IT Security

Search This Blog

Exploiting Stack 0 from azeria-labs

on November 15, 2022

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Comments

Contact US

Proven IT-Security specialist with having more than dozen of exploit published online in 0day.today, exploitdb, packetstorm, securityweek , author of few 0day and CVE, Author of K-auth authentication system and I-IPS (software appliance for IPS/IDS for small and large scale organization),Listed in few hall of fames like Apple, Nokia etc, conducted N number of VA/WA/PT for Reputed client, Implemented SIEM/SOC at large Media House, expertise in log analysis, scripting, technical audit, Linux, windows, Areas of interest in Information Security domain are: Buffer Overflows, exploitation, Reverse Engineering, Shell coding, Tool building, Malware analysis and IDS. Active Participant in Null community, designed CTF which was still unbreakable, Currently working as Sr.Security analyst at network intelligence India Pvt .Ltd prior to security 3 years of extensive experience in administration, ||Security enthusiastic || Love Coding reverse engineering Exploitation || Security analyst ||

OverTheWire Natas Solution Level 1-10

After completing bandit I can not stop myself from playing NATAS. this is again beautiful game. so here we go. Natas Level 0 Given :- Username: natas0 Password: natas0 URL: http://natas0.natas.labs.overthewire.org Solution After Login to this page you will get this Simply viewing the source you will get the password for next level Password for natas 1 is gtVrDuiDfck831PqWsLEZy5gyDz1clto Natas Level 1 Given : Username: natas1 URL: http://natas1.natas.labs.overthewire.org Solution After logging Here it show's right click is disable, as I don't use mouse i just click CTRL+U It give us password. key is :- ZluruAthQk7Q2MqmDeTiUij2ZvWy2mBi Natas Level 2 Given Username: natas2 URL: http://natas2.natas.labs.overthewire.org Solution After logging here it says Nothing is here, Next step is to view Code. hmm here I found something suspicious in /files/pixe

CVE-2019-7387 :- Authenticated Arbitrary local file read via path traversal in Systrome Networks ISG Firewall

Authenticated Arbitrary local file read via path traversal Overview ==== * Title : Authenticated Arbitrary local file read via path traversal * Author: Kaustubh G. Padwad * CVE-ID: CVE-2019-7387 * Vendor: Systrome Networks (http://systrome.com/about/) * Products: 1.ISG-600C 2.ISG-600H 3.ISG-800W 4. * Tested Version: : ISG-V1.1-R2.1_TRUNK-20181105.bin(Respetive for others) * Severity: High--Critical Advisory ID ====== KSA-Dev-004 About the Product: ========= Cumilon ISG-* cloud gateway is the security product developed by Systrome for the distributed access network for the cloud-computing era. It integrates the L2-L7security features of the next-generation firewall, is based on the user identification and application identification and provides the application-layer firewall, intrusion prevention, anti-virus, anti-APT, VPN, intelligent bandwidth management, multi-egress link load balancing, content filtering, URL filtering, and other security functio

Powered by Blogger

Breaktesec.com

Exploiting Stack 0 from azeria-labs

Comments

Post a Comment