<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>TheXploit &#124; Security Blog</title>
	<atom:link href="http://thexploit.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://thexploit.com</link>
	<description></description>
	<lastBuildDate>Sun, 05 May 2013 01:00:57 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
		<item>
		<title>T-Mobile 4G Hotspot Multiple Vulnerabilities</title>
		<link>http://thexploit.com/secdev/t-mobile-4g-hotspot-multiple-vulnerabilities/</link>
		<comments>http://thexploit.com/secdev/t-mobile-4g-hotspot-multiple-vulnerabilities/#comments</comments>
		<pubDate>Fri, 22 Feb 2013 00:05:16 +0000</pubDate>
		<dc:creator>Dustin Schultz</dc:creator>
				<category><![CDATA[Security Development]]></category>
		<category><![CDATA[mobile security]]></category>
		<category><![CDATA[secdev]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">https://secure.thexploit.com/?p=1619</guid>
		<description><![CDATA[About &#8220;Create your own personal hotspot on the go with the T-Mobile 4G Mobile Hotspot—get high-speed Internet on up to five Wi-Fi devices, using a single mobile broadband connection.&#8221; Link to Product on T-Mobile&#8217;s Website Timeline Reported to T-Mobile and ZTE on 4/14/12. Received notification from T-Mobile on 4/17/12 that the vulnerabilities would be forwarded [...]]]></description>
		<wfw:commentRss>http://thexploit.com/secdev/t-mobile-4g-hotspot-multiple-vulnerabilities/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>My Plea to Oracle: Axe Java Applets</title>
		<link>http://thexploit.com/blog/my-plea-to-oracle-axe-java-applets/</link>
		<comments>http://thexploit.com/blog/my-plea-to-oracle-axe-java-applets/#comments</comments>
		<pubDate>Wed, 20 Feb 2013 15:58:13 +0000</pubDate>
		<dc:creator>Dustin Schultz</dc:creator>
				<category><![CDATA[Blog]]></category>
		<category><![CDATA[applets]]></category>
		<category><![CDATA[java]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">https://secure.thexploit.com/?p=1600</guid>
		<description><![CDATA[Hi Oracle, We&#8217;ve got a bit of problem: applets. You see, almost every recent security vulnerability and recent hack &#8211; Facebook, Apple, NYT &#8211; has been because of your support for applets. Just to name a few, there&#8217;s CVE-2012-3213,CVE-2012-3342,CVE-2013-0351,CVE-2013-0409,CVE-2013-0419,CVE-2013-0423,CVE-2013-0424,CVE-2013-0425,CVE-2013-0426,CVE-2013-0427,CVE-2013-0428,CVE-2013-0429,CVE-2013-0432,CVE-2013-043,CVE-2013-0434,CVE-2013-0435,CVE-2013-0438,CVE-2013-0440,CVE-2013-0441,CVE-2013-0442,CVE-2013-0443,CVE-2013-0445,CVE-2013-0450,CVE-2013-1473,CVE-2013-1475,CVE-2013-1476,CVE-2013-1478,CVE-2013-1480,CVE-2013-1481,CVE-2013-1486,CVE-2013-1487,CVE-2013-1488. I&#8217;ve been developing in Java for many years and I can attest that nobody uses applets [...]]]></description>
		<wfw:commentRss>http://thexploit.com/blog/my-plea-to-oracle-axe-java-applets/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>Java Facepalm</title>
		<link>http://thexploit.com/sec/java-facepalm/</link>
		<comments>http://thexploit.com/sec/java-facepalm/#comments</comments>
		<pubDate>Tue, 28 Aug 2012 03:08:13 +0000</pubDate>
		<dc:creator>Dustin Schultz</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Security Development]]></category>
		<category><![CDATA[Security News]]></category>

		<guid isPermaLink="false">https://secure.thexploit.com/?p=1547</guid>
		<description><![CDATA[It&#8217;s been a while since I&#8217;ve blogged but I couldn&#8217;t resist with the latest Java vulnerability. I saw the proof of concept code posted by jduck last night (here) and thought this looks like normal Java code to me (I develop in Java at my day job). Well it turns out&#8230;this is normal Java code! [...]]]></description>
		<wfw:commentRss>http://thexploit.com/sec/java-facepalm/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>50 Byte x86_64 OS X setuid execve Null Free Shellcode</title>
		<link>http://thexploit.com/sec/50-byte-x86_64-os-x-setuid-execve-null-free-shellcode/</link>
		<comments>http://thexploit.com/sec/50-byte-x86_64-os-x-setuid-execve-null-free-shellcode/#comments</comments>
		<pubDate>Fri, 13 Apr 2012 04:32:07 +0000</pubDate>
		<dc:creator>Dustin Schultz</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Security Development]]></category>
		<category><![CDATA[shellcode]]></category>

		<guid isPermaLink="false">https://secure.thexploit.com/?p=1527</guid>
		<description><![CDATA[More smaller shellcode, this time, tested and verified working on OSX 10.7. Shellcode Source ; File: setuid_shell_x86_64.asm ; Author: Dustin Schultz - TheXploit.com BITS 64 section .text global start start: mov r8b, 0x02 ; Unix class system calls = 2 shl r8, 24 ; shift left 24 to the upper order bits or r8, 0x17 [...]]]></description>
		<wfw:commentRss>http://thexploit.com/sec/50-byte-x86_64-os-x-setuid-execve-null-free-shellcode/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Finding the syscall implementations in OS X</title>
		<link>http://thexploit.com/secdev/finding-the-syscall-implementations-in-os-x/</link>
		<comments>http://thexploit.com/secdev/finding-the-syscall-implementations-in-os-x/#comments</comments>
		<pubDate>Thu, 05 Apr 2012 04:14:44 +0000</pubDate>
		<dc:creator>Dustin Schultz</dc:creator>
				<category><![CDATA[Security Development]]></category>

		<guid isPermaLink="false">https://secure.thexploit.com/?p=1519</guid>
		<description><![CDATA[This is mainly just a little note for myself. Sometimes when I&#8217;m writing shellcode, I&#8217;m interested in how OS X implements the syscalls internally. It&#8217;s easy to find out with a command like this: dustin@sholtz:~$ otool -tv /usr/lib/system/libsystem_kernel.dylib &#124; grep -A10 execve ___mac_execve: 0000000000016898 movl $0x0200017c,%eax 000000000001689d movq %rcx,%r10 00000000000168a0 syscall 00000000000168a2 jae 0x000168a9 00000000000168a4 [...]]]></description>
		<wfw:commentRss>http://thexploit.com/secdev/finding-the-syscall-implementations-in-os-x/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

 Served from: thexploit.com @ 2013-05-23 12:38:20 by W3 Total Cache -->