BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses https://francozappa.github.io/post/2023/bluffs-ccs23/
Daniele Antonioli
BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses | Daniele Antonioli
Breaking and fixing the Bluetooth standard. One More Time.
Paper Slides Toolkit CVE-2023-24023 BT SIG note
Paper Slides Toolkit CVE-2023-24023 BT SIG note
Good series here on NAT >> Everything you never knew about NATs and wish you hadn't asked https://educatedguesswork.org/posts/nat-part-1/
educatedguesswork.org
Everything you never knew about NATs and wish you hadn't asked
In which I talk about NAT, but mostly dunk on IPv6
Extracting Training Data from ChatGPT https://not-just-memorization.github.io/extracting-training-data-from-chatgpt.html
GoTitan Botnet - Ongoing Exploitation on Apache ActiveMQ https://www.fortinet.com/blog/threat-research/gotitan-botnet-exploitation-on-apache-activemq
Fortinet Blog
GoTitan Botnet - Ongoing Exploitation on Apache ActiveMQ
FortiGuardLabs uncovers the ongoing exploits targeting CVE-2023-46604, with the emergence of a new Golang botnet "GoTitan". Learn more. …
DICOM Demystified: Exploring the Underbelly of Medical Imaging https://claroty.com/team82/research/dicom-demystified-exploring-the-underbelly-of-medical-imaging
Claroty
DICOM Demystified: Exploring the Underbelly of Medical Imaging
Decompilation Debugging https://clearbluejar.github.io/posts/decompilation-debugging-pretending-all-binaries-come-with-source-code/
clearbluejar
Decompilation Debugging
Debugging an application can provide the insight needed troubleshoot a subtle bug in your software. Normally, when debugging, you have source code and data type information (aka symbols) to help navigate your application. In the world of Reverse Engineering…
TRAP; RESET; POISON; - Taking over a country Kaminsky style https://sec-consult.com/blog/detail/taking-over-a-country-kaminsky-style/
SEC Consult
TRAP; RESET; POISON; - Taking over a country Kaminsky style
A technical deep dive on how to poison the DNS name resolution of an entire country!
Encrypted traffic interception on Hetzner and Linode targeting the largest Russian XMPP (Jabber) messaging service https://notes.valdikss.org.ru/jabber.ru-mitm/
👍1
A Detailed Look at Pwn2Own Automotive EV Charger Hardware https://www.zerodayinitiative.com/blog/2023/11/28/a-detailed-look-at-pwn2own-automotive-ev-charger-hardware
Zero Day Initiative
Zero Day Initiative — A Detailed Look at Pwn2Own Automotive EV Charger Hardware
In a previous blog, we took a look at the ChargePoint Home Flex EV charger – one of the targets in the upcoming Pwn2Own Automotive contest. In this post, dive in with even greater detail on all of the EV Chargers targeted in the upcoming Pwn2Own Automotive…
PoC Exploit for Windows NTLM Privilege Escalation Flaw (CVE-2023-21746) Published https://securityonline.info/poc-exploit-for-windows-ntlm-privilege-escalation-flaw-cve-2023-21746-published/
Daily CyberSecurity
PoC Exploit for Windows NTLM Privilege Escalation Flaw (CVE-2023-21746) Published
Two security researchers Andrea Pierini & Antonio Cocomazzi announced the release of PoC exploits code targeting the CVE-2023-21746 flaw
Bypassing a noexec by elf roping https://blog.xilokar.info/bypassing-a-noexec-by-elf-roping.html
blog.xilokar.info
Bypassing a noexec by elf roping
Analysis of CVE-2023-46214 + PoC https://blog.hrncirik.net/cve-2023-46214-analysis
Hacker-Blog
Analysis of CVE-2023-46214 + PoC
CVE-2023-46214 is a Remote Code Execution (RCE) vulnerability found in Splunk Enterprise which was disclosed on November 16, 2023 in the Splunk security advisory SVD-2023-1104. The description of the vulnerability essentially states that Splunk Enterprise…
🔥2
Rust std fs slower than Python!? No, it's hardware! https://xuanwo.io/2023/04-rust-std-fs-slower-than-python/
xuanwo.io
Rust std fs slower than Python!? No, it's hardware!
Achieving Data Freedom Through Open Source and Rust
Libc-GOT-Hijacking: Binary Exploitation Skill. Gain RCE from arbitrary write. https://github.com/n132/Libc-GOT-Hijacking
GitHub
GitHub - n132/Libc-GOT-Hijacking: Binary Exploitation Skill. Gain RCE from arbitrary write.
Binary Exploitation Skill. Gain RCE from arbitrary write. - n132/Libc-GOT-Hijacking
nrich: a command-line tool to quickly analyze all IPs in a file and see which ones have open ports/ vulnerabilities https://gitlab.com/shodan-public/nrich
GitLab
shodan-public / nrich · GitLab
A command-line tool to quickly analyze all IPs in a file and see which ones have open ports/ vulnerabilities. Can also be fed data from stdin to be...
0x02a: CVE-2020-16040 ANALYSIS & EXPLOITATION https://homecrew.dev/posts/cve-2020-16040.html
homecrew.dev
CVE-2020-16040 Analysis and Exploitation
CVE-2020-16040 Analysis and Exploitation: Chrome's V8 JIT compiler's Simplified Lowering VisitSpeculativeIntegerAdditiveOp was setting Signed32 as restriction type, even when relying on a Word32 truncation, skipping an overflow check. To summarise, the problem…
Exploiting the xmlrpc.php on all WordPress versions https://nitesculucian.github.io/2019/07/01/exploiting-the-xmlrpc-php-on-all-wordpress-versions/
faxhell: A Bind Shell Using the Fax Service and a DLL Hijack https://github.com/ionescu007/faxhell
GitHub
GitHub - ionescu007/faxhell: A Bind Shell Using the Fax Service and a DLL Hijack
A Bind Shell Using the Fax Service and a DLL Hijack - ionescu007/faxhell
👍1
Exploiting prototype pollution – RCE in Kibana (CVE-2019-7609) https://research.securitum.com/prototype-pollution-rce-kibana-cve-2019-7609/