404 English Paper – Guge's blog

Protocol Layer Attack – HTTP Request Smuggling

2019年10月11日 by paper - Last paper

Author：mengchen@Knownsec 404 Team Chinese version: https://paper.seebug.org/1048/ 1. Introduction I recently studied BlackHat's topic, and one of the topics - "HTTP Desync Attacks: Smashing into...

Java Deserialization Tool Gadgetinspector First Glimpse

2019年9月30日 by paper - Last paper

Author：Longofo@Knownsec 404 Team Time: September 4, 2019 Chinese version: https://paper.seebug.org/1034/ Origin I first learned about this tool through @Badcode, which was putted forward in an t...

BlueKeep Exploit Analysis

2019年9月20日 by paper - Last paper

Author：SungLin @ Knownsec 404 Team Date：2019/09/18 Chinese Version: https://paper.seebug.org/1035/ 0x00 Channel Creation, Connection and Release The channel's data packet is defined in the MCS Conn...

Follow-Up of Exim UAF Vulnerability Analysis (CVE-2017-16943)

2019年9月4日 by paper - Last paper

Author: Hcamael@Knownsec 404 Team Chinese Version: https://paper.seebug.org/479/ After I posted my last paper Exim UAF Vulnerability Analysis, I got some inspiration from @orange an...

Exim UAF Vulnerability Analysis (CVE-2017-16943)

2019年9月3日 by paper - Last paper

Author: Hcamael@Knownsec 404 Team Chinese Version: https://paper.seebug.org/469/ On Thanksgiving Day, meh submitted an Exim UAF Vulnerability on Bugzilla: https://bugs.exim.org/show...

Confluence Local File Disclosure Vulnerability Analysis (CVE-2019-3394)

2019年8月30日 by paper - Last paper

Author: Badcode@Knownsec 404 Team Date: 2019/08/29 Chinese Version: https://paper.seebug.org/1025/ 1 Foreword In the afternoon @fnmsd sent me a Confluence warning. I studied this p...

Analysis of Exim Off-by-one Vulnerability Recurrence (CVE-2018-6789)

2019年8月29日 by paper - Last paper

Author：Hcamael@Knownsec 404 Team Chinese Version: https://paper.seebug.org/557/ Not too long ago, meh dug an Exim RCE vulnerability. The RCE vulnerability is less constrained, as it can sti...

Backdoor Exploration of Webmin Remote Code Execution Vulnerabilities (CVE-2019-15107)

2019年8月23日 by paper - Last paper

Author：Ethan@Knownsec 404 Team Time: August 21, 2019 Chinese Version: https://paper.seebug.org/1019/ Introduction Webmin is a web-based interface for system administration for Un...

Analysis of Apache Solr DataImportHandler Remote Code Execution Vulnerability (CVE-2019-0193)

2019年8月12日 by paper - Last paper

Author：Longofo@Knownsec 404 Team Time: August 8, 2019 Chinese Version: https://paper.seebug.org/1009/ Introduction On August 1st, 2019, Apache Solr officially released a vulnerability. The ...

A Brief Analysis of KDE4/5 Code Execution(CVE-2019-14744)

2019年8月9日 by paper - Last paper

Author: HACHp1@Knownsec 404 Team Date: August 09, 2019 Chinese Version: https://paper.seebug.org/1006/ Introduction KDE Frameworks is a collection of libraries and software frameworks by KDE readil...