|
EH-Net
|
|
May 23, 2013, 02:21:50 PM
|
Show Posts
|
|
Pages: 1 ... 3 4 [5] 6
|
|
63
|
Resources / Tools / Re: Really, really good LFI list
|
on: March 29, 2010, 02:16:05 AM
|
A nice list there! A few lines of python and that is a handy win/Linux LFI scanner. @chrisj - LFI is Local File Inclusion - a web app vulnerability that is caused by the developer using local filed within their application. Incorrcectly coded let's an attacker read any file. Although on Linux, this is restricted to the permissions of the server. The format is something like www.ethicalhacker.net/index.php?page=comments.php. A vulnerable fopen function call in php, would allow an attacker to enter www.ethicalhacker.net/index.php?page=../../etc/passwd to read the file on a Linux server. There is also RFI which is remote file inclusion and allows remote content (i.e. Another site) to be included. An attacker could include a php shell for example.. n1p
|
|
|
|
|
70
|
Resources / Mass Media / Re: Leverage Game
|
on: March 26, 2010, 03:05:01 PM
|
|
Being in UK, hadnt heard of any of those shows. I will look into seeing them now, as consensus seems to be that they are worth watching!
n1p
|
|
|
|
|
72
|
Resources / Tutorials / Re: Tutorial/Informational Videos
|
on: March 26, 2010, 12:28:00 PM
|
|
I will see what I can create. I will start with some small tutorials initially, as I have not created any videos before.. We shall see how it goes! I will keep a list of them here as I add them.
Thanks for replies n1p
|
|
|
|
|
73
|
Resources / Tutorials / Tutorial/Informational Videos
|
on: March 26, 2010, 07:10:43 AM
|
I've done a number of tutorials previously in the areas of malware reversing and exploits. I have recently decided that I would like to do a few videos - similar to securitytube.net etc.. I imagine a few people here are interested in some videos. So would be great to get a view as to what people would be interested in seeing (topics), which I can then create. Current Videos - http://www.isolatedthreat.com/?page_id=192Stack Overflow TutorialSkipfish IntroductionSQLmap & BurpsuiteIdeas: Malware, exploit dev, reversing, backtrack etc etc.. Let me know, n1p
|
|
|
|
|
Loading...
|