Ancestors

Toot

Written by Kevin Jones on 2024-10-19 at 16:51

=> View attached media

=> More informations about this toot | More toots from vcsjones@infosec.exchange

Descendants

Written by Heath Stewart on 2024-10-19 at 16:53

@vcsjones what? It’s not throwing - or throwing unexpected exception types - on fuzz?

=> More informations about this toot | More toots from heaths@fosstodon.org

Written by Kevin Jones on 2024-10-19 at 17:00

@heaths well, the constructors are deprecated now.

You can pretty much throw anything "certificate like" at that constructor and it will dig a certificate out of it. Give it an Authenticode signed PE and it will yank the certificate out of the signature.

=> More informations about this toot | More toots from vcsjones@infosec.exchange

Written by Jeff Handley on 2024-10-20 at 00:55

@vcsjones @heaths I'm curious if that meme was in reaction to this issue. https://github.com/dotnet/runtime/issues/109046

=> More informations about this toot | More toots from jeffhandley@hachyderm.io

Written by Kevin Jones on 2024-10-20 at 02:22

@jeffhandley @heaths whistles who knows.

=> More informations about this toot | More toots from vcsjones@infosec.exchange