StevenWhiting.com

Just a place for dumping info I've learnt in IT and other stuff. My online note storage.

Browsing Posts in IT Security

https://www.theregister.co.uk/2017/05/03/hackers_fire_up_ss7_flaw/ If you get your 2-step verification via text message it is possible, as this flaws shows, that others can redirect your calls and text messages to their phone instead. Meaning they’ll get your 2-step verification code.

Google Drive for Desktop Flaws Putting this out there anyway, whether anyone will see this post is another thing. This is a tiny site 🙂 The number one flaw of Google Drive for Desktops when using G Suite (so in a business environment) is the lack of auditing. It states this on their support page. […]

One of the most useful vids on this I’ve found.

Great guide on breaking out of applications.  More reason to lock that remote remote machine down.  Easier said than done as sometimes locking down stuff stops other things working.   http://www.pentestpartners.com/blog/breaking-out-of-citrix-and-other-restricted-desktop-environments/#modifyingicafiles

Running Word 2010 and run the macro For the macro type Shell “cmd /k cmd.exe” Run the macro. You now have a cmd box where you could potentially go elsewhere.

Obviously person has to have logged on successfully at least once. In XP search in reg for cachedlogonscount Normally at HKLM\Software\microsoft\Windows NT\currentversion\winlogon Normally shows the user.  Change cachedlogonscount to anything above 0 Maybe other references in that section that prevent it but need to compare with a working machine to find the entry blocking the […]

Quality, quality site. http://www.securitytube.net Even better is these FREE download videos http://www.securitytube.net/downloads And a new certificate course. Considering the amount of info it’s cheap. And life time access to any updates for the life of Security Tube http://www.securitytube.net/video/2256 And Vivek Ramachandran has a new book out http://www.amazon.co.uk/BackTrack-Wireless-Penetration-Testing-Beginner%2527s/dp/1849515581/ref=sr_1_1?ie=UTF8&qid=1317159343&sr=8-1

(At some point I’ll update the images so they appear again – 19 4 2016) Oddly some proxies block the small thumb nail images (Attempting to remove some words as think they are causing the work proxy to block the images) Anyone innocent in the images can blame the fuck that attempted to rip me […]

So seems free WordPress Themes may not be safe. http://www.blogher.com/frame.php?url=http://wpmu.org/why-you-should-never-search-for-free-wordpress-themes-in-google-or-anywhere-else/ http://wpmu.org/when-is-a-free-wordpress-theme-really-free-some-thoughts-and-some-places-to-find-them/

http://www.irongeek.com/i.php?page=security/networkprinterhacking

Bad Behavior has blocked 77 access attempts in the last 7 days.