similar talkhttp://www.secuobs.com/twitter/news/141809.shtmlhttp://www.secuobs.com/twitter/news/141809.shtml Secuobs.com : 2010-11-13 00:08:13 - iagox86 - @TomSellers I was just gonna use my fake dns server There's actually a branch of my telco across the street, I should look into a 3g devicehttp://www.secuobs.com/twitter/news/141808.shtmlhttp://www.secuobs.com/twitter/news/141808.shtml Secuobs.com : 2010-11-13 00:08:13 - iagox86 - @TomSellers I wonder if rogers's internet anywhere stuff works on linuxhttp://www.secuobs.com/twitter/news/141807.shtmlhttp://www.secuobs.com/twitter/news/141807.shtml Secuobs.com : 2010-11-12 11:08:56 - iagox86 - So many PCs at the hotel are trying to find a WPAD file I wanna help them outdear MIKE-B7HLR4QCAZ, stop tempting me #bsidesottawahttp://www.secuobs.com/twitter/news/141655.shtmlhttp://www.secuobs.com/twitter/news/141655.shtml Secuobs.com : 2010-11-07 01:11:05 - iagox86 - There's something magical about watching millions of md5 hashes get cracked over and over preparing for @deepsechttp://www.secuobs.com/twitter/news/139826.shtmlhttp://www.secuobs.com/twitter/news/139826.shtml Secuobs.com : 2010-11-04 05:28:19 - iagox86 - @timb_machine It's only fair to give credit where credit's due It's been significantly less painful than the last IBM product - Mojarrahttp://www.secuobs.com/twitter/news/138623.shtmlhttp://www.secuobs.com/twitter/news/138623.shtml Secuobs.com : 2010-11-02 19:23:41 - iagox86 - Looking for opinions on Nmap's new Web app fingerprint format before I start asking for submissions: http://bitly/b17T2ihttp://www.secuobs.com/twitter/news/138003.shtmlhttp://www.secuobs.com/twitter/news/138003.shtml Secuobs.com : 2010-11-02 19:23:41 - iagox86 - Talk on Nmap Scripting from Toorcon by David Shaw - http://vimeocom/16291301http://www.secuobs.com/twitter/news/138002.shtmlhttp://www.secuobs.com/twitter/news/138002.shtml Secuobs.com : 2010-11-01 07:25:53 - iagox86 - Thinking of writing an Nmap script but not sure where to start Check out the sample script I wrote: http://bitly/a8vKdwhttp://www.secuobs.com/twitter/news/137423.shtmlhttp://www.secuobs.com/twitter/news/137423.shtml Secuobs.com : 2010-10-22 14:18:36 - iagox86 - Nessus reached plugin ID 50,000 this week And better yet, the lucky plugin was one that I co-wrote http://bitly/bhEoxhhttp://www.secuobs.com/twitter/news/134124.shtmlhttp://www.secuobs.com/twitter/news/134124.shtml Secuobs.com : 2010-10-20 01:56:23 - iagox86 - My second Nessus plugin, written by me and Derrick Wong, remotely detects ms10-075: rtsp-useafterfree-ms10-075http://www.secuobs.com/twitter/news/132851.shtmlhttp://www.secuobs.com/twitter/news/132851.shtml Secuobs.com : 2010-10-13 15:09:19 - iagox86 - RT @rogueclown: SO EXCITED that there's an NMAP Scripting Engine talk at #bsidesottawa next monthhttp://www.secuobs.com/twitter/news/130811.shtmlhttp://www.secuobs.com/twitter/news/130811.shtml Secuobs.com : 2010-10-12 18:17:47 - iagox86 - RT @nmap: Miss Defcon Fyodor and David's fun presentation on the Nmap Scripting Engine was just posted at http://bitly/nmapdchttp://www.secuobs.com/twitter/news/130542.shtmlhttp://www.secuobs.com/twitter/news/130542.shtml Secuobs.com : 2010-10-12 18:17:47 - iagox86 - First Nessus plugin written by me and @hammackj is live Detect ms10-070 w/ padding_oracle_ms10-070nasl available in feedhttp://www.secuobs.com/twitter/news/130541.shtmlhttp://www.secuobs.com/twitter/news/130541.shtml Secuobs.com : 2010-10-05 11:57:28 - iagox86 - I love it