Friday, May 15, 2020

Last day

What a week! Right now the whole country is shutdown.

At the same time, here at Guerilla Realty we've decided to go on the attack. Real estate deals are still being done and we want to help our users be the ones to do them.

Let's recap...

1. You wanted a proven formula to continue growing your business even in a possible recession

2. I showed you my Craigslist playbook on Tuesday's webinar

3. Then I showed you my secret weapon for making it all work: Pipeline Pro Tools

Pro Tools makes getting to your Lead Number 100x easier and more effective. It's the set of tools my team uses to capture 250+ quality leads per month alongside 695 other top-producing teams/agents around the country.

For agents who attended the webinar on Tuesday we're giving $200 off, making it only $1199 $999 for the entire year.

Plus 2 more insane bonuses

Bonus #2 - 6 proven marketing playbooks by me, Kevin Kauffman, Jason Morris, Ruben Garcia, and others. ($149 each $0.00)

Bonus #3 - 6 months enrollment in Elite Group Coaching ($497/month $0.00)

>>> Get the deal now <<<

Promo Code: "JAMESHOFF"

Now half of you wants to wants to jump all the way in and start building a lead generation machine just like the ones I laid out in each of the webinars this week. Can you imagine attracting new listing appointments on auto-pilot?

But... the other half of you is telling yourself to just be "realistic" and stay satisfied with the way things are right now.

I'll be honest: there's a very good reason we all have that half (including me).

It's there to protect us from that awful feeling of failure.

No one wants to invest time, energy, and money into something only to see it not work. And we've all been there before with some "program" in the past (that program is most likely now on the shelf or in the trash).

I'm not going to promise you a magic bullet. But I will promise you this: If you join Pipeline Pro Tools, do the work (and can show you did the work), and you don't get results... then not only can you cancel but we'll insist on giving you a full refund. This is a guarantee our company lives and dies by.

Investing in marketing tools shouldn't force you to take a massive risk. This way, all the risk is on us, as it should be.

But if you wait much longer this opportunity will disappear.

>>> Get the deal now <<<

Promo Code: "JAMESHOFF" expires tonight at midnight.

All the best,

-Chris Jones

Kelly & Matt

Pre-S - We only have 7 demo slots left this week for our Pipeline Pro Tools software. If you want to get one before our Next Level deal expires and to take advantage of our 1-free-playbook offer, click here to book one before they're gone.

Today, you get to decide. What approach are you going to take to your business over the next 2-3 months?

Right now there are 2 options agents can choose from:

Option #1 - Play defense. Save, cut expenses, complain about the govt, be scared, hope and pray, refresh CNN and facebook all day. (<-- This is what 80% of agents will do.)

OR

Option #2 - Offense. Attack! Double down on lead gen. Look for new angles. Have your best month EVER.

Most agents will choose option 1. It's definitely easier. It shifts responsibility onto someone else (the virus, the govt, the economy, etc).

...or you can be like Kelly.

Kelly joined my "lead machine" webinar earlier this month.

That night, she was restless. She downloaded the calculators and went to work reverse engineering her business. Figuring out how to grow in ANY market.

She calculated her lead number (91), then she got to work on the free marketing playbook we gave her. No excuses, no wasting time. She just took action.

The next morning, she woke up to 3 new leads in her inbox. See below:

Now is she rich yet? No. She will hit her lead number this month (she has generated 25 more leads since that screenshot), and the commission checks will follow...

...just like Matt Mouser.

Matt Mouser's practice is in Belmont, Michigan, a suburb of Grand Rapids.

He started out in real estate as the lowest member on a big team -- barely making it from deal to deal.

And because he was completely dependent on his team for leads, his split was brutal. He only kept ~40% of each commission.

But what could he do? He had no traction and no way to consistently get new customers.

That's when Matt and I met. I walked him through the Craigslist Playbook that I shared yesterday (and the same one Kelly went through).

For the first time ever, he was able to answer the question "What should I be focusing on today to grow my business?"

Then he joined Pipeline Pro Tools and ran just 1 of our plug-and-play marketing playbooks to start bringing in leads.

Within 30 days his pipeline was full.

Within 60 days he was working with multiple buyers and took his first listing.

And within 90 days he had closed his first deal.

(Oh, and by the way, he left his team and was now making a full 80%.)

Matt doubled his income two years in a row.

From $30k to $120k+.

But most importantly? He is completely in control of his business. He can turn his leads on or off like a faucet.

If you want to see results like this, don't miss our workshop deal on Pipeline Pro Tools.

Enter promo code "JAMESHOFF" to get $200 off the yearly option + 6 marketing playbooks + 6-months free enrollment in Elite, our private group coaching (reg. $497/mo.)

>>> Get Pipeline Pro Tools Now <<<

If you still have questions or you just want to see it, get a demo.

>>> Book a Demo <<<

If you book a demo, the deal will automatically be extended thru the day of your demo.

Plus right now, if you book a demo we'll give you 1 of our top 3 internal marketing playbooks that we use to generate 250+ quality leads for our local real estate team.It's your choice which one you want, and it's yours to keep forever (no strings attached).

And feel free to reply to this email if you have any questions!

Thanks,

-Chris Jones

Lockdoor-Framework: A PenTesting Framework With Cyber Security Resources


About Lockdoor-Framework
    Author: SofianeHamlaoui
   Tested on: Kali Linux, Ubuntu, Arch Linux, Fedora, OpenSuse and Windows (Cygwin)

   LockDoor is a Framework aimed at helping penetration testers, bug bounty hunters And cyber security engineers. This tool is designed for Debian/Ubuntu/ArchLinux based distributions to create a similar and familiar distribution for Penetration Testing. But containing the favorite and the most used tools by Pentesters. As pentesters, most of us has his personal ' /pentest/ ' directory so this Framework is helping you to build a perfect one. With all of that ! It automates the Pentesting process to help you do the job more quickly and easily.

Lockdoor-Framework installation:
   For now, Lockdoor-Framework supports Debian-based Linux distros (Kali Linux, ParrotSec, Ubuntu...), Arch Linux based distros (Manjaro, BlackArch, ArchStrike...), Fedora, OpenSuse, Cygwin on Windows.

   Open your Terminal and enter these commands:

You can watch detail here:

