I’ve compiled a list of handy MySQL commands that I use very frequently in a headless server. I am not a MySQL guru, so I decided to braindump everything in here. This covers random issues from WordPress slowness, Query Cache Modification, User Creation, Database dumping and importing, rsync’ing large files …
Read More »Anti-hacking tool got hacked, KeeFarce can break your KeePass password safe
If you are a KeePass user like me, then beware. denandz just posted a tool in github that can break your KeePass password safe. Yeah, as they say, for the lulz, Anti-hacking tools (or teams like Hacking Team) are now getting hacked. Rightly so, this tool is named KeeFarce. It …
Read More »How to search exploits in metasploit?
Metasploit was created by H. D. Moore in 2003 as a portable network tool using Perl. By 2007, the Metasploit Framework had been completely rewritten in Ruby. On October 21, 2009, the Metasploit Project announced that it had been acquired by Rapid7, a security company that provides unified vulnerability management …
Read More »Denial of Service Attack Proof of Concept PHP Exploit for <=4.0 WordPress DoS Attack - CVE-2014-9034
Proof of Concept PHP exploit for WordPress DoS Attack CVE-2014-9034 worked like a charm on my own WordPress website. Surprisingly, CVE-2014-9034 was published for sometime and it seems WordPress still hasn’t fixed this issue. I will explain how to use this Proof of Concept tool and test your own WordPress …
Read More »WPSCAN and quick wordpress security – Fixing Direcroty Listing – Part 2
This is a part 2 of the guide WPSCAN and quick wordpress security. It guides reader on how to fix Directory listing in WordPress. Read part 1 here WPSCAN and quick wordpress security – Part 1 Run WPSCAN WPSCAN shows I have Directory listing enabled. root@kali:~# wpscan --url www.blackmoreops.com _______________________________________________________________ …
Read More »