@Y4er_ChaBug

Happy!

Y4er.com
Joined November 2019
  • Tweets147
  • Following383
  • Followers4.6K
27Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Chinese-linked actors are targeting edge devices across Southeast Asia, leveraging DoH for C2 communications and large-scale DNS hijacking via iptables. See details: EN: qiita.com/Y4er/items/0b60717… CN: qiita.com/Y4er/items/549cfca…

INTRUSION ANALYSIS: China-Nexus Adversary Targeting Southeast Asian Edge Network Infrastructure -...

THREAT INTELLIGENCE REPORT INTRUSION ANALYSIS: China-Nexus Adversary Targeting Southeast Asian Edge Network Infrastructure Report ID: T...

qiita.com
1
22
1
64
7,747
Replying to @DarkNavyOrg @BlackHatEvents
?
556
This is friend’s analysis of the SolarWinds SEM RCE I discovered.
X1r0z@X1r0z5 Mar 2024
My detailed analysis report of SolarWinds Security Event Manager AMF Deserialization RCE (CVE-2024-0692), with two methods to achieve RCE exp10it.io/2024/03/solarwind… xz.aliyun.com/t/14044
6
54
12,676
Replying to @wvuuuuuuuuuuuuu
In fact, the deserialization entry is obvious, and finding the appropriate gadget is the key.
1
1
4
1,822
Replying to @wvuuuuuuuuuuuuu
haha,you got this🤪
1
610
Replying to @testanull @sourceincite
hahaha
1
323
Replying to @sourceincite
Bug fixes in the real world.
3
1
14
1,802
demo
5
2
49
8,138
公开了一些文章 VMware vROPS RCE of java bean y4er.com/posts/vmware-vrops-… VMware vROPS 文件读取到反序列化RCE y4er.com/posts/vmware-vrops-… Apache Geode/VMware GemFire Deserialize RCE y4er.com/posts/apache-geode-… Trend Micro Mobile Security 认证绕过/文件上传/文件包含 RCE y4er.com/posts/trend-micro-m…

VMware vROPS RCE of java bean | Y4er

前言 这个漏洞是看了mrme的文章之后 顺手看了看vROPS，发现也存在这个漏洞，于是有此文，漏洞比较简单，下面简单写一下。这是一个授权后的RCE漏洞。

y4er.com
7
47
1
188
21,057
Replying to @MCKSysAr @W01fh4cker
it doesn't work by default,need administrator config ldap setting first.
2
1
156
SysAid On-Prem Software CVE-2023-47246 Reproduced
John Hammond
@_JohnHammond9 Nov 2023
We've recreated a proof-of-concept for the SysAid CVE-2023-47246 remote code execution and compromise -- blog post coming ASAP😜 Big thanks to @gleeda @HuskyHacksMK @DaveKleinatland @calebjstewart and the whole @HuntressLabs crew helping dig into this one!
2
4
50
17,897
Replying to @_JohnHammond
Nice job, can you share the trial license?
899
Replying to @suanve
还敢交洞？立马没收违法所得
2
1
17
2,785
fuck js
andrej
@reactive_dude8 Sep 2023
JavaScript in the glorious spirit it was originally designed
10
4,028
Replying to @steventseeley @VietPetrus
Haha, maybe just know how to ask ChatGPT🤣
1
2
829
Replying to @VietPetrus
I think both are needed😄
1
1
568
CVE-2023-39476 Inductive Automation Ignition JavaSerializationCodec Deserialization RCE xz.aliyun.com/t/12813
4
52
2
134
23,227
After two days, I finally reproduced the CVE-2023-39476 Inductive Automation Ignition JavaSerializationCodec Deserialization RCE vulnerability submitted to ZDI by @steventseeley
4
13
3
108
21,458
Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP .NET Framework (CVE-2023-36899) soroush.me/blog/2023/08/cook… #Appsec #bugbountytips
6
176
4
422
68,471
Actually, I can still use the `init` attack vector like this
Calif
@calif_io27 Jul 2023
Reproducing CVE-2023-38646: Metabase Pre-auth RCE blog.calif.io/p/reproducing-… CC @peterjson @testanull

Reproducing CVE-2023-38646: Metabase Pre-auth RCE

By Duc Nguyen and Jang Nguyen

blog.calif.io
1
4
36
10,577
Load more