Security for the Masses

01/17/2012 - UPDATED: proxycheck.sh

01/17/2012 - UPDATED: feeds.rmccurdy.com
# sonofsamy.wordpress.com
# exploit-db.com
# securinfos.info
# vupen.com
# professionalsecuritytesters.org
# info
# securitytracker.com
# news.securitytracker.com
# taosecurity.blogspot.com
# gossamer-threads.com
# net-security.org
# kb.cert.org
# cert.org
# milw0rm.com
# seclists.org
# us-cert.gov
# f-secure.com
# securityvulns.com
# osvdb.org
# securityfocus.com
# wordpress.com
# blogspot.com
# twitter.com

12/30/2011 - I.m bringing sexy back !! well .. 1989 ... After Dark screensaver Flying Toasters After Dark screensaver Flying Toasters.exe No midi thank god !!! bit wonkey you can look at the install.bat and .reg files. for some reason it needs full R/W to its HKLM install path in the registry. Tested on XP and WIN7 !

12/15/2011 - Disable Metasploit / Enable Metasploit in windows.
# disable stop script
net stop "Metasploit Pro Service"
net stop "Metasploit Thin Service"
net stop metasploitPostgreSQL
sc config metasploitProSvc   start= disabled
sc config metasploitThin  start= disabled
sc config metasploitPostgreSQL  start= disabled



# enable start script
sc config metasploitProSvc   start= auto
sc config metasploitThin  start= auto
sc config metasploitPostgreSQL  start= auto
net start "Metasploit Pro Service"
net start "Metasploit Thin Service"
net start metasploitPostgreSQL

11/01/2011 - UDDATED Proxycheck.sh good.txt is updated weekly over 5K proxies tested ~500 HTTP

06/23/2011 - Here are some MSF/SET and NMAP notes for brute force (for MSF for M$ ),VNC bypass and Airbase :

08/10/2011 - Updated iKAT . Interactive Kiosk Attack Tool http://console.rmccurdy.com

06/23/2011 - Information Leakage

FOCA . Document meta-data retrieval and analysis, domain enumeration
Maltego . Transform/processing engine for correlation and linking objects
Creepy . Geo-location information gatherer http://ilektrojohn.github.com/creepy
Shodan . Web server search engine
Metagoofil . Document meta-data command-line tool
Wikto . web server vulnerability and folder enumeration
Bespoke scripts . contact me offline for some quick and dirty bash scripts which automate some tasks
u = Number of usernames enumerated
nf = Number of network folders enumerated
e = Number of email addresses
vs = Number of vulnerable internal software versions
wv = Number of known vulnerabilities in version of web server
ev = Number of vulnerabilities in version of mail server
gg = Number of Google Groups postings
r = Number of robots.txt entries
Exposure = u+nf+e+vs+wv+ev+gg+r / 9
RSA = (3+3+2+2+1+1+4+1)/8 = 17/9 = 2
Problem with such calculations is lack of account for context Un disclosed source
06/23/2011 -


Nice technique for opening cmd:
1) Open MSPaint and change image attributes to: Width=6 and Height=1 pixels.
2) Set pixels values to (from left to right):
1st: R: 10, G: 0, B: 0
2nd: R: 13, G: 10, B: 13
3rd: R: 100, G: 109, B: 99
4th: R: 120, G: 101, B: 46
5th: R: 0, G: 0, B: 101
6th: R: 0, G: 0, B: 0
3) Save it as 24-bit Bitmap (*.bmp;*.dib)
4) Change it's extension from bmp to bat and run.
Source:
http://www.digitalwhisper.co.il/0x26/ 06/02/2011 - theHarvester.py email Harvester


https://github.com/laramies/theHarvester


./theharvester.py -d microsoft.com -l 50 -b google
./theharvester.py -d microsoft.com -l 50 -b bing
./theharvester.py -d microsoft.com -l 50 -b pgp
./theharvester.py -d microsoft.com -l 50 -b linkedin
./theharvester.py -d microsoft.com -l 50 -b google-profiles
./theharvester.py -d microsoft.com -l 50 -b exalead

05/18/2011 - Malware Analysis

Also been messing with Malware Analysis tools. Let me know if you want any more info on these. Still a total noob doing crackmes.

