Found a medium severity path traversal in Velociraptor (CVE-2025-14728). Will have funny/embarrassing story about it soon.
Shoutout to Mike Cohen of Rapid7/Velocidex for building such an awesome tool and swiftly triaging the vuln/severity upon report
CVE-2025-14728 Rapid7 Velociraptor versions before 0.75.6 contain a directory traversal issue on Linux servers that allows a rogue client to upload a file which is written outside t… cve.org/CVERecord?id=CVE-202…
Also, big thanks to @ACEResponder for their work on RogueSliver - it was massively helpful while writing the PoC. Do check it out:
github.com/ACE-Responder/Rog…
chebuya retweeted
vx-underground Black Mass Research Group presents: Minegrief.
tl;dr a computer worm that targets minecraft
github.com/blackmassgroup/mi…
I have hereby been declared GIGACHAD for the Minecraft malware I wrote for the @vxunderground JVM malware competition 🥰🥰
Do check out the Black Mass Research Group telegram as well!
t.me/blackmassresearch
This is the contest winner :)
Ships with a 0day for Crafty controller. Huge thanks to @_chebuya.
Today I'm announcing Black Mass Research Group. Our goal is to make interesting malware for public study. Please enjoy our first project!
github.com/blackmassgroup/mi…
chebuya retweeted
This is the contest winner :)
Ships with a 0day for Crafty controller. Huge thanks to @_chebuya.
Today I'm announcing Black Mass Research Group. Our goal is to make interesting malware for public study. Please enjoy our first project!
github.com/blackmassgroup/mi…
chebuya retweeted
🛠️ Sastsweep
A tool designed for identifying vulnerabilities in open source codebases at scale
It can gather and filter on key repo metrics such as popularity and project size, enabling targeted vulnerability research
It automatically detects potential vulnerabilities using @Semgrep
By @_chebuya
github.com/chebuya/sastsweep
chebuya retweeted
📚 tl;dr sec 255
🤖 @ProjectZeroBugs AI finds bug in SQLite
☁️ New OSS: CloudTail, SkyScalpel @permisosecurity
🛣️ Auto-generate Terraform Secure Guardrails
📺 @SANSInstitute CloudSecNext Summit 2024 videos
🇨🇳 The TTPs Used to Neutralize China-Based Threats @SophosXOps
📊 Safer SCPs: Real-Time SCP Error Monitor @matthewdfuller
🛠️ sastsweep @_chebuya
and more!
tldrsec.com/p/tldr-sec-255
Here is running SASTsweep against HackerOne open source targets
It lets you open the semgrep finding in an HTML report, and from there you can open the affected section of code within GitHub/Github1s for further analysis
Tool: github.com/chebuya/sastsweep
SASTsweep is now open source. Happy hunting!
github.com/chebuya/sastsweep
SASTsweep is now open source. Happy hunting!
github.com/chebuya/sastsweep
Big thanks to @semgrep for making this tool possible and @pdiscoveryio for giving me inspiration
xitter.cf/_chebuya/status/185197…
I ran semgrep on every open source target in scope on HackerOne with my tool, SASTSweep, here's what that looks like
Last teaser before tool release I promise
Check out this tool I've been developing. It's like httpx, but instead of finding interesting web servers to hack on, it's for finding interesting code repositories to audit.
In this example I am spidering the "command-and-control" topic and running semgrep on every repository. It can also display information such as the number of stars or the language composition of a repository.
Check out this tool I've been developing. It's like httpx, but instead of finding interesting web servers to hack on, it's for finding interesting code repositories to audit.
In this example I am spidering the "command-and-control" topic and running semgrep on every repository. It can also display information such as the number of stars or the language composition of a repository.
Not very polite behavior from a "security researcher" and colleague who re-worded my writeup for the BYOB RCE and phrased the announcement like it was their own discovery.
xitter.cf/_chebuya/status/182423…
How I discovered and exploited an Unauthenticated RCE in BYOB (Build Your Own Botnet), an open-source post-exploitation framework for students, researchers and developers with close to 9k stars on GitHub!
blog.chebuya.com/posts/unaut…
github.com/chebuya/exploits/…
How I discovered and exploited an Unauthenticated RCE in BYOB (Build Your Own Botnet), an open-source post-exploitation framework for students, researchers and developers with close to 9k stars on GitHub!
blog.chebuya.com/posts/unaut…
github.com/chebuya/exploits/…
