Tag Info

New answers tagged

1

According to @taviso original post, the line env X='() { (a)=>\' sh -c "echo date"; cat echo is be sufficient to bring the shell to an inconsistent state. I tried it and after that, things are broken until you close that shell instance. Commands won't be interpreted correctly, parameters are treated like they are out of place unleashing incorrectly ...


0

Any connection made on SSL v3 and using CBC Ciphers is vulnerable to Poodle attack. Browsers (Older browsers and other clients) will negotiate SSL as we write about it. Although most have disabled SSL by default and only work with TLS. Note that there is a new Poodle on TLS vulnerability that we will not talk about in this thread. The only ...


0

There are definitely a few sites which offer malware binaries for download, and highlight to an extent, the malware family that the binary belongs to, and the related behavior. One such example is VirusTotal. This seems to be a relevant discussion as well.


0

Many companies that maintain these types of data correlations (FireEye, Crowdstrike, Symantec, etc) don't disclose this. They do so because for many of those companies, it's their bread and butter at times. This has led to (what I believe) many companies continuously getting compromised by the same threat actors over and over. (One company seeing something, ...


0

When you're reviewing vulnerabilities in Nessus, if you view the "detailed vulnerability summary" it will tell you if there is a "public exploit available" for the vulnerability. If there is a public exploit available Nessus will tell you which module from within Metasploit to use. (I use Nessus enterprise on a daily basis). As Milen said, just because the ...


3

CVE is only the vulnerability report, it doesn't necessarily mean that it is exploitable. Also, we are very fortunate that even if exploitable, not all vulnerabilities have publicly available exploits, and especially ones that are available within the Metasploit framework. Otherwise we would have lots of script-kiddies running around armed and dangerous! On ...



Top 50 recent answers are included