toshiharu_zのブックマーク - はてなブックマーク

Enter 30 to shell: Cryptsetup Initram Shell [CVE-2016-4484]
November 11th, 2016 - Disclosed at DeepSec 2016, Viena. November 14th, 2016 - Published in the web. Description A vulnerability in Cryptsetup, concretely in the scripts that unlock the system partition when the partition is ciphered using LUKS (Linux Unified Key Setup). The disclosure of this vulnerability was presented as part of our talk "Abusing LUKS to Hack the System" in the DeepSec 2016 secu
toshiharu_z 2016/11/16
リンク
Back to 28: Grub2 Authentication Bypass 0-Day
December 10th, 2015 - Disclosed at IX Jornadas STIC CCN-CERT. December 14th, 2015 - Published in the web. Description A vulnerability in Grub2 has been found. Versions from 1.98 (December, 2009) to 2.02 (December, 2015) are affected. The vulnerability can be exploited under certain circumstances, allowing local attackers to bypass any kind of authentication (plain or hashed passwords). And so, the
toshiharu_z 2015/12/19
リンク
AMD Bulldozer Linux ASLR weakness: Reducing entropy by 87.5%
toshiharu_z 2015/05/10
リンク
1