Can I Haz Security | my personal blog regarding information security – Twitter (@0xB455)

IP-tables configuration for sending traffic into local proxy

Posted on 2012-09-19 by 0xB455

Quite often I find myself in the need in order to analyse traffic for applications on an jailbroken Android device which ignore the global system proxy settings.

In such cases I usually leverage iptables in order to send the traffic into a forwarding proxy by using:

iptables -A OUTPUT -t nat -p tcp --dport 80 -j DNAT --to-dest 127.0.0.1:1000

1	iptables -A OUTPUT -t nat -p tcp --dport 80 -j DNAT --to-dest 127.0.0.1:1000

You have got to make sure that you configure the proper NAT routing though:

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables --table nat --append POSTROUTING --out-interface (EXT) -j MASQUERADE

iptables --append FORWARD --in-interface (INT) -j ACCEPT

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables --table nat --append POSTROUTING --out-interface (EXT) -j MASQUERADE

iptables --append FORWARD --in-interface (INT) -j ACCEPT

Posted in Backtrack / Kali-Linux, General Stuff | Comments Off

Tunneling ports via SSH

Posted on 2012-09-19 by 0xB455

People often forget that they can use SSH in order to access remote services which are only reachable from the network of the SSH server. Here is the snippet you want to use:

ssh -L [bind_address:]port:host:port user@server

1	ssh -L [bind_address:]port:host:port user@server

So as a general example:
You want to use the the local port 1000 and access a remote service on port 8080 running on another machine in the local network of the remote SSH host:

your localhost: 127.0.0.1
local IP of target host in remote network: 192.168.1.2
SSH-Server address: 88.88.50.50

ssh -L 127.0.0.1:1000:192.168.1.2:8080 root@88.88.50.50

1	ssh -L 127.0.0.1:1000:192.168.1.2:8080 root@88.88.50.50

Posted in Backtrack / Kali-Linux, General Stuff | Comments Off

Parsing a line based hosts file to Firefox under Windows

Posted on 2012-08-13 by 0xB455

I just needed to parse a line based file containing hosts and access the hosts with Firefox under Windows in multiple tabs. Here is what I did:

for /f %%a in (file.txt) do (
start "%Program Files%\Mozilla Firefox\firefox.exe" %%a > nul
)

for /f %%a in (file.txt) do (

start "%Program Files%\Mozilla Firefox\firefox.exe" %%a > nul

)

If you want to slow things down and the sleep command is no option, you can use this workaround to slow things down:

ping 127.0.0.1 -n 1 -w 1000 > nul

1	ping 127.0.0.1 -n 1 -w 1000 > nul

Posted in Windows | Comments Off

Arpspoofing within Linux

Posted on 2012-08-10 by 0xB455

For ARP based spoofing simply go for arpspoof

Syntax is quite simple and goes like this:

arpspoof -i [interface] -t [victim] [gatewayip-to-be-spoofed]

1	arpspoof -i [interface] -t [victim] [gatewayip-to-be-spoofed]

Posted in Backtrack / Kali-Linux | Comments Off

Enhanced security controlls for Internet Explorer on windows servers

Posted on 2012-08-08 by 0xB455

Due to enforced security controlls you will often find yourself unable to access any website while running the Internet Explorer on a windows server.

This is related towards the Enhanced Security Configuration (ESC).

You can manually disable it by jumping into the Programs and Functionality settings (or just hit up the server manager).

There you can disable the enhanced security controlls for the IE by going to:

Security Information -> "Configure IE ESC"

1	Security Information -> "Configure IE ESC"

Posted in Windows | Comments Off

Dumping of installed programs and services within Windows

Posted on 2012-08-02 by 0xB455

I use the following snippets to dump installed programs on Windows machines via WMIC (Windows Management Instrumentation Commandline):

C:\Users\MyUser> wmic
wmic:root\cli>/output:C:\tmp\InstallList.txt product get name,version
wmic:root\cli>/output:C:\tmp\ServiceList.txt service

C:\Users\MyUser> wmic

wmic:root\cli>/output:C:\tmp\InstallList.txt product get name,version

wmic:root\cli>/output:C:\tmp\ServiceList.txt service

The output can be processed as CSV

Posted in Windows | Comments Off

Broken packages with Backtrack 5

Posted on 2012-08-01 by 0xB455

People still running on Backtrack 5 R2 are not able to pull updates anymore.

In oder to fix this make sure to modify your /etc/apt/sources.list by adding this entry:

deb http://updates.repository.backtrack-linux.org revolution main microverse non-free testing

1	deb http://updates.repository.backtrack-linux.org revolution main microverse non-free testing

Posted in Backtrack / Kali-Linux | Comments Off

Recent Posts