argv[0]

tag:blogger.com,1999:blog-70312125071248679892024-08-29T22:02:09.265-07:00argv[0]Network Security AssessmentMuhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comBlogger33125tag:blogger.com,1999:blog-7031212507124867989.post-82857125409382571712022-08-19T07:27:00.001-07:002022-08-19T07:28:26.127-07:00Metasploit Dev (Ubuntu)

Installtion Requirement for Metasploit (Git) 1. ruby 2. ruby-bundler 1. libpcap-dev 2. libpq-dev 3. libsqlite3-dev

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-75472281737306293132017-08-15T19:48:00.001-07:002017-08-15T19:48:42.356-07:00Zero Fill Hard Disk in Linux

#shred -n 2 -z -v /dev/sdc1 -n 2 = number of passes -z = overwrites hard disk data with zeroes -v = display progress operation /dev/sdc1 = partition

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-5226372554930067462017-06-05T05:25:00.002-07:002017-06-05T05:27:05.638-07:00Ubuntu Dual Screen with 1 Touchscreen

$ xinput --list ⎡ Virtual core pointer                     id=2 [master pointer  (3)] ⎜   ↳ Virtual core XTEST pointer               id=4 [slave  pointer  (2)] ⎜   ↳ Advanced Silicon S.A. CoolTouch(TM) System id=11 [slave  pointer  (2)] ⎜   ↳ Dell Dell Universal

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-79182435442179832772017-04-22T04:58:00.003-07:002017-04-22T04:58:37.798-07:00

Extract windows serial from BIOS sudo xxd /sys/firmware/acpi/tables/MSDM

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-86666894448157761722017-02-24T06:46:00.000-08:002017-02-24T06:46:09.699-08:00

RUBY ON RAILS INSTALLATION (WINDOWS 7 x64) Step 1 Download all the required files below:- https://dl.bintray.com/oneclick/rubyinstaller/rubyinstaller-2.3.3-x64.exe https://dl.bintray.com/oneclick/rubyinstaller/DevKit-mingw64-64-4.7.2-20130224-1432-sfx.exe https://nodejs.org/dist/v6.10.0/node-v6.10.0-x86.msi Step 2 Install rubyinstaller installer install devkit create

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-44621799756003222682014-12-09T07:30:00.004-08:002014-12-09T07:30:59.497-08:00BulletProof FTP Client 2010 - Buffer Overflow (SEH) Exploit

Local exploit for BulletProof FTP Client 2010 - Buffer Overflow (SEH) Exploit, this exploit store 2nd shellcode on heap and use egghunter to locate and copy 2nd shellcode back to stack before executing the shellcode. https://gist.github.com/mfadzilr/c8980087db10c47bdfb6

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-77300831530171548092014-12-09T07:28:00.002-08:002014-12-09T07:33:22.103-08:00Advantech AdamView (.gni) SEH Buffer Overflow

Local exploit for Advantech AdamView (.gni) SEH Buffer Overflow, the vulnerability does not allow lower alpha character (a to z) so i encode the shellcode with custom encoder. https://gist.github.com/mfadzilr/7a45a7c6900ef0e86bc3

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-83736805441721071832014-11-12T00:45:00.001-08:002014-11-12T00:45:25.032-08:00FreeWMA SEH DEP Bypass Exploit

Originally found by metacom, you can view it here https://gist.github.com/mfadzilr/eb2d9a67ff1e6cbd1ae4

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-85238844105035372512014-09-28T16:48:00.000-07:002014-09-28T16:48:00.845-07:00HTTP FIle Server v2.3b Exploit - (MSF Module)

MSF exploit module for HTTP File Server v2.3b https://gist.github.com/mfadzilr/6b8fbc3ce9ee89623585 Original P.O.C http://www.exploit-db.com/exploits/34668/ by Daniele Linguaglossa

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-42359201254126065082014-09-28T01:52:00.001-07:002014-09-28T02:01:25.016-07:00Shellshock Test command line version

here is my simple bash command line to test if your site is vulnerable to remote bash vulnerability https://gist.github.com/mfadzilr/70892f43597e7863a8dc during my test, as long the cgi has "#!/bin/bash" it is vulnerable to an attack, and you can change the http method and header to anything (i think), it would still work.