·         Portable IDA Pro with IDAPython/stealth plug-in

·         Portable Reflector a Class browser and analysis tool for  .NET >=4 Decompile  

·         malware_analyser 3.0

·         yara exe with sigs ( needs more work.. )

·         DeFixed_Edition_v2 ( olly / ton plug-in etc )

http://www.openrce.org/downloads/

http://tuts4you.com

http://crackmes.de  

http://www.youtube.com/watch?v=zvWc-XsBKrA

http://www.youtube.com/watch?v=jIaImASmto4

http://blip.tv/carolinacon/yara-and-python-the-malware-detection-dynamic-duo-mjg-michael-goffin-5123342

http://www.pentestit.com/2011/03/08/cuckoo-malware-analysis-sandbox/

http://www.pentestit.com/2011/04/20/update-malware-analyzer-v30/

http://www.pentestit.com/2011/03/23/update-yara-v15/

http://www.malwareanalyser.com/home/

04/26/2011 - Updated Yahoo movies feed movies.html
04/12/2011 - Yay mod_bw

BandwidthModule On
ForceBandWidthModule On
LargeFileLimit * 1000 10000
MaxConnection all 3



03/28/2011 - Sick of setting file associations ? this is what I use on my portable apps ! acc.bat.txt

03/06/2011 - Portable virtual windows !?!? http://fcportables.blogspot.com/2011/01/portable-microxp-2011.html  using QEMU to load ISO files http://milky.manishsinha.net/2008/07/10/using-qemu-on-windows/  

03/1/2011 - Updating flash in firefox the right way.... http://www.varesano.net/blog/fabio/installing%20flash%20player%20plugin%20firefox%20without%20having%20administrator%20access%20or%20premissions
also neat is http://ninite.com


02/28/2011 - Normal cygwin/ruby/perl 400megs 22K files .. Cameyo packaged 121 megs Portable Cygwin http://db.tt/qp2nKi5 Run the EXE and wait a long time if you still have errors wait close and reopen contains ruby/perl/make/c++/automake/screen


02/28/2011 - Go away bots .. I have no PHP here .. RewriteCond %{QUERY_STRING} ^.*\&.*$ [NC]


02/26/2011 - Fixed my Hacker Safe logo

02/26/2011 - Proxbrute Proxmark3 Brute force RFID http://www.proxmark.org/forum/topic/713/proxbrute/

02/23/2011 - Updated yahoo pipe for comics http://comics.rmccurdy.com


01/21/2011 - Updated http://feeds.rmccurdy.com



twitter.com
blogspot.com
wordpress.com
securityfocus.com
osvdb.org
securityvulns.com
f-secure.com
us-cert.gov
seclists.org
milw0rm.com
cert.org
kb.cert.org
net-security.org
gossamer-threads.com
taosecurity.blogspot.com
news.securitytracker.com
securitytracker.com
professionalsecuritytesters.org
vupen.com
securinfos.info
exploit-db.com
rmccurdy.com
sonofsamy.wordpress.com

01/21/2011 - john 1337 speak worlist gen:



The default john.conf includes some rules like that, enabled for "single crack" mode only by default. You may copy the lines between these two comments:
# The following 3l33t rules are based on original Crack's dicts.rules
l/asa4[:c]
l/ese3[:c]
l/lsl1[:c]
l/oso0[:c]
l/sss$[:c]
...
l/asa4/ese3/lsl1/oso0/sss$[:c]
# Now to the prefix stuff...
into the [List.Rules:Wordlist] section to have them enabled for wordlist mode as well. usage: john -w=wordlist --stdout --rules


