Archivos del blog

Remote Code Execution in Web.py framework

Several months ago I happened to be looking at web.py‘s source code when I found an old-style (as in basic) remote code execution in the database module. Fortunately for most users of web.py, the database module is pretty simple and

Tagged with: , , , ,
Publicado en hacking, Programming, web hacking

Calling Conventions Hunting

When trying to understand a binary, it’s key to be able to identify functions, and with them, their parameters and local variables. This will help the reverser figuring out APIs, data structures, etc. In short, gaining a deep understanding of

Tagged with: , ,
Publicado en Programming, Reverse
Archive