#binaryexploitation — Public Fediverse posts

Trywialna podatność w FortiWeb Fabric Connector pozwalająca na obejście uwierzytelniania – FortMajeure

W tym tygodniu, na sekuraku, ogłaszamy tydzień fortinetowy. Przybliżamy już drugą podatność w oprogramowaniu tego producenta. Tym razem chodzi o FortMajeure (w wolnym tłumaczeniu: siła wyższa), która otrzymała identyfikator CVE-2025-52970. Wyceniona na 7.7 w skali CVSS, FortMajeure pozwala na obejście procesu uwierzytelniania. Atakujący jest w stanie uzyskać dostęp do panelu...

#WBiegu #BinaryExploitation #FabricConnector #Fortinet #Podatność #Websec

https://sekurak.pl/trywialna-podatnosc-w-fortiweb-fabric-connector-pozwalajaca-na-obejscie-uwierzytelniania-fortmajeure/

I wrote this post almost 2 months ago but forgot to turn it public. 😅

Now here is it. I appreciate any feedback :)

Some lessons learned doing [email protected]
https://gildasio.gitlab.io/posts/lessons-learned-phoenix-exploit-education/

#binaryexploitation #exploit #exploiteducation

I did not know we can call functions to execute from gdb. That is pretty interesting :P

https://sourceware.org/gdb/current/onlinedocs/gdb.html/Calling.html

#BinaryExploitation #pwn #gdb #debugging

Last days I was doing phoenix from http://exploit.education. After exploiting them I like to read writeups to learn new tips. To my surprise people assumed some are unexploitable due to \n on address they need to write to. Here is a tip to pass.

Just a side note: I successfully exploited all exercises on both x86 and x64 architectures (except for final-two that seems to be unexploitable at all).

#binaryexploitation #pwn

Always remember to take into account how the binary was built. I was trying to exploit a simple format string bug using positional parameters but this was not working, until @KampetL
remember me this. GLIBC doesn´t care about this rule, while MUSL does.

#binaryexploitation #pwn

@0xor0ne Very nice to see more and more universities opening up their hands-on #infosec courses.

Another really nice one for #binaryexploitation and #reverseengineering is https://pwn.college/. They even send you a yellow/blue belt if you do all their exercises! 🥋

Reverse Engineering For Everyone! @mytechnotalent

👉 x86, x64, 32 and 64 bit ARM architectures

👉 You can get the entire tutorial set in PDF or MOBI format

https://0xinfection.github.io/reversing/

#infosec #ReverseEngineering #MalwareAnalysis #BinaryExploitation

💻 A Noob's Guide To ARM Exploitation

https://ad2001.gitbook.io/a-noobs-guide-to-arm-exploitation/introduction-to-stack-buffer-overflows

👉 ARM Basics
👉 Buffer overflows
👉 Integer overflows
👉 Rop chains
👉 Heap exploitation
👉 ARM64 exploitation and much more.

#infosec #exploitation #binaryexploitation #ExploitDevelopment #reverseengineering

Linux Kernel ksmbd Use-After-Free Remote Code Execution Vulnerability

👉 Execute arbitrary code on affected installations

👉 Authentication not required

👉 Only systems with ksmbd enabled

https://www.zerodayinitiative.com/advisories/ZDI-22-1690/

#infosec #cve #vulnerabilities #linux #kernelexploit #binaryexploitation #exploitation

✨ Avoiding Detection with Shellcode Mutator

▶️ Mutates exploit source code without affecting its functionality, changing its signature and making it harder to reliably detect as malicious

Repository:
https://github.com/nettitude/ShellcodeMutator

Article:
https://labs.nettitude.com/blog/shellcode-source-mutations/

#shellcode #redteaming #pentesters #redteamtips #infosec #exploitation #binaryexploitation

POC for Linux privilege escalation Vulnerability "CVE-2022-2602": DirtyCred File Exploitation applied on an io_uring UAF

Poc:
https://github.com/kiks7/CVE-2022-2602-Kernel-Exploit

Article:
https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-io_uring-uaf/

#infosec #privesc #linux #linuxexploits #kernelexploitation #binaryexploitation #exploitation

Free Offensive Software Exploitation Course - Binary Exploitation tutorial

GitHub course link:
https://github.com/ashemery/exploitation-course

YouTube video version:
https://youtube.com/playlist?list=PLCS2zI95IiNybAAQ0HL88YzwRpLXje5y6

#bufferoverflow #binaryexploitation #infosec #offsec #WindowsExploitation #appsec

Check out my blog posts about #binaryexploitation #pwning challenges in BCACTF 2022

https://karmanyaah.malhotra.cc/puzzles/2022/07/bcactf2/
https://karmanyaah.malhotra.cc/puzzles/2022/07/bcactf1/

#ctf #pwn #hacking

Check out my blog posts about #binaryexploitation #pwning challenges in BCACTF 2022

https://karmanyaah.malhotra.cc/puzzles/2022/07/bcactf2/
https://karmanyaah.malhotra.cc/puzzles/2022/07/bcactf1/

#ctf #pwn #hacking