Questions tagged [zero-day]

A zero-day (or zero-hour or day zero) attack or threat is an attack that exploits a previously unknown vulnerability in a computer application, meaning that the attack occurs on "day zero" of awareness of the vulnerability.

Filter by
Sorted by
Tagged with
0 votes
1 answer
48 views

How to collect malicious URLs

I would like to obtain a list of malicious URLs for testing purposes and, if possible, would like to collect URLs of sites that exploit zero-day vulnerabilities. I want to collect malicious URLs to ...
  • 3
2 votes
1 answer
163 views

Blocking outbound connections to mitigate CVE-2021-44228 log4j?

As I understand it, a successful exploit requires a connection to an external server to download a payload. If a device can't be patched or otherwise mitigated, does restricting its outbound access ...
  • 365
0 votes
0 answers
23 views

Zero day vulnerabilities & Cybersecurity Supply Chain Risk Management - how to move from a reactive posture to a proactive posture? [duplicate]

I refer to the Log4j logging framework vulnerability - Source: https://www.wired.com/story/log4j-flaw-hacking-internet/ Since software vulnerabilities is an inevitable part of life, and speed is of an ...
0 votes
3 answers
150 views

Instead of waiting until zero-day exploits to happen, how to preemptively find zero-day vulnerabilities in order to deter zero-day exploits?

Instead of waiting until zero-day exploits to happen, how to preemptively find zero-day vulnerabilities in order to deter zero-day exploits? There has to be a better way.
1 vote
1 answer
474 views

Are updated iOS devices vulnerable to NSO Pegasus?

The Trident memory zero-day, zero-click vulnerabilities (exploits critical to NSO Pegasus success) were supposedly patched on iOS by Apple: CVE-2016-4657 CVE-2016-4655 CVE-2016-4656 Android phones ...
  • 161
-1 votes
1 answer
128 views

Using Artificial Intelligence (AI) to detect unauthorized code modification to reduce and to even stop zero-day exploits [closed]

Since Solarwinds Hack and Hafnium attack involved some degree of unauthorized code modification (orion DLL, creation of web shell), is it possible to use Artificial Intelligence (AI) built into the ...
9 votes
6 answers
4k views

A new programming paradigm (e.g., Rust) to reduce or end all zero-day vulnerabilities/exploits? [closed]

In view of the Hafnium and Solarwind hacks, where multiple zero-day vulnerabilities were used to ultimately stage the hack and data exfiltration, would the use of memory safe programming languages ...
0 votes
0 answers
102 views

How to identify the usage of the tcp/ip Trek Stack

In order to mitigate the potential exposure to ripple20 zero-day, I must identify the device/s that have the Trek TCP/IP stack installed. Can I do this with software like LanSweeper? Or must I check ...
-1 votes
1 answer
205 views

How to identify Treck TCP/IP library usage in a PC?

I was informed recently about the RIPPLE20 vulnerabilities. Can I identify the usage of a specific protocol on my PC or inside some application on a PC? I think that the first thing to do in these ...
3 votes
1 answer
4k views

Png/JPG exploit

So I recently stumbled on multiple cases suggesting there's a JPG/PNG exploit which is able to silently execute malicious code when simply viewing the image? Just looking for some insight as to ...
9 votes
2 answers
600 views

How do I protect myself from Pegasus and alike malwares?

I recently came across reports in media that Whatsapp's services were exploited by a malware Pegasus for illegal surveillance of certain individuals. Pegasus, which exploits 0-day vulnerabilities, is ...
  • 220
1 vote
1 answer
411 views

How likely are Evince, XReader or Adobe Reader with scripts disabled, to be exploited by a malicious file?

PDFs are very commonly found on the web, and I carefully either view them on the browsers, or use readers without the capability to run the scripts that may come with them (shitty design choice) like ...
  • 121
55 votes
3 answers
8k views

Where to disclose a zero day vulnerability [duplicate]

We discovered a vulnerability in wide range of Ricoh printers, where with a simple PostScript file sent directly, it is possible to crash the device. To recover you need physical access to the ...
  • 682
-5 votes
1 answer
442 views

Honeypot for hunting browser zero-days, rootkits and malware [closed]

I would like to create a honeypot (bot) to hunt browser zero-days (and browser extensions). What is the best way to find those 0days automatically (I would like to create a sandboxed bot which would ...
-1 votes
1 answer
328 views

How common is the usage of browser zero-days in the wild?

