JUZ P3NT3$T (-)@$(-)!M

       This blog is all about Exploit Research Video #3 form Pentester Academy/Security Tube. The exploit Research Megaprimer can be found on http://www.securitytube.net/groups?operation=view&groupId=7 Here I will be demonstrating buffer overflow on a strcpy or echo server that is written in c programming language by Vivek Ramachandran. All you need to do is double click on the Server-strcpy.exe file to run the server. Configuration/Setup:

This writeup is published on infosecinstitute.          Pentester academy has launched a Command Injection ISO virtual image of Ubuntu with lots of real world vulnerable application framework. Refer the following link for download and information purpose: https://www.vulnhub.com/entry/command-injection-iso-1,81/ http://www.pentesteracademy.com/course?id=12 Lab setup: 1) Kali linux (Bridged or NAT) . My Kali Linux Ip was 192.168.1.102 2) Command Injection ISO (Bridged or NAT). My target IP was 192.168.1.103 Login into command injection ISO with user name securitytube and password 123321 to check for the DHCP ip address allocated or simply do a ping scan (nmap -sn) Checking out for port 80 on Command Injection ISO (192.168.1.103)