andlabs.org

blog.andlabs.org

Attack and Defense Labs: HTML5 goodness at BlackHat Abu Dhabi this week

http://blog.andlabs.org/2010/11/html5-goodness-at-blackhat-abu-dhabi.html

Monday, November 8, 2010. HTML5 goodness at BlackHat Abu Dhabi this week. Just three more days to go for my ' Attacking with HTML5. Talk at BlackHat Abu Dhabi. In addition to covering some of the interesting HTML5 attacks already released during 2010 by myself and other researchers, it has two new sections - HTML5 based port scanning and HTML5 Botnets. I would be talking about a new way to perform JavaScript based port scans that gives very accurate results. How accurate? The tools and details would be o...

blog.andlabs.org

Attack and Defense Labs: XSSing client-side dynamic HTML includes by hiding HTML inside images and more

http://blog.andlabs.org/2010/08/xssing-client-side-dynamic-html.html

Tuesday, August 10, 2010. XSSing client-side dynamic HTML includes by hiding HTML inside images and more. Matt Austin made a brilliant discovery sometime back and wrote a detailed post. Of his hack, you absolutely must read it. Basically it is a problem with sites that use Ajax to fetch pages mentioned in the URL after # and then include them in the innerHTML in a DIV element, he picks 'touch.facebook.com' as an example. Quoting from his post:. Call me an HTML5 fanboy but I believe the spec designers hav...

blog.andlabs.org

Attack and Defense Labs: Performing DDoS attacks with HTML5 Cross Origin Requests & WebWorkers

http://blog.andlabs.org/2010/12/performing-ddos-attacks-with-html5.html

Wednesday, December 15, 2010. Performing DDoS attacks with HTML5 Cross Origin Requests and WebWorkers. Detailed performance analysis of this technique. DDoS attacks are the rage this year, atleast in the latter part of the year. There have been numerous instances of successful DDoS attacks just in the past few months. Some of the current DoS/DDoS options seem to be LOIC. And Jester's unreleased XerXes. And Cross Origin Requests. I am not going to release any PoC as this might probably be a bad time to do...

kailaspatil.blogspot.com

Kailas Patil: Man-in-the-Middle (MITM) Attack using Wireless Bridging on Kali Linux

http://kailaspatil.blogspot.com/2013/08/man-in-middle-attack-using-wireless.html

PhD National University of Singapore. Thursday, August 8, 2013. Man-in-the-Middle (MITM) Attack using Wireless Bridging on Kali Linux. In this tutorial we will perform MITM attack. Steps to perform MITM attack:. 1 First check for wireless devices on your computer. 2 Now create a Wireless monitoring interfaces:. 3 Monitor what's on the wireless network such as access points in the neighborhood, wireless devices, channel used, etc. 4 Create and launch our own access point (fake access point). Ifconfig myBr...

kailaspatil.blogspot.com

Kailas Patil: February 2013

http://kailaspatil.blogspot.com/2013_02_01_archive.html

PhD National University of Singapore. Tuesday, February 5, 2013. Ubuntu 12.04 fresh installation failed to install GRUB. Ubuntu 12.04 LTS fresh installation even though completed successfully it might fail to install grub correctly on system. In such a situation to install grub you can follow following steps using LiveCD or bootable installation disk. Boot from LiveCD, open terminal and run following commands to note down drive and partition number on which Ubuntu is installed. Sudo mount /dev/saXY /mnt.

kailaspatil.blogspot.com

Kailas Patil: Steps To add Repositories in kali

http://kailaspatil.blogspot.com/2013/09/steps-to-add-repositories-in-kali.html

PhD National University of Singapore. Tuesday, September 17, 2013. Steps To add Repositories in kali. Copy the links below and replace with the displayed links in the File. Deb http:/ http.kali.org/ /kali main contrib non-free. Deb http:/ http.kali.org/ /wheezy main contrib non-free. Deb http:/ http.kali.org/kali kali-dev main contrib non-free. Deb http:/ http.kali.org/kali kali-dev main/debian-installer. Deb-src http:/ http.kali.org/kali kali-dev main contrib non-free. Press Ctrl x then press Enter.

kailaspatil.blogspot.com

Kailas Patil: Python script to convert JSON file into CSV file for easy uploading on MySQL database

http://kailaspatil.blogspot.com/2013/07/python-script-to-convert-json-file-into.html

PhD National University of Singapore. Monday, July 29, 2013. Python script to convert JSON file into CSV file for easy uploading on MySQL database. This tutorial show how to use a python script that converts a JSON file data into a CSV file. And how to export CSV file data into Sqlite database using a python script. The JSON file data is stored in the following format:. URL": "https:/ support.google.com/zagat/", "headerName": null, "Domain": "support.google.com", "headerValue": null},. For i in myjson:.

kailaspatil.blogspot.com

Kailas Patil: November 2013

http://kailaspatil.blogspot.com/2013_11_01_archive.html

PhD National University of Singapore. Friday, November 1, 2013. Latexdiff a diff tool for Latex documents. IMHO, If you want a diff of two latex file then latexdiff is a reliable tool to do that. It also supports included .tex. Files in the main operating file. Sudo apt-get install latexdiff. Invoke latexdiff using following command:. Path/to/old-version/main.tex /path/to/new-version/main.tex difffile.tex. Argument is used to recursively get inputs from any included .tex files.). Links to this post.

kailaspatil.blogspot.com

Kailas Patil: latexdiff a diff tool for Latex documents

http://kailaspatil.blogspot.com/2013/11/latexdiff-fantastic-diff-tool-for-latex.html

PhD National University of Singapore. Friday, November 1, 2013. Latexdiff a diff tool for Latex documents. IMHO, If you want a diff of two latex file then latexdiff is a reliable tool to do that. It also supports included .tex. Files in the main operating file. Sudo apt-get install latexdiff. Invoke latexdiff using following command:. Path/to/old-version/main.tex /path/to/new-version/main.tex difffile.tex. Argument is used to recursively get inputs from any included .tex files.). Kailas Web Home Page.