Tag Info

Hot answers tagged

5

Android Isn't Android Android rooting is tough to fix due to the nature of Android. Because Android is open source, each manufacturer (Samsung, Motorola, Nokia, etc) takes the base Android OS and modifies it: Drivers to work with specific hardware Custom messaging, call, or system apps GUI changes to make their phones unique System backup mechanisms ...


4

Before the attacker can send any data to the SSH server, he has to complete a TCP handshake. This means the attacker has to guess a 32 bit sequence number. (If SYN cookies are used, the attacker's chances may improve.) Assuming your server is generating good sequence numbers, this will significantly reduce an attackers ability to attack your SSH server ...


4

In short no. Because SSH runs on TCP (although there is a UDP version, this is unusual) a TCP handshake is required to commence the SSH protocol's own authentication and its following communication. A private address will not cross your perimeter router to and from the public internet so any spoofing of an internal address as it comes inbound (assuming no ...


3

Being able to convert an archive from one format to another without decompressing it is very rare. Different formats use different file structures and algorithms that are incompatible and you'll be forced to decompress the source format at some point. When conversion by decompression is done, many of the vulnerabilities could be exploitable. The attack ...


3

Fuzzing and reversing. Kernel mode vulnerabilities can be discovered by fuzzing the working code, and if any memory corruption occurs, you can try to reverse the app and, try to write suitable exploit for it. But it is illegal, you must know it :)


2

The underlying issue isn't technical, it's incentives. What's the incentive for the phone makers to protect the device from a customer rooting his/her own phone? Not much. I'm not sure where you're getting your quote of millions of people rooting android devices, but I'd be surprised if it's in the millions. In any case, the vast majority of people ...


2

There are many different reasons. Like Natanael says, there isn't just one exploit to patch. If you are refering to a specific exploit, you didn't say so. And keeping patches up to date for such a huge and diverse ecosystem is expensive. Google does not want to maintain back versions of Android operating system. Yet, millions of these devices running ...


2

Julia Wolf of FireEye, Inc. did an analysis: Video here: Julia Wolf, 29C3, 2012-12-29, CVE-2011-3402 Technical Analysis PDF here: Julia Wolf, CanSecWest, 2013-03-08, Windows Kernel TrueType Font Engine Vulnerability Video/Slides again here. HackInParis, 2013-06-20, Analysis of a Windows kernel vulnerability: from espionage to criminal use Gist seems to ...


2

All 4 terms are very different: Describes the Attack: Attack Vector: the 'route' by which an attack was carried out. SQLi is typically carried out using a browser client to the web application. The web application is the attack vector (possibly also the Internet, the client application, etc.; it depends on your focus). Exploit: the method of taking ...


2

The way you convert a jpg to a bmp would be to essentially decompress the jpg and write it as a bmp. To convert one archive format to another you'd have to decompress the original first and then compress in the new format. Whether this is "safer" or not depends on whether the tool you're using to automatically decompress has different vulnerabilities to the ...


1

I wrote that exact code into an overflow.c file, and got the following main(). I disassembled with objdump --disassemble overflow 0804846d <main>: 804846d: 55 push %ebp 804846e: 89 e5 mov %esp,%ebp 8048470: 83 e4 f0 and $0xfffffff0,%esp 8048473: 81 ec a0 00 00 ...


1

This is true to the best of my knowledge, however I believe some might have slight improvements on the wording: The attack vector is the "type" of the attack, its what allows the attacker to succeed. The attack surface is how many endpoints can be attacked, for example if you are targeting a website, with a scripting language (PHP/Node...), and a Database ...



Only top voted, non community-wiki answers of a minimum length are eligible