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-64748194055162129492014-05-08T13:43:00.000-07:002014-05-08T13:45:13.428-07:00Gremwell Magictree - Nessus Compliance Audit Parser and Sample Report Template

I always having trouble generating compliance report using nessus, so i modify the nessus22mt.xsl in magictree nessus xml parser to assist me. Nothing fancy just a decent report to ease my load during reporting process. 1) nessus22mt.xsl https://drive.google.com/file/d/0B8CrAOgplUJcTGJWd21tZ1FtYW8/edit?usp=sharing 2) Sample report template (openoffice) https://drive.google.com/file/

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-19217003187984348882014-05-08T13:32:00.001-07:002014-05-08T13:32:15.348-07:00MSSQL 2008 Database Security Audit Script

#!/usr/bin/env ruby # Author : Muhamad Fadzil Ramli # Title : mssql audit script - 2013 # Installation: # yum install freetds freetds-dev ruby ruby-dev # gem install tiny_tds # Notes: # This script was created to assist me during mssql 2008 database security audit for a customer. # Reference: # CIS Security Benchmark # http://www.mssqltips.com/sqlservertip/2887/

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-34186240449834047042014-05-08T13:03:00.002-07:002014-05-08T13:09:35.525-07:00Kolibri HEAD Request Stack Buffer Overflow - FixRet Technique

#!/use/bin/env ruby # # Exploit Title: Kolibri HEAD Request Stack Buffer Overflow # Date: 03 May 2014 # Exploit Author: Muhamad Fadzil Ramli # Vendor Homepage: http://www.senkas.com/kolibri/download.php # Version: Kolibri 2.0 # Tested on: Microsoft Windows XP (EN) SP3 [Version 5.1.2600] # MSF Module : https://drive.google.com/file/d/0B8CrAOgplUJcVGpCTGY3VEVyam8/edit?usp=sharing # #

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-71520145882191783622014-02-07T18:57:00.000-08:002014-02-07T18:57:12.615-08:00Publish-It 3.6d - SEH Buffer Overflow

#!/usr/bin ruby env # Exploit Title: Publish-It 3.6d - SEH Buffer Overflow # Date: 8/2/2014 # Exploit Author: Muhamad Fadzil Ramli # Vendor HomePage: https://www.postersw.com # Software Link: https://www.postersw.com/publish3.exe # Version App: v3.6d # Tested on: Windows 7 x86 - Version 6.1.7600 # CVE:None # Notes:- # .pui sample file format taken from coresecurity p.o.c # This exploit only

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-48781339175453110542014-02-03T07:11:00.001-08:002014-02-03T07:11:07.407-08:00Adrenalin Player 2.2.5.3 (.m3u) SEH-Buffer Overflow ASLR+DEP Bypass

#!/usr/bin env ruby # Exploit Title: Adrenalin Player 2.2.5.3 (.m3u) SEH-Buffer Overflow ASLR+DEP Bypass # Date: 3/2/2014 # Exploit Author: Muhamad Fadzil Ramli # Vendor HomePage: http://software.naver.com/software/summary.nhn?softwareId=MFS_100099 # Software Link: http://software.naver.com/software/summary.nhn?softwareId=MFS_100099 # Version App: 2.2.5.3 # Tested on: Windows 7 x86 - Version

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-69609593426038935632013-10-11T23:10:00.003-07:002013-10-11T23:12:46.264-07:00Simple IIS Tidle Bug Enumeration Script

