[DarkMuse]

If I may interject for a second. I feel like @superMAUS could make a really good basic tutorial on how to hack but this stuff is not basic at all. I'm lost xD

[superMAUS]

If I may interject for a second. I feel like @superMAUS could make a really good basic tutorial on how to hack but this stuff is not basic at all. I'm lost xD

Haha, all in good time.

[DarkMuse]

Haha, all in good time.

Then I shall wait ^.^

[Dyme]

This is really vulnerability discovery in an open source project more than anything, and teaching someone how to use grep and cat really doesn't cut it. It's just gonna be the same old shit that join7seven made a tutorial on in which he audited some shitty php code that had a sqli vulnerability so obvious that vehla could find it.

Here let me save you the work:
http://www.hackforums.net/showthread.php?tid=3116315
http://www.hackforums.net/showthread.php?tid=3108156

And if you are gonna argue "but dim I was gonna audit C becuz memory corruption vulns r leet af", it's the same shit. Grep for insecure functions and see what the code does with input that can be provided via the user. Idk if a concept as rudimentary as that requires a multipart tutorial.

Wow, one of the few that doesn't say learn SQLi and XSS. Nice post OP, hope to see more from you.

One would think you need to understand SQLi and XSS vulnerabilities if you're going to be auditing code to find them...

[Alan Turing]

This is really vulnerability discovery in an open source project more than anything, and teaching someone how to use grep and cat really doesn't cut it. It's just gonna be the same old shit that join7seven made a tutorial on in which he audited some shitty php code that had a sqli vulnerability so obvious that vehla could find it.

Here let me save you the work:
http://www.hackforums.net/showthread.php?tid=3116315
http://www.hackforums.net/showthread.php?tid=3108156

And if you are gonna argue "but dim I was gonna audit C becuz memory corruption vulns r leet af", it's the same shit. Grep for insecure functions and see what the code does with input that can be provided via the user. Idk if a concept as rudimentary as that requires a multipart tutorial.


One would think you need to understand SQLi and XSS vulnerabilities if you're going to be auditing code to find them...

hey hey joinseventh is a good guy

[misnar]

This is really vulnerability discovery in an open source project more than anything, and teaching someone how to use grep and cat really doesn't cut it. It's just gonna be the same old shit that join7seven made a tutorial on in which he audited some shitty php code that had a sqli vulnerability so obvious that vehla could find it.

Here let me save you the work:
http://www.hackforums.net/showthread.php?tid=3116315
http://www.hackforums.net/showthread.php?tid=3108156

And if you are gonna argue "but dim I was gonna audit C becuz memory corruption vulns r leet af", it's the same shit. Grep for insecure functions and see what the code does with input that can be provided via the user. Idk if a concept as rudimentary as that requires a multipart tutorial.


One would think you need to understand SQLi and XSS vulnerabilities if you're going to be auditing code to find them...

see: https://www.sinister.ly/Thread-Tutorial-How-to-Use-Cat

"but dim I was gonna audit C becuz memory corruption vulns r leet af"

implying anyone here has more than a basic understanding of a buffer overflow