Here is the simplest example to show my problem. Everything is in WinXp sp3 with DEP disabled.
char f() {
// shellcode starting with some NOPs,
char shellcode[400]= {
0x90, 0x90, 0x90, 0x90, 0x90, 0x90, 0x90, 0x90,
…
A part of my /etc/login.defs file looks like this:
ENCRYPT_METHOD SHA512
# Define the number of SHA rounds.
# If not specified, the libc will choose the default number of rounds (5000).
# The values must be inside the 1000-999999999 rang…
TLDR: We already require two-factor authentication for some users. I’m hashing, salting, and doing things to encourage long passphrases. I’m not interested in the merits of password complexity rules in general. Some of this is required by …
I can’t believe it happened to me but I entered Gmail account’s user-name and password into a website as part of a phishing scam. I use Gmail’s 2-step verification and have changed my password. Is my Gmail account safe?
I got an email f…
In the recent release of iOS 8.4, Apple fixed several vulnerabilities
including vulnerabilities that allow attackers to deploy two new kinds
of Masque Attack (CVE-2015-3722/3725, and CVE-2015-3725). We call
these exploits Manifest Masque and Exte…
In the recent release of iOS 8.4, Apple fixed several vulnerabilities
including vulnerabilities that allow attackers to deploy two new kinds
of Masque Attack (CVE-2015-3722/3725, and CVE-2015-3725). We call
these exploits Manifest Masque and Exte…
I’m currently with a web hosting account whose servers seem to be constantly down due to DDOS attacks. I check my analytics daily and I’m seeing a major surge in fake traffic for several of my URLs totaling around 60 visits a day per site….
I am preparing for a technical interview for an AppSec pen-testing position. For those of you that have had AppSec positions, what sharp-shooter questions do you think I can expect? What questions would you ask a candidate if you were do…
Here’s the scenario…
I have a git repository on a server that may have been compromised. My development team say that they can trust the files in the directory that houses the git repository because all commits (diffs) and new files be…
