fatal_core_dump

Fatal Core Dump Murder Mystery Repo for generating a core dump debugging murder mystery game site. THIS REPO HAS SPOILERS FOR THE GAME!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! You can play it here: https://www.robopenguins.com/fatalcoredump/ For a blog post on the design process see:...

asafw

asafw 予備的な注意: これは asatools の一部として使用することをお勧めしますが、スタンドアロンでも使用できます。 asafw は、Cisco ASA ファームウェアを扱うためのスクリプト群です。gdb でのデバッグに必要なファームウェアの展開や、以下のような特定の機能を有効にするための展開/再パックを行うことができます。 起動時に gdb を有効化 デバッグを容易にするために ASLR を無効化 実際のハードウェアで使用する際に gdb で CTRL^C を可能にする Linux デバッグシェルを注入 ファームウェアの root 化通常は起動時の gdb 有効化と roo...

USN-3001-1 linux-lts-vivid vulnerabilities

Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. CVE-2016-2117 Jann Horn discovered that eCryptfs improperly attempted to use...

USN-2989-1 linux vulnerabilities

Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. CVE-2016-2117 Jason A. Donenfeld discovered multiple out-of-bounds reads in t...

HT Editor 2.0.20 Buffer Overflow

!/usr/bin/perl =head1 TITLE HT Editor 2.0.20 Buffer Overflow ROP PoC =head2 DESCRIPTION Since version 2.0.18, the stack overflow vulnerability has not been corrected, which I assume would make it 0day? I consequently recoded an exploit, as memory addresses have changed. I chose to make it B, SSP...