/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 www.malwaretech.com
Coding Malware for Fun and Not for Profit (Because that would be illegal)
| | m417z.com
Privilege escalation using the XAML diagnostics API (CVE-2023-36003) - m417z / blog - A Blog About Stuff
6.6 parsecs away

Travel
| | This is a write-up of a vulnerability that I discovered in Windows. The vulnerability was patched in December's Patch Tuesday, and the CVE assigned to it is CVE-2023-36003. The vulnerability allows a non-elevated process to inject a DLL into an elevated or otherwise inaccessible process, allowing for privilege escalation. The vulnerability is caused by a lack of security checks in the InitializeXamlDiagnosticsEx API, which is used for inspecting applications that use Extensible Application Markup Language (XAML) for their UI. XAML is the recommended way to build user interfaces in new Windows applications, and is used by more and more built-in applications, including Task Manager and Windows Terminal.
| | rubenerd.com
Rubenerd: The CUPS vulnerability is oddly nostalgic
6.3 parsecs away

Travel
| | By Ruben Schade in Sydney, Australia.
| | malgregator.com
InfoSec Week 1, 2019 ยท malgregator
7.6 parsecs away

Travel
| | Let's Encrypt recapitulated the last year in the operation of their ACME based certification authority, and summarized the challenges that they will work on in 2019. They intend to deploy multi-perspective validation, checking multiple distinct Autonomous Systems for domain validation, preventing potential BGP hijacks. They also plan to run own Certificate Transparency (CT) log.
| | luten.dev
OpenGL in C# on Linux using Visual Studio Code - Eddy Luten
36.4 parsecs away

Travel
| Ive been out of the .NET loop for a very long time. I would never have thought that it was so easy to get a .NET project up and running on Linux. But, I guess a decade of embracing Open Source at Microsoft changes things. Here are the steps I took to get an OpenGL window up and running on Ubuntu using .NET Core, VSCode, and OpenTK.