Latest
Note: All testing described in this post was carried out on systems I own. The three proofs of concept discussed are public releases by the GitHub user MSNightmare. The Third Round On September 8,
Recent
Note: All testing described in this post was conducted on systems we own. The exploit code referenced is publicly disclosed by the original researcher Hyunwoo Kim
Note: All testing described in this post was conducted on systems we own or were authorized to test. The exploit code referenced is publicly disclosed by
During an authorized security engagement, my team and I accessed a client's entire production environment, starting from just a forgotten server login. This "
Note: This has been a part of a controlled environment with permission during a competition. Please refer to the blog's about page for the
Note: This has been a part of a controlled environment with permission during a competition. Please refer to the blog's about page for the
Polkit is a crucial component for controlling system-wide privileges in Linux (and other Unix-like systems such as BSD), similar to sudo. Initially it was
My last blog posts were 10 years ago when I was quite active, unfortunately only two previous posts survived various blog service/installation migrations since 2012.
As most of other fellow geeks, I am a big fan of science fiction movies and of course science in general. I watched Fringe (a SciFi
At first I had no idea because C is not an object oriented programming language and there is no such thing as inheritance, but having some experience with C and knowing how virtual functions work I was thinking that there must be a way to mimic the virtual function