| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <CACxx4MR+ZCWctyGYDVDf81HMEqGvOWgba6z12UDD7S8Y_2OXrQ@mail.gmail.com> Date: Thu, 25 Jun 2015 13:30:02 -0700 From: Zach C <uid000@...il.com> To: fulldisclosure@...lists.org Subject: [FD] Broken, Abandoned, and Forgotten Code, Part 9 Part 9 of Broken, Abandoned, and Forgotten Code is up! In this part, we fill out the ambit firmware header enough to satisfy upnpd's loose validation and have it write the image to flash. Additionally, we have to binary patch upnpd to get it to play nicely in QEMU, since there's no physical flash memory in the emulator. Here's the link to part 9: http://shadow-file.blogspot.com/2015/06/abandoned-part-09.html Here was a mid-term summary post a couple of weeks ago to help newcomers get caught up. http://shadow-file.blogspot.com/2015/06/abandoned-intermission.html If you missed my post to Full Disclosure where I introduced the series, here's that: http://seclists.org/fulldisclosure/2015/May/44 As always I welcome feedback via email or Twitter. I'm @zcutlip. I hope you enjoy it! Cheers, Zach -- :wq! _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Powered by blists - more mailing lists