Suche
Unten sind die Ergebnisse Ihrer Suche gelistet.
Passende Seitennamen:
Volltextergebnisse:
- Backing up the sshd @en:linux
- Generating public/private ed25519 key pair. Enter file in which to save the key (/home/user/.ssh/id_ed25... important, **because only the combination of key file and password** enable server access. <code bash>... ode bash>$ wipe id_ed25519 Okay to WIPE 1 regular file ? (Yes/No) yes Operation finished. 1 file wiped and 0 special files ignored in 0 directories, 0 symlink
- Obfuscation: ByteSwapping @en:it-security:blog
- ode> * Then we extract it and save it in a new file <code python> python shencode.py formatout -i po
- Obfuscation: polymorphic in-memory decoder @en:it-security:blog
- ep: - We extract the actual shellcode from the file ''%%calc.o%%'' and save it in ''%%calc.raw%%'' (f... ur code and prepare it for our ''%%Inject.cpp%%'' file: <code python> python shencode.py formatout -i x... xor-decoder.stub -fb 60 -lb 329 [*] try to open file [+] reading xor-decoder.o successful! [*] cutting
- Reset the registry at an earlier point in time @en:windows
- thing at this point is that we get access to the file system. ===== Rename and save the old registry =
- Obfuscation: Disguise shellcode as UUIDs @en:it-security:blog
- something like this: <code cpp> [*] try to open file [+] reading 240906.001 successful! [*] try to gen... the victim system. After the copying process, the file is not recognised. We scan it once manually with ... ooks good. ==== Execute ==== We now execute the file and wait for the result. Unfortunately, nothing ... ==== The UUID obfuscation works and protects the file when accessing the hard drive. After execution, m
- Privilege escalation: Windows admin thanks to Linux @en:it-security:blog
- ]] After the download you have to port the image file to a bootable USB stick or DVD. To ensure that th
- Buffer overflow in the 64-bit stack - Part 2 @en:it-security:blog
- per and display the gadgets <code bash> ropper --file bof-part2 ... 0x000000000040116a: pop rdi; ret; .... ll need 2 offsets for the exploit. So we load our file into the debugger and start it: <code bash> gdb-... === Now we run our Python exploit and create the file in.txt. <code bash>python2 buffer.py</code> \\ \\ ==== Set authorisations ==== Our file still needs the appropriate root permissions. <c
- Buffer overflow in the 64-bit stack - Part 3 @en:it-security:blog
- h>psycore8/nosoc-bof/tree/main/part-3|Github]]. <file c bof-part3.c> /* Code https://blog.techorganic.c... setbuf(stdout, 0); vuln(); return 0; } </file> \\ \\ ===== Debug ===== {{page>en:vorlagen:att... s write a first exploit to ''write()'' to leak. <file python buf3-stage1.py> #!/usr/bin/env python fro... eaked write address: {}".format(hex(got_leak))) </file> We run the whole thing and get the following ou
- Shellcode Injection Part 4 @en:it-security:blog
- ode> <callout type="info" icon="true"> Opens the file ''windir\syswow64\kernel32.dll'' in PEView. This ... > Then it is worth taking a look at the compiled file: <code> objdump -d calc-unsanitized.o </code> {... .o -s c </code> The command provides us with the file in C format syntax. We know that our shellcode st
- Linux Commands Cheatsheet @en:linux
- ete user | | whoami | Output current user | ==== File and directory management ==== ^ Command ^ Commen... u -h * %%|%% sort -hr > /home/user/filelist.txt | File list sorted by size | | echo bla > 1.txt | Create file 1.txt with content bla | | echo blabla >> 1.txt | Append blabla to file 1.txt | | ls | List directory contents | | ls -la
- Host Discovery with Metasploit database @en:it-security
- bases 'msf' and 'msf_test' Creating configuration file in /usr/share/metasploit-framework/config/databas
- $whoami @en:user
- n-32x32.png}} bluesky.com | [[https://bsky.app/profile/psycore8.bsky.social|psycore8]] | | {{https://git
- Shellcode Injection Part 2 @en:it-security:blog
- , this alone was not enough, so that the compiled file was recognised directly. Nevertheless, I also use... ated by the ''%%function_encoder.py%%'' generated file ''%%output.bin%%''. \\ \\ ==== Obfy ==== Jigsaw ... s Defender could no longer recognise the compiled file. I didn't even have to do much. It was enough to
- Shellcode Injection Part 1 @en:it-security:blog
- should be in C format | | > shell.c | Save to the file shell.c | <code bash> msfvenom -p windows/shell_... tes. We take this from the ''msfvenom'' output. <file cpp local-process-injection.cpp> #include <stdio.... ad, size); ((void(*)())code)(); return(0); } </file> \\ \\ ==== Analyse shellcode ==== After compili... s> python3 jigsaw.py shell.raw </code> and get a file with C++ code. <code c++> unsigned char jigsaw[5
- The importance of awareness in IT security @en:it-security:blog
- romised. The trigger was a double-click on an ISO file that was sent as an attachment in an email. Windo... k methods === In this particular example, an ISO file was included. This is only symbolic for the time