Thanks!

Sure

Send you an email with my details.

Thanks for the event. Yes the *lesson* learned was priceless

Will send a mail to you guys with my feedback. BTW is it possible to get copies of the presentation which were made during the event?

Let me go into a big more details of your hack, as it highlights the importance of fingerprinting: when performing a formal pentesting, it is crucial to have a clear picture of the entire site, including installed applications, location, version etc.

Take phpMyAdmin for example, it is a very good bet to look for phpMyAdmin to break into the site when you are conducting a small-medium sized website. However, you need to figure out its path, there are couple ways for doing it: google hack, guess – base upon experience or learned information, bruteforce, learn it from page sources etc. (Note: the path is case sensitive on Linux, on phpmyadmin != phpMyAdmin) Once you figured out the path, then you will need to break into the it, by either applying known vulnerabilities (base upon its version), or attack its weak configuration. And hey, don’t forget phpMyAdmin (as well other open source apps) are open source, which means you own their source code, so?….you know what I meant

Again, thanks for attending hackintosh and I wished you enjoyed the presentations & ctf. It would be great if you can send me some feedback of how you thought about the event and what can be improved.

Thanks!