H4hacks

Hey Folks, Update Apr 2018 : Finally added environmental metric to the sheet. Thanks to Lejla Memic for reading my blog and inspiring me to do it :). The Git now contains a new file with environment metric. Hope it helps What is going on? So i was searching for a decent example of CVSS Version 3 calculator in an excel spread sheet and i could not find it, though i got few formulas. So i thought may be i should do it. So here it is you can find a working calculator done in excel from the below link https://github.com/moheshmohan/cvssv3_Excel/ Please feel free to use it and modify it. Also please note that i have only considered the base metrics and temporal metrics in performing the calculations. It should be easy to add environmental too if you need that. You can find all the documentation on CVSS v3 here in the below link https://www.first.org/cvss/specification-document Hope you find this helpful somewhere. Please let me know your feedback via comments Thanks

Hi Folks, So if you are playing around with kali linux on a VM you might have faced the issue of getting the vmware tools work properly. Especially when you want to copy paste files and clipboard contents between guest and host. This is very annoying thing and took lot of my precious time when i was doing OSCP course. Here is how i fixed it. My Setup I run a kali linux distro on vmware player which is recommended for doing the OSCP course. By default it has GNOME as the default GUI. I kind of hate it as it uses lot of resources and has all those stupid animations and stuff. I want something clean and precise when i am working, i am not into looks and too many features, just the bare minimum responsive system is always my favourite. So I installed LXDE which is light weight GUI for linux. you can install it with following command apt-get install lxde-core lxde kali-defaults kali-root-login desktop-base This will not make LXDE you default GUI, so if you reboot, you will n...

Hi Security enthusiast, So if you were following closely on recent developments regarding SSL/TLS security, you might have heard that Qualys SSL labs released an API to automate the testing of internet hosted applications with their awesome hosted testing solution. If you have not heard about it here is the location to their server testing page -  https://www.ssllabs.com/ssltest/ And their API documentation here -  https://github.com/ssllabs/ssllabs-scan/blob/master/ssllabs-api-docs.md So now that the API is released you can automate testing of any number of servers with any language that is able to talk with qualys server via HTTP protocol. My company wanted to test all of our servers with SSL labs, so i thought why can't i automate it with python or something. So here it is, i made a multithreaded python script to test a large number of servers in one go and get results in neat format that my management wanted :-) The script is intended for python 2.7 Yo...

Hey guys, So here is a glimpse of my training trip to Abu Dhabi for SANS 2014. The course i attended was SEC-575 Mobile device security and ethical hacking. I really had a great time and the session was very informative. Since its not fare to shoot a video of the entire session and upload it on YouTube here in the below video is just glimpse to give you a feel of the class. Enjoy ... here it is Abu Dhabi was really beautiful and i really enjoyed the entire week though i was alone :P SEC575 course is awesome and i really learned quite a few tricks from the session. The instructor was Tim Medin and he was a cool guy. Here is myself and Tim. You can go through a lot of pics that i took on my facebook album here  https://www.facebook.com/mohesh.mohan/media_set?set=a.10152110007848811.1073741839.611573810&type=3

Howdy folks So my mission this time is to run Linux on cheap Chinese MK808 Minipc which comes with stock android and can be connected to your HDMI television and make it smart. This device is powered by an ARM 1 GHZ dual core processor, plenty of RAM, good GPU and internal WiFi all compressed into little tiny dongle which is slightly bigger than a normal flash drive. With its dual-core 1.6-GHz Rockchip RK3066 CPU, 1GB of RAM and 8GB of internal storage, the MK808 Android Stick PC provides solid performance that's good enough for playing full-HD movies, surfing the Web and even doing some gaming. Noted Android developer Finless makes a custom ROM for the MK808 and available for download on freaktab.com. This custom ROM allows full 1080p output, a set of additional launchers and the ability to remotely control your Mini PC from an Android phone or tablet. After downloading Finless ROM and connecting the MK808 to a Windows PC while pressing a paper clip into a hole o...