raptor

When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.

Homepage: https://0xdeadbeef.info
GitHub: https://github.com/0xdea

Public Key

npub137swhpts57chhtgttt4tm23qprkjw7dh87v3fgck8sgyu8q0zy0q7u50fd

NIP-05 Address

raptor_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsglg8ts4c20vtm4594464a4gsq3mf80xmnlxg55vtrcyzwrs83z8spz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds94js5q

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub137swhpts57chhtgttt4tm23qprkjw7dh87v3fgck8sgyu8q0zy0q7u50fd

Show more details

Last Notes

2026-03-24 05:25:20 UTC

RIP one of our favorite techniques to bypass #PaloAlto #Cortex #XDR 🤷
https://labs.infoguard.ch/posts/decrypting-and-abusing_paloalto-cortex-xdr_behavioral-rules_biocs/

2026-03-14 05:21:12 UTC

For my #Rust projects, I’ve finally migrated from #RustRover to @npub1zxt…pwx0.
RR is a great IDE, but it feels much too bloated for me. #Zed, on the other hand, is a pleasure to use. So smooth!
Here’s my current config including a beautiful theme based on monokai-pro https://github.com/0xdea/dotfiles/tree/main/zed/.config/zed
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/225/846/089/104/604/original/6a31647377a1cba6.png

2026-02-24 20:00:11 UTC

@npub17wv…nag2 have you seen this? https://hex-rays.com/blog/plugin-spotlight-dbimporter

2026-02-20 08:57:46 UTC

Just shipped updates for rhabdomancer, haruspex, and augur. Now compatible with @npub1wx2…r8kv IDA 9.3 and @npub16xn…y2dt's idalib-rs 8.0.
These headless #IDA plugins are built for #VulnerabilityResearch workflows where you want IDA's power without the GUI. This release brings a bunch of small improvements and bug fixes.
https://hnsecurity.it/blog/streamlining-vulnerability-research-with-the-idalib-rust-bindings-for-ida-9-2/

2026-02-19 06:49:51 UTC

the watchers: how #openai, the US government, and #persona built an identity #surveillance machine that files reports on you to the feds
https://vmfunc.re/blog/persona/

2026-02-13 11:47:27 UTC

Today is an excellent day to enjoy free, ad-free, non-stop #MTV #nostalgia
https://wantmymtv.vercel.app/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/063/157/870/236/365/original/171ca1783ee56c07.jpeg

2026-02-12 16:50:52 UTC

This is another incredible #talk from @npub1zze…4ut8 2025
Full-stack Reverse Engineering of the Original Microsoft #Xbox (Markus Gaasedelen @npub1yhp…nsy6)
https://youtu.be/hGlIkgmhZvc

2026-02-05 13:11:31 UTC

The path to #pwning the PS VR2 (part 1) - "Recovery mode" <- yet another case study on how assumptions should always be checked in practice 🤷
https://bnuuy.solutions/2026/02/01/ps-vr2-recovery-mode.html

2026-02-05 07:52:32 UTC

While waiting for the upcoming release of #IDAPro 9.3 by @npub1wx2…r8kv, I have made some updates and bug fixes to my idalib-based headless IDA #plugins rhabdomancer, haruspex, and augur.
Check out the changelogs for all the details and enjoy!
https://hnsecurity.it/blog/streamlining-vulnerability-research-with-the-idalib-rust-bindings-for-ida-9-2/

2026-02-01 16:54:38 UTC

RE: https://mastodon.social/@XC3LL/115990518822402879
Very valuable insight if you are into #redteaming
#note1e6a…l4y7

2026-01-21 15:49:50 UTC

Can You Write A Web Server in PURE #BASH?! (no socat, no netcat, no external tools)
https://www.youtube.com/watch?v=L967hYylZuc

2026-01-20 18:07:24 UTC

root@kaka:~ sudo apt-get install inetutils-telnetd telnet
root@kaka:~ sudo sed -i 's/#<off># telnet/telnet/' /etc/inetd.conf
root@kaka:~ sudo /etc/init.d/inetutils-inetd start
root@kaka:~ USER='-f root' telnet -a localhost
...
root@kaka:~#
https://seclists.org/oss-sec/2026/q1/89

