[B! Exploit] flatbirdã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

flatbird id:flatbird

Exploitã«é–¢ã™ã‚‹flatbirdã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (17)

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

{{#following_bookmarks}}

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

{{/following_bookmarks}}

{{/is_wiped}}

ã‚«ãƒ¼ãƒãƒ«ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆå…¥é–€ - Linuxã‚«ãƒ¼ãƒãƒ«è§£æžã®åŸºç¤Ž - - ã‚‹ãã™ã®æ—¥è¨˜ ~ Out_Of_Range ~
0. ã¯ã˜ã‚ã« æœ¬è¨˜äº‹ã¯ã€Linuxã‚’å¯¾è±¡ã¨ã—ãŸã‚«ãƒ¼ãƒãƒ«ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆã®å…¥é–€è¨˜äº‹ã§ã™ã€‚ ã‚«ãƒ¼ãƒãƒ«ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆã¨ã„ã†ã®ã¯ã€Linuxã‚„*BSDã€Windowsã‚’å§‹ã‚ã¨ã™ã‚‹ã‚«ãƒ¼ãƒãƒ«è‡ªèº«ã®è„†å¼±æ€§ã‚’çªãã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆã§ã™ã€‚ åŸºæœ¬çš„ã«ã‚«ãƒ¼ãƒãƒ«ã¯ã‚·ã‚¹ãƒ†ãƒ å†…ã§æœ€é«˜æ¨©é™ã‚’æŒã¤ç‰¹æ¨©ãƒ¢ãƒ¼ãƒ‰ã§å‹•ä½œã—ã¦ã„ã‚‹ã®ã§ã€ã“ã“ã‚’æ‚ªç”¨ã•ã‚Œã‚‹ã¨ã‚·ã‚¹ãƒ†ãƒ ã®å¤§éƒ¨åˆ†(ã»ã¼å…¨ã¦)ã‚’æŽŒæ¡ã•ã‚Œã¦ã—ã¾ã„ã¾ã™ã€‚ ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆã¨è¨€ã†ã¨ã€æ™®é€šã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ç©ºé–“ã§å‹•ä½œã—ã¦ã„ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒã‚°ã‚’ã¤ãç‰©ãŒå¤šã„ã§ã™ãŒã€ã“ã‚Œã ã¨é™ã‚‰ã‚ŒãŸãƒ¬ãƒ™ãƒ«ã®æ¨©é™ã—ã‹å¥ªãˆã¾ã›ã‚“ã€‚ SELinuxã‚„jailã‚’å§‹ã‚ã¨ã™ã‚‹ã€OSãƒ¬ãƒ™ãƒ«ã§ã®ä¿è·æ©Ÿæ§‹ã«é˜»ã¾ã‚Œã‚‹ã¨ãŸã¡ã¾ã¡åŠ¹åŠ›ã‚’å¤±ã£ãŸã‚Šã—ã¾ã™ã€‚ ã—ã‹ã—ã€ã‚«ãƒ¼ãƒãƒ«è‡ªä½“ã®è„†å¼±æ€§ã‚’ã¤ãã‚«ãƒ¼ãƒãƒ«ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆã‚’åˆ©ç”¨ã™ã‚‹ã¨æœ€é«˜æ¨©é™ã§ã®ä»»æ„ã‚³ãƒ¼ãƒ‰å®Ÿè¡ŒãŒå¯èƒ½ãªãŸã‚ã€å¤§æŠµã®ä¿è·æ©Ÿæ§‹ã¯ã‚‚ã®ã¨ã‚‚ã—ã¾ã›ã‚“ã€‚ ã“ã®ã‚«ãƒ¼ãƒãƒ«ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆãŒç‰¹ã«åŠ¹åŠ›ã‚’ç™ºæ®
flatbird 2017/07/14
Linux

security

kernel

Exploit
ãƒªãƒ³ã‚¯
ä¾µå…¥ã—ãŸ Linux ã‹ã‚‰å¹³æ–‡ã®èªè¨¼æƒ…å ±ã‚’æŠ½å‡ºã™ã‚‹ã‚¹ã‚¯ãƒªãƒ—ãƒˆ mimipenguin.shï¼ˆScan Tech Reportï¼‰ | ScanNetSecurity
flatbird 2017/04/19
Security