11/13/2010 - FLoP's fpg false positive generator for IDS:
Static BIN for BT4 : FPG.zip
Fpg: http://www.geschke-online.de/doc/c2398.html
Fpg src : http://www.geschke-online.de/FLoP/src/FLoP-1.6.1.tar.gz

11/10/2010 - Full Update Guide - Fender/1.2 32A (myTouch 3G 1.2 / Fender LE (3.5mm jack) version) I can't bring myself to mod it yet but I did get root with Universal Androot 1.6.2 beta 5 apk temp root for the current T-mobile build
10/05/2010 - RS links are all dead and gave up on yahoo pipes regex is hit or miss for 3 weeks ... movies.html

10/02/2010 - lighttpd FTW :
# limit max connections per ip and limit bandwidth
server.kbytes-per-second = 10
evasive.max-conns-per-ip = 2
connection.kbytes-per-second = 10

09/13/2010 -
Sipdroid / sip.sipdiscount.com

\+*1*(.*),1\1
08/01/2010 -

Creative Loafing:
week http://rmccurdy.com/scripts/clatl.com.html
weekend http://rmccurdy.com/scripts/clatl.com_ss.html
Atlanta Events Calendar - Search Upcoming Events in Atlanta:
http://feed43.com/atlantanetrmccurdydotcom.xml
Atlanta Motor Speedway | Events
http://feed43.com/atlantamotor_rmccurdydotcom.xml
Atlanta, GA Events and Attractions by Citysearch
http://feed43.com/citysearch_rmccurdydotcom.xml
funny farm comedy club
http://feed43.com/funnyfarmcomedyclubatlanta.xml
The Punchline - Atlanta's premier comedy club!
http://feed43.com/thepunchlineatlanta.xml


07/14/2010 - Tutorial WIM image files wimfltr.sys Windows Image File Filter Driver command line install

I have an H drive ( using junction to link C:\users\internet\Documents\my dropbox to h:\ ) I wanted to easily update files that triggerd AV so I zipped them up. I update the zip often and was testing for other options and this is what I tried.

* h:\junction.exe -s "C:\users\internet\Documents\my dropbox" h: this is howto change location of dropbox sync :)


* google for the drivers ImageX_x86

* install the driver
rundll32 syssetup,SetupInfObjectInstallAction DefaultInstall 128 .\ImageX_x86\wimfltr.inf

* create an image of a DRIVE ( cannot be mapped drive OR junction 'ln for windows' )
.\ImageX_x86\imagex.exe /capture d:\ c:\twf.wim "WIM Compress" /compress maximum

* umount image
.\ImageX_x86\imagex.exe /unmount /commit c:\cygwin

* mount image
.\ImageX_x86\imagex.exe /mountrw .\cygwin.wim 1 c:\mount


* even with 'maximum' compresstion images are larger then the source files in most cases... ???
* 80meg zip of Cygwin ~300 unzipped becomes 600 WIM file ???
* requires admin rights to install drivers but still beats zipping and unzipping items that trigger AV
reference: http://technet.microsoft.com/en-us/library/cc749447%28WS.10%29.aspx

06/12/2010 - low on disk space android G1 find / -name traces.txt -exec rm -Rf {} \; something kept crashing while I was AFK and caused this traces.txt file to get huGe
06/05/2010 - *lix/windows full disk encryption 'part crypt' on the cheap !
06/03/2010 - http://comics.rmccurdy.com huge mashup of comics! http://pipes.yahoo.com/pipes/pipe.run?_id=ccd5e025249a09a9358ede1d3e238eab&_render=rss
05/30/2010 - yahoo new dvd A or B after 2009 > nzbindex.nl search
05/27/2010 - Android stream ripper http://www.greencode.me/imusic apk: http://tinyurl.com/imusic1
04/30/2010 - QuranReciter http://www.ShaPlus.com Friend was asking about the software so justa re-visit


04/29/2010 - Dropbox portable any path without "my dropbox" in M$ ... DropboxDataWrapper DropboxPath FAILSAUSE

Requirements:

* Administrator ( possibly for dropbox advanced options )
* NTFS on the host computer !
* BACKUP BEFORE YOU DO ANYTHING !!!

