Information Technology Security Blog

File Structure

2012-03-18T13:00:00.001-07:00

Magic Number

2012-03-18T12:59:00.001-07:00

Unallocated Space

2012-03-18T11:42:00.000-07:00

Definition Unallocated space is logical space on a operating system hard drive, e.g Linux, can write to. To put it another way it is the opposite of “allocated” space, which is where the operating system has already written with files. Examples. If the operating system writes a file to a certain space on the hard drive that part of the drive is

Slack Space

2012-03-18T10:56:00.001-07:00

Slack space is harddisk portions not fully used by the current allocated file, and containing data from a previously deleted file. The example save a 768 bytes file (User_File.txt) that requires only sector 1 and 1/2 sector 2. Depending on the operating system, the 256 bytes in sector 2 might be filled with 1′s or 0′s . Sectors 3 and 4 would not be overwritten and

Master Boot Record

2012-03-15T11:56:00.002-07:00

A master boot record (MBR) is boot sector type from IBM Personal Computer consisting of a sequence of 512 bytes that is ocated at the first sector of a data storage device like hard disk. MBR is usually placed on storage devices. The use of MBR are : As a partition table holding, which describes the partitions of a storage device. In this context the boot sector may also be called a partition

Root Exploitation via Web Vulnerability (DVWA)

2012-03-05T10:40:00.001-08:00

In this tutorial we will practice how to exploit via Web Vulnerability. We use DVWA as the web. We will upload our payload via file upload facility in DVWA (high level), then execute nc command to open socket and listening (medium level), then execute our payload. 1. Information Gatherin using Zenmap We know that the OS kernel is 2.6.3.9 2. Search exploit code in exploit db /pentest/

Combining Beef and Metasploit Framework

2012-02-29T08:32:00.001-08:00

In last tutorial we practice using metasploit for exploiting the target and modify the webpage in target OS while inject it with beef code. Now, we will using web page injected with beef code. Then, we activate metasploit framework using meterpreter payload and keep it in listening process. So, when the target access our web page, we can exploit it using meterpreter. Now, let's practice it.

Using Auxilary in Metasploit for Port Scanning

2012-02-27T12:38:00.001-08:00

We will use an Auxilary in Metasploit for Port Scanning

Using Metasploit and Beef Framework

2012-02-27T12:24:00.001-08:00

In this article we will combine to use metasploit framework for entering the target, then modify the website code (in this case xampp, file spash.php) can access hook.js when it is loaded. So when target access this website, we can control with beef framework. Now, let's scan the target Next, let's see the content of target OS using metasploit framework Ok, we assume that we

Using msfpayload and msfencode

2012-02-27T07:31:00.001-08:00

In this article we use msfpayload combining with msfencode for generate executable malware will be sent into target system. Before we start, let's we know about them. Msfpayloads is a tool in Metasploit Framework to generate executable malware based on avaiable payloads. Msfencode is one of tools in Metasploit Framework used to encode payloads to pass virus scanners protection so we can

Social Engineering and SET

2012-02-27T07:30:00.003-08:00

Social engineering is art of manipulating people into performing actions or divulging confidential information. While it is similar to a confidence trick or simple fraud, the term typically applies to trickery or deception for the purpose of information gathering, fraud, or computer system access; in most cases the attacker never comes face-to-face with the victims. The

Stack Based Exploitation in Linux

2012-02-24T09:35:00.001-08:00

1. Turn off ASLR root@bt:~# cat /proc/sys/kernel/randomize_va_space root@bt:~# echo 0 > /proc/sys/kernel/randomize_va_space root@bt:~# cat /proc/sys/kernel/randomize_va_space 0 2. Creating program that will be exploit #include <stdio.h> #include <string.h> int main(int argc, char** argv) { char buffer[500]; strcpy(buffer,

SEH Stack Based Overflow in Easy Chat Application

2012-02-22T06:04:00.001-08:00

First start Easy Chat Server In the client we can access easy chat by using browser type the IP of Easy Chat Server : 192.168.56.101 Then try to enter the room chat by typing username and password username : admin password : admin Now, we have entered chat room To know process happen, we use

SEH Based Overflow - Exploitation in Application with SEH Handler and Safe SEH Big ANT 2.52

2012-02-17T07:27:00.001-08:00

In the previous article we have tried to do exploitation buffer overflow direct return. Now, we are going to try to exploit application with SEH and Safe SEH. Before we do it, we need to install the application – Big Ant Server v2.52. 1. Creating Fuzzer Now let's create fuzzer like the one to exploit WarFTP in

