New answers tagged

0

The primary defense against vm escape attacks specifically is defense-in-depth. Specifically that if there are varied and plentiful defensive mechanisms in place that an attacker will trigger enough of them that the defender can stop the bad things from happening. Even if an attacker successfully breaks out of one vm in one hyper-visor, there can still be ...


0

Yes they are definitely still out there. I come across them at least on a weekly basis around the place. I'm not sure about your second statement, but I will say that they are just as popular of an entry point as they have ever been.


9

Highly customized and patched hypervisors, sandboxes around said hypervisors to mitigate breakouts, and heavy monitoring. Of course, any given server only hosts so many VMs, so a breakout is fundamentally limited to a finite number of guests, if it's able to get past the protections outside the hypervisor. For example, QEMU can be compiled with a hardened ...


0

The approaches and techniques in the book Windows Stack Exploitation: Bypass Protection are straightforward and well-grounded. While the book's examples use Sulley, I recommend that you also look at FuzzLabs as an introductory Windows-app fuzz-testing suite. The most-advanced fuzz-testing suite is Driller, which I believe will be released at the DARPA Cyber ...


0

It is possible to make a custom list of products / vendors / keywords using Cassandra service from Purdue University. It is free and allows updates to be emailed.


4

One of the methods you can use to create a baseline would be to go to sites like PacketStorm find say the last 50 vulnerabilities/exploits disclosed, then find out whether or not they have CVEs issued on Mitre. A baseline will give you just that, a baseline average. There are a few things to take into considerations: Not all exploits/vulnerabilities are ...


1

Honestly it really depends on the company. Every company handles their vulnerabilities differently, even some researchers who follow the process get screwed by it, just like this guy who filed a bug for Instagram. For those entered through the bug bounty program (if they have one), they will generally publish the information on their site or email to the ...



Top 50 recent answers are included