when sample code, intended to teach a security concept, has dead simple sql injection - http://bitly/bBQf5Jhttp://www.secuobs.com/twitter/news/128537.shtmlhttp://www.secuobs.com/twitter/news/128537.shtml Secuobs.com : 2010-10-05 11:57:28 - iagox86 - @ashcrow The purpose of salt is to a make precomputation attacks possible, and b as a result of a slow down bruteforcehttp://www.secuobs.com/twitter/news/128536.shtmlhttp://www.secuobs.com/twitter/news/128536.shtml Secuobs.com : 2010-10-05 11:57:28 - iagox86 - Just found out that my talk for #BSidesOttawa was accepted I'm speaking November 13 on the Nmap Scripting Enginehttp://www.secuobs.com/twitter/news/128535.shtmlhttp://www.secuobs.com/twitter/news/128535.shtml Secuobs.com : 2010-10-04 05:46:40 - iagox86 - Just committed a new DoS script for Nmap -- smb-floodnse 11 connections is limit for most versions http://bitly/dqTngGhttp://www.secuobs.com/twitter/news/128106.shtmlhttp://www.secuobs.com/twitter/news/128106.shtml Secuobs.com : 2010-10-04 05:46:40 - iagox86 - Just committed a change that lets Nmap's SMB scripts run in parallel with each other Tests show they're 4x faster than beforehttp://www.secuobs.com/twitter/news/128105.shtmlhttp://www.secuobs.com/twitter/news/128105.shtml Secuobs.com : 2010-09-27 07:45:22 - iagox86 - RT @ithilgore: Ncrack on Hacker News Network http://wwwhackernewscom/2010/09/20/hnncast-2010-09-17/http://www.secuobs.com/twitter/news/126003.shtmlhttp://www.secuobs.com/twitter/news/126003.shtml Secuobs.com : 2010-09-25 14:31:03 - iagox86 - New and improved vim syntax file for Nessus scripts nasl - http://skullsecurityorg/blogdata/naslvimhttp://www.secuobs.com/twitter/news/125660.shtmlhttp://www.secuobs.com/twitter/news/125660.shtml Secuobs.com : 2010-09-25 14:31:03 - iagox86 - Also, the script I used to generate the vim syntax file for Nessus scripts nasl: http://skullsecurityorg/blogdata/naslvimshhttp://www.secuobs.com/twitter/news/125659.shtmlhttp://www.secuobs.com/twitter/news/125659.shtml Secuobs.com : 2010-09-25 14:31:03 - iagox86 - @timb_machine Good point - I expect it would work for OpenVAS, though I didn't try I work for Tenable now, so Nessus is more priority :http://www.secuobs.com/twitter/news/125658.shtmlhttp://www.secuobs.com/twitter/news/125658.shtml Secuobs.com : 2010-09-24 14:15:28 - iagox86 - @timb_machine Absolutely, that's the first thing I asked them when we talked about the position I spent all this evening on Nmap, actuallyhttp://www.secuobs.com/twitter/news/125326.shtmlhttp://www.secuobs.com/twitter/news/125326.shtml Secuobs.com : 2010-09-18 08:52:17 - iagox86 - RT @mckt_: RT @packetwerks You know what is even more wack Directory indexing and sql files http://wwwhackiswackcom/cache/ Oh WOWhttp://www.secuobs.com/twitter/news/122188.shtmlhttp://www.secuobs.com/twitter/news/122188.shtml Secuobs.com : 2010-09-17 22:59:16 - iagox86 - RT @ithilgore: Ncrack 03ALPHA release: http://seclistsorg/nmap-dev/2010/q3/697 first versions of SMB and RDP modules includedhttp://www.secuobs.com/twitter/news/121701.shtmlhttp://www.secuobs.com/twitter/news/121701.shtml Secuobs.com : 2010-07-27 08:56:15 - iagox86 - I downloaded every name on Facebook Awesome bruteforce info, big privacy issue: http://wwwskullsecurityorg/blog/p=887http://www.secuobs.com/twitter/news/118553.shtmlhttp://www.secuobs.com/twitter/news/118553.shtml Secuobs.com : 2010-07-20 21:39:45 - iagox86 - RT @ithilgore: People are already using Ncrack's experimental SMB module from svn repo and