Garage4hackers Forum - Home

Menu
G4H Tutorial and Papers

G4H Tools and Scripts

G4H Exploits

CTF & Meet Writeups
Recent Blog Posts

Teensy USB HID for Penetration Testers - Part 3 - Programming sketches in Arduino

In previous post we saw very basic usage of Arduino Development Environment (ADE) and ran our Hello...
SamratAshok 04-25-2012 10:51 PM

Network Architecture Review Checklist

The primary goal of the checklist is to make it useful and as a trusted guide for IT...
AnArKI 04-22-2012 05:15 PM

Teensy USB HID for Penetration Testers - Part 2 - Basics of Arduino and Hello World

In the first post we installed Arduino Development Environment (ADE). Now lets have a look at...
SamratAshok 04-11-2012 09:17 AM

HP DataProtector - Porting exploit to metasploit.

Nowadays, in almost all my penetration testing projects, HP dataprotector has been the most...
sohil_garg 04-10-2012 04:11 PM

Home

Teensy USB HID for Penetration Testers - Part 1 - Introduction and Arduino Install

by
SamratAshok
Published on 04-06-2012 04:12 PM    Number of Views: 344

Hi All,

This is my first post to Garage, please bear with mistakes. I will write a series of posts which will ...

Read More 1 Comment

Internal Attacks via IVR systems [ Security Vulnerabilities in IVR Applications]

by
fb1h2s
Published on 03-28-2012 09:50 AM    Number of Views: 473

Am putting down Demo videos along with few important slides form my BlackHat 2012 presentation .

My presentation ...

Read More 2 Comments

Binary Analysis of Oracle Java CVE: 2012-0500 and Alternate Exploitation on Win|Linux

by
fb1h2s
Published on 03-09-2012 02:41 AM    Number of Views: 602

Main():

Java Webstart recently had critical security update in it's Webstart module Oracle Java Critical ...

Read More

Gmail XSS vulnerability through Content Sniffing

by
41.w4r10r
Published on 03-12-2012 07:46 PM    Number of Views: 694

Hi all,

a few months before i found this vulnerability which was reported to google and patched (Basically ...

Read More 2 Comments

Bloodshed Dev-C++ 4.9.9.2 Compiler Analysis [Reversing Engineering Tips] Part-I

by
nishant
Published on 03-02-2012 01:12 PM    Number of Views: 458

Okay folks,

This is one idea that came to my mind. Its pretty simple, I'm trying to write some sample programs ...

Read More

Google Email Recovery Vulnerability (Removing Secondary E-mail Address -Self Exploit

by
[s]
Published on 12-22-2011 11:59 AM    Number of Views: 1873

#Title: Google Email Recovery Vulnerability (Removing Secondary E-mail Address -Self Exploitation)
#Author: Sandeep ...

Read More 5 Comments

Enumerating and Breaking VoIP

by
sohil_garg
Published on 11-21-2011 03:03 PM    Number of Views: 1448

Introduction

Voice over Internet Protocol (VoIP) has seen rapid implementation over the past few years. Most ...

Read More 7 Comments

Windows 8 DEP bypass

by
"vinnu"
Published on 11-19-2011 06:58 AM    Number of Views: 1104

This Time we'll colour our hands with the blood of windows 8 Developer's Preview edition. What we need , a target application, ...

Read More 1 Comment

Identifying Load Balancers - How to tell if the target host is behind a load balancer

by
abhaythehero
Published on 10-27-2011 10:09 AM    Number of Views: 1181

Credits to Joe McCray and his Defcon 18 talk

1. Use dig command
Look for multiple addresses ...

Read More 2 Comments

WebBackdoors , Attack, Evasion and Detection:

by
fb1h2s
Published on 09-29-2011 08:02 AM    Number of Views: 2464

Abstract: This paper provides insight on common web back doors and how simple manipulations could make them undetectable ...

Read More

ASLR DEP bypassing techniques

by
"vinnu"
Published on 09-29-2011 10:24 AM    Number of Views: 661

In defeating DEP you atleast need some information that will evade the ASLR.
There are mainly two ways:
...

