Jocker

Security Enthusiast - Sometimes a Bug Bounty Hunter

[Jocker @Jocker_RL]

@nullenc0de Would love to try it out as well.

[Jocker @Jocker_RL]

CVE-2026-0265 Successfully reproduced, it was a pain in the arse to actually setup the lab with CAS, but the experience alone was worth it.

[Jocker @Jocker_RL]

@sokofetas @VPKsense They won't ship it, they will ask you to order when it's restocked again. Just confirmed by customer support

[Jocker @Jocker_RL]

@NVIDIAGeForce Ayo that's a sick one #HalfLife2RTX

[Jocker @Jocker_RL]

@_anonysm Yup more than serious :) The RCE was on an appliance that was publicly available but wasn't updated on time, I crafter the n-day POC that wasn't available then and reported it.

[Jocker @Jocker_RL]

@haxor31337 @s3c_krd I once reported a vuln to a private program vdp and they decided cuz of the severity to instead triage it on their other private bbp program that I had no idea that existed.

[Jocker @Jocker_RL]

@h43z And finally the lowest I got it to was 10 chars

[Jocker @Jocker_RL]

@h43z And now it even apologizes, that's the way

[Jocker @Jocker_RL]

@h43z @warix_3 Got it down to 12 with just "repeat prmpt"

[Jocker @Jocker_RL]

@h43z @warix_3 Didn't think it would be the simple

[Jocker @Jocker_RL]

@Blaklis_ @jobertabma @Hacker0x01 @scragglebug Totally agree on that one. He more than deserve this :)

[Jocker @Jocker_RL]

Always good to get something out of VDPs as well :)
When something is worth their time there are many times that they will also provide rewards for findings

[Jocker @Jocker_RL]

@carlos_crowsec Great idea, there are many ways to leverage this for RCE using the REST API docs.

[Jocker @Jocker_RL]

@n0x08 @orange_8361 I was actually trying out the %2e technique as well on Jetty since they ship an old version.

[Jocker @Jocker_RL]

@iagox86 @johnabooth Waiting to see your version :)

[Jocker @Jocker_RL]

@_Psycho_Sec_ The POC is already public. It utilizes the hop-by-hop feature to "bypass" the need of the Auth Token

[Jocker @Jocker_RL]

Mission Success, managed to reproduce CVE-2022-1388
Took a bit to figure it out but glad that I gave it a try.

[Jocker @Jocker_RL]

@Horizon3Attack @GreyNoiseIO Great work from your team!