Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 32 guests online
 
Advertisement

You are here: Home
EH-Net
May 25, 2013, 01:15:28 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
  Home Help Calendar Login Register  
  Show Posts
Pages: 1 2 3 [4] 5 6 ... 26
46  EH-Net / News Items and General Discussion About EH-Net / Re: [Article]-August 2010 Free Giveaway Winners - CareerAcademy.com on: September 04, 2010, 06:16:04 AM
Congrats guys!
47  Ethical Hacking Discussions and Related Certifications / Wireless / Re: Does Mobile Security Deserve New Board? on: September 03, 2010, 07:13:00 AM
I also vote for a new board. There's a lot of stuff going in mobile security which wireless security doesn't encompass.
48  Resources / Tutorials / Re: Post your Cheat Sheets on: August 29, 2010, 11:58:18 AM
I know it's an old topic. But I found some new cheat sheets and didn't want to make a new thread.
Approx 70 cheat sheets for Linux users.
http://www.scottklarr.com/topic/115/linux-unix-cheat-sheets---the-ultimate-collection/
49  Ethical Hacking Discussions and Related Certifications / Programming / Re: Learning C++ on: August 23, 2010, 01:15:50 PM
Which book are you referencing?
50  Ethical Hacking Discussions and Related Certifications / Programming / Re: Learning C++ on: August 22, 2010, 07:59:57 AM
You might also want to consider the following free lectures from Stanford.
CS106-B Programming Abstractions: Teaches C++ programming. Natural successor to CS106-A which teaches programming methodology in Java
http://see.stanford.edu/see/lecturelist.aspx?coll=11f4f422-5670-4b4c-889c-008262e09e4e
http://www.youtube.com/user/stanforduniversity?blend=2&ob=4#g/c/FE6E58F856038C69

CS106-A Programming Methodology
http://see.stanford.edu/see/lecturelist.aspx?coll=824a47e1-135f-4508-a5aa-866adcae1111
http://www.youtube.com/user/stanforduniversity?blend=2&ob=4#g/c/84A56BC7F4A1F852
I haven't gone through both of the above, but I checked the first video of CS106A and I guess you'll be fine if you jump straight into CS106B.

I'm currently going through CS107. Excellent stuff. It's a must if you want to learn some advanced programming basics. Highly recommended. It basically teaches what happens under the hood, so don't study from it if don't already know basic C/C++.
CS107 Programming Paradigms
http://see.stanford.edu/see/lecturelist.aspx?coll=2d712634-2bf1-4b55-9a3a-ca9d470755ee
http://www.youtube.com/user/stanforduniversity?blend=2&ob=4#g/c/9D558D49CA734A02

Edit: Just found a really good paper or Pointers. Do read it.
cslibrary.stanford.edu/102/PointersAndMemory.pdf
51  Ethical Hacking Discussions and Related Certifications / OSCP - Offensive Security Certified Professional / Re: Anyone did OSCE (CTP) ? on: August 20, 2010, 10:36:11 AM
@dynamik
Nothing related to this thread, but just wanted to tell you that if you ever start learning from shellcoder's handbook use an old distro for the first 4-5 chapters. Preferably Redhat Linux 8 and above.
The examples used in these chapters assume that you've absolutely no protection enabled in your system- NX bits, ASLR... Even Redhat Linux 9 uses ASLR, built in the kernel and can't be disabled, and so you won't be able to use it for a LOT of exploits.
Majority of these protections can be disabled in the current distributions but there are still hidden elements which prevent your code from working properly. I learned all of this the hard way Embarrassed

It's still fun to first test your code in an old distro and then try to make it work in the newer ones Tongue
52  Ethical Hacking Discussions and Related Certifications / Programming / Re: Learning C++ on: August 19, 2010, 11:52:18 AM
Have you ever tried to pass an array as an argument to a function? How do you do this?<-- Think on this for a moment, and try to find a solution for it.
Also, how do you allocate dynamic memory?

I learned C programming (I'm not very good at C++ though I can read and understand the code) and especially pointers from a lot of books and online articles, so I can't direct you to any absolute resource. However, a good starting point will be to clear your concepts pertaining to arrays and strings and how they're stored in memory and then move to pointer. Learn all about pointers,pointers to arrays/strings, array of pointers (different form pointer to arrays), function pointers, pointers to other datatypes and try to compare how using a pointer is different from using that variable in a normal way. At each point try to visualize what's happening in the memory.