Setup:

* Download DROPBOX
Recommended using the potable dropbox ICE because it has (UsbGuard (0.5.3) - Prevents Data Loss by killing DropBox.exe if you accidentally unplug your usb drive (included)
DropBox Portable ICE 0.5.3 -SuPPoRT aLL DRoPBoX VeRSioNs | Updated : 11-04-2010

http://dl.dropbox.com/u/5313411/Portable%20DropBox%20ICE%200.5.3.3%20%2B%20DropBox%200.8.32.rar

* Download Junction v1.05 from sysinternals “symbolic links, where a directory serves as a symbolic link to another directory on the computer.”
* Start dropbox
* Get the link to your dropbox folder path
* Create the sym link to whatever path you like example
rd /q/s "C:\Documents and Settings\internet\My Documents\My Dropbox"
Junction.exe "C:\Documents and Settings\internet\My Documents\My Dropbox" h:\

To delete a sym link use this command:
Junction.exe -d "C:\Documents and Settings\internet\My Documents\My Dropbox"

NOTES: there is a time tradeoff the dropbox.cache folder get queried a LOT and other I/O is sent to the target I would say for 16K files ~2gigs it took ~20-30min where as if it was just a read from the flash disk it would be under 10min

04/26/2010 - ROUTER DIED server was down for about 5hrs today if anybody but bots noticed ...
04/23/2010 - Metasploit meterpreter cheat sheet reference.html All the meterpreter commands I could find / create
04/19/2010 - sprint login script curl .php.txtSprint login script using php / curl
04/16/2010 - UDDATED http://feeds.rmccurdy.com
04/15/2010 - UDDATED Proxycheck.sh good.txt is updated weekly
04/14/2010 - konika script users scan to email for 353 and 350.sh.txtbash/curl script to parse XLS contact list and add it to konika 353 and 350 printers :)
04/14/2010 - movamp.zip Portable AMP Portable apache / php / phpmyadmin / MySQL only 10megs ! change the httpd.conf paths and wala !
03/30/2010 - FIXED Yahoo rotten tomatoes newzbin nzb DVD sabnzbd downloader
03/01/2010 - To set up Yahoo E-Mail in Android:

log-in to your yahoo mail
go to Options, then Account, followed by “Add or edit an account”
select “Account Information” on the left
on the " Preferred Content," change it to Yahoo Asia

1. Make sure Wi-Fi is turned off
2. Press the E-Mail icon (the default Android E-Mail application)
3. Enter your Yahoo E-Mail address and password
4. Press “Manual Setup” in the lower left hand corner
5. For “Incoming Server Settings” set the IMAP server to “imap.mail.yahoo.com” and the Port to 143
6. For “Outgoing Server Settings” set the SMTP Server to “smtp.mobile.mail.yahoo.com” and the Port to 587
7. Check “Require sign-in” and press Next
8. Select how often your phone will check for Email, and choose default options
9. Give the account a name and set your display name for outgoing messages

02/23/2010 - Yahoo rotten tomatoes newzbin nzb DVD sabnzbd downloader Rss feed of 'good' movies to aim at SABnzbd
02/18/2010 - quickbaksmali.zip

* requires java ! in %PATH% !
* just place the java_ee_sdk-5 folder to make it portable !
* put the APKS files in the folder APKS
* you (can) edit the job2.bat with your keytool/key info etc ..


* run the baksmali.bat
* make your changes etc
* run the smali.bat

you should see the updated \META-INF folder in the 'new' apk
and the classes.dex should be new.

