Showing posts with label code. Show all posts
Showing posts with label code. Show all posts
Monday, September 25, 2017
Download Qualidea Code Ep5 Subtitle Indonesia
Download Qualidea Code Ep5 Subtitle Indonesia
Kisahnya:
Aoi telah sadar dari kematiannya gara-gara tertebas oleh serangan Pradi. Disaat itu ia merasakan bahwa PRadi bukanlah cowok yang tepat. Disamping hal yang dianggap tabo, Kini Aoi mempunyai harapan untuk menyingkirkan Pradi dari kehidupan sehari-harinnya. Akankah PRadi menerima hal itu?
Terjemahan Dibuat Oleh: Tompel Fansub
Download Versi 480p
Zippyshare | SolidFiles | Googledrive | Mirror
Download Versi 720p
Zippyshare | SolidFiles | Googledrive | Mirror
Agar varokah, Kami Mohon Donasinya ke 08123097876 , Dan beri masukan ke FP kami.
KEYWORD: Download Qualidea Code Ep5 Subtitle Indonesia , Download Qualidea Code Ep5 Subtitle Indonesia 480p , Download Qualidea Code Ep5 Subtitle Indonesia 720p , Download Qualidea Code Ep5 Sub Indo , Download Qualidea Code Ep45Sub Indo 480p , Download Qualidea Code Ep5 Sub Indo 720p , Streaming Qualidea Code Ep5 Sub Indo
download file now
Thursday, September 21, 2017
Etisalat 2017 Data Bundle And Subscription Code For Monthly Weekly Weekend Daily Plan
Etisalat 2017 Data Bundle And Subscription Code For Monthly Weekly Weekend Daily Plan
Etisalat complete data bundle subscription code for monthly plan, weekly plan, weekend plan and daily plan review for 2017.
Etisalat is one of the best interest service provider In Nigeria and but just that Etisalat data bundles are not that cheap as other networks e.g Glo data bundles, am going to provide you Etisalat data plan subscription codes for their monthly data plan, weekly data plan, weekend data plan and daily data plan
Etisalat Monthly data plan, Weekly data plan, weekend data plan and Daily data plan subscription code
Let me just summarize Etisalat data plans and subscription code for your
| Plan | Validity | Opt-in Code |
Etisalat Daily Internet Bundles | ||
| 10MB @ ?50 | 24 Hours | *229*3*8# |
| 50MB @ ?100 | 24 Hours | *229*3*1# |
Etisalat Weekly Internet Bundles | ||
| 200MB @ ?200 | 7 Days | *229*2*10# |
Etisalat Weekend Bundle | ||
| 1GB @ ?500 | One Weekend | *5995*2# |
Etisalat Monthly Data Bundles | ||
| 500MB @ ?500 | 30 Days | *229*2*12# |
| 1GB @ ?1,000 | 30 Days | *229*2*7# |
| 1.5GB @ ?1,200 | 30 Days | *229*2*25# |
| 2.5GB @ ?2,000 | 30 Days | *229*2*8# |
| 3.5GB @ ?2,500 | 30 Days | *229*2*26# |
| 5GB @ ?3,500 | 30 Days | *229*2*9# |
| 11.5GB @ ?8,000 | 30 Days | *229*2*5# |
All the above etisalat data bundle are rollover, and please let us know if there is any errors in the data plan above.
download file now
Sunday, September 17, 2017
Glo Formula Get 4x Recharge Bonus Glo 4x Recharge Bonus Code 2017
Glo Formula Get 4x Recharge Bonus Glo 4x Recharge Bonus Code 2017
With Get four times 4X recharge bonus code you will the value 4x bonus of every recharge of N100 or more with Glo formula (4 mula). Glo is the network provider that is leading in terms of data plans subscription and now they are bringing this cool package called glo formula.
Glo formula 4x recharge code allow you to get 4x recharge bonus to either call send text messages or browse. If you wanna join glo formula 4x recharge bonus all you have to do is dial the glo 4x recharge code which is *323*PIN# meaning you have to recharge your sim with the above code. And it doesnt matter which tariff plan you are!!
More info below
? If you recharge with N100, you will get total of N400 i.e. N100 recharge value + N300 bonus airtime.
Details of offer and validity periods are shown below:
| Recharge value | Total Value to customer | Validity days |
|---|---|---|
| N100 � N200 | 4 times the recharge value | 14 |
| N200 & above | 4 times the recharge value | 30 |
More info below
? If you recharge with N100, you will get total of N400 i.e. N100 recharge value + N300 bonus airtime.
? If you recharge with N500, you will get total of N2,000 i.e. N500 recharge value + N1,500 bonus airtime.
