Is the exploitation of a format string vulnerability possible if the number of characters you’re allowed to enter is limited?
Let’s say I’m just allowed to enter input with 23 characters. I can read the stack like this of course:
AAAA%1$…
Virustotal scans are detecting threats from the Suricata default rule pack located https://rules.emergingthreats.net/open/suricata-4.0/
Is this a false positive?
https://www.virustotal.com/#/file/c20b744a3ca4d8fef3fa23633db7e94edd064d5ea…
I’m trying to understand the Hybrid flow of OIDC. Am I correct in thinking that an authentication request is made to the authorization endpoint, which then responds with the authorization code, id token and the token in the URL fragment?
I…
I am quite new to analyzing the windows logs. I have been seeing excessive logons with 4624 and 4625 with the Subject/account name: DomainController(actual name of the domaincontroller is different) to user accounts.
I understand that it …
As an example, let’s look at how authentication works with Kubernetes:
Specifically, let’s focus on what the api server does. To authenticate the request, it:
Verifies that the JWT signature is valid
Checks that the JWT isn’t expired
…
I’ve been working on my first project, and my initial registered users haven’t been particularly sticky. I’d like to send them an email with some news and information and have them be instantly logged in when they hit the call-to-action li…
Previously on this blog, we’ve talked about how MSRC automates the root cause analysis of vulnerabilities reported and found. After doing this, our next step is variant analysis: finding and investigating any variants of the vulnerability. It’s importa…
In January 2018, Microsoft released an advisory and security updates for a new class of hardware vulnerabilities involving speculative execution side channels (known as Spectre and Meltdown). In this blog post, we will provide a technical analysis of a…
I’m playing a bit with assembler and I decided to test out how metasploit encodes a payload into Unicode uppercase characters as assembly instructions which are meant to be decoded by itself. So I have written simple shell code consisting …
This Question is about DNSCurve. I thought of DNSCurve as “HTTPS for DNS” (like in this Answer) but had some resent thoughts about the trust-relationship between resolvers and nameservers serving the public-keys.
Here an example to expla…