02/18/2010 - NMAP FOR ANDROID CROSS COMPILE ARM
02/18/2010 - chsh: entry inconsistent or change shell in FreeBSD `vipw;chsh -s /bin/PATHTOSHELL` vipw != vi /etc/passwd ...
02/04/2010 - Updated LFI.txt http://ha.ckers.org/weird/rfi-locations.dat
01/07/2010 - Full Update Guide - G1/Dream Firmware to CyanogenMod - CyanogenMod Wiki

01/07/2010 - MYTHTV ON UBUNTU 9.10 1TB RAID1

12/08/2009 - Portable Metasploit 3.4-dev svn r7752 Portable_Metasploit_3.4-dev_svn_r7752.exe

12/01/2009 - FreeBSD rtld Lets Local Users Gain Root Privileges http://rmccurdy.com/scripts/downloaded/localroot/freebsd/ binary for 7.2

11/30/2009 - HD on the Mythbox ! Thank you Kimball !

* Panasonic TC - P50X1 - 50" plasma panel - 720p
* VGA compatible controller: nVidia Corporation NV40 [GeForce 6800 GT] (rev a1)
* Intel(R) Pentium(R) 4 CPU 3.00GHz
* WinTV-PVR-500 MC-Kit Tuner
* MemTotal: 512572 kB


11/20/2009 - android busybox nmap G1 android port scanner ...sort of
The busybox I have on my phone does not have pscan here is one to download:
* keep it the same name and COPY to /data/local/bin
cp /sdcard/busybox /data/local/bin/
chmod 775 /data/local/bin/busybox
pscan.sh 192.168.0
http://rmccurdy.com/stuff/G1/busybox
http://rmccurdy.com/stuff/G1/pscan.sh
more android stuff : http://delicious.com/operat0r/android
* this is by no means NMAP ! still waiting for a nmap for android



11/12/2009 - UPDATED/FIXED feeds.rmccurdy.com - 30 feeds ( to be added secunia.com if I can )
http://www.securityfocus.com/rss/vulnerabilities.xml
http://seclists.org/rss/bugtraq.rss
http://seclists.org/rss/fulldisclosure.rss
http://seclists.org/rss/pen-test.rss
http://seclists.org/rss/incidents.rss
http://seclists.org/rss/dailydave.rss
http://seclists.org/rss/webappsec.rss
http://seclists.org/rss/vulnwatch.rss
http://feeds.feedburner.com/HelpNetSecurity
http://www.us-cert.gov/channels/alerts.rdf
http://www.us-cert.gov/channels/techalerts.rdf
http://www.kb.cert.org/vuls/atomfeed?OpenView&start=1&count=30
http://milw0rm.com/rss.php
http://www.net-security.org/dl/bck/vuln.rss
http://news.securitytracker.com/server/affiliate?61D319BD39309004
http://feeds.feedburner.com/darknethackers
http://feeds.feedburner.com/schneier/fulltext
http://www.professionalsecuritytesters.org/backend.php
http://www.f-secure.com/weblog/weblog.rss
http://www.gossamer-threads.com/lists/fulldisc/full-disclosure.xml
http://feeds.feedburner.com/Vitalsecurity-org
http://taosecurity.blogspot.com/feeds/posts/default
http://securityvulns.com/informer/rss.asp
http://www.vupen.com/exploits.xml
http://osvdb.org/feed/vulnerabilities/latest.rss
http://rmccurdy.com/scripts/vupen-security.rss
http://rmccurdy.com/scripts/vupen-linux.rss
http://feeds.feedburner.com/SansInstituteAtRiskAll?format=xml
http://feedity.com/rss.aspx/ath-cx/UldUWlFU
http://www.securinfos.info/english/security-advisories-alerts/security-advisories.xml




