EvilZone
Hacking and Security => Beginner's Corner => : ba8y February 05, 2015, 03:35:47 AM
-
Hey guys,
I've just got DVL(Damn Vulnerable Linux) up and running, but can't find the text tutorials that are meant to come with it anywhere. There are also meant to be video tutorials but the links to them on the DVL homepage are dead and reverse-engineering.net is down atm.
As such I was wondering if anyone could point me in the direction of them? Either online or within the distro itself
Thanks a lot!
Links:
https://www.vulnhub.com/entry/damn-vulnerable-linux-dvl-15-infectious-disease,1/ (https://www.vulnhub.com/entry/damn-vulnerable-linux-dvl-15-infectious-disease,1/)
-
I tried Googling around for a few minutes but I couldn't pull anything up so not much I can do for you. Also, out of curiosity, why is your thread topic / content an exact copy paste of this (http://www.governmentsecurity.org/forum/topic/32984-can-anyone-point-me-in-the-direction-of-the-damn-vulnerable-linux-tutorials/) one?
-
Yeah, I copy his question here. :D
This is a paper called buffer-overflow-tutorial-on-DVL.
http://tech.brookes.ac.uk/frmitchell/p00410/practicals/week-2-practicals/buffer-overflow-tutorial/at_download/file (http://tech.brookes.ac.uk/frmitchell/p00410/practicals/week-2-practicals/buffer-overflow-tutorial/at_download/file)
we need more something about it.
-
DVL is a dead project from what I know, but that doesn't mean you still can't have fun with it. Try looking a little deeper, and see what services DVL is running that are meant to be exploited. Google those services, and maybe try to exploit the bugs yourself ? I honestly didn't do any googling atm, but am anxious to hear some responses also.
-
DVL isn't meant to have tutorials. You're supposed to target the specific services it's running and determine which is best practices to use to exploit those vulnerabilities.
-
Hey guys,
I've just got DVL(Damn Vulnerable Linux) up and running, but can't find the text tutorials that are meant to come with it anywhere. There are also meant to be video tutorials but the links to them on the DVL homepage are dead and reverse-engineering.net is down atm.
As such I was wondering if anyone could point me in the direction of them? Either online or within the distro itself
Thanks a lot!
Links:
https://www.vulnhub.com/entry/damn-vulnerable-linux-dvl-15-infectious-disease,1/ (https://www.vulnhub.com/entry/damn-vulnerable-linux-dvl-15-infectious-disease,1/)
I found a few:
http://lmgtfy.com/?q=Damn+vulnerable+linux+tutorial
-
@shome @nemon1c Thanks for the reply. ;)
Actually, the way for exploitme serials is the key.
we should know how to exploit software flaws.
Hacking - The Art of Exploitation is a good choice, but we need more.
Download:
https://evilzone.org/ebooks/t11265/
-
looks like you might be better off looking at a vm from vulnhub.com. The attack vectors are a lot more focused and will help you learn what to look for when needing to compromise/ get a shell on a machine. Some vm's like tr0ll/tr0ll2 are good one's for beginners
-
:)
Is there a VM with tutorials or papers for binary software exploit ?
I'm a newbie in binary exploit, and want to learn it.
It's better to teach a man to fish than give him a fish. Thanks !
-
Just out of curiosity, is there a reason you need to use DVL? An alternate would be Metasploitable.
Both have built in vulnerabilities, and there seems to be a little better documentation/tutorials for Metasploitable. Plus if DVL is a dead project, you're probably missing out on some decent updates.
Just a suggestion. Good luck!
-
Just out of curiosity, is there a reason you need to use DVL? An alternate would be Metasploitable.
Both have built in vulnerabilities, and there seems to be a little better documentation/tutorials for Metasploitable. Plus if DVL is a dead project, you're probably missing out on some decent updates.
Just a suggestion. Good luck!
De-ICE is another option, that has multiple releases
https://www.vulnhub.com/series/de-ice,2/