Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

New answers tagged

1

Because you're not saying anything about RelRO, I'm assuming no RelRO (so no leaking of the address of strcpy because it isn't called yet). Yet, this doesn't matter much, here's why: You say PIE is enabled, which in combination with ASLR will randomize the location of the binary in memory and thus the location of the PLT and GOT. Hence you cannot leak from ...


1

I don't understand the full details behind it.. but to my knowledge you can overflow the buffer but because code execution isn't returning from a function back to main() you will not be able to overwrite EIP. Correct me if I'm wrong but EIP is the 4bytes after EBP. If I overflow the buffer and view it in gdb I can't see that I wrote well over EBP but EIP ...


2

It's completely normal that a site is only available with the domain, and it's vital for shared hosting: before the Host: header was added in HTTP 1.1 (RFC 2068, 14.23 from 1997, updated in RFC 7230, 5.4) every site required an own IP address, and before SNI (RFC 6066, 3) it was pretty much the same with HTTPS. This same Host: header could be used in your ...


1

Penetration testing is done in multiple steps. From the information you have provided, you seem to have understood that the first step is information gathering. However, you violated a core principle of ethical penetration testing: Never attack a system you don't own or have permission to attack! Given that your teacher gave you two IP addresses to attack, ...


3

Yes, ISO/IEC 27007 provides guidance on managing an information security management system (ISMS) audit program, on conducting audits, and on the competence of ISMS auditors, in addition to the guidance contained in ISO 19011:2011. ISO/IEC 27007 is applicable to those needing to understand or conduct internal or external audits of an ISMS or to manage an ...


2

you can use the flag -PE, which performs a ICMP echo as an example: nmap -sn -n -PE 192.168.1.1-255 or for a cleaner result nmap -sn -n -PE 192.168.1.1-255 | grep report | cut -d" " -f5


0

Regardless the web server software used, web applications typically have a path and a hostname. If the web server is configured to serve an application using the default virtual host and the path to a common web application is the default, http://192.0.2.1/path/to/app type URLs alone could be used for enumeration. If the application is only available on a ...


Top 50 recent answers are included