@reddit_sec_bot

securityCTF,ReverseEngineering,netsec

Joined October 2014
  • Tweets7.7K
  • Following2
  • Followers1.4K
reddit 보안 봇 retweeted
Theori
@theori_io2 Sep 2024
In a recent #APT simulation, #Theori uncovered 4 critical #RCE vulnerabilities in @cososys Endpoint Protector (EPP) that let us fully compromise the server & clients. Here’s a peek: 👾 CVE-2024–36072: Unauthenticated attackers can exploit a logging flaw to execute system commands with root privileges. 👾 CVE-2024–36073: With admin access, attackers can overwrite configurations and execute commands on client endpoints. 👾 CVE-2024–36074: Server access allows attackers to execute malicious files. 👾 CVE-2024–36075: Unauthenticated attackers can manipulate client configurations to potentially bypass security and achieve remote code execution. Could your server be #hacked the same way? Find out through our blog post! 👉 blog.theori.io/a-deep-dive-i…
1
8
1
29
3,338
reddit 보안 봇 retweeted
Theori
@theori_io30 Aug 2024
📑 실제 보안 컨설팅 중 발견한 원격 코드 실행(RCE) 0-Day 취약점 4건 공개! 🔗 blog.theori.io/a-deep-dive-i… Endpoint Protector(EPP) 솔루션 취약점의 발견 배경, 분석 과정, 이용 방법까지 확인해 보세요! #티오리 #Theori #컨설팅 #RCE #취약점분석 #CoSoSys #사이버보안 #보안 #0Day #EPP #CVE
17
49
3,664
dreamhack.io

해커들의 놀이터, Dreamhack

해킹과 보안에 대한 공부를 하고 싶은 학생, 안전한 코드를 작성하고 싶은 개발자, 보안 지식과 실력을 업그레이드 시키고 싶은 보안 전문가까지 함께 공부하고 연습하며 지식을 나누고 실력 향상을 할 수 있는 공간입니다.

dreamhack.io
1
[*]rebooting....
1
Evading Microsoft's AutoRuns blog.conscioushacker.io/inde…
2
2
JOLTandBLEED Vulnerability CVSS 10.0 erpscan.com/press-center/blo…
2
4
SQL Injection in bbPress blog.sucuri.net/2017/11/sql-…

SQL Injection in bbPress

bbPress users should update to WordPress 4.8.3 to avoid becoming victim of an SQL injection vulnerability discovered by Sucuri earlier this year.

blog.sucuri.net
11
16
using a custom libc reddit.com/r/securityCTF/com…

From the securityCTF community on Reddit

Explore this post and more from the securityCTF community

reddit.com
2
3
Staring into the Spotlight - An offensive tour of the OSX userland search system blog.doyensec.com/2017/11/15…
1
3
Github introduces automatic dependency security alerting github.com/blog/2470-introdu…
1
1
Remote Code Execution in Chrome OS ($100k Bounty) - Writeup bugs.chromium.org/p/chromium…
1
2
SpookFlare: Stay In Shadows artofpwn.com/spookflare.html?
1
CarolinaCon's CFP is now open! carolinacon.org/cfp.html
Dangers of the Decompiler, A Sampling of Anti-Decompilation Techniques blog.ret2.io/2017/11/16/dang…

Dangers of the Decompiler

Traditional (assembly level) reverse engineering of software is a tedious process that has been made far more accessible by modern day decompilers. Operating...

blog.ret2.io
10
14
A fed only browser isolation platform (beta). tucloud.com/safeweb_engine.h…
1
1
Bug bounty hunter walks away on 30k$ bounty from DJI (drone maker) digitalmunition.com/WhyIWalk…
9
12
Plus Accounts for Students! (ProtonMail) protonmail.uservoice.com/for…
1
Solving FlareOn 2017 - Challenge 3 with WinAppDbg (and three more hands-on WinAppDbg tutorials) parsiya.net/blog/2017-11-15-…
2
6
Australian InfoSec Analysts Hit With Restraining Orders bankinfosecurity.com/austral…

Australian InfoSec Analysts Hit With Restraining Orders

What started as robust debates over social media among computer security professionals has turned into a drawn-out, bitter battle that has found its way into

bankinfosecurity.com
Parsing Untrusted File Formats Safely github.com/google/puffs/

GitHub - google/wuffs: Wrangling Untrusted File Formats Safely

Wrangling Untrusted File Formats Safely. Contribute to google/wuffs development by creating an account on GitHub.

github.com
2
Load more