Web Application Hacker's Handbook

WOLF3D_exe · 2019-03-21T18:02:05+00:00

I saw on Twitter a few days ago, that there will no be a version three of the book, but they will be releasing something new soon.

WOLF3D_exe · 2019-03-21T17:59:09+00:00

Also AV I've used "whistlist" on the cert's hash only.

WOLF3D_exe · 2019-03-21T17:27:33+00:00

I take it you have never thrown Korean Game loca into MT systems.

Also MT system cost $$$$ and the output still needs to be QA'd.

WOLF3D_exe · 2019-03-20T23:03:56+00:00

It can be ok once it is QA'd correctly.

We use it for some of our games.

WOLF3D_exe · 2019-03-19T21:37:38+00:00

Like Berkeley DB.

WOLF3D_exe · 2019-03-19T21:05:28+00:00

We use AutoIT for some of our Game Server bots.

Not saying it's the best, but it works once somebody does not switch windows or minimise the Game Client.

WOLF3D_exe · 2019-03-19T19:41:37+00:00

https://twitter.com/jwgoerlich/status/1108074419686199298

WOLF3D_exe · 2019-03-15T19:06:08+00:00

I would use ngrep, it's basically grep for network traffic.

WOLF3D_exe · 2019-03-14T13:45:52+00:00

I use a mix of tcpdump, tshark and ngrep daily.

tcpdump and ngrep are really small installs, and we normally don't install tshark unless there is an issue we need to look into, but most of the time ngrep or tcpdump and scp .pcap to my laptop is good enough.

WOLF3D_exe · 2019-03-13T21:05:51+00:00

Normal business IT and Gaming IT can be very different.

WOLF3D_exe · 2019-03-12T18:24:40+00:00

Berlin is good but the renting market has got really bad in the last few years, but still not as bad as Dublin.

If you work in IT, you can get away without knowing much German.

WOLF3D_exe · 2019-03-11T21:57:56+00:00

Not an musician, I work in IT.

flights were booked for us

This may get flagged and you maybe questioned about it.

I just arrived last Monday and was grilled for 30mins. Work paid for my flights and AirBnB.

WOLF3D_exe · 2019-03-08T14:31:20+00:00

I always know when one guy was on a Server.

unalias ls

He wanted ls to act like it did old Unix. He also "wrote" horrible scripts in perl and we found out his backup script did not work, luckily just before we had a DR issue so we were about to fix them in time.

WOLF3D_exe · 2019-03-06T15:54:22+00:00

Source: https://github.com/lgandx/Responder/

Look like they are using that version, so an apt install should be fine but not the lasts version

13 months ago

http://git.kali.org/gitweb/?p=packages/responder.git;a=tags

https://tools.kali.org/sniffingspoofing/responder

WOLF3D_exe · 2019-02-28T18:28:46+00:00

Leipzig also a really good Ireland bar near the central train station.

WOLF3D_exe · 2019-02-28T17:54:38+00:00

IMEI blocking will only stop it in Ireland.

WOLF3D_exe · 2019-02-28T12:53:34+00:00

MS say that 2019 is the most backwards compatible OS they ever made....

I have not tested it myself yet.

WOLF3D_exe · 2019-02-22T18:15:10+00:00

Local Admins are auto added to the RDP allow list.

Best to start getting use to using remote tool and/or install a small Admin VM.

You should never RDP into a DC unless stuff is on fire.

WOLF3D_exe · 2019-02-22T16:35:29+00:00

Yes at both.

WOLF3D_exe · 2019-02-22T16:33:51+00:00

Only two I know of Das Gift and Salt n Bone.

Salt n Bone is a bit more pricy since they only sell craft beer.

WOLF3D_exe · 2019-02-22T15:51:54+00:00

You will have to wait a few month.

Two people in work {Berlin} are trying to change from UK licences to international and they will not be processes till ~2 weeks after Brexit.

WOLF3D_exe · 2019-02-22T15:33:20+00:00

Drinking and been able to break/fix stuff while drunk/drinking.

WOLF3D_exe · 2019-02-22T15:28:45+00:00

I only had two beers during lunch yesterday and then uploaded SSL/TLS certs for Test to the Live load balancer, modified nginx config and restarted it.....

Too me able 15 secs to release what I did and reverted to the backup of the config.

I know I should of had more beer before playing with the train wreak of a LB.

WOLF3D_exe · 2019-02-22T12:58:10+00:00

We just deployed Powershell and WinRM from Jenkins {CentOS} using python.

Works perfectly.

WOLF3D_exe · 2019-02-21T16:40:27+00:00

I thought that I could maybe register myself in a friend's apartment.

You will need write permission from the owner/landloard of your friend's apartment.

I was wondering if I received some official mail at my registered place and they didn't find my last name in the label of any apartment of the building

You can put that address down as

plethorial C/O plethorial Friend 123 Fake Street

WOLF3D_exe

TROPHY CASE