We have an overview with known but fixed vulnerabilities for this browsers: Google Chrome, Mozilla Firefox and Internet Explorer. Such lists exist for many other browsers too. We also have such ...
0 votes
0 answers
132 views

Remote Desktop compromised

So roughly 2 weeks ago my Remote Desktop was compromised whilst I was actively interacting with my server via Rdp I was prompted with a disconnect status equal to “ Another user has connected to ...
1 vote
1 answer
221 views

Does every modern buffer overflow require multiple exploits in end user devices to be utilized?

On modern user oriented devices, such as Android phones, iPhones, PCs(Windows, MacOS, Linux), if there is a remote buffer overflow 0 day, are they only exploitable with the aid of multiple ...
  • 648
0 votes
1 answer
163 views

Zero Day Policies implementation

I'm new here, and sorry if my english is a little bit broken it's not my main language. I'm trying to put together a document/ppt for my startup with a Zero Day policy structure. But I'm not finding ...
  • 103
29 votes
9 answers
10k views

How can an administrator secure against a 0day before patches are available?

I'm working on a thesis about the security hacker community. When a 0day is published, how can an administrator secure his application/website between the time the 0day is published and the patch is ...
96 votes
7 answers
27k views

Why would an attacker ever want to sit on a zero-day exploit?

I am trying to understand why an attacker would want to wait to use a zero-day exploit. I have read that an attacker does not want to waste the zero-day because they are typically very expensive to ...
  • 959
3 votes
1 answer
223 views

Do companies shop for 0-days on black markets to fix them?

Is it known for software development companies to shop for 0-day vulnerabilities on black markets in order to burn them? Microeconomics tell me "no", as some sources claim that 0-days are short in ...
  • 133
5 votes
1 answer
1k views

What is the procedure for selling a zero- day?

I read this question recently What does it mean to “burn a zero-day”? I then researched on Google and read a few articles, this one "Shopping For Zero-Days" was particularly interesting because ...
  • 91
168 votes
4 answers
36k views

What does it mean to "burn a zero-day"?

I noticed a comment on this answer where another user said ...but it requires risking burning a 0day, which people are not always all that willing to do. I did an Internet Search for the phrase "...
0 votes
0 answers
132 views

How should security patches be managed in public versioning systems (like Github, etc.)?

There's a thing I don't understand. I found a project on Github. Looking at the list of commits, you can see stuff like "fixed XSS in file whatever, etc". But that commit is part of a long list of ...
  • 15.4k
2 votes
2 answers
994 views

What approaches are used to discover zero-day vulnerabilities?

As a developer of multiple standalone apps (Web-/Native apps) I am wondering, what things I should keep in mind / what are typical approaches of a blackhat (besides of these scriptkiddies checking for ...
  • 21
3 votes
2 answers
374 views

Percentage of 0-day vulnerabilities used as vectors for infections?

I chose that title, but there are probably several ways to ask this question. It's all about understanding how a computer (especially desktop, but you could generalize this to servers I guess) can get ...
  • 15.4k
3 votes
1 answer
190 views

How does brainstorming look like for a team like Google's "Project Zero" [duplicate]

The question is not necessary about technical details but more broad. I'm fascinated by the creativity involved in this process. Since the news of Meltdown/Spectre I was wondering: How do teams like ...
  • 131
0 votes
2 answers
195 views

Does CVE-2017-8759 impact the web service?

I saw lots of information on the impact to end user PC, but didn't see anywhere explain the impact to the cloud service. If the issue is from the SOAP WSDL parsing, seems like the web service can also ...
  • 41
1 vote
0 answers
698 views

Is this 0-day RCE Exploit for Chrome fake?

I found this guy claiming that he has a 0-day Exploit for Chrome, Firefox and Windows 10, but to me it seems to be fake... Video - 0day RCE Exploit for Google Chrome 59.0.3071.86 Here is video for ...
  • 1,298
5 votes
3 answers
969 views

How come iOS exploits/jailbreaks are worth so much in the "0-day trade"?

Zerodium, a "premium exploit acquisition platform", bought an iOS jailbreak vulnerability from a child in UK for around 1.5 million USD. They are offering the same amount on their website currently, ...
  • 83
3 votes
2 answers
2k views

Struts2.3 Zero Day attack exploited: CronJob getting created

Can someone help understand what exactly is being done through this attack. I was using Struts2.3 in Jboss5 environment. I had some crontabs installed, which went missing instead these two lines are ...
4 votes
2 answers
372 views

What to do if you think you discovered a zero day vulnerability? (white hat style) [duplicate]

Does anybody discovered a zero day vulnerability? I know some black hat hackers sell that kind of info on deep web. But if you are a white hat... Which steps to perform? How to assure a CVE is ...
11 votes
1 answer
321 views

Does today's Shadowbrokers leak affect the average Windows user?

