Tag Info

Hot answers tagged

12

Well, open port does not necessary mean that anyone can enter. If you have an open port on a router/modem with nothing listening behind, then there is nothing to compromise. Of course, this won't let you work from outside your home either. For this to happen, you have to put the VPN server and make it listen to this open port. What are the ...


3

There are vulnerable mobile apps that one can run in an emulator, simulator, or on device. (*) There is a testing ground for smart grid and industrial controls systems which includes an RF test ground component. It's called SamuraiSTFU, a nameplay on the original SamuraiWTF guest VM for testing vulnerable web applications. I think WTF stands for Web ...


3

AppSec has a nice list: Reverse Engineering the Application Code Testing for Common Libraries and Fingerprinting Enumeration of Application Known Controllers Information Disclosure by Logcat Hidden Secrets in the Code Storing Sensitive Data on Shared Storage (exposed to all applications without any restrictions) Cryptographic Based Storage ...


2

I'm assuming data is entered by some sort of front end, with a list of fields? For arguments sake I'll assume 4 fields. In the first field do this: ''',(SELECT @@version), (SELECT @@version), (SELECT @@version))-- In the other fields put anything you want because they're commented out by the double dash anyway. This should return the server version to you ...


2

Before you embark on the "fist step" of information gathering. You may want to consider step 0: "What are you attacking, and what is your goal?". The point of gathering information is to determine your target's attack surface, and what attacks are applicable. Is this a web service or web application? You might want to gather information about what ...


2

You're so very close to the name of the Firefox/Iceweasel plugin you need with your question title! Tamperdata: https://addons.mozilla.org/en-us/firefox/addon/tamper-data/ You could also use one of the Web proxies shipped with Kali, OWASP-ZAP or Burp Suite. You may want to gloss over the manuals for these, but in general you start them up, aim your ...


2

1. Can an x64 payload work on an x86 architecture 64-bit executables can not work on an x86 architectures because there are two many differences between the architectures. Beyond the address space limitations there are 64-bit registers that just do not exist. Parameters for functions are handled entirely differently. Machine instructions operate ...


1

The first place to look is the server header. Depending on the server configuration it may report all enabled modules. Alternately you can use a specially formulated request which will provide a less reliable detection. The AddHandler directive allows a script to answer with a non 501 response to incorrect HTTP verbs. I'm using this technique in my Apache ...


1

The Metasploit Framework is my go-to tool for pentest automation still to this day, however, I do like what I've seen of CORE INSIGHT and Immunity Security SWARM. There are a few tools such as Loki (or the older Yersinia tool), intrace, Chiron, mana-toolkit, mitmf, and Responder.py that must be run outside of the Metasploit framework, but so many things can ...


1

Since all of the common virtualization products only emulate ethernet adapters and not 3G or LTE the answer is, that there can not be such virtual appliance. Also, there is no difference between 3G, LTE, DSL, and local ethernet apart from MTU, bandwidth and latency as long as you stay on the IP level.


1

Linus Law (the more people have access to the sourcecode, the more people will find and report bugs) only applies when people have an incentive to get bugs fixed. This incentive usually only exists when they use the software. So when your software is highly optimized for you and you don't expect that a larger community will form around it, you won't get many ...


1

The OWASP Mobile Security Testing Guide -- https://www.owasp.org/index.php/OWASP_Mobile_Security_Project#tab=Mobile_Security_Testing (a link to the GDocs file as well as a huge overview)


1

Extending the OWASP theme... OWASP highlights a top 10 of issues to be concerned with: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project As well as the top 10 it is worth reflecting on the attack surface you are managing: https://www.owasp.org/index.php/Attack_Surface_Analysis_Cheat_Sheet One of the OWASP tools, Zap (Zed), helps spider your ...


1

You can find a lot of CTF event in this website as a reference about how they organize it, their CTF's type, and what kind of challenges offered. For a more detailed and technical stuff about CTF challenges, I recommend you to read some CTF writeup by active CTF teams. As an example, Dragon Sector is an active team and usually make some writeup after ...



Only top voted, non community-wiki answers of a minimum length are eligible