2025-12-30 13:12:06 UTC

We are here
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/808/686/767/699/248/original/ad318d35d29b9bc0.jpeg

2025-12-29 07:54:58 UTC

“We learn different lessons from finishing projects than we do from starting them. Starting teaches us about ideation and initial implementation. Finishing, on the other hand, teaches us about perseverance, attention to detail, and the art of knowing when to let go. These are invaluable skills that can only be honed through the act of completion.”
https://www.bytedrum.com/posts/art-of-finishing/

2025-12-19 07:36:13 UTC

#PoC for CVE-2025-65945 (Improper Verification of Cryptographic Signature in node-jws)
https://github.com/jedisct1/CVE-2025-65945-poc

2025-12-19 07:35:23 UTC

#FreeBSD-SA-25:12.rtsold Security Advisory
Remote code execution via ND6 Router Advertisements
https://www.freebsd.org/security/advisories/FreeBSD-SA-25:12.rtsold.asc

2025-12-18 19:02:02 UTC

This is my experience with LLMs. To paraphrase @npub1mdh…52t9 “sometimes you just need to ask nicely”
https://hnsecurity.it/blog/attacking-genai-applications-and-llms-sometimes-all-it-takes-is-to-ask-nicely/
https://mastodon.cloud/@slashdot/115742100395423331

2025-12-07 10:01:47 UTC

A cool new project by a friend
Zynk - Move anything
Between everything
Send folders, photos, and multi‑gig archives across phones, laptops, TVs, and servers. End‑to‑end encrypted, resumable, no size limits.
https://zynk.it/

2025-12-03 15:17:36 UTC

Hey developers and vulnerability researchers!
I'm currently working on improving my #Semgrep ruleset for C/C++ static code analysis, and I've just published the new v1.1.0 release: https://github.com/0xdea/semgrep-rules
Some notable changes since the previous battle-tested release: new rules for detecting high-entropy assignments and ReDoS vulnerabilities, numerous enhancements to existing rules, reduced false positives without sacrificing coverage, optimized patterns across the board, and overall better documentation. Check the changelog for the full list (yes, there’s a changelog now).
Please test it inside and out, and feel free to open issues or submit pull requests. Your feedback is invaluable and will help shape the project roadmap. I'm aiming for a major release sometime before spring.

2025-10-17 16:22:09 UTC

- reply

does it depend on Frida by any chance? 😅

2025-10-03 07:27:44 UTC

Heads up to anyone doing #Mobile #ReverseEngineering and #PenetrationTesting: I've just ported my @npub17rv…x5dh #Frida instrumentation scripts (#iOS and #Android) to Frida 17, which introduced some breaking changes in the API.
The original, battle-tested scripts from 2017 are preserved as release 0.1 for retro compatibility and historical reference.
https://github.com/0xdea/frida-scripts
Happy hacking! 🏴‍☠️🪐

2025-10-02 08:06:22 UTC

#Styx Emulator Public Release (a #Rust-based #QEMU Alternative)
https://stumbl.ing/posts/styx-emulator-release/

2025-09-27 10:54:35 UTC

Great VR talk by @npub1pyk…mdt8 at #RomHack2025
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/275/888/060/179/225/original/5bd40ea275e8e912.jpeg

2025-09-17 18:15:41 UTC

- reply

Dirk-jan is a friend and a fantastic hacker, but I don’t think he was the original discoverer of ZeroLogon https://dirkjanm.io/a-different-way-of-abusing-zerologon/

2025-09-16 10:43:51 UTC

I've updated my #VulnerabilityResearch and #ReverseEngineering tools to use the latest version of [@binarly_io](https://bird.makeup/users/binarly_io ) award-winning #idalib #Rust bindings, which support @npub1wx2…r8kv IDA Pro 9.2 and their freshly open-sourced SDK.
#Rhabdomancer - Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.
https://github.com/0xdea/rhabdomancer
#Haruspex - Vulnerability research assistant that extracts pseudo-code from the IDA Hex-Rays decompiler.
https://github.com/0xdea/haruspex
#Augur - Reverse engineering assistant that extracts strings and related pseudo-code from a binary file.
https://github.com/0xdea/augur
For additional details:
https://security.humanativaspa.it/streamlining-vulnerability-research-with-ida-pro-and-rust/

