Collaborate Disseminate
I’m playing a CTF challenge involving a vulnerable binary together with it libc (no LD provided). The real target is remote but I’m building the exploit with the local files. The vuln seems to be a return to libc attack
Since I’m not well … Continue reading Loading custom libc with pwn.gdb.debug: Inconsistency detected by ld.so
I’m starting slowly to explore ICS (Industrial Control Systems) and I’m faced with a CTF challenge involving a Rockwell Automation system using the EtherNet/IP protocol. Passed basic enumerations, I’m stuck with the tools I identified.
cp… Continue reading EtherNet/IP exploitation tools/libraries [closed]
Context
During a CTF, as www-data, I managed to exfiltrate an .rnd file used by phpseclib on a PHP app (I exfiltrated the entire app). Since SSHD is configured with PubkeyAuthentication yes and PasswordAuthentication no, my guess is that i… Continue reading exfiltred .rnd file exploitation
Context
I am playing around with a machine from hack the box. I found what appears to be a squid v. 4.6 listening on port 3128. None of my requests works
< HTTP/1.1 400 Bad Request
< Server: squid/4.6
< Mime-Version: 1.0
< Date… Continue reading Find configured domains accepted by a reverse proxy