Lockdoor Tools contents 🛠️:
 * Information Gathering 🔎:
  • dirsearch: A Web path scanner
  • brut3k1t: security-oriented bruteforce framework
  • gobuster: DNS and VHost busting tool written in Go
  • Enyx: an SNMP IPv6 Enumeration Tool
  • Goohak: Launchs Google Hacking Queries Against A Target Domain
  • Nasnum: The NAS Enumerator
  • Sublist3r: Fast subdomains enumeration tool for penetration testers
  • wafw00f: identify and fingerprint Web Application Firewall
  • Photon: ncredibly fast crawler designed for OSINT.
  • Raccoon: offensive security tool for reconnaissance and vulnerability scanning
  • DnsRecon: DNS Enumeration Script
  • Nmap: The famous security Scanner, Port Scanner, & Network Exploration Tool
  • sherlock: Find usernames across social networks
  • snmpwn: An SNMPv3 User Enumerator and Attack tool
  • Striker: an offensive information and vulnerability scanner.
  • theHarvester: E-mails, subdomains and names Harvester
  • URLextractor: Information gathering & website reconnaissance
  • denumerator.py: Enumerates list of subdomains
  • other: other Information gathering,recon and Enumeration scripts I collected somewhere.
  • ReconDog: Reconnaissance Swiss Army Knife
  • RED_HAWK: All in one tool for Information Gathering, Vulnerability Scanning and Crawling
  • Dracnmap: Info Gathering Framework
 * Web Hacking 🌐:
  • Spaghetti: Spaghetti - Web Application Security Scanner
  • CMSmap: CMS scanner
  • BruteXSS: BruteXSS is a tool to find XSS vulnerabilities in web application
  • J-dorker: Website List grabber from Bing
  • droopescan: scanner, identify, CMSs, Drupal, Silverstripe.
  • Optiva: Web Application Scanner
  • V3n0M: Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
  • AtScan: Advanced dork Search & Mass Exploit Scanner
  • WPSeku: Wordpress Security Scanner
  • WPScan: A simple Wordpress scanner written in python
  • XSStrike: Most advanced XSS scanner.
  • SQLMap: automatic SQL injection and database takeover tool
  • WhatWeb: the Next generation web scanner
  • joomscan: Joomla Vulnerability Scanner Project
  • Dzjecter: Server checking Tool
 * Privilege Escalation ⚠️:
  • Linux 🐧:linux_checksec.sh
       linux_enum.sh
       linux_gather_files.sh
       linux_kernel_exploiter.pl
       linux_privesc.py
       linux_privesc.sh
       linux_security_test
       Linux_exploits folder
  • Windows Windows:   windows-privesc-check.py
       windows-privesc-check.exe
  • MySql:raptor_udf.c
       raptor_udf2.c
 * Reverse Engineering ⚡:
  • Radare2: unix-like reverse engineering framework
  • VirtusTotal: VirusTotal tools
  • Miasm: Reverse engineering framework
  • Mirror: reverses the bytes of a file
  • DnSpy: .NET debugger and assembly
  • AngrIo: A python framework for analyzing binaries (Suggested by @Hamz-a)
  • DLLRunner: a smart DLL execution script for malware analysis in sandbox systems.
  • Fuzzy Server: a Program That Uses Pre-Made Spike Scripts to Attack VulnServer.
  • yara: a tool aimed at helping malware researchers toidentify and classify malware samples
  • Spike: a protocol fuzzer creation kit + audits
  • other: other scripts collected somewhere
 * Exploitation ❗:
  • Findsploit: Find exploits in local and online databases instantly
  • Pompem: Exploit and Vulnerability Finder
  • rfix: Python tool that helps RFI exploitation.
  • InUrlBr: Advanced search in search engines
  • Burpsuite: Burp Suite for security testing & scanning.
  • linux-exploit-suggester2: Next-Generation Linux Kernel Exploit Suggester
  • other: other scripts I collected somewhere.
 * Shells 🐚:
  • WebShells: BlackArch's Webshells Collection
  • ShellSum: A defense tool - detect web shells in local directories
  • Weevely: Weaponized web shell
  • python-pty-shells: Python PTY backdoors
 * Password Attacks ✳️:
  • crunch : a wordlist generator
  • CeWL : a Custom Word List Generator
  • patator : a multi-purpose brute-forcer, with a modular design and a flexible usage
 * Encryption - Decryption 🛡️:
  • Codetective: a tool to determine the crypto/encoding algorithm used
  • findmyhash: Python script to crack hashes using online services
 * Social Engineering 🎭:
  • scythe: an accounts enumerator

Contributing:
  1. Fork Lockdoor-Framework:
    git clone https://github.com/SofianeHamlaoui/Lockdoor-Framework.git
  2. Create your feature branch
  3. Commit your changes
  4. Push to the branch
  5. Create a new Pull Request

Features 📙:
  • Pentesting Tools Selection 📙:
   Tools ?: Lockdoor doesn't contain all pentesting tools (Added value) , let's be honest ! Who ever used all the Tools you find on all those Penetration Testing distributions ? Lockdoor contains only the favorite (Added value) and the most used toolsby Pentesters (Added value).
   what Tools ?: the tools contains Lockdoor are a collection from the best tools (Added value) on Kali Linux, ParrotSec and BlackArch. Also some private tools (Added value) from some other hacking teams (Added value) like InurlBr, iran-cyber. Without forgeting some cool and amazing tools I found on Github made by some perfect human beigns (Added value).
   Easy customization: Easily add/remove tools. (Added value)
   Installation: You can install the tool automatically using the install.sh. Manually or on Docker [COMING SOON]
  • Resources and cheatsheets 📙 (Added value):
   Resources: That's what makes Lockdoor Added value, Lockdoor Doesn't contain only tools! Pentesing and Security Assessment Findings Reports templates (Added value), Pentesting walkthrough examples and tempales (Added value) and more.
   Cheatsheets: Everyone can forget something on processing or a tool use, or even some trciks. Here comes the Cheatsheets (Added value) role! there are cheatsheets about everything, every tool on the framework and any enumeration,exploitation and post-exploitation techniques.

