Stories by pentestercrab

Teardown of a Failed Linux LTS Spectre Fix

A secured Android phone is safer than an iOS device

Linux Heap House of Force Exploitation

Linux Heap Calloc Exploitation Part 2

Chinese-Australian artist Badiucao reveals his identity

So I bought something at a thrift store, it's a “Cellebrite Touch”

Look inside the box – breaking the encryption/obfuscation in the Dropbox client

Huawei and Security Analysis

Ruby on Rails CVE-2019-5418 – Payload to dump session signing keys in production

CVE-2019–5418: on WAF bypass and caching

A Go implementation of Poly1305 that makes sense

Modmob – Using cheap tools and tricks to attack mobile devices in practice [pdf]

Bypass firewalls with ICMP error messages

Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks

Vulnerability in golang.org/x/crypto/salsa20

SatoshiLabs Response to Ledger's MITBitcoinExpo Findings

Universal RCE with Ruby YAML.load

PentesterLab – Introduction to Code Review

Matt Miller – Trends, challenge, and shifts in software vulnerability mitigation

Privilege Escalation in Ubuntu Linux (dirty_sock Exploit)

2
3
4
5
6
7
8
9