Inspiriert durch die erfolgreichen Round-Table-Diskussionen der
Troopers-Konferenz freuen wir uns, Ihnen heute mit dem Incident Analysis and
Digital Forensics Summit 2018, eine weitere Veranstaltung in einer Reihe zu
Trend-Themen im Bereich der IT-Sicherheit vorzustellen.
Die Veranstaltung beginnt am Morgen mit einem Eröffnungsvortrag von Thomas
Schreck (Chairman of the Board des internationalen CERT Verbunds FIRST), gefolgt
von Fallstudien und Vorträgen durch weitere Referenten aus der Industrie und
Strafverfolgung.
For those who never heard of Sitefinity before, it is an ASP.NET-based Web
Content Management System (WCMS), which is used to deploy and manage
applications as other CMS‘s do. A bitter quick glance at Sitefinity and its
advantages can be found in
this overview.
Delving into the core of this blog post, recently I had the opportunity to look
at Sitefinity WCMS in which I found two reflectedCross Site Scripting
(XSS)
(CVE-2018-17053 and CVE-2018-17056), a* stored
XSS*
(CVE-2018-17054)
and an arbitrary file upload
(CVE-2018-17055)
vulnerabilities.
Recently, I had some time to play around with HEVD
[1], an
extremly vulnerable Windows driver available for 32-bit and 64-bit systems.
Since exploits for all vulnerabilities of the 32-bit variant are publically
available, I was wondering why this is not the case for the 64-bit version,
especially for the pool corruption and UAF vulnerabilities.
After digging around a bit, it turned out that the reason is the following. HEVD
uses a “special” sized object which is improperly handled such that a
Use-After-Free vulnerability arises.
I have the pleasure to announce the Active Directory Security Summit 2018 at
13^(th). of November of 2018. The summit covers current Active Directory
security related topics such as challenging tasks of hybrid Active Directory
operations as well as new security best practices and some ‘evergreens’ – Admin
Tiering implementations (what about Exchange and DNS…??), ESAE operations etc.
😉
The primary objective of the Active Directory Security Summit is to bring
experts together:
A while ago, we had to scan a mass amount of IPs within a project for a
customer. While it’s feasible to read the whole output of a Nmap scan if you
have just a few alive hosts, this was not possible anymore for this mass amount
of systems. We’ve started with a
masscan to scan all 2^16 ports
of the IP ranges and wanted to perform a more precise analysis of the alive
hosts (which had responded to at least one SYN packet) with Nmap. The result of
this scan grew to nearly a hundred megabyte and we now had to do an analysis of
which ports we had to look deeper into and which are intended to be open.
Taking a look at the
CVE List for WordPress,
most vulnerabilities aren’t found within the WordPress core but inside of
third-party plugins and themes.
Today, let’s talk about WordPress.
Performing a WordPress assessment might seem boring at first as core
functionality [tested] and configuration does not allow for extensive security
misconfigurations. Luckily, most instances use plugins and themes to add
features not offered by the WordPress core.
In this blog post I would like to discuss the findings and how I discovered
them. Also, I will describe different vendor responsiveness reaching from not
responding at all, to not understanding the issue to fast and professional
responses kindly asking for a review of the updated code ready for deployment.
This blogpost is about the release of a plugin for Binary Ninja that allows you
to run a Python Kernel inside the Binary Ninja GUI environment to which you can
attach a Jupyer (QT) console, formerly known as IPython shell. The first section
is about why this is useful, the second is about some issues I encountered and
how to solve them, and the third contains everything you need to know to set it
up.
Gender equality in the Infosec world as a topic of discussion comes with a lot
of heated arguments and differences in opinion.
So let me start with some disclaimers on the target audience for this post. If
you are in the category who believes everything about gender is perfect in the
infosec world, this post is not for you. If you are in the category who believes
gender and bringing diversity is not your area of interest, then this post is
not for you either. There are so many interesting problems that the world offers
you. Climate change, poverty, diseases, unemployment, addiction, science
problems and what not. Everybody has the freedom to choose their area of
interest and contribute towards it. If you are in the category who thinks gender
equality in infosec needs some attention and would like to explore more on the
topic without prejudices, then this post may be interesting to you.
Some weeks ago, I tweeted about grabbing clipboard content from KeePass with
some PowerShell. From some reactions to this tweet, and after reading it a
couple of times again, I realize it was sending the wrong message, and I would
like to take a bit more than 280 chars to clarify what I meant when I posted
that tweet…
TLDR: Password managers are a must, not using one exposes you to far more risks
than using one. Do it.