Articles

Metasploit Framework Windows Tutorial
Remote Desktop Connection
Windows Processes That May Be Dangerous
How-To use NetCat a Tutorial
Common Linux Commands
Common Ports
Netcat Commands
HTTP Response Codes
War-Google Hack Terms
Wardriving
Avoiding Social Engineering and Phishing Attacks
Intrusion Detection on Linux
Linux Intrusion Detection
Penetration Testing Guide
Penetration Testing Tools
Social Engineering Fundamentals, Part I: Hacker Tactics
Social engineering (computer security)
The Psychology of Social Engineering

The Archives

General GSO
GovernmentSecurity.org News & Suggestions
In The News
Open Topic
General Security Information
Trash Can
Exploit & Vulnerability Mailing List Archives
Trial Member Forum
Product and Program Reviews GSO Tutorials
System Security
Windows Systems
Beginners Section
Linux & Unix Systems
File Downloads
Exploit Research & Discussion Trojan & Virus Errata
Networking Security / Firewall / IDS / VPN / Routers
System Hardening
E-Mail Security
Wifi Security
Trial Member Uploads
Upload discovered Trojans & Mal ware
GSO Programming Section
C , C++ , VC++
Visual Basic.NET
Perl /CGI
Java/Javascript
PHP/XML/ASP/HTML
Assembly + Other
The Cork Board
Network Security Consultant Directory
Network Security Jobs
The Archives
Encryption Information
General Network Security
Internet Anonymity
HTTP Protocol Security
Linux Security
MS IIS Information
Exploit Articles
Programming / Tool Design
GSO Software Projects
Public Downloads
Microsoft Security Questions and Papers

dissolutions
For those that have asked,
Heres how to become a member:

1) POST!!!! While I say this, I don't mean thanks, thank you for the proxy lists etc. It doesn't matter how long your posts are if they are meaningless than they will be ignored.
For the best result from posting, if you find a great FAQ, Tutorial, Post it. If you've found a new technique to do somethign Post it.
If you scan for proxy servers post them. Generally this is a you give we give type deal. You gave us a registration we gave you a very limited account, you give us the time and make good posts and we'll give you a Member Group Status.

2) Way, If you find something out of Line PM a moderator and I guarantee they will notice you there. If you find content thats against our rules on this forum (we can't get it all) aand you PM me or any other moderator, We'll have a first rate opinion of you. Fact of the matter is were conversing with you, were able to build a profile with you.

3) Go on IRC, IRC is a great way to talk to any member, and it just may give you ideas on what to post. There are tons of links on IRC that aren't posted on here.

4) Act mature. If your mature about things we'll be more willing to promote you.

Here are some basic things I think and look for when promoting people.


If anybody else has suggestions please add this. Lets just keep this thread for suggestions on becoming a member.
Yorn
Along the lines of #1 mentioned above: if you know of some topic that is appropriate to security that has been commented on in some list or have any additional insight into web application security then that would be a subject that I would love to hear about.

For example: here's something a roommate wrote the other day for a security list that I manage: (just a bunch of real life friends right now)

QUOTE ("Raize")

Tonight if have as much time as I did last night, I'll be able to complete the login integration with the web application. One of the potential problems I see with cookies is that I will be storing, in effect, a hashed password with no salt (as it stands).

The php code currently looks like this:

setcookie('uname',$username);
setcookie('passwd',md5($password));

I'm thinking of changing it to this:

$salt = "whatever I want to put in here";
setcookie('uname',$username);
setcookie('passwd',md5($password . md5($salt)));

But even better would be something along these lines (pseudocode):

// Select the "salt" variable from the "users" table where the username is:
// Guest, 0, or NULL user that is never used.
$pass_salt = result_from_mysql_query("SELECT salt FROM users WHERE username = NULL");

// Select the "salt" variable from the "users" table where the username is the guy trying to login.
// This variable will be different from user to user since it is generated on registration.
$user_salt = result_from_mysql_query("SELECT salt FROM users WHERE username = $username");

// Set md5 of the username
setcookie('uname',md5($username);

// Set sha1 of the password, salted with a site specific random 8 digit alphanumeric
setcookie('passwd',sha1($password . md5($pass_salt)));

// Set a sha1 hash based on semi-static items like
// User Agent, a generic user_salt (created upon registration as a random 8 digit alphanumeric),
// IP, and the base 64 encode of their username.

setcookie('host',sha1(md5($_SERVER('HTTP_USER_AGENT')) . md5($user_salt) . md5($_SERVER('REMOTE_ADDR') . md5(base64_decode($username)) ) );

So what do you think?


