snyff

Monetising https://www.pentesterlab.com by creating an online version of the exercises...

Amazon is not super keen on people pentesting from or against their infrastructure.

You will be better using labs available as ISO or VM.

from php-2.0.1/src/lex.c

void IntFunc(char *fnc_name) { int i=0; int cmdlen = strlen(fnc_name);

  while(cmd_table[cmdlen][i].cmd) {
    if(!strncasecmp(fnc_name,cmd_table[cmdlen][i].cmd,cmdlen)) {
      cmd_table[cmdlen][i].fnc();
      break;

Success button with an Apple logo... nicely played ;)

Just did that at school, they needed someone to teach and I got lucky and got selected to do it :)

Thanks ;)

I think you can be suited for everything. IT Security is a real big domain, depending on your skills and what you like, you can land different jobs. If you are a person who go to calmly deep dive into problems, you may be interested by security code review, if you're more into quickly understand how things work and try to abuse the default behaviour, you can work in pentest. IT sec is a huge field. Just start learning and you will see what you like... There is no suited for this, even if being curious and working hard help a lot ;)

Feel free to email me (my email is on the exercises' front page), if you need to talk about this ;)

Fair point.

<Kaa singing "Trust in Me"> My real name is on the PDF and you can find a lot of information on me on Internet... Previous talks, where I worked... As far as I know, the PDF aren't backdoored (I'm also working on a HTML version), you can open in Google docs if you're not sure. For the ISO, I wouldn't waste a bug allowing to break out of VMWARE/Virtual Machine/... </Kaa singing "Trust in Me">

You can try bugcrowd, they won't qualify for "a reputable pentest organization" yet, but they will get stuff done and you can then argue that you had few hundreds hacker attacking your app.

Maybe you can talk to one of this "reputable pentest organization" and get them to drop the price if they can blog or use your startup as a show case for other potential clients. Pentest companies have a hard time advertising their services (it's "lemon market"), so everyone could win in that deal.

Thanks :)

Yes, good point. However it's a bit harder to maintain a working architecture while giving a shell to everyone on Internet ;)

Yes, sorry for that, it may be a bit presumptuous. I tried "The Worst Way" it didn't work as much ;)

Joke aside, most training/material I saw give too much information or not enough, I tried to find the right balance to help people understand (giving a lot of information) and remember things (working hard to learn stuff).

Most other training are also pretty expensive: I tried to a cheap version and ended up providing the exercises for free. An lot of universities don't have the resources to provide good quality/up-to-date training, I hope students will be able to learn from my exercises...

Most other training are backed up by a certifications: I tried to do something where people just learn stuff because they are interested by them and want to get better and not teaching them "just what they need to pass the cert..."

Regarding my background: one engineering degree in IT architecture, one master in Security (both done in France). Few years of sysadmin at school and teaching web tuff (mostly PHP to pay for stuff). 3 years working in France as a security consultant, where I also gave few trainings and talks. And the same thing for 4 years in Australia. I don't put that online because I didn't think it was relevant :/

Finally, marketing is hard and I needed something catchy ;)

https://saucelabs.com/ perhaps?

A LOT!

Stop complaining. Go to some local dev/tech meetups. Do some freelance work and/or hack on opensource projects. Work on your self esteem. Be more confident.

Maybe, despite living at your parents, you were the best time she had... who cares anyway, YOU are focusing on the bad stuff, look at what you have not what you don't have.

Did a quick write-up on the conditions required to exploit this: http://blog.pentesterlab.com/2013/01/on-exploiting-cve-2012-...

So far, I don't think DataMapper is vulnerable. The mapping is not done in the same way (datamapper use hard coded properties).

As an example, the following

  User.all(':email '=> {':id' => '1"'})

will throw

  ArgumentError: condition ":email " does not map to a property or relationship in User
  because of the space before any SQL request is performed.

and

  User.all(':email '=> {':id' => '1"'})

will create the following query:

   Query	SELECT `id`, `email`, `password` FROM `users` WHERE `email` IN ('[":id", "1\""]') ORDER BY `id`
   120602  8:41:03	    3 Quit

To be honest, I think there is a lot more work to do (at least 2 more hours just to dump the database version) even for the author. I don't think any script kiddie will be able to exploit it based on the information provided. Or a least until someone put together a SQLmap tutorial for it.

The URI here was just for people to test if they were vulnerable or not.