Stories by pentestercrab

nastystereo.com

Devfile file write vulnerability in Gitlab – walkthrough finding CVE-2024-0402

Judge0 Sandbox Escape – allows obtaining root permissions

Discovering Deserialization Gadget Chains in Rubyland

Blind CSS Exfiltration: exfiltrate unknown web pages

Talkback: Keeping up with the pwnses, a next gen infosec resource aggregator

Talkback – infosec resource aggregator of news and research

PHP filter chains: file read from error-based oracle

PHP Development Server <= 7.4.21 – Remote Source Disclosure

Viewing Secrecy Through “Blank Spots on the Map” (2009)

The search for the “perfect” Advent Calendar (2018)

RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass

Reverse Branch Target Buffer Poisoning – New ASLR Bypass via CPU Vulns [pdf]

The latest OpenSSL vulns were added fairly recently

Ask HN: How are you, a dev/programmer, preparing for climate change?

It Pays to Be Circomspect

Attacking Firecracker: AWS' MicroVM Monitor Written in Rust

Multiple vulnerabilities in Nuki smart locks

Golang Code Review Notes by Elttam

Notes on OpenSSL remote memory corruption by Guido Vranken

1
2
3
4
5
6
7
8
9