Linux

Exploit
ãƒªãƒ³ã‚¯
routersploit/README.md at master Â· threat9/routersploit
flatbird 2016/05/16
Security

exploit

router

tool
ãƒªãƒ³ã‚¯
å°Žå…¥äº‹ä¾‹ã‹ã‚‰ITè£½å“ãƒ»ã‚µãƒ¼ãƒ“ã‚¹ã‚’æŽ¢ã™ï½œã‚ãƒ¼ãƒžãƒ³ã‚ºãƒãƒƒãƒˆ
åŸºå¹¹ç³»ã‚·ã‚¹ãƒ†ãƒ ERP ä¼šè¨ˆã‚·ã‚¹ãƒ†ãƒ é›»åå¸³ç¥¨ã‚·ã‚¹ãƒ†ãƒ ãƒ¯ãƒ¼ã‚¯ãƒ•ãƒãƒ¼ å‹¤æ€ ç®¡ç†ã‚·ã‚¹ãƒ†ãƒ ã‚‚ã£ã¨è¦‹ã‚‹ æƒ…å ±å…±æœ‰ã‚·ã‚¹ãƒ†ãƒ ãƒ»ã‚³ãƒŸãƒ¥ãƒ‹ã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ„ãƒ¼ãƒ« ã‚°ãƒ«ãƒ¼ãƒ—ã‚¦ã‚§ã‚¢ Webä¼šè° ãƒ†ãƒ¬ãƒ“ä¼šè°/ãƒ“ãƒ‡ã‚ªä¼šè° ãƒ•ã‚¡ã‚¤ãƒ«å…±æœ‰ æ–‡æ›¸ç®¡ç† ã‚‚ã£ã¨è¦‹ã‚‹ æƒ…å ±ã‚·ã‚¹ãƒ†ãƒ SFA CRM ã‚³ãƒ¼ãƒ«ã‚»ãƒ³ã‚¿ãƒ¼/CTI BPM PLM ã‚‚ã£ã¨è¦‹ã‚‹ ãƒ¡ãƒ¼ãƒ« é›»åãƒ¡ãƒ¼ãƒ« ãƒ¡ãƒ¼ãƒ«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ¼ã‚«ã‚¤ãƒ– ãã®ä»–ãƒ¡ãƒ¼ãƒ«é–¢é€£ ã‚‚ã£ã¨è¦‹ã‚‹ ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹ æš—å·åŒ– èªè¨¼ IDç®¡ç† ãƒ¡ãƒ¼ãƒ«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ã‚‚ã£ã¨è¦‹ã‚‹ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ« WAF IPS UTM ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ– ã‚‚ã£ã¨è¦‹ã‚‹ é‹ç”¨ç®¡ç† çµ±åˆé‹ç”¨ç®¡ç† ITè³‡ç”£ç®¡ç† ã‚µãƒ¼ãƒãƒ¼ç®¡ç† ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ç®¡ç† çµ±åˆãƒã‚°ç®¡ç† ã‚‚ã£ã¨è¦‹ã‚‹ ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ— ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—ãƒ„ãƒ¼ãƒ« ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—ã‚µãƒ¼ãƒ“ã‚¹ ãƒ†ãƒ¼ãƒ—ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ— ãã®ä»–ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—é–¢é€£ ã‚‚ã£
flatbird 2013/01/24
Security

Exploit

Botnet
ãƒªãƒ³ã‚¯
Exploit Search Engine
Currently utilizing data from NVD, OSVDB, SecurityFocus, Exploit-DB, Metasploit, Nessus, OpenVAS, and PacketStorm. Check out the STATS page. Check out the new Naughty List.
flatbird 2011/07/12
Exploit

Security
ãƒªãƒ³ã‚¯
æ‚ªæ€§PDFãƒ•ã‚¡ã‚¤ãƒ«ã®è§£æžãƒ„ãƒ¼ãƒ«ï¼šPeepdfï¼ˆScan Tech Reportï¼‰ | ScanNetSecurity
flatbird 2011/07/06
Security

