dobin@unreal ~ $ export http_proxy="localhost:8080"As you can see, wget retrieves index.html from the standard apache installation, with cookies disabled, and prints the http header and html sourcecode to stdout. It uses our local rheya proxy (localhost:8080). No cookies sent or received, as this is just a normal .html file.
dobin@unreal ~ $ wget -O - --no-cookies -S http://192.168.3.2:/index.html | cat
--2009-04-24 19:33:56-- http://192.168.3.2/index.html
Resolving localhost... 127.0.0.1, ::1
Connecting to localhost|127.0.0.1|:8080... connected.
Proxy request sent, awaiting response...
HTTP/1.1 200 OK
Date: Fri, 24 Apr 2009 15:33:55 GMT
Server: Apache/2.2.11 (FreeBSD) mod_ssl/2.2.11 OpenSSL/0.9.7e-p1 DAV/2
Last-Modified: Fri, 17 Apr 2009 22:58:53 GMT
ETag: "5c220-2c-467c81fe40540"
Accept-Ranges: bytes
Content-Length: 44
Connection: close
Content-Type: text/html
Length: 44 [text/html]
Saving to: `STDOUT'
100%[========================================>] 44 --.-K/s in 0s
2009-04-24 19:33:56 (15.4 MB/s) - `-' saved [44/44]
<html><body><h1>It works!</h1></body></html>
dobin@unreal ~ $ wget -O - --no-cookies -S http://192.168.3.2:/index.html?ABCD | catThe only difference between this wget request and the one earlier is the "Set-Cookie:" line.
--2009-04-24 19:37:24-- http://192.168.3.2/index.html?ABCD
Resolving localhost... 127.0.0.1, ::1
Connecting to localhost|127.0.0.1|:8080... connected.
Proxy request sent, awaiting response...
HTTP/1.1 200 OK
Date: Fri, 24 Apr 2009 15:37:23 GMT
Server: Apache/2.2.11 (FreeBSD) mod_ssl/2.2.11 OpenSSL/0.9.7e-p1 DAV/2
Last-Modified: Fri, 17 Apr 2009 22:58:53 GMT
ETag: "5c220-2c-467c81fe40540"
Accept-Ranges: bytes
Content-Length: 44
Connection: close
Content-Type: text/html
Set-Cookie: statusCode=1; requestID=0; dataLen=100; data=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA;
Length: 44 [text/html]
Saving to: `STDOUT'
100%[========================================>] 44 --.-K/s in 0s
2009-04-24 19:37:24 (17.0 MB/s) - `-' saved [44/44]
<html><body><h1>It works!</h1></body></html>
the two ironclads repeatedly tried to ram one another while shells bounced off their armorEin anderes, die USS Cairo:
13:59:29.921992 IP 192.168.3.1.1234 > 192.168.3.2.53: 666+ A? ABCD.2.1.0.49967.6.encKey.xxx.ch. (50)Owned host with rheya is just seeing the following in his bind-logfile:
13:59:30.025742 IP 192.168.3.2.53 > 192.168.3.1.1234: 666 1/0/0 (88)
13:59:30.025874 IP 192.168.3.1.1234 > 192.168.3.2.53: 666+[|domain]
13:59:30.121066 IP 192.168.3.2.53 > 192.168.3.1.1234: 666[|domain]
13:59:30.121152 IP 192.168.3.1.1234 > 192.168.3.2.53: 666+ A? ABCD.2.2.21845.32219.xxx.ch. (45)
13:59:30.211366 IP 192.168.3.2.53 > 192.168.3.1.1234: 666 1/0/0 (72)
28-Mar-2009 13:59:27.655 queries: info: client 192.168.3.1#1234: query: www.broken.ch IN A +The standard setting is still to reply the rheya request in the kernel, and not let the packet touch userspace. But it could be suspicious if a proxy/sniffer/ids between the attacker and the real host, and the owned host, dont see the same amount of packets.
28-Mar-2009 13:59:27.753 queries: info: client 192.168.3.1#1234: query: www.broken.ch IN A +
28-Mar-2009 13:59:27.842 queries: info: client 192.168.3.1#1234: query: www.broken.ch IN A +
If you have an executable and you suspect that it might contain a statically linked library for which you have source access (or which you have analyzed before), we want BinDiff to be able to port the symbols into the executable you have, even if the compiler versions and build environments differ significantly, and even if the versions of the library are not quite the sameDazu passend: Binnavi 2.0 Preview
The Orwellian screens would have been set up in public places and would show "people's television", depicting how the Aryan race should live, with the Nazis focusing on news, sport and education.
[...]Prototype programmes included Family Chronicles: An Evening with Hans and Gelli, which was an early reality TV show depicting a wholesome Aryan life of a young German couple [GZSZ, anyone?].
software program that can perform key duplication without having the key. Instead, the computer scientists only need a photograph of the key.WAP is fsckd: understanding the WPA Attack
Oopsy...When the arc4random(9) random number generator is initialized, there may
be inadequate entropy to meet the needs of kernel systems which rely on
arc4random(9); and it may take up to 5 minutes before arc4random(9) is
reseeded with secure entropy from the Yarrow random number generator.
Babylon A.D (5.3): Auch ohne Plot recht unterhaltsam, da ziemlich Cyberpunkig :-)
You dont mess with the Zohan (5.7): muahaha fresh und funny
Shaun of Death (8.0): Tolle Zombie Satire. Britischer Humor rockt.
Westworld (7.1): Roboter in Vergnügungspark gone mad. Gesellschaftskritisch,
Futuristisch und wegweisend. Dank Western Theme wohl DER Prototyp für
japanische Science Fiction schreiber, und für Terminator. Example:
not ok:
Star Wars Clone Wars (5.1): Jede Episode der gleichnamigen Serie ist besser als der Film. Und selbst diese sind meist nicht allzu gut.
Max Payne (5.7): Hm, ein paar Tolle Action Sequenzen. Story verwirrt. Hat imho nicht viel mit dem Spiel zu tun. Ein wenig enttäuschend.
Burn after Reading: aha das war eine Komödie?! booring
Get Smart: boring
Tropic Thunder: yawn
Righeous Kill: zu langweilig um ihn fertig zu schauen
Quantum of Solance: Where's Bond?!
Coole Serien:
World Series of Poker
Southpark
The Big Bang Theory
Star Wars Clone Wars
House
Naruto
struct ip {Nach dem RFC ist die Total Length so definiert:
...
u_short ip_len; /* total length */
...
}
Also inklusiv des IP Headers. Wie ich aber schmerzhaft herausfinden sollte, ist beim Aufruf von icmp_input() ip->ip_len nur noch die grösse des IP Payloads, ohne länge des IP Headers. Das gleiche bei udp_input(). Das scheint aber eine Ausnahme zu sein, denn für icmp_send() muss ip->ip_len wieder den standardkonformen Wert beinhalten.Total Length: 16 Bit breit. Gibt die Länge des gesamten Pakets (inkl. Kopfdaten) in Bytes an
