AT&F&C1&D2&K3%C0 https://xitter.cf/t.co/FcLLHui5wV | https://xitter.cf/t.co/zOit06UquA | @initstring@infosec.exchange
Melbourne, Victoria
Joined March 2017
- Tweets92
- Following71
- Followers1.4K
- Likes64
Love hearing this success story, thanks so much for sharing! Seen similar results on general cracking campaigns too - this tool doesn't return volume but it occasionally gets those really high-value ones. :)
Local Privilege Escalation in Fedora Linux (CVE-2025-12744).
Red Hat has made this public, but patches aren't out yet. Reliable root for any local user.
Mitigation: sudo systemctl disable --now abrtd
Writeup + PoC: initblog.com/2025/abrt-root/
Drive-By Attack in Ollama Desktop v0.10.0
Found a bug in Ollama desktop GUI (not the core API) where malicious websites could hijack all private chats. Ollama crew patched it within hours. Make sure to update!
Tech details, video, IoCs, and PoC here: gitlab-com.gitlab.io/gl-secu…
We also do research and "opportunistic attacks" which may be more narrowly focused on identifying new attack paths, exploits, initial access vectors, etc: handbook.gitlab.com/handbook…, handbook.gitlab.com/handbook…
Thanks @Ne0nd0g. We try to include assessing/improving detections, controls, and processes within the context of a stealth op. More info here on how we track those outcomes: handbook.gitlab.com/handbook…