HNHacker News
TopNewBestAskShowJobs

bitquark

151 karma · joined July 20, 2013

submissionscomments
bitquark··on Exfiltrating files with BusyBox
The point of the post was to show how easy it is, as people seem to miss these commands or may not be aware of how easy it is to set up a listening service. It's exfiltration by definition, but you are of course free to mangle the data any way you want or use DNS techniques if you really care about hiding what you're doing, but that's a different post.
bitquark··on Exfiltrating files with BusyBox
Agreed, I've clarified why I went with ftp and added a note with example usage of nc, thanks!
bitquark··on Exfiltrating files with BusyBox
Interesting, we must be looking at a different class of devices. If we're going down that road, there's always base64 and copy + paste!
bitquark··on Exfiltrating files with BusyBox
Indeed! I meant to mention the nc option, but I've found that ftpput/get are more often available than nc, perhaps something to do with the ubiquity of ftp.
bitquark··on Amazon packaging feedback cross-site scripting vulnerability
Of course! I did know for certain there was no monetary benefit. A t-shirt would have been nice, but I investigated for the fun of it.
bitquark··on Amazon packaging feedback cross-site scripting vulnerability
Nice to meet you! There's always one that slips through the net ;-)