Gym Log
Enjoy.
🔒 ponchos blog.
ethics in action: hacking for a secure tomorrow.
Latest posts
Security Vulnerabilities
PHP can be vulnerable to various security issues, including: SQL Injection: Unsanitised user input can lead to unauthorised database access. Cross-Site Scripting (XSS): Lack of proper output escaping allows attackers to inject malicious scripts. Cross-Site Request Forgery (CSRF): Users can unknowingly perform malicious actions on authenticated sessions. File Inclusion Vulnerabilities: Including…
PHP Fuctionalities
Let's explore some more PHP examples to demonstrate different functionalities: Variables and Data Types: <?php // Variables and Data Types $name = "John Doe" ; $age = 30 ; $height = 6.2 ; $is_student = true ; // Printing variables echo "Name: " . $name . "<br>" ; echo "Age: " . $age . "<br>" ; echo "Height: " . $height . "<br>" ; echo "Is Student? " . ( $is_student ? "Yes" : "No" ) . "<br>" ; ?>…
Example PHP Script
Here's a simple example of a PHP script that prints "Hello, World!" to the browser: <!DOCTYPE html> <html> <head> <title>PHP Example</title> </head> <body> <?php // PHP code goes here echo "Hello, World!" ; ?> </body> </html> To run this script, save it with a .php extension, for example, example.php . Then, you can place it in a web server's root directory (e.g., htdocs in XAMPP or www in WAMP ),…
Example SQL Script
This is a simple example of a SQL script that creates a table, insert data, update the data, select data and delete data from the table. -- create a new table called "employees" CREATE TABLE employees ( employee_id INT PRIMARY KEY , first_name VARCHAR ( 255 ) NOT NULL , last_name VARCHAR ( 255 ) NOT NULL , email VARCHAR ( 255 ) UNIQUE NOT NULL , hire_date DATE NOT NULL , salary DECIMAL ( 10 , 2 )…
Creating macOS Ransomware.
Blurb With the beta release of the Huntress macOS agent, I wanted to share some of the Apple-y stuff we’ve been up to behind the scenes. In this article, we’ll put our red team hats on and look at a macOS ransomware script and discuss how I improved its offensive efficiency. "Macs don't get malware, stupid." An interesting urban myth of information security is that Apple products don’t get malware…
Cobalt Strike Analysis (PwSh)
Here is some Cobalt Strike I came across today. How do we know it's Cobalt Strike? Let's unpack the updater.bat file. Stage 1 & 2 As we can see, this is a partial output of the base64 string. From here we can use a CyberChef recipe to convert the base64 string. See screenshot below. Which will then give us the output of the decoded string and give us an insight on what we need to do next. Partial…
CyberChef CheatSheet
Most common concepts I would highly recommend hosting CyberChef locally too. Below are all different ways of encoding poncho cG9uY2hv - Base64 Encoded 70 6f 6e 63 68 6f - Hexadecimal Encoded (letters in numbers) 112 111 110 99 104 111 - Decimal Encoded (No letters in numbers) \x70\x6f\x6e\x63\x68\x6f - Escaped Hexadecimal Characters p%20o%20n%20c%20h%20o - URL encoded characters…
Securing Kali Linux & Some
A few simple and easy steps to securing your Kali Linux OS. I created this because all of the information I needed to secure my own Kali OS was scattered across different blog posts etc. I also included some tips and tricks to fix a few things like USB mouse lag and expanding the SD card. USB Mouse Lag Fix [Restart required] sudo nano /boot/cmdline.txt At the end of the line type the below…
Macbooks at Work
I use a macbook at work. I work in Cyber Security and one time when I was trying to run the tool Chainsaw I recieved a permission error despite using the right-click > open work around. If Apple devices give you a permissions error run the command below. To disable Gatekeeper from the command-line: sudo spctl --master-disable To enable Gatekeeper from the command-line: sudo spctl --master-enable…