The best socket injection system just got better Socket injection is big fun for sure. Easily drop XSS-based attacks on victim browsers with a simple regex, inject payloads within SMTP/POP emails, or simply embed raccoon pictures in every web page. However, static strings can only take us so far. There comes a point when we start thinking it would be nice for the string to be a bit more flexible, maybe even dependent on specific conditions for each injection. This is taking us into the realm of dynamic injection. Introducing dynamic injection Instead of simply asking Syphoon to insert some...
Once again this year, Swiss National Day celebrations were a great success, as well as the perfect opportunity to enjoy some family time. As always, we also enjoyed the various light shows offered by the city of Gland. The special discount we had last week was also a great opportunity to get some tools for cheap. So much so that by the end of the week the Basilisk had gone out of stock. A few more units have recently been added to the stock, so if you missed it then, this is your chance to get your hands on some...
It gives me immense joy to finally reveal what I've secretly been working on for the past months. I must admit it has been difficult to keep this to myself as I was progressing through the design and development of this new product. After many successful pentests using the Skunk gigabit switch as a way to bypass NAC (by spoofing the MAC address of a legitimate device and duplicating its traffic), I came to realize the value of this technique, which I started referring to as "ghosting". I started to understand I needed to design a device which would accomplish...
After reading many of your messages about the Skunk and its features, I was able to get a better understanding of what most users needed. I took some time the past few days to work on implementing the features that seemed to warrant the highest attention. So here it is (finally): version 1.2.0 of the Skunk firmware. In in this article I will try to present the changes brought along by this new update. A better command-line interface One of the key advantages of the Skunk is the simplicity with which it can be configured, simply by plugging in a...
I got tired of carrying a bunch of USB Ethernet dongles for my pentests. Whenever I need to connect to multiple networks, my laptop ends up looking like a degenerate squid monster. It was time to do something about this. Meet the Manifold The Manifold features three individual 10/100 Ethernet interfaces, each with its own MAC address. Connect to all the networks without turning your computer into a spaghetti creature! These are shipped with MAC addresses from the Ringtail Security prefix - read more about it here. Customizable by default As always, the STL files for the plastic case are...
- 3D print
- Swiss day