During a pentest, i need to show the iis tidle bug to a customer as prove. so i code a simple ruby script for them. #!/usr/bin/env ruby # iistidlebugpoc.rb # quick poc script for ms iis tidle bug require 'rubygems' require 'mechanize' require 'optparse' STDOUT.sync = true @agent = Mechanize.new #@agent.ssl_version = 'SSLv3' @agent.verify_mode = OpenSSL::SSL::VERIFY_NONE @options = {}

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-3957746151258722892013-10-04T16:11:00.002-07:002013-10-05T18:04:36.164-07:00PDFCool Studio Buffer Overflow Vulnerability

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # web site for more information on licensing and terms of use. # http://metasploit.com/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::FILEFORMAT include Msf::Exploit::PDF include

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-17062144149650663452013-09-19T07:42:00.002-07:002013-10-11T23:11:19.378-07:00PACMAN FTP STOR Command Exploit - DEP Bypass

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # web site for more information on licensing and terms of use. #   http://metasploit.com/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = AverageRanking include Msf::Exploit::Remote::Ftp def initialize(info = {})

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-74141608082199560722013-09-16T03:06:00.001-07:002013-09-16T03:06:10.241-07:00Updated: freeftpd exploit with XP & W2K3 DEP bypass

Update ROP for windows XP and W2K3 ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # web site for more information on licensing and terms of use. #   http://metasploit.com/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = NormalRanking include Msf::

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-35105750738942767812013-09-13T15:48:00.004-07:002013-09-13T15:53:15.212-07:00Updated : freeFTPd 1.0.10 PASS Command SEH Overflow - DEP Bypass

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # web site for more information on licensing and terms of use. #   http://metasploit.com/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Ftp def initialize(info = {})

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-87913266103390114252013-09-06T10:46:00.004-07:002013-09-06T10:51:20.590-07:00freeFTPd 1.0.10 PASS Command SEH Overflow - Metasploit Module

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # web site for more information on licensing and terms of use. #   http://metasploit.com/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = AverageRanking include Msf::Exploit::Remote::Ftp def initialize(info = {})

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-16363321598570616712013-08-08T06:18:00.003-07:002013-08-08T06:18:08.273-07:00

notes for me! How to configure cekai astro remote control to work with old decoder Press menu+004 (don't release menu key while key-in 004)

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-14780872654584070072013-03-09T19:15:00.002-08:002013-03-09T19:15:35.024-08:00Sami FTP Pre-Authentication SEH Buffer Overflow

### Exploit Title: Sami FTP Pre-Authentication SEH Buffer Overflow# Date: Mar 08 2013# Exploit Author: Muhamad fadzil Ramli <fadzil@motivsolution.asia># Vendor Homepage: http://www.karjasoft.com# Software Link: http://www.karjasoft.com/old.php# Version: 2.0.1# Tested on: Microsoft Windows XP Pro SP3## This file is part of the Metasploit Framework and may be subject to# redistribution and

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-25099930784806102252011-10-28T21:15:00.000-07:002011-10-28T21:15:54.785-07:00HTTP Header :: SQL Injection

simple script i wrote during a pentest for a customer, nothing fancy just practical :D #!/usr/bin/env ruby # network penetration test (10/2011) # http header blind sql injection require "net/http" require "uri" STDOUT.sync = true @url = URI.parse("http://xxx.xxxx.xxx") def fuxx(data)         req = Net::HTTP::Get.new(@url.path)     &nbsp

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.comtag:blogger.com,1999:blog-7031212507124867989.post-24618618693549348832011-01-17T19:09:00.000-08:002011-01-17T19:09:21.296-08:00eXtremeMP3 Player 2.0 buffer overflow (SEH - Egghunter)

## # $Id: $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions. Please see the Metasploit # Framework web site for more information on licensing and terms of use. # http://metasploit.com/framework/ ## ## # Security Team: Intranium Sdn Bhd, Malaysia ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote  &

Muhamad Fadzil Ramlihttp://www.blogger.com/profile/09576669073237747782noreply@blogger.com