Hunting for SigRed Exploitation, (Thu, Jul 16th)

.Between the twitter hack and SigRed, yesterday was a little sporty for us all. I spent the last day hunting for SigRed exploitation in the wild. My dataset is passive DNS, but more on that hunting in a bit. Checkpoint&#;x26;#;39;s write up is here for reference. Since this flaw has to do with SIG record processing, it greatly limits the search space to find exploitation.

Continue reading Hunting for SigRed Exploitation, (Thu, Jul 16th)→

Posted in Uncategorized