they seem to be having great results http: http://www.secuobs.com/twitter/news/116372.shtmlhttp://www.secuobs.com/twitter/news/116372.shtml Secuobs.com : 2010-07-19 23:29:16 - iagox86 - RT @PortSwigger: Firefox backdoor was discovered using Burp http://bitly/coHUa8http://www.secuobs.com/twitter/news/115872.shtmlhttp://www.secuobs.com/twitter/news/115872.shtml Secuobs.com : 2010-07-19 23:29:16 - iagox86 - @DidierStevens Sorry if I'm late, but there was a Shmoocon talk about that: http://wwwshmooconorg/presentations-allhtml#pseudohttp://www.secuobs.com/twitter/news/115871.shtmlhttp://www.secuobs.com/twitter/news/115871.shtml Secuobs.com : 2010-07-19 23:29:16 - iagox86 - RT @PortSwigger: Burp Suite Pro v1307 released - http://releasesportswiggernet/2010/07/v1307htmlhttp://www.secuobs.com/twitter/news/115870.shtmlhttp://www.secuobs.com/twitter/news/115870.shtml Secuobs.com : 2010-07-19 23:29:16 - iagox86 - RT @hdmoore: Metasploit Express v341 Released 16 new exploits, module browser, proxy support, island-hopping: http://bitly/4QxzL9http://www.secuobs.com/twitter/news/115869.shtmlhttp://www.secuobs.com/twitter/news/115869.shtml Secuobs.com : 2010-07-17 18:48:49 - iagox86 - Nmap 535DC1 -- special release for Defcon -- is available http://seclistsorg/nmap-hackers/2010/7http://www.secuobs.com/twitter/news/115324.shtmlhttp://www.secuobs.com/twitter/news/115324.shtml Secuobs.com : 2010-07-17 06:27:41 - iagox86 - RT @nmap: Nmap 535DC1 Defcon edition released 17 new NSE scripts and much more: http://bitly/535DC1http://www.secuobs.com/twitter/news/115170.shtmlhttp://www.secuobs.com/twitter/news/115170.shtml Secuobs.com : 2010-07-16 02:34:28 - iagox86 - RT @nmap: Fyodor David Fifield are presenting on Nmap at Defcon and Black Hat Details: http://bitly/nmap-dchttp://www.secuobs.com/twitter/news/114684.shtmlhttp://www.secuobs.com/twitter/news/114684.shtml Secuobs.com : 2010-07-16 02:34:28 - iagox86 - @mascasa Good one I don't think I've patched my laptop's VMWare Server, so I can make my test VM steal itself :http://www.secuobs.com/twitter/news/114683.shtmlhttp://www.secuobs.com/twitter/news/114683.shtml Secuobs.com : 2010-07-16 02:34:28 - iagox86 - @mascasa Right, the plan that's why I left my laptop's VMWare install vulnerable since your shmoocon talk I know it wasn't stupidity ;http://www.secuobs.com/twitter/news/114682.shtmlhttp://www.secuobs.com/twitter/news/114682.shtml Secuobs.com : 2010-07-14 21:42:40 - iagox86 - RT @wizztee: Nmap Scripting Engine NSEhttp://www.secuobs.com/twitter/news/114214.shtmlhttp://www.secuobs.com/twitter/news/114214.shtml Secuobs.com : 2010-07-12 02:56:08 - iagox86 - Added a password list from @jgimer's honeypot, passwords hackers are trying: http://skullsecurityorg/wiki/indexphp/Passwordshttp://www.secuobs.com/twitter/news/113341.shtmlhttp://www.secuobs.com/twitter/news/113341.shtml Secuobs.com : 2010-07-09 23:33:05 - iagox86 - @jgimer Sure, from now on I'll date them whenever I can Honeypot passwords would be awesome email = ron at skullsecuritynethttp://www.secuobs.com/twitter/news/112837.shtmlhttp://www.secuobs.com/twitter/news/112837.shtml Secuobs.com : 2010-07-08 23:11:45 - iagox86 - Thinking of picking up a cheap netbook for Defcon Suggestions on ones with a good wireless chipset for future wifi hackinghttp://www.secuobs.com/twitter/news/112402.shtmlhttp://www.secuobs.com/twitter/news/112402.shtml Secuobs.com : 2010-07-08 00:12:47 - iagox86 - Help me test newest alpha version of dnscat 005alpha1 Info here: