Writing shellcode: small, null-free, self-contained
Machine code that spawns a shell. The constraints are hard: no null bytes, position-independent, tiny.
notes on hacking and technology
|
main menu
user menu
topics
|
latest postsARP spoofing: MITM on the local networkARP has no authentication. Replying en masse "that IP is me" reroutes LAN traffic through your machine. DNS spoofing and cache poisoningAnswering a DNS query before the real server, or poisoning a resolver's cache, redirects domains to attacker IPs. Amplification DDoS: small packets, big damageUDP services that answer with far more than they receive, plus a spoofed IP, multiply traffic against the victim. Scanning with nmap: SYN, versions, evasionBefore attacking you map. SYN scan for stealth, version detection for the surface, timing to stay quiet. WPA2: handshake capture and KRACKThe WPA2 4-way handshake is captured and attacked offline with a dictionary. KRACK instead breaks the protocol by reusing nonces. Evil twin: the malicious twin access pointAn AP with the same SSID as a trusted network, a stronger signal, and clients connect on their own. From there, captive portals and credential theft. LLMNR/NBT-NS poisoning with ResponderWhen DNS fails, Windows asks "who is this name?" via broadcast. Answering captures NTLMv2 hashes to crack or relay. VLAN hopping: jumping the segmentationVLANs isolate traffic — until double tagging or automatic trunk negotiation lets it cross. BGP hijacking: hijacking whole prefixesBGP trusts whoever announces routes. An AS announcing prefixes it does not own attracts entire networks' traffic. DHCP attacks: starvation and rogue serversExhausting the address pool or planting a fake DHCP server lets you impose attacker-controlled gateway and DNS. Pass-the-hash: authenticating without the passwordNTLM uses the password hash as the secret. If you steal the hash, you need not crack it: you use it directly to authenticate. |
latest posts
your IP address:
216.73.216.108
visitor #0
MOTD:
Every abstraction leaks somewhere. Here we look at where. |
topics