Skip to main content

Debasish Mandal's Blog

Search This Blog

Apple Quick Time Player Version 7.7.3 Out of Bound Read

January 29, 2013

Get link
Facebook
X
Pinterest
Email
Other Apps

exploits vulnerability

Location: Bangalore, Karnataka, India

Get link
Facebook
X
Pinterest
Email
Other Apps

Comments

Post a Comment

Popular Posts

Attacking Audio "reCaptcha" using Google's Web Speech API

I had a fun project months back, Where I had to deal with digital signal processing and low level audio processing. I was never interested in DSP and all other control system stuffs, But when question arises about breaking things, every thing becomes interesting :) . In this post i'm going to share one technique to fully/ partially bypass reCaptcha test. This is not actually a vulnerability but its better if we call it "Abuse of functionality". Disclaimer : Please remember this information is for Educational Purpose only and should not be used for malicious purpose. I will not assume any liability or responsibility to any person or entity with respect to loss or damages incurred from information contained in this article. 1. What is Captcha A CAPTCHA is a program that protects websites against bots by generating and grading tests that humans can pass but current computer programs cannot. The term CAPTCHA (for Completely Automated Public Turing Test To Tell Comput...

My Book Published - Penetration Testing for Jobseekers (April 15, 2022)

Penetration Testing for Job Seekers is an attempt to discover the way to a spectacular career in cyber security, specifically penetration testing. This book offers a practical approach by discussing several computer and network fundamentals before delving into various penetration testing approaches, tools, and techniques. https://www.amazon.in/Penetration-Testing-Jobseekers-Networks-Metasploit/dp/9355511973 https://www.amazon.com/Penetration-Testing-Jobseekers-Networks-Metasploit-ebook/dp/B09XZ6V9Q8/

Execute ShellCode Using Python

After writing shell code generally we use a C code like this to test our shell code. char code[] = "shell code"; int main(int argc, char **argv) { int (*func)(); func = (int (*)()) code; (int)(*func)(); } In this article I am going to show you, how can we use python and its "ctypes" library to execute a "calc.exe" shell code or any other shell code.ctypes is a foreign function library for Python. It provides C compatible data types, and allows calling functions in DLLs or shared libraries. It can be used to wrap these libraries in pure Python. I will be using six Win32 APIs to execute the shell code. These Win32 apis are very important in dynamic memory management on windows platform. Here ctype will help us to directly interact with these required APIs. The concept is like : 1) First VirtualAlloc() will allow us to create a new executable memory region and copy our shellcode to it, and after that execute it. 2) VirtualLock()...

Powered by Blogger

Copyright © 2011 - 2021 Debasish Mandal