Search the Community

Parrot is a security-oriented operating system, which is designed for infiltration testing, computer forensics, reverse engineering, attack, cloud penetration testing, privacy / anonymous, password, and other occasions. The release is based on Debian, which features the MATE desktop environment and was developed by the Frozen box network. The team announces the release of Parrot 5.2, a security-oriented operating system designed for penetration testing, computer forensics, reverse engineering, attacks, cloud penetration testing, privacy/anonymity, passwords, and more. The distribution is based on Debian, which features the MATE desktop environment and was developed by the Frozen box network. Changelog v5.2 The Calamares installer received several important updates to fix common installation issues. The Linux kernel was updated to version 6.0 Several security updates were included to fix important bugs to Firefox, Chromium, sudo, dbus, nginx, libssl, openjdk and xorg. Anonsurf, our popular anonymity tool, now includes better support to TOR bridges. Wireless drivers for several Broadcom and Realtek cards not supported by debian received a major upgrade to include support for the 6.x Linux kernel, along with Virtualbox and Nvidia drivers Pipewire, the popular pulseaudio alternative, fixed several stability bugs with a new version backported from Debian backports The Raspberry Pi images received important updates to improve system performance and fix the audio drivers The HackTheBox edition received minor graphical updates. [hide][Hidden Content]]

This paper and proof of concept describes the Wiederganger-Attack, a new attack vector that reliably allows to escalate unbounded array access vulnerabilities occurring in specifically allocated memory regions to full code execution on programs running on i386/x86_64 Linux. Wiederganger-attacks abuse determinism in Linux ASLR implementation combined with the fact that (even with protection mechanisms such as relro and glibc's pointer mangling enabled) there exist easy-to-hijack, writable (function) pointers in application memory. View the full article