An alternative to the built-in search/find in TextMate is the Grep in Project command for Textmate. An even better alternative is AckMate. It can be downloaded here. Unzip the file, double click the file, and restart TextMate to fully install. After installing, go “Edit > Find > Search Project with AckMate…” AckMate searches iteratively so…
Details
The other day we were toying around with filtering out the horn noises from the World Cup matches streaming from ESPN. We found some instructions dealing with Fedora but many of the packages that were recommended were not available for CentOS. One of those packages was jack-rack which can be downloaded and installed using the information below.
Details
Yesterday afternoon a friend dropped his computer by so I could make it go a bit faster which I initially thought must just be some application using up a ton of resources or something. The issue ended up being that the computer was an older PowerPC G4 running Mac OSX 10.3 that didn’t have a lot of RAM and hadn’t been updated in a long time. I happened to have PC133 RAM to stick in it so I added 512MB of RAM and then attempted to begin the software updates which requested his administrator password which I did not have. Turns out that he didn’t have the password either so below are directions on reseting the administrator password on a Mac running OSX. The process take a little while as you are required to boot into single user mode, go back through setup, modify the admin, and then delete the temporary admin account.
Details
Booting Mac OSX into single user mode is fairly easy though I did run into an issue when using a Windows USB keyboard. Single user mode will allow you to modify the system without logging in for items such as changing the Mac OSX administrator password. Follow the directions below to boot into single user mode on Max OSX.
Details
The next tool on Backtrack 4 I am going to review is The Harvester which was written by the guys over at Edge Security. The Harvester is a tool for gathering e-mail accounts, user names and hostnames/subdomains from different public sources. It’s a really simple tool, but very effective.
The supported sources are:
Below I will go through a few examples of data mining some common search engines for usernames, email address’s and subdomains. The information gained in passive reconnaissance can be a invaluable resource for the penetration tester.
Details