Comments for FreedomCoder

Comment on “Recommend this site/page” Client-side Attack by Michael N

Michael N — Thu, 02 Feb 2012 18:33:20 +0000

AOL spammers have been abusing these forms to mail out phishing scams and spam for a very long time

Comment on El adios a una decada … The good bye to a decade by Jago

Jago — Mon, 12 Dec 2011 18:05:51 +0000

Hermosa foto =)

Comment on WEBrick Transparent Proxy + code injection. by FreedomCoder

FreedomCoder — Tue, 11 Jan 2011 17:14:46 +0000

The original post has a typo, which I made a comment with the corresponding fixed code. That might be one of the reasons why it does not work.

and Yes, it is meant to be a lame proof of concept on how to possibly implement a transparent proxy. OBVIOUSLY it is not meant to be fast or efficient, it will crash on a network with a lot of traffic. Having said this, I have a better and better implemented version that I constantly use as part of a tool I created to MiTM and replace website code on networks.

Comment on WEBrick Transparent Proxy + code injection. by r3nrut

r3nrut — Tue, 11 Jan 2011 17:07:37 +0000

This code doesn’t seem complete. There are several bugs in it. Have you actually seen this working?

Comment on Karma wireless by FreedomCoder

FreedomCoder — Tue, 28 Dec 2010 02:27:06 +0000

Tu problema no tienen mucho que ver con Karma, el problema es que esta en que ubuntu no viene con ninguna libreria para compilar paquetes. Vas a tener que instalar varios paquetes en ubuntu antes de poder compilar algún paquete. Creo que el primer paquete necesario es build-essentials y después vas a tener que ir instalando las librerias-dev correspondientes en la medida que las vallas necesitando.

Comment on Karma wireless by alberto

alberto — Tue, 20 Jul 2010 08:40:27 +0000

Hola:
estoy leyendo tu post de Freedomcoder Karma wireless.

Instale todo en ubuntu 9, he bajado el sof de Karma, lo descomprimi, instale emerge subversion.

En el momento de compilar el karma en la carpeta /scr con make me da los siguientes errores

beto@Maquina2:~/wifi$ cd karma-20060124/src
beto@Maquina2:~/wifi/karma-20060124/src$ make
cc -g -Wall -pedantic -c -o airtap.o airtap.c
airtap.c:7:19: error: stdio.h: No existe el fichero ó directorio
airtap.c:8:20: error: stdlib.h: No existe el fichero ó directorio
airtap.c:9:20: error: assert.h: No existe el fichero ó directorio
airtap.c:10:23: error: sys/types.h: No existe el fichero ó directorio
airtap.c:11:22: error: sys/stat.h: No existe el fichero ó directorio
airtap.c:12:18: error: pcap.h: No existe el fichero ó directorio
In file included from airtap.c:23:
airtap.h:48: error: expected specifier-qualifier-list before ‘u_int32_t’
airtap.h:52: aviso: struct no tiene miembros
airtap.h:55: error: expected specifier-qualifier-list before ‘u_int32_t’
airtap.h:68: aviso: struct no tiene miembros
airtap.h:71: error: expected specifier-qualifier-list before ‘u_int16_t’
airtap.h:80: aviso: struct no tiene miembros
airtap.h:83: error: expected specifier-qualifier-list before ‘u_int16_t’
airtap.h:89: aviso: struct no tiene miembros
airtap.h:92: error: expected specifier-qualifier-list before ‘u_int32_t’
airtap.h:95: aviso: struct no tiene miembros
airtap.c:32: aviso: el tipo de dato por defecto es ‘int’ en la declaración de ‘u_char’

y otros mas.

Como soy un novato en Linux y veo que los errores los da porque no encuentra los archivos de C, te pregunto que debo hacer.

Instalar C, como se hace o a que se debe que me de esos errores.
Tambien instale el ruby 1.8.

si puedes ayudarme te lo agradeceria.

Tu direccion de mail amatiasbrutti@gmail.com da erronea.

Gracias

Comment on “Recommend this site/page” Client-side Attack by Germanaz0

Germanaz0 — Fri, 16 Jul 2010 19:40:36 +0000

Hello I have been using that kind of spam methods, one time I made a GreaseMonkey script that could fill the forms and then submit it with some mail and message, but one time I had legals problems with one site, then stopped it xD…

But was kinda funny idd.

Comment on “Recommend this site/page” Client-side Attack by FreedomCoder

FreedomCoder — Wed, 14 Jul 2010 21:13:00 +0000

It all depends on who you are using/targeting. If it is self hosted site, it most surely wont have these limitations.
Nevertheless, I was not aware that hosting companies were / could limit sending this type of mail form messages created using application code. I guess it all depends on how the application is implemented.