My response was that IP could change often so having a third variable wouldn't be right. He's still doing it anyway, but at least he got some feedback.
shaun2k2
Good points guys.

I saw a few people on IRC who basically complained about having to post to become a full members. One or two people actually asked me to promote them (even though I can't) to member status. They claimed that because trial members are so restricted, they don't post. And then they said, "give me full member status, and then I'll post". Heh, not happening mate. Just post good stuff, trigger a conversation, and the admins will obviously notice you. The admins are nice guys, so they're very reasonable.

Some people seem to be here just for themsevles; they're not interested in helping others, sharing knowledge, and contributing to the security of people's systems - they're here all for themselves. They want to be full members so they can download pre-compiled exploit programs. Come on guys, help everyone, and they'll help you. As dissolutions said, if you give us good stuff, admins will promote you. We're all in it together on this board - we're all here to help each other and get along, so let's post helpful stuff smile.gif



-Shaun.
Polarity
agreed, we are here to help each other.
But this unable to post thing really sux. May be you should think of a replacement for this?
bnhc
i guess the onli way is to post good stuffs to earn a "Member" status. in anyway it is also for a gd cause.
tweakz20
one thing you kind of left out... the rules.. they're pretty strict and if you do something against the rules and then get warned, it'll probably really go against you... (i can't speak for the admins, but you get the point)

some big ones-
warez are not allowed
no specific targets can be mentioned
no "how do i hack?" kinda questions
no "can you compile this?" kinda thing
search before you ask (the answer's usually already on the board or google)
no flaming (flaming's lame, even if it's a complete noob)

let google be your friend.

QUOTE
One line crap (Dont try to reach 50 posts with thanks and oh nice one , etc)

dont bother... your account will be reset between 0-10 and if happens again your account could be disabled !!!!!!!!!

YOU will never become a full member posting Crap
(comsec)
PickleToes
I think someone else said it further up but I really, really, think you should let Trial Members start new topics in other parts of the forum. Its really hard to get noticed by you Administrator guys when all we can do is add to other's ideas.
tweakz20
you're lucky for this section, it might even leave if it's abused...

do everything mentioned above and you'll get the administrator's attention, you gotta prove yourself to become a member now thanks to script kiddies and noobish "blackhats".. yell at them, not the admins wink.gif

btw- you have your own place to make topics in now, why are there barely any there, and none there from the people complaining about trial member status?? lol
Dillinja
Dont forget, this trail member forum is moderated equally as firmly as the other forums (if not firmer). Posts that go against the rules will still be dumped and members who cross the line too often will still lose their membership.

Anyways, enjoy! biggrin.gif
mathofaka
i must agree.. my friend said i would be promoted if i posted 30 times.... but know im starting to doubt that because of wa ive read wink.gif laugh.gif
graveyard
Excellent, was almost impossible to post when the main forum(exploits section) is disabled from you and all the others are subject based.
Now please remove the waiting time between post to post - really stupid.
tweakz20
60*24=1440
1440/15=96
you can make 96 posts in one day... come on now... just be prompt and don't sleep wink.gif
limit made because of spammers- yell at them
graveyard
QUOTE (tweakz20 @ May 3 2004, 11:24 PM)
60*24=1440
1440/15=96
you can make 96 posts in one day... come on now... just be prompt and don't sleep wink.gif
limit made because of spammers- yell at them

Exactly like you said, most of the day I'm not @ home and anyway I don't want to waste my time waiting to reply...
Now when people realized that spamming the forums won't help them gaining full member status there's no reason to keep the restriction.
If some trial members continue to spam just ban them instead of punishing all the other trial members.
dw-chow
that's correct. but 96 posts is quite frankily ALOT. most people don't post more than a few a day.
Nessuno
i don't want to become a member at any cost, i learn a lot of things as a trial member too, but today i was very angry when i saw a member that has only 4 posts, and 2 of there posts are only "tnx for the info". maybe he's an irc active member, i don't know, but at a first look it seems not correct to me.

