Free Sysinternals Windows utilities now available online, 24/7

Wednesday, May 28th, 2008

If you troubleshoot Windows PCs for fun or profit, then chances are you’ve used one or more tools from Sysinternals. Microsoft bought the company and its amazing library of diagnostic, troubleshooting, and management utilities in 2006, and the collection has been continually updated ever since. It’s also still completely free. A few weeks ...

Posted in General BS, Internet, Software, Windows | No Comments

PHP Multibyte Shell Command Escaping Bypass Vulnerability

Wednesday, May 7th, 2008

In PHP there exist two functions to escape shell commands or arguments to shell commands that are used in PHP applications to protect against shell command injection vulnerabilities. - escapeshellcmd() - escapeshellarg() Unfortunately it was discovered that both functions fail to protect against shell command injection when the shell uses a locale with ...

Posted in Coding, PHP, Security | No Comments