Alireza Gharib Blog

Category: exploitation

January 22, 2025

TOCTOU Vulnerability in Log4J 2.15

Log4J has been in the spotlight for the past two weeks for a new attack vector which relies on Java Naming and Directory Interface (JNDI). In this blog, we will detail the new mitigation introduced in 2.15 and the bypass we found using a Time of Check, Time of Use vulnerability (TOCTOU). This vector was also discovered independently…

Cybersecurity, Cybersecurity awareness, exploitation, Forensics, java, Log4J, Security, Security Awareness, Security Awareness 3.0

#bypass, #jndi
January 22, 2025

Automating local DTD discovery for XXE exploitation

Last month, we presented at Hack In Paris (France) a XML External Entities (XXE) exploitation workshop. It showcase methods to exploit XXE with numerous obstacles. Today, we present our method to exploit XXEs with a local Document Type Declaration (DTD) file. More specifically, how we built a huge list of reusable DTD files. XML External…

Cybersecurity, Cybersecurity awareness, exploitation, Forensics, Security, Security Awareness, Security Awareness 3.0

#burp, #implied, #tool, #xml