this not means that i'll stop to post here, this is only an observation.

have a nice day, bye
dissolutions
Nessuno,
Chances are the member registered way back when, When we didn't have this and thus having not gone through the trial member phase, didn't need to post anything to become a member. We used to be very open to members.
Meads
So isnt there a post limit then get promoted is it just when an amdin/mod thinks your eligible for member status you get it unsure.gif
Nessuno
yes i know, and it doesn't matter 4 me if i'm a member or not, cause i read and write in this forum also if i'm a trial member, but i've seen some guys that with 3 posts only like "tnx" "great program" "keep workin on" reached the member status, and i'm not according with this.
sorry for the poor english, but remember, i haven't written this cause i want to be a member, but cause i don't agree with those kind of "membership" that is due to... ? nothing i think! Meads, if u want i can pm u some of these users, but i'll not pm these nicks at mods, cause i think also that is not correct "spy".
have a nice day smile.gif
cross
QUOTE (dw-chow @ May 5 2004, 05:29 PM)
that's correct. but 96 posts is quite frankily ALOT. most people don't post more than a few a day.

What about us security folks out there that only have 20-30 mins (lets say during a lunch break) to read and post. This largly limits the amount of imput some one like that could give. I'm not complaining, I don't mind waiting, but then again, I have a lot of free time to check back evenings too, but a lot of people don't have that luxury. I'm sure this will end up being one of those things where "if you don't like it, don't post here" and thats fine. Every board needs some kind of method for weeding out unwanted people. I feel this board is worth sticking around for, it's packed full of information in every forum. Stick in there guys.
Meads
QUOTE (Nessuno @ May 20 2004, 06:37 AM)
yes i know, and it doesn't matter 4 me if i'm a member or not, cause i read and write in this forum also if i'm a trial member, but i've seen some guys that with 3 posts only like "tnx" "great program" "keep workin on" reached the member status, and i'm not according with this.
sorry for the poor english, but remember, i haven't written this cause i want to be a member, but cause i don't agree with those kind of "membership" that is due to... ? nothing i think! Meads, if u want i can pm u some of these users, but i'll not pm these nicks at mods, cause i think also that is not correct "spy".
have a nice day smile.gif

I Agree with what your saying.. I will still post here with trial member status anyway so it doesnt really bother me wink.gif altho id prefer to have member status smile.gif

What about theese members ? pm me please and explain
CarTmanKILL
www.governmentsecurity.org is a good forum we have to show our motivation smile.gif

Reply is the first step ...
kill3r
This is a great forum and i have learned so much here just lurking. I just continue to read whenever i get a chance. Im intellectually intimidated by a majority of the members so I usually dont post at all. I figure if I dont have anything good to add to a conversation Iam better off keeping my mouth shut. Anyways thank you for the oppurtunity to have a trial member forum and ask questions. Well take care and to everyone that is leaving GSO for other endeavors and quite time good luck and thank you for providing all members with a place to discuss what they love. smile.gif Maybe one of these days Ill find my way over to wherever you all end up. ph34r.gif
cougar
I can imagine why this rule has been taken. In the normal member section they don't need people asking " How to do this and that". So when you start reading and trying to help other people you'll start to learn more and more about securing yourselve. When that happend, You might have a change of becoming a full member.

smile.gif
globey
the admins stop to move trial user's to full members?
i see ppl with 70\80\90\100 post's (i dont no the qulaity of the post's) and them still trial....
ComSec
QUOTE (globey @ Jun 22 2004, 12:13 PM)
the admins stop to move trial user's to full members?
i see ppl with 70\80\90\100 post's (i dont no the qulaity of the post's) and them still trial....

it been stated if you think you should be promoted.... then drop an admin team member a PM to review your posts... and i dont mean them who have just bumped their posts with

'thanks great tool gonna try it' etc

there are obvious trial members who deserve to be promoted.... and i know its frustrating for some of you.

dont forget we have plenty of members here and also other forums and websites we run

our apologies for being slow to pick up on individuals.... to be honest we could do with a couple more mods.... i think its time to promote a couple to that status and also review the trial member posters
simply-me
Thanks for reducing the time limit between posts. It really helps
people like me only read this forum 30-60 mins once or twice a week so now i'll be able to make more posts.
prunie
Well

Thank you very much for the info to start. As a trial member, i am supprised of this forum.

