Question I am a bit confused in the idea of code injection in C. If somebody could explain it and show how its done I would appreciate it. So lets say in C you have some Char array of size 512 which is being written to the contents of a socket of length 1024, and […]
read more »A Buffer Overflow is a flaw by which a program reacts abnormally when the memory buffers are overloaded, hence writing over adjacent memory. It can be triggered by using inputs that may alter the way a program operates,for example <inputting a very large value in a c program which does integer based addition>. A buffer […]
read more »
I decided to get a bit more into Linux exploitation, so I thought it would be nice if I document this as a good friend once said “ you think you understand something until you try to teach it “. This is my first try at writing papers. This paper is my understanding of the […]
read more »
Introduction I am interested in exploiting binary files. The first time I came across the buffer overflow exploit, I couldn’t actually implement it. Many of the existing sources on the web were outdated(worked with earlier versions of gcc, linux, etc). It took me quite a while to actually run a vulnerable program on my machine and […]
read more »
One of the most common and oldest security vulnerabilities in software are buffer overflow vulnerabilities. Buffer overflow vulnerabilities occur in all kinds of software from operating systems to client/server applications and desktop software. This often happens due to bad programming and the lack of or poor input validation on the application side. In this article […]
read more »A tutorial on private-public key authentication in Windows using freeSSHd, PuTTY, and PuTTYgen. 5/5 in a series on SSH and key pair authentication http://www.danscourses.com/ Original Link
read more »So you think you know OpenSSH inside and out? Test your chops against this hit parade of 16 expert tips and tricks, from identifying monkey-in-the-middle attacks to road warrior security to attaching remote screen sessions. Follow the countdown to the all-time best OpenSSH command! [ Running SSH on a non-standard port ] SSH tips #16-14:Detecting MITM attacks […]
read more »
https://www.offensive-security.com/metasploit-unleashed/scanner-ssh-auxiliary-modules/ Contents 1 SSH Service Info 1.1 Metasploit SSH Exploits 1.1.1 Metasploit ssh_login 1.1.2 Metasploit ssh_login_pubkey 2 Brute Force ssh_login 2.1 Setting Up the Attack 2.2 Running the Attack 2.3 Houston, We Have A Shell 3 Private Key ssh_login_pubkey 3.1 Obtaining Private Key 3.1.1 Planting Private Keys 3.2 Setting Up the Attack 3.3 Running the Attack 3.4 Getting a Shell 4 Flags SSH Service Info First, a reminder of the […]
read more »Often one of the most useful (and to the beginner underrated) abilities of Metasploit is the msfpayload module. Multiple payloads can be created with this module and it helps something that can give you a shell in almost any situation. For each of these payloads you can go into msfconsole and select exploit/multi/handler. Run ‘set […]
read more »