Blog Archives

Nmap NSE Howto: MySQL Auth Bypass

Posted on June 12, 2012 by marc — 2 Comments ↓

A recently disclosed critical vulnerability in MySQL authentication on some platforms gave me just the excuse I needed to write my first Nmap NSE script. @jcran produced a metasploit module to find and exploit the MySQL bug so I thought I’d…

ssh-agent: Abusing the trust – Part 2

Posted on May 17, 2012 by marc — No Comments ↓

In part 1 of this blog post I discussed common issues with using ssh-agent forwarding in an untrusted environment. Despite the risks it remains prevalent in my experience and ripe for some exploitation. There are tools out there to help…

Tool – bingip – CLI Virtual Host checker

Posted on January 5, 2012 by marc — No Comments ↓

Google rocks right? Well, there’s still one feature it lacks compared to Bing – the ability to search by IP address. On bing.com you can use ip:<IP address> and it will return pages indexed from that IP address which, as…