lightyear just got 6 times faster! Although I now work at @synacktiv.com, I proposed a PR for the tool to support threading and compression, greatly reducing the time required to dump a file. Dumping the demo /etc/passwd now takes 48s instead of 5m30. github.com/ambionics/li...

GitHub - ambionics/lightyear: lightyear is a tool to dump files in tedious (blind) conditions using PHP filters

lightyear is a tool to dump files in tedious (blind) conditions using PHP filters - ambionics/lightyear

github.com

#ten (and thus my exploits) is now compatible with python 3.13. Thanks @acervoise for the heads up.

This year again, I am lucky enough to get nominated twice for the Top Ten Hacking Techniques, for my research on iconv and PHP, and lightyear. This time feels a bit special however, as these are my last blog posts on ambionics. www.ambionics.io/blog/iconv-c... www.ambionics.io/blog/lightye...

Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 1)

A few months ago, I stumbled upon a 24 years old buffer overflow in the glibc, the base library for linux programs. Despite being reachable in multiple well-known libraries or executables, it proved r...

ambionics.io

James Kettle@jameskettle.com · 2y ago

Voting is now live for the Top Ten (New) Web Hacking Techniques of 2024! Browse the nominations & cast your votes here: portswigger.net/polls/top-10...