Read More

SEH Overflow exploit POC Part 1

by
m0nna
Published on 09-20-2011 07:10 AM    Number of Views: 1017

On 18th Jan 2011, somebody named “h1ch4m” reported a stack based overflow vulnerability in “PDF All to mp3 converter” via ...

Read More

EBay Persistent Cross Site Scripting (Filter Bypass)

by
fb1h2s
Published on 08-18-2011 10:29 AM    Number of Views: 960

POC Code to Steel Cookies:

Vulnerability Effects:
1) User cookies could be retrieved ...

Read More

Malicious PDF analysis

by
m0nna
Published on 09-11-2011 07:51 PM    Number of Views: 1382

Part 1

This post contains the analysis that i carried out on a malicious pdf file, exploiting a stack based ...

Read More 1 Comment

Social Engineering with SET

by
sohil_garg
Published on 09-01-2011 04:38 PM    Number of Views: 1613

Introduction

It is a useful social engineering tool by David (ReL1k). It can be used to perform a number of Social
...

Read More 4 Comments

BSNL router hacking and possibility of running custom code over it

by
rishabhd
Published on 08-16-2011 12:51 PM    Number of Views: 1585

On a lonely weekend on my android, I was actually bored courtesy of BSNL, a connection that seldom connects, translates ...

Read More

Effectiveness of Antivirus in Detecting Web Application Backdoors

by
fb1h2s
Published on 01-30-2011 04:28 PM    Number of Views: 2699

WEB APPLICATION SECURITY
Effectiveness of Antivirus in Detecting Web Application Backdoors
[FB1H2S aka Rahul
...

Read More 1 Comment

Career guidelines for freshers doing/done with BE/B.Tech/MCA/BCA/B.Sc/M.Sc(IT/CSE),MS

by
Punter
Published on 07-13-2010 06:33 PM    Number of Views: 4194

Part 1

Many of the engineering students desire to do some course in parallel and many of wants to do after ...

Read More 7 Comments

Reverse Honey Trap Striking Deep inside Online Web Antivirus Engines and Analyzers (Beating the Player in its Own Game) - A Thinking Approach

by
fb1h2s
Published on 08-10-2010 10:07 PM    Number of Views: 2489

Reverse Honey Trap
Striking Deep inside Online Web Antivirus Engines and Analyzers (Beating the Player in its Own ...

Read More

Career guidelines for freshers doing/done with BE/B.Tech/MCA/BCA/B.Sc/M.Sc(IT/CSE),MS

by
Punter
Published on 07-13-2010 06:34 PM    Number of Views: 2610

Continued part 2

Wireless Security-Wireless security comprise of securing Wireless Access Point,Network,Devices ...

Read More

G4H Twitter
Latest Posts

Research Resources for MS SharePoint

This page contains research notes on Microsoft’s SharePoint MOSS and WSS.

Link:
https://www.owasp.org/index.php/Research_for_SharePoint_%28MOSS%29
amolnaik4 Today, 12:25 PM

Lolz, with the title "About Admin" I thought...

Lolz, with the title "About Admin" I thought Admins of garage have been exposed ;)

@hazard74, there is always a proper "way" to ask - you need to discover that. It's not that Pentesters don't have...
b0nd Today, 09:10 AM

Ok, Anant Shrivastava. Im Sorry :)

Ok, Anant Shrivastava.

Im Sorry :)
hazard74 Yesterday, 06:19 PM

not exactly this format but a simmilar kind of a...

not exactly this format but a simmilar kind of a format i have seen as part of malware. This url format was used to get the commands from the remote server. there was a whole bunch of domain names in...
Anant Shrivastava Yesterday, 05:30 PM

Hi Neo, Thanks for your comment. I have...

Hi Neo,

Thanks for your comment. I have already done that... but no success..as these URLs are not recognized by search engines as such. getting some info if anyone has come across with URLs in...
Immaturedevil Yesterday, 05:21 PM

All times are GMT +5.5. The time now is 04:33 PM.

Powered by vBulletin® Version 4.1.7
Copyright © 2012 vBulletin Solutions, Inc. All rights reserved.
Search Engine Optimization by vBSEO

Copyright 2010 - 2012, Garage4Hackers