2022 Developer Survey is open! Take survey.

Hot answers tagged

3 votes

Exploit Development - Bad chars

There is not a universal root cause for bad characters in exploit paylods. What is considered a bad character in one buffer is not considered a bad character in another buffer, unless that character ...
user avatar
  • 183
1 vote
Accepted

Is a buffer overflow / command injection attack possible with magnetic strip?

Theoretically Possible but unlikely. Due to: The small size of the magstrip, because the compromise needs to be contained in the strip itself, my smallest commandline injection attack was `touch /tmp/...
user avatar
1 vote

Import a exploit into msfconsole on ubuntu

We don't have access to the strucutre of your filesystem but in general you need to make sure: Your .msf4 folder is in your home directory. Your directory strucutre for the exploit corresponds to ...
user avatar
  • 183
1 vote

Is there a way to check if vulnerability introduced by npm package is reachable/exploitable

The standard approach to prioritize vulnerability management is to focus on severity level. You should focus on Critical vulnerabilities first,then High etc. As suggested by Robert, it's not practical ...
user avatar
1 vote

How to track which php file executed a malware binary

I have the same problem. Try to find "dir" file on your public folder like /var/www/. In my case I found this on my laravel website, there are file looks like this on my "public" ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible