Italiano

Post con #patchdiffing

#patchdiffing

Post pubblici su X che usano #patchdiffing.

Hashtag correlati

  1. John McIntosh (clearbluejar)@clearbluejar
    Hot of the #ghidriff #patchdiffing press for April 2024 we have CVE-2024-26219 in HTTP.sys 🔥 MSRC just started publishing CWE info! For this CVE we have a "CWE-476: NULL Pointer Dereference" 👀 See if you can find it 🧐 Hint: "UxLastMdlChunkNullFix"
    Scarica
    314344.9K
  9. John McIntosh (clearbluejar)@clearbluejar
    #Patchdiffing with #ghidra can be more of an art than a science. Ideally, the correlators have done their work, and all the analyst has to do is review the identified changes, additions, and deletions.
    014
  13. John McIntosh (clearbluejar)@clearbluejar
    hello 2024! Hot off the #ghidriff #patchdiffing press we have the January 9, 2024—KB5034122 Windows 10 22H2 x64 kernel update ... 🔥 Side by side view is here: 👀 This month the kernel fixes include CVE-2024-20698 ... as there are not too many changes, perhaps we find the root cause? Take at look this function... 🧐 Hint: It rhymes with "vintager afterglow". Also! This diff is testing out an upcoming ghidriff feature.. check out the new callgraph.
    Scarica
    07183K
  15. Horizon3.ai✓@Horizon3ai
    #Patchdiffing - “When we take the patched version and the unpatched version, and we run it through a tool that shows us the differences,” Zach Hanley. This is an attacker’s perspective, one that’s invaluable to understanding change and solving problems.
    012
  17. OnHexGroup@onhexgroup
    در این ویدیو از @LowLevelTweets آسیب پذیری CVE-2024-11477 در 7zip رو بررسی کردن. از بررسی کد شروع شده تا #PatchDiffing و #فازینگ و ... نهایت به چیزی که رسیده: آسیب پذیری قابلیت اکسپلویت شدن رو داره و هکرها در شرایطی میتونن از سیستم قربانی شل بگیرن.
    OnHexGroup @onhexgroup
    آسیب پذیری با شناسه CVE-2024-11477 در #7zip اصلاح شده که امکان اجرای کد دلخواه رو به مهاجم میده. آسیبپذیری در Zstandard Decompression و از نوعinteger underflowهستش. نسخه اصلاح شده : 24.07 به بالا توسط ترندمیکرو و در 23 خرداد گزارش شده. آسیب پذیری از چند جهت میتونه مهم باشه:
    013267
  18. OnHexGroup@onhexgroup
    آسیب پذیری با شناسه CVE-2024-11477 در #7zip اصلاح شده که امکان اجرای کد دلخواه رو به مهاجم میده. آسیبپذیری در Zstandard Decompression و از نوعinteger underflowهستش. نسخه اصلاح شده : 24.07 به بالا توسط ترندمیکرو و در 23 خرداد گزارش شده. آسیب پذیری از چند جهت میتونه مهم باشه:
    112471
  19. OnHexGroup@onhexgroup
    رشتو: در این برنامه قراره در خصوص تکنیک #PatchDiffing روی Patchهای #مایکروسافت صحبت و از دو ابزار #Bindiff و #Diaphora استفاده کنن. همچنین نشون میدن که چطوری #هوش_مصنوعی میتونه این فرایند رو ساده تر کنه. این برنامه ساعت 21:30 شروع میشه. #AI #PatchTuesday
    Stephen Sims @Steph3nSims
    Join me this Friday at 11AM on the next @offby1security stream where I will diff a Microsoft patch from this year and see how far we get. We'll use tools like BinDiff and Diaphora and look at the process of determining the vulnerability.
    101217
  20. Stephen Sims✓@Steph3nSims
    Join me this Friday at 11AM on the next @offby1security stream where I will diff a Microsoft patch from this year and see how far we get. We'll use tools like BinDiff and Diaphora and look at the process of determining the vulnerability.
    017946.4K
  21. SANS Institute✓@SANSInstitute
    Join SANS Fellow @Steph3nSims in an hour for this amazing demo #PatchDiffing
    Stephen Sims @Steph3nSims
    The next Off by One Security stream is tomorrow at 11AM Pacific Time. I'll be demonstrating the process of downloading, extracting, and prepping MS patches for diffing. We'll take a look at some patched code.
    011
  22. Stephen Sims✓@Steph3nSims
    The next Off by One Security stream is tomorrow at 11AM Pacific Time. I'll be demonstrating the process of downloading, extracting, and prepping MS patches for diffing. We'll take a look at some patched code.
    Scarica
    02882
  24. Mostra altri post