Archive for June, 2007

Legalized loan sharking

I saw this on Slashdot last week, an article regarding “Getting the best deals from Dell.” One bullet point really stuck out, about financing offers:
9. DPA/Dell Preferred - This is the Dell credit card, like a Sears, Macy’s or Radio Shack credit card. Typically a high rate, low limit card. The […]

Notes for using Burp suite on Ubuntu

I went ahead and tried to run Burp suite on my laptop running Ubuntu today. First, check the readme.txt, which says I need JRE 1.4 or later installed.
marcin@thinker:~/burpsuite_v1.01$ java –fullversion
java full version “gcj-1.4.2″
Okay… 1.4.2, but it’s Java built into gcc. When I first tried to run it, I got this error:
marcin@thinker:~/burpsuite_v1.01$ java -jar burpsuite_v1.01.jar
Exception in […]

Compromising one app through another

I was directed through RSnake’s blog to a XSS defect in Yahoo! Services and had a couple questions concerning secure design of web applications…
So here’s the scenario,
A user is authenticated by a device between himself and the application he’s accessing. From there, they are able to gain control over the application they are using and […]

Ubuntu and the Vi Editor

Over the course of a day, I could log in to five different systems I’m currently working on. On each I’ll get a Bash or Tcsh shell and it’s almost guaranteed I’ll need to edit a text file at some point during the day. On my home system, my choice of editor is Vim, because […]

Bust through HTTP Proxies

I came across a neat little command that will allow you to SSH through an http-proxy. Useful for when you’re at a library or elsewhere and need to make an outbound SSH connection and the only thing stopping you is a proxy.
Features of connect.c are:

Supports SOCKS (version 4/4a/5) and https CONNECT method.
Supports NO-AUTH and USERPASS […]