The Curious Engineer

All blogs / Security

InfoSect Blog

blog.infosectcbr.com.au

Technical Blog Reverse engineering, exploitation and breaking tech.

SecurityReverse engineeringLinux / Unix

’18’19’20’21’22’23’24’25’26
Posts
111 from 25 Jan 2018 to 1 Aug 2025
Posting
now and then
Kind
company blog
Feed
https://blog.infosectcbr.com.au/feed/

2025 1

  1. Exploiting the Synology TC500 at Pwn2Own Ireland 2024

2024 1

  1. Exploiting the Lorex 2K Indoor Wifi at Pwn2Own Ireland

2023 1

  1. Empowering Women in Cybersecurity: InfoSect’s 2024 Training Initiative

2022 5

  1. C++ Memory Corruption (std::string) – part 4
  2. C++ Memory Corruption (std::list) – part 3
  3. InfoSect announces HackerChix edition – training opportunities for women
  4. C++ Memory Corruption (std::vector) – part 2
  5. InfoSect Training Demographics for 2021

2021 1

  1. Sudoedit heap overflow

2020 12

  1. C++ Memory Corruption – part 1
  2. Double Frees in Chrome’s Partition Alloc – part 2
  3. Bit Flipping Attacks Against Free List Pointer Obfuscation
  4. An Analysis of Linux Kernel Heap Hardening
  5. Bypassing Pointer Guard in Linux’s glibc
  6. Breaking Secure Checksums in the Scudo Allocator
  7. InfoSect Coronavirus (COVID-19) Announcement
  8. Heap Exploitation in Chrome’s PartitionAlloc – part 1
  9. Weaknesses in Linux Kernel Heap Hardening
  10. Linux Kernel Stack Smashing
  11. Pointer Compression in V8
  12. Firefox Spidermonkey JS Engine Exploitation

2019 30

  1. Freelist Heap Exploitation on Docker Alpine Linux Images
  2. Attacks on the TCMalloc Heap Allocator
  3. Newlib Unlink Heap Exploitation
  4. uClibc Unlink Heap Exploitation
  5. AVR LIBC Freelist Poisoning
  6. Diet LIBC Freelist Poisoning
  7. Diet LIBC House of Spirit
  8. AVR LIBC Overlapping Chunks
  9. AVR LIBC House of Spirit
  10. Linux Heap Unsorted Bin LIBC Base Leak
  11. Linux Heap Fast Bin Poisoning part 2
  12. Linux Heap Fast Bin Poisoning part 1
  13. Linux Heap TCache House of Spirit
  14. Linux Heap TCache Free Chunk Information Disclosure
  15. Linux Heap glibc TCache Double Free Mitigation Bypass
  16. Cryptopals Challenge 23: Clone an MT19937 RNG from its output
  17. Linux Heap House of Force Exploitation
  18. Linux Heap Calloc Exploitation part 2
  19. Linux Heap Calloc Exploitation
  20. Linux Heap Overlapping Chunks Exploitation
  21. Linux Heap Fast Bin Double Free Exploitation
  22. Linux Heap glibc 2.27 Double Free Exploitation
  23. Linux Heap TCache Poisoning
  24. OpenBIOS ELF Loader Buffer Overflow
  25. unmass Buffer Overflow
  26. strncat Buffer Overflow in OpenBIOS
  27. strncpy again in xen
  28. Does anyone get strncpy right?
  29. Apache Nimble Bluetooth Stack
  30. ESP8266 Firmware Buffer Overflows

2018 60

  1. Pitfalls Using strcat
  2. Memory Bugs in Multiple Linux Kernel Drivers using DebugFS
  3. Linux Kernel Infoleaks
  4. ASUS DSL-AC3100 Router Firmware BCM Kernel Driver Bug
  5. ASUS DSL-AC3100 Router Firmware radvd Bugs
  6. ASUS DSL-AC3100 Router Firmware sendpackets Bug
  7. ASUS DSL-AC3100 Router Firmware PPP bug
  8. ASUS DSL-AC3100 Router Firmware DHCP Bug
  9. Month of Kali Off-By-Ones #1 #2 # 3 #4
  10. 2 tiny bugs in sqlmap
  11. NetBSD NFS Kernel Vulnerability
  12. Linux kernel drivers/usb/gadget/function/f_fs.c
  13. 2 Recent InfoSect CVEs
  14. Axmail
  15. Forensics Bugs (#2 rifitui)
  16. Forensics Bugs (#1 recoverjpeg)
  17. unhide (part #3)
  18. unhide (part #2)
  19. unhide (part #1)
  20. chkrootkit (part #4)
  21. chkrootkit (part #3)
  22. chkrootkit (part #2)
  23. chkrootkit (part #1)
  24. Wireshark (#2)
  25. 2 bugs do make a right in Wireshark
  26. InfoSect’s Month of Pointless Bonus Bugs (#34)
  27. InfoSect’s Month of Pointless Bonus Bugs (#33)
  28. InfoSect’s Month of Pointless Bonus Bugs (#32)
  29. InfoSect’s Month of Pointless Bonus Bugs (#31)
  30. InfoSect’s Month of Pointless Bugs (#30)
  31. InfoSect’s Month of Pointless Bugs (#29)
  32. InfoSect’s Month of Pointless Bugs (#27)
  33. InfoSect’s Month of Pointless Bugs (#26)
  34. InfoSect’s Month of Pointless Bugs (#25)
  35. InfoSect’s Month of Pointless Bugs (#24)
  36. InfoSect’s Month of Pointless Bugs (#23)
  37. InfoSect’s Month of Pointless Bugs (#28)
  38. InfoSect’s Month of Pointless Bugs (#22)
  39. InfoSect’s Month of Pointless Bugs (#21)
  40. InfoSect’s Month of Pointless Bugs (#20)
  41. InfoSect’s Month of Pointless Bugs (#19)
  42. InfoSect’s Month of Pointless Bugs (#18)
  43. InfoSect’s Month of Pointless Bugs (#17)
  44. InfoSect’s Month of Pointless Bugs (#16)
  45. InfoSect’s Month of Pointless Bugs (#15)
  46. InfoSect’s Month of Pointless Bugs (#14)
  47. InfoSect’s Month of Pointless Bugs (#13)
  48. InfoSect’s Month of Pointless Bugs (#12)
  49. InfoSect’s Month of Pointless Bugs (#11)
  50. InfoSect’s Month of Pointless Bugs (#10)
  51. InfoSect’s Month of Pointless Bugs (#9)
  52. InfoSect’s Month of Pointless Bugs (#17)
  53. InfoSect’s Month of Pointless Bugs (#8)
  54. InfoSect’s Month of Pointless Bugs (#7)
  55. InfoSect’s Month of Pointless Bugs (#6)
  56. InfoSect’s Month of Pointless Bugs (#5)
  57. InfoSect’s Month of Pointless Bugs (#4)
  58. InfoSect’s Month of Pointless Bugs (#3)
  59. InfoSect’s Month of Pointless Bugs (#1, #2)
  60. NetBSD kernel wscons IOCTL vulnerable bug class