Exploit

Web

Javascript

PDF
ãƒªãƒ³ã‚¯
Android ç«¯æœ«ã¸ã®ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«ã‚ˆã‚‹æƒ…å ±æ¼ãˆã„ã®è„†å¼±æ€§ï¼ˆScan Tech Reportï¼‰ | ScanNetSecurity
flatbird 2011/03/16
Android

Security

Vulnerability

Exploit
ãƒªãƒ³ã‚¯
Security vulnerability demonstrated in Safari - The H Security: News and Features
At the IT-Defense 2011 security conference, organised by services company cirosec, Mac security experts Dino Dai Zovi and Charlie Miller have demonstrated a further zero day exploit for the 64 bit version of Safari 5. Miller's demonstration involved taking control of the Safari process on a fully patched MacBook by calling a simple URL. The two specialists are not keen to reveal too many details,
flatbird 2011/02/17
Security

Mac

Exploit
ãƒªãƒ³ã‚¯
ä¸–ã®ä¸ã®ãƒªã‚¢ãƒ«ã‚’é€Ÿãæ£ã—ã- BCNï¼‹R
å®Ÿå£²ãƒ‡ãƒ¼ã‚¿ 2023/04/08 09:00 ä»Šå£²ã‚Œã¦ã‚‹Androidã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³TOP10ã€ã€ŒXperia 10 IV(SoftBank)ã€æµ®ä¸Šã€Googleã®TOP2ç‹¬å å´©ã‚Œã‚‹ã€€2023/4/9
flatbird 2011/02/01
Exploit
ãƒªãƒ³ã‚¯
heise online â€“ IT news, guides and background information | heise online
Discover cutting-edge IT insights from Europe's largest tech editorial team. Explore curated breaking news and expert opinions for tech enthusiasts and pros. Don't miss any news â€“ follow us on Facebook, LinkedIn or Mastodon. French data protection authorities have imposed a fine of 50 million euros on telecommunications giant Orange for inbox advertising without consent. Every year, the state spen
flatbird 2011/01/24
Security

Exploit

DEP
ãƒªãƒ³ã‚¯
heise online â€“ IT news, guides and background information | heise online
Discover cutting-edge IT insights from Europe's largest tech editorial team. Explore curated breaking news and expert opinions for tech enthusiasts and pros. Don't miss any news â€“ follow us on Facebook, LinkedIn or Mastodon. Every year, the state spends billions on proprietary programs, such as Microsoft. Experts are calling for courage to change and an end to dependencies. Intel's Battlemage grap
flatbird 2010/12/16
Exploit

Security
ãƒªãƒ³ã‚¯
Damage limitation - Mitigating exploits with Microsoft's EMET - The H Security: News and Features
by Daniel Bachfeld Security vulnerabilities in applications have become an everyday probl em. Microsoft's Enhanced Mitigation Experience Toolkit (EMET) activates extra protection mechanisms included in recent versions of Windows, which are able to frustrate many attacks. However, getting the configuration right can sometimes be harder than you might think. EMET is able to thwart or at least reduce
flatbird 2010/12/16
DEP

Exploit

Security
ãƒªãƒ³ã‚¯
ã€ŒiPhoneã€ã®è„±ç„ã‚’æŠ€è¡“é¢ã‹ã‚‰åˆ†æž
iPhoneã«ã¯ã€ãƒ‘ã‚½ã‚³ãƒ³ã¨USBæŽ¥ç¶šã™ã‚‹ã“ã¨ãªãã€å˜ä½“ã§é éš”åœ°ã‹ã‚‰è„±ç„ï¼ˆç±³ã‚¢ãƒƒãƒ—ãƒ«ãŒè¨ã‘ãŸä¿è·æ©Ÿæ§‹ã‚’ç„¡åŠ¹åŒ–ã™ã‚‹ã“ã¨ï¼‰ã•ã›ã‚‹æ–¹æ³•ãŒå˜åœ¨ã™ã‚‹ã€‚å…·ä½“çš„ã«ã¯ã€iPhoneã®Webãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã€ŒSafariã€ã§ã€Œjailbreakmeã€ã¨ã„ã†Webã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚Œã°ã€ã‚ãšã‹æ•°æ®µéšŽã®ä½œæ¥ã§è„±ç„ã§ãã¦ã—ã¾ã†ã€‚å½“ç„¶ã“ã®æ–¹æ³•ã¯ã€å…¨ä¸–ç•Œã§åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹iPhoneã‚’æ”»æ’ƒã—ã‚ˆã†ã¨ä¼ã‚“ã§ã„ã‚‹æ‚ªäººãŸã¡ã«ã‚‚ä½¿ã‚ã‚Œã‚‹ã€‚ã“ã®è„±ç„æ–¹æ³•ã‚’åˆ†æžã—ãŸã¨ã“ã‚ã€ä½•è€…ã‹ã«æ‚ªç”¨ã•ã‚Œã‚‹ã®ã¯æ™‚é–“ã®å•é¡Œã§ã‚ã‚‹ã¨ç†è§£ã—ãŸã€‚ä»Šå›žã¯ã€æˆ‘ã€…ãŒè¦‹ã¤ã‘ãŸæƒ…å ±ã‚’æ•´ç†ã—ã¦ã¿ãŸã€‚ å›³1â—iPhoneã«ã‚ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«2ä»¶ã‚’ä½¿ã†è„±ç„ã®æ‰‹é † ã“ã®è„±ç„æ‰‹é †ã¯ã€ã¾ãšPDFã®Compact Font Formatï¼ˆCFFï¼‰ã«å˜åœ¨ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ï¼ˆCVE-2010-1797ï¼‰ã‚’åˆ©ç”¨ã™ã‚‹ï¼ˆé–¢é€£è¨˜äº‹ï¼šiPhoneã‚„iPadã«å±é™ºãªè„†å¼±æ€§ã€Webã‚¢ã‚¯ã‚»ã‚¹ã§ã‚¦ã‚¤ãƒ«
flatbird 2010/09/08
iPhone

Security

Exploit
ãƒªãƒ³ã‚¯
Exploit writing tutorial part 10 : Chaining DEP with ROP â€“ the Rubikâ€™s[TM] Cube | Corelan Cybersecurity Research
Exploit writing tutorial part 10 : Chaining DEP with ROP â€“ the Rubikâ€™s[TM] Cube Table of Contents Introduction Hardware DEP in the Win32 world Bypassing DEP â€“ Building blocks What are our options ? The gadget Windows function calls to bypass DEP Choose your weapon Function parameters & usage tips ROP Exploit transportability From EIP to ROP Direct RET SEH based Before we begin Direct RET â€“ The ROP
flatbird 2010/08/31
Exploit

DEP
ãƒªãƒ³ã‚¯
Buffer overflow attacks bypassing DEP (NX/XD bits) - part 2 : Code injection : Marco Mastropaolo
Buffer overflow attacks bypassing DEP (NX/XD bits) - part 2 : Code injection While the attack weâ€™ve seen in the first part are indeed powerful, they are limited to simple calls to functions already linked by the program weâ€™re going to attack. To appreciate full power we should exploit the technique used in the first part for injecting arbitrary code in the program. The first experiment I tried was
flatbird 2010/08/30
Exploit

DEP
ãƒªãƒ³ã‚¯
Blog on Cyberterror: A DEP evasion technique
<script> // policy issue hide_googlead(); </script> In an earlier post, I pointed out a possible way to evade Data Execution Prevention in Microsoft Windows XP Service Pack 2. I feel this deserves its own blog post, so I've decided to go on here. I'd like to first point out that this is a speculative method to evade hardware-enforced DEP based on various documentation. There is not yet a proof-of-
flatbird 2010/08/30
Exploit

DEP
ãƒªãƒ³ã‚¯
QuickZip Stack BOF 0day: a box of chocolates
A few days ago, one of my friends (mr_me) pointed me to an application that appeared to be acting somewhat â€œbuggyâ€ while processing â€œspecificallyâ€ crafted zip files.Â After playing with the zip file structure for a while (thanks again, mr_me, for documenting the zip file structure), I found a way to make the application crash and overwrite a exception handler structure. In this article, I will exp
flatbird 2010/08/29
Exploit
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@HatenaBookmark
ãƒªãƒªãƒ¼ã‚¹ã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã®ãŠçŸ¥ã‚‰ã›
@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx