Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/wdormann/statuses/113986776866984056">Will Dormann (wdormann@infosec.exchange)'s status on Wednesday, 12-Feb-2025 04:07:26 JST</a><a href="https://infosec.exchange/@wdormann" title="wdormann@infosec.exchange"><img src="https://gnusocial.jp/avatar/232810-48-20240116185707.webp" width="48" height="48" alt="Will Dormann" style="position: absolute; left: 0; top: 0;">Will Dormann</a><div><a href="https://infosec.exchange/@wdormann/113986348078181534" rel="in-reply-to">in reply to</a></div></section><article><p>With the release of ICS 22.7R2.6, Ivanti has apparently discovered the value of compiling in exploit mitigations. (many of which have been around for 22 years)</p><p>With R2.6, the web server, despite still being 32-bit, has stack canaries, full relro, and some fortify.</p><p>Baby steps, I suppose...</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4548019#notice-8904026">In conversation</a><time datetime="2025-02-12T04:07:26+09:00" title="Wednesday, 12-Feb-2025 04:07:26 JST">about 3 months ago</time> <span>from <span><a href="https://infosec.exchange/@wdormann/113986776866984056" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@wdormann/113986776866984056">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/4120350">checksec.py output for R2.5 web binary
no canary
partial relro
no fortify</a></label><br><a href="https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/986/754/473/889/014/original/e090677bd3fc279a.png" rel="external">https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/986/754/473/889/014/original/e090677bd3fc279a.png</a></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/4120351">checksec.py output for R2.6 web binary
stack canary
full relro
some fortify</a></label><br><a href="https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/986/755/259/795/114/original/2d2a9d7d0878776c.png" rel="external">https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/986/755/259/795/114/original/2d2a9d7d0878776c.png</a></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Will Dormann (wdormann@infosec.exchange)'s status on Wednesday, 12-Feb-2025 04:07:26 JST Will Dormann
in reply to
With the release of ICS 22.7R2.6, Ivanti has apparently discovered the value of compiling in exploit mitigations. (many of which have been around for 22 years)
With R2.6, the web server, despite still being 32-bit, has stack canaries, full relro, and some fortify.
Baby steps, I suppose...
In conversationabout 3 months ago from infosec.exchangepermalink
Attachments
1. checksec.py output for R2.5 web binary no canary partial relro no fortify
  https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/986/754/473/889/014/original/e090677bd3fc279a.png
2. checksec.py output for R2.6 web binary stack canary full relro some fortify
  https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/986/755/259/795/114/original/2d2a9d7d0878776c.png

Public

Embed Notice

HTML Code

Corresponding Notice