Skilled Soft Solutions

02/03/2016

In(formation) Security || Cyber Security Kenya || Web Guy || Web Security || OWASP || Information Security Consultancy || Munir Njiru

13/08/2015

For those interested in customizing the Mth3l3m3nt Framework here are the dev docs https://github.com/alienwithin/mth3l3m3nt-framework/tree/master/dev-docs

mth3l3m3nt-framework - A tool to make web offense on the go a reality.

10/08/2015

OWASP Mth3l3m3nt Framework is a pe*******on testing aiding tool and exploitation framework. Mth3l3m3nt provides the ability to create or do custom LFI and RFI exploits fast with little or no effort at all. It also enables you to store all your quick wins based on its ability to manage HTTP bots, say…

28/01/2015

Well from the previous post we identified some flaws in the phishing attack but that’s 2014. It gets worse when phishers become this uncreative. The uncreativity was an attempt in one of the OWASP mailing lists, and seriously, OWASP , a little bit of effort is required to harvest people here but thi…

19/12/2014

It's been a fantastic year . We close off with a little bit from the research team here. Kenya's going Phishing.

Opening up the zip and HTML we see the wonders , a Gmail Phishing page , not surprised. Let’s also find where it phones after Phishing.

17/11/2014

Do you trust the cloud?

Some of the issues highlighted here are: The attack is based on attacking a try before you buy system based on simple flaws that are often ignored to gain access to a system and also a production system with actual data.

10/10/2014

What's your take on business continuity. Do you have the right solution or are you setting yourself up for a hack and eventual reputational Downfall. Check out this read to see if your solution works for you or against you.


http://munir.skilledsoft.com/business-continuity-failures/

25/09/2014

Malware Stealth

Malware disinfects a host file on open or infects it again on close depending on nature. The sequences in this vary based on nature and for reference to actions mentioned see about MSDOS API. To Download MSDOS Source.Disinfect On Open

23/09/2014

There have been a lot of links referring payvilla.com but are they real. This article is one to help identify scam sites.

23/09/2014

Relevant for ESET users and Admins :)

You need to gather update files for the current update version from a machine that is up to date and whose update cache has not been cleared as we will get it from the cache then transfer.

23/09/2014

This article is a basic little fix for the regular windows problems. At times your flash behaves funny but when you scan the antivirus claims it is clean. This is especially the case with new viruses. Its nice to do a quick check incase you suspect foul play for malware.

22/09/2014

So I recently came across the zurmo CRM which is quite cool. However I noticed it only supports installation on Apache and IIS. Not all of us use this but we use similar servers like litespeed, nginx etc. So dug alittle deeper into the software , as of this writing im talking of version 2.8.2. I was…