News for hackers. Stuff that matters.

vampire_dk

Re:Shellcode Injection on Sunday December 27, 2015 @05:48AM (#10797075)
This book is quite good. It was my first introduction in this area.
Re:Shellcode Injection on Sunday December 27, 2015 @05:46AM (#10797071)
I'll try it next. Thanks for the suggestion :)
Re:IP traffic over ICMP tunneling on Thursday November 12, 2015 @09:18AM (#10553224)
Thanks for the feedback :)
Re:IP traffic over ICMP tunneling on Wednesday November 11, 2015 @12:49PM (#10547944)
Thanks I'll look into this :)
Re:IP traffic over ICMP tunneling on Wednesday November 11, 2015 @12:32PM (#10547814)
Normally, an ethernet or wifi restricts an MTU of 1500. I use ping packets accordingly
Re:IP traffic over ICMP tunneling on Wednesday November 11, 2015 @12:17PM (#10547726)
With even ICMP you can send/receive large messages. There is no restriction on the maximum payload length.
Re:IP traffic over ICMP tunneling on Wednesday November 11, 2015 @11:49AM (#10547568)
That's good news for me. :)
Re:IP traffic over ICMP tunneling on Wednesday November 11, 2015 @11:44AM (#10547527)
I tried using some but couldn't get them to work. Probably because many were developed long time back. There have been many recent changes in the kernel.
Re:IP traffic over ICMP tunneling on Wednesday November 11, 2015 @11:42AM (#10547518)
I haven't tried comparing both. I don't have much resources. All I can say is that using icmptunnel, one couldn't differentiate whether it's using tunnel or direct internet. Hence ICMP tunneling was very fast.

Although I'm interested in comparison as well :)

Re:IP traffic over ICMP tunneling on Wednesday November 11, 2015 @11:40AM (#10547498)
Yes. In my opinion they should restrict the payload size of an ICMP message. Blocking all echo/reply can have adverse impact on other applications as well.
Re:IP traffic over ICMP tunneling on Wednesday November 11, 2015 @11:30AM (#10547453)
I have tested it. Internet speed difference is negligible. Yup DNS tunneling apps can also be used.
Re:IP traffic over ICMP tunneling on Wednesday November 11, 2015 @11:24AM (#10547411)
I agree that some captive portals/firewalls do block ICMP but still I've seen many in my country which don't.
Re:Ask HN: Who wants to be hired? (November 2015) on Wednesday November 04, 2015 @12:56PM (#10508296)
Location: Chandigarh, India

Remote: Yes

Willing to relocate: No

Technologies: Java, C, C++, NodeJs, PHP, Lua, Python, Django, Elasticsearch, Linux, git, cloud computing

Resume/CV: https://dhavalkapil.com/resume/ https://in.linkedin.com/in/dhavalkapil

Email: [email protected]

Github: https://github.com/DhavalKapil

I am a student developer looking for a REMOTE INTERN.

Past works include elasticsearch-lua(https://github.com/DhavalKapil/elasticsearch-lua)(a detailed low level client for elasticsearch developer for the Lua Language as part of GSoC '15). dns-validator(https://github.com/DhavalKapil/dns-validator), a security tool to detect DNS poisoning.

Developer and challenge setter at Backdoor(https://backdoor.sdslabs.co/), a platform for CTFs and wargames.

Summer intern at Amazon.

I am interested in Computer Networking(Software) and Computer Security.

Re:Ask HN: Get into computer security on Wednesday October 07, 2015 @03:47PM (#10348525)
You can practice CTF challenges at https://backdoor.sdslabs.co/ :)
Re:Ask HN: Who wants to be hired? (October 2015) on Sunday October 04, 2015 @02:33PM (#10328341)
Location: Chandigarh, India

Remote: Yes

Willing to relocate: No

Technologies: Java, C, C++, NodeJs, PHP, Lua, Python, Django, Elasticsearch, Linux, git, cloud computing

Resume/CV: https://dhavalkapil.com/resume/ https://in.linkedin.com/in/dhavalkapil

Email: [email protected]

Github: https://github.com/DhavalKapil

I am a student developer looking for a REMOTE INTERN.

Past works include elasticsearch-lua(https://github.com/DhavalKapil/elasticsearch-lua)(a detailed low level client for elasticsearch developer for the Lua Language as part of GSoC '15). dns-validator(https://github.com/DhavalKapil/dns-validator), a security tool to detect DNS poisoning.

Developer and challenge setter at Backdoor(https://backdoor.sdslabs.co/), a platform for CTFs and wargames.

Summer intern at Amazon.

I am interested in Computer Networking(Software) and Computer Security.