@alonso_isidoro alonsoir

Preparación para el OSCP (by s4vitar)

Penetration Testing with Kali Linux (PWK) course and Offensive Security Certified Professional (OSCP) Cheat Sheet

Índice y Estructura Principal

Antecedentes - Experiencia Personal
Buffer Overflow Windows (25 puntos)
- Fuzzing

Calculando el Offset (Tamaño del Búffer)

2021 Update: Easiest option is Justin's repo and image

Just run this from your Mac terminal and it'll drop you in a container with full permissions on the Docker VM. This also works for Docker for Windows for getting in Moby Linux VM (doesn't work for Windows Containers).

docker run -it --rm --privileged --pid=host justincormack/nsenter1

more info: https://github.com/justincormack/nsenter1

Rough Notes about CQRS and ES

Once upon a time…

I once took notes (almost sentence by sentence with not much editing) about the architectural design concepts - Command and Query Responsibility Segregation (CQRS) and Event Sourcing (ES) - from a presentation of Greg Young and published it as a gist (with the times when a given sentence was heard).

I then found other summaries of the talk and the gist has since been growing up. See the revisions to know the changes and where they came from (aka the sources).

It seems inevitable to throw Domain Driven Design (DDD) in to the mix.

People

`:bowtie:`	😄 `:smile:`	😆 `:laughing:`
😊 `:blush:`	😃 `:smiley:`	☺️ `:relaxed:`
😏 `:smirk:`	😍 `:heart_eyes:`	😘 `:kissing_heart:`
😚 `:kissing_closed_eyes:`	😳 `:flushed:`	😌 `:relieved:`
😆 `:satisfied:`	😁 `:grin:`	😉 `:wink:`
😜 `:stuck_out_tongue_winking_eye:`	😝 `:stuck_out_tongue_closed_eyes:`	😀 `:grinning:`
😗 `:kissing:`	😙 `:kissing_smiling_eyes:`	😛 `:stuck_out_tongue:`

	# We will create a VM with Debian, and inside it execute Minikube with driver=none
	# This way we avoid using Minikube's VM on Windows or Macos, that has a custom kernel
	# You need to install VirtualBox and Vagrant on your host machine before you continue
	# This works for latest versions on 2021-10-22. It doesn't work using Win+WSL2

	# Use the following repository to download Vagrant boxes definition
	git clone https://github.com/sysdiglabs/falco-workshop.git
	# Use box4 that includes Docker, Kubectl, Minikube and many other tools
	cd box4
	vagrant box update

	pragma solidity ^0.4.23;

	contract NumberBetweenZeroAndTen {

	uint256 private secretNumber;
	uint256 public lastPlayed;
	address public owner;

	struct Player {
	address addr;

	# Based on https://stackoverflow.com/a/26252993/1665539

	# Show all installed Java versions
	/usr/libexec/java_home -V

	# Select major version (if unique, otherwise specify full name e.g. 1.8.0_131)
	set -x JAVA_HOME (/usr/libexec/java_home -v 1.8)

	# Verify
	java -version

	function setjdk
	if test -n "$JAVA_HOME"
	removeFromPath "$JAVA_HOME/bin"
	end
	set -gx JAVA_HOME (/usr/libexec/java_home -v $argv[1])
	set -gx PATH $JAVA_HOME/bin $PATH
	end

	function removeFromPath
	set -l idx 0

	### Generic Dockerfile demonstrating good practices


	### Imports

	# Bad-ish, we do not need Ubuntu for this, nor do we want latest if we are using in a build system, predictable is better
	FROM ubuntu:latest

	# Better, using a small image since our app has no dependency on Ubuntu
	FROM alpine:3.3