Minggu, 29 April 2012
adamdbradley / foresight.js
Foundation Icon Fonts, FTW!
Foundation Icon Fonts, FTW!
http://www.zurb.com/playground/foundation-icons
Foundation Icon Fonts, FTW!
Penetration Testers Get Ready - BackBox Linux 2.05 released !
mruby / mruby
!Notice!!
This is a preliminary release for internal team review.
The URLs and addresses described below are not available yet.
The official release will be announced later.
Any suggestion for modification is welcome.
Delays in replies are to be expected. Sorry in advance.
What's mruby
https://github.com/mruby/mruby (Read More..)
MariaDB's Virtual Columns
I wanted to evaluate MariaDB's virtual column and see if it could store business rules next to table data. With virtual columns this could be done and if you specify as 'virtual', would not even take up space on disk.
The imaginary use case is that there is a sales team in a company and you would like to evaluate if a particular salesperson is eligible for a bonus. In order to get a bonus, you need to sell above the average for the day and be in the top 5 amongst the salespeople.
So here is what I did:
MariaDB [test]> create table salespeople (id int unsigned not null auto_increment primary key, salesperson_id int unsigned not null , `date` datetime not null default 0, sold decimal(15,2) not null default 0, day_avg decimal(15,2) not null default 0, above_avg char(1) as (if(sold>day_avg,'Y','N')) virtual);
Query OK, 0 rows affected (0.02 sec)
http://www.jonathanlevin.co.uk/2012/04/mariadbs-virtual-columns.html
(Read More..)
Extracting one table from mysqldump or phpMyAdmin backup
philsturgeon / codeigniter-restserver
CodeIgniter Rest Server
Google's SPDY module accelerates Apache
Physical Memory Analysis with the LiME Linux Memory Extractor
The LiME Loadable Kernel Module allows digital investigators to perform physical memory analysis on Linux and Linux-based devices such as Android smartphones. LiME could capture currently running and previously terminated apps, for example, and the IP addresses of other devices to which it has connected. In this Linux.com interview, Joe Sylve, a Senior Security Researcher at Digital Forensics Solutions, explains what LiME is and how it works.
https://www.linux.com/learn/tutorials/565969:physical-memory-analysis-with-the-lime-linux-memory-extractor
winAUTOPWN v3.0 Released - System vulnerability exploitation Framework
http://thehackernews.com/2012/04/winautopwn-v30-released-system.html (Read More..)
Rootdabitch version 0.1 - Multithreaded Linux root password Bruteforcer
http://thehackernews.com/2012/04/rootdabitch-version-01-multithreaded.html
PageSlide
a jQuery plugin which slides a webpage over to reveal an additional interaction pane
by Scott Robbin
http://srobbin.com/jquery-plugins/pageslide/
Javascript Enlightmnet
Stored Cross Site Scripting via File Upload
jQuery File Upload Demo
(Read More..)File Upload widget with multiple file selection, drag&drop support, progress bars and preview images for jQuery.
Supports cross-domain, chunked and resumable file uploads and client-side image resizing.
Works with any server-side platform (PHP, Python, Ruby on Rails, Java, Node.js, Go etc.) that supports standard HTML form file uploads.
QRCode Attack Vector
140medley
140 medley
Size
- Source: 8.6 kb
- Minified: 821 bytes
- gzipped: 504 bytes
Features
- templating -
t();
- local storage -
s();
- bind/unbind events -
b();
- create DOM elements -
m();
- DOM selector -
$();
- Get cross-browser xhr -
j();
Backup your sandbox with XtraBackup
Today I tried to make incremental backups of a MariaDB instance in a MySQL sandbox with Percona XtraBackup.
I used the recently released XtraBackup 2.0. And of course there is documentation about making incremental backups.
MySQL sandbox makes it easy to run many different MySQL versions on one machine. It does this by changing the port number, data directory, UNIX socket location and a whole lot more.
So I first started with a full backup and after that I used that backup as a base for the incremental backups. To do that I had to specify the port number which is 5522 and the username and password for the msandbox account. As MySQL uses a UNIX socket instead of a TCP connection if the hostname is localhost I specified 127.0.0.1 as hostname to force a TCP connection. That worked!
Then I created the incremental backup by using the --incremental option and the --incremental-basedir option to specify the location of the full backup. That also worked!
http://databaseblog.myname.nl/2012/04/backup-your-sandbox-with-xtrabackup.html
Why a statement can be unsafe when it uses LIMIT clause?