2025-08-30 10:47:36 UTC

Entertaining and inspiring #pwn2own #xdev writeup 👏 (also from a few months back)
#Lorex 2K Indoor Wi-Fi Security Camera: RCE #Exploit Chain
https://github.com/sfewer-r7/LorexExploit
https://www.rapid7.com/globalassets/_pdfs/research/pwn2own-iot-2024-lorex-2k-indoor-wi-fi-security-camera-research.pdf

2025-08-28 13:09:54 UTC

Eight years later, I’ve updated my most-starred @npub1545…mva5 repository with some new @npub1ne9…0uhz scripts, inspired by @npub1xwz…c2zl's new book “From Day Zero to Zero Day”.
Check it out: https://github.com/0xdea/frida-scripts/

2025-08-28 09:04:56 UTC

I had missed this #linux #kernel discussion about #pathtraversal #vulnerabilities
[RFC] Add a prctl to disable ".." traversal in path resolution
https://lore.kernel.org/linux-fsdevel/20241211142929.247692-1-mjg59@srcf.ucam.org/T/#u

2025-08-27 06:11:53 UTC

How it was to scan the whole Internet in 1998. Don’t skim over week 3, when an actual APT shows up 🍿
The #Internet #Auditing Project (beta 1)
https://www.focb.co.nz/audit/

2025-08-27 05:48:54 UTC

I finally brought myself to read this essay
https://www.structuredprocrastination.com
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/099/155/264/303/908/original/04766b6fd4172f18.jpeg

2025-08-26 06:37:45 UTC

This is great news 🤩 I guess it’s about time to start learning CodeQL seriously
#CodeQL can be enabled at scale on C/C++ repositories in public preview using build-free #scanning
https://github.blog/changelog/2025-06-03-codeql-can-be-enabled-at-scale-on-c-c-repositories-in-public-preview-using-build-free-scanning/

2025-08-19 06:25:26 UTC

“Humans are hackers. We were put here to figure things out. Hacking is an innate skill to be tapped into and developed. The hacker spirit guides us through situations once thought hopeless. Hacking is a way to answer your own burning questions, a way to discover your own potential, and a way to create a world you want to live in.
There is a hacker born every day. It's our duty to share things that can inform them of the past and present, and give them hope for a better tomorrow. After all, we're all alike.”
❤️❤️❤️❤️❤️❤️❤️❤️
#Phrack72 40th anniversary edition is out!
https://phrack.org

2025-08-18 07:07:38 UTC

A fascinating story about a #DoS #vulnerability in the Expat #XML parser
#Recursion kills: The story behind CVE-2024-8176 / #Expat 2.7.0 released, includes security fixes
https://blog.hartwork.org/posts/expat-2-7-0-released/

2025-08-16 14:50:44 UTC

Never been into the fan/celeb thing, but this is damn #inspiring 👏
ht @npub18e3…kv8z
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/039/000/381/035/919/original/281fca9597a1b67f.jpeg

2025-08-10 15:46:48 UTC

#TIL that last month some dimwits at Ventegus Anti-Piracy GmbH (likely on behalf of Hex-Rays?) submitted a #DMCA (Copyright) Complaint to #Google to remove these two pages from search results:
https://0xdeadbeef.info/augur/augur/
https://0xdeadbeef.info/augur/src/haruspex/lib.rs.html
See for yourself:
https://lumendatabase.org/notices/54378675
Not that I care, but WTAF...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/005/239/393/773/883/original/e25536ae42093a77.png

2025-08-10 13:22:50 UTC

CVE-2025-48708: #ghostscript can embed plaintext #password in encrypted #PDFs 😶
https://www.openwall.com/lists/oss-security/2025/05/23/2

2025-08-09 07:52:25 UTC

Another fresh #Python #tarfile #vulnerability
Python TarFile.extractall(..., filter='tar') arbitrary file chmod
https://github.com/python/cpython/issues/127987

2025-08-08 07:21:38 UTC

Here’s another fun one by @npub1y7r…9kzp! I’ve really enjoyed the clever building of the #exploit chain ✊
Abusing #Ubuntu 24.04 features for root privilege escalation
https://labs.snyk.io/resources/abusing-ubuntu-root-privilege-escalation/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/991/935/978/582/012/original/dcc89857c81b6fee.jpeg

