Submissions by pentestercrab

Linux Heap House of Force Exploitation

Linux Heap Calloc Exploitation Part 2

Chinese-Australian artist Badiucao reveals his identity

So I bought something at a thrift store, it's a “Cellebrite Touch”

Look inside the box – breaking the encryption/obfuscation in the Dropbox client

Huawei and Security Analysis

Ruby on Rails CVE-2019-5418 – Payload to dump session signing keys in production

CVE-2019–5418: on WAF bypass and caching

A Go implementation of Poly1305 that makes sense

Modmob – Using cheap tools and tricks to attack mobile devices in practice [pdf]

Bypass firewalls with ICMP error messages

Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks

Vulnerability in golang.org/x/crypto/salsa20

SatoshiLabs Response to Ledger's MITBitcoinExpo Findings

Universal RCE with Ruby YAML.load

PentesterLab – Introduction to Code Review

Matt Miller – Trends, challenge, and shifts in software vulnerability mitigation

Privilege Escalation in Ubuntu Linux (dirty_sock Exploit)

Downgrade Attack on TLS 1.3 and Vulnerabilities in Major TLS Libraries

Exploiting CVE-2018-19134 remote code exec through type confusion in Ghostscript

Trends, challenge, and shifts in software vulnerability mitigation [pdf]

Zcash Counterfeiting Vulnerability Successfully Remediated

Tig – ncurses-based text-mode interface for Git

What the Fuzz

Are you winning if you're pinning?

Gaining access to Uber's user data through AMPScript evaluation

HCL Technologies Acquires IBM's Lotus Notes, Domino and Tivoli for $1.8B