“gildasio” — Fediverse search results on home.social

Gildásio Júnior @gildasio · 2024-11-26 · 19:49 UTC

Just build a simple tool to interact with web shells and command injection vulnerabilities. Hope it's as useful for you as it was for me :)

https://github.com/gildasio/weshlient

#pentest #pentesttool #webshell #pentestweb

Gildásio Júnior @gildasio · 2024-11-25 · 15:53 UTC

Dias atrás passei umas duas semanas fazendo o desafio do #becodoexploit de ownar 30 máquinas. Revendo minhas notas, vou organizar algumas coisas interessantes para compartilhar... A primeira delas é algumas dicas para resolver problemas ao importar as VMs:

https://gildasio.gitlab.io/posts/import-vm-problems/

#pentest #boot2root

#becodoexploit #pentest #boot2root

Gildásio Júnior @gildasio · 2024-07-08 · 12:52 UTC

I wrote this post almost 2 months ago but forgot to turn it public. 😅

Now here is it. I appreciate any feedback :)

Some lessons learned doing [email protected]
https://gildasio.gitlab.io/posts/lessons-learned-phoenix-exploit-education/

#binaryexploitation #exploit #exploiteducation

Gildásio Júnior @gildasio · 2024-06-28 · 18:08 UTC

I really like to use `git log -L :function:file`.

It checks for modification on function() code through commit history. It is a pretty simple yet practical way to do that.

https://git-scm.com/docs/git-log#Documentation/git-log.txt--Lltstartgtltendgtltfilegt

#codeaudit #codereview #git

Gildásio Júnior @gildasio · 2024-05-29 · 21:26 UTC

Great thoughts about bracing failures as a awesome way to evolve. It reminds me the quote "The master has failed more times than the beginner has even tried"

#science #psicology #selfimprovement

https://www.quantamagazine.org/how-failure-has-made-mathematics-stronger-20240522/

#science #psicology #selfimprovement

Gildásio Júnior @gildasio · 2024-05-18 · 16:03 UTC

I did not know we can call functions to execute from gdb. That is pretty interesting :P

https://sourceware.org/gdb/current/onlinedocs/gdb.html/Calling.html

#BinaryExploitation #pwn #gdb #debugging

#binaryexploitation #pwn #gdb #debugging

Gildásio Júnior @gildasio · 2024-05-16 · 22:45 UTC

Last days I was doing phoenix from http://exploit.education. After exploiting them I like to read writeups to learn new tips. To my surprise people assumed some are unexploitable due to \n on address they need to write to. Here is a tip to pass.

Just a side note: I successfully exploited all exercises on both x86 and x64 architectures (except for final-two that seems to be unexploitable at all).

#binaryexploitation #pwn

Gildásio Júnior @gildasio · 2024-05-08 · 18:32 UTC

Always remember to take into account how the binary was built. I was trying to exploit a simple format string bug using positional parameters but this was not working, until @KampetL
remember me this. GLIBC doesn´t care about this rule, while MUSL does.

#binaryexploitation #pwn