Check the Wiki Pages to know more about the tool 📙:
Lockdoor-Framework's screenshots:
First Step
Lockdoor update
ROOT Menu
Information Gathering
Web Hacking
Exploitation
Reverse Engineering
Enc/Dec
Password Attacks
Shells
PrivEsc
Social Engineering
PSAFRT
Walkthroughs
About
Support the author:
   On Paypal: Sofiane Hamlaoui
   BTC Address: 

Read more


Thursday, May 14, 2020

Top 5 Most Useful Linux Tools For Programmers

Top 5 most useful linux tools for Programmer

Linux is a free and open-source software operating systems built around the Linux kernel. It typically packaged in a form known as a Linux distribution for both desktop and server use. It is a great development environment for programmers and developers. However, without the development tools, that would be impossible. Fortunately, plenty of Linux tools are available. Here are the top 5 most useful Linux tools for programmers.

Also Read;-  How To Clone One Android To Another

5 Most Useful Linux tools for Programmers

1. VIM

vim editor-compressed
VIM is a free and open source software written by Bram Moolenaar in 1991. It is designed for use both from a command-line interface and as a standalone application in a graphical user interface. It comes standard with almost every Linux distribution and is also known as "the programmer's editor". VIM is great for coding and can also be used for editing things like configuration files and XML documents.
Vim has been developed to be a cross-platform that supports many other platforms. In 2006, it was voted as the most popular editor amongst Linux Journal readers. In 2015, Stack Overflow developer survey found it to be the third most popular text editor while in 2016, the Stack Overflow developer survey found it to be the fourth most popular development environment.
Read more;-  How To Use WhatsApp without Mobile No

2. Zsh

Zsh is written in C and initially released in 1990. It is a Unix shell that can be used as an interactive login shell and as a powerful command interpreter for shell scripting. Zsh is an extended version of Bourne shell (BASH) with a large number of improvements, including some features of Bash, ksh, and tcsh. Zsh gives a user-friendly experience on the command line. It also gives better auto-completion, Vim key bindings, and smart guesses when you write a command wrong.
Its features include (but not limited to):
  • Programmable command-line completion,
  • Sharing of command history among all running shells
  • Extended file globbing
  • Improved variable/array handling
  • Editing of multi-line commands in a single buffer
  • Spelling correction
  • Various compatibility modes,
  • Themeable prompts, and
  • Loadable modules.

3. Byobu

It was initially released in 2009 written in Sh and Python. Byobu can be used to provide on-screen notification or status and tabbed multi-window management. Thus, it is intended to improve terminal sessions when users connect to remote servers with an operating system Linux and Unix-like. It is is an enhancement for the GNU Screen terminal multiplexer or tmux used with the GNU/Linux computer operating system.

4. GIT

git commandsGit was initially released on April 7, 2005. It is a version control system to track changes in computer files and to coordinate work on those files among multiple people. It is primarily used for source code management in software development and can be used to keep track of changes in any set of files available in the English language. It is aimed at speed, data integrity, and support for distributed, non-linear workflows. It is free and open source software distributed under the terms of the GNU General Public License version 2.
Moreover, Linus Torvalds was the creator of GIT for the development of the Linux kernel. On the other hand, its current maintainer since then is Junio Hamano. Thus, every Git directory on every computer is a full-fledged repository with complete history and full version tracking abilities, independent of network access or a central server.

