ChocolateOverflow – WindowsTechs.com

Is there a consensus on whether HTML encoding should happen upon upload or retrieval/display for defense against stored XSS?

Posted on April 10, 2022 by ChocolateOverflow

The common thing to do in defense against XSS, stored or not, is to HTML-encode the payload. Encoding upon the upload/POST of the data is efficient for processing power and neutralizes it early to be stored in the database but the payload … Continue reading Is there a consensus on whether HTML encoding should happen upon upload or retrieval/display for defense against stored XSS?→

How does meterpreter stay covert and undetected?

Posted on March 15, 2022 by ChocolateOverflow

I’ve heard that meterpreter is really good at being stealthy and staying undetected. However, I can’t seem to find articles detailing how it stays stealthy. I do know about encoders like "Shikata ga nai" and it’s easy to figure t… Continue reading How does meterpreter stay covert and undetected?→

What can an attacker do if they find positive results for `haveibeenpwned`?

Posted on March 4, 2022 by ChocolateOverflow

I know maltego has a haveibeenpwned module/transform. Assuming an attacker ran a bunch of emails through that module and got a few positive hits for haveibeenpwned, what can be done with those results? If the attacker is a white hat pentes… Continue reading What can an attacker do if they find positive results for `haveibeenpwned`?→

How do AV interact with malicious executables in remote shares?

Posted on March 3, 2022 by ChocolateOverflow

I mainly use Linux and am not very familiar with Windows shares so my apologies if this question sounds noobish.
Say I’m attacking a Windows machine and host an SMB share from my Linux machine with malware in that share. I want to run the … Continue reading How do AV interact with malicious executables in remote shares?→

Can the ICMP "pad" safely be stripped in most situations for defense?

Posted on March 2, 2022 by ChocolateOverflow

I’m learning about data exfiltration using ICMP and delivery of a payload is generally done using the -p "pad bytes" in ping -c 1 -p $encoded_payload. Are there often legitimate use for "pad bytes"? Can it simply be str… Continue reading Can the ICMP "pad" safely be stripped in most situations for defense?→