DLL shared sections have long been infamous for introducing security problems. A few months ago I decided to take a look if one can still find applications that use PE modules with shared sections in an insecure way (or using them at all). Today I'm releasing research notes, some tools and a demo of a Cygwin local privilege escalation (it's already fixed).
Read more...
Sections
- lang:
| 
- RSS: |
- About me
- Tools
- → YT YouTube (EN)
- → D Discord
- → M Mastodon
- → T Twitter
- → GH GitHub
Links / Blogs
- → dragonsector.pl
- → vexillium.org
- Security/Hacking:
- Reverse Eng./Low-Level:
- Programming/Code:
Posts
- Asking MEMORY.DMP and Volatility to make up,
- KnightCTF 2023 write-ups (RE category),
- Dev Log: Moving contacts from Android to MaxCom MM721,
- Weird PCI-e connector actually works,
- A clever Python challenge – find flag,
- Debug Log: The mystery of usb 3-11 device,
- Hello World under the microscope,
- Crow HTTP framework use-after-free,
- Crowbleed (Crow HTTP framework vulnerability),
- Treebox - Python AST sandbox challenge from Google CTF 2022,
- → see all posts on main page
Add a comment: