jolmos.blogspot.com
software security blog: julio 2011
http://jolmos.blogspot.com/2011_07_01_archive.html
In this blog I post my current investigations about virii, cracking, hacking and reversing. Viernes, julio 01, 2011. Resolución de ExpedientesX de código. Hoy me he topado con algo bastante gracioso que puede liarte unos minutos:. A='owjf oasijf aw0oifj osfij 4.4.4.4 oasidjfowefij 192.168.1.1'. Ok, pues ahora copy-pasteais cada una de estas:. Refindall('[0-9]̣̣',a). Son exactamente iguales, pero si paseteais una da resultados diferente a si pasteais la otra :). Refindall('[0-9]̣̣',a). Se me ocurren broma...
jolmos.blogspot.com
software security blog: TLS v1.2 sigalgs remote crash (CVE-2015-0291)
http://jolmos.blogspot.com/2015/03/tls-v12-sigalgs-remote-crash-cve-2015.html
In this blog I post my current investigations about virii, cracking, hacking and reversing. Lunes, marzo 30, 2015. TLS v1.2 sigalgs remote crash (CVE-2015-0291). OpenSSL 1.0.2a fix several security issues, one of them let crash TLSv1.2 based services remotelly from internet. Regarding to the TLSv1.2 RFC. This version of TLS provides a "signature algorithms" extension for the client hello. If a bad signature is sent after the renegotiation, the structure will be corrupted, becouse structure pointer:.
jolmos.blogspot.com
software security blog: marzo 2015
http://jolmos.blogspot.com/2015_03_01_archive.html
In this blog I post my current investigations about virii, cracking, hacking and reversing. Lunes, marzo 30, 2015. TLS v1.2 sigalgs remote crash (CVE-2015-0291). OpenSSL 1.0.2a fix several security issues, one of them let crash TLSv1.2 based services remotelly from internet. Regarding to the TLSv1.2 RFC. This version of TLS provides a "signature algorithms" extension for the client hello. If a bad signature is sent after the renegotiation, the structure will be corrupted, becouse structure pointer:.
jolmos.blogspot.com
software security blog: S2 Dynamic tracer and decompiler for gdb
http://jolmos.blogspot.com/2014/09/s2-dynamic-tracer-and-decompiler-for-gdb.html
In this blog I post my current investigations about virii, cracking, hacking and reversing. Domingo, septiembre 21, 2014. S2 Dynamic tracer and decompiler for gdb. Decompiling is very useful for understanding srtipped binaries, most dissasemblers like IDA or Hopper have a plugin for decompiling binaries, generating a c like pseudocode. In cookiemonsters team, we are working on several tracers with different focus, but all of them mix the concept of tracing and decompiling to generate human-readable traces.
jolmos.blogspot.com
software security blog: diciembre 2008
http://jolmos.blogspot.com/2008_12_01_archive.html
In this blog I post my current investigations about virii, cracking, hacking and reversing. Lunes, diciembre 29, 2008. PSI remote integer overflow. I once scanned myself from internet, and 8010/tcp port was detected. My PSI jabber file transfer service was exposed to internet. Then I fuzz this service and found a nice DoS. A signed integer check lets crash remote PSI's and I think is not possible to overflow the heap, becouse the destination buffer is reallocated to the same amount of bytes to be copied.
jolmos.blogspot.com
software security blog: enero 2012
http://jolmos.blogspot.com/2012_01_01_archive.html
In this blog I post my current investigations about virii, cracking, hacking and reversing. Sábado, enero 14, 2012. Android SSHControl v1.0 relased! Hoy sabado 15, he subido al Market de Android la versión 1.0 de SSHControl, con nuevas funcionalades y la esperada opción "Custom Commands". Esta aplicación permite controlar tus servidores linux, bsd y unix con solo un dedo, mediante esta app Android. Y soluciona las siguientes problemáticas:. Las funcionalidades nuevas de esta versión 1.0 son:. Suscribirse...
jolmos.blogspot.com
software security blog: mayo 2015
http://jolmos.blogspot.com/2015_05_01_archive.html
In this blog I post my current investigations about virii, cracking, hacking and reversing. Lunes, mayo 18, 2015. ASIS CTF Quals 2015 - sawthis writeup - srand remote prediction. The remote service ask for a name, if you send more than 64 bytes, a memory leak happens. The buffer next to the name's is the first random value used to init the srand(). So here it is clear, but let's see that the random values are computed with several gpu instructions which are decompiled incorrectly:. 2:03 p. m. Just connec...
jolmos.blogspot.com
software security blog: septiembre 2014
http://jolmos.blogspot.com/2014_09_01_archive.html
In this blog I post my current investigations about virii, cracking, hacking and reversing. Domingo, septiembre 21, 2014. S2 Dynamic tracer and decompiler for gdb. Decompiling is very useful for understanding srtipped binaries, most dissasemblers like IDA or Hopper have a plugin for decompiling binaries, generating a c like pseudocode. In cookiemonsters team, we are working on several tracers with different focus, but all of them mix the concept of tracing and decompiling to generate human-readable traces.
jolmos.blogspot.com
software security blog: julio 2014
http://jolmos.blogspot.com/2014_07_01_archive.html
In this blog I post my current investigations about virii, cracking, hacking and reversing. Miércoles, julio 23, 2014. HTML5 Games on Android. And here: Far Planet. 10:16 p. m. Enlaces a esta entrada. Suscribirse a: Entradas (Atom). HTML5 Games on Android. Operative System coders' web. The Urban Cats (parkour team). Universitat Oberta de Catalunya. Ving Tsun Barcelona Asociation. A friend exploit coder blog.
jolmos.blogspot.com
software security blog: ASIS CTF Quals 2015 - sawthis writeup - srand remote prediction
http://jolmos.blogspot.com/2015/05/asis-ctf-quals-2015-sawthis-writeup.html
In this blog I post my current investigations about virii, cracking, hacking and reversing. Lunes, mayo 18, 2015. ASIS CTF Quals 2015 - sawthis writeup - srand remote prediction. The remote service ask for a name, if you send more than 64 bytes, a memory leak happens. The buffer next to the name's is the first random value used to init the srand(). So here it is clear, but let's see that the random values are computed with several gpu instructions which are decompiled incorrectly:. 2:03 p. m. ASIS CTF Qu...