kwepik9

Selasa, 01 Januari 2013

Python For Beginners

Diposting oleh kwepik di 02.08 . Selasa, 01 Januari 2013 . Label: Python

http://www.pythonforbeginners.com/

(Read More..)

proper PHP session setup

Diposting oleh kwepik di 02.06 . Label: PHP, Security

/* In a nutshell, this is a quick way to ensure your sessions are difficult to attack. There may be

* ways to improve this configuration but it's a good starting point, I feel.

* Code released in accordance with the ZAP > http://tlwsd.info/LICENSE.txt

* Requirements: HTTPS (get a free cert from StartSSL.com if you have no money :P)

* A well-configured webserver (see: Calomel.org)

* Access to server config is a bonus because you can just change php.ini and not have to make a bunch of runtime calls to ini_set() thus boosting performance

ini_set('session.cookie_httponly', true);

# Above: Tells the user's browser to not expose session cookie contents to Javascript

ini_set('session.cookie_secure', true);

# Above: Tells the user's browser to not expose session cookie contents to unencrypted HTTP

ini_set('session.entropy_file', '/dev/urandom'); // On BSD systems, you may wish to use use /dev/arandom

ini_set('session.entropy_length', '32');

ini_set('session.hash_function', 'sha256');

ini_set('session.hash_bits_per_character', '6');

# Above: Use strong pseudorandom data in the session IDs to prevent session fixation

ini_set('session.use_trans_sid', false);

session_start();

// All configuration must be set before session_start();

(Read More..)

Face Down

Diposting oleh kwepik di 02.05 . Label: Facebook, Linux, Security

Description

Face Down | is a Facebook Cookie / Session Hijack Bash (sh) script that depends on two well know sniffers (Ettercap) and (TShark) "the Terminal based version of (Wireshark)" ,the basic job that it does is that it sniff the cookies all over the (HTTP) protocol all over the network.
This script was made as a POF (proof of concept) script for school project.
KEEP IN MIND THAT:
This tool/script is meant only for educational purposes on user's own computer/network or computers/networks the user has permission of owner thereof to use the tool/script on. The creator assumes no responsibility for any damage caused from misuse of the software.

Special Thanks to the web developers:
Mahran Omairy & Ibraheem Abu-kaff

This script was written by:
Noras Salman & Ali Shatrieh

http://sourceforge.net/projects/facedown/

(Read More..)