Yesterday I was tasked with mapping IP/Hostnames to Google Search Results. While I was initially going to use SearchDiggity I decided to use GooDork. I’m super glad I did. This post will discuss how you can use GooDork for Bulk Site URL Enumeration.

On most linux machines that you have physical access to you will be able to get access to GRUB/LILO which is almost always an instant way to root.

This post will be very brief and just cover a little known technique for spawning a pseudo-terminal which allows for executing commands such as su, sudo, ssh, telnet, etc.

Pwning With Backtrack will be an ongoing series of tutorials ( and eventually supplemental videos ) which will go through each and every tool on the Backtrack 5 R1 OS as it appears in the list of tools and giving a brief tutorial on using these tools.

A few weeks ago while checking out the Shazam.com website I decided, “Hey, I wonder if I can find any small vulnerabilities in Shazam.” I thought of this because I had not heard of their security posture recently despite the fact that they are such a large website. I soon found myself a nice little XSS vulnerability in their search functionality.