NMAP Script - NSE for detecting vulnerable PHP-CGI setups (CVE2012-1823)

Here is my script for detecting vulnerable PHP-CGI setups (CVE2012-1823). This is a pretty scary vuln as it affects a lot of installations. Here is the full advisory: http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ I'm going to look more into it to write a reliable exploitation script too. So far it seems the -r flag is not available in all the setups and we will need to exploit via

Nmap script for "Detect Internet Connection Sharing"

Detects whether the remote device has ip forwarding or "Internet connection
sharing" enabled, by sending an ICMP echo request to a given target using
the scanned host as default gateway.

The given target can be a routed or a LAN host and needs to be able to respond
to ICMP requests (ping) in order for the test to be successful. In addition,
if the given target is a routed host, the scanned host

Install Vanguard - Web Penetration Testing Tools

1. Install perl

- apt-get install perl


2.  Install Net::SSLeay Library
- perl -e shell -MCPAN
CPAN> install Net::SSLeay

3. Install Clone and YAML Library of Perl
- apt-get install libconfig-yaml-perl libclone-perl

4. Download Vanguard
- cd /opt/
- wget http://www.blackhatacademy.org/releases/vanguard-public.tgz
- tar xzvf vanguard-public.tgz

5. Try to run it :)

If you want to see all

nmap and another program via tor tunnel by darryn van tonder

This post is just summary from the Source. If you want to see all detail or how to test it, please go to the Source.



1.Install tor
- apt-get install tor tor-geoipdb proxychains
- vi /etc/tor/torrc
add the "SocksPolicy accept 10.1.1.0/24" into the file.



2. Install tortunnel

- apt-get install libboost-system1.40-dev libssl-dev

-  cd /opt/

- wget http://www.thoughtcrime.org/software/

Howto: Install Metasploit on your Ipad2(iOS5.0.1)

1. SSH to your ipad for easy typing

2. Install all packet that must use for Metasploit
- apt-get install adv-cmds apt basic-cmds bootstrap-cmds bzip2 class-dump coreutils developer-cmds diskdev-cmds file-cmds gawk gdb git gzip iokittools less more nano network-cmds ldid openssh rsync shell-cmds system-cmds com.ericasadun.utilities top uikittools findutils inetutils diffutils lsof subversion vim

Howto: Banner Grabbing

If you want full detail, please go to the Source.

If you just type nmap on the console you will get a pretty detailed help
with all the switched nmap can run. Lets first start with a ICMP Echo
scan... -PE, we are adding -sn , which disables port scanning for now.




ICMP Echo Scans



So we scan our network and discover ourselves (192.168.0.5) and another
host 192.168.0.10. We have

Scanning Redux: TCP and UDP

So we wrap up the blog postings on scanning with TCP and UDP scans. Now
again I stress that there are other types of scans out there, I just
want to highlight some of them.



TCP

TCP stands for Transfer Control Protocol. This is the powerhouse of
protocols, many applications ride this bad boy straight to your
computer. Example-- this web page! Also your email clients and file

Howto: Beginning Web Pen Testing: ICMP Scans