u/soupcreamychickenin r/ReverseEngineering • Recommends
Stream:October 21 at 9:30 PM Modern Binary/Patch Diffing!
0:00 / 0:00
#binarydiffing#patchdiffing#ghidra
Modern Binary/Patch Diffing!
Off By One Security
52K subscribers • 3 videos on Hallway
- Recommended by 1 person: 1 in engineering communities.
Advanced. Deep dive for people who know the field.
7.2K views4 years ago1 recommendation
SecuritySystems programmingReverse engineeringExploits and vulnerabilitiesWeb and application security
A demonstration of downloading Microsoft cumulative updates and diffing patches to identify and weaponize vulnerabilities.
In this stream I will demonstrate the process of downloading Microsoft cumulative updates to extract the patches and prep them for diffing. It's a very useful way to identify patched vulnerabilities that can potentially be weaponized for exploitation of unpatched systems, as well as learning how vulnerabilities are patched to aid in bug hunting. The majority of organizations are slow to patch, and so the faster you can weaponize a patched vulnerability, the more useful it is.