Accessing Alternate Data Streams on VMDK Images on Linux.
Tag: Linux
crackmes.one “EZ crackme” Writeup
This is a write up for "EZ crackme" by R3tr0BS: https://crackmes.one/crackme/5fcfb87933c5d424269a1afc This challenge came with two files: Readme.txt and run.exe Readme.txt contained the following: so this is my first crackme, you need to use the password or..... do it your way, good luck, R3tr0. run.exe has a hash of 3bc592f4963add05a2d28bc469b5cd6ea00b973516ba1a1fccc10f1590f26152 % sha256sum run.exe 3bc592f4963add05a2d28bc469b5cd6ea00b973516ba1a1fccc10f1590f26152 run.exe …
Volatility on Ubuntu 20.04
Quick and dirty way to get Volatility working on Ubuntu 20.04
Changing apt’s User-Agent string
Quick howto on changing apt/apt-get's User-Agent string.
SLAE #7: Shellcode Crypter for Linux/x86
Introduction This blog series has been created for completing the requirements of the SecurityTube Linux Assembly Expert certification: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ Student ID: SLAE-877 To get the code provided in this exercise: % git clone https://github.com/droberson/SLAE.git The code will be within the Assignment-7 directory. RC4 I decided to use the RC4 algorithm due to the fact that …
SLAE #6: Polymorphic Shellcode for Linux/x86
Introduction This blog series has been created for completing the requirements of the SecurityTube Linux Assembly Expert certification: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ Student ID: SLAE-877 To get the code provided in this exercise: % git clone https://github.com/droberson/SLAE.git The code will be within the Assignment-6 directory. What is Polymorphic Shellcode? Quoting the Wikipedia article about Polymorphic Code directly: In …
Continue reading SLAE #6: Polymorphic Shellcode for Linux/x86
SLAE #5: Reverse Engineering Shellcode for Linux/x86
Introduction This blog series has been created for completing the requirements of the SecurityTube Linux Assembly Expert certification: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ Student ID: SLAE-877 To get the code provided in this exercise: % git clone https://github.com/droberson/SLAE.git The code will be within the Assignment-5 directory. Assignment Outline This particular assignment is to dissect three shellcodes from msfpayload using …
Continue reading SLAE #5: Reverse Engineering Shellcode for Linux/x86
SLAE #4: Encoding Shellcode for Linux/x86
Introduction This blog series has been created for completing the requirements of the SecurityTube Linux Assembly Expert certification: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ Student ID: SLAE-877 To get the code provided in this exercise: % git clone https://github.com/droberson/SLAE.git The code will be within the Assignment-4 directory. What is an Encoder? An encoder takes a set of data and transforms …
SLAE #3: Egg Hunters for Linux/x86
Introduction This blog series has been created for completing the requirements of the SecurityTube Linux Assembly Expert certification: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ Student ID: SLAE-877 To get the code provided in this exercise: % git clone https://github.com/droberson/SLAE.git The code will be within the Assignment-3 directory. What is an Egg Hunter? Egg hunter shellcodes are one example of a …
SLAE #2: Reverse Shell For Linux/x86
Introduction This blog series has been created for completing the requirements of the SecurityTube Linux Assembly Expert certification: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ Student ID: SLAE-877 To get the code provided in this exercise: % git clone https://github.com/droberson/SLAE.git The code will be within the Assignment-2 directory. The previous post outlined how the basics of writing shellcode and the prerequisite …
SLAE #1: Bindshell Shellcode for Linux/x86
Introduction This blog series has been created for completing the requirements of the SecurityTube Linux Assembly Expert certification: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ Student ID: SLAE-877 This course is an introduction to writing shellcode for Linux systems running on 32 bit x86 architecture. It consists of seven assignments: Writing a TCP bind shell shellcode Writing a reverse (connectback) shellcode A …
Brief Experiment With SSH Honeypots
I deployed a fake SSH server today and studied its traffic overnight.
