Skip Navigation

User banner
udunadan
udunadan @ udunadan @infosec.pub
Posts
65
Comments
2
Joined
2 yr. ago

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

No More Speculation: Exploiting CPU Side-Channels for Real
bughunters.google.com /blog/4712170091839488/no-more-speculation-exploiting-cpu-side-channels-for-real
No More Speculation: Exploiting CPU Side-Channels for Real
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

Diving into Windows Remote Access Service for Pre-Auth Bugs
www.blackhat.com /us-23/briefings/schedule/
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Exploit Development @infosec.pub
udunadan @infosec.pub

iOS 17: New Version, New Acronyms
www.df-f.com /blog/ios17
iOS 17: New Version, New Acronyms

You have become the very thing you swore to destroy: Remotely exploiting an Antivirus engine

Jump

  • Glad to be of use!

    • InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    You have become the very thing you swore to destroy: Remotely exploiting an Antivirus engine
    cfp.recon.cx /2023/talk/KTMT73/
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    Use Native Pointer of Function to Bypass The Latest Chrome v8 Sandbox
    medium.com /@numencyberlabs/use-native-pointer-of-function-to-bypass-the-latest-chrome-v8-sandbox-exp-of-issue1378239-251d9c5b0d14
    Use Native Pointer of Function to Bypass The Latest Chrome v8 Sandbox
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    In-depth Analysis of the CVE-2023-29300 Adobe ColdFusion Serialization Vulnerability
    github.com /gobysec/Research/blob/main/Adobe_Coldfusion_remote_code_execution_vulnerability_Analysis_(CVE-2023-38204)_en_US.md
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub
    Chrome

    CVE-2023-2033
    github.com /mistymntncop/CVE-2023-2033
    [Chrome] CVE-2023-2033
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers
    www.zerodayinitiative.com /blog/2023/8/1/exploiting-a-flaw-in-bitmap-handling-in-windows-user-mode-printer-drivers
    Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    An Introduction to Exploit Reliability
    blog.isosceles.com /an-introduction-to-exploit-reliability/
    An Introduction to Exploit Reliability
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    MSMQ QueueJumper (RCE Vulnerability): An In-Depth Technical Analysis
    securityintelligence.com /posts/msmq-queuejumper-rce-vulnerability-technical-analysis/
    MSMQ QueueJumper (RCE Vulnerability): An In-Depth Technical Analysis
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    Summary: MTE As Implemented
    googleprojectzero.blogspot.com /2023/08/summary-mte-as-implemented.html
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    All known API based kernel address leaks on Windows no longer work
    twitter.com /yarden_shafir/status/1685740223181832193
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    CVE-2023-3389 - Exploiting a vulnerability in the io_uring subsystem of the Linux kernel
    qyn.app /posts/CVE-2023-3389/
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    Escaping the Google kCTF Container with a Data-Only Exploit
    h0mbre.github.io /kCTF_Data_Only_Exploit/
    Escaping the Google kCTF Container with a Data-Only Exploit
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    The Legacy of Stagefright
    blog.isosceles.com /the-legacy-of-stagefright/
    The Legacy of Stagefright
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    prctl anon_vma_name: An Amusing Linux Kernel Heap Spray
    starlabs.sg /blog/2023/07-prctl-anon_vma_name-an-amusing-heap-spray/
    prctl anon_vma_name: An Amusing Linux Kernel Heap Spray
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub
    DOS

    CVE-2023-35086 POC - ASUS routers format string vulnerability

    github.com /tin-z/CVE-2023-35086-POC
    CVE-2023-35086 POC - ASUS routers format string vulnerability [DOS]
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    A new method for container escape using file-based DirtyCred
    starlabs.sg /blog/2023/07-a-new-method-for-container-escape-using-file-based-dirtycred/
    A new method for container escape using file-based DirtyCred
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub
    Chrome

    UAF in MLGraphXnnpack::BuildOnBackgroundThread (reward: $11000)
    crbug.com /1425370
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
    Exploit Development @infosec.pub
    udunadan @infosec.pub

    Zenbleed
    lock.cmpxchg8b.com /zenbleed.html

    Reddit Refugees on Lemmy, how are you guys liking lemmy so far?

    Jump

  • The content is really bounded by tech stuff, but I guess that's due to migration being important for tech-savvy users. It is true that appending "reddit" to search queries and following the results is still inevitable (but hey, libreddit and teddit still work). But vibe is completely different, very organic, very active, I like it a lot. I think there is a lot of potential in this feeling of authentic communication. Let's hope it grows.

    Lemmy is much better replacement for Reddit than Mastodon is for Twitter.