foxglovesecurity.com

Most-linked posts?

1. A vulnerability in WebLogic, WebSphere, JBoss, Jenkins, OpenNMS and others
   3 people · 3 mentions · first linked 2015-11-06
2. Hot Potato – Windows Privilege Escalation
   2 people · 3 mentions · first linked 2016-01-17
3. /2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/
   2 people · 2 mentions · first linked 2016-06-29

What Hacker News says?

1. bri3d · 2015-12-17

   Marshalling bugs in other languages and frameworks: - Java: WebSphere, WebLogic, JBoss, Jenkins : http://foxglovesecurity.com/2015/11/06/what-do-weblogic-webs... . Admittedly most of these are through sidechannels and nothing as obvious as sessions, but it's the same mistake. - Python: https://blog.nelhage.com/2011/03/exploiting-pickle/ . Unpickling got at least Cisco Web Security Appliances: http://tools.cisco.com/…

   Comment linking /2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/

   on “Instagram's Million Dollar Bug”
2. sprkyco · 2015-11-06

   Submitted A vulnerability in WebLogic, WebSphere, JBoss, Jenkins, OpenNMS and others as a story · 125 points

   HN discussion
3. ryao · 2016-03-21

   The best way would be to stop using Windows. Windows is the only platform where you see backward things like: 1. Antivirus software that gives a false sense of security being popular. 2. The vendor refusing to fix vulnerabilities that give attackers complete control because of backward compatibility concerns: http://foxglovesecurity.com/2016/01/16/hot-potato/ 3. UAC prompts that annoy users to the point where the us…

   Comment linking /2016/01/16/hot-potato/

   on “Bypassing Antivirus with Ten Lines of Code”
4. mmastrac · 2016-01-17

   Submitted Hot Potato – Windows Privilege Escalation as a story · 73 points

   HN discussion
5. ryao · 2016-03-21

   The "execute downloaded executable" protection predates UAC. It was introduced in Windows XP SP2 and UAC implemented its own version of it, which created double prompts: https://blogs.msdn.microsoft.com/e7/2008/10/08/user-account-... That being said, the "execute downloaded executable" protection only applies when the binaries are marked as being from the internet, which is easy to bypass. You just need to download…

   Comment linking /2016/01/16/hot-potato/

   on “Bypassing Antivirus with Ten Lines of Code”
6. avckp · 2016-11-17

   Submitted The most underrated, underhyped vulnerability of 2015 as a story · 3 points

   HN discussion
7. matt_d · 2019-08-29

   "Generating Software Tests" ( https://www.fuzzingbook.org/ ) is pretty great (independent of your programming language) - arguably a must read for anyone interested in software testing. John Regehr (the author of the blog post) has written more great posts: - How to Fuzz an ADT Implementation - https://blog.regehr.org/archives/896 - Better Random Testing by Leaving Features Out - https://blog.regehr.org/archives/591…

   Comment linking /2016/03/15/fuzzing-workflows-a-fuzz-job-from-start-to-finish/

   on “Write Fuzzable Code”
8. Rondom · 2017-11-23

   Submitted A Sheep in Wolf’s Clothing – Finding RCE in HP’s Printer Fleet as a story · 2 points

   HN discussion
9. hkr_mag · 2016-06-29

   4. Another great example is detecting exploitation of Java Unserialize vulnerabilities ( https://foxglovesecurity.com/2015/11/06/what-do-weblogic-web... ). WebSphere takes payload in Base64 inside the XML. To parse everything (and do it fast), unfold the structure and detect the attacks is still almost impossible thing for most of the WAFs

   Comment linking /2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/

   on “Show HN: Wallarm – Protect your web apps or APIs with fast Nginx-based instances”
10. zimbu668 · 2015-11-08

    Submitted Java Remote Code Vulerabilty in Most Major App Servers as a story · 2 points

    HN discussion
11. matt_heimer · 2015-11-08

    Better information on which class (InvokerTransformer) is being exploited http://foxglovesecurity.com/2015/11/06/what-do-weblogic-webs... The related Apache ticket: https://issues.apache.org/jira/browse/COLLECTIONS-580

    Comment linking /2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/

    on “The Java Deserialization Bug”
12. campuscodi · 2017-02-07

    Submitted Type Juggling and PHP Object Injection, and SQLi, Oh My as a story · 1 points

    HN discussion
13. freeqaz · 2022-03-30

    (Author of the OG Log4Shell post here) I'm poking around at the Spring code and posting some notes about what I find on Twitter[0]. I'm not a Java expert so if anybody feels like chiming in to help connect the dots for others, please feel free. It's late over here so I'm just doing my best to help determine if this is a real problem or just fear mongering. 0: https://twitter.com/LunaSecIO/status/1509084844042510336…

    Comment linking /2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/

    on “Possible Spring core RCE”
14. campuscodi · 2016-09-27

    Submitted Rotten Potato – Privilege Escalation from Service Accounts to SYSTEM as a story · 1 points

    HN discussion

Search all of HN for foxglovesecurity.com

Linked by the same people?

• Ccrowdstrike.comcrowdstrike.com
• KKen Shirriffrighto.com
• PProject Zerogoogleprojectzero.blogspot.com
• TThe GitHub Bloggithub.blog