Osandamalith.com Website Review

recently i was interested in exploring the pe headers and writing simple programs to manipulate different headers. there are thousands   handle                hfile;   puchar                mappedaddress;   boolean               fsystemimage;   boolean               fdosimage;   boolean               freadonly;   uchar                 version; i fired up windbg and had a close a look how these look like with mapped memory addresses. i brought a 4g modem from ee to browser internet when i’m outside. it’s a portable 4g wifi mobile broadband modem as seen below. one day i had a look at my services installed on my computer for troubleshooting a problem and i saw a strange service named “alcatel 4g wifi modem. then after a bit of googling, i realized that the modem was manufactured by alcatel. i had a look at the service installed just for curiosity and found that that there is an unquoted service path vulnerability. but you can’t directly write files because of folder permissions. i first thought this issue is useless to be reported. but just to be sure i had a look at the folder permissions of the “ee40” folder and w00t! it had been set to “everyone:(oi)(ci)(f)” which means any user can read, write, execute, create, delete do anything inside that folder and it’s subfolders. the acl rules had oi – object inherit and ci – container inherit which means all the files in this folder and subfolders have full permissions. recently i tweeted a screenshot where i won the minesweeper game by looking at the mine field from the memory. i posted this for no reason, just for fun since i was happy that i finally won this game. i used to play this game back in 2002 in windows xp and i never won this game, i never even understood how this game works until today when i read how it really works