|
EH-Net
|
|
May 22, 2013, 03:58:32 PM
|
 Show Posts
|
|
Pages: 1 2 [3] 4
|
|
35
|
Ethical Hacking Discussions and Related Certifications / Web Applications / Re: webapp pricing
|
on: October 08, 2010, 12:57:53 PM
|
My philosophy is that the bigger the "Treasure Chest", the longer someone will likely spend to hack your web site.
I beg to differ. Employing different web technologies only takes longer to secure them not hack them . The security team should patch all the holes for all the technologies employed. The attacker has to find just one hole. Basically the attack surface increases with the number of technologies employed. I am not sure if I have misinterpreted your statements. |
|
|
|
|
37
|
Ethical Hacking Discussions and Related Certifications / Web Applications / Re: metasploit php
|
on: October 07, 2010, 03:44:40 PM
|
|
Original link:http://exploit.co.il/hacking/metasploit-java-meterpreter-payload/
its a java applet and not jsp file... you do not need tomcat nor a server if you follow that link...
You just need a client machine with JRE installed.
The demo would be more impressive if you are not executing the jar file manually on the client side as shown in the link you provided. Instead you should probably write a html that embeds the applet and this html should be hosted in the server(any static web server would do).. Now when the client access the web page hosted on your server, you will get a shell of the client...
Update: I didnt see that you edited your post to a new link...
jsp files are not executed on client system period.
What follows is not an accurate explanation and does not cover all cases... but I believe will help you to understand...
jsp,php,asp - all are executed on the server side and provides the output in html format and this html is sent by the server to the client and the client usually a browser renders the html. You should read about how web applications are developed.
|
|
|
|
|
38
|
Ethical Hacking Discussions and Related Certifications / Web Applications / Re: metasploit php
|
on: October 07, 2010, 02:42:46 PM
|
Thanks for the replies , I have got one more question in mind . I will also need to demonstrate a jsp shell from metasploit and thus I need to have a jsp file on the webserver and when the client executes it using browser we will receive a shell , now the point, inorder for the client to execute the file we need to have tomcat+java and then the mod_jk module and all that configured because apache is not supporting jsp by default . At the moment when i execute http://server_ip/file.jsp it throws a source code rather then just executing it ( i do have java on client ) . Can you guys recommend a smart and easy web server which is currently supporting jsp by default rather than the above solution .. actually i m not that good at linux  .. thanks JSP is a server side technology that gets executed on the server and the output of the execution of jsp is provided to the client. If you have a JSP reverse shell uploaded to the server, when you are accessing the jsp file you are getting the shell of the server and not that of the client. If you want infect client, think interms of flash, pdf, browser |
|
|
|
|
40
|
Resources / News from the Outside World / Re: Blackberry Encryption Cracked
|
on: October 06, 2010, 11:09:36 AM
|
From the article: In short, standard key-derivation function, PBKDF2, is used in a very strange way, to say the least. Where Apple has used 2,000 iterations in iOS 3.x, and 10,000 iterations in iOS 4.x, BlackBerry uses only one. Another significant shortcoming is that it's BlackBerry Desktop Software that encrypts data, not the BlackBerry device itself. This means that the data is passed from the device to the computer in a plain, unencrypted form. Apple devices act differently; the data is encrypted on the device and never leaves it in an unencrypted form The important selling point of blackberry was its security.. Nice read... |
|
|
|
|
42
|
Ethical Hacking Discussions and Related Certifications / General Certification / Re: Information Gathering
|
on: October 01, 2010, 08:57:11 AM
|
|
Information Gathering is a vital part of penetration testing and is covered in detail in good security books(Hacking exposed ?) and in good security courses(OSCP?).. I admit that I dont know a book dedicated to information gathering.. But if you are looking for advances in this area you should probably start with Chris Gates presentation on open source intelligence gathering at brucon...
Update
@dynamik damn you are fast ...
|
|
|
|
|
Loading...
|
GPEN - GIAC Certified Penetration Tester : Karen Millen Outlet as an example SFTP
