HomeCalendarCertificationsColumnsFeaturesForumResourcesVitals
 
Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.
Lost Password?
No account yet? Register
Who's Online
We have 50 guests online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Network Pen Testingarrow OSCP - Offensive Security Certified Professionalarrow My OSCP journey...
EH-Net
May 19, 2013, 11:15:16 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: 1 ... 5 6 [7] 8 9 10   Go Down
« previous next »
  Print  
Author Topic: My OSCP journey...  (Read 34718 times)
0 Members and 1 Guest are viewing this topic.
SecurityMonkey
Jr. Member
**
Offline Offline

Posts: 89



View Profile WWW
« Reply #90 on: September 04, 2012, 08:52:35 PM »
Nice one! See told you not to give up :-)
Logged
www.securitymonkey.net
sternone
Full Member
***
Offline Offline

Posts: 129


View Profile
« Reply #91 on: September 04, 2012, 09:26:03 PM »
LOL!!!!!!!! Just rooted another one !!!

SERVER COUNT : 15 !!!!!!
Logged
Try harder....hmpf!!
jjwinter
Jr. Member
**
Offline Offline

Posts: 76


View Profile
« Reply #92 on: September 04, 2012, 09:27:36 PM »
Yar! Keep good notes. Make sure they says things other than "F-u #%@%!@  Server 14!"
Logged
SecurityMonkey
Jr. Member
**
Offline Offline

Posts: 89



View Profile WWW
« Reply #93 on: September 04, 2012, 09:36:43 PM »
Dude your on FIRE!!!
Logged
www.securitymonkey.net
sternone
Full Member
***
Offline Offline

Posts: 129


View Profile
« Reply #94 on: September 04, 2012, 09:40:15 PM »
I can't anymore.. I really need sleep now ! haha

Strange, sometimes a buffer overflow that worked before is not working anymore.

I had it before, i reverted twice and then it worked again. Some exploits say in the code: this works only for 70% ...  Huh Huh
Logged
Try harder....hmpf!!
SecurityMonkey
Jr. Member
**
Offline Offline

Posts: 89



View Profile WWW
« Reply #95 on: September 04, 2012, 09:41:41 PM »
Quote from: sternone on September 04, 2012, 09:40:15 PM
I can't anymore.. I really need sleep now ! haha

Strange, sometimes a buffer overflow that worked before is not working anymore.

I had it before, i reverted twice and then it worked again. Some exploits say in the code: this works only for 70% ...  Huh Huh

I guess it all has to do with memory locations.... and finding the right one!

Go to bed....
Logged
www.securitymonkey.net
shadowzero
Full Member
***
Offline Offline

Posts: 120


It's a UNIX system, I know this!


View Profile
« Reply #96 on: September 04, 2012, 09:57:19 PM »
Quote from: sternone on September 04, 2012, 09:40:15 PM
I can't anymore.. I really need sleep now ! haha

Strange, sometimes a buffer overflow that worked before is not working anymore.

I had it before, i reverted twice and then it worked again. Some exploits say in the code: this works only for 70% ...  Huh Huh

Some exploits may take a couple of tries before it kicks in.
Logged
sternone
Full Member
***
Offline Offline

Posts: 129


View Profile
« Reply #97 on: September 05, 2012, 04:53:23 PM »
Rooted another one !!!!!

Maybe it is THE most important one.. because... THAT's what we wanna see right baby ??

SERVER COUNT : 16 !!
Logged
Try harder....hmpf!!
hayabusa
Hero Member
*****
Offline Offline

Posts: 1630



View Profile
« Reply #98 on: September 05, 2012, 07:53:29 PM »
<grin>  Looks 'slightly' interesting.   Wink
Logged
~ hayabusa ~ 

"All men can see these tactics whereby I conquer, but what none can see is the strategy out of which victory is evolved." - Sun Tzu, 'The Art of War'

OSCE, OSCP , GPEN, C|EH
sternone
Full Member
***
Offline Offline

Posts: 129


View Profile
« Reply #99 on: September 06, 2012, 12:34:00 PM »
Routed another one.

One confession: This one box took me literally the whole day. That wasn't an easy one. Like a whole day.

Glad I rooted it.

I'm going to get into the tunneling stuff soon and might stop hacking the student network.

I can always come back and do the other servers anyway.

SERVER COUNT 17
Logged
Try harder....hmpf!!
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1057


aka dynamik


View Profile WWW
« Reply #100 on: September 06, 2012, 12:39:41 PM »
Quote from: sternone on September 06, 2012, 12:34:00 PM
One confession: This one box took me literally the whole day. That wasn't an easy one. Like a whole day.

It only gets worse. I went from rooting five per day at the start, to one every five days towards the end.

Quote from: sternone on September 06, 2012, 12:34:00 PM
I'm going to get into the tunneling stuff soon and might stop hacking the student network.

I can always come back and do the other servers anyway.

Not all systems exist in a bubble. Don't skimp on your research and info gathering.
Logged
WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
sternone
Full Member
***
Offline Offline

Posts: 129


View Profile
« Reply #101 on: September 06, 2012, 04:26:00 PM »
ROUTED ANOTHER ONE! SERVER COUNT 18

This was another nasty one. Buffer exploit days seems to be over...  Smiley

It's all web script hacking and SQL injections from now on...  Undecided
« Last Edit: September 06, 2012, 04:29:27 PM by sternone » Logged
Try harder....hmpf!!
sternone
Full Member
***
Offline Offline

Posts: 129


View Profile
« Reply #102 on: September 07, 2012, 10:57:55 AM »
DAY 27

Routed another one: SERVER COUNT : 19

This was nasty again. No more low hanging fruit folks. I had to hack an application, then change a lot of settings in an application so I could finally have executed code.

Wow. Not easy and very time consuming.

Do all servers have multiple access ways ? Or is that only with a few ones ?

I'm also wanting to know exactly what tools you can use on the exam so I know what to practice with.

The lab is getting really harder now.
Logged
Try harder....hmpf!!
UNIX
Hero Member
*****
Offline Offline

Posts: 1234


View Profile
« Reply #103 on: September 07, 2012, 11:04:02 AM »
Quote from: sternone on September 07, 2012, 10:57:55 AM
Do all servers have multiple access ways ? Or is that only with a few ones ?

I'm not sure if all, but when I did the labs I discovered on quite a few machines more than one way to get root/SYSTEM. Smiley
Logged
shadowzero
Full Member
***
Offline Offline

Posts: 120


It's a UNIX system, I know this!


View Profile
« Reply #104 on: September 07, 2012, 11:13:32 AM »
Some have more than one way. Some have red herrings. Some have only one way. The notorious ones, usually only have one way. Smiley
Logged
Pages: 1 ... 5 6 [7] 8 9 10   Go Up
  Print  
« previous next »
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com 		Valid XHTML 1.0! Valid CSS!
Page created in 0.577 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.