Notes on X3DH
Published:
Some notes on X3DH (Extended Triple Diffie-Hellman).
OpenSSH tunneling guide
“Welcome to the Warp Zone!”
Published:
This post is an overview of the different tunneling options available in OpenSSH. This is inteded as a reference to use when I am explaining (every so often) how to use SSH for tunneling.
Protocol stack diagrams
Layers all the way down
Published:
A collection of ASCII-art protocol stack diagrams.
Arbitrary code execution through kitty-open.desktop file association
ニャーニャー
Published:
In Debian kitty package, the
kitty-open.desktop file would associate kitty +open with several MIME types.
This could be used to arbitrary trigger code execution by serving a
file with such a MIME type.
This has been introduced in kitty in 73a197fcd (2022-02-06) released as part of v0.24.3. This has been fixed in v0.26.5-5 of the Debian kitty package. Fixed upstream in 537cabca7 released in v0.29.0. Other distributions such as Ubuntu Lunar are still impacted.
Analysing structured log files with simple tools
Published:
Some tools and other notes when you just want to analyze your structured log files locally using simple tools with a focus for newline-delimited JSON (NDJSON) / JSON lines / JSON Text Sequences.
Simple terminal image display using the iTerm2 image protocol
Published:
A simple way to display image in a terminal using the iTerm2 image protocol. This is supported by iTerm2, WezTerm, recent versions of Konsole.
Shell command and Emacs Lisp injection in emacsclient-mail.desktop
Published:
Shell command injection and Emacs Lisp injection vulnerabilities
in one of the Emacs Desktop Entry (emacsclient-mail.desktop)
leading to arbitrary code execution
through a crafted mailto: URI.
Arbitrary file write in Stellarium file association
Published:
I found an arbitrary file write vulnerability (through path traversal) which would be exploited for arbitrary code execution in Stellarium (desktop version).
MIME-type spoofing in Firefox/Thunderbird and file managers
Published:
An interesting spoofing attack resulting from the interaction between Firefox (or Thunderbird) MIME types handling and file managers.
Code execution through MIME-type association of Mono interpreter
Published:
A dangerous file type association in Debian which could be used to trigger arbitrary code execution.
Page 2 of 11 | Previous page | Next page | JSON Feed | Atom Feed