what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Roman Fiedler

Android Data Exfiltration

Posted Jun 28, 2021

Authored by Roman Fiedler | Site unparalleled.eu

This is a tool that was developed to run as alternative "/init". The program will make an Android phone show up as mass storage device during boot. The complete internal storage is available for reading including the partition table and all 42 partitions of the Android system.

tags | exploit

SHA-256 | 26d0ccdaf2d09a37294e6090603335263cb221373194e10a191870af77f5fe23

Download | Favorite | View

libX11 Insufficient Length Check / Injection

Posted May 21, 2021

Authored by Roman Fiedler | Site unparalleled.eu

A missing length check in libX11 allows data from LookupColor requests to mess up the client-server communication protocol and inject malicious X server requests.

tags | exploit, protocol

advisories | CVE-2021-31535

SHA-256 | 11761ba0cb40d006d1d9f835688853c9f235d462bc42a8503f286b6871a81294

Download | Favorite | View

Firejail TOCTOU Race Condition

Posted Feb 19, 2021

Authored by Roman Fiedler | Site unparalleled.eu

This program demonstrates a time-of-check-time-of-use TOCTOU vulnerability in Firejail. Winning it causes Firejail to create an insecure overlayfs layout, that is then used to escalate privileges by making /etc/ld.so.preload user writable.

tags | exploit

SHA-256 | adefafe1c85cc2ef526eedeae1ad122c13edd91a2e7eeb35bc0f9aa07cfe03e9

Download | Favorite | View