Collaborate Disseminate
kali was closely based on debian – it gave kali consistency and dependability. Kali is now based on debian bleeding edge testing distro, that makes it a bit more unstable than previous editions and as debian testing makes changes, kali wi… Continue reading What is now the most active penetration os community [closed]
I am trying to write an heap exploit for a vulnerable dovecot program (CVE-2019-11500). Now I am trying to see what happens when I trigger the vulnerability but I don’t know where to look for. The visualize heap command doesn’t seem to get… Continue reading Find input in program with pwndbg
Let’s theoretically assume I have an overflow vulnerability on a certain service I want to exploit.
The service reside in 32bit Operating System on a 64bit Processor.
I’m attempting to wrap my head around the coding challenges in regards t… Continue reading Exploiting a service on 32bit OS on a 64bit processor with ShellCode
Im trying the phoenix vm, challenge stack-five on exploit.education (http://exploit.education/phoenix/stack-five/).
I run onto a problem while exploiting a stack overflow. The challenge is run execve(‘/bin/sh’) through shellcode. I grabbed… Continue reading Exploit education stack-five: trouble opening shell
I am trying to write an exploit for Dovecot (CVE-2019-11500). I downloaded an older version of Dovecot and got it to work (I just did the basics). Now I wanted to debug the program with pwndbg to inspect the heap but there was a failure:
p… Continue reading Problem with pwndbg
I researched CPU vulnerabilities in the past, such as Specter and Meltdown.
I read that one of those attacks is made easier if the code is a certain way. I cannot remember if it was related to being efficiently written, securely written, o… Continue reading Secure code makes exploitation easier with CPU vulnerabilities?
Using a Venn diagram, what relationship does reverse engineering, exploit development, and application security have with each other? I would like to make a Venn diagram for this topic, but I cannot find the right words to place in
Continue reading reverse engineering vs exploit development vs application security? [closed]
I have this code that I need to use to perform a ret2libc
#include <stdio.h>
#include <string.h>
int main(int argc, char *argv[])
{
char buf[256];
printf(“buff is at:%p\n”,buf);
printf(“%s”,argv[1]);
strcpy(buf, … Continue reading segmentation fault at strcpy while perforforming a buffer overflow
If someone is trying to hack a laptop with buffer overflow how would he know the specific amount of bytes you are supposed to send to that laptop in order to cause buffer overflow?
Continue reading How may bytes should you send for buffer overflow? [duplicate]
I’m curious if there are any examples of malicious JavaScript accessing a devices microphone from the Browser without user interaction?
Continue reading Examples of malicious javascript accessing device microphone