risksense-ops / cve-2016-6366 Goto Github PK
View Code? Open in Web Editor NEWPublic repository for improvements to the EXTRABACON exploit
Home Page: https://risksense.com
License: MIT License
Public repository for improvements to the EXTRABACON exploit
Home Page: https://risksense.com
License: MIT License
Can you push ASA Version 8.2(5)55 to the top of the list?
Hi,
Can I query and check if updates will be added for version 9.16(2), this is for the ASA License from CML which I plan on using.
Are you working on supporting anything after 9.2.4?
The finder fails on 9.6.1
root@host:~# python2 lina-offsets.py lina961
{u'after': 0, u'name': u'JMPESP', u'oneshot': True, 'found': [{'operation': 'mov WORD PTR [rbp-0x100],0x10e4', 'bytes': '66 c7 85 00 ff ff ff e4 10', 'address': 'df2223'}], u'type': u'EXACT', u'find': [u'ff e4'], u'match': u'ff e4', u'before': 0}
Usage: lina-offsets.py lina_file
We knew about this earlier but while fixing #2 there was another bag of worms that was opened.
So Cisco has the same version banner for NPE (no payload encryption) and SMP (symmetric multiprocessing) builds. These special builds cause the need to use different offsets, otherwise the ASA will crash.
Research needs to be done into fingerprinting NPE and SMP versions, or we should make it available via a flag.
The good news is most ASAs, at least for the x86 payloads, will probably not use these features.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.