5. Docker

Written by Solomon Hykes in 2013, it is a computer program that performs operating-system-level virtualization, the containerization, which is developed by Docker, Inc. Primarily, Docker was developed for Linux to use as the resource isolation features of the Linux kernel. It is a tool that can package an application and its dependencies in a virtual container that can run on any Linux server. This helps enable the flexibility and portability on where the application can run, whether on premises, public cloud, private cloud, bare metal, etc.  Moreover, it accesses the Linux kernel's virtualization features either directly using the libcontainer library.
More info
  1. Hacking Hardware
  2. Que Es El Hacking
  3. Hacking Definition

Recovering Data From An Old Encrypted Time Machine Backup

Recovering data from a backup should be an easy thing to do. At least this is what you expect. Yesterday I had a problem which should have been easy to solve, but it was not. I hope this blog post can help others who face the same problem.


The problem

1. I had an encrypted Time Machine backup which was not used for months
2. This backup was not on an official Apple Time Capsule or on a USB HDD, but on a WD MyCloud NAS
3. I needed files from this backup
4. After running out of time I only had SSH access to the macOS, no GUI

The struggle

By default, Time Machine is one of the best and easiest backup solution I have seen. As long as you stick to the default use case, where you have one active backup disk, life is pink and happy. But this was not my case.

As always, I started to Google what shall I do. One of the first options recommended that I add the backup disk to Time Machine, and it will automagically show the backup snapshots from the old backup. Instead of this, it did not show the old snapshots but started to create a new backup. Panic button has been pressed, backup canceled, back to Google.


Other tutorials recommend to click on the Time Machine icon and pressing alt (Option) key, where I can choose "Browse other backup disks". But this did not list the old Time Machine backup. It did list the backup when selecting disks in Time Machine preferences, but I already tried and failed that way.


YAT (yet another tutorial) recommended to SSH into the NAS, and browse the backup disk, as it is just a simple directory where I can see all the files. But all the files inside where just a bunch of nonsense, no real directory structure.

YAT (yet another tutorial) recommended that I can just easily browse the content of the backup from the Finder by double-clicking on the sparse bundle file. After clicking on it, I can see the disk image on the left part of the Finder, attached as a new disk.
Well, this is true, but because of some bug, when you connect to the Time Capsule, you don't see the sparse bundle file. And I got inconsistent results, for the WD NAS, double-clicking on the sparse bundle did nothing. For the Time Capsule, it did work.
At this point, I had to leave the location where the backup was present, and I only had remote SSH access. You know, if you can't solve a problem, let's complicate things by restrict yourself in solutions.

Finally, I tried to check out some data forensics blogs, and besides some expensive tools, I could find the solution.

The solution

Finally, a blog post provided the real solution - hdiutil.
The best part of hdiutil is that you can provide the read-only flag to it. This can be very awesome when it comes to forensics acquisition.


To mount any NAS via SMB:
mount_smbfs afp://<username>@<NAS_IP>/<Share_for_backup> /<mountpoint>

To mount a Time Capsule share via AFP:
mount_afp afp://any_username:password@<Time_Capsule_IP>/<Share_for_backup> /<mountpoint>

And finally this command should do the job:
hdiutil attach test.sparsebundle -readonly

It is nice that you can provide read-only parameter.

If the backup was encrypted and you don't want to provide the password in a password prompt, use the following:
printf '%s' 'CorrectHorseBatteryStaple' | hdiutil attach test.sparsebundle -stdinpass -readonly

Note: if you receive the error "resource temporarily unavailable", probably another machine is backing up to the device

And now, you can find your backup disk under /Volumes. Happy restoring!

Probably it would have been quicker to either enable the remote GUI, or to physically travel to the system and login locally, but that would spoil the fun.

Related news


Be like these 2 agents

Pre-S - We only have 7 demo slots left this week for our Pipeline Pro Tools software. If you want to get one before our Next Level deal expires and to take advantage of our 1-free-playbook offer, click here to book one before they're gone.

Today, you get to decide. What approach are you going to take to your business over the next 2-3 months?

Right now there are 2 options agents can choose from:

Option #1 - Play defense. Save, cut expenses, complain about the govt, be scared, hope and pray, refresh CNN and facebook all day. (<-- This is what 80% of agents will do.)

