DIRT

DIRT: 드라이버 초기 정찰 도구 저는 이 도구를 C++ 학습과 Windows 시스템에 설치된 드라이버예: OEM 또는 기업에서 개발한 마스터 이미지에 대한 초기 평가를 위해 작성하고 있습니다. 이 도구는 대상 선택, 쉬운 표적 찾기, 심층 바이너리 분석 지원에 도움을 주기 위한 것입니다. 현재 불안정하며, 활발히 개발 중입니다. 주요 기능 DeviceIoControl을 통해 비관리자 사용자가 상호작용할 수 있는 커널 모드 드라이버 목록화 이는 잠재적으로 LPE에 사용될 수 있는 드라이버를 좁히는 데 유용할 수 있습니다...

PT-2025-53048

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue was resolved in the Linux kernel related to the UBI file system. The issue occurs when the insert old idx function fails during a specific process involving znode...

The vulnerability of function 0x41710c() in D-Link DIR-832x router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of function 0x41710c in D-Link DIR-832x router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2024-7783 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version 1.0.2B05 20181207 Description: The issue is related to insufficient protection of service data, allowing unauthorized configuration file downloads. These configuration files contain plaintext user passwords, which can ...

PT-2023-9280 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 affected versions not specified Description: This issue allows network-adjacent attackers to create a denial-of-service condition on affected installations of D-Link DIR-3040 routers. The specific flaw exists within the prog.c...

How Your Real Flight Reservation Can Be Used to Scam You

Scammers use a booking technicality, traveler confusion, and promises of dirt-cheap tickets to offer hot deals that are anything but...

The vulnerability of the strncpy function in D-Link DIR-878 router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the strncpy function in D-Link DIR-878 router microprogramming software is caused by buffer overflow in the stack. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

Weird Fallout from Peiter Zatko’s Twitter Whistleblowing

People are trying to dig up dirt on Peiter Zatko, better known as Mudge. For the record, I have not been contacted. Im not sure if I should feel slighted...

Rally Racer Dirt - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Rally Racer Dirt published at the 'play' market has multiple vulnerabilities...

Dirt Inc. - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dirt Inc. published at the 'play' market has multiple vulnerabilities...

Security Firm Reveals Flaw in Dirt Jumper Bot

A team of researchers has discovered a weakness in the command-and-control infrastructure of one of the major DDoS toolkits, Dirt Jumper, that enables them to stop attacks that are in progress. The command and control C&C servers of the Dirt Jumper DDoS toolkit can be compromised and, in principl...

Researchers Find Flaw in Dirt Jumper Bot

A team of researchers has discovered a weakness in the command-and-control infrastructure of one of the major DDoS toolkits, Dirt Jumper, that enables them to stop attacks that are in progress. The discovery gives the researchers the ability to access the back-end servers that control the attack...