Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mastodon.social/users/Ange/statuses/113157714951287007">Ange (ange@mastodon.social)'s status on Wednesday, 18-Sep-2024 17:55:19 JST</a><a href="https://mastodon.social/@Ange" title="ange@mastodon.social"><img src="https://gnusocial.jp/avatar/82636-48-20221230053327.webp" width="48" height="48" alt="Ange" style="position: absolute; left: 0; top: 0;">Ange</a><div><a href="https://mastodon.social/@Ange/113157585067803889" rel="in-reply-to">in reply to</a></div></section><article><p>CRC-forging is also useful to collide arbitrary contents inside a ZIP archive. It makes possible re-usable and instant MD5 collisions for ZIP-based documents such as DOCX, XLSX, EPUB, XPS, 3MF.<br><a href="https://speakerdeck.com/ange/inside-out-abusing-archive-file-formats" rel="nofollow noreferrer">https://speakerdeck.com/ange/inside-out-abusing-archive-file-formats</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/3687652#notice-7224147">In conversation</a><time datetime="2024-09-18T17:55:19+09:00" title="Wednesday, 18-Sep-2024 17:55:19 JST">about 8 months ago</time> <span>from <span><a href="https://mastodon.social/@Ange/113157714951287007" rel="external" title="Sent from mastodon.social via ActivityPub">mastodon.social</a></span></span><a href="https://mastodon.social/@Ange/113157714951287007">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: files.speakerdeck.com</div><h5><a href="https://speakerdeck.com/ange/inside-out-abusing-archive-file-formats">Inside out - abusing archive file formats</a></h5><div> from <span>Ange Albertini</span></div></header><div>If a format structure isn't vulnerable, can that change once wrapped in an archive?File formats abuses depend on specific structure characteristics,…</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Ange (ange@mastodon.social)'s status on Wednesday, 18-Sep-2024 17:55:19 JST Ange
in reply to
CRC-forging is also useful to collide arbitrary contents inside a ZIP archive. It makes possible re-usable and instant MD5 collisions for ZIP-based documents such as DOCX, XLSX, EPUB, XPS, 3MF.
https://speakerdeck.com/ange/inside-out-abusing-archive-file-formats
In conversationabout 8 months ago from mastodon.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: files.speakerdeck.com
  Inside out - abusing archive file formats
  from Ange Albertini
  If a format structure isn't vulnerable, can that change once wrapped in an archive? File formats abuses depend on specific structure characteristics,…

Public

Embed Notice

HTML Code

Corresponding Notice