ClsHack:Computer Security Blog    

[How-To]Bypass CAPTCHA with Python && Tesseract :D

Thursday, January 26th, 2012

The captcha was death for spam bots.
Through the CAPTCHA is possible to make our applications more secure from spammers and bots.

Da wikipedia:

A CAPTCHA is a type of challenge-response test used in computing as an attempt to ensure that the response is generated by a person. The process usually involves one computer (a server) asking a user to complete a simple test which the computer is able to generate and grade. Because other computers are assumed to be unable to solve the CAPTCHA, any user entering a correct solution is presumed to be human. Thus, it is sometimes described as a reverse Turing test, because it is administered by a machine and targeted at a human, in contrast to the standard Turing test that is typically administered by a human and targeted at a machine. A common type of CAPTCHA requires the user to type letters or digits from a distorted image that appears on the screen.

An example:

Today we see how to bypass these protections :D

(more…)

BackBox || Ubuntu CUSTOMIZATION :)

Saturday, October 29th, 2011

Carry forward the article written by the founder of the project BackBox which helps us to understand how is the build of backbox :)
This article can also be used for other distributions like ubuntu or xubuntu backbox and derivatives :)

An article like this can be found here:
KLA[much less detailed]

I copy the article step by step :)

Raffaele Forte:

(more…)

[PDF] Php Security Code Cheat Sheet :)

Wednesday, September 14th, 2011

Also on twitter find useful pdf :)
This pdf is very useful for a PHP Code Review :)
Cheat Sheet These are useful reminders while you are programming in php to write a secure code, What many do not :)


(more…)

[PDF] Cheat Sheet Post Exploitation Command Lists (Win,*UNIX)

Thursday, September 8th, 2011

Even this time, thank you twitter for profits that are posted pdf :)
Here are some Cheat Sheet to use as a reminder after entering a system, windows linux o mac :)

Are refreshed files and folders that contain useful information :)
(more…)

[Android]Debian 6 && Metasploit 4 on Galaxy S I9000

Saturday, August 27th, 2011

On Android does not always have all the tools to perform a penetration test optimal for this I decided to start on debian 6 :)

Io ho android 2.3.4 so I had to edit the startup script for a moment to make a chroot :)
The requirements are:

  • busybox;
  • root access;
  • at least 1 gb of space;
  • terminal emulator;

The result is simply fantastic :D


(more…)