62
votes
Accepted
What vulnerability is a math operation in an HTTP request trying to exploit?
The request was checking if the server has a RCE (Remote Code Execution) vulnerability, by testing if the server could print the result of a mathematical operation.
As the result is never found in the ...
- 14.7k
3
votes
NULL dereference - Why does it work?
This is mostly a question about operating system architecture. Fundamentally, though, the reason is simply "because the CPU is allowed to access user-mode addresses even while the current thread ...
- 46.4k
2
votes
Security Implications of Automatic Updates?
The risk of supply chain attacks is generally lower than that of outdated software. This is, because it's generally easier for trusted developers to publish mistakes, than it is for malicious ...
- 135
2
votes
Can webcams be turned on without the indicator light?
Aside from uvcdynctrl mentioned in other answers, it's also possible to use v4l2-ctl in Linux:
v4l2-ctl --device=/dev/video0 --set-ctrl led1_mode=0
- 131
1
vote
Is it possible to run a code only with an environment variable?
It used to be possible to define bash functions using environment variables, as this was the method the shell used to pass user-defined functions down to sub-shells (an environment variable with a ...
- 46.4k
1
vote
Accepted
"PUT /SDK/webLanguage HTTP/1.1" on a server with only port 22 open
I've not tried this explicitly with ufw but I expect what you're seeing here is a common side-effect of using Docker where the host is protected by a local firewall (as opposed to a network firewall). ...
- 62.1k
1
vote
Msfvenom reverse_tcp without LHOST
It's not well documented, but if you are running it from bash, msfvenom will check for an address to use as LHOST if you do not provide it in the command line. You have to dig into the source to see ...
- 702
1
vote
Is exploit different from the kernel level or root?
If you have root privileges, the main reasons you might attack the kernel are:
To break out of a chroot()
To break out of a namespace (e.g. container)
To bypass kernel-enforced restrictions designed ...
- 170
1
vote
Bypassing double quote in DOM based XSS?
In general, no.
If you see " getting transformed to " as it passes through the HTML, then that usually means that the application is doing output escaping properly.
Only top scored, non community-wiki answers of a minimum length are eligible