Powershell

Powershell starting
http://www.howtogeek.com/137803/geek-school-learn-how-to-automate-windows-with-powershell/?PageSpeed=noscript

Maybe Cygwin is better
http://www.kossboss.com/windows---cygwin---how-to-start-a-sh-shell-script-from-a-windows-batch-bat-script
http://www.cygwin.com/

http://community.linuxmint.com/tutorial/view/313

wget
http://www.gnu.org/software/wget/manual/wget.html#URL-Format

Xmlrpc and Allowing/Denying Hosts

Xmlrpc.php exploit
https://wordpress.org/support/topic/wordpress-22-xmlrpcphp-remote-sql-injection-exploit

host.allow and host.deny
http://its.virginia.edu/unixsys/sec/hosts.html

WordPress .....

What is X Pingback?
http://wordpress.stackexchange.com/questions/76088/x-pingback-and-xmlrpc

Vulnerabilities anyone
http://blog.vaultpress.com/2015/05/06/genericons-xss-vulnerability-wordpress-4-2-2/

PlugIns the weakest link
http://wordpress.stackexchange.com/questions/3068/how-to-detect-wp-plugins-used-on-a-site

http://www.wpsolver.com/how-to-find-out-what-wordpress-plugins-a-site-is-using/

http://www.wpthemedetector.com/
 

I Need to Get This Off My Chest

Because it's heavy
http://www.projectswole.com/weight-training/the-top-5-best-chest-exercises/

Maybe I should stand up for a little bit
http://healthyliving.azcentral.com/pectoral-exercises-standing-13027.html

Let me lie down for a minute
http://www.menshealth.com/deltafit/build-gorilla-chest

Alright, I am ready to put it together
http://www.mensfitness.com/training/build-muscle/30-minute-chest-workout

Shoulder Exercises

For help when shrugging because I do not know what I am doing.

http://www.mensfitness.com/training/build-muscle/30-minutes-to-3-d-shoulders

VM Basics

Shortcut to exit Scaled Mode
http://stackoverflow.com/questions/10716899/shortcut-to-exit-scale-mode-in-virtualbox
Hint: It's not Left Control

Screenshoting with Nmap

simple right?.....

https://www.trustwave.com/Resources/SpiderLabs-Blog/Using-Nmap-to-Screenshot-Web-Services/

https://www.pentestgeek.com/penetration-testing/using-nmap-to-screenshot-web-services-troubleshooting/

http://wkhtmltopdf.org/downloads.html

WAT is GET POSTing text in my column

What is wat?
http://filext.com/file-extension/WAT

I will take long strings that do not appear to be what the are for 1000 Alex
http://systemexplorer.net/file-database/file/ppcrlconfig600-dll/12806009

GET that POST in there
http://systemexplorer.net/file-database/file/ppcrlconfig600-dll/12806009
http://stackoverflow.com/questions/198462/is-either-get-or-post-more-secure-than-the-other

Excel text to column - helpful and annoying
http://www.mrexcel.com/td0129.html

Excel is my life right now......

Subtotal Function in Excel
http://www.exceltrick.com/formulas_macros/subtotal-function-in-excel/
http://spreadsheetpage.com/index.php/tip/count_autofiltered_rows/

And more vlookup stuff
http://spreadsheets.about.com/od/excelfunctions/ss/vlookup.htm
http://www.howtogeek.com/howto/13780/using-vlookup-in-excel/?PageSpeed=noscript

ISNA
http://www.techonthenet.com/excel/formulas/isna.php

MS Excel: ISNA Function 

Used to check for a #N/A (value not available) error.

Syntax

ISNA( value )

Parameters or Arguments

value

The value that you want to test. If value is a #N/A error value , this function will return TRUE. Otherwise, it will return FALSE.

Bad IPs & using & in Excel

Everyplace you do not want your system visiting
https://zeltser.com/malicious-ip-blocklists/
https://www.dshield.org/ipsascii.html?limit=10000

Getting rid of those annoying 0's in ip addresses
http://superuser.com/questions/931682/excel-remove-leading-0s-from-ip-address

& in case you don't concatenation is:
http://www.ehow.com/how_2189391_use-excels-concatenate-function.html

New Stuff (PRSSI), FP Stuff (Path Traversal, Cache-Control)

PRSSI - really long acronym and really long process to exploit, but it works

 http://blog.portswigger.net/2015/02/prssi.html

What the people say

http://www.reddit.com/r/netsec/comments/2w7ei1/detecting_and_exploiting_pathrelative_stylesheet

Oh yeah, I forget how that works.

https://www.owasp.org/index.php/Path_Traversal

Confusion about cache-control. So simple really.

http://securityevaluators.com/knowledge/case_studies/caching/

www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.9.1

http://stackoverflow.com/questions/12908766/what-is-cache-control-private

And behind the scences.

http://www.w3.org/Protocols/HTTP/Issues/cache-private.html

CEH Stuff

Practice Exams
http://www.boson.com/certification/ceh

One man's experience
http://packetpushers.net/certified-ethical-hacker-v7-certification-review/

Man is this expensive
http://www.globalknowledge.com/training/dates.asp?pageid=9&catid=191&courseid=20241&country=United+States

http://www.infosecinstitute.com/courses/ethical_hacking_training.html

http://www.netcomlearning.com/courses/details.phtml?sid=52109

http://www.onlc.com/outline.asp?loc=CTST&ccode=SCEH80

The Fun Side of SQL

http://zerofreak.blogspot.com/2012/01/chapter2-basic-sql-injection-with-login.html

http://www.techrepublic.com/article/why-sql-injection-attacks-are-successful-a-ponemon-report-offers-interesting-insight/

VM Attacks, Session Hijacking/Fixation

What is the different between session hijacking and session fixation?
http://oxhat.blogspot.com/2013/02/session-hijacking-and-fixation.html?_escaped_fragment_=#!

https://en.wikipedia.org/wiki/Session_fixation (I think this page needs editing.)

https://en.wikipedia.org/wiki/Session_hijacking

Or maybe it is Session Spoofing


VM Vulnerabilites
http://security.stackexchange.com/questions/3056/how-secure-are-virtual-machines-really-false-sense-of-security