[Blog] Abusing .NET Core CLR Diagnostic Features (+ CVE-2023-33127)
- Analysis of .NET diagnostic features and tradecraft
- Walkthrough of a .NET Cross-Session Local Priv Esc (LPE)
- Defensive Recommendations
I had the privilege of meeting O.J. Brigance on many occasions as a kid. He was always kind and thoughtful. His long battle with ALS truly personified his warrior spirit. Rest in peace, O.J.
To keep my family warm this winter, I’m replacing the HVAC with a self-hosted enterprise model on local hardware. The electric bill should be about the same anyway.
Find more just like everyone else?
Something we need to start talking about urgently: huge numbers of old software bugs are being found and closed right now. Intelligence and law enforcement agencies depend on these bugs for access. What are they going to do when this access is gone?
It's nice to see some technical write-ups out there that 1) seem partially human written and 2) actually reference sources.
#2 being the big one