sexta-feira, 2 de junho de 2023

Exploit-Me


"Exploit-Me is a suite of Firefox web application security testing tools designed to be lightweight and easy to use. The Exploit-Me series was originally introduced at the SecTor conference in Toronto. The slides for the presentation are available for download. Along with this SecTor is making the audio of the talk available." read more...



Website: http://securitycompass.com/exploitme.shtml

Related links

  1. Pentest Tools Website
  2. Hacking Tools Github
  3. Hacking Tools Name
  4. Hacking Tools For Beginners
  5. Game Hacking
  6. New Hacker Tools
  7. Hacking Tools For Mac
  8. Free Pentest Tools For Windows
  9. Nsa Hacker Tools
  10. Hacker Security Tools
  11. Hacking Tools For Mac
  12. Kik Hack Tools
  13. Pentest Automation Tools
  14. Pentest Tools Linux
  15. Pentest Tools Bluekeep
  16. Pentest Tools Find Subdomains
  17. World No 1 Hacker Software
  18. Hacker Tools For Windows
  19. Hacker Techniques Tools And Incident Handling
  20. Hack Rom Tools
  21. Nsa Hack Tools Download
  22. Pentest Tools Linux
  23. Pentest Tools Windows
  24. Nsa Hacker Tools
  25. Hacking App
  26. How To Hack
  27. Hack Tools Online
  28. Hack Tools Download
  29. Hacker Tools For Mac
  30. Hacking Tools Pc
  31. Pentest Tools Tcp Port Scanner
  32. Pentest Tools Github
  33. Hacking Tools Online
  34. Hack Tools Online
  35. Hacker Tools Hardware
  36. Hacking Tools And Software
  37. Hack Tools Download
  38. Pentest Reporting Tools
  39. Pentest Tools For Mac
  40. Pentest Reporting Tools
  41. Black Hat Hacker Tools
  42. Hacker
  43. Hacking Tools Usb
  44. Hacking Tools Usb
  45. Hacking Tools Kit
  46. Hack Tool Apk No Root
  47. Hack Tools 2019
  48. What Is Hacking Tools
  49. World No 1 Hacker Software
  50. Pentest Tools Subdomain
  51. Pentest Tools For Mac
  52. Hack Tool Apk No Root
  53. Hacking Tools Usb
  54. Hacking Tools Free Download
  55. Hacker Tools For Ios
  56. Hacking Tools For Windows 7
  57. Hacker Techniques Tools And Incident Handling
  58. Top Pentest Tools
  59. Hacker Tools 2020
  60. Hack App
  61. Black Hat Hacker Tools
  62. Hackrf Tools
  63. Pentest Tools For Windows
  64. Hacker Tools Windows
  65. Hack Tools Download
  66. Hacking Tools For Windows Free Download
  67. Best Hacking Tools 2019
  68. Underground Hacker Sites
  69. Hack Tools
  70. Pentest Automation Tools
  71. Hacking Tools For Windows
  72. Github Hacking Tools
  73. Hacker Hardware Tools
  74. Hacking Tools For Windows Free Download
  75. Pentest Tools Website
  76. Hacking App
  77. Pentest Tools Kali Linux
  78. Hacker Tools For Windows
  79. Hacker Tools Software
  80. Hacks And Tools
  81. Usb Pentest Tools
  82. Hack Tools For Games
  83. Pentest Automation Tools
  84. Best Hacking Tools 2019
  85. Hacker
  86. Hack Website Online Tool
  87. Hacker Tools Windows
  88. New Hack Tools
  89. World No 1 Hacker Software
  90. Hack Tools Mac
  91. Pentest Tools
  92. Hacker Tools List
  93. Hack Rom Tools
  94. Free Pentest Tools For Windows
  95. Hacker Tools List
  96. Hacker Tools
  97. Hacker Tools Mac
  98. Hacker Security Tools
  99. Tools Used For Hacking
  100. Hacker
  101. Hacking Tools Hardware
  102. Hacking Apps
  103. Hacking Apps
  104. Hacking App
  105. Hacking App
  106. Usb Pentest Tools
  107. Hacking Tools For Games
  108. Easy Hack Tools
  109. Hacking Tools For Beginners
  110. Hacker Security Tools
  111. Android Hack Tools Github
  112. Hacking Tools For Pc
  113. Pentest Tools Kali Linux
  114. Game Hacking
  115. Pentest Tools Github
  116. Pentest Tools Website Vulnerability
  117. Pentest Tools Windows
  118. Hacker Tools Online
  119. Hacking App
  120. Hack Tools Online
  121. Top Pentest Tools
  122. Hacker Tool Kit
  123. Hacker Security Tools
  124. Hacking Tools Pc
  125. Hack And Tools
  126. Tools 4 Hack
  127. Hacker Tool Kit
  128. Hacking Tools 2020
  129. Hacker Tools Apk Download
  130. Hack Tools For Windows
  131. Pentest Tools Android
  132. Pentest Tools Windows
  133. Tools 4 Hack
  134. Hacker Tools Github
  135. Blackhat Hacker Tools
  136. Hacking Tools Hardware
  137. Hacking Tools Windows 10
  138. Hacker Tools Free Download
  139. Hacking Tools For Games
  140. Hacking Tools Name
  141. Hacker Tools Free
  142. Hacker Tools Software
  143. Nsa Hack Tools
  144. Usb Pentest Tools
  145. Hacking App
  146. Hack Tools 2019
  147. Pentest Tools Alternative
  148. Hacker Tools For Windows
  149. Best Hacking Tools 2019
Postado por às Nenhum comentário:

