@cktricky ‘s DirSnatch

This is one of those tools that doesn’t quite cross your mind until you see it’s power. DirSnatch is a one stop executable that you can give a customer of a web app sec test, they run it, and you get back a perfectly formatted text file for your testing needs of all their directories and files.

http://cktricky.blogspot.com/2009/08/source-code-of-dirsnatch.html

Carnal0wnage Amazon Booklist

Want to know what you books you should get? Here is THE list:

http://astore.amazon.com/carnal0wnage-20

Compiled List of IT/Security Cheat Sheets

This an awesome list:

http://blog.securitymonks.com/2009/08/15/whats-in-your-folder-security-cheat-sheets/

Microsoft Word Auto-Close Prank

This little stunt remaps the 'e' key to close Word without saving:
http://www.iambetterthanu.com/2007/11/22/microsoft-word-prank/

I wonder what other evil remapping can be done ;-)

Convert VirtualBox VMs to VMware VMs

So I found this and thought it an awesome one liner:
Source: http://ubuntuforums.org/showthread.php?t=772419

How to convert VBox machine to VMware

---

I figured it out!! YAY!!

"sudo qemu-img convert /home/emil/.VirtualBox/VDI/WindowsXP.vdi /home/emil/Desktop/XP.vmdk"

I'm not sure if need to be executed with "sudo" but that worked for me. Now I can switch to Vmware Virtual Machine from Virtual Box.

Stream your screen via VLC

I’ve seen this before, and I think I’ve done this before, but it’s still awesome and I’m thinking about it’s use for doing training. Nothing says you can do it over the net. Haven’t tried.. yet:

http://www.nerdlogger.com/2008/01/stream-your-linuxwindowsmac-desktop-as.html

SAPyto – SAP Pen-Testing Framework

If you know what SAP is.. ya.. check it out:

http://www.cybsec.com/EN/research/sapyto.php

Decoding eval(gzinflate(base64_decode(

Trying to fix it so that my site didn’t say it was sponsored by “Car Dealers” I ran across an eval(gzinflate(base64_decode( encoded message. Google came up with this 2006 post:

http://danilo.ariadoss.com/decoding-eval-gzinflate-base64-decode/

But that didn’t work for me for some reason, but the online one I found later worked like a charm:

http://www.tareeinternet.com/scripts/decrypt.php

RFID Security - Free ID Cards Anyone?

This is definitely not my normal link. But it's something that I am going to print off and shove in a couple peoples faces to read. Don't discount it because of it's title as I almost did. Please read it. (Hence my titles vagueness, I didn't want the same thing to happen)

http://www.wired.com/threatlevel/2009/08/fed-rfid/

Blackhat US 2009 (Vegas) Archives

Some videos are already posted!
http://blackhat.com/html/bh-usa-09/bh-usa-09-archives.html

UDP Tunneling over SSH

http://zarb.org/~gc/html/udp-in-ssh-tunneling.html

Credit:
Singe tweeted: How to tunnel UDP through SSH, http://is.gd/20fja The socat example worked like a charm for me. A quick hack for when OpenVPN is overkill.

Rules to reading faster

Always interested in learning how to cram more into the day:
http://www.fourhourworkweek.com/blog/2009/07/30/speed-reading-and-accelerated-learning/

IPv6 at home

A great post on how to get it running at home:
http://yorickdowne.wordpress.com/2008/01/26/ipv6-at-home-part-1-overview-teredo/

List of Freely Available Programming Books

Both the StackOverflow site and this links are both pages to bookmark.

These books are great references:
http://stackoverflow.com/questions/194812/list-of-freely-available-programming-books