Wallaby’s Nightmare – Walkthrough

This segment of my Vulnhub series covers my walkthrough for the “Wallaby’s Nightmare (v1.0.2)” game. Finding Host and uncover services As always, I began finding the address of the game: Command sudo nmap -sn 192.168.110.0/24 In my case, target got assigned IP address 192.168.110.11. Then moved on uncovering services: Command sudo nmap -p1-65535 -A -T4Continue reading “Wallaby’s Nightmare – Walkthrough”

Repository hacking

Today I am going to take a look on a well-known malpractice. During development of any websites and tools the developers often use revision control systems like Git, Bazaar, Mercurial and Subversion. I don’t I need to further explain what these tools are, but I feel like I need to elaborate software deployment and theContinue reading “Repository hacking”

Shell Shock Vulnerability

You’ve probably read the news about the Shell Shock vulnerability this morning. Yup – we got a new one on our hands. A problem newly discovered – but has existed for 22 years. The CVE-2014-6271 summary states: “GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers toContinue reading “Shell Shock Vulnerability”