Search

You can find the results of your search below.

Fulltext results:

Buffer overflow in the 64-bit stack - Part 3
29 Hits, Last modified:
we used the string ''/bin/zsh'' to the function ''System()'' function to open a root shell. To do this, ho... urity:blog:bof-part3-header.jpg?500 |}} In Linux systems, dynamic programme libraries are usually used. T... gramme, but can simply access the function of the system, which, for example, is stored in ''libc'' for ex... GOT, we overwrite an address with the one from ''system()''so that we can issue a system command when cal
Buffer overflow in the 64-bit stack - Part 2
8 Hits, Last modified:
.org/wiki/C-Standard-Bibliothek|libc-Funktion]] ''system()'' is forwarded. This tutorial is fundamentally ... AA') RSP: 0x7...fdde0 --> 0x7ffff7e17920 (<__libc_system>: test rdi,rdi) # system("/bin/sh") RIP: 0x400469 (<_init+25>: ret) </code> \\ \\ ===== Dependenci... it: <code bash> gdb-peda$ start ... gdb-peda$ p system $1 = {int (const char *)} 0x7ffff7e17920 <__libc_
FatCat Attack PoC
4 Hits, Last modified:
tom-payloads)) | |::: | Enumeration | **Enumerate System Info** JAWS((https://github.com/411Hall/JAWS)), S... etasploit Handler}}] \\ ==== Access to the target system ==== * With the pinball machine, the following script is executed on the target system <code dos> WINDOWS r DELAY 2000 STRING powershel... ablished - Metasploit does it ==== <code dos> getsystem hashdump ls getwd cd c: cd Glob_Share ls backgrou
Privilege escalation: Windows admin thanks to Linux
3 Hits, Last modified:
de>Security_Accounts_Manager]] using a live Linux system. \\ \\ ===== Initial situation ===== On a Windows system, the users ''users'' and ''sysadmin'' are created... the SAM directory. <code bash> cd ~/win/Windows/System32/config </code> \\ \\ ===== Manipulation of the
Obfuscation: Disguise shellcode as UUIDs
2 Hits, Last modified:
==== We start a Metasploit handler on the attack system to receive the reverse shell: <code ruby> msf6 >... 64-bit programme. We then copy this to the victim system. After the copying process, the file is not recog
The importance of awareness in IT security
1 Hits, Last modified:
y_Operations_CenterSOC]] | Guidelines, management systems | Awareness | In our case, no emphasis was plac
Obfuscation: ByteSwapping
1 Hits, Last modified:
e conditions for the end of the loop are met, the system jumps directly to the decrypted shellcode and exe
Shellcode Injection Part 2
1 Hits, Last modified:
Metasploit uses ROR13 (Rotate Right 13) to hash system addresses. We turn ROR13 into ROL33 (Rotate Left