11/11/2009 - ettercap + echo www.google.com A 75.131.195.228 > etter.dns = easy rickroll
11/11/2009 - FIXED limit max number of connections in apache ${fwcmd} add 10 allow tcp from any to any 80 out via dc0 limit dst-addr 2 ( I had issues with huge number of FIN_WAIT_2 )
11/11/2009 - Server boot drive (80gig) failed clean 7.2 freebsd install !
11/11/2009 - UPDATED SNORTUPDATE.sh script fixed some of syntax errors etc ..
10/03/2009 - UPDATED the nikto_v20 and nikto_v10 files takes a webinspect > privoxy log and downloads latest nikto and combines with urls.txt a RFI list I update and converts them all to nikto 2 and nikto 1 db formats.. to be used with w3af,nikto and wikto etc .. 16339 lines 1.6 megs
09/26/2009 - G1 T-mobile Root
08/26/2009 - FIXED quickvnc.exe Fixed now only looks for established connection running winvnc.exe to fix strange issues not showing the remote host ...
08/26/2009 - FIXED OEM.EXE overwrites system and system32 ini and bmp files OEMLOGO.BMP and OEMINFO.INI
08/21/2009 - UPDATED http://tw.rmccurdy.com Script to ripp any army in MTW2 can be adapted to use in MTW/RTW etc ..
07/24/2009 - DONATE http://www.ihackcharities.org
06/24/2009 - ADDED fix for clicking time in systray for windows grants everyone http://rmccurdy.com/scripts/allow_time_systray_windows.exe reference: http://blogs.msdn.com/aaron_margosis/archive/2005/02/11/371474.aspx
06/19/2009 - ADDED Scribd ripper script http://rmccurdy.com/scripts/scribd_ripper.php?varpdf=15730844 change the number to the document ID wala !
04/21/2009 - Proxycheck.sh Updated still lame but it works... good.txt is updated weekly
04/17/2009 - sslstrip
04/13/2009 - ADDED VIDEO 30 Days: Outsourcing part1 part2
03/23/2009 - ADDED Portable SwfScanner Screenshot
03/19/2009 - ADDED myipneighbors.bash.txt Idea of this lame script is to find possible vuln params on myipneighbors search results
02/23/2009 - ring.jpg
02/19/2009 - UPDATED Snort/Snotsam ( now I am running more current snort/snortsam and update script is WAY better ... )
www.intodns.com
www.iptools.com
www.freednsinfo.com
network-tools.com
dnstools.iball.id.au
www.iball.id.au
dnstools.iball.id.au
www.diggip.com
www.dnsenquiry.com
www.net-toolkit.com
www.dnscolos.com/free
www.mydnstools.info
02/05/2009 - ADDED packetstorm_dic_john_1337.tar.gz PacketStorm.org wordlist in 1337 speak
01/12/2009 - UPDATED http://www.rmccurdy.com/m3u.m3u All port 80 Shoutcast feeds for thos pesky firewalls ! script can be found in /scripts
