Heap corruption vulnerabilities are the most common type of vulnerability that Microsoft addresses through security updates today. These vulnerabilities typically occur as a result of programming mistakes that make it possible to write beyond the bound…
There are two password generators on ss64.com:
The standard one [Edit: now retired]
The strong one
How they work
I made standalone versions of them, plus copy of the original HTML/Javascript versions, if you want to study them, but here …
The OAuth 2.0 specification’s authorization code mechanism includes redirect URI checking from the site you redirect to. See steps D and E in section 4.1 of the spec. Also, section 4.1.3 describes in detail that the redirected-to client ne…
Today we released eight security bulletins addressing 25 CVE’s. Four bulletins have a maximum severity rating of Critical while the other four have a maximum severity rating of Important. We hope that the table below helps you prioritize the deployment…
Today we released MS13-080 which addresses nine CVEs in Internet Explorer. This bulletin fixes multiple security issues, including two critical vulnerabilities that haven been actively exploited in limited targeted attacks, which we will discuss in det…
Is there a way via an CLI tool or some kind of API to extract the PGP key ID from the PGP public key block?
I found the hexa value of the key in the binary file, but I guess the position is based on the key kind/size.
Basically, I have t…
Introduction
One of the oldest forms of memory safety exploitation is that of stack corruption vulnerabilities, with several early high-profile exploits being of this type. It seems fitting therefore to kick off this Software Defense series by looking …
Software Defense is a broad topic requiring a multipronged approach including:
– the processes and tooling associated with secure development (that we try and encapsulate within the Microsoft SDL),
– core OS countermeasures that make exploitation of a …
I’m coding an exploit in python that exploits a command injection vulnerability for a CTF and I’m wondering how could I start a netcat listener and then send the payload to the remote host and once the connection is stablished the script e…
Today, we released a Fix it workaround tool to address a new IE vulnerability that had been actively exploited in extremely limited, targeted attacks. This Fix it makes a minor modification to mshtml.dll when it is loaded in memory to address the vulne…
