ont

Siberian engineer & developer. Linux, vim, golang, python fan.

[Phith0n @phithon_xg]

Talk about 2 POC of DirtyPipe(CVE-2022-0847)
Original POC: https://t.co/QBHYU6i33N is able to overwrite arbitrary file with offset like ./exp /etc/passwd 5 ":0:0:rootx"
Improved POC: https://t.co/qurmceoXI8 is able to overwrite a SUID program like ./exp /usr/bin/su

[PT SWARM @ptswarm]

🚨 New article by our researchers @__mn1__ and @elk0kc about unauth RCEs in VMware products: "Hunting for bugs in VMware: View Planner and vRealize Business for Cloud".

Read the article: https://t.co/P3639HkAiC

This is the first article about our VMware research. More to come!

[ont @ontrif]

@dmitriy_j https://t.co/Rz8KBg9yey он еще неплохо пел в мультфильмах. Перевал - очень атмосферный мультфильм. Да, суровое у меня было детство ))

[Blažej Krajňák @BlazejKrajnak]

@campuscodi Because of missing DNS records for https://t.co/ktSdD2E73z, every device with FB app is now DDoSing recursive DNS resolvers. And it may cause overloading ... https://t.co/uuTxUp9Hdh

[Sergey Bobrov @Black2Fan]

Slides from VolgaCTF (@_nikitastupin, @Black2Fan)
New ways to alert: Prototype Pollution

https://t.co/8Dg9FDGk5Y

[ont @ontrif]

@dmitriy_j @glorphindale ну это да ) современные ужасы разработки в контейнерах

[ont @ontrif]

@dmitriy_j Звучит как болезнь :)) "У вас волчанка, сэр" ©

[ont @ontrif]

Ok... jsonnet and json 5... What else did I miss in 2020?

[Trail of Bits @trailofbits]

We have a working proof-of-concept exploit for ‘Whose Curve is it Anyway?’ — NSA’s bug in Microsoft’s Crypto API.

Read on for our explainer:
https://t.co/DMmkDu2XKM

[Omar "Beched" Ganiev @theBeched]

Freshly patched RCE in PHP-FPM:
https://t.co/kaVsCStBJx
Exploit:
https://t.co/VLmhxMWVxo
Many nginx+PHP configurations vulnerable, watch out!

[PythonArsenal @PythonArsenal]

SAFE (Self Attentive Function Embedding) - compute binary function embeddings to find out if two functions are similar or not. Based on radare2. https://t.co/62gpyG1lXa Artice: https://t.co/0UNZeNs69p

[ont @ontrif]

@pridemon @Xenitch для начала я бы с ней просто с удовольствием поговорил о vim, linux и о прочих околотемах :)

[ont @ontrif]

@pridemon @Xenitch @pridemon увидишь такую (с vim), покажи мне

[GitLab.com Status @gitlabstatus]

We accidentally deleted production data and might have to restore from backup. Google Doc with live notes https://t.co/EVRbHzYlk8

[ont @ontrif]

“Dismissing Python Garbage Collection at Instagram” by Instagram Engineering https://t.co/Nbe1vEdXOP

[Cliff Pickover @pickover]

A 28-cell orthogonal spaceship is considered groundbreaking discovery in Game of Life. Info: https://t.co/ZHHTNrxgMQ

[PythonArsenal @PythonArsenal]

Article: "Solving an Android Crackme with a Little Symbolic Execution" About angr. https://t.co/CTVN6EenXT

[joernchen @joernchen]

Sweet, a first PHPMailer PoC:

https://t.co/fiAc7tmQTo

[ont @ontrif]

@joemanaco Ori and The Blind Forest, Escape Goat 1/2, Super Meat Boy, Cave Story, Momodora, Jazz Jackrabbit

[Dawid Golunski @dawid_golunski]

Is your #Nginx server (N)jinxed? ;P
#Exploit Nginx pkg. on #Debian #Ubuntu PrivEsc to root #infosec #cybersecurity
https://t.co/HLbWfTP2zB