? If you recharge with N1,000, you will get total of N4,000 i.e. N1,000 recharge value + N3,000 bonus airtime
The 4X value can be used to call all networks in Nigeria and 30 international destinations. The 4X value can also be used for SMS and browsing.
? If you recharge with N1,000, you will get total of N4,000 i.e. N1,000 recharge value + N3,000 bonus airtime
The 4X value can be used to call all networks in Nigeria and 30 international destinations. The 4X value can also be used for SMS and browsing.
Glo formula 4x Recharge Code FAQs
1. What is the 4X offer?It is an offer which rewards Glo customers with four times the value of all recharges made using N100 vouchers or higher
2. Who is eligible for this offer
The 4X offer is available to all new and existing prepaid customers
3. How can I enjoy this offer?
You will get the offer whenever you recharge with a special USSD code*323*rechargePIN#. Recharges made using the normal USSD code i.e. *123*rechargePIN# will not get this offer.
4. What if I recharge with *123*PIN#?
Only recharges made using *323*rechargePIN# will get the offer. Recharges made using the normal USSD code i.e. *123*rechargePIN# will not get the offer. Also airtime received through EasyShare or Borrow me credit do not qualify for this offer.
5. What Benefits do I enjoy on this offer?
You will enjoy four times value on every recharge of N100 and above. The airtime value is valid for14days or 30days depending on recharge value as illustrated below.
Recharge valueTotal Value to customerValidity days
N100 � N200 4 times the recharge value 14
N200 & above 4 times the recharge value 30
Thus:
�� If you recharge with N100, you will get total N400 i.e. N100 recharge value + N300 bonus airtime
�� If you recharge with N500, you will get total N2,000 i.e. N500 recharge value + N1,500 bonus airtime
�� If you recharge with N1,000, you will get total N4,000 i.e. N1,000 recharge value + N3,000 bonus airtime
The total value (recharge + bonus) is credited to your special 4X account and can be used to call all networks in Nigeria + 30 international destinations, send text messages and for browsing.
6. Which international destinations can I call with My 4X account?
UK, US, Canada, China, India, Australia, Bangladesh, Brunei, Cyprus, Denmark, Finland, French Guiana, Guam, Japan, Hong Kong, Israel, Luxembourg, Malta , Mongolia, Mexico, Netherlands, Norway, Puerto Rico, Reunion Island, Romania, Singapore ,South Africa, South Korea, Spain, Sweden.
7. What if I want to call an International Destination that is not among the listed 30?
No problem. You can call other international destinations as normal. The applicable charge for the called destination will be deducted from your main account.
8. Can I use my 4X account to purchase Voice, SMS, Data or VAS packages?
No. You can only subscribe to, or purchase these packages if you have sufficient airtime credit in your main account.
9. What if I do not have any balance in my main account?
You can recharge your main account at any time by purchasing a Glo recharge voucher and dialing *123*rechargePIN# to load it.
10. How much will I be charged when I make calls, text or browse from my 4X account?
�� Calls to ALL networks in Nigeria are charged at 45k/sec
�� Calls to the eligible 30 international destinations are charged at 45k/sec
�� SMS to ALL networks in Nigeria are charged at N4/SMS
�� Data browsing is charged at N4/MB
11. What if I exhaust the airtime value in my 4X account?
All your calls, SMS and data will be charged to your main account unless you recharge again using *323*rechargePIN#
12. Can I receive the 4X value multiple times?
YES, you will receive the bonus on every recharge you make using *323*rechargePIN#
13. Can I accumulate my bonuses?
YES, each new recharge you make using *323*rechargePIN# will increase the total airtime balance in your 4X account
14. Can I accumulate validity days?
NO, validity days cannot be accumulated. However your 4X account validity days will be extended each time you recharge, depending on the recharge value. For example:
�� N100 recharge will increase your 4X account validity by 14 days
�� N500 recharge will increase your 4X account validity by 30 days.
15. How do I check my 4X balance?
You can check your 4X balance by dialing #122*30#.
16. What if my 4X account validity days expire?
All your calls, SMS and data will be charged to your main account and any unused balance in your 4X account will be forfeited.
17. Will I be notified when my bonus validity expires?
YES, you will get an SMS notification before expiration and at expiration of the validity days.
18. Can I share my 4X airtime value with another Glo customer?
NO, the 4X value cannot be shared with or transferred to another Glo customer.
19. What happens if I migrate to another tariff profile?
4X offer can be enjoyed on any Glo prepaid plan so long as customer recharges with the special code *323*rechargePIN#. However, any unused bonus balance from previous recharges will be lost upon migration.
DONT MISS ��? How To Win A Free Ticket To Glo Laffta Fest event 2017
20. Can I subscribe to other recharge-based promotions on the network e.g. Talk More?
YES, you can subscribe to any other products and offers available on the Glo network, so long as you have sufficient airtime credit in your main account.
