koelling

#include <netdb.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <errno.h>

#define CANARY "in_the_coal_mine"

struct {
  char buffer[1024];

ryo1kato

#!/bin/bash

set -ue

bash_trace () {
    typeset -i i=0
    for func in "${FUNCNAME[@]}"
    do
        printf '%15s() %s:%d\n' \
            "$func" "${BASH_SOURCE[$i]}" "${BASH_LINENO[$i]}"

catwell

Decoding Base64-URL without padding

1) Add padding

Divide the length of the input string by 4, take the remainder. If it is 2, add two = characters at the end. If it is 3, add one = character at the end.

You now have Base64-URL with padding.

2) Translate to Base64

smealum

import os
import sys
import struct
import ctypes
import compress
#compress.py from https://github.com/magical/nlzss/blob/master/compress.py
#slightly modified padding

def getWord(b, k, n=4):
	return sum(list(map(lambda c: b[k+c]<<(c*8),range(n))))

datagrok

This article is now published on my website: Prefer Subshells for Context.

advantis

#!/usr/bin/python

import lldb
import shlex

def mem_location(arch, index):
	index = int(index)
	return {
		'arm'	: ("$r%d" % (index)) if (index < 4) else ("$sp+%d" % (index - 4)),
		'armv7'	: ("$r%d" % (index)) if (index < 4) else ("$sp+%d" % (index - 4)),

errzey

Lets take a look at the vulnerable code:

if (s->servername_done == 0) {
    switch (servname_type) {
        case TLSEXT_NAMETYPE_host_name:
            if (s->session->tlsext_hostname == NULL) {
                if (len > TLSEXT_MAXLEN_host_name ||
                    ((s->session->tlsext_hostname = OPENSSL_malloc(len + 1)) == NULL)) {
                    *al = TLS1_AD_UNRECOGNIZED_NAME;

zcutlip

Importing Hand-Rolled C Header Files in LLDB

Scenario

• We're debugging a dylib, libhello.dylib
• The dylib is linked from hello
• The exported function is helloworld()
• We do not have source, but have reversed a struct from the library and created a hand-crafted header file

Header File

joshenders

Successful mitmproxy-3.7 setup tested on OS X 10.13.6 and iPhone X running 12.1.4

Enable IP forwarding and disable ICMP redirects to keep the iPad sending traffic to the proxy

sudo sysctl -w net.inet.ip.forwarding=1
sudo sysctl -w net.inet.ip.redirect=0

net.inet.ip.forwarding
Enable IP forwarding between interfaces

mjdietzx

#!/bin/bash

# install CUDA Toolkit v8.0
# instructions from https://developer.nvidia.com/cuda-downloads (linux -> x86_64 -> Ubuntu -> 16.04 -> deb (network))
CUDA_REPO_PKG="cuda-repo-ubuntu1604_8.0.61-1_amd64.deb"
wget http://developer.download.nvidia.com/compute/cuda/repos/ubuntu1604/x86_64/${CUDA_REPO_PKG}
sudo dpkg -i ${CUDA_REPO_PKG}
sudo apt-get update
sudo apt-get -y install cuda