Using AutoIt’s DllCall function might be confusing at first. The biggest issue I encountered was on how to “translate” the C++ variable types to AutoIt variable types. In this article, we give some example of how some standard Microsoft DLL calls can be translated into AutoIt DLL calls. We give a brief explation of each function and then first show the function definition in C++ and then show how you can call the function from within AutoIt.

Read More

When using the RunAs or RunAsWait functions in AutoIt, you want to run an external program under the context of a different user. While doing this, there can be many things that may be the reason why the functions fails. The AutoIt Function Reference only states that if the function call failed that the return value is …

Read More

If you are building a secure computer, then the best approach is to never connect it to the internet. If the operating system on this computer is Windows, then you will have to activate it before you will be able to use it. This article explains how you can activate it by phone.
Windows can’t be activated right now …

Read More

All mail server administrators will have encountered the following problem: spammers send out spam and they spoof the mails so that the sender appears to be a user in the domain you are managing. Unfortunately there is not a lot that can be done to prevent spammers from sending such these spam mail. There is however a …

Read More

Researchers from the Google Security Team have published findings about a vulnerability in SSL 3.0. CVE-­2014­-3566 has been allocated for this protocol vulnerability. It is possible to use nmap to scan for the presence of this vulnerability by doing a scan on the supported SSL/TLS protocols. This post shows how to scan for the POODLE weakness using nmap.

Read More

Microsoft ASP.NET 4.5 and earlier versions contain a weakness in the Forms Authentication functionality whereby user sessions are not properly terminated when a user logs out of the session. As a result, users are vulnerable to session hijacking even after logging out of the web application.

This weakness isn’t new. …

Read More

Using DllCall in AutoIt given you enormous power to extend the functionality of AutoIt. It allows you to implement almost everyting in AutoIt that you can implement in C++.
However, one of the most difficult things when working with DllCall is to know how to type the variables that you pass to DllCall.
The table below show how to convert C++ and Windows API types to AutoIt types:\

| C++ | AutoIt |
| LPCSTR LPSTR | str |
| LPCWSTR LPWSTR | wstr |

Read More

You may have heard of “Heartbleed”, a flaw in OpenSSL that could allow the theft of data normally protected by SSL/TLS encryption. It is possible to scan for the presence of this vulnerability using different methods. This page explains how you can scan for it from a Windows machine using nmap. Added April 15th, 2014: …

Read More

Validating a username and password pair against a remote RADIUS server is an easy task in PHP. This page shows two methods via which credentials can be checked using the RADIUS protocol. The first method will use PHP’s RADIUS PECL extension (see http://www.php.net/manual/en/book.radius.php). The second method will use …

Read More

When building your own Burp Suite extension, it can occur that compiling your code and creating the jar works find, but that you get the exception java.lang.ClassNotFoundException when loading your extention in Burp Suite. This article shows the solution to your problem. The reason is suite simple: Burp Suite expects …

Read More