Here are some resource which might help you.
http://www.cprogramming.com/tutorial/lesson6.html
http://www.augustcouncil.com/~tgibson/tutorial/ptr.html
http://c-faq.com/ptrs/index.html
http://c-faq.com/malloc/index.html
http://c-faq.com/aryptr/index.html
53  Ethical Hacking Discussions and Related Certifications / Web Applications / Re: HTTP header: PUT, DELETE, etc on: August 19, 2010, 10:32:29 AM
I just read an article which might solve your problem. I didn't understand how to take elements from this article and word it exactly for your problem, so I'm just linking it here (Being just a college student, I've my limitations Wink). http://blogs.msdn.com/b/david.wang/archive/2005/08/20/why-can-i-upload-a-file-without-iis-write-permission.aspx
54  Ethical Hacking Discussions and Related Certifications / Web Applications / Re: HTTP header: PUT, DELETE, etc on: August 19, 2010, 10:10:23 AM
Are you getting any specific error message or just the code isn't working?
55  Ethical Hacking Discussions and Related Certifications / Web Applications / Re: HTTP header: PUT, DELETE, etc on: August 19, 2010, 09:49:49 AM
I guess you should now be able to upload an asp script which provides a remote shell.

http://skypher.com/index.php/2010/03/04/aspsh-a-remote-shell-written-in-asp/
Note: I've never used the above script.

Edit: I was a few seconds late.
       You should be able to create to more than just .txt files. Can you please try again?
56  Ethical Hacking Discussions and Related Certifications / Web Applications / Re: HTTP header: PUT, DELETE, etc on: August 19, 2010, 08:48:48 AM
PUT method can be used to upload a file to the server only if the directory is writable. If the user, with which the website is run, doesn't have write privileges on a directory, you won't be able to upload to that directory., even if PUT verb is allowed.

How do you find if a website allows PUT verb?
nc -v <domain or I.P> <webserver port>
OPTIONS / HTTP/1.0

How do you know if a directory is writable?
You can follow a brute-force approach and try every directory.
You can enumerate the directories used to store user ulploads like images, attachments etc and then try PUT method on each one of these.

http://upload.thinfile.com/docs/put.php
57  Ethical Hacking Discussions and Related Certifications / eCPPT - eLearnSecurity Certified Professional Penetration Tester / Re: eLearnSecurity opinions? on: August 18, 2010, 11:24:42 AM
I'm studying eLearnsecurity's PTP course. I haven't taken OSCP so I won't be able to compare them. xXxKrisxXx did a nice comparison of both the above courses here  http://www.ethicalhacker.net/component/option,com_smf/Itemid,54/topic,5399.msg30830/#msg30830
I think Hayabusa is also enrolled in PTP and has already attained OSCP cert. so he will also be able to provide some valuable input.
Quote
1) Is the PTP course well organized?
Yes. It covers 3 modules- Web application security, Network security and System security.
Network security module covers the pentesting methodology and tools. I didn't find anything exceptional here which isn't already in other courses' syllabus- and OSCP's too.
System security module is good and though it covers some sections extensively and just introductory stuff for others.
Web application security module is very good. Armando has written it really well. Out of all the three, I enjoyed this module the most. His web application footprinting methodology and other stuff is really useful.

My opinion of this course is that, it tries to cover a lot of stuff, and achieves this objective to some extent. But, as a result it also misses some some useful stuff. It gives you pointers/introduction to a lot of stuff, but doesn't cover anything in so much detail so as to make you a perfectionist (I specially found this to be a problem with the system security module).

Quote
2) Could anyone who has taken training from Offensive Security and eLearnSecurity give opinions on how the two compare? (it looks like the PTP course goes a little more indepth on some topics)  Which puts the material into a better organized methodology?
I can't answer this question. However, from what I've gathered through other members' posts, OSCP has lot of labs. You'll be disappointed with PTP as far as labs go. For the few labs there are you'll have to download the software on your machine and practice it.

Quote
3) Is it worth the money, especially if you already have OSCP?
Again, I can't compare it with OSCP. I think PTP is a good beginner to medium level course. System security module just touches a lot of stuff but doesn't go in-depth. Network security module covers a good deal of network pentest stuff but nothing exceptional. Web application portion is very good, and what it covers, it covers in detail.

Hope it helps. Feel free to PM me or ask here if you've more specific questions.
58  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Back track 4 is not working on virtual box after installing guest additions? on: August 15, 2010, 08:48:43 AM
I can't say for sure whether it'll solve your problem, but if it's not going to full screen, run 'fix-vesa' prior to using 'startx'.
59  Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Procedure to find services behind open ports on: August 13, 2010, 02:53:22 PM
Version scanning involves finding the application (and application's version) and the protocol (eg. SSHv1,SSHv2 ...) at a given open port.
As Ketchup posted you can start with basic banner grabbing with netcat or telnet. But banners can be easily spoofed. So, the next step will be to use Nmao version scan. Also use Amap and compare your results with the Nmap scan and eliminate false positives.
60  Ethical Hacking Discussions and Related Certifications / CEH - Certified Ethical Hacker / Re: Passed! on: August 07, 2010, 12:34:42 AM
Congrats!
Pages: 1 2 3 [4] 5 6 ... 26
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.109 seconds with 21 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.