http://wwwskullsecurityorg/blog/p=876http://www.secuobs.com/twitter/news/111981.shtmlhttp://www.secuobs.com/twitter/news/111981.shtml Secuobs.com : 2010-07-08 00:12:47 - iagox86 - Seems that running a dnscat client on Windows w/ no server caused a complicated error Fixed in svn -- hoping for more good reportshttp://www.secuobs.com/twitter/news/111980.shtmlhttp://www.secuobs.com/twitter/news/111980.shtml Secuobs.com : 2010-07-08 00:12:47 - iagox86 - Dnscat reportedly compiles and runs on Fedora Core 13 Thanks to Patrick for testing thathttp://www.secuobs.com/twitter/news/111979.shtmlhttp://www.secuobs.com/twitter/news/111979.shtml Secuobs.com : 2010-07-08 00:12:47 - iagox86 - mecca from binaryhazecom tested dnscat on debian, ubuntu, suse, redhat, and openbsd works and on aix, solaris, and hpux fails Wowhttp://www.secuobs.com/twitter/news/111978.shtmlhttp://www.secuobs.com/twitter/news/111978.shtml Secuobs.com : 2010-07-07 14:30:48 - iagox86 - Preparing to release dnscat 005 Anybody wanna alpha test -- svn co http://svnskullsecurityorg:81/ron/security/nbtoolhttp://www.secuobs.com/twitter/news/111799.shtmlhttp://www.secuobs.com/twitter/news/111799.shtml Secuobs.com : 2010-07-06 10:36:15 - iagox86 - RT @keiththome: Weaponizing the iPad Metaspl0it, nmap, iSSH, StealthMAC I can see a slew of de-auth packets in the futureevil gri http://www.secuobs.com/twitter/news/111443.shtmlhttp://www.secuobs.com/twitter/news/111443.shtml Secuobs.com : 2010-07-03 12:46:13 - iagox86 - @theKos What are you using for the dns tunneling Wanna try a beta of new dnscat release Should be stablehttp://www.secuobs.com/twitter/news/110760.shtmlhttp://www.secuobs.com/twitter/news/110760.shtml Secuobs.com : 2010-07-03 02:08:08 - iagox86 - RT @TomSellers: Any1 know an easy way in Ruby to determine if an IP is in a CIDR range Looking to add IP filtering to Fathom, pref w/o http://www.secuobs.com/twitter/news/110617.shtmlhttp://www.secuobs.com/twitter/news/110617.shtml Secuobs.com : 2010-06-29 03:09:31 - iagox86 - RT @backtracklinux: BackTrack gets official funding New stable development cycle in the future Roadmap upto BT5 on the BT site http:/ http://www.secuobs.com/twitter/news/108647.shtmlhttp://www.secuobs.com/twitter/news/108647.shtml Secuobs.com : 2010-06-25 09:10:53 - iagox86 - RT @ithilgore Anyone with good graphic design skills interested in making a leet svg Ncrack logohttp://www.secuobs.com/twitter/news/107520.shtmlhttp://www.secuobs.com/twitter/news/107520.shtml Secuobs.com : 2010-06-23 23:00:12 - iagox86 - @theKos I'd use Burp Suite to remove the header altogetherhttp://www.secuobs.com/twitter/news/106975.shtmlhttp://www.secuobs.com/twitter/news/106975.shtml Secuobs.com : 2010-06-22 22:35:54 - iagox86 - Great writeup on dnscat http://grey-cornerblogspotcom/2010/06/bypassing-restrictive-proxies-part-1html I feel popular todayhttp://www.secuobs.com/twitter/news/106537.shtmlhttp://www.secuobs.com/twitter/news/106537.shtml Secuobs.com : 2010-06-22 22:35:54 - iagox86 - RT @PortSwigger: Burp Suite Pro v1306 released - http://releasesportswiggernet/2010/06/v1306htmlhttp://www.secuobs.com/twitter/news/106536.shtmlhttp://www.secuobs.com/twitter/news/106536.shtml Secuobs.com : 2010-06-16 23:06:24 - iagox86 - Good blog post on 0-day Windows help vuln: http://infolookupsecuregossipcomhttp://www.secuobs.com/twitter/news/104569.shtmlhttp://www.secuobs.com/twitter/news/104569.shtml Secuobs.com : 2010-06-16 23:06:24 - iagox86 - @edskoudis I like my dns shell better ; -- awesome