Top
Search n00bz.net
  • South Florida Security Resources
    • HackMiami.org
      HackMiami is made up of information security professionals, hardware engineers, network administrators, students, and those who simply enjoy technology.
    • South Florida ISSA
      The Information Systems Security Association is, "the pre-eminent trusted global information security community".
  • PenTest Solutions
    • Rapid7 Metasploit Express
      Metasploit Express is an affordable, easy-to-use penetration testing solution that provides full network penetration testing capabilities, backed by the world’s largest, fully tested and integrated public database of exploits.
    • Core Impact PRO
      Core Impact is designed to evaluate the whole of the security in an office ecosystem. It allows the user to probe for and exploit security vulnerabilities in computer networks, endpoints and web applications.

Entries in Liberty and the pursuit of root (2)

Wednesday
Feb222012

Goot Root?

DateWednesday, February 22, 2012 at 5:57PM

Why is Linux safer than Windows? Because linux-tpreter hasn't been updated.  That is always a favorite joke I hear among the community.  Today with the update of Metasploit 4.2, I saw a module that I had always ment to check out.  Post Sudo Upgrade on a shell.

Thanks to this module by todb, post/multi/manage/sudo, getting privledge escalation on an Ubuntu host with point, click, pwn!

 

Goot Root? 

 

Yup!

Authorn00bz Network | CommentPost a Comment | Reference3 References |
tagged , in
Friday
Jul012011

Revolutions and Hackers

DateFriday, July 1, 2011 at 11:09AM

 

 

I enjoy reading all sorts of things.  Last night I was reading Hackers: Hero's of the Computer Revolution by Steven Levy

In this book, Levy delivers the 7 commandments of the personal computer revolution. 

  1. Access to computers—and anything which might teach you something about the way the world works—should be unlimited and total.
  2. Always yield to the Hands-on Imperative!
  3. All information should be free.
  4. Mistrust authority—promote decentralization.
  5. Hackers should be judged by their hacking, not bogus criteria such as degrees, age, race or position.
  6. You can create art and beauty on a computer.
  7. Computers can change your life for the better.

It got me thinking about the colonial times and how the patriots saw something wrong with the world and decided to fight for what they believed were inalienable rights, self-evident and universal.  I also started thinking about the current state of information security.  As a security researchers we find flaws in technology and try to share some Common Sense.  We call them best practices.  We believe that companies will not patch unless it is trivial to exploit the flaws in the system.  We write exploits and PoC not to hurt the world (well most of us) but to help it.  Someone asked me if I go online because of all the "hackers."  I told them I go online knowing it is safe because of the hackers.  Knowing that we as a community police the internet.  In essence, we govern it ourselves.  

 

1. Access to anything that might teach you something is good.  I have learned more from a n00b then I ever did a ninja.  It wasn't about the information, but the new way of thinking.  We need more new blood.  InfoSec mentors are a great thing.  You get fresh perspective in exchange for sharing some of your knowledge.

2. Hands-On... you can read about writing exploits or hacking but unless you fire up a VM, you are as much a hacker as I am a member of the Delta Force because I read a book about them.  Good News, the ability to learn is available.  Jump in... the only thing stopping you is you.  Interject your ideas and try it.  Be careful though... as Dual Core says, "Yes there is a substance but it is different from addiction."

3. All information should be free... This is the Freedom of Speech.  If we censor new ideas, we only limit ourself and our abilities.  Share your research, don't share stolen databases. 

4. Mistrust Authority-  We are all AAA by our very nature.  The world asks why, hackers say why not!  Trust but verify.  After all, if not for this, we would not have Patch Tuesday!  However do what you can to educate them.

5. Certs have their place, but there is no substitution for knowledge.  I know many people who are smarter than a CISSP and I know a CISSP who asked "what is a shell?"  Read up at Jaded Security about what the CISSP wont teach you.

http://jadedsecurity.net/2011/06/28/what-the-cissp-wont-teach-you/

http://jadedsecurity.net/2011/06/30/what-the-cissp-won%e2%80%99t-teach-you-part-deux/

6.  Computers are extensions of people.  Garbage in- Garbage out.  However add goodness,  brilliance, insight, excellence, ideas and a little pwn-sauce on top and the outcome is limitless.

7.  Computers can change our life for the better.  I know it changed mine!

 

In the end, we as a community hold these truths to be self-evident, that all men are created equal, that they are endowed by their Creator with certain unalienable Rights, that among these are Life, Liberty and the pursuit of Root.

Everyone have a safe 4th of July weekend.

Remember all... Every Revolution begins with a single act of defiance.  Hack the plannet.

 

 

Authorn00bz Network | CommentPost a Comment | Reference1 Reference |
tagged , in