Welcome back, my aspiring OSINT cyber warriors! John Matherly began Shodan in 2009 to collect banner information from nearly early IP address on the planet, put that data into a huge database,and index that data for our use. Shodan has been so successful that it has inspired others to imitate and improve upon it. Censys.com […]
Continue Reading
Welcome back my aspiring cyber warriors! In my earlier tutorial, I showed you some of the basics of using Shodan, “the world’s most dangerous search engine”. In this tutorial, we will expand and extend your knowledge of the capabilities of Shodan to find outdated and vulnerable online systems. Often times, aspiring cyber warriors assume that […]
Continue Reading
Welcome back, my aspiring cyber warriors! Sometimes the best information is just there for our asking! Given a little knowledge and some simple tools and techniques, we can harvest information about individuals and organizations that they are not aware they are providing us! Organizations often post documents on their website usually in a Word .doc […]
Continue Reading
Welcome back, my aspiring cyber warriors! Web sites are built using a variety of technologies (see Web Technologies here). In most cases, before we develop a hacking strategy of the web site, we need to understand the technologies employed in building the website. Web site attacks are not generic. Attacks against WordPress-based web sites won’t […]
Continue Reading
The Internet is the largest treasure trove of data in the history of humankind! This repository of data is so large that companies and scientists are straining to understand and manage its scale. We can mine that data with many different tools and sources. When that data is combined with data from multiple sources, a […]
Continue Reading
Reconnaissance is crucial for successful hacking/pentesting. Maltego is a unique tool for finding data via open source information across the world wide web and displaying the relationships between this information in a graphical format. From Paterva’s, Maltego’s developer, own web page, they describe Maltego as; “Maltego is an interactive data mining tool that renders directed […]
Continue Reading
Welcome back, my aspiring hackers! As I often say, reconnaissance is a crucial part of hacking. You must carefully and thoroughly gather information on the target before attacking, otherwise you are usually wasting your time and risking detection. There are many tools for this purpose many of which I have demonstrated here such as nmap, […]
Continue Reading
As you know, the Simple Network Management Protocol uses UDP ports 161 and 162 to manage network devices. Network devices use this protocol to communicate to each other and can be used by administrators to manage the devices. As hackers, if we can access the SNMP protocol, we can harvest a vast resource of information […]
Continue Reading
Welcome back, my novice hackers! In my series on cracking passwords, I began by showing off some basic password-cracking principles; developed an efficient password-cracking strategy; demonstrated how to use Hashcat, one of the most powerful password-cracking programs; and showed how to create a custom wordlist using Crunch. In this tutorial, I will show you how […]
Continue Reading
Welcome back, my aspiring cyber warriors! Nearly all of us have used a search engine such as Google or Bing to find material on the web. These search engines crawl the entire web and index nearly every word contained on those pages and rank them. This enables us find the information we are looking for […]
Continue Reading