/explore
|
You are here 
|
devco.re | ||
| | | | |
www.thezdi.com
[AI summary] A technical write-up from Zero Day Initiative detailing the three-vulnerability ProxyShell exploit chain used to achieve pre-auth remote code execution on Microsoft Exchange Server. |
|
| | | | | ||
| | | | |
srcincite.io
When Justin Kennedy and Brandon Perry asked me if I was interested in performing a little audit together, I couldn't resist. Although time was limited, I dec... |
|
| | | | | ||
| | | | |
blog.thalium.re
[AI summary] The blog post discusses the author's experience in vulnerability research and exploitation targeting Steam and its related products, including Steam Link and Remote Play. It covers various vulnerabilities such as format string vulnerabilities, request forgery, heap overflows, and a remote code execution (RCE) exploit. The author also details their interactions with HackerOne and Valve, highlighting the challenges in getting timely responses and the eventual resolution of the reported issues. |
|
| | | | | ||
| | | | |
peterkleissner.com
[AI summary] A blog post discusses the reverse engineering of Supermicro's IPMI license key algorithm to bypass vendor lock-in and enable free BIOS updates, revealing the use of HMAC-SHA1 with a fixed secret key. |
|
| | | |||
