The DMZ - 2021-05-16 (page 1 of 6)

« first day (3804 days earlier) ← previous day next day → last day (1066 days later) »

12:04 AM

@Jis12yearsold. Here's another good resource if you want to get into Linux kernel exploitation: ebpf.io/what-is-ebpf. The site isn't focused on exploitation, but it describes a component of the Linux kernel that has a very big attack surface area and is quite often a source of vulns.

4 hours later…

3:50 AM

I wanna clarify my understanding on a ROP challenge.
I've just finished [ROPEmporium's split 64bit](https://ropemporium.com/challenge/split.html) following [this article](https://blog.securitybits.io/2019/08/ropemporium-1-split-64-bit/) and wanna check if I understand the ROP chain correctly.

> ROP chain: [junk] + [pop rdi] + [usefulString] + [system]
My understanding:
1. Pad til RSP as usual with `junk`
2. At RSP, return/jump to the `pop rdi; ret` gadget
3. The gadget does 2 things: (1) `pop` the `usefulString` into `RDI`, and (2) returns/jumps to the `system()` call which takes `RDI` as argument

Is my understanding of the ROP chain correct?

4:27 AM

Also, for the 32 bit variant, I did it with the following payload:

```
payload = b"A" * 44 # EIP
payload += p32(elf.plt["system"]) # imp.system
payload += b"BBBB"
payload += p32(elf.symbols["usefulString"]) # /bin/cat flag.txt
```

Though the padding `BBBB` was something I tried after reading someone else's solution so I didn't know why it's necessary at the time of doing the challenge. After some reading (https://manybutfinite.com/post/journey-to-the-stack/), I'm guessing that the extra padding is in place of the "answer" block in the blog.

4 hours later…

8:01 AM

You too!

g'night

Well, Good after noon :p

3 hours later…

Journeyman Geek

11:08 AM

→ 205 messages moved to [Temporary Room for DMZ stuff ](chat.stackexchange.com/rooms/124304/…)

@JourneymanGeek gimme access at least

Journeyman Geek

@nobody Uh, there's some issues, and I'm assisting the local mods to sort some stuff out

So... mo?

dang

read most of it anyways

@JourneymanGeek Schroeder or Rory?

And did anyone get suspended?

Journeyman Geek

@nobody We don't gossip :)

Alright. I'd argue that lately this sort of stuff has become on-topic here ;)

11:18 AM

It's really not on topic here though. Probably best to keep this room remotely on topic, not to start in on politics and antisemitism and whatnot. :-)

Heh, we talk more about politics and depression here then infosec

Also Hi! First time I've seen you here (or on-site)

One aside before I abide by my own rule.... @daya Zionism is by definition the idea that it should be safe for Jews to exist, and in particular in Israel where we have continuously existed for hundreds (thousands) of years.
I will let you do the math on what anti-zionism represents.

@nobody well I guess depression is rather ontopic....

and hi, I've been mostly silent for a long time....

Anything special that prompted you to come back?

umm.... well the issues you're not seeing :-)

never truly went away

Anonymous

12:06 PM

Anti-semitism?

Anonymous

HAHAHAHAHA

Anonymous

ARE YOU FUCKING KIDDING ME?

Anonymous

YOU THINK THAT'S WHAT WE WERE ENGAGING IN?

Anonymous

You're absolutely deluded if you think that any of our conversations came from a place of anti-semitism.

not sure who you are, but I definitely saw rabid antisemitism from some others here.

Anonymous

12:09 PM

With all due respect, those messages have been moved to a place where none of us can any longer see them. So it is incredibly hard for us to verify whether it was in-fact antisemitism or not.

Anonymous

I fully appreciate you're a mod, but I am not going to base my entire opinion off the opinion (or belief) of someone else without any evidence of such a thing.

I didnt ask you to verify it. And not seeing it is the point.

not really going to engage with it here, although "all jews are liars and should be killed, nothing to do with antisemitism" is pretty antisemitic as well.... ¯_(ツ)_/¯

Anonymous

I am here almost every day, I do not recall any antisemitism going on.

heh, TIL antisemitic jews exist

Anonymous

@AviD Well, if someone did say that then of course, I disagree with such a ridiculous statement.

Anonymous

12:10 PM

But to suggest that there is a large scale issue of antisemitism going on in this chat is absolutely delusional.

@nobody its true, and its not new.

Anonymous

As I said, I am here every day... As for politics not being on topic, I think it's absolutely acceptable that the most frequent users of this chatroom can guide the topic of conversation.

Anonymous

If you disagree then what's the point of us coming here?

didnt say "large scale", we were talking about a few dozen messages.

Anonymous

Almost none of the mods are ever here.

Anonymous

12:11 PM

So, we over time, have adapted topics some of which aren't on-topic.

Well, okay I learnt something new. But no one said "all jews are liars and should be killed" in atleast the first 90% of those messages

Anonymous

If you disagree with us doing that then perhaps someone needs to enforce that more often, if that is what they want.

I dont need you to base your opinion on anything, but it might be a good idea for you to do some actual research. Of course, its your prerogative not to, I mean cmon this is America! ;-)

lol J I've been on the other side of that conversation a LOT here.

Anonymous

Firstly, I am not Amercian.

heh it was a joke, neither am I (any more).

Anonymous

12:13 PM

Secondly, if you're directing that towards my views on Israel vs Palestine I am possibly the one person in this chat room that it makes absolutely zero sense to say "do you research to".

but if a topic leads to calling for a few million people, its probably a good idea to steer clear.

Anonymous

Well, I think whoever said that is just a not good person.

Anonymous

I don't think we should all be punished for their words.

Anonymous

We very often discuss politics here and it very often is absolutely fine.

@nobody not in those words, no. but that is the ideological basis for some of it, even if they are not cognizant of it.

Hey now, I'm not coming in with a banhammer and saying you're all off limits. Do whatever you want.

Anonymous

12:14 PM

I'd like to say, so I am not taken wrongly on this. I appreciate the mods of this site.

Anonymous

However, I do not appreciate being told we should stay clear of topics.

Anonymous

Topics we discuss on a regular basis.

as I said, perhaps best to steer clear of calling for extermination of a people (yes that was actually mentioned here).

Anonymous

Because none of the mods come here regularly.

or vilify someone's existence (also mentioned).

Anonymous

12:15 PM

So to come here and say we should not talk about something I just find it overly critical and quite petty.

@Jis12yearsold. as I said, I am not trying to enforce any kind of rules.

Anonymous

Right.

Well, except the one, which is Be Nice.

Anonymous

But your earlier messages didn't really align with that.

well, and the CoC, which has clearly been violated.

Anonymous

12:16 PM

"t's really not on topic here though. Probably best to keep this room remotely on topic, not to start in on politics and antisemitism and whatnot."

Anonymous

See, the "politics" part is the issue here.

Take this as a suggestion, if a discussion naturally goes into those realms it would be best to avoid it.

@Jis12yearsold. "Probably best"

Anonymous

Okay, well, I will continue to speak on what I think I should and we'll hit the bridge of it being wrong when we come to it.

literally a suggestion.

Anonymous

As of right now, I absolutely do not agree with antisemitism.

Anonymous

12:17 PM

Well, when someone with power says "probably best" that usually means: "IM telling you"

thats absolutely fine @Jis12yearsold.! problem is that bridge was blown up. so going forward, you're in charge :-)

Journeyman Geek

@Jis12yearsold. Uh. Technically - I am a mod. I took a break cause I was uncomfortable with the topic, came in for something unrelated and... was kinda disturbed by some of the stuff that was talked about.

Anonymous

Again, I cannot see the messages.

Anonymous

So, I cannot really have an opinion on them.

@Jis12yearsold. just to be clear - you disagree with antisemitism, or you disagree with what was said here was antisemitsm?

cuz as you said you didnt see them :-)

Anonymous

12:19 PM

I disagree with antisemitism, of course.

Anonymous

If someone said something antisemitic then I don't agree with what they said.

ok cool, it was ambiguous based on the previous context :-)

Anonymous

But if you're also saying this because I am pro-palestine then I am sorry but we'll never agree.

Anonymous

And if that means you need to ban me, you can do that.

@Jis12yearsold. trust me, you're better off (knowing full well you have no real reaason to trust me ;-) )

Journeyman Geek

12:19 PM

@Jis12yearsold. Essentially - what was going on was bad enough that I asked for a second, and third opinion.

Anonymous

But I absolutely will not withhold things I believe are important.

Anonymous

If that pisses off mods, then it does.

@AviD It wasn't even that bad

Anonymous

If that gets me banned, then it does. I accept that.

okay heres the thing, saying "I am propalestine, so you think I'm antisemitic!" is a problem.

Anonymous

12:20 PM

Well, this is what I am saying.

Anonymous

Because I can't see the messages...

Anonymous

I don't know WHO this is directed at.

I am propalestine as well. Not pro-Hamas, pro-Palestinians.

Anonymous

But I can only assume it is me because well, I have spoken on this a lot the past few days.

Journeyman Geek

@Jis12yearsold. Its not

Anonymous

12:21 PM

The closest person to me in my life is seriously affected by it.

Anonymous

Right.

Anonymous

Well, that's fine then.

Anonymous

As I said, my main issue is that, when a mod says something like "probably best" that usually just means "do this" even if they said or intended it from a position of a suggestion.

Journeyman Geek

I mean, if you had no idea what happened, and weren't involved in the conversation, you wouldn't

Anonymous

Us (as users) we don't see the suggestion side, because, you have authority.

Anonymous

12:23 PM

SEe how that works?

Anonymous

That is where my issue was...

really? Daaang you've had some bad runins with some sketchy mods then.

Anonymous

But as you said, it's a SUGGESTION.

Journeyman Geek

lol

Anonymous

SO it's fine. We don't disagree on anything.

Journeyman Geek

12:23 PM

@AviD I swear he mostly deals with me.

"probably best" is an informed suggestion. me being a mod is not automatically me abusing power.

but isnt this just a great microcosm of the I/P conflict? ;-)

Anonymous

Well, I have a lot of problems with authority in general so I'm afraid the only thing I can read from that is "do this or you're getting banned".

Anonymous

That's not your fault. I don't blame you for the way I think, that is entirely on me.

Journeyman Geek

@Jis12yearsold. on the other hand, that really takes away the "ask nicely" option from us... which sucks

@Jis12yearsold. heh. To be fair I have massive problems with authority as well. I often have to work hard at overcoming my bias.

Anonymous

12:25 PM

But that is the point where I would have disagreed with you (as I did). If you were actually trying to come here and enforce rules on people that come here everyday around topics we have discussed for over a year or more, since I joined the site. I would be really not okay with that. I think that was my main point I was trying to get across.

@JourneymanGeek I thought I was literally asking nicely?

Journeyman Geek

@AviD Exactly!

@Jis12yearsold. cant say I'd disagree with you, up to a point.

Journeyman Geek

@Jis12yearsold. well - the current crisis is a newish thing

And y'all have been dealing with me at least that long?

@JourneymanGeek knows about the battles we've had with authority (the mods vs SE) about precisely this (with completely different topics, ofc)

Journeyman Geek

12:26 PM

(and never listen)

@AviD Oh I probably have had an amazing number for a moderator in good standing.

Anonymous

@JourneymanGeek Again, I don't know anything about this current crisis so I can't have an opinion on whether it was justifiable from your guys' side or not. I just assumed it was related to the paragraphs on Israel vs Palestine. Perhaps wrongly. But there we go.

Journeyman Geek

@Jis12yearsold. eh, let me get you on the side.

@Jis12yearsold. I thin there was some mention of normalizing anti-Zionism which is what caused the problem

@JourneymanGeek thats the thing, I dont see myself as an authority here? just as the designated adult in the room, that at times needs to fight the authority for the needs of the room

@nobody literally calling for abolishing Israel, Jews living here is Nazism, Jews getting killed aint no thang, and it is justified anyway. More like that.

Like I said, I dont really want to be dealing with this here.

Anonymous

@nobody I see.

12:33 PM

@AviD That's a little bit out of context, but anyways, no point in arguing

sure, but the context doesnt really make it much better.

Anonymous

@JourneymanGeek :)

Anonymous

@forest Hey, thanks :D

and I mean, normalizing anti-Zionism aint great - Zionism is literally that Jews have a right to exist here. What does normalizing the anti- of that mean?

Anonymous

I'm glad we solved this :)

12:37 PM

@AviD Which is what was being contested. But also the other user's definition of Zionism was a bit more like only Jews have a right to live here

Anonymous

Right, with that drama over.

Anonymous

Time for me to read the news and start some more... :D

Journeyman Geek

._.

