Collaborate Disseminate
I started reading "Hacking, The Art of Exploitation" and I am confused about some things regarding memory examination.
When I disassemble main, I get an output of all memories where the individual assembly instructions are, right… Continue reading Confused about memory examination using gdb
I want to clear out my concept since I’m not a developer by trade. Imagine there is source code vault where codes/binaries are checked in. Developers check out this code and deploy them in the production environment, and we are all happy. … Continue reading how to match source code in vault with that in production environment
I’m doing a binary challenge from pwnable.kr and I’m examining a some ROP gadget.
Until now I’ve always used gadget ending with ret or syscall/int 0x80, but now ROPgadget gave me a gadget ending with ret 0.
What’s the difference wrt ret?
Excuse the naive question but I’m trying to understand a bit about security in home health and medial devices and a recent report about how home Covid test results can be altered has left me a bit confused about how security in Bluetooth a… Continue reading How is it possible to simply a decode Bluetooth communications from a medical device?
I have come across a lot of guides and blogs about reverse engineering where they use labs to teach various techniques and methods to break binaries. My question is what actual use cases does reverse engineering have in the real world, as … Continue reading What can I do with reverse engineering
The thing that helped me to understand what is a "public key" was to parallel it with a door lock:
The door lock is public in the sense that anyone can try to unlock it and the door key is the private in the sense that generally,… Continue reading The difference between a virtual door-lock and a public key [duplicate]
I need help identifying and cracking this encryption. it is in a .LDB file format.
i have tried opening the file with different applications and tried to find what type of encryption this is but couldn’t find any solution.
this encryption … Continue reading I need help decrypting a code [closed]
This question is about if any technologies used by a web browser (HTTP, TCP, JavaScript, etc.) can be used to push a binary file from the web server to a random folder on the client.
This is for a security discussion at work about the dang… Continue reading What technologies used in a web browser, if any, can be used to push a binary from a server to a client machine?
I am pentesting a web application. It makes a backend call to another application, and I am trying to hijack that call.
I have gained control over the URL path, query parameters, and fragment that is being sent (e.g. if the URL is https://… Continue reading Is there any way to get a unicode character that has a byte of 23?
I have a C code project, I want to use .so lib to verify certificate for valid.
I know there is a way to crack .so file by using below tools:
1.IDA_Pro_v6.8_and_Hex-Rays_Decompiler_
2.WinHex
3.ARM_ASM
so, in my opinion, the .so is no… Continue reading Is there any good way to avoid bypass .so file?