Cheat sheets

Here are some interesting cheat sheets that people posted in the Pentest mailing list:

Networking cheat sheets: 

• Protocols: Spanning Tree, Ipv6, Ipv5, OSPF, EIGRP, BGP
  
• Applications: Tcpdump, Wireshark
  
• Reference: Common ports, IP access lists, Subnetting
  
• Technologies: MPLS, QoS, Vlans, IOS version
  

Link PacketLife

Linux-Unix Command Line sheets:

The name says all.

Link Scottklarr

Miscellaneous:

Here are very good quality cheatsheets, this site used to be "IloveJackeDaniels".

• Regular expressions
  
• Subversion
  
• CSS
  
• PHP
  
• Mod_rewrite
  
• SQL SERVER
  
• HTML
  
• Ruby on rails
  
• ASP/VBScript
  
• Mysql
  
• Etc

Link AddedBytes

The rest:

A very big collection of many cheat sheets, you can find things like:

• Jquery
  
• JSP
  
• Java
  
• Firefox
  
• Coldfusion
  
• htacces
  
• Gimp
  
• Django
  
• mod_rewrite
  
• Mysql
  
• Oracle
  
• Perl
  
• Python
  
• Ruby
  
• Sendmail
  
• Solaris
  
• SSI
  
• Sybase
  
• UML
  
• Vim
  
• XML
  
• XSS
  
• etc.
  

Link Cheat-Sheets.org

Setting Vmware to trick Malware

Here are some configuration options for VMware that can be useful to thwart some malware

when they check for virtual machine presence. It's not going to fool all malware but

there are a lot that will fall.  So fire up your text editor and add this lines to your virtual machine VMX file:

isolation.tools.getPtrLocation.disable = "TRUE"

isolation.tools.setPtrLocation.disable = "TRUE"

isolation.tools.setVersion.disable = "TRUE"

isolation.tools.getVersion.disable = "TRUE"

monitor_control.disable_directexec = "TRUE"

monitor_control.disable_chksimd = "TRUE"

monitor_control.disable_ntreloc = "TRUE"

monitor_control.disable_selfmod = "TRUE"

monitor_control.disable_reloc = "TRUE"

monitor_control.disable_btinout = "TRUE"

monitor_control.disable_btmemspace = "TRUE"

monitor_control.disable_btpriv = "TRUE"

monitor_control.disable_btseg = "TRUE"

With this configuration you can trick most VM detections like RedPill, Scoopy checks and other techniques.

Becareful with this configuration because will break the communication channel, thus nullifying the VMtools.

This configuration was provided by Ed Skoudis and Tom Liston in their document "Thwarting Virtual Machine Detection"

If you have another trick please share it here :)

CMM

OWASP Spain Chapter Meeting

The next 21 of November i will be participating as speaker in the OWASP Spain Chapter Meeting, i will give a talk about Information Gathering, the key point of the presentation is to show new techniques on how you can gather interesting information about a target (individual or company) and how can you use it in a penetration test. I will talk about my tools, and some online sites that provide interesting information.

If you want to join us, remember the 21 of November, place IL3 - Institute for LifeLong Learning (Universitat de Barcelona)

Link: Owasp

Metagoofil in Toorcon

The last week Chris Gates from carnalOwnage gave a talk in Toorcon about Information Gathering called "New School Information Gathering" in his talk he speak about Metagoofil, and how you can use it on getting information from the metadata of public documents.

I liked the presentation, and i think that Chris did a good job putting everything together

If you want to get the presentation get it here: http://www.carnal0wnage.com/research/Carnal-NewSchool-ToorconX.pdf

CMM

Displaying Windows cached DNS entries

This is a super fast post, here is an interesting command for checking the cached DNS entries in a Windows system:

c:>ipconfig /displaydns

slashdot.org
----------------------------------------
Nombre de registro . : slashdot.org
Tipo de registro . . : 1
Período de vida . . . : 2117
Longitud de datos . . : 4
Sección . . . . . . . : respuesta
Un registro (host). . : 216.34.181.45


This could be useful when analyzing malware or doing forensic analysis

CMM