Saturday, April 26, 2008

My first cantenna



I actually made this cantenna last november, but I have been play with it a lot since school got out. I went to a thrift store the other night and got a great tripod for 2 dollars. The tripod really helps a ton. I still don't have an exact number for my gain, but I think that it gives be about an extra 5 db. I found several new open access points near my apartment the other night after I mounted it on the tripod. I think I will try a few different designs this summer.

Wednesday, April 9, 2008

PHP and SQL Injection

Lately I have been playing around a lot with PHP vulnerabilities and SQL injection. I found some really great guides on milw0rm and read as much as I could. I also needed a test box running PHP and an SQL server to experiment on. I installed XAMPP because it was so quick and easy to setup. I made a few scripts to test on, but upon further inspection on their PHP code I found that there were plenty of exploits in the sample applications. The CD app and the phonebook app both have sql injection vulnerabilities and the phonebook has a stored XSS vulnerability. I then did a google search(intitle: xampp version) and found that there are many systems on the net that have xampp installed with a default setup. I was able to learn by playing around with xampp.