Showing posts with label golang. Show all posts
Showing posts with label golang. Show all posts
Saturday, January 01, 2022

Universal Go exploit using data races, no imports

›
In the last two blog posts, I described a challenge and exploits to get code execution from arbitrary Go code only allowing the fmt packa...
Saturday, December 07, 2019

The Gomium Browser - Exploits

›
In my last blog post , I described The Gomium Browser, a pwn challenge of the Google CTF 2019 finals that 4 teams (pasten, 5BC, p4, A*0*E) ...
Thursday, November 07, 2019

The Gomium Browser - Google CTF 2019 finals challenge

›
Last weekend were the Google CTF 2019 finals in London with 10 invited teams, part of a larger event named ESCAL8 with VRP researchers (Bu...
Thursday, December 03, 2015

From remote shell to remote terminal

›
If you like exploitation surely you've had your own reverse or connect-back shells. Set up a listening netcat, run the payload and boom:...
Wednesday, April 15, 2015

Golang data races to break memory safety

›
Go is becoming more and more popular as a programming language and getting more scrutiny from a security point of view. You might remember m...
1 comment:
Sunday, January 25, 2015

DNS reverse proxy

›
I have a server with a single IPv4 and I want to run two DNS servers: one to serve zones like stalkr.net - if you recall , I like PowerDN...
Tuesday, June 04, 2013

Golang heap corruption during garbage collection

›
I've been playing with Go recently, it's an interesting programming language (I recommend the tour ). It is compiled, garbage-col...