Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security.
This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version.
This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.
EDR or SIEM flagging your Linux commands when reading sensitive files like /etc/shadow? Read the file from the raw disk to avoid simple detections. #redteamtips#hacking
@Volexity As the article mentioned: "then search for the entire HTTP body of these specific requests throughout the entire memory sample", how did you search the body in the memory and where are the body stored in? Is there any more details?
Confirmed! The Devcore team used an authentication bypass and a privilege escalation to take over the #Exchange server. They win the full $200,000 and 20 Master of Pwn points.
The Linux (e)BPF bytecode verifier, the gift that keeps on giving! Wrote an exploit for CVE-2020-27194. :-) Shout out to @scannell_simon for the bug and @_manfp for exploitation strategy inspiration!
There is a 0day in VMware fusion for MacOS that allows any user to get root permissions. The bug is public and the fix for cve2020-3950 is incorrect, thus the weakness is a public 0day. It is a very straight forward LPE on any macOS with fusion installed.
Every week, our twitter account @PentesterLab publishes a list of articles worth-reading. This is the list of all the articles for 2019. Enjoy!! https://t.co/dhssbpEmOL
Several people asked which essays are my favorites:
https://t.co/yFNe1NW55B
https://t.co/HdUSjESNGl
https://t.co/ASjOx0YHUu
https://t.co/XNW3ov6yXQ
https://t.co/Ww2vBKYMt9
https://t.co/GQ6IECES02
https://t.co/jOQbXXji14
https://t.co/52xghlUODR
https://t.co/oMGkyfOQ4H
How to learn English? The best way is to use it. Dip yourself in the English environment such as English books, twitter, youtube, Quora and it will help you to use it everyday. What will happen if you have made the English your second mother language? Open a new world!
#pwntools Maybe here is a tip to use pwntools(python3).
Give it up(python3-pwntools): https://t.co/frYYobb6SK
and use pwntools(branch dev3): https://t.co/wgjo8aK54d
As I just found a bug in python3-pwntools https://t.co/Xyu3gC35X3 and can't pull an issue as it is read-only now