HNHacker News
TopNewBestAskShowJobs

jordyzomer

77 karma · joined July 18, 2019

aka Oblivion
submissionscomments
jordyzomer··on Escaping privileged containers for fun
Thanks very good suggestion! I'll take a look if Hugo has a feature for that otherwise I 'll edit the templates :D
jordyzomer··on Python 3.x: RCE in Python applications that accept floats as untrusted input
Hey! Original discoverer here. I would like to clarify some things. It would certainly be possible given that we can have numeric shell-code (check the reference). The real problem in here is the security mechanisms like stack cookies, brute-forcing those would have been a PITA with only numbers. But I'd have to take a closer look at the stack god knows what GCC could have done there :)

On a system without these protection mechanisms it would be a easy win.

Reference: https://haxx.in/posts/numeric-shellcode/