2025-08-04 09:22:25 UTC

I love this kind of #bugs, especially when they are features 🤣
#arm64: Linear mapping is mapped at the same static virtual address
https://project-zero.issues.chromium.org/issues/434208461

2025-07-13 19:21:07 UTC

[CVE-2025-38001] #Exploiting All Google #kernelCTF Instances And Debian 12 With A #0Day For $82k: A RBTree Family Drama (Part One: LTS & COS)
https://syst3mfailure.io/rbtree-family-drama/

2025-07-11 17:42:46 UTC

#FortiWeb Pre-Auth #RCE (CVE-2025-25257)
https://pwner.gg/blog/2025-07-10-fortiweb-fabric-rce

2025-07-10 06:38:36 UTC

As an old fart in #xdev, I get asked often, mostly by young coworkers, how to get into binary exploitation in 2025. I looked around, and here’s my recommendation:
https://pwn.college
#pwncollege is a huge collection of free #lectures and practical #challenges maintained by a team of #hackers at the Arizona State University. Check it out!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/827/559/743/371/338/original/5f256d79c7946a83.jpeg

2025-07-02 18:43:02 UTC

- reply

he was the youngest researcher at zero day quest, and I was the oldest with an exact 30 year difference 😅

2025-06-27 08:26:39 UTC

#TumpiCon2025 is happening now! 💚
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/754/374/588/890/973/original/1f2dfceb31b7311e.jpeg

2025-06-11 08:32:53 UTC

This Video Can #Exploit Your #iPhone (CVE-2025-31200)
https://www.youtube.com/watch?v=nTO3TRBW00E
Besides the clickbaity title, this video is actually a simple and fun initial analysis of the #1day in question.
As a side note, I started watching it on a device with no #adblocker and damn, YouTube has become so annoying and utterly unusable 😠

2025-06-11 05:53:28 UTC

#Hydroph0bia (CVE-2025-4275) - a trivial #SecureBoot bypass for UEFI-compatible firmware based on Insyde #H2O, part 1
https://coderush.me/hydroph0bia-part1/

2025-06-09 06:17:34 UTC

How to store data on #paper?
https://www.monperrus.net/martin/store-data-paper

2025-05-25 09:14:39 UTC

“Certain 5400 RPM hard drives, for laptops and other PCs in approximately 2005 and later, allow physically proximate attackers to cause a denial of service (device malfunction and system crash) via a resonant-frequency attack with the audio signal from the Rhythm Nation music video. A reported product is Seagate STDT4000100 763649053447.”
https://nvd.nist.gov/vuln/detail/CVE-2022-38392

2025-05-19 10:46:57 UTC

During the weekend, I’ve been working a bit on updating my battle-tested #semgrep ruleset for #c #vulnerability research
https://github.com/0xdea/semgrep-rules
Nothing major, just a couple of small updates. It feels good to be back doing some #security #research! Let’s see where this takes me…

2025-05-15 06:20:45 UTC

- reply

for some reason, this [@slashdot](https://mastodon.cloud/@slashdot ) headline from 2000 stuck with me and when I’m sleep deprived I often think about it https://science.slashdot.org/story/00/02/11/0648213/sleep-deprivation-increases-brain-activity

2025-05-14 11:37:43 UTC

- reply

reminds me a bit of GPS navigators TBH

2025-05-08 13:03:11 UTC

- reply

or maybe, even better, of #Troma’s “Surf Nazis Must Die” https://en.wikipedia.org/wiki/Surf_Nazis_Must_Die

2025-05-07 04:54:41 UTC

[CVE-2025-37752] Two Bytes Of Madness: Pwning The #Linux #Kernel With A 0x0000 Written 262636 Bytes Out-Of-Bounds 🔥
https://syst3mfailure.io/two-bytes-of-madness/

2025-04-19 08:35:37 UTC

This is a well-written, comprehensive #Rust guide for beginners that have experience with other languages
https://www.chiark.greenend.org.uk/~ianmdlvl/rust-polyglot/index.html

2025-04-18 09:46:51 UTC

- reply

interesting blog too https://platformsecurity.com/blog/CVE-2025-32433-poc

2025-04-14 17:12:59 UTC

- reply

Deja vu 😅 https://security.humanativaspa.it/multiple-vulnerabilities-in-eclipse-threadx/

