Comments for SamuraiNet Blog http://www.samurainet.org/blog "If you cut me, I bleed binary" Thu, 16 Oct 2008 01:48:00 +0000 http://wordpress.org/?v=2.5 Comment on Google’s ‘Chrome’ released… by Daniel http://www.samurainet.org/blog/2008/09/03/googles-chrome-released/#comment-396 Daniel Wed, 03 Sep 2008 19:17:20 +0000 http://www.samurainet.org/blog/?p=41#comment-396 I can't remember where the article was (try Ars Technica?) but the exploit is because Google used an older version of WebKit that did not have the fix for this vulnerability. The article went on to mention the history of the exploit and how Apple downplayed the seriousness of the issue and took close to 3 months to patch it. I can’t remember where the article was (try Ars Technica?) but the exploit is because Google used an older version of WebKit that did not have the fix for this vulnerability.

The article went on to mention the history of the exploit and how Apple downplayed the seriousness of the issue and took close to 3 months to patch it.

]]> Comment on Using RefControl by Uber0n http://www.samurainet.org/blog/2008/07/09/using-refcontrol/#comment-330 Uber0n Wed, 27 Aug 2008 20:24:31 +0000 http://www.samurainet.org/blog/?p=29#comment-330 Sometimes sites store unfiltered referrers in .htm (or similiar) log files, which can be used to run XSS against the admins who check the logs ;) Sometimes sites store unfiltered referrers in .htm (or similiar) log files, which can be used to run XSS against the admins who check the logs ;)

]]> Comment on Ion3 Window Manager by Darth Platypus http://www.samurainet.org/blog/2008/08/25/ion3-window-manager/#comment-324 Darth Platypus Tue, 26 Aug 2008 12:23:11 +0000 http://www.samurainet.org/blog/?p=25#comment-324 The whole mouse thing is a fad... when will people realize that the *true* path to righteousness lies not through the point-and-grunt neanderthalic methods they've grown accustomed to, but rather through the elegant and expressive method that's been all-but-abandoned in this day and age in favor of odious touchscreens and big-ass tables! The whole mouse thing is a fad… when will people realize that the *true* path to righteousness lies not through the point-and-grunt neanderthalic methods they’ve grown accustomed to, but rather through the elegant and expressive method that’s been all-but-abandoned in this day and age in favor of odious touchscreens and big-ass tables!

]]> Comment on The return of the Tv-Links by tv links http://www.samurainet.org/blog/2008/04/26/the-return-of-the-tv-links/#comment-222 tv links Sun, 27 Jul 2008 13:51:55 +0000 http://www.samurainet.org/blog/?p=8#comment-222 tv links cc is just a clone of the original one, it isnt actually the REAL one tv links cc is just a clone of the original one, it isnt actually the REAL one

]]> Comment on Using RefControl by admin http://www.samurainet.org/blog/2008/07/09/using-refcontrol/#comment-210 admin Fri, 18 Jul 2008 02:35:20 +0000 http://www.samurainet.org/blog/?p=29#comment-210 Yes. It was listed in the first post of this section. Yes. It was listed in the first post of this section.

]]> Comment on Using RefControl by Daniel Cousineau http://www.samurainet.org/blog/2008/07/09/using-refcontrol/#comment-209 Daniel Cousineau Fri, 18 Jul 2008 01:41:25 +0000 http://www.samurainet.org/blog/?p=29#comment-209 So are you going to link to the refcontrol site or do I have to google it? :P I'm assuming http://www.stardrifter.org/refcontrol/ is correct? So are you going to link to the refcontrol site or do I have to google it? :P

I’m assuming http://www.stardrifter.org/refcontrol/ is correct?

]]> Comment on Web Application Penetration Testing… my tools of the trade by SuperCherry http://www.samurainet.org/blog/2008/05/12/web-application-penetration-testing-my-tools-of-the-trade/#comment-185 SuperCherry Fri, 11 Jul 2008 13:10:10 +0000 http://www.samurainet.org/blog/?p=17#comment-185 Nice collection but, if someone is doing web app testing wont use map (not that it wont give interesting information) because are running tests on the 7th layer. To do proper Web server banner scanning you can use httpPrint, or Wikto (Wikto is using HttpPrint and HttpTrack to identify and clone the site for further analysis). Something similar to nmap is hmap (not the best tool, but it is open source and someone can learn from it). Guy have a look at http://blog.kassaras.com. PS: Nice post... Nice collection but, if someone is doing web app testing wont use map (not that it wont give interesting information) because are running tests on the 7th
layer. To do proper Web server banner scanning you can use httpPrint, or Wikto (Wikto is using HttpPrint and HttpTrack to identify and clone the site for further analysis).

Something similar to nmap is hmap (not the best tool, but it is open source and someone can learn from it). Guy have a look at http://blog.kassaras.com.

PS: Nice post…

]]> Comment on Cookies, Cookies, and Cookies by Nick http://www.samurainet.org/blog/2008/06/08/cookies-cookies-and-cookies/#comment-135 Nick Wed, 25 Jun 2008 07:40:51 +0000 http://www.samurainet.org/blog/?p=27#comment-135 According to MozillaLine ( http://kb.mozillazine.org/Firefox_:_FAQs_:_About:config_Entries ), "P3P functionality is not present in Firefox and will probably be removed from Mozilla Suite". Am I missing something? Are you using an extension to enforce P3P? Could you not achieve your custom policy more simply by setting network. cookie. lifetimePolicy to 2 (accept for session only) and network. cookie. cookieBehavior to 1 (allow cookies from originating server only)? According to MozillaLine ( http://kb.mozillazine.org/Firefox_:_FAQs_:_About:config_Entries ), “P3P functionality is not present in Firefox and will probably be removed from Mozilla Suite”. Am I missing something? Are you using an extension to enforce P3P?

Could you not achieve your custom policy more simply by setting network. cookie. lifetimePolicy to 2 (accept for session only) and network. cookie. cookieBehavior to 1 (allow cookies from originating server only)?

]]> Comment on BackTrack2 Wireless by Jon Butler http://www.samurainet.org/blog/2008/05/24/backtrack2-wireless/#comment-125 Jon Butler Mon, 23 Jun 2008 13:37:36 +0000 http://www.samurainet.org/blog/?p=11#comment-125 Nice post samurai! @Stuart Jones - I assume you checked out the new b43 drivers? They even support injection! What a jump! From no support to packet injection, it supports quite a few of the broadcom chipsets. You can find yours with: lspci -nn | grep Broadcom Should be the last 4 digits in the square brackets. Nice post samurai!

@Stuart Jones - I assume you checked out the new b43 drivers? They even support injection! What a jump! From no support to packet injection, it supports quite a few of the broadcom chipsets. You can find yours with:

lspci -nn | grep Broadcom

Should be the last 4 digits in the square brackets.

]]> Comment on Cookies, Cookies, and Cookies by Kelly (Raven) Grzech http://www.samurainet.org/blog/2008/06/08/cookies-cookies-and-cookies/#comment-55 Kelly (Raven) Grzech Sun, 08 Jun 2008 23:13:52 +0000 http://www.samurainet.org/blog/?p=27#comment-55 You ought to try the WP-Footnotes (http://www.elvery.net/drzax/more-things/wordpress-footnotes-plugin/) Wordpress plugin for your references. 'Tis very useful. You ought to try the WP-Footnotes (http://www.elvery.net/drzax/more-things/wordpress-footnotes-plugin/) Wordpress plugin for your references. ‘Tis very useful.

]]>