Oi

Anonymous

HAHAAHHAHA

@Jis12yearsold. :)

12:38 PM

@nobody Yes. a familiar trope to give cover. In isolation, seems like an innocent mistake, or a philosophical argument. In a history of patterns, it is quite different.

Journeyman Geek

@Jis12yearsold. Also, wait, you read newspapers?

@nobody The user in question... uh... has a bit of a history

@JourneymanGeek wait, so he is 12.... and going on 60? ;-)

Journeyman Geek

@AviD he was 16 for ages. Time goes by Oddly for @Jis12yearsold. :D

2

Anonymous

Not quite. I do however check the UK media quite often, you know, pretty much the top 20 media companies, then I find things which make me really fucking mad and then I post them in here and make everyone else mad :D

Anonymous

I mean, I have to be careful though because, my girlfriend really does not like me checking the news (because it always makes me mad) so if she catches me she'll tell me off...

Anonymous

12:40 PM

Which is fair, because it does make me really mad...

Anonymous

@JourneymanGeek lol

Anonymous

Yeah time moves.... Very strange for me.

Duty calls! xkcd.com/386

Anonymous

One of my favourite XKCDs right there...

Anonymous

I cannot even count how many times I've been in that situation.

Anonymous

12:42 PM

Hot take but, I think those kind of people are dying out.

Anonymous

(The ones willing to sacrifice sleep to tell someone why they're wrong)

Anonymous

Most people just go "meh" and go to bed...

Anonymous

Also, my name is starting to annoy me now. I changed it because, well, I'm an asshat and I thought ti was funny.

Yep, I usually just go to bed

Anonymous

But now I realise I have to have this name for an entire month...

Journeyman Geek

12:43 PM

@Jis12yearsold Eh - there's ways around that

Anonymous

Suddenly the joke is on me...

Anonymous

Meanwhile in Britain: our home secretary is involved in a £20,000,000 lobbying scandal.

Journeyman Geek

@Jis12yearsold. see if you can change it on crypto, then sync it to all other sites

Anonymous

Meanwhile our ex prime minister is also involved in a hundreds of million pound scandal.

Anonymous

Our current prime minister is involved in a £50,000 flat refurbishment lobbying scandal.

Anonymous

12:45 PM

I mean... Where does it end...

Anonymous

The entire party is involved in taking money and making money without ever declaring it. And then they have the audacity to say: "the public aren't interested in this nonsense"

Anonymous

Excuse me, we fucking are...

Journeyman Geek

@Jis12yearsold. "Chief Mouser to the Cabinet Office in Catnip scandal!"

Anonymous

We ABSOLUTELY are interested in this corruption...

Anonymous

@JourneymanGeek ooh good idea.

Anonymous

12:47 PM

Drat.

Anonymous

Didn't work.

Journeyman Geek

... en.wikipedia.org/wiki/Humphrey_(cat) apparently one got away with possible murder. Or a very interesting dinner.

@Jis12yearsold. A mod could change it for you but... uh...

Needs to be a mod on a site you have an account on

Anonymous

he served under the premierships of Margaret Thatcher <- I feel sorry for that cat.

Anonymous

Margaret Thatcher?

Anonymous

You want a joke about her? I got a good one. You'll like it.

Anonymous

12:48 PM

Margaret Thatcher's funeral was the only time the 21 gun salute shot the coffin.

Anonymous

badum tsss

Anonymous

@JourneymanGeek Oh no it's not that big a deal, I'll wait.

Anonymous

Think I stole that joke from Frankie Boyle. If I recall.

Well anyway, its been fun folks. I think I'm gonna step away, be back in about 12-18 months ;-)

Anonymous

Take care :D

12:51 PM

Remember, no politics while I'm gone!

kidding!

Anonymous

Heh.

Too soon....? ;-)

Anonymous

I literally break that rule every 15 seconds...

Anonymous

:d

so do I, but I try not to

Anonymous

12:52 PM

Ah fuck it the worlds on fire anyways

Journeyman Geek

mumbles about operation coldstore

Anonymous

might as well contribute to the flames!

which is why I'm leaving haha

Anonymous

I am trying to figure out what to do today.

Anonymous

It's quite hard to think. I smoked last night and I think I'm still... Impaired. To use politically correct term.

Anonymous

12:56 PM

In-fact, I am really impaired.

1:33 PM

Hey on-topic question:

Is the four way handshake in wpa2-psk encrypted? I thought it was only authenticated (well, part of it). Or is it just the final step of sending the GTK that is encrypted?

