HN Explorer

pentestercrab

↗ HN profile [ 87.0 ms ] full profile
Karma
0
Created
()
Submissions
0
  1. Nastystereo.com (nastystereo.com)
    1 points 0
  2. Ruby 4.0 Universal RCE Deserialization Gadget Chain (elttam.com)
    78 points 10
  3. The Sunlight CT Log (sunlight.dev)
    1 points 0
  4. Cruising for Shells in Flowise – 6 RCEs That Rode Flowise Low and Slow (elttam.com)
    1 points 0
  5. When Dawkins met Claude – Could this AI be conscious? (unherd.com)

    https://archive.ph/Rq5bw

    64 points 44
  6. Ruby Array Pack Bleed (nastystereo.com)
    62 points 1
  7. Ruby Array Pack Bleed – Impacts Ruby 1.6.7 to 4.0.0 (nastystereo.com)
    9 points 0
  8. Inline Style Exfiltration: leaking data with chained CSS conditionals (portswigger.net)
    1 points 0
  9. Marshal madness: A brief history of Ruby deserialization exploits (blog.trailofbits.com)
    25 points 2
  10. Breaking the Sorting Barrier for Directed Single-Source Shortest Paths (arxiv.org)
    99 points 3
  11. Escaping Ruby's Gem:SafeMarshal Sandbox (nastystereo.com)
    2 points 1
  12. RubyGem's Gem:SafeMarshal buffer overrun with length larger than fit into a byte (github.com)
    1 points 0
  13. CORS Vulnerabilities in Go: Vulnerable Patterns and Lessons (pentesterlab.com)
    1 points 0
  14. Shiny Vulnerabilities in R's Most Popular Web Framework (nastystereo.com)
    1 points 0
  15. PentesterLab: Web Hacking and Security Code Review 600 exercises and 700 videos (pentesterlab.com)
    1 points 0
  16. Cross-Site Post Requests Without a Content-Type Header – CSRF Attack (nastystereo.com)
    2 points 0
  17. Execute commands by sending JSON? Ruby deserialization vulnerabilities (github.blog)
    2 points 0
  18. JWT Libraries Block Algorithm Confusion: Key Lessons for Code Review (pentesterlab.com)
    3 points 0
  19. Chosen-Prefix Collisions on AES-Like Hashing (eprint.iacr.org)
    2 points 0
  20. Ruby 3.4 Universal RCE Deserialization Gadget Chain (nastystereo.com)
    2 points 1
  21. Ruby's String Slice is Broken (nastystereo.com)
    3 points 2
  22. SQL Injection Polyglot Payloads (nastystereo.com)
    1 points 0
  23. Insecurity Through Censorship: Vulnerabilities Caused by the Great Firewall (assetnote.io)
    2 points 1
  24. Insecurity Through Censorship: Vulnerabilities Caused by the Great Firewall (assetnote.io)
    4 points 0
  25. Fuzz Map – fuzzer for GUIs that automatically builds a visual map (fuzzmap.io)
    1 points 0