STATEMENT
, MySQL generates such message when it considers that a query is ambiguous and could behave differently each time it executes against the same data set. Such situation could happen, for example, on a replication slave, or on a restored backup where binary logs are used for point-in-time recovery.Codeigniter Snippets Package for Sublime T. 2
Making signed requests with CodeIgniter
1. Place this file in application/libraries/
2. Load or autoload it
3. In your controller, use this to validate a request:
if($this->checksum->validate()){ # keep calm and carry on }else{ # respond that the checksum was bad }
http://earthpeople.se/labs/2012/04/signed-requests-with-codeigniter/(Read More..)
QArt Codes
weevely
- More than 30 modules to automatize administration and post exploitation tasks
- Execute commands and browse remote filesystem, even with PHP security restriction
- Audit common server misconfigurations
- Run SQL console pivoting on target machine
- Simple file transfer from and to target
- Spawn reverse and direct TCP shells
- Bruteforce passwords of target system users
- And so on..
- Backdoor communications are hidden in HTTP Cookies
- Communications are obfuscated to bypass NIDS signature detection
- Backdoor polymorphic PHP code is obfuscated to avoid HIDS AV detection
Sabtu, 28 April 2012
Senin, 16 April 2012
Tonedef : Phone Phreaking using Bluebox Demonstrated in India
Minggu, 15 April 2012
Project: What's In A GIF - Bit by Byte
http://matthewflickinger.com/lab/whatsinagif/bits_and_bytes.asp
Sabtu, 14 April 2012
The MySQL “swap insanity” problem and the effects of the NUMA architecture
The “swap insanity” problem, in brief
When running MySQL on a large system (e.g., 64GB RAM and dual quad core CPUs) with a large InnoDB buffer pool (e.g., 48GB), over time, Linux decides to swap out potentially large amounts of memory, despite appearing1 to be under no real memory pressure. Monitoring reveals that at no time is the system in actual need of more memory than it has available; and memory isn’t leaking, mysqld‘s RSS is normal and stable.Normally a tiny bit of swap usage could be OK (we’re really concerned about activity—swaps in and out), but in many cases, “real” useful memory is being swapped: primarily parts of InnoDB’s buffer pool. When it’s needed once again, a big performance hit is taken to swap it back in, causing random delays in random queries. This can cause overall unpredictable performance on production systems, and often once swapping starts, the system may enter a performance death-spiral.
While not every system, and not every workload experiences this problem, it’s common enough that it’s well known, and for those that know it well it can be a major headache.
The history of “swap insanity”
Over the past two to four years, there has been an off-and-on discussion about Linux swapping and MySQL, often titled “swap insanity” (I think coined by Kevin Burton). I have followed it closely, but I haven’t contributed much because I didn’t have anything new to add. The major contributors to the discussion over the past years have been:- Kevin Burton — Discussion of swappiness and MySQL on Linux.
- Kevin Burton — Proposed IO_DIRECT as a solution (doesn’t work) and discussed memlock (may help, but not a full solution).
- Peter Zaitsev — Discussed swappiness, memlock, and fielded a lot of discussion in the comments.
- Don MacAskill — Proposed an innovative (albeit hacky) solution using swap on ramdisk, and a lot more interesting discussion in the comments.
- Dathan Pattishall — Describes how Linux behavior can be even worse with swap disabled, and proposes using swapoff to clear it, but no real solution.
- Rik van Riel on the LKML — A few answers and proposal of the Split-LRU patch.
- Kevin Burton — Discussion of Linux Split-LRU patch with some success.
- Mark Callaghan — Discussion of vmstat and monitoring things, and a recap of a few possible solutions.
- Kevin Burton — More discussion that Linux Split-LRU is essential.
- Kevin Burton — Choosing the middle road by enabling swap, but with a small amount of space, and giving up the battle.
- Peter Zaitsev — More discussion about why swapping is bad, but no solution.
There was a lot of discussion and some work went into adding the relatively new swappiness tunable a few years ago, and I think that may have solved some of the original problems, but at around the same time the basic architecture of the machine changed to NUMA, which I think introduced some new problems, with the very same symptoms, masking the original fix.
http://blog.jcole.us/2010/09/28/mysql-swap-insanity-and-the-numa-architecture/
(Read More..)
WordPress and PayPal: An Introduction
Mosh mobile shell
http://mosh.mit.edu/#
Toying With the HTML5 File System API
Facebook PHP SDK and CodeIgniter for basic user authentication
[Live !] Slides from MySQL Conf 2012 and full Twitter stream
UltraDefrag
UltraDefrag is a disk defragmenter for Windows, which supports defragmentation of locked system files by running during the boot process. It is easy to use without any complicated scripting or a huge load of configuration settings. You can filter the files processed by size, number of fragments, file name and path. You can terminate the process early by specifying an execution time limit.
http://sourceforge.net/projects/ultradefrag/