++++++++++++++++++++++++++++++++
Check other network bonus recharge codes
1... Airtel 6x times recharge bonus
2... Airtel 20x recharge bonus
download file now
Wednesday, September 13, 2017
Glo Night Plan Code Glo 1Gb for 200 Night Plan Code
Glo Night Plan Code Glo 1Gb for 200 Night Plan Code
Based on statistics, Globacom has been leading the Data connection race apparently and they always have a way to give an edge over their competitors.
One of the most attractive formula they used was to cap their 3.2GB monthly Data plan for just N1,000 which brought a lot of turn over. The only big flop people experience is their bad network coverage, but you have to trust Glo; theyve formulated another plan to get your subscription fee with this New Night plan which awards you a whooping 1GB for just N200.
This glo night plan runs from 00:00 (12:00am) to 04:00 am. It works on all devices and helps when you have a large file to download or if you work at night only.
HOW TO ACTIVATE GLO 1GB NIGHT PLAN | GLO 1GB FOR #200 NIGHT PLAN CODE
Make a recharge of N200 on your Glo sim if your current balance isnt up to N200
Simply dial *127*60# to Activate the plan
DONT MISS ��? Glo Formula, Get 4x Recharge Bonus : Glo 4x Recharge Bonus Code 2017
CHECK OUT ��? Glo latest free browsing 2017
Thats all. You can start browsing the Internet till 4:00 AM.
Simply dial *127*60# to Activate the plan
DONT MISS ��? Glo Formula, Get 4x Recharge Bonus : Glo 4x Recharge Bonus Code 2017
CHECK OUT ��? Glo latest free browsing 2017
Thats all. You can start browsing the Internet till 4:00 AM.
download file now
Tuesday, September 12, 2017
Top 3 Apps for Edit Development Code in Android
Top 3 Apps for Edit Development Code in Android
If you are developer,web codist or any type of code you writing on PC, but everytime you have no PC ,Now what you do.Can you leave your notebook computer at home and still code on the road? Absolutely.
Can developers write code on an Android Mobile, as an alternative to using their desktop or notebook? Sure they can � as long as they are equipped with a programmer�s editor that lets them work with HTML or with their favorite programming language.
Working from an Android tablet or phone doesn�t always offer the comfort of working from a desktop or notebook computer, but you can�t beat the convenience. When you need to view or edit code on the go, an Android code editor comes in handy. Grab your handheld tablet computer or even smartphone, and you can peek at error logs, fix an errant line of code, or look over the shoulder of other developers.
? Syntax Highlighting for several languages (C, C++, C#, Java, HTML, CSS, Javascript, Python, Ruby, Lua, LaTeX, SQL, ...)
? Several color themes
? Infinite undo & redo
? Search & replace
? Auto & block indentation
? Keep opened files and changes between sessions
? Open files directly from dropbox or a file manager
? Character encoding support
? Keyboard shortcuts (List below)
? Share documents with other services (dropbox, email, ...)
? Preview HTML files in browser
? Bracket matching
? Go to line
? Run Scripts in SL4A directly
? Configurable Shortcuts
Pro version only features:
? SFTP/FTP support
? Dropbox support
? Custom themes
? Run external commands through SSH
? Root mode
Using different character encodings:
? To open a document with a different character encoding than the default: long press the open file button
? To create a new document with a different character encoding than the default: long press the new file button
? You can make this behavior the default in the preference screen
Long pressing the save document button allows you to save a document with a different filename
Download DroidEdit from Google Play
Support All type of Languages
Can developers write code on an Android Mobile, as an alternative to using their desktop or notebook? Sure they can � as long as they are equipped with a programmer�s editor that lets them work with HTML or with their favorite programming language.
Working from an Android tablet or phone doesn�t always offer the comfort of working from a desktop or notebook computer, but you can�t beat the convenience. When you need to view or edit code on the go, an Android code editor comes in handy. Grab your handheld tablet computer or even smartphone, and you can peek at error logs, fix an errant line of code, or look over the shoulder of other developers.
So there is list of free android code editor apps.
DroidEdit (free code editor)
DroidEdit is a text and source code editor (similar to Notepad++ or gedit) for android tablets and phones with the following features:? Syntax Highlighting for several languages (C, C++, C#, Java, HTML, CSS, Javascript, Python, Ruby, Lua, LaTeX, SQL, ...)
? Several color themes
? Infinite undo & redo
? Search & replace
? Auto & block indentation
? Keep opened files and changes between sessions
? Open files directly from dropbox or a file manager
? Character encoding support
? Keyboard shortcuts (List below)
? Share documents with other services (dropbox, email, ...)
