full-disclosure - [FD] CVE-2018-2879

Open Source and information security mailing list archives

Date: Tue, 16 Apr 2019 13:34:27 +0200 (CEST)
From: Red Timmy Sec - <redazione@...fault.it>
To: fulldisclosure@...lists.org
Subject: [FD] CVE-2018-2879 - anniversary

For the anniversary of the discovery of CVE-2018-2879 by Sec Consult (https://sec-consult.com/en/blog/2018/05/oracle-access-managers-identity-crisis/) we have decided to release OAMbuster, a multi-thread implementation of CVE-2018-2879.

Link of the exploit: https://github.com/redtimmy/OAMBuster

Some additional details: https://redtimmysec.wordpress.com/2019/04/14/oambuster-multithreaded-exploit-for-cve-2018-2879/

Regards,
Red Timmy Security

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives