New answers tagged

2

If the kernel is exploited then any software based constraints on file access can be bypassed. Using an encrypted filesystem would prevent someone from booting up from a USB key or removable media, mounting the filesystem and changing the file, but not against a loadable kernel module inserted in the running system. I remember when most hard disks had ...


0

Since you never know, when new vulnerability will be found, my suggestion for you is to install mod_security on server side. It's not 100% security, but at least, it will make harder for hacker to perform attacks such as LFI, RFI etc.


1

The URL in question is part of a Local File Inclusion attack targeting the Slider Revolution plugin. The objective of this particular attack is to make the wp-config.php downloadable in a raw, non processed format. Doing so would give the attacker your database credentials as well as any other stored credentials such as FTP and mail server login information. ...


2

You can write a frame for any function call, it doesn't have to be system(). However most exploits will aim for a shell if possible. The fake_ret address is simply where the execution will return to after the system() call. If you just put \x41\x41\x41\x41 there it will segfault. If you point it at exit() it will gracefully exit, or you could point it at a ...


0

Just a thought - while not really hacking the server, being able to upload a jpg file with embedded self executing js from the exif, which can then cause mayhem on the client machine, would certainly be a security issue from the user's perspective. see: http://blog.trendmicro.com/trendlabs-security-intelligence/jpeg-files-used-for-targeted-attack-malware/


1

The privacy of a system is all about making clear to the user how their information is going to be used and shared. That is, the amount of control an individual should be able to have and expect. The security of a system is ensuring that this expectation of privacy is met. That is, the mechanisms that can be put into place to provide this level of control.


5

Security is defined as the state of a system in which confidentiality, integrity and availability of data is granted. Privacy is the ability of a natural person to control the distribution of his or her personal information. If you are using for example a system of a big company - let's call it Oogle - it might be that their system is pretty secure, but ...


0

That would be much more difficult because you would need to use an offset each time. Various solutions exist, depending on which technique is used: If ASLR is used, you don't know for sure where your shellcode is located, but you can still bypass this by spraying. Also only the base address is randomized, not the function offset, and you can return to plt. ...


1

Breaking in is all about research. You need to spend time surveying a network and it's various points of entry or access. Part of that will be reviewing the hardware firmware and software running. The first point of attack I might pick would be wifi. I would find out the model of access point they use and then download the firmware. Once I have the ...


0

From what I've seen personally, heard from speakers at conferences, and read news articles about, most companies are extremely porous when it comes to security. So it should come as no surprise that attackers generally don't have to use 0-day vulnerabilities. If you want hard data, Trustwave has published some statistics they gathered from investigations ...


4

I drove a project that looked at this while I was at Microsoft. The answer is that the vast majority of breakins do not use 0 day. We used malware as a proxy for breakins, because data was more accessible and puts the use of 0days in perspective. The data here doesn't break out sophisticated attackers, but the arguments you put forth as to why no one ...


0

Assuming it's not a "fake" off state (as other posters point out, a relatively easy thing to do if the phone is under control of the attacker), then: probably not. Most phones that are in an "off" state will turn off the radios (cellular, wifi, and bluetooth) to save power.


2

When you select a module such as exploit or payload in msfconsole, type the info command and it is going to show you the description of the module detailing what the module does. You can get the same information on the rapid7's online module pages as well. An example (taken from Offensive Security's Metasploit Unleashed is given below: msf ...


1

Metasploit Unleashed (https://www.offensive-security.com/metasploit-unleashed/) is some documentation that has information on what tools exist in the metasploit framework, what their purpose is and how to use them. It is written by Offensive Security, who are part of/fund Kali Linux.


5

Regardless of the placement of the PHP code [...], the website just shows the image file when I open it after uploading Yes, that is how it should be. The server would be seriously vulnerable if it would interpret .jpg files as .php files depending on the content instead of the extension. So in such a case, what should be done to execute the file ...


0

In your Kali machine you could push the netcat listener into the background by issuing: nc -lvp [port] & (Don't use the brackets in your command) You cursor may be on a new blank line, but no worries, just hit enter and it will bring you back to where you can issue another command. Feel free to look at the job in the background by using: jobs ...


8

Notice the magic string () { :; };. They are trying to poke around and see if your server is vulnerable to the ShellShock exploit. Perl is used here to print and see if the attack succeeded. Make sure to patch and update your server. You should be safe from these kind of attacks.



Top 50 recent answers are included