PenTest, Forensics and Rescue Live CDs
Some pentesting live CDs have been updated recently or will be shortly. Time for an overview.
Disclaimer:
Pentesting
[RP]: Obtaining NTDS.dit Using In-Built Windows Commands
The title says it all … http://blog.cyberis.co.uk/2014/02/obtaining-ntdsdit-using-in-built.html
[RP]: Avoiding Pen Test DOOM: Protecting Customer Data
Great article at SANS: Avoiding Pen Test DOOM: Protecting Customer Data
[RP]: w3af walkthrough and tutorial
w3af walkthrough and tutorial:
- part 1: w3af Tutorial Part 1
- part 2: Discovery and Audit plugins
- part 3: Remaining plugins
- part 4: w3af tools, profiles and scripting
[RP]: Fiddler and NTLM authentication
Nice post about Fiddler and handling NTLM authentication:
[RP]: Oracle Web Hacking
Oracle Web Hacking:
Part I: http://www.ethicalhacker.net/content/view/363/24/
Part II: http://www.ethicalhacker.net/content/view/399/24/