corpus.blog
Claim your blog
Record · corpus.blog/posts/01a0875e-fa8c-70b6-a841-5b5523e5ad8c

Anatomy of an Exploit - RCE with SIGRed

chomp.ie · published undated

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at chomp.ie Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
19
Words captured
4,322

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/chompie1337/SIGRed_RCE_PoC
github.com
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1350
msrc.microsoft.com
https://twitter.com/sagitz_
twitter.com
https://research.checkpoint.com/2020/resolving-your-way-into-domain-admin-exploiting-a-17-year-old-bug-in-windows-dns-servers/
research.checkpoint.com
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups
docs.microsoft.com
https://en.wikipedia.org/wiki/List_of_DNS_record_types
en.wikipedia.org
https://serverfault.com/questions/991520/how-is-truncation-performed-in-dns-according-to-rfc-1035
serverfault.com
https://datafarm-cybersecurity.medium.com/exploiting-sigred-cve-2020-1350-on-windows-server-2012-2016-2019-80dd88594228
datafarm-cybersecurity.medium.com
https://en.wikipedia.org/wiki/Address_space_layout_randomization
en.wikipedia.org
https://docs.microsoft.com/en-us/windows/win32/dns/dns-constants
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/secbp/control-flow-guard
docs.microsoft.com
https://improsec.com/tech-blog/bypassing-control-flow-guard-in-windows-10
improsec.com
https://en.wikipedia.org/wiki/Return-oriented_programming
en.wikipedia.org
https://twitter.com/maxpl0it
twitter.com
https://github.com/maxpl0it/CVE-2020-1350-DoS
github.com
https://twitter.com/sleepya_
twitter.com
https://twitter.com/33y0re
twitter.com
https://twitter.com/m417z
twitter.com
https://winbindex.m417z.com/
winbindex.m417z.com