wtorek, 28 sierpnia 2018

Featuring Trac

I was wondering what's new on Bitnami and if there is any new VM I can try. There is! :) That's how I found the Trac VM. Below, just a quick story from that webapp and the 'feature' ;) (not a bug) I tried to exploit there... Here we go.

Crashing FreePlane

Below you will find few crashes for the latest FreePlane (1.6.15 32bit). Found few weeks ago (~10.08.2018) during one fuzzing session. Enjoy...

środa, 15 sierpnia 2018

Crashing KMPlayer

As far as I know KMPlayer just released a new version, so below you will find few bugs for the 'old one' ;) Let's go...

wtorek, 14 sierpnia 2018

venome.sh - simple msfvenom "generator"

Sometimes I'm looking for a quick file to check the possibility of reverse-shell... This time I prepared a small bash-script to speed it up ;) Maybe you will find it useful...

PwnLab: init - CTF

Hi. It's been a while since I tried to play CTF's so below you'll find a quick review for the one I found one time at VulnHub. Let's do it...

niedziela, 5 sierpnia 2018

Updating XnView

As far as I remember few days after "last" CTF from VulnHub posted here, I decided to check an interesting photo viewer called XnView. Below you will find few details ...

piątek, 3 sierpnia 2018

Sample fuzzing automation

Below you will find few notes from sample (and simple ;)) "fuzzing automation". It is not a rocket science but maybe you will find it useful...

wtorek, 31 lipca 2018

Crashing nmap 7.70

Last time we saw nmap 7.60 (Kali) crashed during (let's say;)) quick scan of one target machine from VulnHub. Today I decided to check if I will achieve similar results for version 7.70. Details you will find below...

niedziela, 29 lipca 2018

Crashing nmap 7.60

As you probably know sometimes I'm trying to play CTF's from VulnHub. During one game I found that nmap 7.60 (default install on Kali) is acting "weird" (read: presenting SIGSEGV ;]). Below you will find few details...

CVE-2018-6892 quick autopsy

After a pretty busy week I decided to take a break and ... check some updates from Beyond Security Blog. I assumed it will be a good idea to check it on the VM. Here we go...