OR

Option #2 - Offense. Attack! Double down on lead gen. Look for new angles. Have your best month EVER.

Most agents will choose option 1. It's definitely easier. It shifts responsibility onto someone else (the virus, the govt, the economy, etc).

...or you can be like Kelly.

Kelly joined my "lead machine" webinar earlier this month.

That night, she was restless. She downloaded the calculators and went to work reverse engineering her business. Figuring out how to grow in ANY market.

She calculated her lead number (91), then she got to work on the free marketing playbook we gave her. No excuses, no wasting time. She just took action.

The next morning, she woke up to 3 new leads in her inbox. See below:

Now is she rich yet? No. She will hit her lead number this month (she has generated 25 more leads since that screenshot), and the commission checks will follow...

...just like Matt Mouser.

Matt Mouser's practice is in Belmont, Michigan, a suburb of Grand Rapids.

He started out in real estate as the lowest member on a big team -- barely making it from deal to deal.

And because he was completely dependent on his team for leads, his split was brutal. He only kept ~40% of each commission.

But what could he do? He had no traction and no way to consistently get new customers.

That's when Matt and I met. I walked him through the Craigslist Playbook that I shared yesterday (and the same one Kelly went through).

For the first time ever, he was able to answer the question "What should I be focusing on today to grow my business?"

Then he joined Pipeline Pro Tools and ran just 1 of our plug-and-play marketing playbooks to start bringing in leads.

Within 30 days his pipeline was full.

Within 60 days he was working with multiple buyers and took his first listing.

And within 90 days he had closed his first deal.

(Oh, and by the way, he left his team and was now making a full 80%.)

Matt doubled his income two years in a row.

From $30k to $120k+.

But most importantly? He is completely in control of his business. He can turn his leads on or off like a faucet.

If you want to see results like this, don't miss our workshop deal on Pipeline Pro Tools.

Enter promo code "JAMESHOFF" to get $200 off the yearly option + 6 marketing playbooks + 6-months free enrollment in Elite, our private group coaching (reg. $497/mo.)

>>> Get Pipeline Pro Tools Now <<<

If you still have questions or you just want to see it, get a demo.

>>> Book a Demo <<<

If you book a demo, the deal will automatically be extended thru the day of your demo.

Plus right now, if you book a demo we'll give you 1 of our top 3 internal marketing playbooks that we use to generate 250+ quality leads for our local real estate team.It's your choice which one you want, and it's yours to keep forever (no strings attached).

And feel free to reply to this email if you have any questions!

Thanks,

-Chris Jones

Webinar replay

Yesterday I did a live workshop with my buddy James Hoff on how to build a lead machine in 1 hour.

I walk you through everything -- free tools, scripts, how to execute the whole thing, etc.

Here's the replay link if you missed it...

-> How to Build Your Perfect Lead Gen Machine - Webinar Replay (.mp4)
Video includes 1 calculator, copy/paste ads, and 1 free script

As usual I will be taking the workshop down in 48hrs.

Until then, I want to issue you a challenge.

Be an action taker. Watch the video, and implement it TODAY. 80% of agents will sit on the workshop and do nothing, 20% will take action this afternoon. Which group are you going to be in?

At the end of the webinar... I discussed my lead gen software Pipeline Pro Tools. Now you do NOT need Pro Tools to follow the strategy. But it WILL make it 100x easier and more effective.

If you want to check out Pro Tools, you can get a 20-min demo HERE. As I'm writing this email, we have 21 demo slots left for the entire week. They will go quick.

When you book a demo (and show up) we'll give you 1 of our top 3 internal marketing "playbooks" that my team runs to generate 250+ quality leads per month. Yours to keep forever.

Plus, if you book a demo today we'll extend our $200 off deal through the day/time of your demo.

Here's the direct link to book a demo and get the playbook -> http://www.calendly.com/guerilla-realty/web-demo

All the best,

-Chris Jones