Leaflet to [email protected]English • 1 month agoAttacking UNIX Systems via CUPS, Part I | CUPS Remote Code Executionwww.evilsocket.netexternal-linkmessage-square34fedilinkarrow-up1171arrow-down15file-textcross-posted to: hackernewsnetseclinuxblueteamseccybersecurity
arrow-up1166arrow-down1external-linkAttacking UNIX Systems via CUPS, Part I | CUPS Remote Code Executionwww.evilsocket.netLeaflet to [email protected]English • 1 month agomessage-square34fedilinkfile-textcross-posted to: hackernewsnetseclinuxblueteamseccybersecurity
minus-squaremasterofn001linkfedilink7•1 month agoThey’re standardised zeroconnf protocols. Apple was part of the early development. Bonjour is the apple implementation for mDNS. Avahi is the GPL compliant implementation. mDNS, llmnr (ms developed), have been known for ages to be vulnerable. https://en.m.wikipedia.org/wiki/Zero-configuration_networking#Standardization *I don’t like apple
minus-squaremasterofn001linkfedilink3•edit-21 month agohttps://duckduckgo.com/?q=mdns+vulnerability&t=fpas&ia=web https://book.hacktricks.xyz/generic-methodologies-and-resources/pentesting-network/spoofing-llmnr-nbt-ns-mdns-dns-and-wpad-and-relay-attacks
minus-square@[email protected]linkfedilink0•1 month agoI could similarly link you an internet search for http or tls vulnerability, I fail to see your point
They’re standardised zeroconnf protocols. Apple was part of the early development.
Bonjour is the apple implementation for mDNS.
Avahi is the GPL compliant implementation.
mDNS, llmnr (ms developed), have been known for ages to be vulnerable.
https://en.m.wikipedia.org/wiki/Zero-configuration_networking#Standardization
*I don’t like apple
To be vulnerable to what?
https://duckduckgo.com/?q=mdns+vulnerability&t=fpas&ia=web
https://book.hacktricks.xyz/generic-methodologies-and-resources/pentesting-network/spoofing-llmnr-nbt-ns-mdns-dns-and-wpad-and-relay-attacks
I could similarly link you an internet search for http or tls vulnerability, I fail to see your point