Cyber security technical information

Category: Application Development

  • 32-bit design limitation (0x7ffffffff). Another episode of Y2K. (23-07-2021)

    Preface: Because humans have destroyed the environment. Therefore, natural disasters resemble God’s punishment. In the digital world, the situation is the same. The reason for the penalty is the design weakness of the software. Background: Perhaps the younger generation has not experienced “Y2K” technical problems because they are still children. The millennium bug is about…

  • CISA urge to public that to aware of Codecov software vulnerability – 30th Apr, 2021

    Preface: CISA is aware of a compromise of the Codecov software supply chain in which a malicious threat actor made unauthorized alterations of Codecov’s Bash Uploader script, beginning on January 31, 2021. Background: A Supply Chain Attack Gone Undetected for 2 Months.Codecov has over 29,000 enterprise customers, including reputed names like Atlassian, Washington Post, GoDaddy,…

  • CVE-2020-7711- Pure Go repositories (goxmidsig) vulnerability – 23-08-2020

    Preface: SAML 2.0 implementation for Service Providers based on etree and goxmldsig, a pure Go implementation of XML digital signatures. Background: “nil” in Go that represents zero values for pointers, interfaces, channels, maps, slices and function types. Vulnerability Details: A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be…

  • Do you worry your camera on your iphone manipulate by hacker. 6th Apr 2020

    Preface: Apple paid $75,000 to the hacker for reporting the camera hijacking bugs. As said, bug is never ending. Perhaps next round will be yours. Background: If you let your friend access your phone for 5–7 minutes, they could have downloaded spyware. Perhaps this action only for joking. As a matter of fact, hacker can…

  • Monthly news focus – Mar 2020

    Preface: Do you have doubt for the road map of application penetration test? I believe that it is a logical step. Sometimes, you will concerning the limit time windows for remediation for different of vulnerability result. The penetration tester will narrow down the work scope especially the high risk rating vulnerability item. Since this is…

  • Can it be remedied or is it a enigma? – JAN 2020

    Preface: User Account Control (UAC) is a fundamental component of Microsoft’s overall security vision. UAC helps mitigate the impact of malware. Synopsis: UAC Bypass Using eventvwr.exe was exploited by malware in 2017. Microsoft fixes Eventvwr.exe UAC Bypass Exploit in Windows 10 Creators Update. In Windows 10 Creators Update preview build 15007, Microsoft seems to have…

  • NewsOne design weakness – Arbitrary File Upload (18th Jan 2020)

    Preface: Arbitrary File Upload but require regular user sign in. Perhaps it lose the access control! Product description: NewsOne is a web based application and fully responsive news & magazine script. Anyone can start your own media/press website with just few clicks without any codding knowledge. Vulnerability details: Auth as a regular user. Go to…

  • Do not ignore integer overflow attack. His power equivalent with torpedo.

    Preface: Malware detection, SIEM and predictive technology enhance the detective and preventive control in cyber security world. However the hacker still have solutions to conduct infiltration thus compromise the system. Attacker exploit integer overflow do the evasion. From technical point of view. It is difficult to detect. Historical records of cyber attack who exploit integer…

  • Software tool can deep look into malware and design weakness – Ghidra

    Preface: Ghidra is one such well-known software reverse engineering toolkit that the NSA agency has been using for a long time. Synopsis: He ensured the audience that there’s no backdoor in Ghidra, said Rob Joyce, the cybersecurity adviser to the NSA director. About installation: Quick and simple way Prerequisite: Since “Ghidra” relies on JDK 11+…

  • Who can you trust in the Internet world? Security Issues with LOAD DATA LOCAL in MySQL DB.

    Preface: Some organizations that use MySQL include GitHub, US Navy, NASA, Tesla, Netflix, WeChat, Facebook, Zendesk, Twitter, Zappos, YouTube,…etc Background: Technology writer Ionut Ilascu alert that there is command in MySQL server could be use for steal the personal and web server data without a high level evasion technique. Technical overview: Security Issues with LOAD…