BinBreaker 🛃

2021-06-01 19:20:43 SSL/TLS Encryption simplified

#infosec #cybersecurity #SSL #simplifiedsecurity Open / Comment

2021-05-21 11:11:18 https://hex-rays.com/blog/ida-celebrating-30-years-of-binary-analysis-innovation/

IDA: celebrating 30 years of binary analysis innovation

Today, IDA turns thirty years old. In commemoration of the anniversary we’ll describe the beginnings and major milestones of the epic journey.

#ida #reverse Open / Comment

2021-05-21 11:10:24 https://offlinemark.com/2021/05/12/an-obscure-quirk-of-proc/

Linux Internals: How /proc/self/mem writes to unwritable memory

#article #linux #kernel Open / Comment

2021-05-13 10:14:43 https://medium.com/asecuritysite-when-bob-met-alice/making-rsa-great-again-or-fishing-in-an-empty-barrel-3be801ebb9a1

1 TB Encryption Key?

The RSA method has stood the test of time, but its end may be nigh. It’s tried its hardest to keep up, and has continually expanded its prime number size (with 2,048 bits now seen as being secure, while 1,024 bits primes are insecure). Anything signed with 512-bit keys should definitely be defined as insecure. But quantum computing is likely to be the method that truly ends the 40 year reign of RSA.

#article #encryption #rsa #quantum Open / Comment

2021-03-29 19:39:19 https://jychp.medium.com/how-to-bypass-cloudflare-bot-protection-1f2c6c0c36fb

How to bypass CloudFlare bot protection ?

Cloudflare offers a system of JavaScript workers that can be used to execute code on the server side (at Cloudfalre therefore). This feature can be useful for static sites, maintenance pages etc … But it is also a great tool for pentest (serverless C&C, easy phishing proxy etc …). In this post we will explore Cloudflare bot protection bypass.

#writeup #cloudflare #bypass Open / Comment

2021-03-20 11:08:29 Happy Nowruz to all those who celebrate Open / Comment

2021-03-19 09:28:41 https://research.checkpoint.com/2021/playing-in-the-windows-sandbox/

Playing in the (Windows) Sandbox

Interesting analysis of Windows Sandbox

#writeup #windows #sandbox #hyper-v Open / Comment

2021-03-12 19:01:02 Spectre
This site hosts a proof of concept for the Spectre vulnerability written in JavaScript.

https://leaky.page/

#exploit #poc Open / Comment

2021-02-20 11:56:48 https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610

Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies

The Story of a Novel Supply Chain Attack

#article #hack #linux Open / Comment

2021-01-30 17:16:22 CVE-2021-3156

Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM

https://github.com/r4j0x00/exploits/blob/master/CVE-2021-3156/exploit.c

#source #exploit Open / Comment