? Preview HTML files in browser
? Bracket matching
? Go to line
? Run Scripts in SL4A directly
? Configurable Shortcuts
Pro version only features:
? SFTP/FTP support
? Dropbox support
? Custom themes
? Run external commands through SSH
? Root mode
Using different character encodings:
? To open a document with a different character encoding than the default: long press the open file button
? To create a new document with a different character encoding than the default: long press the new file button
? You can make this behavior the default in the preference screen
Long pressing the save document button allows you to save a document with a different filename
Download DroidEdit from Google Play
Codeanywhere
Codeanywhere is a fast and light code editor engineered for the developer on the go.
Codeanywhere is a text, code and markup editor, that has been redesigned and reengineered to be light, fast, and mobile-friendly. Connect to your FTP, SFTP Servers, Dropbox or Github account and easily manipulate your resources, folders or files just with the swipe of your finger.
Share and collaborate on projects or just a single file - from wherever you are, and of course quickly edit code with our keyboard that has been customised for developers on the go.
Codeanywhere makes developers forget what device they are working on and let them concentrate on getting work done - be it from the iPad, iPhone, or the desktop.
Key Features:
� Syntax highlighting of more than 75 languages
� Autocomplete for HTML, XML, CSS, JavaScript, Python and PHP
� FTP and SFTP Client
� Dropbox Client
� GitHub Client
� Codeanywhere Sandbox Client
� Copy or Move files between FTP, SFTP or Dropbox
� Share ( Servers, folders or files with others )
� Keyboard has been customised for developers
� Cursor navigation for easy text selection
� Supports most encodings types
� Auto-indentation
� Customizable font sizes
� Undo & Redo
� Advaced Search ( includes Find , Replace, RegEx and MachCase )
� Code folding and Word wrap
Codeanywhere also works on the desktop (Mac and PC). Access from anywhere at https://codeanywhere.net
Download Codeanywhere from Google Play
Quoda Code Editor
Quoda is the powerful text and source code editor for Android, allowing you to code and upload, on the go.
Quoda provides a large set of features to make text and source code editing on your smartphone and tablet both easier and more productive, so you can edit code and text, like you have an IDE in your pocket. With remote connections to SFTP/FTP(S) servers, Google Drive, Dropbox, and Google Apps Script projects, it is the ideal tool for editing source code when away from your computer.
Features:
- Edit multiple files at once
- Syntax Highlighting: with themes, and custom fonts
- Cross-session editing: Re-open Quoda and edit code like you never left
- Autosuggestion: currently only for HTML and were adding more!
- Find & Replace: Supports Regex and Case (In)sensitivity
- SFTP and FTP(S) Integration
- Dropbox & Google Drive integration
- Google Apps Script support
- Snippets: a built-in library of over 500 common code snippets, and add your own snippets, too!
- Keybindings: completely customisable, too
- Comment out lines and blocks of code
- Live HTML/Markdown Preview (on tablets only)
- HTML and Markdown previewing
- Download URL source codes
- Auto-Detect Character Encoding
- Brace matching
- Auto-Indentation and Block-Indentation
- Go-To Line
- Colour Picker
- HTML Formatter
- Line bookmarking
- And theres more!
Support All type of Languages
Download Quora Code Editor from Google Play
download file now
Monday, September 11, 2017
Vulnerabilities in C C code
Vulnerabilities in C C code
In this post I will write about C/C++ code vulnerabilities because avoiding insecure coding practices in the initial stages can minimize the time and effort spent on finding and fixing them in later stages. More specifically, I will talk about implementation errors relating to memory-safety because they are still very common vulnerabilities used by attackers to gain control over the execution-flow of an application. These vulnerabilities are included in the list of most dangerous software errors. By carefully crafting an exploit for these vulnerabilities, attackers can make an application transfer execution-flow to code that they have injected. Such code injection attacks are among the most powerful and common attacks against software applications, i.e. code injection attacks allow an attacker to execute foreign code with the privileges of the vulnerable program. To exploit a vulnerability and execute a code injection attack, an attacker must: find a bug that can allow an attacker to overwrite interesting memory locations, find such an interesting memory location (stored code addresses, function pointers, data pointers), copy target code in binary form into the memory of a program (can be done easily, by giving it as input to the program) and use the vulnerability to modify the location so that the program will execute the injected code. Security vulnerabilities in C/C++ programming languages that will be described in this post and that can directly or indirectly cause code injection attacks are:
- Buffer overflow
- Format string vulnerability
- Integer errors
In C/C++ programming languages memory is allocated in multiple ways: automatic (local variables in function), static (global variables) and dynamic (malloc or new). Programmer is responsible for correct allocation and deallocation in the case of dynamic memory and appropriate use of the allocated memory (bounds and type checks). It is important to say that memory management is very error prone. Typical bugs are: writing past the boundaries of the allocated memory, dangling pointers (pointers to deallocated memory), double free (deallocating memory twice) and memory leaks (never deallocating memory). Figure 1 show segments of process memory, that is important because different attacks exploit different segments.
