Hacking Articles Tips Tricks Videos Tutorials

Hacking on Medium
Php Object Injection Demo

PHP Object Injection is an application level vulnerability that could allow an attacker to perform different kinds of malicious attacks…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Php Object Injection Demo

PHP Object Injection is an application level vulnerability that could allow an attacker to perform different kinds of malicious attacks…

8 viewsedited 16:59

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Closed-source C++ DLL read buffer value when exported function is called by application

Hi there,

I trying to reverse engineer a DLL which is closed source. Out of the about 150 exported functions of this C++ DLL I was able to reverse engiener the header. I am now stuck on one function called: VNL_SetBridgeState(byte* buffer, uint bufferLen). I know the first parameter is a pointer to an byte array with a length of 0x855c. Unfortunatly I currently dont know the exact data set in the buffer (first parameter).

This DLL is also within the application, so I tried debugging the application using Ghidra and Cutter. But without any luck (breakpoints are not triggered for some reason). Now my idea is that I could try to 'override' the exported function and log the data in the buffer (to registry or some file on the disk). So this means I somehow need to override this function.

After some research I found out that this shouls be possible somehow with DLL injection or function hot patching.

Any ideas how I can read the paramter passed to this function for the application?

submitted by /u/Stogoh
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Closed-source C++ DLL read buffer value when exported function is...

Hi there, I trying to reverse engineer a DLL which is closed source. Out of the about 150 exported functions of this C++ DLL I was able to...

13 viewsedited 17:23

Hacking Articles Tips Tricks Videos Tutorials

Web Application Reconnaissance Guide, Cybersec | Shubham Dhungana
https://shubhdhungana.medium.com/web-application-reconnaissance-guide-cybersec-shubham-dhungana-17858c967e2b?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Web Application Reconnaissance Guide, Cybersec | Shubham Dhungana

In this article, I’m going to document about the process to perform web application reconnaissance. Before reading this article, we must…

10 viewsedited 18:17

Hacking Articles Tips Tricks Videos Tutorials

9 views18:17

Hacking Articles Tips Tricks Videos Tutorials

In this article, I’m going to document about the process to perform web application reconnaissance. Before reading this article, we must…Continue reading on Medium » (https://shubhdhungana.medium.com/web-application-reconnaissance-guide-cybersec-shubham-dhungana-17858c967e2b?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Web Application Reconnaissance Guide, Cybersec | Shubham Dhungana

In this article, I’m going to document about the process to perform web application reconnaissance. Before reading this article, we must…

7 viewsedited 18:17

Hacking Articles Tips Tricks Videos Tutorials

Php Object Injection Demo
https://medium.com/@pentesterclubpvtltd/php-object-injection-demo-1b90e24cba9e?source=rss------bug_bounty-5

PHP Object Injection is an application level vulnerability that could allow an attacker to perform different kinds of malicious attacks…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/php-object-injection-demo-1b90e24cba9e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Medium

Php Object Injection Demo

PHP Object Injection is an application level vulnerability that could allow an attacker to perform different kinds of malicious attacks…

8 viewsedited 18:18

Hacking Articles Tips Tricks Videos Tutorials

Enterprise: Active Directory Room From TryHackMe

You just landed in an internal network. You scan the network and there’s only the Domain Controller…Continue reading on InfoSec Write-ups »
Read more...

9 views20:24

Hacking Articles Tips Tricks Videos Tutorials

8 views20:59

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Web For Pentester sql injection example 3

https://cdn-images-1.medium.com/max/1279/1*Kf7lYDAQ2QrsinwA3G0Knw.png
This challenge is exactly the same as the previous one, we will use payload /**/ and skip space

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Web For Pentester sql injection example 3

This challenge is exactly the same as the previous one, we will use payload /**/ and skip space

6 viewsedited 20:59

Hacking Articles Tips Tricks Videos Tutorials

5 views20:59