Collaborate Disseminate
For example, it is possible that someone could spread malware with insecure wifi access point, but I don’t realize how sending a bunch of network packets can result into a compromised computer if the transferred malicious cod… Continue reading What are some examples of known scenarios of network attacks?
Some services such as Github allows the execution of user supplied code using docker containers via Github Actions. Another example of a service provider that executes user provided code are continuous integration services su… Continue reading How do services prevent malicious behavior when executing user provided code?
I have a WordPress site running on version 4.9.8. In the recent security audit done by the organization following issues were reported.
1) Wordpress: CVE-2017-1000600: Input Validation vulnerability in thumbnail processing can result in r… Continue reading How to fix WordPress CVE vulnerabilities or preventive measures?
If you’re going to the CanSecWest conference in Vancouver this March you’ll have the chance to participate in the Pwn2Own ethical hacking contest. As usual hackers will be working hard to crack the security of browsers and operating systems… Continue reading Huge prizes up for grabs for anyone who can hack a Tesla
In reports on security exploits/vulnerabilities on desktop applications, I often read that memory problems lead to the execution of malicious code.
For example, the description of Internet Explorer vulnerability CVE-2018-865… Continue reading How can memory problems lead to code execution exploits?
I’m trying to overflow and inject code into a buffer in the following program
// vulnerable.c
#include <stdlib.h>
#include <stdio.h>
int main(int argc, char *argv[]) {
char buf[1024];
gets(buf);… Continue reading Buffer Overflow segfault even with executable stack
I’m trying to overflow and inject code into a buffer in the following program
// vulnerable.c
#include <stdlib.h>
#include <stdio.h>
int main(int argc, char *argv[]) {
char buf[1024];
gets(buf);… Continue reading Buffer Overflow segfault even with executable stack
Isn’t it a good idea to transfer eg an .wav file, which can carry malware inside
(header, data etc.), to ASCII text file via hexdump. I would have achived an non executable format. It is still executable with text editor but … Continue reading Binary to ASCII encoding for making files non executable
Is there any good reason not to run a brief unknown (30 line) assembly script inline in a usermode c program for dynamic analysis directly on my laptop?
There’s only one system call to time, and at this point I can tell that it’s a funct… Continue reading Running a brief asm script inline for dynamic analysis
I would like to clarify protection practices for handling database secrets with database connected web application, using Docker containers. The aim is to determine how to protect secrets even if an attacker attains a shell i… Continue reading Web application secrets protection following code execution