Stories by pentestercrab

ESP-IDF Setup Guide – Setting up an environment for ESP32 vulnerability research

Round Two: An Updated Universal Deserialisation Gadget for Ruby 2.x-3.x

Git honours embedded bare repos and exploitation via core.fsmonitor

Ruby Deserialization Exploitation – New Gadget Chain for Ruby on Rails

Ask HN: Best Okta Alternative?

Exploitation via Git embedded bare repos and core.fsmonitor, affects IDEs

Impossible color – Claimed evidence of ability to see colors not in color space

Bypass of allowedLdapHost check in Log4j 2.15.0 – Log4Shell (CVE-2021-44228)

The search for the “perfect” Advent Calendar (involves Python and Processing)

Data Exfiltration via CSS and SVG Font

The status of Ruby memory trimming and how you can help with testing (2019)

FormatFuzzer: A framework for efficient and quality generation of binary inputs

Ruby Universal RCE Deserialization Gadget Chain (2018)

Fail2ban – Remote Code Execution

Petrov Day 2021: Mutually Assured Destruction?

Home Assistant Amber

GitHub Actions checkspelling community workflow GitHub_TOKEN leakage via symlink

Domino's iOS App Settings

A hackers perspective on bug bounty triage

DOM Invader: DOM XSS just got a whole lot easier to find

1
2
3
4
5
6
7
8
9