How to get rid over URL shortener

To protect yourself from this factor all you need is only just a terminal and web browser (any web browser would do but I prefer Mozilla Firefox)

Launch your terminal:

Using curl command to and some arguments. In this case we use --user-agent -k -v e.g: curl --user-agent "AlienWare/X.10 [en] (X11; U; Linux 9.0.01 i6128)" -k -v <URLshortener address>

For example we want to know that where does this URL redirect to "http://amzn.to/1zyUSnd"

So, just head to terminal and use curl command with correct argument. You may check the URL redirect at the "Location" in the HTTP header.

With these you can protect yourself and avoid from SPAM, XSS or whatever social engineering attacks that someone might want to extract the information from you.

Comments

Create a session & restore abort/interrupted session in John The Ripper!

Been busy with report writing. Just wanna put some of these command and technique on how to restore interrupted session or aborted session in John The Ripper. 1. First step crack the hash with these commands : john --session=test --format=raw-sha --incremental=rockyou test.txt 2. To restore the abort /interrupted session that you wanted to resume just run these commands : john --restore=test Check the "test.log" Note: Make sure that these file are not delete " .rec " and " .log " files if the file is deleted or missing it wont work. That's all happy cracking!

iOS - Convert .app to .ipa

While doing a iOS Security Testing, I wondered how do we convert .app into .ipa. So basically here are the structure of .ipa files. 1. First, SSH in your iPhone (Jailbroken). 2. Download the .app folder via scp 3. Copy the .app folder into a folder called Payload. 4. Compress it with .zip extension using any compression software. 5. Change the extension from file.zip to file.ipa. That’s it. Now you can use these .ipa files to install the app into your iPhone.

SQLiiiii

This is an re-post from an old archive ... From MySQL documentation : "The SELECT ... INTO OUTFILE 'file_name' form of SELECT writes the selected rows to a file. The file is created on the server host, so you must have the FILE privilege to use this syntax. file_name cannot be an existing file, which among other things prevents files such as /etc/passwd and database tables from being destroyed. As of MySQL 5.0.19, the character_set_filesystem system variable controls the interpretation of the filename." The INTO OUTFILE operator can be used during sql injection exploiting to write php shell on remote host. Unfortunately (fortunately?) this is only possible in some (very) race conditions : mysql user must have the FILE privilege; the operator requires a "quoted" file pathname, so the web application should not escape/filter them; httpd and mysql should be installed on the same machine, or (if you can) the file will be written on the dbms machi...

Rip 'em Out!

Search This Blog