Security et alii Seguridad, sistemas, tecnología et al.

Menú

Inicio
Exploitation: The basics
Linux Cracking Series
About

Inicio › Archivo para Programming

Archivos del blog

Remote Code Execution in Web.py framework

Posted on 08/11/2014 by Adrián — Deja un comentario

Several months ago I happened to be looking at web.py‘s source code when I found an old-style (as in basic) remote code execution in the database module. Fortunately for most users of web.py, the database module is pretty simple and…

Calling Conventions Hunting

Posted on 20/01/2013 by Adrián — Deja un comentario

When trying to understand a binary, it’s key to be able to identify functions, and with them, their parameters and local variables. This will help the reverser figuring out APIs, data structures, etc. In short, gaining a deep understanding of…

Tag Cloud

ASLR binary planting blogger buffer overflow certificaciones cheat sheets chrome conferencia conferencias cracking crackmes db2 db2 sql injection cheat sheet de-ice diccionario dll hijacking endian entrenamiento enumeración errores eventos exploit-exercises exploiting firefox GPEN hacking heap overflow herramientas integer overflow inyección kernel latam Linux malware marco de pila memoria mudanza ncn NcN2k10 nebula neutralidad de la red noconname NX opinión overflow password pentest pentester printf Programación ptrace ret2libc Reverse reverse engineering reversing rootedcon rootedlab router SANS seguridad shellcode shodan smtp sql injection stack frame stack overflow startupweekend teleoperadoras vmware wargame web hacking wordpress xpath xpath injection XSS

Me@twitter

Error: Twitter no responde. Por favor, espera unos minutos y actualiza esta página.

	Adrián en How Effective is ASLR on Linux…
	Robert C. Seacord en How Effective is ASLR on Linux…
	Funky Chicken en How Effective is ASLR on Linux…