debbie@cromulence.com
Cromulence LLC (CROMU)
Microsoft first identified MS08-067 when it started being used 'in the wild' to spread a botnet. While this vulnerability was considered dangerous enough for Microsoft to elicit an out of band patch in October, the patch was not deployed widely enough and malware had great success propagating via this method for a long time afterwards.
The vulnerability, CVE-2008-4250, is a buffer overflow in the NetPathCanonicalize function of the Microsoft RPC Server. Microsoft compiled this code using stack protection techniques to prevent stack buffer overflows, but the unique characteristics of this bug allowed an attacker to bypass that protection and gain code execution anyway.
This service is based on the original Microsoft RPC server and contains a similar vulnerability. The service is accessed over an SMB like interface and supports multiple operation primitives including the NetPathCanonicalize service that allows access to the vulnerability.
This binary mimics the Microsoft RPC Server. It is accessed via the CGCMB protocol which is patterned after SMB as the transport protocol. After processing the CGCMB layer, the service handles the CGCRPC protocol which is patterned after Microsoft RPC.
Once a connection is established through these layered protocols, the service allows access to the file system through commands like listing the service types, getting file statistics, and canonicalizing the path name. Paths for this service use special characters to delineate the service primitive, nested directories, and filenames. Canonicalizing the path refers to removing any extraneous directories and directory traversal primitives to arrive at the most direct path to that particular file.
This vulnerability allows a stack based buffer overflow. The service that contains the buffer utilizes a stack canary to prevent exploitation via this method. However, the function containing the buffer passes a pointer to the stack buffer to another function that does not utilize stack canaries. While processing inside this secondary function, the program allows moving backwards before the start of the buffer and writing user controlled data which leads to overwriting the stack frame of the secondary function leading to execution control that bypasses the stack protection.
This vulnerability occurs during path canonicalization. When a directory traversal primitive is encountered, the program walks backwards through the path string to find the last known directory marker. In special circumstances, the program may walk farther back than the beginning of the buffer, thus allowing an out of bounds write on the stack.
Buffer overflow due to incorrect bounds calculation.
CWE-135 - Incorrect Calculation of Multi-Byte String Length
This vulnerability is not as straightforward as a simple buffer overflow. The CRS must determine the specific sequence of characters that allows the improper write to occur as well as correctly handle the buffer that exists in one stack frame to overwrite control in a separate stack frame. Since this bug bypasses traditional stack protection methods, automatic protections may not be as effective in preventing it. Finding: Medium Proving: Medium Patching: Medium
| Round | Source | Destination | Result | POV | Analysis | Video |
|---|---|---|---|---|---|---|
| 2 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 2 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 2 | CSDS | Disekt | Failed POV | POV | Watch | |
| 2 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 2 | CSDS | Shellphish | Failed POV | POV | Watch | |
| 2 | CSDS | TECHx | Failed POV | POV | Watch | |
| 2 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 2 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 2 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 2 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 2 | DeepRed | Shellphish | Failed POV | POV | Watch | |
| 2 | DeepRed | TECHx | Failed POV | POV | Watch | |
| 2 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 2 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 2 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 2 | ForAllSecure | Disekt | Failed POV | POV | Watch | |
| 2 | ForAllSecure | Shellphish | Failed POV | POV | Watch | |
| 2 | ForAllSecure | TECHx | Failed POV | POV | Watch | |
| 3 | CodeJitsu | Shellphish | Failed POV through defenses | POV | Watch | |
| 3 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 3 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 3 | CSDS | Disekt | Failed POV | POV | Watch | |
| 3 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 3 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 3 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 3 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 3 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 3 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 3 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 3 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 3 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 3 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 3 | ForAllSecure | Disekt | Failed POV | POV | Watch | |
| 3 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 4 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 4 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 4 | CSDS | Disekt | Failed POV | POV | Watch | |
| 4 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 4 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 4 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 4 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 4 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 4 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 4 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 4 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 4 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 4 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 4 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 4 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 4 | ForAllSecure | Disekt | Failed POV | POV | Watch | |
| 4 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 4 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 5 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 5 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 5 | CSDS | Disekt | Failed POV | POV | Watch | |
| 5 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 5 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 5 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 5 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 5 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 5 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 5 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 5 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 5 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 5 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 5 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 5 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 5 | ForAllSecure | Disekt | Failed POV | POV | Watch | |
| 5 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 5 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 6 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 6 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 6 | CSDS | Disekt | Failed POV | POV | Watch | |
| 6 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 6 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 6 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 6 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 6 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 6 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 6 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 6 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 6 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 6 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 6 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 6 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 6 | ForAllSecure | Disekt | Failed POV | POV | Watch | |
| 6 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 6 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 7 | CodeJitsu | Disekt | Failed POV through defenses | POV | ||
| 7 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 7 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 7 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 7 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 7 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 7 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 7 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 7 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 7 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 7 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 7 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 7 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 7 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 7 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 7 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 7 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 7 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 7 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 8 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 8 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 8 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 8 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 8 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 8 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 8 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 8 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 8 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 8 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 8 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 8 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 8 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 8 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 8 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 8 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 9 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 9 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 9 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 9 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 9 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 9 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 9 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 9 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 9 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 9 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 9 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 9 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 9 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 9 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 9 | ForAllSecure | DeepRed | Failed POV through defenses | POV | Watch | |
