Comments for Ack Ack

Comment on Anti Alphanum PHP Shell by Fredrik Nordberg Almroth

Fredrik Nordberg Almroth — Sat, 28 Jan 2012 13:07:34 +0000

Nobody: I'm unable to make a cross-OS conn-back script. I have no idea on how to properly hook cmd.exe on Windows. Sadly.

Comment on carrot.exe by Dump Windows password hashes efficiently « thaond1986

Dump Windows password hashes efficiently « thaond1986 — Thu, 26 Jan 2012 16:29:53 +0000

[...] is my first choice. It is one-executable only tool and reliable. Another tool to consider is carrot, a bundle of other tools (primarily from NirSoft), good to dump Protected Storage credentials. [...]

Comment on system.bat – Windows 7 Privilegie Escalation by Ryan

Ryan — Sat, 21 Jan 2012 11:11:43 +0000

asap if possble

Comment on HashDoS PoC by Fredrik Nordberg Almroth

Fredrik Nordberg Almroth — Mon, 16 Jan 2012 09:15:53 +0000

Perhaps, but our PoC was out four days earlier!

Comment on HashDoS PoC by MZ

MZ — Mon, 16 Jan 2012 09:13:26 +0000

Already weaponized:
http://www.exploit-db.com/exploits/18305/

Comment on Netcat cheat sheet by Samar

Samar — Thu, 05 Jan 2012 05:10:39 +0000

Thanks for this cheatsheet. Very helpful information. I was writing a similar article and came to this page while searching for some advanced netcat shells. Remembered the site for MySQL cheatsheet so checked it and this was also so informative.

Comment on HashDoS PoC by Fredrik Nordberg Almroth

Fredrik Nordberg Almroth — Mon, 02 Jan 2012 16:01:25 +0000

Ah yeah! That's cool. Someone should find universal collisions which will affect multiple algoritms (say, PHP and JSP) that would make the DoS furthermore powerful. Cool never the less! Cheers!

Comment on HashDoS PoC by Krzysztof Kotowicz

Krzysztof Kotowicz — Mon, 02 Jan 2012 06:19:07 +0000

Good one! And, as it's now a purely HTTP exploit, you can also do it from browser - http://koto.github.com/blog-kotowicz-net-examples/hashcollision/kill.html

Comment on Tiny PHP Shell by singyea

singyea — Sun, 01 Jan 2012 03:42:35 +0000

look at my tiny door :http://hi.baidu.com/singyea/blog/item/3152d2114faaae1bb8127b44.html .

Comment on Netcat cheat sheet by johny

johny — Fri, 23 Dec 2011 09:39:03 +0000

so educative..but ill like to know how can one backdoor using shell to netcat when you cannot port forward because i dont have acess to a router and also is there other ways to connect to the root of the shell, thanks