So I hope I’m phrasing this right. I’m trying to exploit a piece of c code which you can see below.
#include <stdlib.h>
#include <unistd.h>
#include <stdio.h>
#include <string.h>
int user_age;
void secretClub(){
…
Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i’m getting requests from totally unknown dudes, such as this one:
FROM: [::ffff:149.129.139.48]:52306
[ANS]
PO…
I have two SSDs in my laptop. one is SATA 500GB and the other is M.2 SATA 250 GB. I used the following steps for both to securly erase them so that I can sell the laptop:
unfreeze the drives:
sudo systemctl suspend
Set a User Password: h…
I’ve studying and practicing different approach to SQLi filter bypass and I faced a challenge. What if the WAF filters look for specific strings rather than SQL keywords?
Example:
Filter: /UNION/
SQLi: UnIoN
Filter: /UNION/i
SQLi: un/**/i…
Everyone knows of the common cybersecurity tips to be careful when you open links in an email. But every day we look for something on the Internet, clicking links which the search engine shows us, and we do not have the same fear. Why are …
I want to make it impractical to link the users to their sensitive data without their passwords – even with a full access to the database.
Furthermore, if a user has multiple pieces of sensitive data, I also want to avoid linking the diffe…
My school supposedly cuts everyone’s connection at exactly 12:00am. Although the network is still there, Windows shows the "no internet" sign when connecting to the network.
However, the strange thing I have been noticing is that…
ssh-keygen has the following options for a key type (-t):
dsa | ecdsa | ecdsa-sk | ed25519 | ed25519-sk | rsa
I am not familiar with the -sk notation and it’s not explained in the man page.
What does it mean?
I am working on exploiting an application on MIPS to further my knowledge of ROP chaining. The library I am trying to build a ROP chain is libuClibc-0.9.30.3.so. I found a gadget that I want to use using Ropper. The offset is marked to be,…
I am attempting to solve a CTF challenge where I am logged in as a member of the www-data group and the apache2 service is misconfigured and can be run as sudo without a password. What I am attempting to do is access a token stored at /roo…