2025-04-08 08:21:28 UTC

- reply

unclear. Maybe not https://news.ycombinator.com/item?id=43617413

2025-03-27 14:04:40 UTC

"The designer of a new system must not only be the implementor and the first large-scale user; the designer should also write the first user manual. If I had not participated fully in all these activities, literally hundreds of improvements would never have been made, because I would never have thought of them or perceived why they were important."
-- Donald Knuth, “The Errors of TeX”

2025-03-21 07:20:16 UTC

Rejoice! 🎉
My idalib-based vulnerability research tools are now fully compatible with Windows 🪟
Please test them and report any bugs 🪲
https://security.humanativaspa.it/streamlining-vulnerability-research-with-ida-pro-and-rust/
(PS. Ya like my GPT writing style? 🚀)

2025-02-26 14:03:21 UTC

rotfl https://hackerone.com/reports/2293343

2025-02-25 17:53:23 UTC

- reply

so true

2025-02-21 13:17:12 UTC

Lesser known tricks, quirks and features of #C
https://jorenar.com/blog/less-known-c

2025-01-28 20:42:47 UTC

Tour of #Rust's Standard Library Traits
https://github.com/pretzelhammer/rust-blog/blob/master/posts/tour-of-rusts-standard-library-traits.md
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/907/922/664/696/320/original/7864cf611b0c5762.png

2025-01-16 12:10:42 UTC

- reply

it’s not yesterday’s post, it’s an upcoming one in the near future

2025-01-16 11:06:50 UTC

- reply

my colleague wrote this, I expect it to be clean 😅

2024-12-26 11:08:44 UTC

Safe #Rust AIN'T SAFE!? (cve-rs explainer)
https://youtu.be/vfMpIsJwpjU

2024-12-26 06:54:43 UTC

2025 is just around the corner. If #LearningRust is among your New Year’s resolutions, I’ve got you.
Following my ongoing #Rust series on the @npub1fnd…8ya4 blog (https://security.humanativaspa.it/tag/rust/) and adding something along the way, in the next days I’ll recommend the learning resources that worked for me.
Stay tuned!

2024-12-24 05:51:07 UTC

Announcing #CodeQL Community Packs
https://github.blog/security/vulnerability-research/announcing-codeql-community-packs/

2024-12-14 07:46:34 UTC

Oasis Security Research Team Discovers Microsoft #Azure #MFA Bypass
https://oasis.security/resources/blog/oasis-security-research-team-discovers-microsoft-azure-mfa-bypass

2024-12-08 15:25:28 UTC

Pointers Are Complicated, or: What's in a Byte?
https://www.ralfj.de/blog/2018/07/24/pointers-and-bytes.html
Pointers Are Complicated II, or: We need better language specs
https://www.ralfj.de/blog/2020/12/14/provenance.html
Pointers Are Complicated III, or: Pointer-integer casts exposed
https://www.ralfj.de/blog/2022/04/11/provenance-exposed.html

2024-12-06 16:00:26 UTC

Breaking the most popular #Web Application Firewalls (#waf) in the market
https://nzt-48.org/breaking-the-most-popular-wafs

2024-11-16 18:25:29 UTC

- reply

done! https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy

2024-10-30 14:16:37 UTC

- reply

funny that you mention keycloak on the very same day that we chose to disclose some vulnerabilities in it 🤷‍♂️ https://security.humanativaspa.it/an-analysis-of-the-keycloak-authentication-system/

2024-10-26 08:17:51 UTC

Super useful diagram that explains all available transformations between Result and Option standard #Rust types and their interactions.
Source: https://docs.google.com/drawings/d/1EOPs0YTONo_FygWbuJGPfikO9Myt5HwtiFUHRuE1JVM/edit
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/372/731/627/019/138/original/a60e52406eeff462.png

2024-10-24 11:20:49 UTC

Got some #MSRC #swag 😂
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/362/131/121/808/064/original/4b5eecd61ec62809.jpeg

2024-10-12 10:43:05 UTC

- reply

yes! And it’s quite convenient to use, e.g. https://security.humanativaspa.it/big-update-to-my-semgrep-c-cpp-ruleset/

