Words like “privacy” and “confidentiality” and “cyber-security” are thrown around frequently in discussions of technology, but many people consider these issues more idealistic than essential. It may be widely accepted that confidentiality is better than no confidentiality, but few people would go out of their way to protect their information
Use this .gdbinit. Make sure you save it as your ~/.gdbinit file in $HOME. This adds functionality: you can see the stack, data, registers and code and how they change on each cmd entered into gdb. For best results use 80x24 sized windows (It acts like a motion picture in
You are probably going to want to do this to make your initial exploit examples easier to work with and understand. Turn off ASLR: $ sudo echo 0 > /proc/sys/kernel/randomize_va_space or $ sudo sysctl -w kernel.randomize_va_space=0 Turn off NX (compile option to GCC)
Here's a quick one liner to make linux shell code that runs "exec /bin/bash". The last argument of c to msfencode generates the c. {% highlight bash%} msfpayload linux/x86/exec CMD=/bin/sh R | msfencode -b \x00\xff -t c > shellcode.h {% endhighlight %} The
“In everything one thing is impossible: rationality.” –Friedrich Nietzsche Unfortunately, Nietzsche’s assessment seems to hold true with regards to peoples’ attitudes about privacy. The New York Times published an article called “Our Paradoxical Attitudes Toward Privacy” that discusses how people make decisions regarding privacy. http://bits.blogs.nytimes.com/
The GNU Compiler Collection has a FORTIFY_SOURCE option that does automatic bounds checking of dangerous functions to prevent simple buffer overflows. The FORTIFY_SOURCE code will do static and dynamic checks on buffer sizes to prevent these buffer overflows. Details FORTIFY_SOURCE will do checks on the following functions:
Vicnum is a training game put out by OWASP. If you play the game the first page will ask you for your name. Enter anything then hit continue. I typed 'Name'. You should be at this URL now: http://vicnum.ciphertechs.com/cgi-bin/jotto1.pl Enter your five
This is a toy program that we want to monkeypatch. It really doesn't do anything except call socket(). {% highlight c %} include <stdio.h> include <sys/types.h> /* See NOTES */ include <sys/socket.h> int main() { printf("calling socket\n"); return
Hi there! So this post will be the first in a series that focuses on an interdisciplinary approach to cyber security- with an emphasis on finance. The series of posts will address the growing evidence that security can only be achieved through a thorough, well-rounded understanding of all the issues
A well-known set of vulnerable programs to practice exploitation can be found at gera's insecure programming. I will go through several challenges over the coming weeks. Ideally, I want to complete them all. Let's see how far I can go. In this post I will go
1. Run metasploit: $ ./msfconsole 2. Create the database which metasploit uses to store the nmap data: > db_driver sqlite3 > db connect 3. NMap the target, and place the results into the database. > db_nmap target you may have to: > db_nmap -Pn target 4. Run Autopwn:
During a recent Hack Night, we tested some Content Management Systems and found a XSS vulnerability OWASP A2 in Frog CMS 0.9.5. This allowed a non admin user of the CMS to exfiltrate other users' or admin's session cookies for possible session hijacking. Simulating a
