Search:

Hello All,

I'm n00b in fuzzing & exploitation field. I wanted to learn the art of analysis of crashes generated from fuzzing.

Can you guide me for the resources which are useful for learning...

Very nice Vinnu.

koi muze analysis sikha do yaar :)
Can't Understand which crash is exploitable and which one not.

i use SOAP client, Live HTTP Headers & REST client ... all Firefox addons for testing web services. Now you'll be able to use IronWASP as well.

Firewalking with nmap:
Firewalking with nmap | DiabloHorn


AMol NAik

PDF:
http://defcon-russia.ru/15/Nokia_reward_recognition.pdf

AMol NAik

I'll be available on Sunday morning, Thursday evening is not possible.

See you all at @nullcon.

AMol NAik

There is no user used. You need to give "SMBUser" as well along with corresponding password hash "SMBPass".

AMol NAik

Welcome to Garage, Dexter. Kepp learning & sharing knowledge. :)

Couple of nice posts about various types CSRF exploitations:

Apps and Security: Stateless CSRF Protection

Advanced CSRF and Stateless Anti-CSRF

AMol NAik

@r00tc0deL: you should search the forum & the Internet before asking for the help.

Here is one cheat sheet:
http://www.garage4hackers.com/f11/flash-xss-cheat-sheet-3093.html

AMol NAik

Here is the HackPra presentations which talks about some file upload techniques:

File in the hole!

AMol NAik

Welcome to garage .... learn & share the knowledge :)

Looks like you need to allow port 4444 on your router from internet. This is callled as Port Natting.

welcome to garage, karthikp. Hope to see you sharing your knowledge here :)

@karthikp: there is an attack called as Cross-Site Tracing (XST). You should read about this and find out is it still applicable to modern browsers. I'm sure after reading about this attack and...

I'm missing all these meets :(

Good work man ... now we know whom to call when u forgot keys :P

You better use Google to search what u need :)

The best suggession is to learn PHP. You have the code for each security level in DVWA. learn PHP, understand code in each level and try to find solution.

AMol NAik

You should check this;
JSON Hijacking Demystified - SpiderLabs Anterior

AMol NAik

Pentesting Java Thick applications with Burp JDser:
Pentesting Java Thick Applications with Burp JDSer | NetSPI Blog

DSer:
http://www.andlabs.org/tools/DSer/DSer.zip

Javasnoop:...

Flash XSS Cheat Sheet:
http://demo.testfire.net/vulnerable.swf

Amol NAik

Hello All,

Here is the write-up for my OSCP experience:
Secure Belief: My Journey to OSCP

AMol NAik

This is a nice post by Billy Rios about a flaw in Adobe which is interesting to know.

Post:
Billy (BK) Rios » Content Smuggling

AMol NAik

HiTB 2012 Ku Material:

Index of /hitbsecconf2012kul/materials


AMol NAik