Vicnum is a training game put out by OWASP. If you play the game the first page will ask you for your name. Enter anything then hit continue. I typed 'Name'. You should be at this URL now: http://vicnum.ciphertechs.com/cgi-bin/jotto1.pl Enter your five
This is a toy program that we want to monkeypatch. It really doesn't do anything except call socket(). {% highlight c %} include <stdio.h> include <sys/types.h> /* See NOTES */ include <sys/socket.h> int main() { printf("calling socket\n"); return
Hi there! So this post will be the first in a series that focuses on an interdisciplinary approach to cyber security- with an emphasis on finance. The series of posts will address the growing evidence that security can only be achieved through a thorough, well-rounded understanding of all the issues
A well-known set of vulnerable programs to practice exploitation can be found at gera's insecure programming. I will go through several challenges over the coming weeks. Ideally, I want to complete them all. Let's see how far I can go. In this post I will go
1. Run metasploit: $ ./msfconsole 2. Create the database which metasploit uses to store the nmap data: > db_driver sqlite3 > db connect 3. NMap the target, and place the results into the database. > db_nmap target you may have to: > db_nmap -Pn target 4. Run Autopwn:
During a recent Hack Night, we tested some Content Management Systems and found a XSS vulnerability OWASP A2 in Frog CMS 0.9.5. This allowed a non admin user of the CMS to exfiltrate other users' or admin's session cookies for possible session hijacking. Simulating a
In early December, Poly's Brooklynt Overflow participated in UCSB's annual iCTF. Every year, iCTF has original storylines and challenges. It's really incredible what they do with the competition, and it's always a great surprise. This year, participating teams were acting as countries
