Color me impressed with Ghidra. Just stuff like this alone is worth it over IDA. No more fumbling over getting function prototype syntax just right to IDA's liking.pic.twitter.com/MQfprAfOuK
Show this thread
-
Ghidra opens up JDWP in debug mode listening on port 18001, you can use it to execute code remotely
.. to fix change line 150 of support/launch.sh from * to 127.0.0.1 https://static.hacker.house/releasez/expl0itz/jdwp-exploit.txt …
I wonder if we can trust the NSA... (especially because it looks like no source code has been released yet)
Only in debug mode. I wish people stopped linking that stupid thing as if it were some horrible RCE. This isn't the first app that randomly listens on 0.0.0.0 for some debug feature that isn't on by default.
-
-
Yes, the default should be 127.0.0.1, but everyone keeps linking to this like it's some massive bug or big deal. Nobody cares unless you're developing Ghidra, and if you don't have a firewall joke's on you.
End of conversation
New conversation
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.