Un an de requêtes ChatGPT consomme moins d'eau que la fabrication d'un jean. Enquête sourcée (et non l'eau 🤡) sur ce que l'IA boit vraiment : zeecka.fr/fr/blog/ia_eau/
Stop memorizing Vim and Tmux. Start speedrunning it!
I built two games that teach real terminal skills:
🟣 vimlegends.com - 🟢 tmuxlegends.com
Zeecka 🥀 retweeted
Bypassing TLS Verification on Nintendo Switch by Yannik Marchand reversing.live/sslbypass.htm…
Zeecka 🥀 retweeted
Huge computer science result:
A Tsinghua professor JUST discovered the fastest shortest path algorithm for graphs in 40yrs.
This improves on Turing award winner Tarjan’s O(m + nlogn) with Dijkstra’s, something every Computer Science student learns in college.
Zeecka 🥀 retweeted
This looks nicely written: ifixit.com/News/112008/polis…
🍉 The AperiSolve website just got a fresh new look!
- ⚙️ RAM doubled
- ⚙️ CPU doubled
- 😎 Swag doubled
Got feedback? Drop a DM or open an issue: github.com/Zeecka/AperiSolve
aperisolve.com/
Zeecka 🥀 retweeted
Bug bounties ain't just web. Throwback to when @kernelpaniek and I got RCE on Steam Client via a buffer overflow in Server Browser 🚨
Root Cause:
🎯 Wide-char conversion without boundary checks inside serverbrowser.dll leading to stack corruption
Exploit:
🪲 Crafted oversized Unicode player name payload
🪲 Unicode-compatible ROP chain built from Steam.exe gadgets
🪲 Dynamic call to VirtualProtect to mark stack executable
🪲 Shellcode launches cmd.exe
Impact:
💥 Remote code execution (RCE) on Windows
🤔 Partial control on Linux (2 bytes of EIP)
🤔 SIGABRT on macOS (due to canaries)
Delivery:
📦 User tries to connect to a CS game via Steam client
📦 User visits malicious webpage triggering Steam protocol handler
Tools:
🛠️ Python for UDP server and payload generation
🛠️ Immunity Debugger for base address retrieval
🛠️ Steam Server Query documentation for packet crafting
Read the full report: hackerone.com/reports/470520
Ruby Rails bump allowing duplicate keys in to_json leading to information disclosure, awesome root cause ✨
HackerOne disclosed a bug submitted by @itsavinash_: hackerone.com/reports/300051… - Bounty: $25,000 #hackerone #bugbounty
Zeecka 🥀 retweeted
Sans infra ⚒️, pas de challenges ! Courage à nos Infra-makers pour la dernière ligne droite 💪! @adam_le_bon, @HGSlinky, Raphael (from @icodia), @_Ionniz_, @__Sp4rKy__ (from @Claranet_Fr) et @Zeecka_ !
🔥 BreizhCTF x GCC 🚀
13 membres de @gcc_ensibs vous ont préparé des challenges aux petits oignons 😈
Ce sont + de 8h de pure compétition qui vous attendent ! ⚡️⌛️
Cette édition s’annonce légendaire ! 💪 Êtes-vous prêts ? ✨
Zeecka 🥀 retweeted
I’m happy to share that after more than eight years with the team, I'm now the President of @rootme_org.
Root-Me is more than just an e-learning platform to me - it's where I learned cybersecurity, met incredible people, and even got my first job in the field of reverse engineering. It's a part of my daily life, my resume, and my social network.
Over the years, I've witnessed countless individuals significantly boost their cybersecurity skills and secure jobs through Root-Me. I'm immensely proud of what we've built together.
Our former president, g0uZ, who did more to Root-Me than anyone else, will remain a permanent member of the organisation, as a Honorary President.
Thank you, everyone!
Zeecka 🥀 retweeted
Iconv, set the charset to RCE: in the first blog post of this series, @cfreal_ will show a new exploitation vector to get RCE in PHP from a file read primitive, using a bug in iconv() (CVE-2024-2961) ambionics.io/blog/iconv-cve-…
Zeecka 🥀 retweeted
🔥Multiple XSS vulnerabilities in popular CMS Joomla! (CVE-2024-21726) 🔥
PHP bug could be used to bypass sanitization - We just disclosed the technical details behind the recent Joomla vulnerability:
sonarsource.com/blog/joomla-…
⚠️ Multiple XSS vulnerabilities in popular CMS Joomla! (CVE-2024-21726) ⚠️
Attackers could trick administrators into clicking on a malicious link and gain RCE:
sonarsource.com/blog/joomla-…
#appsec #security #vulnerability #joomla
Zeecka 🥀 retweeted
Correct solution per the screenshot: http://localhost:8080/?password=1&name=\%00readflag/var/www/html/index.php:9$0
A small PHP challenge: gist.github.com/phith0n/b02f…
Environment: docker run -d --name php -p 8080:80 -v /root/web/challenge:/var/www/html php:7.4-apache
Zeecka 🥀 retweeted
Introducing a new tool for #PHP filters attacks, #wrapwrap: an algorithm to add an arbitrary prefix and suffix to a PHP resource, improving the exploitation of file read and #SSRF vulnerabilities.
ambionics.io/blog/wrapwrap-p…
Zeecka 🥀 retweeted
Thanks to @Zeecka_ for pointing me out
@_danielthatcher's conf. "New Techniques for Split-Second DNS Rebinding" from #BlackHatEurope2023.
BH conf blackhat.com/eu-23/briefings…
1/2 intruder.io/research/we-hack…
2/2 intruder.io/research/split-s…
