CorSch retweeted
happy Monday! We've released our analysis and Detection Artifact Generator for Fortinet's CVE-2024-55591...
labs.watchtowr.com/get-forti…
CorSch retweeted
Google finally did it. Is it time to switch to Firefox? I believe users should be in control of what they can install and use on their desktop or laptop. There's uBlock Origin Lite, which replaces the original uBlock Origin for Chrome and similar browsers. Give it a try.
CorSch retweeted
Sieben Tracks, 140 Vorträge: Der CCC hat das Programm für den #38C3 fertiggestellt, vom 27. bis 30. Dezember im angestammten Congress Center Hamburg (CCH) heise.de/news/38C3-Programm-…
CorSch retweeted
in today's 'no way, is it real?' we found out that Palo Alto's PAN-OS CVE-2024-0012 and CVE-2024-9474 were the equivalents of saying 'turn off auth and give me a shell'.
Enjoy!
labs.watchtowr.com/pots-and-…
CorSch retweeted
🏟️Ludus 1.7.0 is out which brings 2 new features!
✨Notification support (slack, pushover, discord, etc)
✨global_role_vars - set them once, apply to all roles!
Details here: docs.ludus.cloud/docs/config…
Updating is easy: docs.ludus.cloud/docs/updati…
What do you want to see next?
CorSch retweeted
GOADv3 🏰 is almost ready !
You can now try the v3-beta version 🥳
📂 Repository : github.com/Orange-Cyberdefen…
📖 Documentation :
orange-cyberdefense.github.i…
What's new ? 🧵👇
CorSch retweeted
Hyped for the new version of GOAD with full support for 🏟️Ludus as a provider!
@M4yFly's new interactive builder handles all the setup of GOAD on Ludus for you, just feed it an API key.
Now you can go from fresh installed Debian 12 -> deployed GOAD with 3 commands! 💪
GOADv3 🏰 is almost ready !
You can now try the v3-beta version 🥳
📂 Repository : github.com/Orange-Cyberdefen…
📖 Documentation :
orange-cyberdefense.github.i…
What's new ? 🧵👇
CorSch retweeted
PSA: The #38C3 Call for Proposals is live.
You can enter proposals until 2024-10-26 04:06 CET
That’s ONE WEEK and THREE DAYS from now.
Get your act together ;)
cfp.cccv.de/38c3/cfp
Forget about Cups, now we have a real crises!
A serious vulnerability, dubbed #KartLANPwn (CVE-2024-45200), has been identified in the wildly popular Nintendo game Mario Kart 8 Deluxe, putting millions of players at risk of remote code execution (RCE) during multiplayer sessions. PoC Published
securityonline.info/kartlanp…
CorSch retweeted
Zwischen den Jahren zum #38C3 planen wir wieder eine riesige Spielwiese: hacken, löten, basteln, lehren, lernen, feiern und vernetzen, gemeinsam Utopien und Projekte ausdenken und Spaß am Gerät haben events.ccc.de/2024/09/26/38c…
CorSch retweeted
"I hope this email finds you well"
How the email found me:
ALT Moo Deng (a baby hippo, who is adorable), standing and shouting at the sky. Grrr
CorSch retweeted
I don't usually ask for help on X, but the situation I'm dealing with is seriously f*cked up... Details below ⤵️
CorSch retweeted
🔥💀 Here is the "Real" writeup and exploit for the
pre-auth deserialization RCE I reported to Ivanti
CVE-2024-29847
Apparently, folks at horizon3 tried to write about my bug before me but they did it wrong
summoning.team/blog/ivanti-e…
CorSch retweeted
⚠ Die Wettersituation in Österreich bleibt angespannt. Bitte verschiebt vermeidbare Zugreisen. Die ÖBB Reisewarnung bleibt bis Montagabend aufrecht. Schnee, Regen und Sturm sind Grund für Streckenunterbrechungen. In NÖ und OÖ stellen wir präventiv Verbindungen ein. 1/3
© Krammel
ALT eine Zugstrecke mit Schnee darauf
CorSch retweeted
#PingCastle 3.3 released !!!
pingcastle.com/download/
Active Directory & AzureAD security health check in seconds >200k AD audited, management readable, no install, no admin, no data sent "to a cloud"
Example of report: pingcastle.com/PingCastleFil… github: github.com/netwrix/pingcastl…
CorSch retweeted
On this day 21 years ago, @TheWeebl published the original Badger Badger Badger video.
CorSch retweeted
Veeam Backup & Replication 12.2 hat den lange erwarteten Proxmox Support
borncity.com/blog/2024/09/03…
Hallo @westfrankenbahn wird der RE87 nach Bad Mergentheim heute um 14:12 auf den verspäteten RE8 aus Würzburg warten?
CorSch retweeted
Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! blog.orange.tw/2024/08/confu…
Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996