I've never tried gdb remote-debugging, but seeing that there's a new pwndbg out, I felt like trying it out. Unfortunately on MacOS it's only for remote debugging, so let's do that!
terminal 1:
local% ssh -L 12345:localhost:12345 user@remote
remote$ gdbserver :12345 /whatever
terminal 2:
local% ./bin/pwndbg whatever-localcopy
(gdb) target remote localhost:12345
works - see screenshot 🙂
#ctf #cybersecurity #pwndbg #overthewire #vortex #gdbserver #ssh
📌 Previously, I shared that I was working on creating a Step by Step Walkthrough series for OverTheWire Bandit?
The last (6th) video of the series just went live! 🔥
Please check it out if you are interested yeah! 😊
https://www.youtube.com/playlist?list=PL2mncq0mb-6ibI02KufoaXnZHgNc6G9dO
#hacking #HackingTutorials #overthewire #ethicalhacking #ctf #securityctf
Over The Wire vortex12: ✅
Spoiler:
(gdb) ! ln -s /bin/sh %d
#CTF #OverTheWire #cybersecurity #vortex #ROP #ReturnOrientedProgramming
On thread vs. process permissions
In common Unix and POSIX systems, all threads in a process are supposed to have the same permission. So why does the vortex8 program work as exploited, where one thread sets different permissions than another one using setresuid/setresgid?
Reference: https://man7.org/linux/man-pages/man2/setresuid.2.html
Answer in thread.
#ctf #cybersecurity #posix #linux #glibc #syscall #overthewire #vortex
Hausmeistern muss auch mal sein - heute etwas die bisherigen #OverTheWire #Vortex Notizen sortiert.
vortex11 🏁💪
vortex7 ✅
Spannendes Ende :)
maze9@gibson:~$ cat CONGRATULATIONS
Well done!
It sure looks like you enjoy swimming in memory.
(Please don't post writeups, solutions or spoilers about the games on the web. Thank you!)
So... the web is the future right? It's where most #bugBounty action is happening, it's where a lot of new apps find their feet. So how do we #hack it with a #screenReader? Where to learn about it and what tools to use? In today's IC_Null stream I want to focus on that question. The likes of #tryHackMe and #hackTheBox will be featured, but others like #portSwigger academy and #overTheWire will come up, too. Curious? Join me in an hour over at https://twitch.tv/ic_null or https://youtube.com/@blindlyCoding #infoSec #cybersecurity #selfPromo #twitch #youtube
Want to play some fun hacking games? 🕵️♂️
Then this intermezzo is for you 👉 https://dreaming-of-dragons.blogspot.com/2024/09/wherein-i-finish-bandit-game-otw-part-2.html
I've recently finished the Bandit game in Over The Wire and decided to share a couple of tips and ideas I'd like to have known before starting the game myself.
No spoilers. Or your money back! ☺️
#overthewire #CTF #OTW #ReverseEngineering #EthicalHacking #Cybersecurity #LowLevelProgramming #CodeDive
🕵️♂️ I got hacked, and because of that you get my 6th blog post: "Wherein I Get Hacked And Learn In The Process: OTW" 🔐
Ever had a friendly chat with a "hacker" in OverTheWire? I have.
👉 Join the adventure here: https://dreaming-of-dragons.blogspot.com/2024/09/wherein-i-get-hacked-and-learn-in.html
#overthewire #CTF #OTW #ReverseEngineering #EthicalHacking #Cybersecurity #LowLevelProgramming #CodeDive
Adding finishing touches to my next blog post: on cracking simple passworded binaries. 🔍💻
But while playing around with OverTheWire, I had a surprise guest hack into my tmux session, and we had a nice chat!
Tomorrow I'll be instead talking about that instead. 🕵️♂️
Stay tuned!
#cybersecurity #ReverseEngineering #AssemblyProgramming #C #overthewire
bandit33@bandit:~$ cat README.txt
Congratulations on solving the last level of this game!
utumno8@gibson:~$ cat CONGRATULATIONS
Hell Yeah! You did it!
💪
@overthewire hat das unfassbare gemacht: alle Challenge Passworte geaendert. Doof wenn man grad vor der letzten Challenge war und jetzt alles nochmal im Schnelldurchlauf durchspielen muss um weiterzumachen. Wohl dem der gut dokumentiert hat! :-)
It's our monthly "Intro to Linux Command Line for Hackers" (and beginners) in @thegamerclub #Glasgow tonight from 6pm.
We'll work our way through the #bandit #wargame from #OverTheWire - all welcome to learn or help teach.
https://www.meetup.com/open-source-glasgow/events/292300232/
👋 Following up on my previous post regarding posting a detailed video walkthrough series for #OverTheWire Bandit #CTF!!
💻 Learning #cybersecurity can be fun!
👇 Here's the link to OverTheWire Bandit Level 13 to 18:
👋 Following up on my previous post regarding posting a detailed video walkthrough series for #OverTheWire Bandit #CTF!!
💻 Learning #cybersecurity can be fun!
👇 Here's the link to OverTheWire Bandit Level 7 to 12:
