PoC Help

[Yousif]

Hello all, I've got some theories I want to turn into PoCs, do you think you can help? I've been brainstorming some new attack structures I'd like to introduce to the security scene, and then work on some solutions, if any. The concepts should be effective, yet the languages are very simple. The ones that I believe will be in use are HTML, CSS, PHP, and JavaScript. Not necessarily all of the them at once, but a blend of some.

[Vershun]

o.O If you can come up with vulnerabilities how can you not make a PoC?

[Yousif]

o.O If you can come up with vulnerabilities how can you not make a PoC?

I'm not good at programming much, I can't sit there and write it from scratch. I'm fairly well at working with code with security in mind only. Logically speaking, they are able to work, I just can't put the code together entirely, just a bit here and there.

[Open Circuit]

PoC PoC bagock

not being able to code from scratch is going to make this project difficult

[meca]

i moved this thread here from the main forum. it seems people from the main forum will just start filling this thread up with bullshit posts and wont help this guy.

Hello all, I've got some theories I want to turn into PoCs, do you think you can help? I've been brainstorming some new attack structures I'd like to introduce to the security scene, and then work on some solutions, if any. The concepts should be effective, yet the languages are very simple. The ones that I believe will be in use are HTML, CSS, PHP, and JavaScript. Not necessarily all of the them at once, but a blend of some.

I think your best bet is to search Google (www.google.com) and Google Groups (www.google.com/groups) for pages and threads on learning these specific languages. Learning from existing sample code on the internet is the best way to go. Back in the day when i used to code i used to always look at other peoples code to learn how it worked.

Maybe also get yourself a web development studio like Macromedia Dreamweaver it will allow you to write HTML,CSS,PHP and Javascript fairly easily. If you dont have access to getting something like Dreamweaver i suggest using UltraEdit as an alternative.

For PHP i suggest checking the manual pages over at PHP.net they have starting points you can go from combine those starting point articles with samples of code you can find on the internet

[prod]

php.net*

<3

[villain]

Hit me up.

[sn1per]

I heard AutoIT is good for people who can't program, make spolits.

[Yousif]

i moved this thread here from the main forum. it seems people from the main forum will just start filling this thread up with bullshit posts and wont help this guy.



I think your best bet is to search Google (www.google.com) and Google Groups (www.google.com/groups) for pages and threads on learning these specific languages. Learning from existing sample code on the internet is the best way to go. Back in the day when i used to code i used to always look at other peoples code to learn how it worked.

Maybe also get yourself a web development studio like Macromedia Dreamweaver it will allow you to write HTML,CSS,PHP and Javascript fairly easily. If you dont have access to getting something like Dreamweaver i suggest using UltraEdit as an alternative.

For PHP i suggest checking the manual pages over at PHP.net they have starting points you can go from combine those starting point articles with samples of code you can find on the internet

--Dreamweaver, oh god. No, I'm not that stupid! I'm able to secure code only, and develop on the side with minor modifications of code. I can't write out something totally from scratch though. Thanks for the help though, very much appreciated.

[budlight]

seriously haha you asked a kinda lame question don't get made at him for reco dreamweaver its still a good tool, i use it alot mainly just cos it allows you to cloak directories and it can remember which directories are cloaked


ultraedit however is a++ awesome windows editor esp the remote sftp functions

seriously though i kinda doubt your attacks have not been envisioned before. they may be possible but that is the hardest part of finding an exploit is proving that it exists and is reproducible.

[Yousif]

seriously haha you asked a kinda lame question don't get made at him for reco dreamweaver its still a good tool, i use it alot mainly just cos it allows you to cloak directories and it can remember which directories are cloaked


ultraedit however is a++ awesome windows editor esp the remote sftp functions

seriously though i kinda doubt your attacks have not been envisioned before. they may be possible but that is the hardest part of finding an exploit is proving that it exists and is reproducible.

Relax, I never got mad at him, I thanked him for his kind input. What makes you think what I've brainstormed is already done or thought of? Anyways, I sense some beef =O

[budlight]

Relax, I never got mad at him, I thanked him for his kind input. What makes you think what I've brainstormed is already done or thought of? Anyways, I sense some beef =O

well then fucking do it already amaze us

[A2_]

What makes you think what I've brainstormed is already done or thought of?

[Yousif]

So there's no one here who's able to help me? In any case, I'm willing to speak over AIM. If you would like to help out, my screen name is PFR. 3 chars mean nothing =O