files.agartner.com

blog.agartner.com

Upgrading Shells

https://blog.agartner.com/posts/4.html

When exploiting UNIX/Linux hosts, one often needs to get a PTY in order to execute certain commands (su, sudo, vi). There are many ways to spawn a PTY. However, the most common is. Python -c 'import pty; pty.spawn(/bin/sh)'. After executing this command, we can execute su and sudo. But we can do better! On the remote host, start a shell listener. Nc -l -p 3333 -e /bin/sh. On the local host, start socat. Replace localhost with the remote host's ip. Note that it won't echo since socat is disable echo.

blog.agartner.com

Cracking Captchas

https://blog.agartner.com/posts/5.html

During the 2014 NCL post season game, one of the challenges involved solving 10,000 captchas in a row. In this post, I'll detail my solution to solving the problem. So what can we do with this information? Let's identify a few attributes of the captcha to see if there's any attacks we can run against it. The text is black, the lines are gray, and the dots are blue. The text is aligned, the same font, and the same weight. There is always six letters. Here's an example of this process:. So the above proced...

blog.agartner.com

Alex Gartner's Blog

https://blog.agartner.com/index.html

Reducing Web Response Times. I've been extending the tinyctf-platform. Which DSU used for the Dakotacon CTF last year. This year I wanted to add in game admin and a variety of other features. I quickly wanted to give one example of an optimization that reduced response times from 400ms to 50ms. Rebuilding TuxGuitar for Modern OSX. The EdgeRouter X, VPNs, and MIPS. I've always loved Ubiquity Networks. I just finished my fifth desktop build in February. Everything was running smoothly until recently&#4...

blog.agartner.com

Computer Failure

https://blog.agartner.com/posts/7.html

I just finished my fifth desktop build in February. Everything was running smoothly until recently. I was playing some games one night when all of a sudden my system instantly lost power. I tried to power it back on, but it refused to comply. So I removed the power cable and cleared the capacitors. When I powered it on again, I was greeted by an interesting sight: smoke! What's even more unbelievable is that upon closer inspection, it turns out the board had actually caught on fire!

blog.agartner.com

Hashcat Style Mask Generator

https://blog.agartner.com/posts/3.html

Hashcat Style Mask Generator. Recently, I've been working on precomputing hashes based a given mask and storing them in a database. When it came to writing the mask engine, I realized that it would be of great benefit to have a simple library to generate all the plain texts for a given mask. So myself and Andrew Kramer decided to put in 10 hours and make one. Check it out on Github. Mask t *maskgen; / - mask = "? A" / - custom charset 1 = "? Dabcdef" (all hex characters) / - custom charset 2 = "?

blog.agartner.com

Alex Gartner's Blog

https://blog.agartner.com/index2.html

During the 2014 NCL post season game, one of the challenges involved solving 10,000 captchas in a row. In this post, I'll detail my solution to solving the problem. When exploiting UNIX/Linux hosts, one often needs to get a PTY in order to execute certain commands (su, sudo, vi). Hashcat Style Mask Generator. Getting the VMware Plugins Working on Linux. Fit VMware Browser Console. I realized that there is an unimplemented function called.

blog.agartner.com

Outlook Web App Keep Alive

https://blog.agartner.com/posts/6.html

Outlook Web App Keep Alive. I was annoyed at how the Outlook Web App (OWA) times out after a while (even when I tick the private box). To keep the application alive forever, it's as simple as executing the following JavaScript. SetInterval(function(){onUserActivity()}, 600000)​. This code resets the application's built in timer every 10 minutes. I've made a userscript which you can install by clicking here.