Basic protocol fuzzing

Below you will find few notes related to basic protocol fuzzing. Here we go...

Unquoted path for CA Deploy Agents

Sometimes during pentest(s) we can find some not-so-usual ports open. Few of them you can find described here or here in latest posts. But today we will check "that 6600/tcp" port open. Here we go...

Few more quick tests

Last time I described small script you can use (or create) during your pentests. Below you will find a little continuation of the paths started last time. So...

Lazy Enlil

Sometimes during pentests we can find pretty similar "environment(s)". By environment - this time - I mean open ports, possible (mis)configuration bugs or default passwords still used for access the target box/app. That's why I decided to start 'something new'...

Reading Kibana

In the meantime I decided to check one of the webapp we can find during internal infrastructure pentests - Kibana. Below you will find the details.

Quick review of my CTFs

Below you will find a quick summary for the CTF games I described on the blog.

Crashing DeviceNet Builder

Below you will find few details from just another fuzzing session - this time I tried DeviceNet Builder (2.04) from DeltaElectronics. Here we go...

Unquoted path in ActiveFax Server 6.70

Found last week during some 'Windows 7 exercises'... Few details you'll find below...

Crashing Alternate Pic View

This time I decided to check Alternate Pic View. Below you will find few details. Here we go...

Unquoted path in Softros LAN Messenger

Found last week during some 'Windows 10 exercises'... Few details you'll find below...