cpiopwn

cpiopwn CVE-2021-38185 이는 cpio의 정수 오버플로 버그에 대한 ACE 개념 증명POC입니다. 이 익스플로잇은 완전한 RELRO를 제외한 모든 바이너리 보호를 우회합니다. 이 익스플로잇은 cpio 2.13 및 libc 2.31을 사용합니다. 비디오 데모: https://youtu.be/F0yKJhu7Vak 익스플로잇 실행 방법 Kali Dockerfile이 제공되어 익스플로잇을 실행할 수 있습니다. 동일한 익스플로잇이 Docker 컨테이너 외부에서도 작동할 수 있지만, 오프셋이 다를 수 있습니다. 지침 파일...

offsec

Offensive Security - Parcours en sécurité offensive !Difficu...

Vulnerabilities in financial mobile apps put consumers and businesses at risk

Security hubris. It’s the phrase we use to refer to our feeling of confidence grounded on assumptions we all have but may not be aware of or care to admit about cybersecurity—and, at times, privacy. It rears its ugly head when 1 we share the common notion that programmers know how to code securel...

iOS Security Testing Framework: needle

iOS Security Testing Framework Needle is an open source, modular framework to streamline the process of conducting security assessments of iOS apps. Assessing the security of an iOS application typically requires a plethora of tools, each developed for a specific need and all with different modes...

needle - The iOS Security Testing Framework

Needle is an open source, modular framework to streamline the process of conducting security assessments of iOS apps. Description Assessing the security of an iOS application typically requires a plethora of tools, each developed for a specific need and all with different modes of operation and...