new version of dnscat will be ready soonhttp://www.secuobs.com/twitter/news/104568.shtmlhttp://www.secuobs.com/twitter/news/104568.shtml Secuobs.com : 2010-06-15 04:54:17 - iagox86 - Find vulnerable UnrealIRCd servers with my new Nmap script: http://seclistsorg/nmap-dev/2010/q2/att-849/irc-unrealircd-backdoornsehttp://www.secuobs.com/twitter/news/103732.shtmlhttp://www.secuobs.com/twitter/news/103732.shtml Secuobs.com : 2010-06-15 04:54:17 - iagox86 - @Montejam I've used DNSCat I'm also the author of it : Feel free to ping me here for anything New version is out soon, I hopehttp://www.secuobs.com/twitter/news/103731.shtmlhttp://www.secuobs.com/twitter/news/103731.shtml Secuobs.com : 2010-06-15 04:54:17 - iagox86 - RT @ithilgore: Ncrack 02ALPHA released: http://seclistsorg/nmap-dev/2010/q2/827http://www.secuobs.com/twitter/news/103730.shtmlhttp://www.secuobs.com/twitter/news/103730.shtml Secuobs.com : 2010-06-04 21:44:44 - iagox86 - RT @4v4t4r: OllyDBG 2 - Final Release | wwwollydbgde/odbg200ziphttp://www.secuobs.com/twitter/news/100086.shtmlhttp://www.secuobs.com/twitter/news/100086.shtml Secuobs.com : 2010-05-28 23:47:28 - iagox86 - Just submitted a talk for #BSidesLV on dns backdoors with Metasploit BSides sounds more fun than Blackhat anywayshttp://www.secuobs.com/twitter/news/98157.shtmlhttp://www.secuobs.com/twitter/news/98157.shtml Secuobs.com : 2010-05-26 18:07:37 - iagox86 - RT @PortSwigger: Burp Scanner gets 12 new checks - http://releasesportswiggernet/2010/05/v1305htmlhttp://www.secuobs.com/twitter/news/97246.shtmlhttp://www.secuobs.com/twitter/news/97246.shtml Secuobs.com : 2010-05-26 18:07:37 - iagox86 - New blog post about crazy netcat relays -- http://wwwskullsecurityorg/blog/p=793 -- written by our students @hesitated and Glenhttp://www.secuobs.com/twitter/news/97245.shtmlhttp://www.secuobs.com/twitter/news/97245.shtml Secuobs.com : 2010-05-22 03:30:12 - iagox86 - @jack_daniel I've seen that traceroute behaviour before What's your OS + can you send pcap to nmap-dev@insecureorg http://www.secuobs.com/twitter/news/95635.shtmlhttp://www.secuobs.com/twitter/news/95635.shtml Secuobs.com : 2010-05-19 07:22:30 - iagox86 - RT @hdmoore: Metasploit Framework 340 released and Metasploit Express is available http://bitly/4ttKqY blog: http://bitly/b3Upg0http://www.secuobs.com/twitter/news/94469.shtmlhttp://www.secuobs.com/twitter/news/94469.shtml Secuobs.com : 2010-05-18 03:57:43 - iagox86 - RT @thealuc: There is a nice write down about msf express at SkullSecurity Metasploit Express Beta-First Look read it here: http://ti http://www.secuobs.com/twitter/news/93948.shtmlhttp://www.secuobs.com/twitter/news/93948.shtml Secuobs.com : 2010-05-15 11:40:23 - iagox86 - Satisfying day today I used a combination of OpenOfficeorg macros, netcat, Firefox, and AJAX to loot an embedded Linux devicehttp://www.secuobs.com/twitter/news/93385.shtmlhttp://www.secuobs.com/twitter/news/93385.shtml Secuobs.com : 2010-05-15 11:40:23 - iagox86 - And also some amazing shell-fu Not having directory listings hurts, but a bruteforce shellscript w/ 'which' did the trickhttp://www.secuobs.com/twitter/news/93384.shtmlhttp://www.secuobs.com/twitter/news/93384.shtml Secuobs.com : 2010-05-14 07:26:03 - iagox86 - RT @hesitated: Wrote a patch for Metasploit http://bitly/a80k4nhttp://www.secuobs.com/twitter/news/92966.shtmlhttp://www.secuobs.com/twitter/news/92966.shtml Secuobs.com : 2010-05-14 07:26:03 - iagox86 - RT @mruef: nmap nse edition of httprecon released