Categories
Current events Tech The Media US Politics

On the Clinton Email investigation

A thought: a lot of people talk about the Clinton email scandal and the Trump-Russia scandal as though they are alternatives, which is probably due both to the human tendencies toward both tribalism and binary thinking fallacy. 

Report alleges that Washington FBI office gave only a cursory look at Clinton emails on Weiner laptop in rush to end that investigation. 

https://www.realclearinvestigations.com/articles/2018/08/22/despite_comey_assurance_vast_bulk_of_weiner_laptop_emails_never_examined.html

Opinion piece argues that HRC was never going to be charged and that blame for that doesn’t lie with the FBI. 

http://thehill.com/opinion/criminal-justice/406500-dont-blame-the-fbi-hillary-clinton-was-never-going-to-be-charged

Categories
Infosec OSCP Tech

Starting to organize

Categories
Infosec OSCP Pentesting Tech

Pentest, OSCP, & PWK Guides

General Guides (Pentest methodology or PWK/OSCP exam prep)

Categories
Tech

Brute force URLs with gobuster using an authenticated cookie

If you’ve already authenticated with a website you’re pentesting and you want to brute force other URLs, try something like this:

gobuster -e -u http://<IPADDRESS:PORT> -w <WORDLIST> -c PHPSESSID=<COOKIESTRING>

Categories
Tech

Top pentest and PWK / OSCP links

I’m in the process of working my way through the Offensive Security’s PWK labs, in preparation for the OSCP exam. Here are some of the links that have proven useful to me so far. At some future date I’ll organize them.

Categories
Tech

Google search tips and tricks

Here are some tips and tricks I’ve learned about searching Google:
1. Use boolean operator words AND and OR. Note that the pipe character, |, is a synonym for ‘OR’. Also note that AND is assumed when two search terms are given, so searching for red AND blue is the same as red blue.
  • cat OR dog
2. Use parentheses, (), to group AND and OR statements.  Note that, in my experience, you need to include either OR or AND between two parenthetical expressions. To be perfectly honest, I’m not entirely sure how well parentheses actually work.
  • (cat OR dog) AND (black OR white)
  • (car AND black) OR (dog AND white)
3. Use + to force inclusion of words that Google usually ignores, such as ‘to’ and ‘from’.
  • cat +to sell
4. Use – to filter out terms you don’t want.
  • dog -black
5. Use quotes to search for literal phrases. Use a * character to match multiple words in your literal phrases.
  • “fighting like cats and dogs”
  • “raining cats and dogs”
  • “* cats and dogs”
 6. Use the filetype: term and file type extensions (the part after the ., like .pdf) to filter for particular types of files, or to filter out particular types of files. (List of types you can use)
  • cat filetype:pdf
  • dog -filetype:doc
7. Search only a particular site with the site: term.
  • dog site:en.wikipedia.com
  • cat -site:adwords.google.com
8. Limit searches to a particular author with the author: term. (May only apply to scholar.google.com.)
  • cat author:smith
 9. Include similar words by adding the ~ (tilde) character to the front of a search term.
  • dog ~intelligence
10. Look for words near other words using the AROUND(#) operator. Syntax: wordA AROUND(#) wordB, would find instances of wordA within # words of wordB.
  • cat AROUND(3) dog
This information has been pulled from memory and from various sources around the internet. No affiliation with Google or any other website.

Some sites that appear to have additional, related information:
http://support.google.com/webmasters/?hl=en#topic=2370570
http://jwebnet.net/advancedgooglesearch.html