01/07/2009 - UPDATED w3af to build 2312 fixed SVN updater and added larger 1meg pykto (nikto ) DB file.
11/21/2008 - ADDED 2.3GIG wordlist
* theargonlistver2_wordlist.zip (83meg) > .rar(154meg) > .lst ( plan text 1.9gigs)
* ran john on it and sort and uniq
* results in 2.3G wordlist no dupes
* DOWNLOAD:
word.lst.s.u.john.s.u.200.part01.rar
word.lst.s.u.john.s.u.200.part02.rar
word.lst.s.u.john.s.u.200.part03.rar
11/13/2008 - ADDED torrentflux_resume_all.txt
Sick of TF and clicking 900 times to resume all the torrents ? use this ! works for 2.1
torrentflux_resume_all.txt
* cd to install path
* patch -Np1 < torrentflux_resume_all.txt
* copy the icons form the link below ( or just use ones you already have and change the source)
* resource: http://www.torrentflux.com/forum/index.php?topic=43.0
11/05/2008 - FIXED w3af_1871_fixed.zip portable w3af to current build FIXED!
11/03/2008 - ADDED Portable Metasploit with autopwn ! Metasploitportable.exe pawn on the GO ! ( needs admin and winpcap if you want SYN scans .. )
10/22/2008 - ADDED Medevil Total War 2 MTW2 army ripp script http://tw.rmccurdy.com/
10/21/2008 - UPDATED nikto 2.X nukeit.org and rmccurdy.com sort and uniq 8764 lines! nikto_extra_scans.db
10/08/2008 - UPDATED http://forum.ultravnc.info/viewtopic.php?p=53317#53317 auto reconnect script for ULTRAvnc repeater
09/29/2008 - UPDATES Server was down for a bit for updates removed some services to increase security
09/23/2008 - ADDED http://rmccurdy.com/scripts/downloaded/gtkUiUsersGuide.pdf gtk Ui Users Guide for W3AF!
09/18/2008 - ADDED flickr_rip_LARGE Simple script to ripp flickr images
09/03/2008 - UPDATED feeds.rmccurdy.com added 2 security feeds securityvulns.com and secunia.com
08/14/2008 - VIDEO: ettercap / etterfilter man in the middle ownage
08/14/2008 - myipneighbors.bash.txt myipneighbors > google search for param to help find exploitable scripts
08/14/2008 - UPDATED: w3af_1632.zip w3af GUI for windows portable GTK UI update to build 1632
08/11/2008 - Surf Jacking Gmail demonstration.flv Exploiting sites that use https then http
08/11/2008 - 301 redirect MITM all application request over HTTP So far I only have luck with FF and Opera
08/09/2008 - sedtris.sed Tetris in sed() By: Julia Jomantaite. Here is the shell script to hit enter for you sedtris.sh
08/08/2008 - SSH downgrade attack Old news but news to me.
08/07/2008 - hedgehog A simple proof-of-concept portscanner written in VBA for Excel.
08/06/2008 - Evilgrade hijack updaters request !

