InInfoSec Write-upsbyOsanda Malith Jayathissa·Jun 25, 2020My Journey into eLearnSecurity Certified eXploit Developer — eCXDI first want to thank eLearnSecurity for creating such a course on this topic of exploit development. I have always been a big fan of the…
InInfoSec Write-upsbyOsanda Malith Jayathissa·Feb 3, 2020Exploiting Format Strings in WindowsI thought of making a small challenge in exploiting format strings in Windows. This is how it looks, it asks for a filename to open. At…
InInfoSec Write-upsbyOsanda Malith Jayathissa·Jan 30, 2020A Basic RSA EncrypterThis is a small post about implementing a basic RSA encrypter to encrypt sections in an exe. We can use this to exchange exes with people…
InInfoSec Write-upsbyOsanda Malith Jayathissa·Jan 28, 2020Alternatives to Extract Tables and Columns from MySQL and MariaDBI’ve previously published a post on extracting table names when /or/i was filtered which leads to filtering of the word information_schema…
InInfoSec Write-upsbyOsanda Malith Jayathissa·Jan 27, 2020MiniDumpWriteDump via Faultrep!CreateMinidumpI found out this old undocumented API “CreateMinidumpW” inside the faultrep.dll on Windows XP and Windows Server 2003. This API ends up…
InInfoSec Write-upsbyOsanda Malith Jayathissa·Jan 27, 2020Unloading the Sysmon Minifilter DriverThe binary fltMC.exe is used to manage minifilter drivers. You can easily load and unload minifilters using this binary. To unload the…
InInfoSec Write-upsbyOsanda Malith Jayathissa·Mar 14, 2019Linux Reverse Engineering CTFs for BeginnersAfter a while, I decided a write a short blog post about Linux binary reversing CTFs in general. How to approach a binary and solving for…A response icon1A response icon1
InInfoSec Write-upsbyOsanda Malith Jayathissa·Apr 7, 2018Haxing MinesweeperRecently I tweeted a screenshot where I won the Minesweeper game by looking at the minefield from the memory. I posted this for no reason…
InInfoSec Write-upsbyOsanda Malith Jayathissa·Mar 24, 2017Places of Interest in Stealing NetNTLM HashesOne day I and @m3g9tr0n were discussing different places where we can use responder in stealing NetNTLM hashes. After experimenting I…