VirtualProtect DEP Bypass: Step-By-Step Exploit
Data Execution Prevention (DEP) has been a game-changer in exploit development. The days of simply overflowing a buffer, jumping to your shellcode, and calling it a day are long gone. DEP enforces a...
Mastering x86 Shellcode: A Deep Dive into Calculator-Launching Payload Development
In the realm of cybersecurity, shellcode represents one of the most fundamental building blocks for both offensive security practitioners and defensive analysts. These compact machine code sequences,...
Finding and Exploiting CVE-2023-0830 in EasyNas
Recently, I discovered a vulnerability in a backup and restore script used in EasyNAS, a popular open-source network-attached storage solution. The vulnerability (published as CVE-2023-0830) allows...