Collaborate Disseminate
I’ve completed a bufferoverflow attack by injecting shellcode into buffer, and executing exploit by:
./binary $(python -c ‘print overflow +shellcode + adressofshellcode’)
Above exploit is working and I’m able to exploit th… Continue reading Bufferoverflow attack shell code adress calculation
I’m working on an insertion encoder that is basically encoding the shellcode by the following python script:
#!/usr/bin/python
# Python Insertion Encoder
import random
shellcode = (“\xfc\xe8\x82\x00\x00\x00\x60\x89\xe5\x3… Continue reading Testing Encoded shellcode on windows
There is a security challenge where you have to execute code on the server to retrieve a flag, and this code has to be executed using an XSL document.
So I found a way to make the server interpret my own XSL file, And I used… Continue reading Execute a PHP function that returns an array from an XSL file
Sourcefire detected a SERVER-IIS multiple extension code execution attempt event and captured a packet. It originated from a Chinese IP, AbuseIPDB has several records about its malicious activity. Some of the logs included a … Continue reading SERVER-IIS multiple extension code execution attempt
I am trying to do some buffer overflow attacks from kali to windows and there is one s/w “SLmail 5.5” which has buffer overflow vuln. But I cannot find it in torrent or google search to download slmail. everywhere I can only … Continue reading Where can I find SLmail 5.5 to download? [on hold]
My antivirus software has detected an EXE downloaded from Internet as infected with virus Malwr.Heur.MSILPerseus. It has quarantined it. However, I wanted to decompile & study it’s code. Will it be safe to decompile the E… Continue reading Is it safe to open virus infected EXE with Telerik JustDecompile?
My antivirus software has detected an EXE downloaded from Internet as infected with virus Malwr.Heur.MSILPerseus. It has quarantined it. However, I wanted to decompile & study it’s code. Will it be safe to decompile the E… Continue reading Is it safe to open virus infected EXE with Telerik JustDecompile?
Foxit Software says it will fix two vulnerabilities in its PDF reader products that could be triggered through its JavaScript API to execute code. Continue reading Foxit to Fix PDF Reader Zero Days by Friday
Mozilla fixed three critical vulnerabilities and made Flash click-to-activate by default when it released Firefox 55 on Tuesday Continue reading Mozilla Fixes 29 Vulnerabilities in Firefox, Makes Flash Click-To-Activate
Researcher Paulos Yibelo said that Dashlane elected not to patch a vulnerability he disclosed more than a year ago in all versions of the password manager application. Continue reading Dashlane, Researcher at Odds Over Potential Privilege Escalation Vulnerability