quinta-feira, 1 de junho de 2023

ASIS CTF Quals 2015 - Sawthis Writeup - Srand Remote Prediction


The remote service ask for a name, if you send more than 64 bytes, a memory leak happens.
The buffer next to the name's is the first random value used to init the srand()


If we get this value, and set our local srand([leaked] ^ [luckyNumber]) we will be able to predict the following randoms and win the game, but we have to see few details more ;)

The function used to read the input until the byte \n appears, but also up to 64 bytes, if we trigger this second condition there is not 0x00 and the print shows the random buffer :)

The nickname buffer:



The seed buffer:



So here it is clear, but let's see that the random values are computed with several gpu instructions which are decompiled incorrectly:







We tried to predict the random and aply the gpu divisions without luck :(



There was a missing detail in this predcitor, but there are always other creative ways to do the things.
We use the local software as a predictor, we inject the leaked seed on the local binary of the remote server and got a perfect syncronization, predicting the remote random values:




The process is a bit ugly becouse we combined automated process of leak exctraction and socket interactive mode, with the manual gdb macro.




The macro:



















Continue reading
Postado por às Nenhum comentário:

Video Archives Of Security Conferences And Workshops


Just some links for your enjoyment

 List of security conferences in 2014

 Video archives:

AIDE (Appalachian Institute of Digital Evidence)
Blackhat
Botconf
Bsides
Chaos Communication Congress
Defcon
Derbycon
Digital Bond's S4x14
Circle City Con
GrrCON Information Security Summit & Hacker Conference
Hack in the box HITB
InfowarCon
Ruxcon
Shmoocon
ShowMeCon
SkyDogCon
TakeDownCon
Troopers
Heidelberg Germany
Workshops, How-tos, and Demos
Special thanks to  Adrian Crenshaw for his collection of videos

Related links


Postado por às Nenhum comentário:

Top Process Related Commands In Linux Distributions


Commands in Linux are just the keys to explore and close the Linux. As you can do things manually by simple clicking over the programs just like windows to open an applications. But if you don't have any idea about commands of Linux and definitely you also don't know about the Linux terminal. You cannot explore Linux deeply. Because terminal is the brain of the Linux and you can do everything by using Linux terminal in any Linux distribution. So, if you wanna work over the Linux distro then you should know about the commands as well. In this blog you will exactly get the content about Linux processes commands which are are given below.

ps

The "ps" command is used in Linux to display your currently active processes over the Linux based system. It will give you all the detail of the processes which are active on the system.

ps aux|grep

The "ps aux|grep" command is used in Linux distributions to find all the process id of particular process like if you wanna know about all the process ids related to telnet process then you just have to type a simple command like "ps aux|grep 'telnet'". This command will give you the details about telnet processes.

pmap

The "pmap" command in Linux operating system will display the map of processes running over the memory in Linux based system.

top

The "top" command is used in Linux operating system to display all the running processes over the system's background. It will display all the processes with process id (pid) by which you can easily kill/end the process.

Kill pid

Basically the kill command is used to kill or end the process or processes by simply giving the process id to the kill command and it will end the process or processes. Just type kill and gave the particular process id or different process ids by putting the space in between all of them. kill 456 567 5673 etc.

killall proc

The "killall proc" is the command used in Linux operating system to kill all the processes named proc in the system. Killall command just require a parameter as name which is common in some of the processes in the system.

bg

The "bg" is the command used in Linux distributions to resume suspended jobs without bringing them to foreground.

fg

The "fg" command is used in Linux operating system to brings the most recent job to foreground. The fg command also requires parameters to do some actions like "fg n" n is as a parameter to fg command that brings job n to the foreground.More information
Postado por às Nenhum comentário:
Assinar: Postagens (Atom)