I was trying to capture some packets using Wireshark. I could find a lots of ip in the source address tab. Which ip do they represent. Which all packets are visible to wireshark when I run it in my system?
@LucasKauffman To be honest, it's a hypothetical. I could easily fill in data for those questions, from an actual environment, if you really feel like the information is critically important.
@AviD Hey sweetness. I thought you were kickin it on the beach?
@ScottPack well the thing is I know we had windows that closed with a mullion and they were dead easy to open from the outside if you knew how to do it
@RoryAlsop In this job, I think it could only be as part of an investigation triggered by HR or in a system hacked and used as a distribution point. So possible, but not likely. With any luck I'll remember to do so. :)
Well, that's interesting. I just heard a car driving, then tires screeching, then a loud banging sound echo from across the hill.
Just saw a newsletter item for "Red Shirt Fridays". It's supposed to be a day to wear (presumably red) "Support Our Troops" shirts. However, when I saw it, I could only think of this guy...
I only occasionally bring leftovers to work as I typically go home. I also don't have a cafeteria in the building. The closest good restaurant is about a .3 mile walk up the hill.
I've got a cafeteria downstairs, and a snack bar/grill down the hall. There's cafeterias and other food courts in other buildings here. The nearest decent place to eat off-site is about 8 miles out as the crow flies. If we want to go off-site for food, the round-trip drive is usually a half-hour!
@ScottPack Two to three times a week for me, depending on whether or not I'm carpooling. And the toll expense is almost another tank of gas on its own.
I like Jacksonville. They got rid of all their tolls awhile ago. (1989) Apparently though, they're putting up some "Lexus Lanes" in the near-ish future.
I found a vulnerability in a site that can allow the download of any file of the server.
I tested it by succesfully downloading boot.ini and autoexec.bat.
I have no access to source code or file system structures. All I know is it runs Win 2003 Server Ent. in drive C:, Oracle 10.1.2 AS_1 in dri...
I know. It's NaRQ. Primarily 'cause what @ScottPack said - we don't know what the intended end goal is. But, also a good deal because he says he doesn't have access to just browse the file system. It's really hard fumbling around in the dark like that.
I'm really curious as to how you come across such a vulnerability that apparently allows you to download specified files but doesn't allow you to get a directory listing.
@RoryAlsop My vote makes 3 now. Hammer at your discretion.
I kind of like that this is another one of those (probably) black-hat questions that's (most likely) going to end up closed for reasons unrelated to the hat color.
The webserver could have directory listings disabled or the user the web server runs as could have execute but not read permissions on the directory. Probably others, but those are the first that come to mind.
Microexpression is a brief facial expression according to emotions experienced. It is also one of the most powerful SE (social engineering) weapon. However, they are very hard to master.
Are they any exercises, technics, trainings or methods which helps you learn how to genuine mimic emotions wi...
Not sure if this question is too broad, if it is please let me know, we could probably turn it into a wiki. I'm posting this as a reference for other users.
What would you say are the best security conferences to attend, and for what reasons? I know defcon is considered the most popular US c...
I got the username and the password for phpMyAdmin, and i am trying to hack the operating system "linux". i tried to create an payload.php file which is a pyaload taken form metasploit.
i encoded the payload to base64 and executed this query in phpMyAdmin:
SELECT "<?php eval(base64_decode('p...
Topic #2 is my favorite reason for working from home.
That's sad. I asked for a clarification, but apparently he really is asking for zer codez
my idea is to create .php file in the server, then request it from the website running on that server. there is a website running on the server infected with path disclosure vulnerability. is it clear now ?!! — user10281 min ago
the original closed question didn't read quite the same
@Gilles well, it still basically says "I can download arbitrary files - what can I do with them" - which is a bit broad (the answer could be anything) or a bit localised (for that specific server look for oracle files x, y and z)
either way it isn't necessarily useful for future visitors
@RoryAlsop Ok, imagine the question was this: I'm running a server on a Windows system. I'm concerned that this server may have a remote download vulnerability. I'm doing a review of the system to check that the server doesn't have permission to read sensitive files that might allow the attacker to escalate to shell access. What files do I need to review?
@Gilles Your edit to the question almost makes it a different question entirely. Still pretty far-reaching, but a bit more focused. At least there appears to be an end goal somewhat defined.
I was trying to capture some packets using Wireshark. I could find a lots of ip in the source address tab. Which ip do they represent. Which all packets are visible to wireshark when I run it in my system?
What types of jobs within IT security lend themselves best to freelancing or working remotely, as opposed to being a standard office job?
Not sure if this question is too broad, if it is please let me know, we could probably turn it into a wiki. I'm posting this as a reference for other users.
What would you say are the best security conferences to attend, and for what reasons? I know defcon is considered the most popular US c...
I got the username and the password for phpMyAdmin, and i am trying to hack the operating system "linux". i tried to create an payload.php file which is a pyaload taken form metasploit.
i encoded the payload to base64 and executed this query in phpMyAdmin:
SELECT "<?php eval(base64_decode('p...
