Skip to content

Instantly share code, notes, and snippets.

View cyberheartmi9's full-sized avatar
:octocat:
Breaking stuff

PikaChu cyberheartmi9

:octocat:
Breaking stuff
View GitHub Profile
recon() {
subfinder -d $1 -silent|httprobe -c 40|tee -a $1.txt
}
fdir(){
References:
https://medium.com/@buff3r/root-detection-ssl-pinning-bypass-with-frida-framework-31769d31723a
https://codeshare.frida.re/@pcipolloni/universal-android-ssl-pinning-bypass-with-frida/
CMD:
Run burp and adb server first, create avd with android.exe then:
emulator -avd <AVD-Name> -http-proxy http://127.0.0.1:8080 -no-snapshot-load -verbose
██████╗ ███████╗ ██████╗ ██████╗ ███╗ ██╗
██╔══██╗██╔════╝██╔════╝██╔═══██╗████╗ ██║
██████╔╝█████╗ ██║ ██║ ██║██╔██╗ ██║
██╔══██╗██╔══╝ ██║ ██║ ██║██║╚██╗██║
██║ ██║███████╗╚██████╗╚██████╔╝██║ ╚████║
╚═╝ ╚═╝╚══════╝ ╚═════╝ ╚═════╝ ╚═╝ ╚═══╝
@intx0x80
http://whitelist1.com/
https://ocw.cs.pub.ro/courses/cns/labs/start
https://windowsexploit.com/blog
https://www.securitysift.com/windows-exploit-development-part-1-basics/
http://6.www.shogunlab.com/blog/2017/08/19/zdzg-windows-exploit-1.html
http://corelan.be/index.php/2009/07/19/exploit-writing-tutorial-part-1-stack-based-overflows/
https://tuts4you.com/e107_plugins/download/download.php?list.17=
https://learnxinyminutes.com/docs/c/
http://www.thegreycorner.com/
http://www.dmi.unipg.it/bista/didattica/sicurezza-pg/buffer-overrun/hacking-book/0x2a0-writing_shellcode.html
Gotfault Security Community
(GSC)
---------[ Chapter : 0x400 ]
---------[ Subject : Format Strings ]
---------[ Author : xgc/dx A.K.A Thyago Silva ]
---------[ Date : 11/02/2005 ]
---------[ Version : 2.5 ]
|=---------------=[ Exploiting non-classical format string vulnerability ]=--------------=|
|=-----------------------=[ darkeagle <d4rkeagle@gmail.com> ]=---------------------------=|
|=--------------------=[ 55k7 researcherz <http://www.unl0ck.net> ]=---------------------=|
--[ Table of contents
1 - Intro
2 - Local Exploitation
3 - Remote Exploitation
4 - References
content-types by ak1t4
List of mine types
application/andrew-inset ez
application/mac-binhex40 hqx
application/mac-compactpro cpt
application/mathml xml mathml
application/msword doc
application/octet-stream bin dms lha lzh exe class so dll
Table of Contents
Previous Section Next Section
0x280 Heap-and bss-Based Overflows
In addition to stack-based overflows, there are buffer-overflow vulnerabilities that can occur in the heap and bss memory segments. While these types of overflows aren't as standardized as stack-based overflows, they can be just as effective. Because there's no return address to overwrite, these types of overflows depend on important variables being stored in memory after a buffer that can be overflowed. If an important variable, such as one that keeps track of user permissions or authentication state, is stored after an overflowable buffer, this variable can be overwritten to give full permissions or to set authentication. Or if a function pointer is stored after an overflowable buffer, it can be overwritten, causing the program to call a different memory address (where shellcode would be) when the function pointer is eventually called.
Because overflow exploits in the heap and bss memory segments are much more dependent o
Name : Finding vulnerabilities in PHP scripts FULL ( with examples )
Author : SirGod
Email : sirgod08@gmail.com
Contents :
1) About
2) Some stuff
3) Remote File Inclusion
3.0 - Basic example
3.1 - Simple example
[ Sql injection ]
https://sqlwiki.netspi.com/
https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet
https://www.owasp.org/index.php/Injection_Prevention_Cheat_Sheet
http://securityidiots.com