Comment on “Recommend this site/page” Client-side Attack by Loki

Loki — Wed, 14 Jul 2010 20:51:42 +0000

Nice I’ve heard of SQL inject exploits but never thought of using a share link form like that. Some spammers would really take advantage of this too, the bad part is that site that was used might get their domain flagged as spam or even worse have their hosting services terminated for spamming. The only limittation I see with this is almost all hosting companies now limit the number of out going messages you can send on average its around 300 a day.

Comment on Installing ESearchy on Backtrack 4.0 by Client-side Penetration Testing with ESearchy & EMaily « FreedomCoder

Client-side Penetration Testing with ESearchy & EMaily « FreedomCoder — Fri, 09 Jul 2010 22:46:01 +0000

[...] Installing ESearchy on Backtrack 4.0 [...]

Comment on I’m a P1r4t3 now ! by FreedomCoder

FreedomCoder — Tue, 01 Jun 2010 20:33:18 +0000

Gracias !! y si Mucha Cerveza, hot dogs, etc .. pero por desgracia no swordfish …

Comment on I’m a P1r4t3 now ! by jk

jk — Tue, 01 Jun 2010 20:10:33 +0000

Tenés cara de haber navegado los 7 mares (de cerveza). Congrats capitán Matias Sparrow. La iniciación incluia un desafio al estilo de “swordfish” ?

Comment on Where are gem’s executables in Ubuntu? by FreedomCoder

FreedomCoder — Mon, 17 May 2010 21:02:47 +0000

OK. Let me try to go and install it myself and i’ll do a quick how-to post.

[WORDPRESS HASHCASH] The poster sent us ’0 which is not a hashcash value.

Comment on Where are gem’s executables in Ubuntu? by l3nox

l3nox — Mon, 17 May 2010 20:56:28 +0000

Hi,

I cannot correctly install Esearchy on Backtrack 4. There is a sizeable group of people which have the same problem. Whether it is possible to ask for some HOWTO???

Best Regards

Comment on Where are gem’s executables in Ubuntu? by l3nox

l3nox — Mon, 17 May 2010 20:55:51 +0000

Hi,

I cannot correctly install Esearchy on Backtrack 4. There is a sizeable group of people which have the same problem. Whether it is possible to ask for some HOWTO???

Best Regards

[WORDPRESS HASHCASH] The poster sent us ’0 which is not a hashcash value.

Comment on WEBrick Transparent Proxy + code injection. by Adam

Adam — Sun, 02 May 2010 09:30:07 +0000

Really useful post, was wondering if you could answer a couple questions..(found the webrick documentation to be a bit terse), how would you go about intercepting requests to a specific url and use that as a static file serve? And the other thing is how to best go about adding a rpc service to the proxy, so that requests to /my_rpc_service can be handled not by the proxy.

Any suggestions would be super helpful!

Thanks, Adam

Comment on Bugmenot CLI script ( updated ) by Sebastian Kayser

Sebastian Kayser — Wed, 14 Apr 2010 20:20:14 +0000

Hi Matias,

thanks for sharing this with us. Would you mind adding a few lines to use a possible HTTP proxy (configured via ENV['http_proxy']) instead of connecting directly? I was just sitting behind a company proxy and the script couldn’t connect to bugmenot.com.

Shouldn’t be too hard according to the docs [1] (my ruby knowledge is zero), one would just keep in mind that people tend to use two formats.

http_proxy=proxy:port
http_proxy=http://proxy:port

Sebastian

[1] http://www.ensta.fr/~diam/ruby/online/ruby-doc-stdlib/libdoc/net/http/rdoc/classes/Net/HTTP.html

Comment on Where are gem’s executables in Ubuntu? by FreedomCoder

FreedomCoder — Tue, 06 Apr 2010 21:24:04 +0000

You might be right. I honestly do not like Ads myself and sometimes I even block them with extensions ( I think you should do the same) .

On the other side, I have to pay for hosting for this and other websites. if I make a buck with a small ad after the post ( not in between or anything that tries to cheat users ), I think it will help pay for my website. If you think trying to make a living by getting pay for what you do is wrong, well you should tell your employeer not to pay you since you would love to work for free.

With regards to the shitty developer part , well yes, I’m not a developer, so if I even get be a shitty one I’m happy

Cheers

Comment on Where are gem’s executables in Ubuntu? by meemo

meemo — Tue, 06 Apr 2010 20:25:15 +0000

ads after each article..
You fail
Shitty website for a shitty developer.

Comment on ESearchy-ng work… by Germanaz0

Germanaz0 — Sun, 14 Feb 2010 17:56:45 +0000

There is a syntax error on:

:website => “https://www.pirulo.com”
:maxhits => 1000,
:log => true )

there is a missing comma, so the correct one is:

:website => “https://www.pirulo.com”,
:maxhits => 1000,
:log => true )

Nice script btw