Figure 1. Process memory layout
Buffer overflow happens when the data gets written beyond the boundaries of an array (buffer). This way data gets written to a portion of memory which does not belong to the program variable that references the array. Buffer overflow can occur by using an unsafe copying function (e.g. strcpy), through integer errors or by looping over an array using an index which may be too high. Code that contains of buffer overflow:
void function(char *input)
{
char str[80];
strcpy(str, input);
}
int main(int argc, char **argv)
{
function(argv[i])
}
Problem in this example is strcpy function. Strcpy has no way of knowing how large the destination buffer is (i.e. there is no length parameter) so using it can lead to overrunning the buffer and corrupting other memory.
Most popular buffer overflows are:
- Stack-based buffer overflow
- Heap-based buffer overflow
Main difference is where the buffer being overwritten is allocated and techniques for gaining control of execution-flow. Stack-based buffer overflow attacks buffer on the stack and is exploitable by return address, frame pointer or indirect pointer overwriting. Heap-based buffer overflow attacks buffer on the heap and is exploitable by function pointer, data pointer, virtual function pointer overwriting or more generally overwriting memory management information. It is worth noting that other overflows exist as well like overflows in the data and bss segments. Data segment contains global or static compile-time initialized data and bss contains global or static uninitialized data. Overflows in these segments can overwrite function and data pointers stored in the same segment or data in other segments. Functions that can cause buffer overflow are: gets, strcpy, strcat, sprintf.
Format string vulnerability occurs if an attacker is able to specify the format string to a format function. If the format string that is received differs from that which is expected, such as being longer or shorter than the allocated data space, the program may crash, quit or make up for the missing information by reading extra data from the stack; allowing the execution of malicious code. Format functions are functions that have a variable amount of arguments and expect a format string as argument. This format string will specify how the format function will format its output. The format string is a character string that is literally copied to the output stream unless a % character is encountered. This character is followed by format specifiers that will manipulate the way the output is generated (format specifier particularly interesting to attackers is %n). When a format specifier requires an argument, the format function expects to find this argument on the stack. Some examples of format function, which if not treated, can expose the application to the format string attack are: fprint, printf, sprintf, snprintf, vfprintf, vprintf.Example code of format string vulnerability:
void foo(char *val)
{
printf(val);
}
int main(int argc, char **argv)
{
char buf[100] = "Hi %x %x ";
foo(buf);
return 0;
}
Problem with code is that printf in foo will print content of stack. This can happen because printf accept variable number of arguments and does not check for mismatch of number of format specifiers and arguments passed after format string.
void foo(char *val)
{
printf(val);
}
int main(int argc, char **argv)
{
char buf[100] = "Hi %x %x ";
foo(buf);
return 0;
}
Problem with code is that printf in foo will print content of stack. This can happen because printf accept variable number of arguments and does not check for mismatch of number of format specifiers and arguments passed after format string.
Integer errors are not exploitable vulnerabilities by themselves, but exploitation of these errors could lead to a situation where the program becomes vulnerable to one of the previously described vulnerabilities. Two kinds of integer errors that can lead to exploitable vulnerabilities exist: integer overflowsand integer signedness errors. Since an integer is a fixed size, there is a fixed maximum value it can store. When an attempt is made to store a value greater than this maximum value it is known as an integer overflow. This can cause a program that does not expect this to fail or become vulnerable: if used in conjunction with memory allocation, too little memory might be allocated causing a possible heap overflow. Signedness errors occur when an unsigned variable is interpreted as signed, or when a signed variable is interpreted as unsigned. This type of behavior can happen because internally to the computer, there is no distinction between the way signed and unsigned variables are stored. This can lead to a situation where a negative argument passes a maximum size test but is used as a large unsigned value afterwards, possibly causing a overflow if used in conjunction with a copy operation (e.g. memcpy expects an unsigned integer as size argument and when passed a negative signed integer, it will assume this is a large unsigned value). Example code of integer overflow:
int main(int argc, char **argv)
{
int val = 0x7fffffff; /*2147483647*/
print("%d ", val);
val = val + 1;
print("%d , val");
}
Variable val is initialized with the highest positive value a signed long integer can hold (2147483647). Adding 1 to the hex value of 0x7fffffff the value of the integer overflows and goes to a negative number (0x7fffffff + 1 = 80000000), in decimal this is -2147483648. Problem is that compilers will not detect this and the application will not notice this issue.
