K21905460: BIG-IP SSL vulnerability CVE-2017-6168
https://support.f5.com/csp/article/K21905460
https://support.f5.com/csp/article/K21905460
Windows 8 and later fail to properly randomize every application if system-wide mandatory ASLR is enabled via EMET or Windows Defender Exploit Guard
https://www.kb.cert.org/vuls/id/817544
https://www.kb.cert.org/vuls/id/817544
www.kb.cert.org
CERT Coordination Center
The Vulnerability Notes Database provides information about software vulnerabilities.
Playing around with a Format String vulnerability and ASLR. format0 - bin 0x24
https://www.youtube.com/watch?v=CyazDp-Kkr0
https://www.youtube.com/watch?v=CyazDp-Kkr0
YouTube
Playing around with a Format String vulnerability and ASLR. format0 - bin 0x24
This is about format0 from https://exploit-exercises.com/protostar/ compiled on a modern Ubuntu system.
format0: http://liveoverflow.com/binary_hacking/protostar/format0.html
DigitalOcean referral*: https://m.do.co/c/826f195e2288
-=[ ❤️ Support ]=-
→…
format0: http://liveoverflow.com/binary_hacking/protostar/format0.html
DigitalOcean referral*: https://m.do.co/c/826f195e2288
-=[ ❤️ Support ]=-
→…
Go programming language invalid modular exponentiation result (Exp() in math/big pkg)
https://github.com/golang/go/issues/22830
PoC: https://play.golang.org/p/uSBvGkeGkN
https://github.com/golang/go/issues/22830
PoC: https://play.golang.org/p/uSBvGkeGkN
GitHub
math/big: r.Exp(x, 1, m) wrong if r is initially non-zero · Issue #22830 · golang/go
For an exponent of 1, big.Int.Exp returns the correct value only for a 0 recipient, and an off-by-one result for all pre-allocated recipients.
package main
import (
"fmt"
"math/big"
)
func main...
package main
import (
"fmt"
"math/big"
)
func main...
Keying Payloads for Scripting Languages
https://adapt-and-attack.com/2017/11/15/keying-payloads-for-noscripting-languages/
https://adapt-and-attack.com/2017/11/15/keying-payloads-for-noscripting-languages/
Adapt and Attack
Keying Payloads for Scripting Languages
Keying payloads is an effective method to evade sandbox detection, prevent antivirus detection, and slow down incident response. This post covers environmental keying and HTTP keying.
🔗 imba.io
Imba is a new programming language for the web that compiles to highly performant and readable JavaScript. It has language level support for defining, extending, subclassing, instantiating and rendering dom nodes. For a simple application like TodoMVC, it is more than 10 times faster than React with less code, and a much smaller library.
Imba is a new programming language for the web that compiles to highly performant and readable JavaScript. It has language level support for defining, extending, subclassing, instantiating and rendering dom nodes. For a simple application like TodoMVC, it is more than 10 times faster than React with less code, and a much smaller library.
Kali Linux 2017.3 Release
https://www.kali.org/releases/kali-linux-2017-3-release/
https://www.kali.org/releases/kali-linux-2017-3-release/
Kali Linux
Kali Linux 2017.3 Release | Kali Linux Blog
We are pleased to announce the immediate availability of Kali Linux 2017.3, which includes all patches, fixes, updates, and improvements since our last release. In this release, the kernel has been updated to 4.13.10 and it includes some notable improvements:…
From Markdown to RCE in Atom
https://statuscode.ch/2017/11/from-markdown-to-rce-in-atom/
https://statuscode.ch/2017/11/from-markdown-to-rce-in-atom/