crazylazy.info

Searching is more than googleing

surfraw is a tool to build great "scrapers". A scraper is a tool to extract content from the web automatically. It gets tricky when it comes to modern web-apps which embed content dynamically, but in case of the following it's "just" searching. The art of searching (presentation of Fravia at 22c3, html5 embedded) isn't widely known. - I think especially people in IT should train that ability or being taught: because the job always requires to search for specific information.

No more emulation

When it comes to the commandline administrators all over the Windows worlds nowadays think of Cygwin or Powershell. However Cygwin is a special layered environment and Powershell is .Net dependant and not very reactive.
Therefore I tend to turn back to the good old DOS-like commandline and add some stuff to the environment path in order to ease my life. However many people may think that extending your commandline tools doesn't help you in situations where you don't find these tools: on Windows the commandline is just an extra. The following stuff of course doesn't help you to do post-exploitation or to show of at your friends machine. But it helps to save time. My time ;).

UnixUtils

Reach the registers

Usability war

I began to read Windows Internals in the 5th edition by Mark Russinovich and David Solomon. There're experiemnets in there on how to do Kernel mode debugging, or how to include Debug symbols with Sysinternals ProcessExplorer... and lots of fascinating stuff to try in order to explore the architecture of modern NT6 systems. Before I was able to start my explorations, I had to install Windows 7 (NT 6.1) on a MacBook. But there's Bootcamp and Apple officially supports it. So... that shouldn't be a big deal?!

mutt meets the cloud

mutt is a pretty decent terminal based mail-client. It reliably runs on almost every platform, is RFC conform by default, lightweight, fast, extremely versatile and sweet as leet. In order to take advantage of all the kewl features of Gmail many people use heavyweight mail-clients like Mail.app (>300 MB), Outlook (infinite waste of space and time), or Thunderbird (the compromise).
In the past mutt was just a MUA, but since ~ 1.5 there's a useable smtp, imap and pop3 backend. In the following I hacked mutt to sync with multiple Gmail imap accounts to use the great filters and infinite space - from a terminal. Just mutt and Gmail.

A brief reversing tutorial

I recently came across the problem, that I needed to collect strategically important information according to the Heap while executing the application. On Windows there're certain restrictions: tool-suites like Valgrind with croncile-recorder didn't seem to exist at first. Sysinternals' VMMap by Russinovich and Cogswell are much too basic in their functionality. But there's IDA, there's Pedram's Paimei... and there's Grenier's Byakugan in the Metasploit projects. And much more ;). In the following I'm just referring to Paimei, because I still have to sort some things out with WinDBG. It's an ugly monster that I need to tame actually.

Being in information security requires to keep track on all sorts of technological developments - and the people behind it. Most stuff, that's hot and new out there, will be discussed and developed within the community, will be announced, explained and come to you in it's entire context - if you follow along.
You can win a lot out of this. In the following I just mention some MacOS or Windows tools - you find similar tools for any Unix, too. But there's KDE, Gnome, whatever X11 based GUI you have. You'll probably know better what to use than I do.