glibc malloc singly linked list uses pointer mangling to prevent easy overwrites. The article explains how this works and how to defeat it.

Acknowledgements My understanding of EDRs would not be possible without the help of many great security researchers. Below are some write-ups and talks that really helped me gain the understanding needed and hit the ground running on the research that will…

Strikeout's hacker blog and public note taking. Hack the planet!

Faking a heap_info structure in glibc malloc to get a WRITE-WHERE primitive.

Demystifying the Windows Common Log File System Driver Privilege Escalation Zero-Day Vulnerability (CVE-2022-37969)

Teaching page of Shervine Amidi, Adjunct Lecturer at Stanford University.

The Microsoft Threat Intelligence Center (MSTIC) has identified evidence of a novel ransomware campaign attributed to IRIDIUM targeting organizations in the logistics and transportation industry in Ukraine and Poland utilizing a previously unidentified ransomware…

While tracking the Lazarus attack group, the ASEC analysis team discovered that the attackers were using the DLL Side-Loading attack technique (T1574.002) by abusing legitimate applications in the initial compromise stage to achieve the next stage of their…

Leakless glibc heap exploitation technique for code execution. Overwriting the symbol resolution process.

On Friday 14th of October 2022 Alex Plaskett (@alexjplaskett) and Cedric Halbronn (@saidelike) presented Toner Deaf – Printing your next persistence at Hexacon 2022. This talk demonstrated re…

RedEye is a visual analytic tool supporting Red & Blue Team operations - cisagov/RedEye

This short blog post explains what each tool does and overviews the use/reason for the release. Release of AutoPoC and SandboxSpy.

Introduction

FullHunt released an update to Log4J-Scan to detect Apache Commons Text RCE (CVE-2022-42889).Detecting Apache Commons Text RCE (CVE-2022-42889)The Apache Com...

IntroductionBack in April, I found a 0-day vulnerability in the Linux kernel and exploited it on Google’s kCTF platform.I reported the bug to Linux kernel security team and helped them fix the vulnera

List of (automatic) protocol reverse engineering tools for network protocols - techge/PRE-list

Trustwave SpiderLabs’ spam traps have identified an increase in threats packaged in password-protected archives with about 96% of these being spammed by the Emotet Botnet. In the first half of 2022, we identified password-protected ZIP files as the third…