Skip to main content

Debasish Mandal's Blog

Search This Blog

Apple Quick Time Player Version 7.7.3 Out of Bound Read

January 29, 2013

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

exploits vulnerability

Location: Bangalore, Karnataka, India

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Comments

Doanh DoanhMarch 17, 2021 at 1:13 PM
Những Chuyến Đi Cuộc Đời
Ngẫu Hứng Du Lịch
Kien Thuc Du Lich
Book Ve Du Lich Gia Re
ReplyDelete
Replies

Post a Comment

Popular Posts

Execute ShellCode Using Python

After writing shell code generally we use a C code like this to test our shell code. char code[] = "shell code"; int main(int argc, char **argv) { int (*func)(); func = (int (*)()) code; (int)(*func)(); } In this article I am going to show you, how can we use python and its "ctypes" library to execute a "calc.exe" shell code or any other shell code.ctypes is a foreign function library for Python. It provides C compatible data types, and allows calling functions in DLLs or shared libraries. It can be used to wrap these libraries in pure Python. I will be using six Win32 APIs to execute the shell code. These Win32 apis are very important in dynamic memory management on windows platform. Here ctype will help us to directly interact with these required APIs. The concept is like : 1) First VirtualAlloc() will allow us to create a new executable memory region and copy our shellcode to it, and after that execute it. 2) VirtualLock()

Bypass Captcha using Python and Tesseract OCR engine

A CAPTCHA is a type of challenge-response test used in computing as an attempt to ensure that the response is generated by a person. The process usually involves one computer (a server) asking a user to complete a simple test which the computer is able to generate and grade.The term "CAPTCHA" was coined in 2000 by Luis von Ahn, Manuel Blum, Nicholas J. Hopper, and John Langford (all of Carnegie Mellon University). It is an acronym based on the word "capture" and standing for "Completely Automated Public Turing test to tell Computers and Humans Apart". In this post I am going to tell you guys how to crack weak captcha s using python and Tesseract OCR engine.Few days back I was playing around with an web application.The application was using a captcha as an anti automation technique when taking users feedback. First let me give you guys a brief idea about how the captcha was working in that web application. Inspecting the captcha image I have fo

HTTP to HTTPS Proxy Tunnel using Python

From title you might think that its a useless piece of code.But let me tell you its not.I dint write this to timepass.A a pretty much good automated SQLi tool called Havij(Hope you guys are already familiar with) forced me to write this. Not exactly but its a kind of an external plugin for the tool Havij(Free Version). Havij is an automated SQL Injection tool.No doubt its a great tool for doing automated SQL injection.But one problem with this tool is its not fully free! :( The free version also has many great features but one problem I have faced while using this free version that is, it does not allows users to scan/run database enumeration on sites which uses SSL ( https:// ) :( So to overcome this limitation I have decided to write a proxy for it. But this proxy is not like most common http proxies. This proxy can be used to scan a ssl enabled site using Free Version of Havij. Suppose you wanna try SQLi on " https:// www.target.com/search.php?name=debasish"

Powered by Blogger

Copyright © 2011 - 2021 Debasish Mandal