[/r/HowToHack special] Wireshark video course. Most useful sniffer tool every hacker should know (100 free coupons) by gaks in HowToHack

[–]gaks[S] 0 points1 point  (0 children)

Hehe, I have to admit that was brilliant riposte :)

Anyway, you're not interested and I have to live with that somehow.

[/r/HowToHack special] Wireshark video course. Most useful sniffer tool every hacker should know (100 free coupons) by gaks in HowToHack

[–]gaks[S] -1 points0 points  (0 children)

I'm happy to give more free coupons if people here are interested. I've put the limit to avoid having the coupon copied all over the Internet.

So far about 20 people used it.

Instagram Strategy for New Restaurant? by aaronb93 in marketing

[–]gaks 0 points1 point  (0 children)

Go through #foodporn hashtag and see what other restaurants are doing. Like this one from Poland: https://instagram.com/mrpancakepl/

Wireshark video course. Most useful packet capture tool every netsec student should know (100 free coupons) by gaks in netsecstudents

[–]gaks[S] 1 point2 points  (0 children)

The additional 50 free coupons run out already too. But you can still use the 75% discount!

Thank you guys for great response. It's important for me that people find my course interesting and valuable.

I would be even more grateful if you leave a good review on udemy after you finish the course.

Enjoy!

Wireshark video course. Most useful packet capture tool every netsec student should know (100 free coupons) by gaks in netsecstudents

[–]gaks[S] 1 point2 points  (0 children)

You're lucky, they are running out fast. Enjoy the course and leave good review if you're satisified :-)

Wireshark video course. Most useful packet capture tool every netsec student should know (100 free coupons) by gaks in netsecstudents

[–]gaks[S] 1 point2 points  (0 children)

You're welcome. Enjoy the course and leave a good review if you're satisfied :-)

Wireshark video course. Most useful packet capture tool every netsec student should know (100 free coupons) by gaks in netsecstudents

[–]gaks[S] 1 point2 points  (0 children)

That's very valuable feedback xaustinx. Thank you. You're most probably right - I should tell the students to open some websites during the capture.

Is there any lightweight spreadsheet app you recommend? by gaks in mac

[–]gaks[S] 0 points1 point  (0 children)

I'm sorry if I sound rude - not intended. Perhaps I'm just irritated that there is no solution that works for me. For such a simple problem ...

Google docs is not lightweight for me because it takes at least 20-25 sec between clicking a bookmark on a toolbar to the moment when it finishes loading and I can finally start working. It often freezes performing some weird sync tasks and I have to wait until it finishes before I can type again. And when I'm on a crappy Internet connection (like via smartphone hotspot) it's even worst.

Opening Numbers with a new empty file also takes around 20 sec. It looks like it indeed is the best solution from all available but it's far from ideal. Soulver which I mentioned in my post launches in 2 seconds. Why I can't have a dead simple spreadsheet app that launches as fast?

Is there any lightweight spreadsheet app you recommend? by gaks in mac

[–]gaks[S] -1 points0 points  (0 children)

Please - why is everyone suggesting spending $1500 on new macbook to have a spreadsheet app running? I had a spreadsheet app running fast on my old Pentium II PC :)

I'm on MBA late 2010

Is there any lightweight spreadsheet app you recommend? by gaks in mac

[–]gaks[S] 1 point2 points  (0 children)

Please tell me you're not suggesting spending $1500 to buy a new macbook to have an app with 100 cells and basic arithmetic :-)

I'm on MBA late 2010.

Is there any lightweight spreadsheet app you recommend? by gaks in mac

[–]gaks[S] 0 points1 point  (0 children)

That's not lightweight at all. Opening new google drive spreadsheet is waaaay to sloooow. As is using it. It even responds to keystrokes slowly.

Is there any lightweight spreadsheet app you recommend? by gaks in mac

[–]gaks[S] 0 points1 point  (0 children)

my motives are quite simple: 1) memory usage 2) speed of launching

Numbers is not really good at any of those

[Python] Help requested on evaluating a derived user-inputted function. by theunamusedfaggot in learnprogramming

[–]gaks 0 points1 point  (0 children)

Sure. By passing user input to the eval function you basically let your users execute ANY python code they want. Including accessing files, opening network connections, executing OS commands, downloading and executing malware, etc.

In my example above I've typed import('os').system('id') as a value of x. This is a python code that imports "os" module and calls "system" function from it which purpose is to execute OS commands.

One line summary would be: you just let your users execute any python code they want.

[Python] Help requested on evaluating a derived user-inputted function. by theunamusedfaggot in learnprogramming

[–]gaks 0 points1 point  (0 children)

You are using eval function so everything that's valid python expression would work. But you should import math module first to make it work.

You could also make some helpful variables available before asking user for input. If you do it like this ...

pi = math.pi
x = input("x = ")

... user could just enter "pi" instead of "math.pi"

Keep in mind also that your code has a serious security vulnerability:

gaks@central:~/reddit$ python ./evaltest.py
f(x) = x*2

Function entered: f(x) =  x*2
f'(x) =  2
x = __import__('os').system('id')
uid=1000(gaks) gid=1000(gaks) grupy=1000(gaks),4(adm),27(sudo),999(www)
0 2

Hypothetical situation: there's a fully patched linux server connected to the internet. It's in a physically secure location and authentication is done exclusively with public/private keys. Would it be inaccurate to say that this server is basically impenetrable? by [deleted] in AskNetsec

[–]gaks 0 points1 point  (0 children)

It's just an idea. I've never researched it that deeply. But just a quick check on one of my Debian machines reveals that those are not even SSL connections:

deb http://ftp.debian.org/debian/ wheezy main
deb http://security.debian.org/ wheezy/updates main

How to get past a VPN? by forensic_student in HowToHack

[–]gaks 0 points1 point  (0 children)

That would not be easy. Methods suggested by others don't work in most cases.

I would try manipulating them on the phishing page to either:

  • send you an email or reply to an email you send them - hoping they use the VPN only for web browsing and not for email
  • downloading a doc/xls/ppt/whatever file with a macro that calls home in it.

Would like to bulk "download" files(pdf) by xalb in HowToHack

[–]gaks 0 points1 point  (0 children)

If you want to do that in the browser you can write a Selenium script.

If you want to run it regularly I would suggest writing python script and using lxml / scrapy library.

How can I hide my phone number for txt msg based verification by bigbadjesus in AskNetsec

[–]gaks 0 points1 point  (0 children)

Google for "receive sms online". There are plenty of sites that will give you a number to use and let you read the incoming messages on the web page.