It is "the best and greatest" to "help and assist" everybody who wants to secure his network.
I hope to learn and read much more here.


tommmmmm
QUOTE (shaun2k2 @ Apr 25 2004, 04:56 AM)
They claimed that because trial members are so restricted, they don't post. And then they said, "give me full member status, and then I'll post"

1. Here is trial members forum where we can post
2. We can add our 3 cents replying
3. World is full of the leechers
4. If I were a mod I would make rules even harder
5. Being a member is like being in love, nobody will tell you that, you know it.

sorry ya for the last one, but I'm very big fan of matrix. I don't know why ppl blame this movie........ dry.gif
lesaew
Just venting here, but as a real rookie attempting to babysit my own network, this site provides a tremendous wealth of knowledge. However, I doubt I will make my quota of posts to warrant membership. Not only am I intimidated by the knowledge of the members, but most of what I need to know has already been posted. I've been searching this site now for about 2 weeks, and (following the rules) I have been able to find most of the info in previous threads. I hope that membership will also be considered for users like me who just want to take advantage of the knowledge base. How about allowing a "nomination" from a current member? I know the rules were created for a reason. Thanks for sharing this site. I plan to take advantage of it as long as I can.
Jay
QUOTE
I doubt I will make my quota of posts to warrant membership


As we keep saying its quality rather than quantity. Obey the rules and contribute in any small way and after a while approach one of us where we will review your posts and make a decision. wink.gif
Jay
QUOTE
allowing a "nomination" from a current member?



We will listen but be aware if a current members nomination starts to misbehave you will both go.
ice_cold45
QUOTE(cross @ May 21 2004, 02:39 AM)
QUOTE(dw-chow @ May 5 2004, 05:29 PM)
that's correct. but 96 posts is quite frankily ALOT. most people don't post more than a few a day.

What about us security folks out there that only have 20-30 mins (lets say during a lunch break) to read and post. This largly limits the amount of imput some one like that could give. I'm not complaining, I don't mind waiting, but then again, I have a lot of free time to check back evenings too, but a lot of people don't have that luxury. I'm sure this will end up being one of those things where "if you don't like it, don't post here" and thats fine. Every board needs some kind of method for weeding out unwanted people. I feel this board is worth sticking around for, it's packed full of information in every forum. Stick in there guys.
*


Exaxtly what i was thinking....you can post 96 posts if you are on the forum 24hrs.
but tell me how many of you guys stay 24hrs on the forum. i get around 30-40 mins to go through the forum and maybe on holidays i will stay for max of 4-5hrs
em not complaining here...just saying a revisision on the time would be nice
hevnsnt
I would like to add my thoughts on this situation.

I work in the industry and many a time I have come across governmentsecurity.org while searching for information regarding incidents. In the past, I have had to use google's cache to view some of the information (as the site at that time was locked down) and I wondered how I could obtain membership. Then 1 fateful day I was searching for something and found I could register.. Oh happy day! smile.gif

Now I am stuck being a n00b (even though in reality I am not) however I am happy to prove my worthy-ness because:

1) Everyone else had too. This process will keep a high knowledge level on the board.
2) Ok, I hate the 900 sec rule, like many of you I have a lot to say, just not a lot of time to say it. I understand that it keeps spammers away, but 15mins between posts? I think 5mins would be a better rule, but hey, I didn't make the rules.. So I must follow them.

[kissass]

So once again, I just want to thank the admin staff for giving me the opportunity to join.

[/kissass]
bmwkid
agreed, we are here to help each other. I hope to be of any help wink.gif
beardednose
QUOTE
[kissass]

So once again, I just want to thank the admin staff for giving me the opportunity to join.

[/kissass]


But once you arrive......oh, yes.

It goes back to what Comsec said about trust. You can be the greatest brain, but if you don't have trust, forget it. Trust takes time, lots of it.

Hang in there, folks!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2005 Invision Power Services, Inc.