Ftp(1) can be made to execute arbitrary commands by a malicious webserveropenwall.com14 points·by amlweems·12 ปีที่แล้ว·1 comments
TweetNaCl: a crypto library in 100 tweetstweetnacl.cr.yp.to2 points·by amlweems·13 ปีที่แล้ว·0 comments
amlweems·10 ปีที่แล้ว·discussAuthor here: If you're unfamiliar with machine learning, this post gives a neat example of machine learning on binary data.If you're familiar, jump straight to our technical challenge at https://mlb.praetorian.com.
amlweems·11 ปีที่แล้ว·discussQualys Security Advisory: http://www.openwall.com/lists/oss-security/2015/01/27/9Lots of info about their discovery. Apparently they developed a PoC exploit. They've also included a pretty short test program to determine if a system is vulnerable or not.Here's a gist of the test (copied from their advisory): https://gist.github.com/amlweems/6e78d03810548b4867d6
If you're familiar, jump straight to our technical challenge at https://mlb.praetorian.com.