| ai. 14170 IN MX 10 mail.offshore.ai. ;; Anguilla | |
| as. 21371 IN MX 10 cmh.relay.gdns.net. ;; American Samoa | |
| as. 21371 IN MX 10 dca.relay.gdns.net. ;; American Samoa | |
| bj. 86176 IN MX 20 mail6.domain-mail.com. ;; Benin | |
| cf. 3379 IN MX 10 mail.intnet.cf. ;; Central African Republic | |
| dj. 345488 IN MX 5 relais2.intnet.dj. ;; Djibouti |
| windows = client.extapi.window.enumerate | |
| windows.each do |winder| | |
| if winder[:title] != 'Default IME' | |
| result = client.railgun.user32.SetWindowTextA(winder[:handle],"Hacked") | |
| end | |
| end |
| I wasn't first to get the key. Nor was I second, third, or even fourth. I'm probably not even the | |
| 10th to get it (ok, looks like I was the 8th.) But I'm happy that I was able to prove to myself | |
| that I too could do it. | |
| First, I have to admit I was a skeptic. Like the handful of other dissenters, I had initially | |
| believed that it would be highly improbable under normal conditions to obtain the private key | |
| through exploiting Heartbleed. So this was my motivation for participating in Cloudflare's | |
| challenge. I had extracted a lot of other things with Heartbleed, but I hadn't actually set out to | |
| extract private keys. So I wanted to see first-hand if it was possible or not. |
This is a guide on how to email securely.
There are many guides on how to install and use PGP to encrypt email. This is not one of them. This is a guide on secure communication using email with PGP encryption. If you are not familiar with PGP, please read another guide first. If you are comfortable using PGP to encrypt and decrypt emails, this guide will raise your security to the next level.
radare2 is a very cool set of tools that you probably don't know how to use! Let's go through a simple exploit CTF challenge to understand how to use it for exploit development.
We'll be focusing on "ropasaurus rex" which is a simple challenge from Plaid CTF After checking out the latest and greatest radare from git, let's get started!
Open up ropasaurusrex in r2 and call analyze on the binary. We can list the functions with "afl"
| function Send-NetworkData { | |
| [CmdletBinding()] | |
| param ( | |
| [Parameter(Mandatory)] | |
| [string] | |
| $Computer, | |
| [Parameter(Mandatory)] | |
| [ValidateRange(1, 65535)] | |
| [Int16] |
This is a collection of snippets, not a comprehensive guide. I suggest you start with Operational PGP.
Here is an incomplete list of things that are different from other approaches: