How to crack Shocker box without Metasploit.
tl;dr
- ShellShocker exploit
- Apache mod_cgi
tl;dr
In this post, we are going to share our research into PKES systems and the possibility of Relay attacks on such systems.
tl;dr
- Decrypt the bitlocker encrypted drive
- extracting the flag from deleted PDF
tl;dr
- Abusing a stack overflow on a RISC-V binary to then return to shellcode.
tl;dr
- Buffer overflow in AArch64
- Bypass pointer authentication to leak libc and get shell
tl;dr
- Overflow from
stdinstucture tillmain_arena. - Create fake
fastbinchunks to get overlapping chunk and leak. - Overwrite
__malloc_hookusing fastbin attack.
tl;dr
- overflow the
charcandle counter stored in the wax structure and trigger uaf. - Use the uaf to trigger double free and get shell.
tl;dr
- Finding Picture-In-Picture application capability.
- Most recently viewed web activity in Picture-In-Picture application on the device.
tl;dr
- Finding the last modified timestamp of the file that maps names to IP’s accessed.