Collaborate Disseminate
Situation: Using Python to make a simple quarantine software for malware.
What I know:
I do understand (from this forum no less) that one of the ways is to put the file in a quarantine directory and turn off all access to i… Continue reading Programmatically Quarantining files
I mean this: https://oreans.com/codevirtualizer.php
I would like to create something like this on my own. But I’m not certain about it’s implementation.
Does their bytecode interpreter converts it back to original machine c… Continue reading How code virtualizers like oreans code virtualizer are implemented
Electron is a “web application writing platform” used by software such as Skype and Slack for Windows (among many others). News articles from today are purporting that these applications are now vulnerable to remote code exec… Continue reading Electron Framework vulnerability – Explaining remote code execution
I noticed a heavily downvoted comment in here: http://php.net/manual/en/function.php-check-syntax.php
function eval_syntax($code)
{
$braces = 0;
$inString = 0;
// We need to know if braces are correctly balanced… Continue reading PHP eval code sandbox break
I have found an endpoint on a website that allow me to upload files. This endpoint didn’t have any kind of protection against malicious file upload. So, I uploaded a PHP shell, but the problem is when I visit the uploaded fil… Continue reading How to execute PHP file after uploading it? [on hold]
Imagine the following scenario:
You have achieved somehow a remote code execution through a buffer overflow on a remote service
You can only inject a very limited shellcode (~44 bytes)
You were able to popup calc.exe throug… Continue reading reverse or bind shell with System() call on Windows?
Imagine the following scenario:
You have achieved somehow a remote code execution through a buffer overflow on a remote service
You can only inject a very limited shellcode (~44 bytes)
You were able to popup calc.exe throug… Continue reading reverse or bind shell with System() call on Windows?
Intel has released firmware updates for many of its processors to fix eight high-risk flaws that can put systems at risk of complete compromise. The flaws are located in low-level technologies found in the Intel Management Engine (ME), the Intel Truste… Continue reading Intel Warns of Serious Processor Flaws
We have a shared network drive that is mapped, and when we open certain files we get a dialog like
I found this site which explains that adding the network path to Local Intranet trusted sites for all users allows opening o… Continue reading Adding network drive to trusted intranet sites security hole?
We have a shared network drive that is mapped, and when we open certain files we get a dialog like
I found this site which explains that adding the network path to Local Intranet trusted sites for all users allows opening o… Continue reading Adding network drive to trusted intranet sites security hole?