Category Applications

back in 2009 I wrote a tool called FlashCRN because I was very frustrated with people getting my seats in classes I wanted to take simply by going to the dean’s office or talk their way to the registrar desk.

The tool is very simple it writes CRNs into the banner faster than humanly possible; hence it gets you the courses you want from the first try.

Recently a friend of mine mentioned that his brother is using the tool in 2022. To my surprise the tool is made available from generation to generation of students but nobody is aware that it is accessible here on this website by its original author.

You can download the tool from here: FlashCRN.zip

More than 10 years later I think the tool is very poorly written but it does the job and for the sake of authenticity and achievab...

When doing forensics sometimes it is very important to retrieve the exact version of the web page visited to see the contents at the time of visit.

Recently I had a similar task but I couldn’t find any tool for Mac OS, so I decided to ask on Twitter, however most of the answers I got were focused on Windows.

After some trail and error with Python open source tools and other paid software I found the perfect solution.

If you want to do the same you can simply copy the cached files from Mac OS and use a freeware tool from nirsoft called: ChromeCacheView

The cached files on Mac should be on ~/Library/Google/Chrome/Cache; and also concider other none primal location such:
~/Library/Application Support/Google/Chrome and
~/Library/Application Support/Google/Chrome/Default/App...

Wait; did I say BackTrack? Yes Backtrack is still a cool (outdated) distro for hacking!
If for some odd reasons you still need to use BackTrack in 2017 (hello? have you heard of Kali), I won’t judge you.
Maybe you’re doing your OSCE and need an image that is still in the course / labs

This post is meant to save you some time if you haven’t used BackTrack for a while and need to get some things done with it.

1. We want to change the root password

As part of any post exploitation in a security auditing or testing engagement you will want to gather as much info as you want about the victim to be able to target your next victim in the chain.

Having said that sometimes you stumble upon strange files, encrypted data, and network traffic that you don’t know what to do with it. One of these was an .sdf file related to hmailserver. The last is an open source mail server, you can read more about it here.

When gaining access to this server you will want to read this file:

A sample output would look something like this:

If you face a website with lot of checkboxes to check but they did not implement a ‘check all’ button. You can copy and past this code into your browser’s URL address:

Note that sometimes your browsers (Chrome in my case) scizes the ‘javascript:‘ part from such addresses. You need to type ‘Javascript:‘ manually

If you’re suffering from an ads injecting malware like this one:

Usually it is a black box showing at the button of any website you visit form any browser: Safari, Chrome, Firefox.
Don’t try to remove a plugin or extension. This malware is not a browser add-in.
I have wrote a tiny bash script to run in your mac and it will clean your system.
You can download it form here – just run it as sudo.

You can easily view the source of the script by opening it in your fav text editor.

credits: Thanks to this guy here who mentioned the process name and how to clean it.

Inspiration
I simply wanted to create my own -fast- NTLM hash cracker because the other ones online are ether dead, not maintained, obsolete, or the worst one: a rip off.
Of course the greatest inspiration was this:

Intro
NTLM is the hash mechanism used in Windows. It’s usually what a hacker want to retrieve as soon as he/she gets into the system.
Cracking NTLM hashes can also help normal users or administrators to retrieve a password without having to reset it.
Please refer to

Inspiration
No doubts, one of the best apps I’ve developed was CCleaner Runner – which got the attention of many software websites (in different languages!)such as this, this, and this.
The application was running perfectly each time, but as I believe: there is always a space of improvement. (Specially that I become better in tweaking algorithms!)

Screens

Description
CCleaner is no doubt the best cleaning app out there but one functionality that is missing is to auto clean the browser’s cache, temporary files, history, etc when closed. Many users use CCleaner to clean up their Firefox, Chrome, Opera, Safari, and IE browsers, so why not automate the whole process?

Inspiration
I see a lot of kids playing games non stop. Studies have shown that games make you smarter, but too much games can have serious consequences on your heath and the well being of your mind. I decided to build this tiny tool to  help parents to warn their kids from spending too much time on their console games.

Description
Tl;Dr: An application that will disconnect a device from the internet for a period of time every x mints.

Dependencies
airmon-ng, aireplay-ng, and vlc (optional)
apt-get install airmon-ng aireplay-ng vlc -y

Screens

Inspiration
Couple of days ago one of my siblings lost her iPhone, and because she doesn’t sync or take full backups regularly – as most of us – there was no way to retrieve the UDID (what is it?) of the iPhone so we can report it to the police and track it down.

Tool desc
I developed this Windows App to help anyone retrieve any smart phone  hardware ID (not for Apple devices only) under one condition: you have plugged it in your computer before (even for charging only. That will work too).

Screens

Credits
Thanks to this guy here who mentioned how to retrieve hardware IDs of all USB devices plugged into a Windows computer.

Disclaimer
I collect how many times you used the app.
I do not hold any responsibilities of how you use the app.
There is absolutely no guarantees using this app.

D...