int main(int argc, char **argv)
{
int val = 0x7fffffff; /*2147483647*/
print("%d ", val);
val = val + 1;
print("%d , val");
}
Variable val is initialized with the highest positive value a signed long integer can hold (2147483647). Adding 1 to the hex value of 0x7fffffff the value of the integer overflows and goes to a negative number (0x7fffffff + 1 = 80000000), in decimal this is -2147483648. Problem is that compilers will not detect this and the application will not notice this issue.
download file now
Download Qualidea Code Ep4 Subtitle Indonesia
Download Qualidea Code Ep4 Subtitle Indonesia
Kisahnya:
Kali ini ceritanya gak rumit untuk dicerna gan, Pasalnya ini adalah pertempuran pertama di anime ini. Musuh mereka ternyata bukan monster, Melainkan para orang cina. Cina selalu membuat teknoliogi yang canggih. Akan tetapi mereka tak menghimbau apa dampak buruk teknologi buatan mereka. Ada satu kelemahan orang cina guys, Yaitu titit mereka paling besar cuman 4 cm.
Terjemahan Dibuat Oleh: Tompel Fansub
Download Versi 480p
Zippyshare | SolidFiles | Googledrive | Mirror
Download Versi 480p
Zippyshare | SolidFiles | Googledrive | Mirror
Agar varokah, Kami Mohon Donasinya ke 08123097876 , Dan beri masukan ke FP kami.
KEYWORD: Download Qualidea Code Ep4 Subtitle Indonesia , Download Qualidea Code Ep4 Subtitle Indonesia 480p , Download Qualidea Code Ep4 Subtitle Indonesia 720p , Download Qualidea Code Ep4 Sub Indo , Download Qualidea Code Ep4 Sub Indo 480p , Download Qualidea Code Ep4 Sub Indo 720p , Streaming Qualidea Code Ep4 Sub Indo
download file now
Saturday, September 9, 2017
Unlocking Samsung Galaxy S4 i337m by Code Request!
Unlocking Samsung Galaxy S4 i337m by Code Request!
Super AMOLED capacitive touchscreen 16M colors
5.0 inches 72.3% screen-to-body ratio
1080 x 1920 pixels ~441 ppi pixel density
Android OS, v4.2.2 Jelly Bean, upgradable to V5.0 Lollipop
Qualcomm APQ8064T Snapdragon 600
Quad-core 1.9 GHz Krait 300 CPU
Adreno 320 GPU
16/32/64 GB, 2 GB RAM
Dual Shot, Simultaneous HD video and image recording
PROCEDURES
Send the IMEI number located at the back of the battery to your trusted IMEI decoder or simply dial *#06#. Once your code calculated you can now unlock your Samsung Galaxy S4 by codes. Insert none accepted sim and enter the codes calculated by your Decoder. Check my video below.
download file now
Tuesday, September 5, 2017
Générateur XBOX live illimited Code free and FAST MAJ 2012 ALL VERSION Generateur de xbox live gold
Générateur XBOX live illimited Code free and FAST MAJ 2012 ALL VERSION Generateur de xbox live gold
Bonjour, j�ai cr�e ce logiciel qui vous permet de g�n�rer des codes xbox full of pep en illimit�s, gr�ce a ce logiciel, vous ne payerai surplusage aucun abonnement. Il fo�
Video Rating: 0 / 5
download file now
Sunday, September 3, 2017
Un pentesting usando OWASP Top Ten 2017 Sensitive Data Exposure Security Misconfiguration Code Injection
Un pentesting usando OWASP Top Ten 2017 Sensitive Data Exposure Security Misconfiguration Code Injection
En los �ltimos ex�menes de las convocatorias de las becas Talentum Startups de Telef�nica, una de las preguntas que realizamos a los candidatos, para ver qu� tipo de contacto o conocimientos tienen sobre seguridad inform�tica, es qu� prioridad tiene la exposici�n de datos sensibles frente a otro tipo de amenazas, todas ellas, recogidas en el informe Top Ten de la OWASP.
A veces nos encontramos con que las vulnerabilidades de inyecci�n de c�digo, situadas en las primeras partes de la lista son las m�s importantes, pero como se ve en el libro de Hacking Web Technologies, otro tipos de vulnerabilidades menores pueden ser el indicio para encontrar fallos que permitan llegar al coraz�n del sistema. En el informe OWASP TOP TEN 2017, la exposici�n de datos sensibles ocupa el sexto lugar.
A priori, puede parecer que la exposici�n de datos sensibles puede tener poco peso espec�fico en comparaci�n con otro tipo de riesgos recogidos en el informe, pero, como veremos en el siguiente art�culo, la exposici�n de datos sensible puede desvelar otros vectores de ataque por los cuales un atacante puede obtener informaci�n realmente cr�tica de una organizaci�n, simplemente haciendo correctamente la fase de footprinting de toda auditor�a.
