Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Top Posters

Who's Online (0)

Powered by Vanilla. Made with Bootstrap.
Do you have an idea for a project?
  • m0rph
    Posts: 332
    Xin and I are going to try and bring back the challenges, and we'd love to hear any suggestions you may have. If you would even like to contribute some code get in contact with one of us, and we'll see if we can work something out. I believe Xin's working hard to get some of the old challenges to merge with Vanilla. In any case, we're always open to suggestions!

    Love,
    m0rph
    while( !(succeed = try() ) );
  • m0rph
    Posts: 332
    test bump
    while( !(succeed = try() ) );
  • Mr. P-teoMr. P-teo
    Posts: 270
    Since i want to learn application security inc.

    Fuzzing
    Reverse Engineering
    Exploit Writing
    etc.

    Maybe some small challenges on these would be good
    Skype: mrpt3o
    Twitter: MrPteo


    image
  • What P-teo said, binary reversing and exploiting would be cool. Also crypto challenges
  • mandi
    Posts: 207
    If you are opt for challenging tasks,try to research about "how to develop reliable exploits for cisco routers"
    and as far as i know and see only there are few people doing these ,it is the area which wasn't explored much,
    just a suggestion tough :)


  • m0rph
    Posts: 332
    @yaesu, try to do @sh3llc0d3's challenge here: 
    http://iexploit.org/index.php?p=/discussion/6150/crappy-crypto-challenge I think you might like it. ;)

    @mandi, as awesome as it would be to have that kind of challenge, we don't have the hardware to setup a challenge like that. :(
    while( !(succeed = try() ) );
  • i would love to research on Cisco but its hard to do with out the hardware cost a lot of $$
    Invincibility lies in the defense; the possibility of victory in the attack.
  • yaesu
    Posts: 5
    flawless said:

    i would love to research on Cisco but its hard to do with out the hardware cost a lot of $$


    Why do you have to use your own hardware? Can't you just dig your way into someone elses system? :D
  • Sh3llc0d3
    Posts: 1,910
    With cisco hardware you in a lot of cases need console access as well as ethernet access to 'do research on their hardware. I personally have a cisco lab setup at home so no probs.
  • m0rph
    Posts: 332
    If you can get your hands on an ios image, you can use it with any virtualization software to atleast test it out. You can also setup a box with GNS3, and setup a fully functioning virtual network (layer 2 functionality is iffy, you can't emulate switching capabilities without hardware, you can only simulate it). As for the hardware specifically, you can either buy used from ebay, or directly from the cisco website.
    while( !(succeed = try() ) );
  • Sh3llc0d3
    Posts: 1,910
    Ebay it is my advice. @m0rph is spot on as usual, GNS3 is a great tool I use it when I don't have access to the hardware. Also if anyone needs ios images for GNS3 let me know as I have a load of firewall and router images. Unfortunately you need an authentication key for PIX firewall images, you can use a well known google hack to find serials.
  • flawless
    Posts: 18
    @sh3llc0d3 hook me up with the iso images...i wud love to start my research on it
    Invincibility lies in the defense; the possibility of victory in the attack.
  • absynth
    Posts: 8
    ...binary reverse engineering seems a favourite, I like the idea.
    Recommendations for software to use..? I used IDA pro before moving to Radare...