Posts in Security
Good Communication is Key.

Recently a number of articles were published alerting VLC users about a new zero day. The remote code execution this zero day takes advantage of does sound rather scary and users should definitely be made aware of the issue. Yet there’s a difference between sensible and sensational reporting.

Read More
How to ROP exploit?

In the last blog I attempted to hack a server (with permission, naturally) and discovered it had a debugger running that gave me a foothold. However I couldn’t get full control of the system without a skill upgrade in the realm of return-oriented programming (ROP) chaining.

Read More