pentestercrab

8 ms·

31.
by pentestercrab 2y ago
From the article: Our leading theory is that the Great Firewall inside China is manipulating DNS responses due to blacklisted or blocked keywords. This affects any system that has to pass through the Great Firewall before it reaches the end
32.
Insecurity Through Censorship: Vulnerabilities Caused by the Great Firewall(assetnote.io)
2 points by pentestercrab 2y ago|1 comments
33.
Insecurity Through Censorship: Vulnerabilities Caused by the Great Firewall(assetnote.io)
4 points by pentestercrab 2y ago|0 comments
34.
by pentestercrab 2y ago
I have to agree with you. It is a shame the classic style isn’t available at an alternate subdomain or directory. Has anyone tried rendering the current docs with the old theme?
35.
Fuzz Map – fuzzer for GUIs that automatically builds a visual map(fuzzmap.io)
1 points by pentestercrab 2y ago|0 comments
36.
nastystereo.com(nastystereo.com)
1 points by pentestercrab 2y ago|0 comments
37.
A Single File Ruby on Rails Application(greg.molnar.io)
3 points by pentestercrab 2y ago|4 comments
38.
Devfile file write vulnerability in Gitlab – walkthrough finding CVE-2024-0402(gitlab-com.gitlab.io)
3 points by pentestercrab 2y ago|0 comments
39.
Judge0 Sandbox Escape – allows obtaining root permissions(tantosec.com)
3 points by pentestercrab 2y ago|0 comments
40.
Discovering Deserialization Gadget Chains in Rubyland(blog.includesecurity.com)
2 points by pentestercrab 3y ago|0 comments
41.
Blind CSS Exfiltration: exfiltrate unknown web pages(portswigger.net)
2 points by pentestercrab 3y ago|0 comments
42.
Talkback: Keeping up with the pwnses, a next gen infosec resource aggregator(elttam.com)
1 points by pentestercrab 3y ago|0 comments
43.
Talkback – infosec resource aggregator of news and research(talkback.sh)
2 points by pentestercrab 4y ago|0 comments
44.
PHP filter chains: file read from error-based oracle(synacktiv.com)
1 points by pentestercrab 4y ago|0 comments
45.
PHP Development Server <= 7.4.21 – Remote Source Disclosure(blog.projectdiscovery.io)
1 points by pentestercrab 4y ago|0 comments
46.
Viewing Secrecy Through “Blank Spots on the Map” (2009)(fas.org)
4 points by pentestercrab 4y ago|0 comments
47.
The search for the “perfect” Advent Calendar (2018)(blog.jgc.org)
1 points by pentestercrab 4y ago|0 comments
48.
RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass(h1pmnh.github.io)
1 points by pentestercrab 4y ago|0 comments
49.
Reverse Branch Target Buffer Poisoning – New ASLR Bypass via CPU Vulns [pdf](cos.ufrj.br)
3 points by pentestercrab 4y ago|0 comments
50.
The latest OpenSSL vulns were added fairly recently(twitter.com)
179 points by pentestercrab 4y ago|73 comments
51.
Ask HN: How are you, a dev/programmer, preparing for climate change?
3 points by pentestercrab 4y ago|2 comments
52.
It Pays to Be Circomspect(blog.trailofbits.com)
3 points by pentestercrab 4y ago|1 comments
53.
Attacking Firecracker: AWS' MicroVM Monitor Written in Rust(graplsecurity.com)
212 points by pentestercrab 4y ago|29 comments
54.
by pentestercrab 4y ago
One idea, maybe using file instead of virtual will avoid the bug and not require your added code.  Also, be careful of any moves to supporting dynamic content as Server Side In
55.
Multiple vulnerabilities in Nuki smart locks(research.nccgroup.com)
3 points by pentestercrab 4y ago|0 comments
56.
Golang Code Review Notes by Elttam(elttam.com)
2 points by pentestercrab 4y ago|0 comments
57.
Notes on OpenSSL remote memory corruption by Guido Vranken(guidovranken.com)
85 points by pentestercrab 4y ago|13 comments
58.
ESP-IDF Setup Guide – Setting up an environment for ESP32 vulnerability research(elttam.com)
2 points by pentestercrab 4y ago|0 comments
59.
Round Two: An Updated Universal Deserialisation Gadget for Ruby 2.x-3.x(devcraft.io)
1 points by pentestercrab 4y ago|0 comments
60.
Git honours embedded bare repos and exploitation via core.fsmonitor(github.com)
1 points by pentestercrab 4y ago|0 comments

More ›