Collaborate Disseminate
Ten years is almost ancient history in the computing world. Going back twelve years is almost unheard of, but that’s about the time that Palm released the last version of their famed PalmOS, an operating system for small, handheld devices that predated Apple’s first smartphone by yet another ten years. …read more
The bug is remotely exploitable without authentication or user interaction. Continue reading Linux Kernel Flaw Allows Remote Code-Execution
Okay, so I am developing a kernel module that does kernel mode hooking to hook APIs and modify some values. But is there anyway I could tell if what program called a specific API? Say a program from user-land calls NtQuerySys… Continue reading How to find out what program called an API in windows?
When you press keystrokes, I suppose you can intercept in low level code all applications that listen and record. Why it cannot be designed a software that protects 100% against keyloggers, simply refusing the access to all a… Continue reading Why it is difficult to write an application to protect 100% against keyloggers?
I’m learning how to write kernel exploits and my shellcode keeps seg faulting.
I’m getting the memory address for commit_creds(prepare_kernel_cred(0));
#grep commit_creds /proc/kallsyms
c907eea0 T commit_creds
#grep prepar… Continue reading linux kernel exploit shellcode causes segfault
I am working on a vulnerable sandbox environnement (x86 64 bits)
I can write any byte in kernel’s memory.
I want to know the address of task_struct for my shell process in order to give to it an uid of 0
Is there a way to … Continue reading get process task_struct address in kernel memory from /proc/<pid>
Why does lsass.exe reside in user-mode instead of kernel-mode?
lsass exe memory dumping using, e.g., Mimikatz becomes easier, since lsass.exe memory can be read by any user-mode process by obtaining debug privileges. By resi… Continue reading Why does lsass.exe reside in user-mode instead of kernel-mode? [on hold]
Specifically I am working on a security product for ISP’s that has a custom policy engine per individual Router, but in theory this should run on a Router from any Manufacturer.
Considering each Manufacturer (TP-Link, Action… Continue reading How to deploy a Dynamic Policy Engine on a Consumer Router by any Manufacturer?
I’m not sure if the Virtualbox version from the repository of my Linux distribution is already signed and works right away, but since it’s not up-to-date I’m installing Virtualbox from the official repository of Virtualbox it… Continue reading Secure way to sign virtualbox module for secure boot
i want to now if it is possible to have some device like that but only you feed it manually, but like /dev/u/random does, but it gives you NOT random data { your data } whenever you calls it. obviously i dont care about rand… Continue reading is it possible to have some thing like /dev/u/random