HNHacker News
TopNewBestAskShowJobs

pentestercrab

2,279 karma · joined August 11, 2015

submissionscomments

Quantum Radar

en.wikipedia.org·1 pts·pentestercrab·
0

Request smuggling between Amazon ALBs and Go net/HTTP

99designs.com.au·1 pts·pentestercrab·
1

SSH Man-in-the-Middle Attack and Public-Key Authentication Method (2010)

gremwell.com·1 pts·pentestercrab·
0

Write-up of DOMPurify 2.0.0 bypass using mutation XSS

research.securitum.com·2 pts·pentestercrab·
0

USB floppy drives use a USB protocol called Uniform Floppy Interface

twitter.com·3 pts·pentestercrab·
1

SVG Is Turing Complete

github.com·101 pts·pentestercrab·
37

Command and Control via TCP Handshake

thesw4rm.gitlab.io·1 pts·pentestercrab·
0

How two dead accounts allowed remote crash of any Instagram Android user

medium.com·108 pts·pentestercrab·
38

Teardown of a Failed Linux LTS Spectre Fix

grsecurity.net·171 pts·pentestercrab·
72

A secured Android phone is safer than an iOS device

twitter.com·27 pts·pentestercrab·
3

Linux Heap House of Force Exploitation

blog.infosectcbr.com.au·2 pts·pentestercrab·
0

Linux Heap Calloc Exploitation Part 2

blog.infosectcbr.com.au·1 pts·pentestercrab·
0

Chinese-Australian artist Badiucao reveals his identity

abc.net.au·1 pts·pentestercrab·
0

So I bought something at a thrift store, it's a “Cellebrite Touch”

twitter.com·236 pts·pentestercrab·
83

Look inside the box – breaking the encryption/obfuscation in the Dropbox client

github.com·2 pts·pentestercrab·
0

Huawei and Security Analysis

grsecurity.net·1 pts·pentestercrab·
0

Ruby on Rails CVE-2019-5418 – Payload to dump session signing keys in production

twitter.com·5 pts·pentestercrab·
0

CVE-2019–5418: on WAF bypass and caching

blog.pentesterlab.com·6 pts·pentestercrab·
0

A Go implementation of Poly1305 that makes sense

blog.filippo.io·195 pts·pentestercrab·
20

Modmob – Using cheap tools and tricks to attack mobile devices in practice [pdf]

synacktiv.com·1 pts·pentestercrab·
0

Bypass firewalls with ICMP error messages

synacktiv.com·2 pts·pentestercrab·
0

Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks

threatpost.com·3 pts·pentestercrab·
2

Vulnerability in golang.org/x/crypto/salsa20

groups.google.com·5 pts·pentestercrab·
2

SatoshiLabs Response to Ledger's MITBitcoinExpo Findings

blog.trezor.io·1 pts·pentestercrab·
0

Universal RCE with Ruby YAML.load

staaldraad.github.io·1 pts·pentestercrab·
0

PentesterLab – Introduction to Code Review

pentesterlab.com·2 pts·pentestercrab·
0

Matt Miller – Trends, challenge, and shifts in software vulnerability mitigation

youtube.com·2 pts·pentestercrab·
0

Privilege Escalation in Ubuntu Linux (dirty_sock Exploit)

initblog.com·3 pts·pentestercrab·
0

Downgrade Attack on TLS 1.3 and Vulnerabilities in Major TLS Libraries

nccgroup.trust·227 pts·pentestercrab·
67

Exploiting CVE-2018-19134 remote code exec through type confusion in Ghostscript

lgtm.com·1 pts·pentestercrab·
0
← PreviousPage 5 of 8Next →