2024-10-10 14:58:55 UTC

A step-by-step guide to writing an #iOS #kernel #exploit -< short and to the point!
// by [@alfiecg_dev](https://bird.makeup/users/alfiecg_dev )
https://alfiecg.uk/2024/09/24/Kernel-exploit.html
https://github.com/alfiecg24/Vertex

2024-10-04 06:37:39 UTC

#Hacking is not just #OldSchool tooling and techniques. Modern #MobileApps are a fun target for #ReverseEngineers and #Pentesters alike. A fundamental tool to properly hack mobile apps is @npub1ufe…m7ps by [@oleavr](https://fosstodon.org/@oleavr ).
We continue our tour of my [@github](https://infosec.exchange/@github ) projects with my humble contributions to this field:
https://github.com/0xdea/frida-scripts
For a well-maintained project that includes some of my #Frida scripts, check out #Brida by [@apps3c](https://infosec.exchange/@apps3c ) and Piergiovanni Cipolloni:
https://github.com/federicodotta/Brida
And even after many years, if you search for well-crafted Frida scripts to bypass certificate pinning or root detection, there’s a very good chance that you’ll stumble upon the work of some of my colleagues… Very proud of my team at [@hnsec](https://infosec.exchange/@hnsec )!

2024-09-29 12:19:33 UTC

#patchfriday on #cups #vulnerabilities
https://patchfriday.com/158/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/220/804/297/042/971/original/ee02f3475df3e6ca.png

2024-09-20 07:17:52 UTC

Continuing the tour of my @npub1545…mva5 projects, the #TacticalExploitation toolkit deserves to be mentioned. It's now a bit old, but I believe the concept still applies, and very much so.
https://github.com/0xdea/tactical-exploitation
"The Other Way to Pen-Test" -- @npub18pc…787r & @npub14pv…jqkx
I've always been a big proponent of a tactical approach to #PenetrationTesting that doesn't focus on exploiting known software #vulnerabilities, but relies on #OldSchool techniques such as #InformationGathering and #BruteForce. While being able to appreciate the occasional usefulness of a well-timed 0day, as a veteran penetration tester I favor an exploit-less approach. Tactical exploitation provides a smoother and more reliable way of compromising targets by leveraging process vulnerabilities, while minimizing attack detection and other undesired side effects.
Since a few years, I've meant to give a talk on this very subject, with the working title of "Empty Phist Style - Hacking Without Tooling" (inspired by @npub18ym…460u). Sooner or later it will happen.

2024-09-17 08:19:18 UTC

- reply

makes sense!

2024-09-17 07:42:28 UTC

Not a fan of the #AI hype at all, but @npub1nnw…ytvc #RustRover new full line code completion feature is impressive
https://blog.jetbrains.com/blog/2024/04/04/full-line-code-completion-in-jetbrains-ides-all-you-need-to-know/

2024-09-17 07:26:01 UTC

I'd like to share some of my projects that are hosted on @npub1545…mva5. Let's start with my public #exploits that span more than two decades of #pwning.
https://github.com/0xdea/exploits
"You can't argue with a root shell." -- Felix "FX" Lindner
Probably the most known is raptor_udf.c that targets #MySQL (those of you who solved the @npub1n4p…t7gf #OSCP training labs should recognize it).
My favorite is still raptor_rlogin.c, a glorious #Solaris #RCE from the early 2000s. Take your pick!

2024-09-09 07:05:10 UTC

I finally got my copy of #Phrack71!
Impressive work by the new @npub1am3…j6qn staff 💚
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/106/321/877/286/814/original/2e694c1122b0fd57.jpeg

2024-09-03 07:08:45 UTC

Come for the #OffensiveRust content, stay for the #ThrashMetal revival 🎸 https://infosec.exchange/@hnsec/113072354880406361

2024-08-28 19:13:58 UTC

- reply

what is the source?

2024-08-26 05:12:57 UTC

#patchfriday
https://patchfriday.com/157/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/026/608/301/814/892/original/8dc635f03000c4fd.png

2024-08-12 05:58:08 UTC

So cool to see my vulnerability research automation work integrated into such a powerful tool! Keep it up ✊
https://infosec.exchange/@securefirmware/112937856513629704

2022-11-22 16:33:09 UTC

"Sometimes, hacking is just someone spending more time on something than anyone else might reasonably expect.”
— Jerry Gamblin