Collaborate Disseminate
The most serious bugs are elevation-of-privilege issues in the Android System component (CVE-2020-0215 and CVE-2020-0416). Continue reading Google Rolls Out Fixes for High-Severity Android System Flaws
Needless to I say I have no idea how to do this.
I’m performing a pentest and I found an exploit related the box : https://www.exploit-db.com/exploits/44298
In the exploit comments, the author said :
if different kernel adjust CRED offset… Continue reading How do you adjust offest and kernel stack size from an exploit?
I’ve done some research and it looks like that the way linux keeps history is less about security and audit and more about helping the user.
Even after making changes to instantly log the command and space commands the command still wont l… Continue reading Logging SSH commands on Linux – is custom kernel the only way?
I am attempting to escalate privileges on a CTF Ubuntu box but I am afraid to run dirty cow due to possible crash is this kernel version vulnerable to the exploit:
Linux ip-10.0.0.1 3.13.0-162-generic #212-Ubuntu SMP Mon Oct 29 12:08:50 UT… Continue reading Is this Ubuntu kernel version vulnerable to dirty cow? [closed]
I know there are lots of different providers, but let us focus on the bigger ones and the ones running some kind of Linux. In the end they are all some kind of huge packet parsing engine and I guess many options will be enabled in the kern… Continue reading Security of NGFW OS and kernel [closed]
If you somehow manage to mentally separate yourself from the human tragedy of the COVID-19 pandemic, it really has provided a fascinating glimpse into how our planet operates, and how much impact seven billionpeople have on it. Latest among these revelations is that the shutdowns had a salubrious effect in …read more
I’m planning to write a driver that unhooks the rootkit hooks in the miniport layer (hooks of device objects or major function array)
But I want my driver to be generic and work in most Windows versions and both 32 and 64 bit Windows.
The … Continue reading Are port and miniport drivers protected by PatchGuard in Windows?
I am playing around with disk encryption. https://gitlab.com/cryptsetup/cryptsetup/-/wikis/DMCrypt#iv-generators says:
essiv: “encrypted sector|salt initial vector”, the sector number is encrypted with the bulk cipher using a salt as k… Continue reading AES-256 ESSIV in dm-crypt
The zero-day vulnerability tracked as CVE-2020-9859 is exploited by the “Uncover” jailbreak tool released last week. Continue reading Apple Jailbreak Zero-Day Gets a Patch
While analyzing real-world systems, memory analysts will often encounter anti-virus (AV) engines, EDRs, and similar products that, at first glance, look suspiciously like malware. This occurs because these security products leverage the same techniques… Continue reading When Anti-Virus Engines Look Like Kernel Rootkits