| 9 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 9 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 9 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 10 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 10 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 10 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 10 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 10 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 10 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 10 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 10 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 10 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 10 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 10 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 10 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 10 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 10 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 10 | ForAllSecure | DeepRed | Failed POV through defenses | POV | Watch | |
| 10 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 10 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 10 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 11 | CodeJitsu | DeepRed | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 11 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 11 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 11 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 11 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 11 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 11 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 11 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 11 | ForAllSecure | DeepRed | Failed POV through defenses | POV | Watch | |
| 11 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 11 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 11 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 12 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 12 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 12 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 12 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 12 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 12 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 12 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 12 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 12 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 12 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 13 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 13 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 13 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 13 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 13 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 13 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 13 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 13 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 13 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 13 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 14 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 14 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 14 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 14 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 14 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 14 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 14 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 14 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 14 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 14 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 15 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 15 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 15 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 15 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 15 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 15 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 15 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 15 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 15 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 15 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 16 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 16 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 16 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 16 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 16 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 16 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 16 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 16 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 16 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 16 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 17 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 17 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 17 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 17 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 17 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 17 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 17 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 17 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 17 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 17 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 18 | CodeJitsu | DeepRed | Failed POV through defenses | POV | ||
| 18 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 18 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 18 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 18 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 18 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 18 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 18 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 18 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 18 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 18 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 18 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 18 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 18 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 19 | CodeJitsu | DeepRed | Failed POV through defenses | POV | ||
| 19 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 19 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 19 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 19 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 19 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 19 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 19 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 19 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 19 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 19 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 19 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 19 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 19 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 19 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 19 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 20 | CodeJitsu | DeepRed | Failed POV through defenses | POV | ||
| 20 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 20 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 20 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 20 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 20 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 20 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 20 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 20 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 20 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 20 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 20 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 20 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 20 | ForAllSecure | Disekt | Failed POV through defenses | POV (disassembly) | Watch | |
| 20 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 20 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 21 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 21 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 21 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 21 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 21 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 21 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 21 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 21 | ForAllSecure | Disekt | Failed POV through defenses | POV (disassembly) | Watch | |
| 21 | ForAllSecure | Shellphish | Successful POV through defenses | POV | Analysis | Watch |
| 21 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 22 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 22 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 22 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 22 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 22 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 22 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 22 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 22 | ForAllSecure | Disekt | Failed POV through defenses | POV (disassembly) | Watch | |
| 22 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 22 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 23 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 23 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 23 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 23 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 23 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 23 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 23 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 23 | ForAllSecure | DeepRed | Failed POV through defenses | POV | Watch | |
| 23 | ForAllSecure | Disekt | Successful POV through defenses | POV (disassembly) | Analysis | Watch |
| 23 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 23 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 24 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 24 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 24 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 24 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 24 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 24 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 24 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 24 | ForAllSecure | DeepRed | Failed POV through defenses | POV | Watch | |
| 24 | ForAllSecure | Disekt | Failed POV through defenses | POV (disassembly) | Watch | |
| 24 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 24 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 25 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 25 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 25 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 25 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 25 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 25 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 25 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 25 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 25 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 25 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 25 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 25 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 25 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 25 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 25 | ForAllSecure | DeepRed | Failed POV through defenses | POV | Watch | |
| 25 | ForAllSecure | Disekt | Successful POV through defenses | POV (disassembly) | Analysis | Watch |
| 25 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 25 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch |
Curated by Lunge Technology, LLC. Questions or comments? Send us email