Buffer overflow webserver klibri 2.0

 

Hi evryone !,

In this entry i show how to exploit a web server Kolibri 2.0 that is vulnerable to buffer overflow:

    

The source code of the exploit:

https://github.com/f0ns1/-Exploiting-BufferOverflow/blob/main/exploit_kolibri_2_0_webserver.py

With best regards; f0ns1

Basics Buffer overflow

 

Hi everyone!!,

In this entry i explain buffer overflow smashing attack step by step Step by step:

Source code:

#include <string.h>
	#include <stdio.h>
	#
	#void do_something(char *Buffer)
	#{
	# char MyVar[128];
	# strcpy(MyVar, Buffer);
	#}
	#Main program
	#int main(int argc, char **argv)
	#{
	# do_something(argv[1]);
	# printf("Done\n");
	#}

https://github.com/f0ns1/-Exploiting-BufferOverflow/blob/main/basic_overflow.py

With best reagrds, we keep in touch !! f0ns1

Audiotran Buffer overflow [Windows]

 

Hi everyone,

This is a new entry on my personal blog about,  Buffer overflow stack smashing attack:

Video:

Source code:

https://github.com/f0ns1/-Exploiting-BufferOverflow/blob/main/auditran_exploit.py

With best regards,

f0ns1!! we keep in touch

FTP Float Exploiting: [Windows x86] Buffer Overflow [I]

 Hi everyone!,

so far so good,in this post i'm going to explain hot to exploit an RCE over Buffer overflow smash attack type.

The choosen vulnerable software is Float FTP installed over  Windows XP x86 architecture.

The software:

The connection from attacker machine:

Debugger software: Immunity Debugger with mona python plugin

Buffer Overflow exploit Source Code available on my github:

https://github.com/f0ns1/-Exploiting-BufferOverflow/tree/main

Exploit execution:

I promise create a full and deep explaination about how to create the exploit with the following stepts:

- Undesrtand the vulnerability

- Assembler quick introduction: operations/register/stack/heap

- fuzzing

- ciclycal pattern in order to obtain offset

- EIP registry control

- Shell code injection

With best regards!, i hope that you enjoy we keep in touch ;) F0ns1.

  

OSCP_labs [BBSCute] linux [II]

Linux -CuteNews 2.1.2  exploit +  Hping3 (old version) privilege escalation

OSCP_labs [infosecPrep] linux [I]

 

[Linux] easy level:

Active Directory CORPORATIVE.domain.local Series[XI] : PrintNigthmare Privelege scalation

Hi everyone!.

So far so good in this post i perform a local privilege escalation with the knowledge vulnerability of 2021.

Printnightmare

A non administrative user could create a new printer driver:

CVE-2021-1675 - CVE-2021-34527

https://github.com/ly4k/PrintNightmare

https://github.com/calebstewart/CVE-2021-1675

└─$ python3 printnightmare.py  -check  "Administrator:Passw0rd1@10.0.2.22"                            

Impacket v0.9.24.dev1+20211015.125134.c0ec6102 - Copyright 2021 SecureAuth Corporation

[*] Target appears to be vulnerable!

   

Validate sharing printers from external attacker machine to the target server:

                          

Execute privilege scalation exploit on the target system:

Verify from psexec exeternal connection using smb protocol writing on  C$:

And this is all, for this kind of attack i hope that all the companies apply the recommended vendor patches!!.

best reagrds, f0ns1