snyff

vor 11 Jahrendiscuss

Monetising https://www.pentesterlab.com by creating an online version of the exercises...

vor 11 Jahrendiscuss

Amazon is not super keen on people pentesting from or against their infrastructure.

You will be better using labs available as ISO or VM.

snyff

vor 13 Jahrendiscuss

from php-2.0.1/src/lex.c

void IntFunc(char *fnc_name) { int i=0; int cmdlen = strlen(fnc_name);

  while(cmd_table[cmdlen][i].cmd) {
    if(!strncasecmp(fnc_name,cmd_table[cmdlen][i].cmd,cmdlen)) {
      cmd_table[cmdlen][i].fnc();
      break;

snyff

vor 13 Jahrendiscuss

Success button with an Apple logo... nicely played ;)

snyff

vor 13 Jahrendiscuss

Just did that at school, they needed someone to teach and I got lucky and got selected to do it :)

Thanks ;)

snyff

vor 13 Jahrendiscuss

I think you can be suited for everything. IT Security is a real big domain, depending on your skills and what you like, you can land different jobs. If you are a person who go to calmly deep dive into problems, you may be interested by security code review, if you're more into quickly understand how things work and try to abuse the default behaviour, you can work in pentest. IT sec is a huge field. Just start learning and you will see what you like... There is no suited for this, even if being curious and working hard help a lot ;)

Feel free to email me (my email is on the exercises' front page), if you need to talk about this ;)

snyff

vor 13 Jahrendiscuss

Fair point.

<Kaa singing "Trust in Me"> My real name is on the PDF and you can find a lot of information on me on Internet... Previous talks, where I worked... As far as I know, the PDF aren't backdoored (I'm also working on a HTML version), you can open in Google docs if you're not sure. For the ISO, I wouldn't waste a bug allowing to break out of VMWARE/Virtual Machine/... </Kaa singing "Trust in Me">

snyff

vor 13 Jahrendiscuss

You can try bugcrowd, they won't qualify for "a reputable pentest organization" yet, but they will get stuff done and you can then argue that you had few hundreds hacker attacking your app.

Maybe you can talk to one of this "reputable pentest organization" and get them to drop the price if they can blog or use your startup as a show case for other potential clients. Pentest companies have a hard time advertising their services (it's "lemon market"), so everyone could win in that deal.

snyff

vor 13 Jahrendiscuss

Thanks :)

snyff

vor 13 Jahrendiscuss

Yes, good point. However it's a bit harder to maintain a working architecture while giving a shell to everyone on Internet ;)

snyff

vor 13 Jahrendiscuss

Yes, sorry for that, it may be a bit presumptuous. I tried "The Worst Way" it didn't work as much ;)

Joke aside, most training/material I saw give too much information or not enough, I tried to find the right balance to help people understand (giving a lot of information) and remember things (working hard to learn stuff).

Most other training are also pretty expensive: I tried to a cheap version and ended up providing the exercises for free. An lot of universities don't have the resources to provide good quality/up-to-date training, I hope students will be able to learn from my exercises...

Most other training are backed up by a certifications: I tried to do something where people just learn stuff because they are interested by them and want to get better and not teaching them "just what they need to pass the cert..."

Regarding my background: one engineering degree in IT architecture, one master in Security (both done in France). Few years of sysadmin at school and teaching web tuff (mostly PHP to pay for stuff). 3 years working in France as a security consultant, where I also gave few trainings and talks. And the same thing for 4 years in Australia. I don't put that online because I didn't think it was relevant :/

Finally, marketing is hard and I needed something catchy ;)

snyff

vor 13 Jahrendiscuss

https://saucelabs.com/ perhaps?

snyff

vor 13 Jahrendiscuss

A LOT!

snyff

vor 13 Jahrendiscuss

Stop complaining. Go to some local dev/tech meetups. Do some freelance work and/or hack on opensource projects. Work on your self esteem. Be more confident.

Maybe, despite living at your parents, you were the best time she had... who cares anyway, YOU are focusing on the bad stuff, look at what you have not what you don't have.

snyff

vor 14 Jahrendiscuss

Did a quick write-up on the conditions required to exploit this: http://blog.pentesterlab.com/2013/01/on-exploiting-cve-2012-...

snyff

vor 14 Jahrendiscuss

So far, I don't think DataMapper is vulnerable. The mapping is not done in the same way (datamapper use hard coded properties).

As an example, the following

  User.all(':email '=> {':id' => '1"'})

will throw

  ArgumentError: condition ":email " does not map to a property or relationship in User
  because of the space before any SQL request is performed.

and

  User.all(':email '=> {':id' => '1"'})

will create the following query:

   Query	SELECT `id`, `email`, `password` FROM `users` WHERE `email` IN ('[":id", "1\""]') ORDER BY `id`
   120602  8:41:03	    3 Quit

snyff

vor 14 Jahrendiscuss

To be honest, I think there is a lot more work to do (at least 2 more hours just to dump the database version) even for the author. I don't think any script kiddie will be able to exploit it based on the information provided. Or a least until someone put together a SQLmap tutorial for it.

The URI here was just for people to test if they were vulnerable or not.

Submissions

Searching for files added by mistake on github

The first CTF where the winner receives Bitcoins

CVE-2012-6081:The bug used to compromise wiki.python.org and wiki.debian.org

Latest PentesterLab exercise: 106-pages PDF course, 36 vulnerabilities

Ask HN: how to get revenue from my site

Pentesting exercise on attacking Axis2 Web service and Tomcat Manager

PentesterLab Bootcamp

Test-Driven Security

How not to get a good pentest...

From SQL injection to shell: PostgreSQL edition

More free exercises

comments