Chisel Port Forward

by Vince
in Blog
Hits: 12069

From the description:  "Chisel is a fast TCP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server."

What I like about this tool is that it's a single binary that supports both client and server while also being multi-platform.  What I don't like is that it seems to be very particular about the syntax ordering.  That being said, this is a tool in my toolbox for that very special need.  For example, we know there's a web server at the following address but when we perform an Nmap scan, we don't see it:

Read more

Encrypted Mac USB

by Vince
in Blog
Hits: 1139

A client mentioned to me that she was keeping confidential information on a thumb drive that she's been carrying around between her home and office.  When I asked about the type of the confidential data, I followed that question by asking -- if the drive were lost, would that cause a significant problem.  Of course knowing the answer, I then suggested encrypting the thumb drive. 

This will be a two part post, probably with a separate title -- one for Mac and the other for PC. 

Starting with Mac, we pull up the Disk Utility tool:

Read more

Bypassing Logins

by Vince
in Blog
Hits: 38087

I was playing around with Bootstrap CSS and I had an idea for creating a few different types of logins that all appeared the same but were different.  In the end, I created four different logins and I go into how to bypass them.  Or in the case of one of them, why you can't bypass it. 

In the first example, we have a PHP login form that has the credentials baked into the PHP. 

Viewing the UI, we see:

Read more