All posts in Uncategorized

Pwn2own having competition Toronto 2022. S22 Samsung gets owned in 55 seconds. https://hothardware.com/news/hackers-slaughter-samsung-galaxy-s22-first-day-pwn2own-competition Day 3 of 4: https://youtu.be/VTQfb0Btt_Y https://t.me/cKure/11996

■■■■■ Mal-Hash.ps1 https://bakerstreetforensics.com/2022/12/06/mal-hash-ps1-v1-3-update/ https://t.me/cKure/11995

■■■■■ pipe_buffer technique for achieving arbitrary read/write in Linux kernel. https://interruptlabs.co.uk/labs/pipe_buffer/ https://t.me/cKure/11994

■■■■■ RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass. https://h1pmnh.github.io/post/writeup_spring_el_waf_bypass/ https://t.me/cKure/11993

■■□□□ GOAD – part 11 – ACL. https://mayfly277.github.io/posts/GOADv2-pwning-part11/ https://t.me/cKure/11992

■■■□□ Interesting thread! Remote Code Execution vulnerability in every PostgreSQL database in IBMCloud. https://twitter.com/nirohfeld/status/1600862689823105024 https://t.me/cKure/11991

■■■■■ Interesting thread on Sharkbot malware by Checkpoint research. https://twitter.com/_CPResearch_/status/1600878854847238144 https://t.me/cKure/11990

RCE (remote account / vehicle takeover) using CRLF, chained bugs. Interesting thread. https://twitter.com/samwcyo/status/1597695281881296897 https://t.me/cKure/11988

■■■■■ Heap Spraying, Use-After-Free. https://www.inversecos.com/2022/07/heap-overflows-on-ios-arm64-heap.html https://t.me/cKure/11987

■■□□□ How to Reverse Engineer and Patch an iOS Application for Beginners. https://www.inversecos.com/2022/06/how-to-reverse-engineer-and-patch-ios.html https://t.me/cKure/11986