Posts

Showing posts with the label Information Security

OpenWRT: Bouncing Back from a Failed SSL Library Crossgrade

Image
In the event of a failed crossgrade between SSL libraries (e.g. OpenSSL to Mbed TLS ) on an OpenWRT installation, it's likely that poor opkg will be left in a Catch 22 situation: How can it install an SSL library when it needs an SSL library to install one? Well… Instructions: This will temporarily weaken your OpenWRT device's security. Connect to the OpenWRT device in question over SSH from another device which is on the same local area network. Open the file /etc/opkg.conf in a text editor and change option check_signature 1 to option check_signature 0 . Open the file /etc/opkg/distfeeds.conf in a text editor and change the scheme of each URL from https to http If it was the installation or upgrade of a specific package that caused the failed crossgrade e.g. luci-ssl , resume that process by running the relevant command e.g. opkg install luci-ssl or opkg upgrade luci-ssl . Otherwise, ensure that the packages ca-bundle , ca-certificates , and either libustream-mbedtls*...

Resolving Nonfatal Access Violation Error Spam in Cheat Engine

Image
While ASLR exploit mitigation has been present in Windows since Vista, it wasn't implemented as ubiquitously as it now is. Given the inherent nature of what Cheat Engine is , it's not exactly surprising that the two conflict with each other. Shut Up and Tell Me How to Fix It Open the start menu with Win , copy and paste explorer windowsdefender://ExploitProtection , and press Enter to open the Exploit Protection settings page within the Windows Security control panel. Navigate to the Program Settings tab and create the following entries via Choose exact file path in the dropdown that appears when making additions: Cheat Engine.exe cheatengine-i386.exe cheatengine-x86_64.exe cheatengine-x86_64-SSE4-AVX2.exe Kernelmoduleunloader.exe Upon adding an entry, you will be prompted with a list of possible settings to override: Disable mandatory ASLR and bottom-up ASLR for each one. I've provided a screenshot of my own control panel for refe...