<?xml version="1.0" encoding="UTF-8"?><rss version="0.92">
<channel>
	<title>0x0e.org &#124; a pentester&#039;s view</title>
	<link>http://blog.0x0e.org</link>
	<description>penetration testing - tools, techniques, and thoughts.</description>
	<lastBuildDate>Mon, 19 Jul 2010 16:22:38 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	<!-- generator="WordPress.com" -->

	<item>
		<title>searching ruby source code</title>
		<description><![CDATA[contributing to open source? need to search &#38; understand ruby code faster? This bash function should save you some time. I use it atleast 50-60 times a day. Stick this in your .bashrc: function rgrep() { find -L . -type f -name \*.rb -exec grep -n -i -H --color &#34;$1&#34; {} \; } Use like: [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.0x0e.org&amp;blog=4149787&amp;post=358&amp;subd=hexesec&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<link>http://blog.0x0e.org/2010/07/19/in-search-of-the-ruby-cub/</link>
			</item>
	<item>
		<title>ruby hash per-value defaults</title>
		<description><![CDATA[Here&#8217;s a quick tip for assigning default values with a ruby hash. It&#8217;s well publicized that you can set an overall default (i think this is called &#8220;default assignment&#8221;) for the hash with the .default method like this (stolen directly from the rubydocs): h = Hash.new #=&#62; {} h.default #=&#62; nil h.default(2) #=&#62; nil h [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.0x0e.org&amp;blog=4149787&amp;post=354&amp;subd=hexesec&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<link>http://blog.0x0e.org/2010/07/19/ruby-hash-per-value-defaults/</link>
			</item>
	<item>
		<title>10 min project hosting &amp; sharing</title>
		<description><![CDATA[Need a simple way to backup (and share) local files &#38; scripts? Yeah yeah, another svn/websvn howto &#8211; but my brain sucks, and i forget this stuff if i don&#8217;t write it down&#8230; The only prereqs to this quick howto are that you have an ubuntu box and you know a thing or two about [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.0x0e.org&amp;blog=4149787&amp;post=338&amp;subd=hexesec&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<link>http://blog.0x0e.org/2010/07/13/project-hosting-and-sharing-subversion-websvn-setup/</link>
			</item>
	<item>
		<title>scrape scrape scrape</title>
		<description><![CDATA[totally half-finished thought. maybe it&#8217;ll spawn an idea for you&#8230; there&#8217;s a zillion+1 ways to scrape information from the web these days. here&#8217;s the easiest i&#8217;ve found: require 'nokogiri' require 'open-uri' require 'tidy_ffi' class CrappyScraper attr_accessor :doc def search(keyword) @doc = Nokogiri::HTML(open(&#34;http://www.google.com/search?q=&#34; + keyword)) @doc.xpath('//h3/a').each do &#124;node&#124; puts node.text end end def scrape(url) @doc = [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.0x0e.org&amp;blog=4149787&amp;post=331&amp;subd=hexesec&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<link>http://blog.0x0e.org/2010/07/12/scrape-scrape-scrape/</link>
			</item>
	<item>
		<title>Apt-proxy installation notes</title>
		<description><![CDATA[No big secret that i&#8217;m a huge fan of ubuntu as a pentesting platform, and run it as my main OS. Recently I&#8217;ve had enough systems to justify tossing in an apt-proxy installation. Nothing groundbreaking, but may save a few mins for you. Here&#8217;re my notes. SERVER CONFIGURATION: Choose an (ubuntu) machine to install apt-proxy [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.0x0e.org&amp;blog=4149787&amp;post=325&amp;subd=hexesec&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<link>http://blog.0x0e.org/2010/07/05/apt-proxy-installation-notes/</link>
			</item>
	<item>
		<title>Scripting Post-Exploitation</title>
		<description><![CDATA[A common question that comes up with post-exploitation is the need to run multiple things when a meterpreter session is initiated. You can easily run a single command using the &#8216;AutoRunScript&#8217; option. For example: msf (psexec) &#62; set AutoRunScript killav However, if you need multiple things to run, there&#8217;re a couple multi-runner scripts that you [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.0x0e.org&amp;blog=4149787&amp;post=320&amp;subd=hexesec&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<link>http://blog.0x0e.org/2010/07/02/scripting-post-exploitation/</link>
			</item>
	<item>
		<title>Thoughts on Recommendations (Prevention vs Detection &amp; Reaction)</title>
		<description><![CDATA[I started thinking about some of the findings we make and the recommendations around them &#8211; and how unrealistic we&#8217;re being as penetration testers. Take &#8216;Information Leakage&#8217; for instance. How plausible is it to prevent ALL information leakage? Is that something that we should be asking clients to strive for? What about the best use [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.0x0e.org&amp;blog=4149787&amp;post=316&amp;subd=hexesec&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<link>http://blog.0x0e.org/2010/01/11/thoughts-on-recommendations/</link>
			</item>
	<item>
		<title>Testing your susceptibility to phishing attacks &#8211; Are your technical controls helping?</title>
		<description><![CDATA[Phishing is one of those things people either love or hate (A lot of it depends on which side of the water you&#8217;re on). That said, the subject of phishing tends to make most admins nervous, as they /know/ their users are going to be susceptible. In my experience, that&#8217;s true. However, there&#8217;s an awful [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.0x0e.org&amp;blog=4149787&amp;post=313&amp;subd=hexesec&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<link>http://blog.0x0e.org/2009/12/16/testing-your-susceptibility-to-phishing-attacks-are-your-technical-controls-helping/</link>
			</item>
	<item>
		<title>what should be considered a vulnerability?</title>
		<description><![CDATA[&#8230;And now, a rant. What should be considered (and reported) as a vulnerability when auditing a network? Is weak network architecture? What if i can hit a critical server from an unprotected workstation? Isn&#8217;t that a vulnerability? Can we detect it? What are today&#8217;s vulnerability scanners doing to detect bad management practices? Users w/ local [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.0x0e.org&amp;blog=4149787&amp;post=309&amp;subd=hexesec&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<link>http://blog.0x0e.org/2009/12/15/what-should-be-considered-a-vulnerability/</link>
			</item>
	<item>
		<title>pentesting with an ubuntu box</title>
		<description><![CDATA[here&#8217;s  a recent drop of a script i use to configure my ubuntu box for pentesting. yes, i could use backtrack (and i do &#8212; especially if i&#8217;m having wireless issues), but this is a quick way to get an ubuntu box up &#38; running. cheers -jcran &#60;/pre&#62; #!/bin/bash # System Configuration &#38; Utilities apt-get [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=blog.0x0e.org&amp;blog=4149787&amp;post=306&amp;subd=hexesec&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
		<link>http://blog.0x0e.org/2009/11/20/pentesting-with-an-ubuntu-box/</link>
			</item>
</channel>
</rss>