Transferencia de Zona
En un ethical hacking realizado dentro de un entorno donde se haga uso de un servicio de DNS a nivel interno de la organizaci�n, una de las cosas que siempre hay que mirar es si el servidor que soporta la resoluci�n de nombres est� bien configurado, por ejemplo, no permitiendo que el servidor primario de una zona revele nombres y direcciones IP de las m�quinas que forman esa zona. Para ello, basta detectar la m�quina que aparezca en el registro SOA y �sta sera qui�n tenga conocimiento de los nombres y direcciones IP de la zona.
Una vez detectado el servidor de nombres que conoce la zona, el siguiente paso es hacer que sea nuestro servidor de nombres y realizarle la petici�n de transferencia de zona pregunt�ndole por todas las m�quinas que est�n bajo el nombre de dominio principal donde �l se encuentra.
Si el servidor de nombres primario de la zona no est� bien configurado, arrojar� todos los hostnames y las direcciones IP de las m�quinas que forman la zona que �l controla, como sucede en este caso:
Aunque, como recoge la OWASP Top Ten, no salgan a priori datos confidenciales, la transferencia de zona nos aporta una informaci�n m�s que interesante para probar otros vectores de ataque, como veremos a continuaci�n y, por supuesto, es un fallo de seguridad que se debe evitar en la configuraci�n de cualquier servidor DNS de una organizaci�n.
Inyecci�n de c�digo
Tal y como recoge el Top Ten de OWASP, en 2017 la vulnerabilidad con m�s criticidad en entornos web sigue siendo la inyecci�n de c�digo. La transferencia de zona anterior nos revela una web que puede que sea vulnerable a inyecci�n de c�digo SQL.
Automatizando el ataque SQLi con la herramienta sqlmap que viene con Kali Linux 2, parece que hay un par�metro enviado por GET al servidor donde poder inyectar c�digo SQL y JavaScript.
Al final, se comprueba c�mo realmente es posible inyectar c�digo SQL por el par�metro indicado, junto con los diferentes payloads que aprovechan la vulnerabilidad se�alada para, en este caso, extraer informaci�n del motor de la base de datos.
Ejecutando el comando sqlmap -u http://157.xxxxxxx.xxxx.php?Curso=2009 -p Curso --tables -T Miembros �dump es posible obtener los datos confidenciales almacenados sobre los miembros de la organizaci�n, como su cuenta de correo electr�nico y su contrase�a sin cifrar, algo que en el OWASP TOP Ten del a�o 2007 estaba catalogado en puesto 8: Insecure Cryptographic Storage.
Conclusiones
Puede parecer que la exposici�n de datos sensible, dentro del ranking establecido por la OWASP TOP Ten 2017 tenga menos importancia que el resto de vulnerabilidades que la preceden, pero gracias a esta relevaci�n de informaci�n, a veces es posible descubrir y explotar otras vulnerabilidades con m�s peso dentro del Top Ten.
Adem�s, aunque la OWASP no incluya de manera expl�cita dentro de la Exposici�n de Datos Sensibles la informaci�n a la que se puede acceder por culpa de un servidor de nombres mal configurado, puede arrojarnos pistas muy �tiles a seguir en un test de intrusi�n y este fallo queda reflejado en el elemento 5: Security Misconfiguration.
Autor: Amador Aparicio de la Fuente (@amadapa)
Escritor del libro "Hacking Web Technologies"
 |
| Figura 1: Un pentesting usando OWASP Top Ten 2017: Sensitive Data Exposure, Security Misconfiguration & Code Injection |
A veces nos encontramos con que las vulnerabilidades de inyecci�n de c�digo, situadas en las primeras partes de la lista son las m�s importantes, pero como se ve en el libro de Hacking Web Technologies, otro tipos de vulnerabilidades menores pueden ser el indicio para encontrar fallos que permitan llegar al coraz�n del sistema. En el informe OWASP TOP TEN 2017, la exposici�n de datos sensibles ocupa el sexto lugar.
 |
| Figura 2: Posici�n de "Sensitive Data Exposure" en el ranking OWASP Top Ten 2017 |
A priori, puede parecer que la exposici�n de datos sensibles puede tener poco peso espec�fico en comparaci�n con otro tipo de riesgos recogidos en el informe, pero, como veremos en el siguiente art�culo, la exposici�n de datos sensible puede desvelar otros vectores de ataque por los cuales un atacante puede obtener informaci�n realmente cr�tica de una organizaci�n, simplemente haciendo correctamente la fase de footprinting de toda auditor�a.
