Paul Axe

[Phith0n @phithon_xg]

#Vulhub Redis Lua Sandbox Escape && RCE (CVE-2022-0543)
Awesome vulnerability, without any binary technique, just one Redis command.
So how to reproduce the vulnerability: https://t.co/rw6ocye1N2
Original vulnerability reference: https://t.co/Dt340JSelA

[Eldar Zaitov @kyprizel]

All this CA stuff was cursed, but now, when CAs revoke certificates on a geographical basis, it is especially clearly visible.

[Emil Lerner @emil_lerner]

I just posted a write-up on how I leaked uninitialized memory (e.g., other users' HTTP requests/responses) from Fastly using a bug in the H2O webserver. Also, there you can learn a fraction of how HTTP/3 + QUIC works)

https://t.co/6TO4pqARaP

[Paul Axe @Paul_Axe]

@cyb3rops @testanull @infosec_au No. The exploitation requires a custom code which will pass user data to a WP_Query, so in my opinion this is not a vulnerability of Wordpress but of this custom code. The default installation of wordpress isn't vulnerable to this SQL-inj.

[Emil Lerner @emil_lerner]

Nano-#ctf for my 30th birthday: execute system('id') by providing <=280 bytes of stdin to the script

code = input()
for c in 'hui"\'(':
assert c not in code
exec(code, {'__builtins__': {}})

run on Python 3.9.2+Linux (=python:latest). Will send .031337 ETH to the first pwner

[Emil Lerner @emil_lerner]

I've just released the source code for https://t.co/9LYEnXBg7r at https://t.co/YUisLKW5pi.

PRs are welcome :)

[Paul Axe @Paul_Axe]

@artsploit @PortSwigger LOL, do you really find this way as convenient? Btw, do you know if there is a plan to bring hex view back?

[Paul Axe @Paul_Axe]

Every BurpSuite update i think that I would never update again. Hey, @PortSwigger, how am I supposed to see response body in HEX now?

[Paul Axe @Paul_Axe]

@PortSwigger I still feel like previous way was more convinient. And in you suggested workflow editing is a nightmare. Either I not an target audience of BurpSuite anymore, or you are losing connection with it.

[Paul Axe @Paul_Axe]

My WCTF 2020 challenge source code and solution: https://t.co/JR74k2y3WH

[Paul Axe @Paul_Axe]

@theRaz0r @cfreal_ cc @dsp25no

[Paul Axe @Paul_Axe]

@theRaz0r @cfreal_ Unfortunately it was abandoned. But you can try this one https://t.co/U2ppZXbPHI

[Paul Axe @Paul_Axe]

Slides for my "ZN PWN Challenge" talk on ZeroNights 2019: https://t.co/3bN9RtltFv

[Omar "Beched" Ganiev @theBeched]

Freshly patched RCE in PHP-FPM:
https://t.co/kaVsCStBJx
Exploit:
https://t.co/VLmhxMWVxo
Many nginx+PHP configurations vulnerable, watch out!

[Gynvael Coldwind @gynvael]

Paged Out! #1 is out! (and it's free to download!)
https://t.co/XT3HXa7gH3
There are 57 articles in 12 categories:
Electronics
Programming
Assembly
Reverse Engineering
Sec/Hack
Retro
File Formats
Algorithmics
SysAdmin
Radio
Phreaking
OS Internals
Enjoy! #PagedOut!

[Paul Axe @Paul_Axe]

@sirdarckcat @_niklasb Thanks, i will keep that in mind when i will make another ctf challnege.

[Paul Axe @Paul_Axe]

@sirdarckcat @_niklasb 3. Hmm... i thought that .git is kind of obvious thing to check. i usually check it by hands, not with dirbuster
Btw, does it means that without this .git step (with source code attached to task description) this task would be better?

[Paul Axe @Paul_Axe]

@sirdarckcat @_niklasb My web challenge on WCTF was a whitebox challenge https://t.co/gbiQKSb4Kk

[Paul Axe @Paul_Axe]

My WCTF 2019 challenge source code and solution: https://t.co/gbiQKSb4Kk