Anonymous

The handshake itself is not encrypted, no.

Anonymous

Once the key has been installed on both sides and the MIC has been verified, the encrypted channel begins. But the handshake itself is not encrypted.

Anonymous

I think that's your question?

Yep

35

A: Why does Windows store Wi-Fi passwords in a reversible format?

The password is never sent. It is hashed, and that hash is used (indirectly) for encryption. The password can be passed through an algorithm called PBKDF2-HMAC-SHA1 with 256-bit output and a salt derived from the ESSID (network name) to generate the PSK, a raw 256-bit key. This PSK is used to en...

forest says handshake is encrypted

Anonymous

Where does he say that?

Anonymous

1:38 PM

Oh.

"This PSK is used to encrypt a handshake, called the 4-Way Handshake,"

Anonymous

Oh okay, so, yeah, he's right.

Anonymous

Sorry, for PSK it is encrypted.

Anonymous

But for other variations of WPA2, no.

Anonymous

I didn't read the "psk" part in your question, my bad.

Anonymous

1:39 PM

PSK = Pre-shared key.

But then this

20

A: How exactly does 4-way handshake cracking work?

Short answer is, 4-way handshake password "cracking" works by checking MIC in the 4th frame. That is, it only checks that KCK part of the PTK is correct. 4-way handshake doesn't contain data that would allow checking of other parts of the PTK, but that's actually not needed, for two reasons: MI...

How is the handshake "parsed" if it is encrypted?

Anonymous

Yeah, I think there is some confusion here with different variations of WPA2 going on.

Anonymous

Forest is right, when you use WPA2-PSK, the handshake itself is also encrypted.

Anonymous

But in other forms of WPA2, it isn't.

Yeah well the question is about cracking psk too

Anonymous

1:41 PM

Now I'm confused...

So how does cracking WPA2-PSK work?

Anonymous

That's a good question, I am afraid, I don't know the answer.

Anonymous

It has been 2 years since I did any kind of network security related study.

Also this

10

A: WPA2 Enterprise AES encryption key size?

You are correct in thinking that each session uses a set of psuedo-randomly generated keys. If the network is set up to use a Pre-Shared Key (PSK) then the process works as follows: The connecting device makes itself known to the Access Point (AP). The AP sends a psuedo-randomly generated nonce...

Specifically mentions nonce is sent in plaintext

@forest halp plz

Anonymous

Yeah, forest probably knows a lot more about this than me :)

Anonymous

1:45 PM

2 years ago I might have been able to answer...

Anonymous

Well, forest knows a lot more than me about a lot of things than me so ask him first :D

@Jis12yearsold. heh, forest will start talking about syscalls, and ioctls and iommus, and then I feel lost.

@AviD Your definition makes sense to me

And now I forgot the definition given by that user lol

@JourneymanGeek so now anybody who clicks on "request access" will not be given access. Right?

Journeyman Geek

@daya They will be ignored

Unless you're a security.se mod

@JourneymanGeek Ah, cool

Anonymous

1:55 PM

@nobody heh :D Don't worry, he often makes me lost as well but he also makes me learn a lot.

Anonymous

@JourneymanGeek Time to spam :D

@AviD And I really don't want to know much about the history at this time. I just wanted to have a brief on the matter which I just got yesterday from some sources. That's all. Maybe later I will dig into this more ;)

Anonymous

You can only ignore an annoyance for so long :p

@Jis12yearsold. lol, they will be ignored automatically. I guess?

Anonymous

@daya I assume :D

Journeyman Geek

1:58 PM

@Jis12yearsold. Now, If someone annoyed me enough, for actually stupid reasons I'd do one of three things.

Anonymous

Kill them?

Journeyman Geek

Go to bed, and let them waste their breath, suspend them, or better yet. Both.

Anonymous

HAHAHAHA

Anonymous

suspend me UwU :D

Journeyman Geek

Naw

I might go to bed though

« first day (3804 days earlier) ← previous day next day → last day (1066 days later) »

Transcript for

May '2116

The DMZ

A serious place where infosec is discussed PS we don't do hard...

404-errors moderate-anarchism pretending-to-work staring-into-the-abyss

join this room
about this room

00:00

06:00

12:00

18:00

all times are UTC

site design / logo © 2024 Stack Exchange Inc; legal

mobile