Transferencia de Zona
En un ethical hacking realizado dentro de un entorno donde se haga uso de un servicio de DNS a nivel interno de la organizaci�n, una de las cosas que siempre hay que mirar es si el servidor que soporta la resoluci�n de nombres est� bien configurado, por ejemplo, no permitiendo que el servidor primario de una zona revele nombres y direcciones IP de las m�quinas que forman esa zona. Para ello, basta detectar la m�quina que aparezca en el registro SOA y �sta sera qui�n tenga conocimiento de los nombres y direcciones IP de la zona.
 |
| Figura 3: Servidor primario DNS y direcci�n e-mail del administrador del dominio. |
Una vez detectado el servidor de nombres que conoce la zona, el siguiente paso es hacer que sea nuestro servidor de nombres y realizarle la petici�n de transferencia de zona pregunt�ndole por todas las m�quinas que est�n bajo el nombre de dominio principal donde �l se encuentra.
 |
| Figura 4: Petici�n de transferencia de zona del dominio objetivo |
Si el servidor de nombres primario de la zona no est� bien configurado, arrojar� todos los hostnames y las direcciones IP de las m�quinas que forman la zona que �l controla, como sucede en este caso:
 |
| Figura 5: Extracto de la informaci�n de la zona devuelta por el DNS primario |
Aunque, como recoge la OWASP Top Ten, no salgan a priori datos confidenciales, la transferencia de zona nos aporta una informaci�n m�s que interesante para probar otros vectores de ataque, como veremos a continuaci�n y, por supuesto, es un fallo de seguridad que se debe evitar en la configuraci�n de cualquier servidor DNS de una organizaci�n.
Inyecci�n de c�digo
Tal y como recoge el Top Ten de OWASP, en 2017 la vulnerabilidad con m�s criticidad en entornos web sigue siendo la inyecci�n de c�digo. La transferencia de zona anterior nos revela una web que puede que sea vulnerable a inyecci�n de c�digo SQL.
 |
| Figura 6: Sitio web posiblemente vulnerable a SQLi |
Automatizando el ataque SQLi con la herramienta sqlmap que viene con Kali Linux 2, parece que hay un par�metro enviado por GET al servidor donde poder inyectar c�digo SQL y JavaScript.
 |
| Figura 7: Posible par�metro GET vulnerable a SQLi y XSS |
Al final, se comprueba c�mo realmente es posible inyectar c�digo SQL por el par�metro indicado, junto con los diferentes payloads que aprovechan la vulnerabilidad se�alada para, en este caso, extraer informaci�n del motor de la base de datos.
 |
| Figura 8: Par�metro vulnerable a SQLi y payloads que pueden aprovechar el bug |
Ejecutando el comando sqlmap -u http://157.xxxxxxx.xxxx.php?Curso=2009 -p Curso --tables -T Miembros �dump es posible obtener los datos confidenciales almacenados sobre los miembros de la organizaci�n, como su cuenta de correo electr�nico y su contrase�a sin cifrar, algo que en el OWASP TOP Ten del a�o 2007 estaba catalogado en puesto 8: Insecure Cryptographic Storage.
 |
| Figura 8: Informaci�n confidencial de algunos miembros de la organizaci�n |
Conclusiones
Puede parecer que la exposici�n de datos sensible, dentro del ranking establecido por la OWASP TOP Ten 2017 tenga menos importancia que el resto de vulnerabilidades que la preceden, pero gracias a esta relevaci�n de informaci�n, a veces es posible descubrir y explotar otras vulnerabilidades con m�s peso dentro del Top Ten.
 |
| Figura 9: Security Misconfiguration en OWASP Top Ten 2017 |
Adem�s, aunque la OWASP no incluya de manera expl�cita dentro de la Exposici�n de Datos Sensibles la informaci�n a la que se puede acceder por culpa de un servidor de nombres mal configurado, puede arrojarnos pistas muy �tiles a seguir en un test de intrusi�n y este fallo queda reflejado en el elemento 5: Security Misconfiguration.
Autor: Amador Aparicio de la Fuente (@amadapa)
Escritor del libro "Hacking Web Technologies"
Sigue Un inform�tico en el lado del mal - Google+ RSS 0xWord
download file now
Saturday, September 2, 2017
generateur de code xbox live logiciel fonctionne 100 Generateur de xbox live gold
generateur de code xbox live logiciel fonctionne 100 Generateur de xbox live gold
telechargement site:http://logibest.weebly.com Generateur de Procrustean law Xbox capable of way of life G�n�rateur de code Xbox global much breezy est un outil qui g�n�re des codes de 400 points, a 4�
Video Rating: 0 / 5
download file now
Subscribe to:
Posts (Atom)