Tim Berners-Lee’s vision of the World Wide Web was for a tool which created and gathered knowledge through human interaction and collaboration. Web 2.0 is a stage of development in which the Web is progressing towards this goal. Most analysts define Web 2.0 in terms of the tools that foster online participation in content creation and social interaction. This tends only to produce lists of new software applications or claims of ‘we are the web’, ‘web 2.0 is people’ etc etc. What I’ve attempted to tease out – following examples from Tim O’Reilly and Danah Boyd – is what lies beneath these tools: what makes them so important or useful? Why are they soaring in popularity?
Read the rest of this entry »

• 0 Comments

Fingerprinting is an age old concept and one that adds great value to assessment methodologies. There are several tools available for fingerprinting operating systems (nmap), Web servers (httprint), devices, etc. Each one of these tools uses a different method – inspecting the TCP stack, ICMP responses, HTTP responses. With this evolution of Web 2.0 applications that use Ajax extensively, it is important to fingerprint Ajax tools, framework or library used by a particular web site or a page. This paper describes the method of doing Ajax fingerprinting with a simple prototype serving as an example.
Read the rest of this entry »

• 0 Comments

Crawling web applications is one of the key phases of automated web application scanning. The objective of crawling is to collect all possible resources from the server in order to automate vulnerability detection on each of these resources. A resource that is overlooked during this discovery phase can mean a failure to detect some vulnerabilities. The introduction of Ajax throws up new challenges [1] for the crawling engine. New ways of handling the crawling process are required as a result of these challenges. The objective of this paper is to use a practical approach to address this issue using rbNarcissus, Watir and Ruby.
Read the rest of this entry »

• 0 Comments

The term CAD is an abbreviation of Computer Aided Design and refers to the use of a wide range of computer-based tools used by engineers, architects and other design specialists. Computer Aided Design involves both software applications, ranging from 2-dimensional vector-based drafting tools through to highly sophisticated 3D modelling systems, and specialist hardware tools including ‘wide-format’ print systems.
Read the rest of this entry »

• 0 Comments

The TriKinetics Drosophila Activity Monitoring System consists of one or more Activity Monitors, a Power Supply Interface Unit and Power Supply, and a host Macintosh or Windows PC for data collection. Each monitor uses an onboard microprocessor to independently detect and count activity events, and at periodic intervals to upload the activity totals to the host computer.

The monitors are connected to the Power Supply Interface Unit by a network of conventional 4-wire telephone cables which supply operating power and lines for data transmission. Monitors may be plugged and unplugged from the network at will without disturbing the activity of other monitors.
Read the rest of this entry »

• 0 Comments

Current tools to analyze memory dumps of systems running Microsoft Windows usually build on the concept of enumerating lists maintained by the kernel to keep track of processes, threads and other objects. Therefore they will frequently fail to detect objects that are already terminated or which have been hidden by Direct Kernel Object Manipulation techniques.
Read the rest of this entry »

• 0 Comments

This guide does not cover the administrative aspects of a compromise, rather it is intended to outline useful tips in finding malware, links to tools for examining the system and define the reasons for undergoing this work.

This document will deal with basic levels of intrusion analysis, aimed mainly at intrusions on desktop systems, or initial examination of servers. It is not an in depth technical discussion of recovery of mission critical servers. It should also be noted that a number of these tools will change the file system - this will more than likely make the drive inadmissible as evidence. If you think you might want to involve law enforcement, this isn’t the guide to read!
Read the rest of this entry »

• 0 Comments

Photoshop Elements is an image editing program you can use to prepare images for your story.
Photoshop allows you to resize and crop photos, fix flaws in the image, and composite images together into a collage.

Step 1 – Opening Program and Getting Photos
After opening up the software you will see the “welcome” window. Select “Browse for File.” This will open up the Browser window. Use the window in the upper left to navigate to your “rough images” folder. You should now see your rough images in the Browser.
Read the rest of this entry »

• 0 Comments