raptor@0xdea
Very well written #Windows #patchdiffing and #nday #exploitation walkthrough ✊
Dissecting and Exploiting TCP/IP RCE #Vulnerability EvilESP (CVE-2022-34718)
// by Valentina Palmiotti
05918523K
Berichten met #patchdiffing
Openbare berichten op X die #patchdiffing gebruiken.
Stephen Sims @Steph3nSimsThe next Off by One Security stream is tomorrow at 11AM Pacific Time. I'll be demonstrating the process of downloading, extracting, and prepping MS patches for diffing. We'll take a look at some patched code.
OnHexGroup @onhexgroupآسیب پذیری با شناسه CVE-2024-11477 در #7zip اصلاح شده که امکان اجرای کد دلخواه رو به مهاجم میده. آسیبپذیری در Zstandard Decompression و از نوعinteger underflowهستش. نسخه اصلاح شده : 24.07 به بالا توسط ترندمیکرو و در 23 خرداد گزارش شده. آسیب پذیری از چند جهت میتونه مهم باشه:
Stephen Sims @Steph3nSimsJoin me this Friday at 11AM on the next @offby1security stream where I will diff a Microsoft patch from this year and see how far we get. We'll use tools like BinDiff and Diaphora and look at the process of determining the vulnerability.