Today (on April 14) the self-called "ShadowBrokers" released a large dump of ready-to-use 0-day exploits, partly with detailed usage explanations. Now I understand that this is really bad for ...
  • 9,500
2 votes
2 answers
357 views

Is CVE-2017-5428 (mfsa2017-08) a zero-day?

CVE-2017-5428 aka MFSA-2017-08 is an integer overflow vulnerability in Mozilla Firefox. It was reported through the Pwn2Own contest, and corrected in Firefox 52.0.1. This article describes it as a ...
4 votes
3 answers
1k views

What is a Zero Day attack? [duplicate]

Can anyone explain to me what is a zero day attack with a very simple example? Also, how can it be prevented?
2 votes
1 answer
153 views

How to justify a Vulnerability Research function at a company

From a business standpoint, how would you express the need for a vulnerability research team? In the end, would it be infeasible from a business standpoint unless said business chalked it up as a ...
5 votes
2 answers
536 views

Is there an estimation of the number of zero-days out there?

A zero day vulnerability refers to a hole in software that is unknown to the vendor. Since, zero day vulnerabilities are unknown can any estimation of amounts be made? What are possible scenarios to ...
  • 6,234
-3 votes
2 answers
232 views

how are some vulnerabilities exploited?

Some zero-day vulnerabilities are exploited actively. How does this happen? How often does this happen? How do so many hackers get to know about the same vulnerability?
's user avatar
1 vote
2 answers
2k views

what does 0day vulnerability specifically mean? [duplicate]

is any unknown vulnerability from any type considered as 0 day vulnerability ? as example if i discovered xss vulnerability in a website which is unknown for users and developers, then does that mean ...
's user avatar
6 votes
2 answers
2k views

Can Google Docs be used to “sanitize” a Word or Excel document?

Sometimes I have to download some Word or Excel documents from uncredible sites. I need not only to read but also to edit them. I heard that the Microsoft Office suite is a very popular attack vector. ...
's user avatar
0 votes
2 answers
161 views

Security configurations to protect against 0-day exploits? [closed]

Let's say someone has sensitive information on their computer and can is a potential target of 0-day exploits/attacks. Assuming that they follow conventional security advice (using a firewall, ...
3 votes
1 answer
215 views

Media files : how to protect from 0-day?

I am in the following situation : media files (image, audio, video) are uploaded from untrusted sources and made public to visitors. What are the best pratices for handling these potentially ...
  • 105
-3 votes
1 answer
151 views

Are PDF zero-days still being widely used? [closed]

Even after all those patches for PDF programs, would you estimate that there are still many zero-days out there? If so, would you estimate that these zero-days are being widely used for various ...
27 votes
2 answers
4k views

How do big cloud providers guard against VM escape attacks?

I think it's pretty much unassailable to say that cloud computing as we know it depends on the concept of the robustness of virtual machines. Where one can depend on the security of VMs they allow ...
1 vote
2 answers
224 views

Is there a practical way to identify security vulnerabilities that were published following a full disclosure policy?

I am conducting a study about the different vulnerability disclosure policies in an effort to determine how long it takes for a given vendor to issue a fix/patch, depending on how a given ...
  • 11
4 votes
3 answers
5k views

I want to start learning fuzzing windows applications, where should I start?

I got my B.Sc. in computer science and I am familiar with basic assembly language. I want to start learning about how to find vulnerabilities in Windows applications, e.g. buffer overflows, use-after-...
  • 43
6 votes
2 answers
759 views

Cost of finding vulnerabilities vs developing exploits

From the perspective of someone who wants to develop a zero-day exploit against some software application or target, there are broadly speaking two tasks that the attacker must do: (1) find a new ...
  • 98.4k
0 votes
0 answers
215 views

Can I use process crash information to detect buffer overflow attacks?

Buffer overflow is a very common vulnerability, often targeted with zero-day exploits. Successful attacks often result in arbitrary code execution, while failed attempts tend to crash the target ...
5 votes
3 answers
1k views

How often do high-end attackers actually use zero-day exploits?

Earlier this week the head of the NSA's Tailored Access Operations unit rather remarkably gave a presentation at the USENIX Enigma security conference. (News coverege here and here; video of the talk ...
20 votes
2 answers
1k views

What was behind the surge of Adobe Flash Player vulnerabilities/patches in 2015?

It's no secret that 2015 was a rough year, security-wise, for Adobe's Flash Player. Aside from Adobe itself beginning to essentially deprecate Flash development largely due to Flash Player's ...