Rainbow Tables for rcracki

Download links are all right here:

http://www.freerainbowtables.com/tables2/

Empty/null hashump (LM/NTLM)

aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0

is the LM/NTLM hash pair for blank passwords. You can create this pair by running

"net user kittens /add"

and it will result in:

"kittens:1005:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::"

This is an easy way to tell if the hash you have is actually a password or not.

Sublime 2 command line starter

Textmate simply needed you to type "mate file1" to open file1 in the textmate gui.

Sublime 2 doest have that. well thats stupid. so I made my own:

alias sublime='open -a "/Applications/Sublime Text 2.app"'

now just type "sublime file1" and it will start the file in the gui, just like textmate.

Updating metasploit in brew

Straight from brew when you first install metasploit:


Metasploit can be updated in-place by doing:
  cd `brew --prefix metasploit`/libexec/
  svn up

My tech/infosec subreddits

Bookmark this page for good times:

http://www.reddit.com/r/commandline+cli+netsec+blackhat+bash+asknetsec+hackers+linux+linux4noobs+linuxadmin+linuxmint+networking+pwned+sysadmin+ubuntu

Awk from pattern to End Of File

awk '/regex/,EOF' file1

From LM to NTLM passwords in John the Ripper

so you dump some passwords from a machine and you see it contains LM and NTLM hashes. obviously LM is quicker to crack so you go for that one first and it gives you the uppercase plaintext password:

./john --format=lm /root/hashes

which provides the plaintext uppercase password "KITTENBOOTIES". Great, now we need the real password, the one with upper/lower cases. we do this easily by supplying the "KITTENBOOTIES" password as the wordlist (with mangling) to john again. so do this:

echo KITTENBOOTIES > wordlist1
./john -rules --format=nt /root/hashes --wordlist=wordlist1

This will output the proper password of "kiTTenBooTiES"

shablam!

shut bonjour up

Bonjour makes a lot of annoying noise from a mac when you are trying to do some traffic analysis. you can help that by disabling bonjour's multicasts with:

sudo defaults write /System/Library/LaunchDaemons/com.apple.mDNSResponder ProgramArguments -array-add "-NoMulticastAdvertisements"

SANs guide to basics of securing datacenters and their location

http://www.sans.org/reading_room/whitepapers/awareness/data-center-physical-security-checklist_416

Make your bash usage/movement faster and more efficient

http://www.bigsmoke.us/readline/shortcuts