Skip to main content

Debasish Mandal's Blog

Search This Blog

Apple Quick Time Player Version 7.7.3 Out of Bound Read

January 29, 2013

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

exploits vulnerability

Location: Bangalore, Karnataka, India

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Comments

Doanh DoanhMarch 17, 2021 at 1:13 PM
Những Chuyến Đi Cuộc Đời
Ngẫu Hứng Du Lịch
Kien Thuc Du Lich
Book Ve Du Lich Gia Re
ReplyDelete
Replies

Post a Comment

Popular Posts

Attacking Audio "reCaptcha" using Google's Web Speech API

I had a fun project months back, Where I had to deal with digital signal processing and low level audio processing. I was never interested in DSP and all other control system stuffs, But when question arises about breaking things, every thing becomes interesting :) . In this post i'm going to share one technique to fully/ partially bypass reCaptcha test. This is not actually a vulnerability but its better if we call it "Abuse of functionality". Disclaimer : Please remember this information is for Educational Purpose only and should not be used for malicious purpose. I will not assume any liability or responsibility to any person or entity with respect to loss or damages incurred from information contained in this article. 1. What is Captcha A CAPTCHA is a program that protects websites against bots by generating and grading tests that humans can pass but current computer programs cannot. The term CAPTCHA (for Completely Automated Public Turing Test To Tell Comput

Bypass Captcha using Python and Tesseract OCR engine

A CAPTCHA is a type of challenge-response test used in computing as an attempt to ensure that the response is generated by a person. The process usually involves one computer (a server) asking a user to complete a simple test which the computer is able to generate and grade.The term "CAPTCHA" was coined in 2000 by Luis von Ahn, Manuel Blum, Nicholas J. Hopper, and John Langford (all of Carnegie Mellon University). It is an acronym based on the word "capture" and standing for "Completely Automated Public Turing test to tell Computers and Humans Apart". In this post I am going to tell you guys how to crack weak captcha s using python and Tesseract OCR engine.Few days back I was playing around with an web application.The application was using a captcha as an anti automation technique when taking users feedback. First let me give you guys a brief idea about how the captcha was working in that web application. Inspecting the captcha image I have fo

Execute ShellCode Using Python

After writing shell code generally we use a C code like this to test our shell code. char code[] = "shell code"; int main(int argc, char **argv) { int (*func)(); func = (int (*)()) code; (int)(*func)(); } In this article I am going to show you, how can we use python and its "ctypes" library to execute a "calc.exe" shell code or any other shell code.ctypes is a foreign function library for Python. It provides C compatible data types, and allows calling functions in DLLs or shared libraries. It can be used to wrap these libraries in pure Python. I will be using six Win32 APIs to execute the shell code. These Win32 apis are very important in dynamic memory management on windows platform. Here ctype will help us to directly interact with these required APIs. The concept is like : 1) First VirtualAlloc() will allow us to create a new executable memory region and copy our shellcode to it, and after that execute it. 2) VirtualLock()

Powered by Blogger

Copyright © 2011 - 2021 Debasish Mandal