Analyzing How to Create Fuzzer to Exploit Buffervlow Vulnerability in Ministream RM-MP3 Application

2012-02-14T18:50:00.000-08:00

In the two previous article we have learned Exploitation via Buffer Overflow Vulnerability - Stack Based Overflow (Case Study: Buffer Overflow in Mini Stream RM MP3 Converter). In this article we will explain how we get the fuzzer code. To make a fuzzer, we will create file containing many characters to make Mini Stream crash ----------------------------------------------------------------- &

Trying to Expoit VUI Player Via Buffer Overflow Vulnerability

2012-02-14T06:09:00.001-08:00

First I try to create fuzzer buffer += "\x41" * 1500; filename = "vui" + ".m3u"; file = open(filename,"w") file.writelines(buffer) file.close() I save it with fuzzvui.py, run with python, it work well to make VUI Player crash.. Then I try to make pattern character with pattern create, and replace the buffer with it, and try to analyze in what number of character EIP is overwritten

Exploitation via Buffer Overflow Vulnerability - Stack Based Overflow (Case Study: Buffer Overflow in Mini Stream RM MP3 Converter)

2012-02-11T11:47:00.000-08:00

In this case we will try to explore the buffer overflow in one of Windows Application - Mini Stream RM MP3 Converter, so we can exploit the OS via this vulnerability. Before it, we need this kinds of software and tools : 1. Mini Stream RM MP3 Converter, you can download it in http://mini-stream.net/rm-to-mp3-converter/download/ 2. Ollydbg for debugger , download it in http://www.ollydbg.de/

Buffer Overflow Exploitation (Study Case - Vulnerability in WarFTp 1.65)

2012-02-05T09:32:00.000-08:00

Now, we will practice how to use buffer overflow for exploitation. In this tutorial we use vulnerability in warftp 1.65. In addition to we need Ollydbg as debugger. First we need to do information gathering using zenmap to scan ip in the network. Now we can know the active host that have been connected.. From Zenmap we also can know running services (service enumeritation)..

The Introduction of Ollydbg

2012-02-04T23:22:00.001-08:00

OllyDbg is a 32-bit assembler level analysing debugger for Microsoft® Windows®. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable. OllyDbg is a shareware, but you can download and use it for free. Special highlights are: Intuitive user interface, no cryptical commands Code analysis - traces registers, recognizes

What is Fuzzer ?

2012-02-04T08:02:00.000-08:00

Fuzzer is a tool used by security professionals (and professional hackers :) to test a parameter of an application. Typical fuzzers test an application for buffer overflows, format string vulnerabilities, and error handling. More advanced fuzzers incorporate functionality to test for directory traversal attacks, command execution vulnerabilities, SQL Injection and Cross Site Scripting

Register Memory (Basic Knowledge)

2012-02-04T07:58:00.000-08:00

Register Memory Registers are memories located within the Central Processing Unit (CPU). They are few in number (there are rarely more than 64 registers) and also small in size, typically a register is less than 64 bits; 32-bit and more recently 64-bit are common in desktops. The contents of a register can be “read” or “written” very quickly however, often an order

ssssttttttt

2012-02-01T17:11:00.001-08:00

http://www.4shared.com/zip/46Fs5jWn/scx010c068.html

Shodan (The Basic Knowledge)

2012-02-01T11:10:00.001-08:00

SHODAN is a search engine that lets you find specific computers (routers, servers, etc.) using a variety of filters. Some have also described it as a public port scan directory or a search engine of banners. SHODAN also lets you use boolean operators (‘+’, ‘-’ and ‘|’) to include/ exclude certain terms. By default, every search term has a ‘+’ operator assigned to it. In addition to boolean

Maltego (The Basic Knowledge)

2012-02-01T10:58:00.001-08:00

Maltego is a unique platform developed to deliver a clear threat picture to the environment that an organization owns and operates. Maltego’s unique advantage is to demonstrate the complexity and severity of single points of failure as well as trust relationships that exist currently within the scope of your infrastructure. The unique perspective that Maltego offers to both network

SQL Injection Blind (The Basic Knowledge)

2012-02-01T10:56:00.001-08:00

Blind SQL Injection is used when a web application is vulnerable to an SQL injection but the results of the injection are not visible to the attacker. The page with the vulnerability may not be one that displays data but will display differently depending on the results of a logical statement injected into the legitimate SQL statement called for that page. This type of attack can become