Category: Security

July 7, 2015

Google Drive Information Leak

Google Drive & Gmail attachments Leak This part of Google bounty program [IDOR] exploit to allow the attacker to leak your Google Drive files and this mean attacker could leak…
Read more: Google Drive Information Leak
July 5, 2015

removable disk could lead to privilege escalation

privilege escalation Linux with flash disk removable media with setUID, setGID files could give privilege escalation example copy nice command to ur flash storage and ask ur friend to print…
Read more: removable disk could lead to privilege escalation
July 5, 2015

Persistent mount for luks with unlock Key

creating a encrypted disk with luks our Little problem here to mount a encrypted disk automatically on boot so no need to enter the pass for mounting but this risky…
Read more: Persistent mount for luks with unlock Key
July 5, 2015

Linux Disk Encryption with LUKS

today we going to make an encrypted disk partition list prepare our partition I have a new disk in /dev/sdb I will create a partition 100 on it with fdisk [root@localhost…
Read more: Linux Disk Encryption with LUKS
June 30, 2015

RPM integrity and scripts

Yum repository comes with gpg and md5 support to verify the validity of the package You can list installed gpg keys in your system via rpm -qa gpg-pubkey It will…
Read more: RPM integrity and scripts
February 3, 2015

nmap cheat sheet

nmap scan sheet cheat 😀 Host Discovery nmap -PE <range> nmap -PP <range> nmap -PM <range> arp scan nmap -PR <range> Stealth Scan nmap -sS <range> Idle Scan nmap…
Read more: nmap cheat sheet
January 8, 2015

port forward & pivoting with meterpreter

Let’s assume u attacked machine with 2 nic cards our IP is 10.0.0.5 first, one ip is 10.0.0.10 that you reach it from and in ifconfig shows, the machine has…
Read more: port forward & pivoting with meterpreter
January 8, 2015

MetaSploit Payload to Executable EXE

# msfvenom No options Usage: /opt/metasploit/apps/pro/msf3/msfvenom [options] <var=val> Options: -p, –payload <payload> Payload to use. Specify a ‘-‘ or stdin to use custom payloads -l, –list [module_type] List a module…
Read more: MetaSploit Payload to Executable EXE
December 5, 2014

SMASH THE STACK LEVEL6

Smash The Stack Level 6 level6@io:/levels$ ./level06 a b Hi a this app take 2 argument 1 – username 2- password it takes it then say hi also, it checks…
Read more: SMASH THE STACK LEVEL6
December 4, 2014

Get Environment Variable memory Address

some time u put the shellcode inside the environment and u will need the address of it to build ur payload here is a simple C code to get the…
Read more: Get Environment Variable memory Address