| /* | |
| * CVE-2016-5195 dirtypoc | |
| * | |
| * This PoC is memory only and doesn't write anything on the filesystem. | |
| * /!\ Beware, it triggers a kernel crash a few minutes. | |
| * | |
| * gcc -Wall -o dirtycow-mem dirtycow-mem.c -ldl -lpthread | |
| */ | |
| #define _GNU_SOURCE |
| #!/usr/bin/python2 | |
| from random import randint, choice | |
| from gmpy2 import is_prime # pip install gmpy2 | |
| import operator | |
| ### Code from ROCA | |
| primes = [3, 5, 7, 11, 13, 17, 19, 23, 29, 31, 37, 41, 43, 47, 53, 59, 61, 67, 71, 73, 79, 83, 89, 97, 101, | |
| 103, 107, 109, 113, 127, 131, 137, 139, 149, 151, 157, 163, 167] | |
| prints = [6, 30, 126, 1026, 5658, 107286, 199410, 8388606, 536870910, 2147483646, 67109890, 2199023255550, |
Collecting some information about the extend and affected products and keys of the Infineon RSA vulnerability (ROCA).
Estonian eID cards
| #!/usr/bin/python | |
| import sys | |
| if len(sys.argv) != 3 or len(sys.argv[1]) not in [12,17]: | |
| print 'TWC WPA-PSK generator (c) 2015, 2017 v0.2 by Alex Stanev <alex@stanev.org>' | |
| print 'Usage: '+sys.argv[0]+' [BSSID] [SSID]' | |
| exit(1) | |
| # SSIDs | |
| # Taken from https://www.exploit-db.com/docs/english/38082-compromising-isp-issued-802.11-wireless-cable-modem-networks-for-profit.pdf |
Works today with [single signer ECDSA adaptor signatures][0], or with Schnorr + MuSig.
Other than the explanation below, there's also a diagram and a video.
Advantages:
