Security Headlines

In this episode of our Podcast *Security Headlines* we are joined by   

dpaste dot com's founder and creator Paul Bissex.

Dpaste is a pastebin service created in 2006 as Paul's first Django   

project. 

The website has been running stable ever since, growing more and more   

as time goes by resulting in being Django's default paste service.  

Paul learned computer programming by copying programs from computer   

magazines, he then moved on to creating games and selling them by mail  

as many did in the earlier days of personal computing.    

Ever since then Paul kept the interests of development and   

innovative problem-solving.   

As an active community member in various irc channels on Freenode, he   

quickly joined the django irc channel in the projects' early days.    

And he has happily been running Django ever since.     

Today Paul works with a startup accelerator where he gets to    

help startup companies develop beta and alpha products using Django!   

Thanks to python, being easy to learn and deploy, Django is    

a perfect choice for beginners that want to quickly put an application  

online.   

We got to hear Pauls story on why he created dpaste and how the Django   

community has been growing over the years.    

Some important key points that we talked about:  

*  Running python in production   

*  The start of django   

*  The success of django   

*  Upgrading Python2 to Python3    

*  Keeping track of python dependencies    

*  Going from php to python  

*  Working with django   

*  Early 2000 webb development   

*  Python's community 

*  Pyramid, soap, 

*  Django released in 2005     

*  Importance of documentation   

*  Niklaus Wirth    

*  modula 2   

*  trs 80, 8 bit computing  

*  Django's culture  

*  Liberation from php 

*  Serving 40 million requests a day with django   

*  The freenode community   

*  Blacklisting django spam   

*  Caching web apps      

*  Python Virtualenv   

Get comfortable and give listen to Security Headlines dpaste special

External links:  

https://blog.firosolutions.com  

https://dpaste.com   

http://paulbissex.com/portfolio/   

https://www.pythonanywhere.com/?affiliate_id=007d4e22  

https://twitter.com/pbx   

https://en.wikipedia.org/wiki/Django_(web_framework)   

https://docs.python.org/3/library/asyncio.html   

https://realpython.com/async-io-python/  

https://www.freebsd.org/

https://en.wikipedia.org/wiki/Simon_Willison  

Francisco "Klondike" Blas Izquierdo Riera is a security researcher from Spain. 

In the last couple of years, he has been spending in Gothenburg Sweden, working in the security field and doing research.

He has done amazing research in the cryptography and security field,Klondike is currently researching   

with the Resilient Internet of Things Project and we are happy to have him on Security Headlines!

In this episode we cover:

How klondike got in to the security field

Gentoo 

Getting in to Gentoo

Installing Gentoo linux manually

How to install Gentoo linux

Gentoo linux for beginners. 

hardend gentoo

GRSEC patches

Manditory access control

Security Capture the flag

Lan party

Internet of things IoT

password security

Rolling release

nftables vs iptables

Cryptography

WannaCry Ransomeware

ChaCha20

Malware developers

Chalmers

Sec-t

Petya Malware

Vault 7

Safe cryptography 

libsodium

Easy to use, clear api and cross platform best practices

Breaking Petyas encryption with pen and paper

Running gentoo in production

Quantum Cryptography

Breaking Bitcoin

Swedish military Cryptography 

Shamir's Secret Sharing

Future of cryptography

Hackerspaces

Gentoo in production  

libressl

Links worth checking out:

https://www.sec-t.org/

https://gentoo.org/

http://klondike.es/

https://twitter.com/klon

https://www.resilient-iot.se/

https://arxiv.org/search/quant-ph?searchtype=author&query=Eker%C3%A5%2C+M

https://www.researchgate.net/scientific-contributions/2009759954_Martin_Ekera

Fuzzing Rust with Shnatsel

In this fresh episode of Security headlines we interview Shnatsel

about rust fuzzing, we jump in the rabbit holes of Rust and fuzzing and

explore the magical world.

In this episode we cover:

Fuzzing in rust

i side track to openbsd ofc

we talk about internal builds

using clippy to inform people about best practices

clippy in Rust CI systems

Rust in enterprise systems

linting in rust

the cargo build system

security exploits

rebuilding binaries

cloud binaries

cargo rfc

cargo fuzz

AFL/american fuzzyloop, hongfuzz, libfuzzer

binaries

dependencies in rust

finding zero days

unmaintained code in production

versions in binaries

auditing binaries

finding bugs in rust, C and C++ code

claiming CVEs

address sanitizer

going beyond address sanitizer to find use after free/Use of uninitialized memory bugs

binary parser

angola fuzzer

memory sanitizer

finding new and interesting bugs in your codebase

rust sub reddit

libdfuzz

External links:

https://github.com/rust-fuzz/auto-fuzz-test

https://github.com/Shnatsel/rust-audit

https://github.com/AngoraFuzzer/Angora

https://web.cs.ucdavis.edu/~hchen/paper/chen2018angora.pdf

https://github.com/rust-fuzz/cargo-fuzz

https://github.com/avadacatavra/unsafe-unicorn

https://rust.firosolutions.com

https://reddit.com/r/Rust

https://lcamtuf.coredump.cx/afl/

https://github.com/rust-fuzz

https://github.com/rust-fuzz/trophy-case

https://blog.firosolutions.com/2020/07/superhero-rust-fuzzing/

Fuzzing Rust with Shnatsel

In this fresh episode of Security headlines we interview Shnatsel

about rust fuzzing, we jump in the rabbit holes of Rust and fuzzing and

explore the magical world.

In this episode we cover:

Fuzzing in rust

i side track to openbsd ofc

we talk about internal builds

using clippy to inform people about best practices

clippy in Rust CI systems

Rust in enterprise systems

linting in rust

the cargo build system

security exploits

rebuilding binaries

cloud binaries

cargo rfc

cargo fuzz

AFL/american fuzzyloop, hongfuzz, libfuzzer

binaries

dependencies in rust

finding zero days

unmaintained code in production

versions in binaries

auditing binaries

finding bugs in rust, C and C++ code

claiming CVEs

address sanitizer

going beyond address sanitizer to find use after free/Use of uninitialized memory bugs

binary parser

angola fuzzer

memory sanitizer

finding new and interesting bugs in your codebase

rust sub reddit

libdfuzz

External links:

https://github.com/rust-fuzz/auto-fuzz-test

https://github.com/Shnatsel/rust-audit

https://github.com/AngoraFuzzer/Angora

https://web.cs.ucdavis.edu/~hchen/paper/chen2018angora.pdf

https://github.com/rust-fuzz/cargo-fuzz

https://github.com/avadacatavra/unsafe-unicorn

https://rust.firosolutions.com

https://reddit.com/r/Rust

https://lcamtuf.coredump.cx/afl/

https://github.com/rust-fuzz

https://github.com/rust-fuzz/trophy-case

https://blog.firosolutions.com/2020/07/superhero-rust-fuzzing/

In this episode of security headlines the following vulnerabilities are mentioned:

For wordpress:

WordPress Aviary Image Editor Add-On For Gravity Forms Plugins 3.0 Beta R7 CSRF Shell Upload Vulnerability                              

Wordpress Plugin Contact Form Builder 1.6.1 - Cross-Site Scripting 

Wordpress Plugin PicUploader 1.0 - Remote File Upload      

WordPress StatTraq 1.3.0 SQL Injection                     

WordPress WP Forms 1.5.8.2 Cross Site Scripting             

WordPress WPForms 1.5.9 Cross Site Scripting 

Tor:

Medium CVE-2020-10592: Torproject TOR

Medium CVE-2020-10593: Torproject TOR 

TROVE-2020-002 TROVE-2020-004

remotely triggerable memory leak on relays and clients

Causing denial of service 

https://trac.torproject.org/projects/tor/ticket/33619

Sharepoint:

SharePoint Workflows XOML Injection which is now a metasploit module

https://packetstormsecurity.com/files/156930/SharePoint-Workflows-XOML-Injection.html

Joomla:

Joomla GMapFP 3.30 Arbitrary File Upload            

Joomla HDWPlayer 4.2 SQL Injection                  

Joomla! com_hdwplayer 4.2 search.php SQL Injection   

Jenkins:

jenkins-2-plugins: Execute arbitrary code commands 

 openshift/jenkins-plugin: Deserialization in snakeyaml YAML() objects

allowed for remote code execution (CVE-2020-2167)

Weechat:

Medium CVE-2020-9759: Weechat Weechat 

Medium CVE-2020-9760: Weechat Weechat 

https://weechat.org/doc/security/

One crash and one buffer overflow based on nick prefixes.

SCADA:                                    

New scada vulnerability affecting Schneider Electric IGSS SCADA Software                                            

https://www.zerodayinitiative.com/advisories/upcoming/

https://www.us-cert.gov/ics/advisories/icsa-20-084-02

http/3 QUIC vuln:

Specially formatted HTTP/3 messages may cause the Traffic Management

Microkernel (TMM) to produce a core file. (CVE-2020-5859)

https://support.f5.com/csp/article/K61367237

Check us out at:

https://firosolutions.com

https://watchers.firosolutions.com                       

https://blog.firosolutions.com

https://status.firosolutions.com

Security Headlines is a podcast about the latest   

security vulnerabilities with in the cyber security field.   

So if your interested about the latest security   

holes nomather if you are a tech savy penetration tester,   

a devops person, a programmer or just generally interested    

in the latest technology security news.   

Security headlines is here for you!

In this episode the following security vulnerabilities are mentioned:

FreeBSD -- TCP IPv6 SYN cache kernel information disclosure

py-bleach XSS

An xss has been found in the python HTML sanitizing library "bleach". its a more advanced version of  Django’s urlize library.

CVE-2020-3950 VMware Fusion EoP PoC by @0xm1rch| privledge escalation exploit

A privledge escalation exploit has been published for VMware Fusion, vmware fusion the virtual machines for mac osx

New IMCE Dir Exploit for Hacking Drupal Websites

IMCE which is a file manager for drupal that allows for uploading files, someone has published a google dork and a poc exploit for this.

ESB-2020.0938 - [Debian] webkit2gtk: Execute arbitrary code commands - Remote unauthenticated

The following vulnerability has been discovered in the webkit2gtk web

engine:

CVE-2020-10018

   Sudhakar Verma, Ashfaq Ansari and Siddhant Badhe discovered that

   processing maliciously crafted web content may lead to arbitrary

   code execution.

FreeBSD -- Kernel memory disclosure with nested jails 2020-03-19 20:34:5

A superuser inside a jail can create a jail and may be able to read and take advantage of exposed kernel memory, so please update your freebsd jails

CVE-2020-7606 (docker-compose-remote-api) 2020-03-17 23:07:15

docker-compose-remote-api is a Connection interface between docker-compose and the Docker Remote API.

the variable name serviceName can be manipulated due to a inproper validation, by a third party which can cause code execution

You find us at:

https://blog.firosolutions.com

https://firosolutions.com