Announcement: http://bitly/9qXiau Download: http://bitly/9sJh1Jhttp://www.secuobs.com/twitter/news/92965.shtmlhttp://www.secuobs.com/twitter/news/92965.shtml Secuobs.com : 2010-05-12 19:52:44 - iagox86 - RT @laurentgaffie: LOL I guess SDLC pratices doesn't apply for Microsoft Windows Mail Client http://bitly/bK2LVthttp://www.secuobs.com/twitter/news/92317.shtmlhttp://www.secuobs.com/twitter/news/92317.shtml Secuobs.com : 2010-05-11 22:06:12 - iagox86 - @matt_gardenghi From a quick look at the sourcecode for rdesktop, looks like password is sent plaintext over sslhttp://www.secuobs.com/twitter/news/91873.shtmlhttp://www.secuobs.com/twitter/news/91873.shtml Secuobs.com : 2010-05-11 22:06:12 - iagox86 - First impressions of Metasploit Express Beta, by @matt_gardenghi - http://wwwskullsecurityorg/blog/p=779http://www.secuobs.com/twitter/news/91872.shtmlhttp://www.secuobs.com/twitter/news/91872.shtml Secuobs.com : 2010-05-11 22:06:12 - iagox86 - Interns asked to learn about pentesting, so I set up a scenario that requires about 4 netcat relays @edskoudis would be proud :http://www.secuobs.com/twitter/news/91871.shtmlhttp://www.secuobs.com/twitter/news/91871.shtml Secuobs.com : 2010-05-11 22:06:12 - iagox86 - @matt_gardenghi Shell to Linux box w/ ingress-only FW on same network as ms08-067 w/ egress FW Relay exploit in, relay meterpreter outhttp://www.secuobs.com/twitter/news/91870.shtmlhttp://www.secuobs.com/twitter/news/91870.shtml Secuobs.com : 2010-05-08 02:22:56 - iagox86 - @haxorthematrix I have Paros 3213 for either Unix or Windows handy, if that'd help I can send it to youhttp://www.secuobs.com/twitter/news/91003.shtmlhttp://www.secuobs.com/twitter/news/91003.shtml Secuobs.com : 2010-05-07 13:58:24 - iagox86 - RT @digininja: Installing openssh through meterpreter http://meterpreterillegalguyhostzicom/http://www.secuobs.com/twitter/news/90625.shtmlhttp://www.secuobs.com/twitter/news/90625.shtml Secuobs.com : 2010-05-05 22:52:37 - iagox86 - New blog by Matt Gardenghi - Confidential Information in the Cloud - http://wwwskullsecurityorg/blog/p=752http://www.secuobs.com/twitter/news/90336.shtmlhttp://www.secuobs.com/twitter/news/90336.shtml Secuobs.com : 2010-05-02 09:15:39 - iagox86 - RT @mruef: Here we go The nmap nse port of httprecon is ready for release http://bitly/bJq7fLhttp://www.secuobs.com/twitter/news/89281.shtmlhttp://www.secuobs.com/twitter/news/89281.shtml Secuobs.com : 2010-05-01 20:11:42 - iagox86 - RT @sawaba: @nmap needs 514 more people to take the annual survey Go take it help NMap They're also have prizes - Unicorns or someth http://www.secuobs.com/twitter/news/89179.shtmlhttp://www.secuobs.com/twitter/news/89179.shtml Secuobs.com : 2010-04-30 16:33:30 - iagox86 - @theKos Sweet, now use dnscat proto for getting data out http://skullsecurityorg/wiki/indexphp/Dnscat#Protocol - no extra http requesthttp://www.secuobs.com/twitter/news/88804.shtmlhttp://www.secuobs.com/twitter/news/88804.shtml Secuobs.com : 2010-04-29 23:47:11 - iagox86 - RT @theKos: XSS phishing tool, Python port Runs via Python webserver XML reporter soon http://kyleosbornnet/xss/xss-phishing/py/theb http://www.secuobs.com/twitter/news/88463.shtmlhttp://www.secuobs.com/twitter/news/88463.shtml Secuobs.com : 2010-04-29 23:47:11 - iagox86 - @theKos Got any documentation for your xss phishing tool yethttp://www.secuobs.com/twitter/news/88462.shtmlhttp://www.secuobs.com/twitter/news/88462.shtml Secuobs.com : 2010-04-29 23:47:11 - iagox86 - Finally got