/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.nuculabs.de
X-MAS CTF 2019: Binary Exploiting & Reversing Write-Ups | NucuLabs
| | blog.s1r1us.ninja
s1r1us - BountyCon 2020
6.4 parsecs away

Travel
| | The BountyCon2020 CTF is sponsored by Facebook and top 20 people from APAC region will be invited to the invitation-only conference in Singapore. I solved all the challenges in the CTF and I really enjoyed playing it, and I am invited to the Conference.
| | mouha.be
SHA-3 Buffer Overflow - Nicky Mouha
6.2 parsecs away

Travel
| | [AI summary] A cryptography researcher coordinates the public disclosure of a SHA-3 buffer overflow vulnerability found in the official XKCP implementation and related projects, detailing how the flaw allows for memory exhaustion and potential code execution.
| | blog.nuculabs.dev
Root-Me: ExploitMe - Basic Buffer Overflow | NucuLabs
1.9 parsecs away

Travel
| | Hello, In this article I present you the solution to nice and short cracking challenge from Root-Me. After opening it up in Ghidra, I saw that the challenge is easy to solve, all you need is to find the password, which is in plain text. Basically just copy paste and you get the flag, but wait, there's a twist! I should have learned my lesson from the other challenge from Root-Me, which also had a twist.
| | www.thezdi.com
Zero Day Initiative - Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform
14.2 parsecs away

Travel
| [AI summary] This blog post discusses two critical vulnerabilities in the Logsign Unified SecOps Platform, CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection), which can be combined for remote, unauthenticated code execution.