Implemented modules:
-------------------
- Java plugin
- Winzip
- Winamp
- MacOS
- OpenOffices
- iTunes
- Linkedin Toolbar
- DAP [Download Accelerator]
- notepad++
- speedbit

08/05/2008 - Proxycheck.sh Updated still lame but it works...
08/04/2008 - Brute force CSS History Hack Without JavaScript
07/24/2008 - Some issues with the router to the server. Also got a new job. Still working on cracker.rmccurdy.com trying to compile rcracki
07/10/2008 - http://www.freerainbowtables.com FYI if you wanted new rainbow tables now is the time they just updated them lots of seeds !
07/07/2008 - Movies.cgi Quick way to find good movies that are on DVD
04/23/2008 - Download BackTrack 3 Final Here!
04/23/2008 - w3af GUI for windows portable GTK UI update to build 1309 w3af_1309.zip Screen Shot
06/17/2008 - Ya so I got owned by lightning had to replace:
* cable modem
* Netgear wifi router
* 3 NICs
total cost ~70$ downtime 5 days
06/09/2008 - Server was down for a bit for some updates
06/05/2008 - Metasploit.com ARP Pwned
06/05/2008 - CYBS cybersource 2008 Fraud Report.pdf
06/04/2008 - Flash exploit NOT GOOD update flash ASAP ....
06/02/2008 - XSS Cross Site Printing Nice !
06/02/2008 - I am back in town from my little vacation ... I killed my mythbox but now I have the backups automated and SQLdb backed up offsite!
05/23/2008 - SQL Injection Attack At least 70,000 websites have fallen prey to an automated SQL injection attack that exploits several vulnerabilities, including the Microsoft Data Access Components (MDAC)
05/23/2008 - peerguardian Freebsd IPFW script I am on comcast trying to download a ISO for like 3 days not sure if it is comcast or not ..
05/22/2008 - .htaccess issues resolved
05/20/2008 - Different rings telling the difference between switches by the sound of the ring
05/20/2008 - gns3 graphical network simulator that allows you to design complex network topologies and to launch simulations on them
05/17/2008 - SQL Inject via Referer ! This is a new one to me ..
05/14/2008 - "You have received an infraction at Remote Exploit Forums" next message "I am a fan, and appreciate your Flash Ripping Tutorial"
05/01/2008 - [VIDEO] Ripping Flash Templates ! Using URLSnooper / swfdecoder 3 (softlink ) / wget
05/01/2008 - automatic patch-based exploit generation (APEG)
05/01/2008 - http://www.tp2location.com/ Resolve any Telephone Number to its geographical location.
04/24/2008 - Great ! http://olab2.research.microsoft.com/LoginProcess.asp?Email='&Password=
04/24/2008 - find Setuid world writable files find_setuid.txt
04/23/2008 - w3af GUI for windows portable GTK UI !!! portable w3af.zip
04/18/2008 - New video ripping with curl cookies and spidermonkey javascript.swf
04/18/2008 - Fusil the fuzzer Python library used to write fuzzing programs
04/18/2008 - Updated videos.html
04/17/2008 - Proxycheck.sh I could not find a good proxy check tool so this is my hackjob of a script
04/16/2008 - Wfuzz is a tool designed for bruteforcing Web Applications, it can be used for finding resources not linked (directories, servlets, scripts, etc), bruteforce GET and POST parameters for checking different kind of injections (SQL, XSS, LDAP,etc), bruteforce Forms parameters (User/Password), Fuzzing,etc.
04/07/2008 - I finally got around to updating the support link to reflect my new position on end-user security.
03/25/2008 - I made this for Strom Carlson with love Random proverbs generator
03/25/2008 - SMB_RELAY code not using WPAD http://forums.remote-exploit.org/showthread.php?t=12885
03/09/2008 - EH-Net Exclusive: BackTrack 3 Teaser Video download the SWF from www.offensive-security.com
03/09/2008 - Untested Realplayer code http://forums.hackerscenter.com/showthread.php?t=1431
03/09/2008 - w3af gtk user Interface video w3af-gtk-userInterface.mpeg
02/27/2008 - smb_relay exploit with metasploit on a fully patched XP box smb_relay_metasploit.swf
02/26/2008 - Windows login prompt shell using Magnify.exe (WINDOW KEY + U = shell !) VISTA winlogin_easy_shell.exe
02/25/2008 - Re-visit to WebInspect > nikto 2.X nikto_extra_scans.db
02/20/2008 - Updated Quick Clean to support VISTA! quickclean.exe
02/17/2008 - I have the power !
02/08/2008 - UPDATED feeds.rmccurdy.com added http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/
02/08/2008 - UPDATED feeds.rmccurdy.com added custom osvdb RSS feed for full disclosure http://osvdb.org
01/28/2008 - SERVER OUTAGE: Server was out for the longest recored ever 6hrs the motherboard went bad
01/18/2008 - Boot 30GIG HDD had bad blocks replaced with 160GIG Jan 18 17:48:30 rmccurdy kernel: ad0: TIMEOUT - READ_DMA retrying (1 retry left) LBA=27092023
01/18/2008 - Tiger Team 24K Heist
01/17/2008 - Classic Menu addon for Office 2007 auto installer ! Classic Menu Auto.exe
01/16/2008 - Added Video Google hacking DORKS Wikto Aura
01/16/2008 - I poke fun at "hacker safe" logo from scanalert.com H4CK3R 54F3
01/14/2008 - My first eps of www.hackerpublicradio.org dd_rhelp
01/12/2008 - Looks like snort.org force agent tag ! NICE ! updated script .. SNORT.PHP
12/10/2007 - Hackers In Wonderland
11/29/2007 -

john --wordlist=Words.lst --rules --stdout
john will 49 x's Multiply wordlist
theargonlistver2_wordlist.zip (83meg) > .rar(154meg) > .lst ( plan text 1.9gigs)
if it were to go through john it would result in a 85gig ~98,558,569,081 line file..