👨💻
👨💻
👨💻
👨💻
Sandipan Roy
Sandipan Roy
Search
⌃K
Links
$whoami
BLOG
Confused Injection
Web-App Checklist Pentest
Penetration Test
General methodology
Enumeration
Recon
Network
Shells
Port Forwarding / SSH Tunneling
Transferring files
Web
SQL
Password Cracking
Brute Force - CheatSheet
Privilege Escalation
Linux
Windows
Linux Privilege Escalation
Windows Privilege Escalation
Reverse Shells
Linux Reverse Shells
Windows Reverse Shells
Extra
Bruteforce
Cryptography
80, 443
File Transfers
Pivot
Buffer Overflows
Binary
Active Directory
CEH Practical Notes
Misc
Resources
Powered By GitBook

Binary

Linux BOF :
  • check ASLR : cat /proc/sys/kernel/randomize_va_space
    • 0 - ASLR Disable
    • 1 - ASLR Enabled
  • gdb checksec
  • ldd <binary>
  • ltrace <binary>
  • Lib2retc attack - HTB Frolic
  • ​https://github.com/david942j/one_gadget (One Gadget tool for finding RCE in libc)
  • ​https://snowscan.io/htb-writeup-frolic/​
Buffer Overflow Practice :
  • SLmail
  • ftpfreefloat
  • minishare
  • Ftpfreefloat
Tools :
  • GDB Peda (https://github.com/longld/peda)
Extra - Previous
Buffer Overflows
Next - Extra
Active Directory
Last modified 10mo ago
Copy link
Edit on GitHub