Land of the Geek

How to Brute Force Subdomains with dnsmap

Command Line, GNU/Linux, Hacking No Responses »

Apr 182012

This tutorial will cover how to use dnsmap to brute force subdomains of a specific domain. dnsmap is mainly meant to be used by pentesters during the information gathering/enumeration phase of infrastructure security assessments.

First things first, you’re going to want to download dnsmap which is at http://code.google.com/p/dnsmap/.

After you’ve downloaded the source code now would be the time to add any extra subdomains you’d like to search for, you can do that by editing the dnsmap.h file, you’d want to add the subdomains after // buil-in list of subdomains comment, it’s a long list you can’t miss it !

If you’re done editing the dnsmap.h file or don’t want to add any extra subdomains the next step would be to compile the source, you can do this by opening your terminal, changing to the directory of the source, and compiling it.

Example:
cd dnsmap-0.30/
gcc dnsmap.c -o dnsmap

Once you’ve compiled the source you can run dnsmap by typing ./dnsmap and then the domain you want to scan into your terminal, make sure to exclude the www.

Example:
./dnsmap domain.com

This was tested on Ubuntu 10.04

How to Disable Kaspersky 2012 Password Protection

Hacking, Kaspersky, Windows No Responses »

Mar 252012

I was at work trying to read an article about aircrack-ng and Kaspersky wouldn’t let me view the website , saying something absurd about it being “illegal software”. The first thing I tried was shutting Kaspersky down but that didn’t work since password protection was enabled. . I then tried to stop the Kaspersky process using the task manager but Kaspersky didn’t appear to be in the process list, I didn’t try very hard, just a quick google search to find out the process name. I then searched google with bypass kaspersky password protection and came up with an answer from a Kaspersky support page (seems odd to me, that they tell you how to hack their own software).

I’d advise you to back up your registry before you do anything!!!

On the support page it said to:
1. Download passoff2012.zip
2. unpack all files (which contain two .reg files)
3. restart your computer in safe mode
4. and then run the corresponding .reg file
(x86.reg for 32bit OS) or (x64.reg for 64-bit OS)
5. click yes, when the registry editor asks to confirm changes

I did this a little differently, I booted into safe mode, ran the registry editor (regedit.exe) and edited the registry key myself.

Tested on Windows 7
to disable the password protection in x86:
1. boot into safe mode (make sure Kaspersky isn’t running)
2. open a command line and type “regedit.exe”
3. once inside the editor go to HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\protected\AVP12\settings and look for and entry that reads “EnablePswrdProtect”.
4. Right click on “EnablePswrdProtect” and select modify.
5. The value data should read 1, change it to 0, click ok and reboot.

Not Tested
to disable the password protection in x64:
1. boot into safe mode (make sure Kaspersky isn’t running)
2. open a command line and type “regedit.exe”
3. once inside the editor go to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\protected\AVP12\settings and look for and entry that reads “EnablePswrdProtect”.
4. Right click on “EnablePswrdProtect” and select modify.
5. The value data should read 1, change it to 0, click ok and reboot.

Notes
I didn’t test the one for the 64 bit OS but the only thing that is different is the registry location, you could alterantively download the .reg files from the Kaspersky website.

Sudo Make me a Sandwich

GNU/Linux, Humor No Responses »

Mar 242012

I know this came out a long time ago but it’s hilarious!!!!!!!

How to Automatically Run a Command on Reboot in GNU/Linux

Command Line, GNU/Linux No Responses »

Mar 232012

There are many reasons you might want to run a command on boot, whatever the reason it’s easily accomplished with cron. Cron is a time-based job scheduling utilty that enables users to schedule jobs (commands or shell scripts) to run periodically at certain times or dates. Crontab (CRON TABle) is a file which contains cron entries of what you want to run and when.

To schedule a cron job in an open terminal type:
sudo crontab -e

In the command above we’re using sudo then crontab with the -e flag to edit the crontab file. This will open your crontab file in a terminal editor, once in the editor add:
@reboot command you want to run

After you’re done editing the file, save it and reboot to see if it works

If you would like to see what entries you have in your crontab file in an open terminal type:
sudo crontab -l

The -l flag lists all of the crontab entries.