dnscat handler/stager/payload working in #metasploit Needs a lot of work, still, including new shellcodehttp://www.secuobs.com/twitter/news/88461.shtmlhttp://www.secuobs.com/twitter/news/88461.shtml Secuobs.com : 2010-04-29 07:10:44 - iagox86 - Nmap survey coming to a close If you haven't done it, do it It's short, have your say, win a prize, etc: http://nmaporg/survey/http://www.secuobs.com/twitter/news/88256.shtmlhttp://www.secuobs.com/twitter/news/88256.shtml Secuobs.com : 2010-04-28 03:22:17 - iagox86 - @digitaldarragh If Nmap shows 'open', it means that one way or another, data came back Try --reason to get more infohttp://www.secuobs.com/twitter/news/87761.shtmlhttp://www.secuobs.com/twitter/news/87761.shtml Secuobs.com : 2010-04-28 03:22:17 - iagox86 - RT @matt_gardenghi: RT @pentestit: nbtool: Attack and Perform NetBIOS, DNS Investigation http://diggcom/u1Ubwa #skullsecurity #iagox86 http://www.secuobs.com/twitter/news/87760.shtmlhttp://www.secuobs.com/twitter/news/87760.shtml Secuobs.com : 2010-04-27 11:25:48 - iagox86 - RT @pauldotcom Nice article: Stuffing JavaScript into DNS Names http://isgd/bIr3C -- thanks Paulhttp://www.secuobs.com/twitter/news/87489.shtmlhttp://www.secuobs.com/twitter/news/87489.shtml Secuobs.com : 2010-04-27 11:25:48 - iagox86 - RT @nmap: Introducing the 2010 Nmap/Google Summer of Code Team: http://seclistsorg/nmap-dev/2010/q2/285http://www.secuobs.com/twitter/news/87488.shtmlhttp://www.secuobs.com/twitter/news/87488.shtml Secuobs.com : 2010-04-23 22:09:54 - iagox86 - RT @edskoudis: RT @SANSInstitute Going to #sansfire Stay for PenTest Vuln Summit w/ @edskoudis June 14-15 12 days left 2 save $350 h http://www.secuobs.com/twitter/news/86609.shtmlhttp://www.secuobs.com/twitter/news/86609.shtml Secuobs.com : 2010-04-21 06:08:02 - iagox86 - Stuffing Javascript into domain names - though nCircle beat me to the punch - http://wwwskullsecurityorg/blog/p=433http://www.secuobs.com/twitter/news/85474.shtmlhttp://www.secuobs.com/twitter/news/85474.shtml Secuobs.com : 2010-04-21 06:08:02 - iagox86 - RT @bkulyk: Released my python/openoffice mail merge web service code as open source last yesterday http://codegooglecom/p/pymailmer http://www.secuobs.com/twitter/news/85473.shtmlhttp://www.secuobs.com/twitter/news/85473.shtml Secuobs.com : 2010-04-21 06:08:02 - iagox86 - @jedimercer Agreed I like where nCircle took it - places to stick XSS that are rarely if ever checkedhttp://www.secuobs.com/twitter/news/85472.shtmlhttp://www.secuobs.com/twitter/news/85472.shtml Secuobs.com : 2010-04-20 17:28:51 - iagox86 - RT @stefanpenner: How Not to copy your SSH private key to your servers http://newsycombinatorcom/itemid=1276760http://www.secuobs.com/twitter/news/85237.shtmlhttp://www.secuobs.com/twitter/news/85237.shtml Secuobs.com : 2010-04-20 17:28:51 - iagox86 - RT @hdmoore: Woohoo Nmap User Survey 2010: http://nmaporg/survey/ drives sectoolsorghttp://www.secuobs.com/twitter/news/85236.shtmlhttp://www.secuobs.com/twitter/news/85236.shtml Secuobs.com : 2010-04-17 05:29:44 - iagox86 - Win7 Remote SMB Kernel stack overflow exploit: http://seclistsorg/fulldisclosure/2010/Apr/201http://www.secuobs.com/twitter/news/84251.shtmlhttp://www.secuobs.com/twitter/news/84251.shtml Secuobs.com : 2010-04-17 05:29:44 - iagox86 - @Viss There's a Google Summer of Code project for Nmap to investigate porting it to mobile platforms Cross your fingershttp://www.secuobs.com/twitter/news/84250.shtmlhttp://www.secuobs.com/twitter/news/84250.shtml