blog.dornea.nu

References # https://www.cr0.org/paper/mips.elf.external.resolution.txt http://logos.cs.uic.edu/366/notes/mips%20quick%20tutorial.htm

First let’s collect some information about the binary itself: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 $ readelf IntelligenSoftware -h ELF Header: Magic: 7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 Class: ELF64 Data: 2's complement, little

This one was a quite easy one.

SysAdmin Part 1 # Let’s login to the machine: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 $ sshpass -p VNZDDLq2x9qXCzVdABbR1HOtz ssh morpheus@for01.ringzer0team.com -p 13375 _ ____ __ _____(_)___ ____ _____ ___ _____/ __ \/ /____ ____ _____ ___ / ___/ / __ \/…

These challenges were quite tricky since they didn’t focus only on the JavaScript language itself but also on all kind of stuff you can do with JavaScript: Crypto, obfuscation etc.

Fuzzing is nowadays the attack technique used by a lot of pentesters and security researchers.

This year I’ve attended the hack.lu conference in Luxembourg.

Here are my solutions for the ringzer0 Jail Escaping C challenges: Level 1: https://ringzer0team.com/challenges/228 Level 2: https://ringzer0team.com/challenges/229 Level 3: https://ringzer0team.com/challenges/230 Level 1 # 1 2 3 4 5 6 7 8 9 10 11 12 13 14

Here are my solutions for the ringzer0 Jail Escaping PHP challenges.

Here are my solutions for the ringzer0 Jail Escaping shell challenges.

Backuping a whole bunch of photos and videos might be a difficult task.

Like always the obligatory introduction to the event: “The digital age began 75 years ago in Berlin, when Konrad Zuse created the world’s first functioning computer, the Z3.

For the first time I’ve attended the AWS Summit in Berlin which against my expectations was very interesting.

Having talked about hardening your server using chroot in a previous post I’ve felt that the whole process was way to complicated.

From time to time I like to read about great personalities and how their handling and decisions changed the world.

Nach mehr als 3 Jahren habe ich mich dazu entschloßen, VODKA zu verlassen.

Being involved in different projects where web technologies are used, I have to make sure that AppSec related security nightmares are avoided.

Although I thought this would be an easy task, it turned out that chrooting daemons takes more than copying config files and libraries.

Continuing my admin series this time I’d like to setup a VPN using OpenVPN as user-based VPN solution.

Continuing my CCNA journey I’d like to address inter VLAN switching in a more detailed way.

As a pseudo-preparation for my CCNA exam I wanted to sum up some of the basic configuration steps related to Cisco switches.

For better display results you can also have a look at the Manage a PKI using OpenSSL.

I’ve been recently looking for some new ways organizing my notes/thoughts/tasks/bookmarks/whatever in order to keep things clean and backup valuable information.

Since I haven’t done this before, I thought I could share some experiences with you.

In times of NSA, surveillance and data privacy, protecting your data has become an essential part of your every day life.

When it comes to parallelism Python has some constraints which have to be taken into consideration before starting coding.

After started coding in C again I’ve had a look at some basic network stuff like: socket(), connect() etc.

After years of python hacking and all kind of projects (like netgrafio or smalisca) I wanted to do more low-level stuff and refresh my C/C++ skills.

usd AG has announced a hacking challenge I have participated at.

From time to time we all seem to ignore the “voice of reason” and tend to unconsidered actions.

If you follow this blog, you might have noticed that I’m mainly interested in #infosec, #hacking and so on.

What should I say about this book?

During the past months I was from time to time reading all kind of stuff related to networking and security.

Well, where should I start?

Proxying HTTP(s) traffic from Android devices through Burp should be actually no magic.

After writing the previous article I thought I should share some Blockdiag plugin for Pelican.

I really like keeping things simple.

In this short article I’ll try to explain what are the main steps to analyze an iOS app.

Sometimes you need to know if a certain IP (or several ones) are within an IP range or belong to a certain ASN.

Meanwhile I think I’ve felt in love with Androguard.

I thought this might be interesting enough to share with you.

Simply out of necessity I’ve written this mini-tutorial how debug android APKs using Eclipse and DDMS.

Suppose you get a list of some URLs and you are asked to “investigate” them.

I use Python on daily basis.

In this article I’ll have a a closer look at DroidBox which provides a mobile sandbox to look at Android applications.

I’ve started writing this IPython notebook in order to make myself more comfortable with Android and its SDK.

During some Android malware analysis I came along some Java routines which were meant to decrypt/encrypt some content.

This is what I’ve received yesterday from some phone number I don’t really know.

A few weeks ago I’be migrated my whole blog from Wordpress to Octopress.

These are my steps how I’ve solved the XSS Game Level 1 # This is the most obvious and easiest one.