MapPress is a WordPress plugin that provides an interface to Google Maps and easily allows you to insert detailed Google Maps into WordPress posts or pages. We have a site that provides password auditing services called QD Tools and on the homepage there is a map that lists the city, state/province, and country of our customers. I have been using MapPress Pro for a long time because it offers lots of extra features and MapPress itself is such an awesome plugin I like supporting the developer. Anyhow the Google Map on the QD Tools homepage is has over 1,000 markers and continues to grow. I wanted to modify the default MapPress/Google Maps marker that was being used but there is no way in MapPress to retroactively change this so the instructions below explain how to do this.

Read the rest of this entry »

Need a quick way to generate a PHP backdoor for a compromised server you want to come back to later, then weevely is your application. I was pleasantly surprised when I started playing around with weevely in more detail as it provides a ton of built in functionality and does a lot more than I initially though that weevely did. The weevely application is built using Python and its current version on Backtrack 5 R3 is weevely v0.7. The weevley.py Python script is located in the /pentest/backdoors/web/weevely directory and some of its uses are described in more detail below.

Read the rest of this entry »

Xplico is a NFAT or Network Forensics Analysis Tool that is designed to either capture traffic in real time sessions or to provide an interface to upload PCAP (Packet Capture Data) files for analysis. The current version in Backtrack Linux 5 release 3 is 0.7 however the latest Xplico version is Xplico 1.0.1. I believe there are some dependencies required in the later versions of Xplico so I will write an updated article once Backtrack 6 comes up and the latest version of Xplico can easily be installed.

Read the rest of this entry »

It can be useful to know the debconf variables for an application you are going to install on Ubuntu Linux before installing the application. Below are the possible debconf variables to set for acidbase when installing on Ubuntu Linux 12.04 Precise Pangolin.

Read the rest of this entry »

When setting up a server or group of servers for the first time you may find yourself wanting to create MySQL users without having to login to MySQL. It would make sense for the mysqladmin command to offer this functionality but it does not. Instead you can create the MySQL user with the mysql command as shown in the below example performed on a server running Ubuntu Linux 12.04  also known as Precise Pangolin.

Read the rest of this entry »