New answers tagged

1

Based on comments, I am assuming this is a LAMP stack (and will have to make a few more assumptions as well). I'll nudge you and others who find themselves here in the right direction :D How do I open a shell/what does that mean? In general, a shell (as described here) is a way to send arbitrary commands to the operating system and obtain output (results ...


0

This looks more like a bug in the application which is ignored or handled by the server rather than something exploitable. This code (in c#) List<string> list = new List<string>(); list.Add("Hello"); list.Add("World"); Console.WriteLine(list.ToString()); Outputs: System.Collections.Generic.List`1[System.String] So it would appear that while ...


3

Tl,DR: Yes. But beware that you misunderstand what's going on and this may be a source of vulnerabilities. An argument of a program can be an arbitrary byte string that doesn't contain a null byte. The limitation with null bytes comes from the operating system. Depending on your programming language and its standard library, a null byte may be rejected, or ...


2

Yes, it is safe form an error-free perspective. As long as they are not special characters they should not influence anything. Take a look at the special characters listed here. If you do not use any of them in your string there should be no problem whatsoever.


1

This boils down to a basic networking problem: if the exploit requires you to connect to a listening network service on the target (e.g. exploiting BlueKeep requires you to connect to the RDP service running on the target), you need a way to connect to the target by IP address. You mention the target is behind a NAT, and that port forwarding is not ...


Top 50 recent answers are included