Search:

Hey,
My video takes advancetage of known vulnerability in internal application. If you have same knowledge you can surely use that method. If not, you can still exploit xss to hijack victim's...

As per XEE description (http://projects.webappsec.org/w/page/13247002/XML%20Entity%20Expansion), this vulnerability results in the DoS which consumes all server resources. From your response it...

Hi nullbyte, the question does not provide any information about the scenario. It would be great if you could provide the actual steps you trying and the response you received from the application. I...

the new link to download DVWS:
http://dvws.professionallyevil.com/downloads/dvws.tgz

Thanks to @makash :)


Enjoy!!!

Hi,

Here is the list of online XSS challenges:
http://escape.alf.nu/
http://xss-quiz.int21h.jp/
http://prompt.ml
https://xss-game.appspot.com/


Feel free to add more.

Nice post from Aleksandr Dobkin:
https://plus.google.com/+AleksandrDobkin-Google/posts/JMwA7Y3RYzV


Enjoy!!!

AMol NAik

Many interesting talks here:

http://wtf1.muling.lu/30c3/
http://wtf.muling.lu/30c3/
30c3.ex23.de/fahrplan_d1.html

Enjoy!!!

AMol NAik

Nice paper on SAP Pentesting:
http://information.rapid7.com/rs/rapid7/images/SAP%20Penetration%20Testing%20Using%20Metasploit%20Final.pdf



Enjoy!!!!


AMol NAik

Intelligent bugs I must say :)Well Done, fb1h2s

Welcome to Garage, leganza. Learn & Share !!!

Hello All,

I'm n00b in fuzzing & exploitation field. I wanted to learn the art of analysis of crashes generated from fuzzing.

Can you guide me for the resources which are useful for learning...

Very nice Vinnu.

koi muze analysis sikha do yaar :)
Can't Understand which crash is exploitable and which one not.

i use SOAP client, Live HTTP Headers & REST client ... all Firefox addons for testing web services. Now you'll be able to use IronWASP as well.

Firewalking with nmap:
Firewalking with nmap | DiabloHorn


AMol NAik

PDF:
http://defcon-russia.ru/15/Nokia_reward_recognition.pdf

AMol NAik

I'll be available on Sunday morning, Thursday evening is not possible.

See you all at @nullcon.

AMol NAik

There is no user used. You need to give "SMBUser" as well along with corresponding password hash "SMBPass".

AMol NAik

Welcome to Garage, Dexter. Kepp learning & sharing knowledge. :)

Couple of nice posts about various types CSRF exploitations:

Apps and Security: Stateless CSRF Protection

Advanced CSRF and Stateless Anti-CSRF

AMol NAik

@r00tc0deL: you should search the forum & the Internet before asking for the help.

Here is one cheat sheet:
http://www.garage4hackers.com/f11/flash-xss-cheat-sheet-3093.html

AMol NAik

Here is the HackPra presentations which talks about some file upload techniques:

File in the hole!

AMol NAik

Welcome to garage .... learn & share the knowledge :)

Looks like you need to allow port 4444 on your router from internet. This is callled as Port Natting.

welcome to garage, karthikp. Hope to see you sharing your knowledge here :)

@karthikp: there is an attack called as Cross-Site Tracing (XST). You should read about this and find out is it still applicable to modern browsers. I'm sure after reading about this attack and...