Posts

Showing posts with the label infosec

Subdomain script

Image
 Here I am writing a script using a few different tools. Now this is a basic script and nowhere near an extensive script. This is the first go at it I had. Here is the correct way to write it for assetfinder. See we are making a final.txt file. Here we are harvesting with amass as well and adding it to final.txt For the sake of speed and space since this was training, I ran the script to have that experience and then I commented out the amass part of the script. Then we are going to probe for alive domain and put it into a new file of alive.txt Again this is just basic script but it was fun to play around with these new tools.  Feel free to reach out on  LinkedIn  or  Twitter

Do things a little bit different if you find a way that works for you

 Ok so today's is one of those things where I am not proud it took so long but I am proud that I finally came up with a solution.  On pentesterlab I have been trying for a couple hours to use burp repeater to do a file upload injection but for some reason it wouldn't work. So, I decided to switch to using OWASP Zap to try on that tool and it didn't work.  I started getting frustrated and decided I would step back and try and think about a different way to do things. Then I realized all I was trying to do was rename a file from test.php to test.php3 and upload it and repeater was just stopping me from having to rewrite the file on my desktop. SO, I figured I had already written the php code, so I went in copied what was in the file and created a new file with the test.php3 name and uploaded it the regular way. Now I know this is not the way pentesterlab has it set up BUT.... I would argue this. I spent probably 3 hours trying to do it their way. And time and again in the l...

How I keep learning while stepping away from a lesson for a second

 So, I have stated that when I am stuck, I take a step back for a few minutes, but I wanted to explain that I don't just go and do nothing.  True there are times when I go play with my son or cook my family lunch, or whatever. But for me my learning right now is to a point that I feel like I need it for my sanity. But on the same hand when I get stuck on something that, maybe I think I shouldn't it drives me nuts, LOL. I have high expectations of myself, so I can get hard on myself when I don't immediately get something. But back to the topic. Let's take this morning for example, I was working through what should have been an easy task on  PentesterLab , but one of my computers is down so I am working on the one I never installed VIM on, which this exercise called for. I thought no problem how hard can it be to install VIM on Windows. And I was correct it wasn't that hard. I started going through the task and it wasn't working, and I couldn't tell why. So, I...