BLUE
WD
Will Dormann is on Mastodon
@wdormann.bsky.social
I play with vulnerabilities and exploits. While this site initially showed promise, I've grown tired with its lack of improvement. You'll find me @wdormann@infosec.exchange on Mastodon.
929 followers177 following112 posts
WDwdormann.bsky.social

This is just a spot check of a few execuables on the system. I didn't even look at any of the libraries. If customers knew what they were purchasing, do you think they'd go through with the purchase? Imagine a complete SBOM for *everything* on the box...

1

WDwdormann.bsky.social

Just to clarify, when I say "on a current Ivanti VPN box", this is what comes with the VMware version of the appliance that Ivanti provides for download, which is a 2023 version of the software. There may be some upgraded packages with newer versions of the Ivanti software. YMMV.

0
WD
Will Dormann is on Mastodon
@wdormann.bsky.social
I play with vulnerabilities and exploits. While this site initially showed promise, I've grown tired with its lack of improvement. You'll find me @wdormann@infosec.exchange on Mastodon.
929 followers177 following112 posts